Extracting prog: 13m55.958971993s Minimizing prog: 2h27m46.459326079s Simplifying prog options: 5m24.3610914s Extracting C: 2m44.135263428s Simplifying C: 0s 21 programs, timeouts [15s 1m40s 6m0s] extracting reproducer from 21 programs single: executing 5 programs separately with timeout 15s testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp-connect$inet6-sendmmsg$inet6-bpf$PROG_LOAD-socket$nl_generic-ioctl$vim2m_VIDIOC_ENUM_FMT-openat$nci-bpf$MAP_UPDATE_ELEM_TAIL_CALL-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_COALESCE_GET-write$nci-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_FRAME detailed listing: executing program 0: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="8000400f43b368d7", 0x8}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fffffff200000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000200)={0x10, 0x2, 0x0, "11010100001400000100b64c0000005c4b7c1500"}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x34}}, 0x0) write$nci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="4106010805"], 0x5) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-bind$alg-accept4-setsockopt$ALG_SET_KEY-read$alg-recvmmsg-ioctl$ifreq_SIOCGIFINDEX_team-prctl$PR_SCHED_CORE-prlimit64-sched_setaffinity-syz_open_dev$MSR-read$msr-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r1, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettaction={0x18, 0x32, 0x3eab872e11d6101, 0x70bd27, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_open_procfs$namespace-bpf$MAP_CREATE-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$MAP_CREATE_CONST_STR-bpf$BPF_MAP_CONST_STR_FREEZE-bpf$MAP_UPDATE_ELEM_TAIL_CALL-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-bpf$PROG_LOAD-ioctl$SNDRV_TIMER_IOCTL_SELECT-sched_setaffinity-syz_open_dev$MSR-read$msr-prctl$PR_SCHED_CORE-socket$inet6-setsockopt$inet6_mtu-sendto$inet6-socket$rds-socket$inet_dccp-syz_open_procfs-seccomp$SECCOMP_SET_MODE_FILTER_LISTENER-symlinkat-write$RDMA_USER_CM_CMD_CREATE_ID-socket$inet-setsockopt$EBT_SO_SET_ENTRIES-socketpair$nbd-getsockopt$sock_buf-setns-fcntl$setsig-syz_init_net_socket$nl_generic detailed listing: executing program 0: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000500)='ns/time\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x31e4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x19, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000086c7c05389b83fcfdf9a3c2ad8c902b000000003dfc0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="c05f000000a5bdd63a94"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) socket$rds(0x15, 0x5, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) symlinkat(0x0, 0xffffffffffffff9c, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) r9 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r10, 0x1, 0x3b, 0x0, &(0x7f0000000000)) setns(r0, 0x0) fcntl$setsig(r0, 0xa, 0x3e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) program did not crash testing program (duration=15s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): syz_usb_connect$hid-mknod-open-open-mkdirat-renameat2-renameat2-syz_usb_control_io$hid-openat$tun-ioctl$TUNSETIFF-openat$tun-close-socket$nl_netfilter-ioctl$SIOCSIFHWADDR-syz_emit_ethernet-write$cgroup_subtree-ioctl$sock_inet_tcp_SIOCINQ-socket$inet_udplite-setsockopt$inet_group_source_req-setsockopt$inet_MCAST_MSFILTER-bpf$MAP_CREATE-bpf$PROG_LOAD-bpf$BPF_RAW_TRACEPOINT_OPEN-syz_usb_control_io detailed listing: executing program 0: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r2, &(0x7f0000000300)='./file0\x00', r1, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0xe, &(0x7f0000000180)={@link_local, @remote, @void, {@generic={0x88a2}}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0x240) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000004c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x3, 0x8}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000019000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="00000700000007007d590abe159d2a4ac37eaf085f009c16d900"], 0x0, 0x0, 0x0, 0x0}, 0x0) program did not crash single: failed to extract reproducer bisect: bisecting 21 programs with base timeout 15s testing program (duration=20s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): [26, 28, 29, 29, 29, 16, 24, 2, 28, 28, 29, 2, 15, 27, 30, 30, 21, 3, 13, 22, 15] detailed listing: executing program 3: r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0xa2840, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x1) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r4, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) recvmmsg(r4, &(0x7f0000003e40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000035c0)=""/241, 0xf1}}, {{&(0x7f0000000540)=@un=@abs, 0x80, &(0x7f0000003780)=[{&(0x7f0000003740)=""/4, 0x4}], 0x1, &(0x7f00000037c0)=""/236, 0xec}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003c00)=""/65, 0x41}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000003e00)=""/48, 0x30}}], 0x4, 0x0, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(r0, 0x3b85, &(0x7f0000000140)={0x28, 0x0, 0x0, 0x0, &(0x7f0000ffd000/0x3000)=nil, 0x3000}) ioctl$IOMMU_IOAS_MAP(r0, 0x3b85, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) mlock2(&(0x7f0000522000/0x1000)=nil, 0x1000, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(r0, 0x3ba0, &(0x7f0000000280)={0x48}) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000007940)={0x0, 0x0, &(0x7f0000007900)={&(0x7f0000000040)=@newtaction={0x14, 0x30, 0x216822a75a8bdd29}, 0x14}}, 0x0) executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000bc0)={0x0, 0x0, 0xfffffff3}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000200)={0x0, 0x8, 0x0, "b904d552ac30c2bd00ea4a12178f22d916094e01a507bbf068d54f70689ff0eb"}) memfd_create(&(0x7f00000024c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xb2\xae\xda\xa9\xf6\x92\xaf4\xb5|W\r0{\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\x9d\xce\xb3%QF\x03\b\x9dh\xfd\x91\xea\xce\x06\a\xba`\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5I\xd7\xd3#\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\x98\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5po,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x13\xa4\xad\xd8\xf9\xd2\x95\xa8\x81\xbe\xbc\xa6\x14_o\xfb\xdaL\xcb\xda\x9a\xec\xce\xd18&\xfbG\xa1\f\xf4\xd5u\xb0xE)j\x1b\xecL\xa1\xdc\xabUiN\xdet\xc7Q\xe6\xa4\x99-\xba\x16\xe5\xba!\xbdCI#\x03', 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x5, &(0x7f0000000040)={0x2f, "168a39c59ec52b5d1e00"}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x1, 0x3ff, 0xfffb, 0x4}}}, 0xa) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f0000000000)={0x1, 0x2, 0x1, 0xffffffff}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x3) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0xf, &(0x7f0000000240)=@framed={{0x62, 0x0, 0x0, 0x0, 0x0, 0x7b, 0xa, 0xff00}, [@call={0x1d, 0xa}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe8f}}, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @generic]}, &(0x7f0000000140)='GPL\x00', 0xa, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) memfd_create(0x0, 0x0) executing program 4: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x20, 0x20}) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000080)) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r7, 0x0) ftruncate(r7, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r8, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000003e00)=0x4) write$dsp(r5, &(0x7f00000012c0)="a5", 0x1) executing program 1: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x20, 0x20}) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) r5 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r5, 0xc0045002, &(0x7f0000000080)) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) ftruncate(r6, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r7, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000003e00)=0x4) write$dsp(0xffffffffffffffff, &(0x7f00000012c0)="a5", 0x1) executing program 2: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x20, 0x20}) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) r6 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000080)) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r7, 0x0) ftruncate(r7, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r8, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000003e00)=0x4) write$dsp(r5, &(0x7f00000012c0)="a5", 0x1) executing program 4: r0 = socket$inet(0x2, 0x4000000805, 0x0) connect$inet(r0, &(0x7f00000002c0)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) syz_usb_connect(0x2, 0x0, 0x0, 0x0) syz_emit_vhci(0x0, 0x9a) mkdirat(0xffffffffffffff9c, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r1, &(0x7f0000000400)=[{&(0x7f0000001a80)=""/102400, 0x19000}], 0x1, 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x8) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x15) executing program 1: r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x0, 0x0) r1 = open(&(0x7f0000000000)='.\x00', 0x0, 0x0) r2 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mkdirat(r2, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) renameat2(r2, &(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', r1, &(0x7f0000000180)='./file1\x00', 0x4) renameat2(r2, &(0x7f0000000300)='./file0\x00', r1, &(0x7f0000000380)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x2) syz_usb_control_io$hid(r0, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_emit_ethernet(0xe, &(0x7f0000000180)={@link_local, @remote, @void, {@generic={0x88a2}}}, 0x0) write$cgroup_subtree(r3, &(0x7f0000000180)=ANY=[], 0x240) ioctl$sock_inet_tcp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_group_source_req(r5, 0x0, 0x2e, &(0x7f0000000080)={0x9, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f00000004c0)={0x6, {{0x2, 0x0, @multicast2}}}, 0x90) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x3, 0x8}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000019000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) syz_usb_control_io(r0, &(0x7f0000000040)={0x2c, &(0x7f0000000340)=ANY=[@ANYBLOB="00000700000007007d590abe159d2a4ac37eaf085f009c16d900"], 0x0, 0x0, 0x0, 0x0}, 0x0) executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000017c0)=@allocspi={0x2e0, 0x16, 0x1, 0x0, 0x0, {{{@in=@local, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2, 0x90, 0xa0, 0xa9}, {@in=@private=0xa010100, 0x4d4, 0x32}, @in6=@mcast1, {0xd, 0xff4, 0x0, 0x632, 0xab2, 0x8, 0x0, 0x5}, {0x5, 0x5, 0x9}, {0x1, 0x1, 0x5}, 0x70bd29, 0x3506, 0x8, 0x1, 0x1, 0x81}, 0x1, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @extra_flags={0x8, 0x18, 0x1}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd2b, 0x70bd26, 0x70bd2b, 0x70bd27, 0x6, [0x799, 0x3, 0xfffffffa, 0x1, 0x74, 0x5, 0x2, 0x2c00, 0x8]}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2c, 0x2}}, @algo_auth_trunc={0xb5, 0x14, {{'streebog256-generic\x00'}, 0x348, 0x60, "96b21b19be7c94e0df049cf9bb0424282e0ace0a7aab257a2c1f5aff1a878d29948dddd41692389356ea3cb8887bdf30a21c3f5d5567fe5e791ade35c263676342ba4256ee3d2228961182b70a817ed0678d3083ddd6a65ea53fadfcd730fe67788ee7097ac909be1b"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e24, @in6=@ipv4={'\x00', '\xff\xff', @empty}}}, @policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2, 0x4e20, 0x157e, 0x4e20, 0x7, 0xa, 0x20, 0x20, 0x4a}, {0x35, 0xffffffffffffffff, 0x7, 0x9, 0x3, 0x100000001, 0x2, 0x8000000000000000}, {0x9e, 0xe3, 0x0, 0xf}, 0x1, 0x6e6bb2, 0x0, 0x0, 0x7, 0x1}}]}, 0x2e0}}, 0x0) executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000bc0)={0x0, 0x0, 0xfffffff3}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000200)={0x0, 0x8, 0x0, "b904d552ac30c2bd00ea4a12178f22d916094e01a507bbf068d54f70689ff0eb"}) memfd_create(&(0x7f00000024c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xb2\xae\xda\xa9\xf6\x92\xaf4\xb5|W\r0{\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\x9d\xce\xb3%QF\x03\b\x9dh\xfd\x91\xea\xce\x06\a\xba`\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5I\xd7\xd3#\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\x98\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5po,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x13\xa4\xad\xd8\xf9\xd2\x95\xa8\x81\xbe\xbc\xa6\x14_o\xfb\xdaL\xcb\xda\x9a\xec\xce\xd18&\xfbG\xa1\f\xf4\xd5u\xb0xE)j\x1b\xecL\xa1\xdc\xabUiN\xdet\xc7Q\xe6\xa4\x99-\xba\x16\xe5\xba!\xbdCI#\x03', 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x5, &(0x7f0000000040)={0x2f, "168a39c59ec52b5d1e00"}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x1, 0x3ff, 0xfffb, 0x4}}}, 0xa) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r6 = syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$DRM_IOCTL_SET_VERSION(r6, 0xc0106407, &(0x7f0000000000)={0x1, 0x2, 0x1, 0xffffffff}) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0xf, &(0x7f0000000240)=@framed={{0x62, 0x0, 0x0, 0x0, 0x0, 0x7b, 0xa, 0xff00}, [@call={0x1d, 0xa}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe8f}}, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @generic]}, &(0x7f0000000140)='GPL\x00', 0xa, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) memfd_create(0x0, 0x0) executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000bc0)={0x0, 0x0, 0xfffffff3}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000200)={0x0, 0x8, 0x0, "b904d552ac30c2bd00ea4a12178f22d916094e01a507bbf068d54f70689ff0eb"}) memfd_create(&(0x7f00000024c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xb2\xae\xda\xa9\xf6\x92\xaf4\xb5|W\r0{\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\x9d\xce\xb3%QF\x03\b\x9dh\xfd\x91\xea\xce\x06\a\xba`\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5I\xd7\xd3#\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\x98\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5po,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x13\xa4\xad\xd8\xf9\xd2\x95\xa8\x81\xbe\xbc\xa6\x14_o\xfb\xdaL\xcb\xda\x9a\xec\xce\xd18&\xfbG\xa1\f\xf4\xd5u\xb0xE)j\x1b\xecL\xa1\xdc\xabUiN\xdet\xc7Q\xe6\xa4\x99-\xba\x16\xe5\xba!\xbdCI#\x03', 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x5, &(0x7f0000000040)={0x2f, "168a39c59ec52b5d1e00"}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x1, 0x3ff, 0xfffb, 0x4}}}, 0xa) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0xf, &(0x7f0000000240)=@framed={{0x62, 0x0, 0x0, 0x0, 0x0, 0x7b, 0xa, 0xff00}, [@call={0x1d, 0xa}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe8f}}, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @generic]}, &(0x7f0000000140)='GPL\x00', 0xa, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) memfd_create(0x0, 0x0) executing program 0: openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x41, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x10001) r0 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) preadv(r0, &(0x7f0000000240)=[{&(0x7f0000033a80)=""/102386, 0xfffffd6e}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) openat$uhid(0xffffffffffffff9c, &(0x7f0000000340), 0x802, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000000), 0x1, 0x0) ioctl$DRM_IOCTL_MODE_ADDFB(r1, 0xc01c64ae, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x20, 0x20}) r2 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000040)=0x0) syz_io_uring_submit(r3, r4, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r2, 0x7a98, 0x0, 0x0, 0x0, 0x0) r5 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$evdev(&(0x7f00000000c0), 0x3, 0x0) ioctl$EVIOCGPROP(0xffffffffffffffff, 0x80404509, 0x0) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, &(0x7f0000000080)) mkdir(&(0x7f0000000300)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000400), 0x0, 0x0) chdir(&(0x7f0000000140)='./file0\x00') r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r6, 0x0) ftruncate(r6, 0xc17a) mbind(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x2, &(0x7f0000000000)=0x9, 0x8, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x15) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001300)={0xffffffffffffffff}) getsockopt$TIPC_NODE_RECVQ_DEPTH(r7, 0x10f, 0x83, &(0x7f0000000040), &(0x7f0000003e00)=0x4) write$dsp(r5, &(0x7f00000012c0)="a5", 0x1) executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000017c0)=@allocspi={0x2e0, 0x16, 0x1, 0x0, 0x0, {{{@in=@local, @in=@multicast2}, {@in=@private, 0x0, 0x32}, @in6=@mcast1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, {0x5, 0x5, 0x9}, {0x1, 0x1, 0x5}, 0x70bd29, 0x3506, 0x8, 0x1, 0x1, 0x81}, 0x1, 0x3}, [@XFRMA_IF_ID={0x8, 0x1f, 0x3}, @extra_flags={0x8, 0x18, 0x1}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd2b, 0x70bd26, 0x70bd2b, 0x70bd27, 0x6, [0x799, 0x3, 0xfffffffa, 0x1, 0x74, 0x5, 0x2, 0x2c00, 0x8]}}, @replay_val={0x10, 0xa, {0x70bd2d, 0x70bd2c, 0x2}}, @algo_auth_trunc={0xb5, 0x14, {{'streebog256-generic\x00'}, 0x348, 0x60, "96b21b19be7c94e0df049cf9bb0424282e0ace0a7aab257a2c1f5aff1a878d29948dddd41692389356ea3cb8887bdf30a21c3f5d5567fe5e791ade35c263676342ba4256ee3d2228961182b70a817ed0678d3083ddd6a65ea53fadfcd730fe67788ee7097ac909be1b"}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x7}, @encap={0x1c, 0x4, {0x1, 0x4e22, 0x4e24, @in6=@ipv4={'\x00', '\xff\xff', @empty}}}, @policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@multicast2, 0x4e20, 0x157e, 0x4e20, 0x7, 0xa, 0x20, 0x20, 0x4a}, {0x35, 0xffffffffffffffff, 0x7, 0x9, 0x3, 0x100000001, 0x2, 0x8000000000000000}, {0x9e, 0xe3, 0x0, 0xf}, 0x1, 0x6e6bb2, 0x0, 0x0, 0x7, 0x1}}]}, 0x2e0}}, 0x0) executing program 0: prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x10, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x0, 0x0, @loopback}], 0x2c) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto$inet6(r4, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) syz_usb_connect$hid(0x0, 0x36, &(0x7f00000009c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581"], 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(r1, 0x404c534a, &(0x7f0000000bc0)={0x0, 0x0, 0xfffffff3}) r2 = openat$vimc2(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000200)={0x0, 0x8, 0x0, "b904d552ac30c2bd00ea4a12178f22d916094e01a507bbf068d54f70689ff0eb"}) memfd_create(&(0x7f00000024c0)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x00\x00\x00\x17?&^\xe1Ob\xe1Y\xd6\xeb\x91\x83;\xeb\xf1\xd0\xe3\xe5\x19T\xff\x01\x00\x00\xe2\x9f\xd9\xae\xcf>/\x05V%$6\x9fU\x86\xbe\xcbx\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xa2c\x12.\xb7\xbe`\'\xcb\xb6\xaf\xb2\xae\xda\xa9\xf6\x92\xaf4\xb5|W\r0{\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x06\xb5\xaa\xe6\x05\xe4\xc3\x90\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4\x84$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\x97.A\x84\x1d\xc2\x86\x89{\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\x9d\xce\xb3%QF\x03\b\x9dh\xfd\x91\xea\xce\x06\a\xba`\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8\x83\x87+nM\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?\x87\x84\\/y\xed\x01#?\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\xa3\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x10M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xdc\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5W\xfb\x82\xac\x19,\\D\x91T\xfd\x9c\xb8\x8b\x88\xa5\xcc\x8fI\x00\xf0\xc9%\n\xa7\xd6\x0f:\xb0\xf5?\xc3\x88\x1e\xbb-\xa6\xecA\x92\xaf\xa4Xl\v\xa5\xca\v|\xe2L\xac\x80\xc7\x15\x96fh\x83\x15\xc7\xea\xd5\xe8\x89W\x11\xd7oC\xe4\x06\xa8[O\xe6\x1d=\x87\x93\x0f\x87I\xdf\xb1\xeb\x89\x11.\x01\x00\r`\x1e8\x94\xb7\xbc\xc3\xad\xf1\x92/(A=A\x8b\xa5I\xd7\xd3#\xb0\x89\x9e5\x12\xa4\x9a\va\xdf\xf4\xea\xc6\xc7\x10g\x1d\xd5\xb0\xbb\xd2\xfc]fC\x8d\x0f\xa6q\x0f\xef\x90\xfe\x94k\xf1\x98\xfa\xbbb\xb1\x00\x99\xf7\xfd\'\xae\x906\xe0\xaa\xdbtWWH\xa4L\xb5po,\xdfN\x0f8\t\xe7X_H\xd4\xe3\xb2,oj\xac\xd7\xbd\xd0\xadW\x1f<\xd0s\xa8\x1f(\x00/ \xe4]@\xf7mA\xe8\xd1\xf4:\xb3\xeb\x81\xb9\x018\x1c\x95%o\x13\xa4\xad\xd8\xf9\xd2\x95\xa8\x81\xbe\xbc\xa6\x14_o\xfb\xdaL\xcb\xda\x9a\xec\xce\xd18&\xfbG\xa1\f\xf4\xd5u\xb0xE)j\x1b\xecL\xa1\xdc\xabUiN\xdet\xc7Q\xe6\xa4\x99-\xba\x16\xe5\xba!\xbdCI#\x03', 0x0) r3 = syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f0000000080)={0x0, 0x0, 0x5, &(0x7f0000000040)={0x2f, "168a39c59ec52b5d1e00"}}) r4 = openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/transactions\x00', 0x0, 0x0) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) syz_emit_vhci(&(0x7f0000000180)=@HCI_EVENT_PKT={0x4, @hci_ev_si_security={{0x2, 0x7}, {0x1, 0x3ff, 0xfffb, 0x4}}}, 0xa) syz_open_dev$dri(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_HW_REFINE(0xffffffffffffffff, 0xc2604110, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0xf, &(0x7f0000000240)=@framed={{0x62, 0x0, 0x0, 0x0, 0x0, 0x7b, 0xa, 0xff00}, [@call={0x1d, 0xa}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe8f}}, @map_fd={0x18, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x10, 0x0, 0x0, 0x25000000}, @generic]}, &(0x7f0000000140)='GPL\x00', 0xa, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r4, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) memfd_create(0x0, 0x0) executing program 4: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000500)='ns/time\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x31e4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x19, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000086c7c05389b83fcfdf9a3c2ad8c902b000000003dfc0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="c05f000000a5bdd63a94"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES64=r3, @ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) socket$rds(0x15, 0x5, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) symlinkat(0x0, 0xffffffffffffff9c, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) r9 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000002000000000000feffffff0100000019000000000000000000726f7365300000000000000000000000726f736530000000cc000000000000007465616d5f736c6176655f310000000064756d6d7930000000000000000000000180c2000000000000000000ffffffffffff0000000000000000d00000000801000038010000706b74747970650000000000000000000000000000000000000000000000000008000000000000000000000000000000706b747479706500000000000000000000000000000000000000000000000000080000000000000000000000000000006d61726b0000000000000000000000000000000000000000000000000000000010000000000000000000000000000000ddffffff00000000726564697265637400000000396c27db39b2eedb0000000000000000000000000800000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000ffffffff01000000030000000000000080357665746831000000000000000000000074756e6c30000000000000000000000074756e6c300000000005000000000000006c616e300000000000000000000000aaaaaaaaaabb000000000000aaaaaaaaaa0000000000000000000001000000010000380100006367726f757000000000000000000000000000000000000000000000000000000800000000000000000000000000000061727000000000000000000000000000000000000000000000000000000000003800000000000000000000000000000000000000000000007f0000010000000072ce35f34121000000000000000000000000000000000000eaffffff00000000646e6174000000000000000000000000000000000000000000000000000000001000000000000000aaaaaaaaaabb0000fdffffff00000000"]}, 0x3a8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r10, 0x1, 0x3b, 0x0, &(0x7f0000000000)) setns(r0, 0x0) fcntl$setsig(r0, 0xa, 0x3e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) executing program 2: r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000500)='ns/time\x00') r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x7, 0x8000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r1, 0xffffffffffffffff}, &(0x7f00000002c0), &(0x7f0000000280)}, 0x20) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, r1, 0x31e4}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r3}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000007c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x20, 0x19, &(0x7f00000008c0)=ANY=[@ANYBLOB="18000000086c7c05389b83fcfdf9a3c2ad8c902b000000003dfc0000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="c05f000000a5bdd63a94"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000510700140000000000000001b7080000000000007b8af8ff00000000b7080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESHEX=r5], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_mtu(r7, 0x29, 0x17, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r7, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4621, 0x0, @local}, 0x1c) socket$rds(0x15, 0x5, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000440)='loginuid\x00') seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x1, &(0x7f0000000040)=[{0x6}]}) symlinkat(0x0, 0xffffffffffffff9c, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r8, 0x0, 0x0) r9 = socket$inet(0x2, 0x80003, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r9, 0x0, 0x80, &(0x7f0000000140)=@broute={'broute\x00', 0x20, 0x2, 0x330, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000580], 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="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"]}, 0x3a8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r10, 0x1, 0x3b, 0x0, &(0x7f0000000000)) setns(r0, 0x0) fcntl$setsig(r0, 0xa, 0x3e) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) executing program 3: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000140), 0x1003, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x6, r0}, 0x38) executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r1, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettaction={0x18, 0x32, 0x3eab872e11d6101, 0x70bd27, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) executing program 4: r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000000)=@req3={0x80000000}, 0x1c) r1 = socket(0x28, 0x5, 0x0) r2 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) listen(r2, 0x0) connect$vsock_stream(r1, &(0x7f0000000080), 0x10) sendmmsg(r1, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x0) r3 = accept4$unix(r2, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r4, 0x0) recvfrom$unix(r3, &(0x7f0000000700)=""/257, 0x101, 0x0, 0x0, 0x0) unshare(0x20000400) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r5, 0x104, 0x3, &(0x7f0000000000), 0x4) r6 = socket(0x1e, 0x805, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000a50000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0xf, 0x0, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$tipc(r6, &(0x7f0000000640)={&(0x7f0000000300)=@nameseq={0x1e, 0x1, 0x1, {0x40, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x240400c0}, 0x4c884) syz_usb_connect(0x0, 0x4a, &(0x7f0000000980)=ANY=[@ANYBLOB="120100003217a6409904581095310000000109023800010000000009040000013d78bf00053306000105240000000d240f0104000000000000000006241a000000090502"], 0x0) executing program 4: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="8000400f43b368d7", 0x8}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fffffff200000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000200)={0x10, 0x2, 0x0, "11010100001400000100b64c0000005c4b7c1500"}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x34}}, 0x0) write$nci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="4106010805"], 0x5) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) program did not crash replaying the whole log did not cause a kernel crash single: executing 5 programs separately with timeout 1m40s testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$inet6_icmp-connect$inet6-sendmmsg$inet6-bpf$PROG_LOAD-socket$nl_generic-ioctl$vim2m_VIDIOC_ENUM_FMT-openat$nci-bpf$MAP_UPDATE_ELEM_TAIL_CALL-syz_genetlink_get_family_id$ethtool-ioctl$ifreq_SIOCGIFINDEX_wireguard-sendmsg$ETHTOOL_MSG_COALESCE_GET-write$nci-syz_genetlink_get_family_id$nl80211-ioctl$sock_SIOCGIFINDEX_80211-sendmsg$NL80211_CMD_FRAME detailed listing: executing program 0: r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="8000400f43b368d7", 0x8}], 0x1}}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000fffffff200000000000000008500000041000000850000000e00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000200)={0x10, 0x2, 0x0, "11010100001400000100b64c0000005c4b7c1500"}) r2 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000600)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x34, r3, 0x1, 0x0, 0x0, {0x1c}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}]}, 0x34}}, 0x0) write$nci(r2, &(0x7f0000000580)=ANY=[@ANYBLOB="4106010805"], 0x5) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket$alg-bind$alg-accept4-setsockopt$ALG_SET_KEY-read$alg-recvmmsg-ioctl$ifreq_SIOCGIFINDEX_team-prctl$PR_SCHED_CORE-prlimit64-sched_setaffinity-syz_open_dev$MSR-read$msr-sendmsg$nl_route_sched detailed listing: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r1, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r1, 0x0, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@gettaction={0x18, 0x32, 0x3eab872e11d6101, 0x70bd27, 0x25dfdbfd, {}, [@action_gd=@TCA_ACT_TAB={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) program did not crash testing program (duration=1m40s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program crashed: INFO: rcu detected stall in ieee80211_handle_queued_frames single: successfully extracted reproducer found reproducer with 21 syscalls minimizing guilty program testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(0xffffffffffffffff, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r5, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r5, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r5, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, 0x0, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r5, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) socket$nl_audit(0x10, 0x3, 0x9) gettid() r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r5, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r5, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) socket$inet_sctp(0x2, 0x1, 0x84) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r1, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r2, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r3 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r4, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r1, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r5, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(0xffffffffffffffff, 0x84, 0x13, &(0x7f0000000040)={r1, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(0xffffffffffffffff, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r5, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f0000000100)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, 0x0, &(0x7f0000000040)) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040), &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={0x0, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r2 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r2, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r3, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r5, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, 0x0) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, 0x0, &(0x7f00000000c0)) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, 0x0) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, 0x0, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, 0x0}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0x1000}, {0x0}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {0x0}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {0x0}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {0x0}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {0x0}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{0x0}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, 0x0, 0x0, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r5, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, 0x0}, 0x0) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r5, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r4 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r4, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r5, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, 0x0, 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x0, 0x0, &(0x7f0000000480)='GPL\x00'}, 0x90) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, 0x0}, 0x90) listen(r6, 0x0) program did not crash extracting C reproducer testing compiled C program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen program did not crash simplifying guilty program options testing program (duration=2m30s, {Threaded:false Repeat:true RepeatTimes:0 Procs:5 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash testing program (duration=2m30s, {Threaded:true Repeat:true RepeatTimes:0 Procs:1 Slowdown:1 Sandbox:none SandboxArg:0 Leak:false NetInjection:true NetDevices:true NetReset:true Cgroups:true BinfmtMisc:true CloseFDs:true KCSAN:false DevlinkPCI:false NicVF:false USB:true VhciInjection:true Wifi:true IEEE802154:true Sysctl:true Swap:true UseTmpDir:true HandleSegv:true Trace:false LegacyOptions:{Collide:false Fault:false FaultCall:0 FaultNth:0}}): socket-write-getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3-socket$inet_sctp-getsockopt$inet_sctp_SCTP_MAX_BURST-dup2-getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF-getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT-recvmsg$unix-socket$nl_audit-recvmmsg-gettid-syz_genetlink_get_family_id$batadv-sendmsg$BATADV_CMD_GET_NEIGHBORS-syz_usb_connect-syz_usb_control_io-openat$loop_ctrl-socket$inet6_tcp-bind$inet6-bpf$BPF_PROG_RAW_TRACEPOINT_LOAD-listen detailed listing: executing program 0: r0 = socket(0x10, 0x80003, 0x0) write(r0, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008000f00fd000000", 0x85) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000200)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) dup2(0xffffffffffffffff, 0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000040)={r2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000040)={r2, 0xfffffff3}, &(0x7f00000000c0)=0x8) recvmsg$unix(r0, &(0x7f0000003580)={0x0, 0x0, &(0x7f0000003500)=[{&(0x7f00000011c0)=""/22, 0x16}, {&(0x7f00000035c0)=""/4098, 0x1002}, {&(0x7f0000002300)=""/107, 0x6b}, {&(0x7f0000002380)=""/145, 0x91}, {&(0x7f0000002440)=""/4096, 0xffffffc9}, {&(0x7f0000003440)=""/1, 0x1}], 0x6}, 0x0) r3 = socket$nl_audit(0x10, 0x3, 0x9) recvmmsg(r3, &(0x7f00000021c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) gettid() r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(0xffffffffffffffff, &(0x7f0000004340)={0x0, 0x54, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r4, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r5 = syz_usb_connect(0x2, 0x2d, &(0x7f0000000940)=ANY=[@ANYBLOB="1201000041436120410e515001d6000000010902f98a5c01000000090401001186eee20009058217048a"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) openat$loop_ctrl(0xffffffffffffff9c, 0x0, 0x0, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22, 0xfffffffe}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x91}}, &(0x7f0000000480)='GPL\x00'}, 0x80) listen(r6, 0x0) program did not crash reproducing took 2h49m50.914710445s repro crashed as (corrupted=false): rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 3872 jiffies s: 3369 root: 0x1/. rcu: blocking rcu_node structures (internal RCU debug): Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 5298 Comm: kworker/0:3 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Workqueue: usb_hub_wq hub_event RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 kernel/kcov.c:200 Code: 89 fb e8 23 00 00 00 48 8b 3d bc 7c 74 0c 48 89 de 5b e9 43 61 58 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 00 d7 03 00 65 8b 15 a0 60 RSP: 0018:ffffc90000005af0 EFLAGS: 00000002 RAX: 0000000000010302 RBX: ffffc90000005b68 RCX: ffffffff91523000 RDX: ffff88802a1f1e00 RSI: 0000000000000001 RDI: 0000000000000000 RBP: 0000000000000001 R08: ffffffff814115f8 R09: ffffffff814130bf R10: 0000000000000003 R11: ffff88802a1f1e00 R12: ffff88802a1f1e00 R13: ffffffff817f1c90 R14: dffffc0000000000 R15: 1ffff92000000b6d FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f729d8d2000 CR3: 000000000e534000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: unwind_get_return_address+0x71/0xc0 arch/x86/kernel/unwind_orc.c:369 arch_stack_walk+0x125/0x1b0 arch/x86/kernel/stacktrace.c:26 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:370 [inline] __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:387 kasan_kmalloc include/linux/kasan.h:211 [inline] __kmalloc_cache_noprof+0x19c/0x2c0 mm/slub.c:4189 kmalloc_noprof include/linux/slab.h:681 [inline] dummy_urb_enqueue+0x7d/0x760 drivers/usb/gadget/udc/dummy_hcd.c:1271 usb_hcd_submit_urb+0x36c/0x1e80 drivers/usb/core/hcd.c:1533 __usb_hcd_giveback_urb+0x42c/0x6e0 drivers/usb/core/hcd.c:1650 dummy_timer+0x830/0x45a0 drivers/usb/gadget/udc/dummy_hcd.c:1987 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x59b/0xd50 kernel/time/hrtimer.c:1753 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1815 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:_ieee802_11_parse_elems_full+0xbda/0x4a40 net/mac80211/parse.c:346 Code: 24 a0 03 00 00 4c 89 ee 48 8b 54 24 40 e8 9e 7d 84 f9 89 c3 43 0f b6 04 3e 84 c0 0f 85 20 33 00 00 89 9c 24 a0 03 00 00 eb 16 f1 fc 67 f6 eb 15 e8 ea fc 67 f6 49 bf 00 00 00 00 00 fc ff df RSP: 0018:ffffc90000006880 EFLAGS: 00000246 RAX: 0000000000000301 RBX: 0000000000000000 RCX: ffff88802a1f1e00 RDX: ffff88802a1f1e00 RSI: 0000000000000003 RDI: 0000000000000040 RBP: ffffc90000006c90 R08: ffffffff8b2b78b7 R09: 1ffff92000000d7c R10: dffffc0000000000 R11: fffff52000000d7d R12: ffff888056ebf32f R13: ffff888056ebf32f R14: 0000000000000003 R15: dffffc0000000000 ieee802_11_parse_elems_full+0xdff/0x2880 net/mac80211/parse.c:984 ieee802_11_parse_elems_crc net/mac80211/ieee80211_i.h:2361 [inline] ieee802_11_parse_elems net/mac80211/ieee80211_i.h:2368 [inline] ieee80211_inform_bss+0x15f/0x1080 net/mac80211/scan.c:79 rdev_inform_bss net/wireless/rdev-ops.h:418 [inline] cfg80211_inform_single_bss_data+0xe93/0x2030 net/wireless/scan.c:2335 cfg80211_inform_bss_data+0x3dd/0x5a70 net/wireless/scan.c:3159 cfg80211_inform_bss_frame_data+0x3b8/0x720 net/wireless/scan.c:3254 ieee80211_bss_info_update+0x8a7/0xbc0 net/mac80211/scan.c:226 ieee80211_scan_rx+0x526/0x9c0 net/mac80211/scan.c:340 __ieee80211_rx_handle_packet net/mac80211/rx.c:5225 [inline] ieee80211_rx_list+0x2b02/0x3780 net/mac80211/rx.c:5462 ieee80211_rx_napi+0x18a/0x3c0 net/mac80211/rx.c:5485 ieee80211_rx include/net/mac80211.h:5124 [inline] ieee80211_handle_queued_frames+0xe7/0x1e0 net/mac80211/main.c:439 tasklet_action_common+0x321/0x4d0 kernel/softirq.c:785 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:check_kcov_mode kernel/kcov.c:175 [inline] RIP: 0010:write_comp_data kernel/kcov.c:236 [inline] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x2f/0x90 kernel/kcov.c:311 Code: 8b 04 24 65 48 8b 0c 25 00 d7 03 00 65 8b 05 c0 5b 70 7e a9 00 01 ff 00 74 10 a9 00 01 00 00 74 57 83 b9 1c 16 00 00 00 74 4e <8b> 81 f8 15 00 00 83 f8 03 75 43 48 8b 91 00 16 00 00 44 8b 89 fc RSP: 0018:ffffc900041660f8 EFLAGS: 00000246 RAX: 0000000000000001 RBX: fffffffffffe6fc8 RCX: ffff88802a1f1e00 RDX: ffff88802a1f1e00 RSI: fffffffffffe6fc8 RDI: 0000000000000001 RBP: ffffc900041662b0 R08: ffffffff81748c01 R09: ffffffff81748a2e R10: 0000000000000003 R11: ffff88802a1f1e00 R12: dffffc0000000000 R13: 00000000000008f4 R14: 1ffff9200082cc43 R15: 0000000000000002 desc_read_finalized_seq kernel/printk/printk_ringbuffer.c:1894 [inline] prb_read kernel/printk/printk_ringbuffer.c:1922 [inline] _prb_read_valid+0x461/0xac0 kernel/printk/printk_ringbuffer.c:2113 prb_read_valid+0xa9/0xf0 kernel/printk/printk_ringbuffer.c:2182 printk_get_next_message+0x1ee/0xbe0 kernel/printk/printk.c:2895 console_emit_next_record kernel/printk/printk.c:2950 [inline] console_flush_all+0x410/0xfd0 kernel/printk/printk.c:3049 console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3118 vprintk_emit+0x5a6/0x770 kernel/printk/printk.c:2348 dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4909 dev_printk_emit+0xdd/0x120 drivers/base/core.c:4920 _dev_info+0x122/0x170 drivers/base/core.c:4978 line6_probe+0x997/0xbc0 sound/usb/line6/driver.c:809 usb_probe_interface+0x645/0xbb0 drivers/usb/core/driver.c:399 really_probe+0x2b8/0xad0 drivers/base/dd.c:657 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:799 driver_probe_device+0x50/0x430 drivers/base/dd.c:829 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:957 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:457 __device_attach+0x333/0x520 drivers/base/dd.c:1029 bus_probe_device+0x189/0x260 drivers/base/bus.c:532 device_add+0x856/0xbf0 drivers/base/core.c:3679 usb_set_configuration+0x1976/0x1fb0 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x88/0x140 drivers/usb/core/generic.c:254 usb_probe_device+0x1b8/0x380 drivers/usb/core/driver.c:294 really_probe+0x2b8/0xad0 drivers/base/dd.c:657 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:799 driver_probe_device+0x50/0x430 drivers/base/dd.c:829 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:957 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:457 __device_attach+0x333/0x520 drivers/base/dd.c:1029 bus_probe_device+0x189/0x260 drivers/base/bus.c:532 device_add+0x856/0xbf0 drivers/base/core.c:3679 usb_new_device+0x104a/0x19a0 drivers/usb/core/hub.c:2651 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x2d6a/0x5150 drivers/usb/core/hub.c:5903 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd40 kernel/workqueue.c:3390 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244 final repro crashed as (corrupted=false): rcu: INFO: rcu_preempt detected expedited stalls on CPUs/tasks: { 0-.... } 3872 jiffies s: 3369 root: 0x1/. rcu: blocking rcu_node structures (internal RCU debug): Sending NMI from CPU 1 to CPUs 0: NMI backtrace for cpu 0 CPU: 0 UID: 0 PID: 5298 Comm: kworker/0:3 Not tainted 6.11.0-rc2-syzkaller-00011-geb5e56d14912 #0 Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 Workqueue: usb_hub_wq hub_event RIP: 0010:__sanitizer_cov_trace_pc+0x0/0x70 kernel/kcov.c:200 Code: 89 fb e8 23 00 00 00 48 8b 3d bc 7c 74 0c 48 89 de 5b e9 43 61 58 00 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1e fa 48 8b 04 24 65 48 8b 0c 25 00 d7 03 00 65 8b 15 a0 60 RSP: 0018:ffffc90000005af0 EFLAGS: 00000002 RAX: 0000000000010302 RBX: ffffc90000005b68 RCX: ffffffff91523000 RDX: ffff88802a1f1e00 RSI: 0000000000000001 RDI: 0000000000000000 RBP: 0000000000000001 R08: ffffffff814115f8 R09: ffffffff814130bf R10: 0000000000000003 R11: ffff88802a1f1e00 R12: ffff88802a1f1e00 R13: ffffffff817f1c90 R14: dffffc0000000000 R15: 1ffff92000000b6d FS: 0000000000000000(0000) GS:ffff8880b9200000(0000) knlGS:0000000000000000 CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 CR2: 00007f729d8d2000 CR3: 000000000e534000 CR4: 00000000003506f0 DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 Call Trace: unwind_get_return_address+0x71/0xc0 arch/x86/kernel/unwind_orc.c:369 arch_stack_walk+0x125/0x1b0 arch/x86/kernel/stacktrace.c:26 stack_trace_save+0x118/0x1d0 kernel/stacktrace.c:122 kasan_save_stack mm/kasan/common.c:47 [inline] kasan_save_track+0x3f/0x80 mm/kasan/common.c:68 poison_kmalloc_redzone mm/kasan/common.c:370 [inline] __kasan_kmalloc+0x98/0xb0 mm/kasan/common.c:387 kasan_kmalloc include/linux/kasan.h:211 [inline] __kmalloc_cache_noprof+0x19c/0x2c0 mm/slub.c:4189 kmalloc_noprof include/linux/slab.h:681 [inline] dummy_urb_enqueue+0x7d/0x760 drivers/usb/gadget/udc/dummy_hcd.c:1271 usb_hcd_submit_urb+0x36c/0x1e80 drivers/usb/core/hcd.c:1533 __usb_hcd_giveback_urb+0x42c/0x6e0 drivers/usb/core/hcd.c:1650 dummy_timer+0x830/0x45a0 drivers/usb/gadget/udc/dummy_hcd.c:1987 __run_hrtimer kernel/time/hrtimer.c:1689 [inline] __hrtimer_run_queues+0x59b/0xd50 kernel/time/hrtimer.c:1753 hrtimer_interrupt+0x396/0x990 kernel/time/hrtimer.c:1815 local_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1032 [inline] __sysvec_apic_timer_interrupt+0x110/0x3f0 arch/x86/kernel/apic/apic.c:1049 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0x52/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:_ieee802_11_parse_elems_full+0xbda/0x4a40 net/mac80211/parse.c:346 Code: 24 a0 03 00 00 4c 89 ee 48 8b 54 24 40 e8 9e 7d 84 f9 89 c3 43 0f b6 04 3e 84 c0 0f 85 20 33 00 00 89 9c 24 a0 03 00 00 eb 16 f1 fc 67 f6 eb 15 e8 ea fc 67 f6 49 bf 00 00 00 00 00 fc ff df RSP: 0018:ffffc90000006880 EFLAGS: 00000246 RAX: 0000000000000301 RBX: 0000000000000000 RCX: ffff88802a1f1e00 RDX: ffff88802a1f1e00 RSI: 0000000000000003 RDI: 0000000000000040 RBP: ffffc90000006c90 R08: ffffffff8b2b78b7 R09: 1ffff92000000d7c R10: dffffc0000000000 R11: fffff52000000d7d R12: ffff888056ebf32f R13: ffff888056ebf32f R14: 0000000000000003 R15: dffffc0000000000 ieee802_11_parse_elems_full+0xdff/0x2880 net/mac80211/parse.c:984 ieee802_11_parse_elems_crc net/mac80211/ieee80211_i.h:2361 [inline] ieee802_11_parse_elems net/mac80211/ieee80211_i.h:2368 [inline] ieee80211_inform_bss+0x15f/0x1080 net/mac80211/scan.c:79 rdev_inform_bss net/wireless/rdev-ops.h:418 [inline] cfg80211_inform_single_bss_data+0xe93/0x2030 net/wireless/scan.c:2335 cfg80211_inform_bss_data+0x3dd/0x5a70 net/wireless/scan.c:3159 cfg80211_inform_bss_frame_data+0x3b8/0x720 net/wireless/scan.c:3254 ieee80211_bss_info_update+0x8a7/0xbc0 net/mac80211/scan.c:226 ieee80211_scan_rx+0x526/0x9c0 net/mac80211/scan.c:340 __ieee80211_rx_handle_packet net/mac80211/rx.c:5225 [inline] ieee80211_rx_list+0x2b02/0x3780 net/mac80211/rx.c:5462 ieee80211_rx_napi+0x18a/0x3c0 net/mac80211/rx.c:5485 ieee80211_rx include/net/mac80211.h:5124 [inline] ieee80211_handle_queued_frames+0xe7/0x1e0 net/mac80211/main.c:439 tasklet_action_common+0x321/0x4d0 kernel/softirq.c:785 handle_softirqs+0x2c4/0x970 kernel/softirq.c:554 __do_softirq kernel/softirq.c:588 [inline] invoke_softirq kernel/softirq.c:428 [inline] __irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637 irq_exit_rcu+0x9/0x30 kernel/softirq.c:649 instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline] sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043 asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702 RIP: 0010:check_kcov_mode kernel/kcov.c:175 [inline] RIP: 0010:write_comp_data kernel/kcov.c:236 [inline] RIP: 0010:__sanitizer_cov_trace_const_cmp8+0x2f/0x90 kernel/kcov.c:311 Code: 8b 04 24 65 48 8b 0c 25 00 d7 03 00 65 8b 05 c0 5b 70 7e a9 00 01 ff 00 74 10 a9 00 01 00 00 74 57 83 b9 1c 16 00 00 00 74 4e <8b> 81 f8 15 00 00 83 f8 03 75 43 48 8b 91 00 16 00 00 44 8b 89 fc RSP: 0018:ffffc900041660f8 EFLAGS: 00000246 RAX: 0000000000000001 RBX: fffffffffffe6fc8 RCX: ffff88802a1f1e00 RDX: ffff88802a1f1e00 RSI: fffffffffffe6fc8 RDI: 0000000000000001 RBP: ffffc900041662b0 R08: ffffffff81748c01 R09: ffffffff81748a2e R10: 0000000000000003 R11: ffff88802a1f1e00 R12: dffffc0000000000 R13: 00000000000008f4 R14: 1ffff9200082cc43 R15: 0000000000000002 desc_read_finalized_seq kernel/printk/printk_ringbuffer.c:1894 [inline] prb_read kernel/printk/printk_ringbuffer.c:1922 [inline] _prb_read_valid+0x461/0xac0 kernel/printk/printk_ringbuffer.c:2113 prb_read_valid+0xa9/0xf0 kernel/printk/printk_ringbuffer.c:2182 printk_get_next_message+0x1ee/0xbe0 kernel/printk/printk.c:2895 console_emit_next_record kernel/printk/printk.c:2950 [inline] console_flush_all+0x410/0xfd0 kernel/printk/printk.c:3049 console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3118 vprintk_emit+0x5a6/0x770 kernel/printk/printk.c:2348 dev_vprintk_emit+0x2ae/0x330 drivers/base/core.c:4909 dev_printk_emit+0xdd/0x120 drivers/base/core.c:4920 _dev_info+0x122/0x170 drivers/base/core.c:4978 line6_probe+0x997/0xbc0 sound/usb/line6/driver.c:809 usb_probe_interface+0x645/0xbb0 drivers/usb/core/driver.c:399 really_probe+0x2b8/0xad0 drivers/base/dd.c:657 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:799 driver_probe_device+0x50/0x430 drivers/base/dd.c:829 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:957 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:457 __device_attach+0x333/0x520 drivers/base/dd.c:1029 bus_probe_device+0x189/0x260 drivers/base/bus.c:532 device_add+0x856/0xbf0 drivers/base/core.c:3679 usb_set_configuration+0x1976/0x1fb0 drivers/usb/core/message.c:2210 usb_generic_driver_probe+0x88/0x140 drivers/usb/core/generic.c:254 usb_probe_device+0x1b8/0x380 drivers/usb/core/driver.c:294 really_probe+0x2b8/0xad0 drivers/base/dd.c:657 __driver_probe_device+0x1a2/0x390 drivers/base/dd.c:799 driver_probe_device+0x50/0x430 drivers/base/dd.c:829 __device_attach_driver+0x2d6/0x530 drivers/base/dd.c:957 bus_for_each_drv+0x24e/0x2e0 drivers/base/bus.c:457 __device_attach+0x333/0x520 drivers/base/dd.c:1029 bus_probe_device+0x189/0x260 drivers/base/bus.c:532 device_add+0x856/0xbf0 drivers/base/core.c:3679 usb_new_device+0x104a/0x19a0 drivers/usb/core/hub.c:2651 hub_port_connect drivers/usb/core/hub.c:5521 [inline] hub_port_connect_change drivers/usb/core/hub.c:5661 [inline] port_event drivers/usb/core/hub.c:5821 [inline] hub_event+0x2d6a/0x5150 drivers/usb/core/hub.c:5903 process_one_work kernel/workqueue.c:3231 [inline] process_scheduled_works+0xa2c/0x1830 kernel/workqueue.c:3312 worker_thread+0x86d/0xd40 kernel/workqueue.c:3390 kthread+0x2f0/0x390 kernel/kthread.c:389 ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:147 ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244