last executing test programs: 40.058936179s ago: executing program 0 (id=1775): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) ioctl$sock_SIOCOUTQ(r0, 0x5411, 0x0) (fail_nth: 1) 39.186975232s ago: executing program 0 (id=1782): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x4000000) 39.114558964s ago: executing program 4 (id=1783): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[@ANYBLOB="9c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000006c00128009000100766c616e000000005c0002800400038006000500810000004c0004800c000100000000006a0000000c00010003000000018000000c000100220b0000000000000c00010004000000010000000c00010000000000010000000c0001008000000000000000080013"], 0x9c}, 0x1, 0xba01}, 0x810) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(0x0) splice(r8, 0x0, 0xffffffffffffffff, 0x0, 0xf3a, 0x0) write(r6, &(0x7f0000001100)="94", 0x1) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000001300)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_DAT_CACHE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r10, 0x83625fc5352ba305, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}]}, 0x1c}}, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000140)=""/116, 0x74) tee(r5, 0xffffffffffffffff, 0x8000000000081, 0x0) close(r7) bind$llc(r4, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r12, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r12, 0x0, 0xffffffff000) recvmmsg(r4, &(0x7f0000005c00)=[{{0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001500)=""/136, 0x88}], 0x1}, 0xffffffff}], 0x1, 0x100, 0x0) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050003000000f66552569948920cb91b5e4e72504869fe1fc9ffc67f1416faa56364c0f502bd19353eefec6b5e1344a6cfa4e917ed784ca1f501b125dd1a1d077f7dd7d8bb7c1b3bcdab72"], 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r2, @ANYBLOB="050000000000000000000f0000000800", @ANYRES32=r3, @ANYBLOB="23007f00260305fc537e150a060108021100000140000000d70800000800000010012a0004002a006c000e0080380800ffffffffffff080211000000b1a7dea8260405001000000000000000640018540406000a00000180060208000503800309250301b9072a01023c0401e624062d1a481000000001000000000004000600070000000100f4ffffff80710701ff000100030008000c00e0d2ffff08000d0000000000"], 0xc0}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 38.994376547s ago: executing program 0 (id=1786): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0x5, 0xb, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) unshare(0x42000000) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a00)=ANY=[@ANYRESDEC=r1, @ANYRES32=0x0, @ANYBLOB="00000000000000001800128009000100766c616e00000000080002800400038014003500036c616e30000000000000000000000020001280a7abd60f000100626f6e645f736c6810f09460389361766500000c000580060005008100000008002500000000000500110005000000"], 0x7c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB='\b\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) r5 = socket(0x40000000002, 0x3, 0x6) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r6 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r6}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) recvmsg(r2, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000640)=[{0x0}, {&(0x7f0000000c00)=""/224, 0xe0}, {&(0x7f0000000d00)=""/259, 0x103}], 0x3, 0x0, 0x0, 0x1008}, 0x1f02) sendmsg$tipc(r3, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r1, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000600)={0x10, 0x140a, 0x408, 0x70bd28, 0x25dfdbfe}, 0x10}, 0x1, 0x0, 0x0, 0x50}, 0x8000) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) unshare(0x22020400) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000080000000000000064ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000000)={'ip6gre0\x00', &(0x7f00000020c0)={'syztnl0\x00', 0x0, 0x2f, 0x80, 0x3, 0x8000000, 0x5b, @remote, @loopback={0xfec0ffff00000000, 0xffff8881114a4aa8}, 0x0, 0x0, 0x0, 0x2008}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000000)={r8, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001440)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0xfffffffffffffcac, 0xfffffffffffffffd}}, 0x10) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x530, 0x348, 0x18c, 0x203, 0x348, 0x19030000, 0x460, 0x2e0, 0x2e0, 0x460, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x300, 0x348, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x16}]}}, @common=@hl={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x590) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000000)='cpuset.effective_mems\x00', 0x0, 0x0) 38.626638139s ago: executing program 2 (id=1790): r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@vsock={0x28, 0x0, 0x0, @my}, &(0x7f0000000080)=0x80, 0x800) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x38, r1, 0x100, 0x70bd2c, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x240400e1}, 0x40000) r2 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r2, 0x1, 0x4, &(0x7f0000000200)=0x8, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x10003, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000002c0), r0) sendmsg$IPVS_CMD_DEL_SERVICE(r3, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x44, r4, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_DAEMON={0x28, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @empty}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast2}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40001) bind$xdp(r2, &(0x7f0000000400)={0x2c, 0xf, 0x0, 0x1b, r2}, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000480), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000580)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000000ac0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000a80)={&(0x7f00000005c0)={0x48c, r5, 0x800, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_DEBUG_MSGMASK={0x274, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x87, 0x5, "2084bc042c13223a06d3e2590dd198bcbd4cc190383e51674e2eb1dd0259f4bc1dec7602f327409c690a0ba9bfb3e01c30f23949895dcec0d81425660557f6b8d8ace28c5632bbc0927ecd8f17e1fca88f5967697210ea6445a4eb7c41e5cc82ef401d745969df484a605b8cda732c4c88b14d88498e422b95b442b18929cf52b32e92"}, @ETHTOOL_A_BITSET_BITS={0x10c, 0x3, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '{#\\\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}]}, {0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7ff}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '/dev/net/tun\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '#\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}]}]}, @ETHTOOL_A_BITSET_VALUE={0xd5, 0x4, "fdcd2fde1b5b788a8e0387e55bcafb327cc8704edd483188731796472c04e322afdd77a84928170262f701ad9d193af503a07b221c65a9273f835fc5ac8215890adf257b777088b02688433f49c853007347e536a719694e0bd7c594275f269da30cab4878a8f07bf2c5c22a174bc36c8f163958da230f0caeeda45a0c7995eb4d468002b3749bb28eb22deead6a736cb001f5075a0b5c1dc6fd28e42df23d56093a30330ad0b780dab32aa1f6352e96387729f9ed12ebb24087e4c9f60b1f2d1d8e671da1243b995c4fb8c1ef2c4e693a"}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_DEBUG_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_DEBUG_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x9c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, '(#f$%#]\x00'}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_NAME={0x11, 0x2, '0000:00:10.0\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x10000}, @ETHTOOL_A_BITSET_BIT_NAME={0x6, 0x2, '$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x4}]}, @ETHTOOL_A_DEBUG_MSGMASK={0x11c, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x18, 0x5, "24e978bc15ffd99a4faa28acc1cd112de275a52f"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0x6b, 0x4, "d11db0012976a2a533a341da967584e56c850079640d195710683c3337298d5862acb07fe8f1f4a34e4026df7e4171048dd34e58f19f86500a6f8ec3bc67f4129e8c7ac5d158925877eb87a22c94104cf2160af7b98bb56ef28adc6edb36fd7809b51ea2ab579f"}, @ETHTOOL_A_BITSET_BITS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x200}]}]}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0xcf}, @ETHTOOL_A_BITSET_VALUE={0x9, 0x4, "1628fccf89"}, @ETHTOOL_A_BITSET_VALUE={0x67, 0x4, "9360c73746e6d914b4d065eaabd3856540b3606c0b68e3ce767625ca08e4bf358b0aba2c01a57899914df57f3734c1d803facbb6f7cd1238fb5766fb700ed9907d66c0f0c5a810978ab06ae8930e7799196c42cce6d9a50b7e3a74c21ba73989f6f503"}]}]}, 0x48c}, 0x1, 0x0, 0x0, 0x4080}, 0x81) r9 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r9, 0x114, 0x8, &(0x7f0000000b00)=0x1, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000b40)={'pimreg\x00', @remote}) r10 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_mreq(r10, 0x0, 0x20, &(0x7f0000000b80)={@remote, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x8) syz_emit_ethernet(0x5a, &(0x7f0000000bc0)={@random="9bb51225b0e0", @remote, @val={@void, {0x8100, 0x5, 0x1, 0x1}}, {@canfd={0xd, {{0x3, 0x1, 0x1, 0x1}, 0x29, 0x0, 0x0, 0x0, "59545649ebc2dab010c2591743777504ddaca5d0d4d40826d48bdd76c016392a60ad24336d84e9f07085327c7e8cd0444d15caf140968ca3a1401fe23387c3e0"}}}}, &(0x7f0000000c40)={0x0, 0x3, [0x18d, 0x50b, 0x992, 0x7a1]}) openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000c80), 0x2, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000cc0)='./cgroup.net/syz0\x00', 0x200002, 0x0) openat$cgroup_pressure(r11, &(0x7f0000000d00)='cpu.pressure\x00', 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) connect$pppl2tp(r0, &(0x7f0000000d40)=@pppol2tpv3in6={0x18, 0x1, {0x0, r0, 0x4, 0x4, 0x2, 0x2, {0xa, 0x4e23, 0x6846, @local, 0x8}}}, 0x3a) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000e00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000d80), &(0x7f0000000dc0)='%ps \x00'}, 0x20) r13 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001000)={&(0x7f0000000e40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10b, 0x10b, 0x5, [@datasec={0x5, 0x4, 0x0, 0xf, 0x3, [{0x3, 0x7f, 0x7}, {0x3, 0x800, 0x6}, {0x3, 0x2, 0x80000001}, {0x4, 0x7, 0x2}], "0586b1"}, @struct={0xc, 0x9, 0x0, 0x4, 0x1, 0x9, [{0xc, 0x3, 0xb}, {0xa, 0x0, 0x690}, {0x8, 0x3, 0x7}, {0x10, 0x4, 0x1}, {0x10, 0x1, 0x1}, {0xd, 0x3, 0x515d6d9c}, {0x3, 0x4, 0x8}, {0x5, 0x1, 0xdcff}, {0xe, 0x5, 0x7}]}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x5, 0x9}, @fwd={0xa}, @func={0x4, 0x0, 0x0, 0xc, 0x2}, @int={0xd, 0x0, 0x0, 0x1, 0x0, 0x4f, 0x0, 0x62, 0xd27d2e0e30454387}, @var={0x3, 0x0, 0x0, 0xe, 0x1, 0x2}, @float={0x8, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x30, 0x61, 0x2e]}}, &(0x7f0000000f80)=""/110, 0x129, 0x6e, 0x1, 0x6f09, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000001040)=@bloom_filter={0x1e, 0x401, 0xfffffffb, 0x4, 0x200, r12, 0x70, '\x00', r7, r13, 0x5, 0x1, 0x2, 0xb, @void, @value, @void, @value}, 0x50) 38.10214596s ago: executing program 2 (id=1794): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x6, 0xa) bind$inet6(r2, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x8}, 0x1c) close(r1) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66}, @initr0, @exit, @alu={0x7, 0x0, 0x8, 0x3}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0xed, 0x5099, 0x7, 0x9, 0x3, 0x7, 0x6}, 0x1c) 38.010406156s ago: executing program 4 (id=1795): socket$igmp6(0xa, 0x3, 0x2) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$tipc(r0, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 37.958908275s ago: executing program 1 (id=1796): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$NL80211_CMD_JOIN_MESH(r0, 0x0, 0x4000000) 37.890322348s ago: executing program 2 (id=1797): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}], 0x1, 0x0) shutdown(r0, 0x1) 37.818825464s ago: executing program 1 (id=1799): syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x20}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) sendmsg$NL80211_CMD_STOP_NAN(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x280}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, 0x0, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @void}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x240408c0}, 0x20000000) 37.705062573s ago: executing program 4 (id=1800): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB="02030003130000000000000000000000010009000000000005000600000000000a004e21fffffffd00000000000000000080000000000001000000000000000003000100000000000000000b0100000005000500000000000a00000000000c6dfe80000000000000000000000000000000000000000000000400030000800000008000000000000005000000000000000600000000000000"], 0x98}, 0x1, 0x7}, 0x4c848) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x60, 0x30, 0x1, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x60}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r5) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="810f000000000000000001000000080001"], 0x30}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001e008d2a26bd7000000000000a000000", @ANYRES32=r1, @ANYBLOB='\x00\x00\x00\x00'], 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4024) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r9, &(0x7f0000000300)=ANY=[], 0x32600) socket$nl_generic(0x10, 0x3, 0x10) r10 = accept4(r7, &(0x7f0000000440)=@nfc, &(0x7f00000004c0)=0x80, 0x80800) setsockopt$RDS_RECVERR(r10, 0x114, 0x5, &(0x7f0000000500), 0x4) r11 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) setsockopt$netrom_NETROM_IDLE(r11, 0x103, 0x7, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r11, &(0x7f0000000140)={0x80000006}) setsockopt$bt_BT_CHANNEL_POLICY(0xffffffffffffffff, 0x112, 0xa, &(0x7f0000000400)=0x5, 0x4) r12 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r12, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x18, 0x1404, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}}, 0x24000018) r13 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_QOS_MAP(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000016c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="350126bd70000000080003517a02d3a200", @ANYRES32=0x0, @ANYRESHEX], 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000000) writev(r9, &(0x7f0000000380)=[{&(0x7f0000000200)="a8db5c7f317e673012cc24d1b5d7a75113e1d0ae18640efb5638ced8269dd3e47c935df9cc5e82f5a3a8b1ccc82edfd7cc528b6fa47858ad818bdf2fe92829939383d1ee202426dddad8d4a715b4b64bce702e90fb025205cd95e7dc30662fec4fcf4cdeb18773a53c543f5523009735349fe27bf4fb93c966968d22", 0x7c}, {&(0x7f00000006c0)="8b9b8533026dc9234c53d9b9cf931a28d392fa9baf400e76a76ef4566ef564f460fb5e7b299379957347aeaf0a8cd05a20b221095127a6d360e9fe2084fbaefe95e05ff714e4559af68a75bfe8a7b0efe4fd06a994ea24b0b5f5873254ab5590e4cf924b5944b05914b75eda1c355382e3cc1f6d5e8272e47d0884891fb29da25be3bccb377dbc63dcc3d3403b0e2d1c726a7e438b02fd29c3a8f038fee280294e9cbf4f4e407d7bbb787374b7b5c0c49349614ca4f1fa39c6293bba6bb0de7e69ef2103d4b3aa1b7e2a2b7b4241cc253b730674b28480db32bd3eec4d44a91509c215cbdb221810cc1abef1395f5d7a8458306a7c354eb7b41783184079dfd814ed00c708018115087d6072bc334e7818aacfbed5c27b1310452eaf569a297bfa53fd15a67d1b88a2ef8280fe0b8cb2afb1c5d019254f3fd1161861d5f8e6137ea08b2a2d6b3d9a85077e7690c98cf68fd12f4e6f62f6b14b0f3177ea049ec1c83a93675e12f6a98676c08fee565916a24d2b10a2fbabc78a8a38477e072a870907297278fe0a5cb1fbae0dc6c8fb4a1bae7d84e611baa5086f55af531cde9bca3b4cbbbdecd4b4ed6957ec8749c70f6a168a8c50c34550cd1a76ee632fbc84a905015e861f5388be7f73fce3d5f0c4fa3945e1d8e755ae629c2b807afee449ce16d086a531ecb1eefee110a124ecfa29ea93c4e34031136605e99617d63242f618b62a37dab8435a5dc84fe16e58b7a56679706b815a2f97945c8f5be45ce10c9c7bbddff9e959eee91ad6c50b5174496a828d10a9d0215637d75fb0643a78027ffda381a199f57c26556d84d58f1c481e83061e28fe06001b94a15c609f1792140532bb3886420524c8000a052c7254c2d642a76c899d177acd2e85524aba1101c955a31b911f0e383942d44e624b392a117b9a1fd16a46b01b330875c6902b7aa591693cabb1307d2f3d56040cc398d1e4e0a6e29c89aa759bab97ddd9acdffc62e4d0001d59082bf59224b7b29f50c97260e1f904d191430992ae81784ca8b6047c5f954b327236dd678ea81b57b34d595c88a35ab059de37dff2224e3a97e83ae10461bbec8bda79a14bd89ac58b57645a1b31137e6c951733ffc0edc2a7c66a4e23169dd959c3109fd0280a975513102d425fd51c162cd5671b6e205a375f365db029ba9d3b152810be0edfbfd032e979d8cf584d0cff3e96e764aea40949e58b08a03e0783608d51d4aad8b8c162d3dbf5374c968833d41f9b338026c551d87dbfc2f52b8d9afacb3a1104fa6bd6d1e37bf35b633527990e3bba62e0ebc5553fe7d7b95672c526acfd946b56625bc814f45feef7c062f41941f5c6d4fe2b3843f39c8b23006a058902f1f37cf90b0c04df7cc8a7e44073739a4f3ebba77a3beb5eec55b5cc3f50cf5aaacb94fa253beb8e193b53a1c7e631846d43e692ff0817495c574819b1cabe29ba31b85122748aa549b2880601c8ddd0085c44ca8db6eb7a6fbad2fedf92fb09f084e7fbeda8433578c4007685438a9db571d9ae2599b65f2f11c41bf83c778c07694945ca23199ee13c21a225ac40e6f150d6d7875d21549013b2aad44e2005401c540a83b9510d63d0d59be0f0e936318ce4543c1fb2d5df903a7fa30a992aeda8ca9147dee92690e34c6264f9ab30748a06796879538414e8d7898b951ee4cbd6aaff6fcb7467e6ddba720766830c9cabfe6b688d844d7ba2f31c8963ff1f6e671a96d46edfb07c39a39dce998adc4cac057ec361af20719bd7e01d8347c2fc9a78e6b9f5d50a30569c65e7735944213bf60e9fb7a42739ca6bd1d0043d369030dbb777e0affae5e602beb45c629b036610b4b406458bc2a3bab4fc94ed9582a8ad0e3dee98e57e404c150871407c813c2c9eff6a07d880aa363653ecd132b90c252607822259badf6ba252d82e99da4201327fac287b59cec8fb1cc6f71881b7dc2d3be27952680f8048c2084de0f202c31b74d1dd68aa3c2a98ab7fc11240c8e1f8656a6212abfba766550b25084b48e029c7a58e12e02d1f628b74b8ba10335b3963e25223dc62f4d7c8227c83936fe0f4e5fad415a5ed611a00583b2ee4556d603e4383bb99112b27f1a8ff339f952d6c6f512ea2a6a7c63d9899d39ce04717db50a6dca27bd4d1fe792cbe0224dd863d3cf8ddadc486c9618c9370edb0779d51d7b4ac0416318acec5ea4632fc642e07efbbd44b8508e76dc33e5e548f80601cc1b8e6c1536a87fb276f2f3cd33e502749284d843a330c8c66d7ccea48153652d9ebf82113d44cfe1c84703f759f9e252f1fcb7fb103f81d6d1001e9ca939423a70a51722de2d4cac4fa970075c5826ae4275ce80d3a0e5fdabd113e64d9feb0c3b707562daab2afdc361d7684197607911bca91246f169fa3cc972c71958dab4de143704e01d0450ecc5ba90be60be2978437e3368f0dc825e827bc9fe87964ad370837e57b88410bea8e6cbac9a9aa80f118624bd491cf318ad3ecdb6a26744a5877be86f30a2a3644ca4826e7c08055a32bf08a535e5d9398118ad9cfddf509b060c38a7ef9d0c80fa00c99afe306df5b0227a7094d1332c509b49a17fb0275cf6b508429a6b5064e1aab0094fe237d70d8585c2a4aa57e6f312cd64c24091d1f327ddbd799f3ffbf1ced253f24d6097d1332ec7fa51c0259ba006f51561605de19b066b3c1ad79cfac044fdb48482aec951315e796d05eb18f1aa822d3c0597c0cda28595016d11a3a937a9177fe1acb90880164e1059bae69d682a9407e89b475847190126877d265726f72c80d57755c9d3e17fdec0c06e4dc61e81346c410d79ff2b6d7cfd073c819bf6303ee358b9fb2730f1434c1ccfccf359cc10f15e303c35df33be6da56931f34bc93ed1ad96a58eca655969feeffda7c81212463a8c608527f2a267f101ba5f9bac3c2f0ddc606b0eb99f929033e8561070f214963169c38d2313ebc31f8a84ac7836a53a47112f84b663f4fdaebfbf317704eca5913542d2e29c4d23d7155095d896002facdf604a43825876fadcd65c391fb8ab5822963774d6b06488cb7659d5845d1d9299fb94d2085ebd8233c84aff7090111ade87d9de2be408eed6258f84a1de8a600470e34e6b6ee9e0583a8b1e351e913eca35c4d62fe8a0ceddf7621ce6f9e5433268869ad7f7978bb300604966f17a8e7898013e1c1e6a30659a1e453f86e20f8e4d90116b18de1b12df2bd13c7a63de1cd5d26bef06bde4280e9aca4532bdf7527337492deb3728304b4c167e1cf5e4ab95abceb6462fa980bc08764b8a89a8bfc975f474f0fa6ccbb8d731e71f9f814ab81392da4e3b870f94e0bb1901262c56270caa163c98f1dd413703ccec2cb62f70502769d84192211e3b398c5f2f64a9ea78b8bbc5ce3c74a25e752931162be5775fd740135277c467c48c971578ddd2933b18a803010fd27ce60a0ce143d2aaec8600327d3068423d083d37579da690a12c743612d71bac4af7d01683d1a24db1ea728e5750a8c2bc2cd87edcffc45d922016a6457450d5c30cc38d44db80599da4916264f267d0a0c4e4cc15cadbcfd7117e43f7276beae7c75a4ac747afb213e2a17e8ccc7752cbf6abb2e9236c5e2313e2c5a9ed4b5c52a292a2d08a064e6b745dd09b118e4f3777ccfbe562bfc88d057a9f86a46d6faf3d4ce28c97f397db36e2f18c2d8bf8b1e916253fc99ab88bb956eee71e087a595101bc77316262355abb17cb95daf5290a65e56a72d244e9e5b99158b84f39e9304d7fb6db8fe9c1dd1b20bcc7889c105e9a94371d7686e430ef79d0573acdd4e8b6a13d46e2916fc65f047b128b847ee51cbf472864f22f92fa05201be02773b40d29ece8d2e96393b8c159f9ec7c32138de03630a11288057ccb05422d7f2ee53c812a25126a850706c71ade4fc72fa891209ae7657bfe7fbce02ff726202ba04574ed20a95399a53d524cd60d916a6c7928c5375c2095624e00586d14a1ddda2bca4417fda2130933cb6678bb32ce7f999c9823bc7ec4f64c457826c49eaf70eece7673eb57c9cb118909c70a078de47cc3c49c164137fca20bcfa7405b24832580891de6608ae7a86d9cdb36071513a6446a7e83e5997e88964ee3d626314f8882db5f2e67e0b8abffb10248fb425f7bd8095f8b596fc6520c1b199331634235aa33b8683e9a871b3da55756cfbe9ff1c7d7699d099e09ec8bad7cffdccb82b1f8dc0d47e55256fcc246b24d0e52bd406c494182bd521c5f8e8f967e9edab74ccef6521628626f45902d7d069543ab8c51f9f807b595adaf09d81aa0bcbd39b572746d924201fea22a209839633868d79d1283c14a801ddb5029688248894a82fd0a77751e1b07e0a561012fd0deb658f8ba18758fc239af894fc74e8e4f81fcde68188d5a136658b137dff77553944d04894233b269380f18b065a1f1ded83f341b745e2a33d96b2ed836fa0c41d0361eb3f56c19847dad424ad83798a9b7c686ce70bcef69f75f13b7dd330d9e0e3b6de59b17bb6d5b4822941e61e8388f3208600cf7669052b7ee399712551a79677573de70e3e7f165f24bbdd1b020c05c78f939dbd2644911a811786218e721682c7bae4231cb1be8558a85fc364ea03cf737d93b549a7d4d0c5608228eed654b73dc7ce90a6951d925e7584aeb7e0a5cc998dc89677be4a22a2c63af2fa1d9e8fc9ad96fb1e50bf3c24610bfbd273582c485e56d34ee48df354a15e4c46c172ac93dab9a0d1397d2e5e78e805ec60b47732ddc72fa86c900ba679f9e7e36d0b287c5cd947bd9c05688b86e00232599092a3522a5dd67a68a5bfecdf70c6e4800f47b7794e38c81e9c38bece8d7e67d9a8a36b1978f12b84913bb061af60833446eaa8aef81e5b63cc74a8c6bd28e8cccb1e1c0e2e1768ee441e9ae25ffdca55306a4864e3f53325e778589f246d83ff9f0835a4efbdb805ef2dd71b4f6c3d714b6e78d2f6550fcef608bf79ea3586fa4437baa1622ea670b9957d3814e85ba883656c3329b2afc895815f93995c1230f8f3c34ab8391748f8e8d3e27f98b7fc2242335e6276158604f971c306aa253d2c4f9d2cec218d1de4a84831f126a67a1dc0618a2cf413dd76edbb8b4bf7bb8d6212b53d40c6c59280062fe23d3fa425d317b258218a835c2d8d5085c4ba7ec4326f5581fa66a7bfa7710f1d1388c0d262bbdf67d25fb42f6b3c471167056e1450b7bf085bffb7d274ad4bbcdb78e3f765492ac3169c8c24198db09846a87f511bc7727e502f84e67749741f1cf66cb8155f415834c1985a7a4a78b9ff4d80be97e7af2b07218ce5126be8f8634171e5ebdf5ef63c37988d2a9db051a6ebe9a5dd337947c896ca000973dbf053ca193dd99de9355838e2299afb7c9bbb9cdc7c2e8335e39c2edd2dab2ef384e540f3898735dad288374f766cb3c6efe58c9d7e8cb6dff085a60830081b80935179c1a705e734c1489de013768d080b95db2976ee9a5316d3d4c9e3a2d76fe47a214c72ca29e045e3d5e358f0f58ade991de571bf61df49cfdfd4a6fef3c7437fe1590d8de006519f4b26e4e3097c0aef87e0ec1bc011b2b5b7eda7840c9a935728771ba72b705fd9947de631ed9650a83c2c5a2942115a6c822c98ca9286977bb3b3a8ce78a1ba3bed34ec72fd2a76527587fe5c678a9e2eae2a3e196629e980e3ce8f054e61fd63d040291ed1397577cb1b1a8856f9d7e768bb2ac9dafe5fb12a202f9086e2726523f99675b13a99183b97e45bf6ab174dc027274735dedb9885f20de6", 0x1000}, {&(0x7f0000000180)="d9d054c5a604cd17f269409291bcd9ca8f403d3fa344cf155b", 0x19}, {&(0x7f0000000280)="ec0489d6459475fe39c8946ac9d77405dfbf8897f0ef0e9aa8f3c51cf4f184addb5acd7dc9829c5e65016b08408c5244668e73987efa1edc40c4d80a76511908b4f2c042bfe566d99f70b7cdeda51e855d2b0cf3732d680b8d2c3a6d319601fdac7c4b3ea7c89463944098e68a12b5d92d5c68b1269f26fdec60cfd3904d620072dc9a32e4f0df5a251b174b52f978e51824f99c20e2acdc5d811a3dfe1248e9b93ccf5dfee2de967a617791eeeff71f47c456bdfd1ba2b4d76a8d15ee5ac28164b2190f73748cd4b879734408317c3bf7030432a1ea0a70e0e9d1569084f4ac449c4edfd9e61aa271", 0xe9}], 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x100000f, 0x13, r7, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) 37.625931833s ago: executing program 2 (id=1801): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) shutdown(0xffffffffffffffff, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000003940)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a3200000000140007800800064000006a000800084000005fdc050005000a000000050001000600000011000300686173683a69702c706f7274"], 0x60}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r2) r3 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) writev(r1, &(0x7f0000000280)=[{&(0x7f0000000440)="89e7ee2c7cdad9b4b47380c94305", 0xe}], 0x1) r4 = socket$rds(0x15, 0x5, 0x0) bind$rds(r4, 0x0, 0x59) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6(0xa, 0x2, 0x2) ioctl$FS_IOC_ENABLE_VERITY(r5, 0x40806685, &(0x7f0000000180)={0x1, 0x0, 0x1000, 0x7b, &(0x7f0000000080)="587d325c94f244b6a5c501c9ce1ad2e3a90dc9e9a94f7882334f24e61c208e559291013b32aaddf18d72f44e23e18ffe277f14754aff7aa2c32cd82671e00458b9bd53b4eb714a7875301da5c87b56d3e36c141960cb49b9f25eb29aae0c159505a4c22a1900ac792dc8f284f041b51fdd9819fdf58837e1002e92", 0x0, 0x0, &(0x7f0000000280)}) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x23, &(0x7f0000000580)=@raw=[@jmp={0x5, 0x1, 0x1, 0x8, 0xa, 0x138, 0xffffffffffffffe0}, @map_val={0x18, 0x2, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @ldst={0x3, 0x3, 0x3, 0x8, 0x5, 0x8, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x8}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x1}, @jmp={0x5, 0x0, 0xc, 0x5, 0x0, 0x50, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}}], &(0x7f0000000100)='GPL\x00', 0x1d, 0x89, &(0x7f00000006c0)=""/137, 0x41000, 0x44, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x7, 0xc0d, 0x6}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000003c0)=[0x1, r3, 0x1, 0x1, 0xffffffffffffffff], &(0x7f0000000480)=[{0x2, 0x5, 0xe, 0x5}, {0x5, 0x1, 0x5, 0x3}, {0x3, 0x2, 0x8, 0xc}, {0x1, 0x3, 0x2, 0x2}], 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@cgroup, 0xffffffffffffffff, 0xd, 0x0, 0x0, @void, @value=r6}, 0x20) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, 0x0, 0x69) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000013c0)={0x2, 0xd, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x17, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xb8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan1\x00'}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0xd546014d3177070c}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 37.625242458s ago: executing program 1 (id=1802): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='mm_page_alloc\x00', r0}, 0x10) r1 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"]}, 0x2a8) r2 = socket$packet(0x11, 0x0, 0x300) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendto$packet(r3, &(0x7f00000002c0)="12040500d3fc03fc01004788031c09100628", 0xfd35, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="60000000020601010000000000000000eb7af834050005000a000000050004000000000014000780080006400000000008000840000000f00900020073797a3000000000050001000600000011000300686173683a6e65742c6e6574"], 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001100a7cc4affeeaf541d002007000000", @ANYRES32=r9, @ANYBLOB="00000000100000001c001a80080002802d00", @ANYRES16=r10, @ANYRES32=r10], 0x44}}, 0x0) sendto$packet(r2, &(0x7f0000000040)="1000810022b5e561", 0x8, 0x0, &(0x7f0000000200)={0x11, 0x8100, r6}, 0x14) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c00ffb6", @ANYRES16=r12, @ANYBLOB="310300000000000000000900000008000300", @ANYRES32=r13, @ANYRES32=r0], 0x1c}, 0x1, 0x0, 0x0, 0x90}, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000000)={0x6, 'gre0\x00', {0x2}, 0x7}) r14 = socket$inet_udplite(0x2, 0x2, 0x88) sendto$inet(r14, &(0x7f0000000180)="be4839cd6b01000100ac0e859e9d9fd02a134af7ee3ff4a1c85357168940ebb754219142b46c3f58239754a14990b5cceaaed7faf572d3a2877ff81be471d82a1245bdcaa5be", 0x46, 0x20048890, &(0x7f0000000500)={0x2, 0x4e21, @local}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), 0xffffffffffffffff) r15 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r15, 0x29, 0xc8, &(0x7f0000000340), 0x4) close(r15) 37.494748282s ago: executing program 0 (id=1804): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r0, 0x89fb, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) (fail_nth: 4) 37.273531296s ago: executing program 4 (id=1806): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="1c000000180081064e81f782db4cb904231d0800fe007c05e8fe55a1", 0x1c}], 0x1}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="58010000", @ANYRES16=r2, @ANYBLOB="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"], 0x158}, 0x1, 0x0, 0x0, 0x24004800}, 0x800) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="050000000000000000002e0000007f000000", @ANYRES32=0x0, @ANYBLOB="0a0034000202020202020000040008010400cc000400670004006700"], 0x38}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd6000050000140600fc020000000000000000000000000000ff02"], 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) sendmsg$inet(0xffffffffffffffff, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="02130209020000", 0x7}, {&(0x7f0000000780)="a112fde44010973762", 0x9}], 0x2}, 0x400c010) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x20, 0x8, &(0x7f0000000c00)=ANY=[@ANYRES32=0x0], &(0x7f0000000500)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth1_to_batadv\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r6, 0x8916, &(0x7f00000002c0)={@private1={0xfc, 0x1, '\x00', 0x4}, 0x4, r7}) ioctl$sock_inet6_SIOCADDRT(r6, 0x890b, &(0x7f0000000540)={@empty, @empty, @private1, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4400046, r7}) socket(0x28, 0x5, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000240)={'vxcan1\x00', @remote}) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xcbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r8, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCDELRT(r9, 0x890c, &(0x7f00000005c0)={0x0, {0x2, 0x4e23, @multicast2}, {0x2, 0x4e20, @empty}, {0x2, 0x4e20, @rand_addr=0x640100fd}, 0x106, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000040)='pim6reg0\x00', 0x0, 0x7, 0x3}) accept$alg(r8, 0x0, 0x0) 36.862804611s ago: executing program 0 (id=1807): r0 = socket$netlink(0x10, 0x3, 0xc) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000000b00)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x200000}]}}]}, 0x40}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000175000/0x1000)=nil, 0x1000, 0x1000008, 0x20010, r1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet(0x2, 0x3, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x18) socket$inet6_sctp(0xa, 0x5, 0x84) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) vmsplice(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000700)="345549fbf35966eb87d96059c2f7a25f843336f951c66cb84ae59730e30634683f9b544e2554bc15de93dd8ad0776beee49f76ad82f8276a2a3c79657947f9edc8d674a2eb2fba82d40fb3c09a0457f5fc4d2ab0a87af58e00a729430dfd9dd70727be8a73b54005202b107e1d9beb4b9237f953f9683e3c8d4237f96e2629835639b3bbce3e09f8911f1adb4278a330221f705457d67c2865e95328f8d8b5b91382481b6a0daa95dcd30d85c3", 0xad}, {&(0x7f0000000800)}, {&(0x7f0000000300)="9fe41427e269e70d47aa224c26cfffc2d8ea976e35ef5e3f7ee64e983f09e4ed68d3ca7cc3fe09b28ec75f67a069a4b14219db456d0d6a6e26742cbbc49e2c585dda95dbe74c2b8cefbf89394fb9f4", 0x4f}], 0x3, 0x2) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@loopback, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {}, 0x0, 0x0, 0x1}, {{@in=@dev, 0x4d3, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x1, 0x4}}, 0xe8) socket$inet6(0xa, 0x2, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000680)={r4, &(0x7f0000000400)="d1a4535d5a31d6487dd50646c6fb34d0de64d8d97cf01aace8abe6fcd58e5bf1b396484e3dcb628c9f292c3660363777484c82a5d9b87486e0", &(0x7f0000000800)=""/177}, 0x20) r6 = socket$key(0xf, 0x3, 0x2) ioctl$F2FS_IOC_GET_PIN_FILE(0xffffffffffffffff, 0x8004f50e, &(0x7f00000006c0)) setsockopt$sock_int(r6, 0x1, 0x8, &(0x7f00000001c0), 0x4) sendmsg$key(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[], 0x10}}, 0x0) sendmsg$key(r6, 0x0, 0x0) close(r6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="8c0000000906010200000000000000000200ffff08000940000000390900020073797a310000000005000100070000005c0008801c00078018000180140002"], 0x8c}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) sendmsg$netlink(r0, &(0x7f00000000c0)={0x0, 0xfffffffffffffe29, &(0x7f0000000b40)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="100000001000010000000000fdff7d02c48819642d19ecf670925a0029d498338b73e7bedc"], 0x10}], 0x1}, 0x0) 36.835403701s ago: executing program 1 (id=1808): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x60, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ctinfo={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x3f00}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x5}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000000c0)='bic\x00', 0x4) listen(r1, 0x4000) close(r1) getsockopt$EBT_SO_GET_ENTRIES(r1, 0x0, 0x81, &(0x7f0000000240)={'filter\x00', 0x0, 0x3, 0xf4, [0x3, 0x401, 0x5, 0xf87a, 0x9, 0x3], 0x6, &(0x7f00000000c0)=[{}, {}, {}, {}, {}, {}], &(0x7f0000000140)=""/244}, &(0x7f0000000300)=0x78) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)={0x14, r4, 0x200, 0x70bd29, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8054}, 0x4040014) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000440)={&(0x7f0000000380)={0x94, r4, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'caif0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1_to_bond\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'batadv_slave_1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'vlan1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x2}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) 36.39018626s ago: executing program 3 (id=1809): r0 = socket(0x11, 0x800000003, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r4, &(0x7f0000001e40)=[{{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000480)=""/220, 0xdc}, {&(0x7f0000000300)=""/122, 0x7a}, {&(0x7f0000000400)=""/86, 0x56}, {&(0x7f0000000800)=""/33, 0x21}, {&(0x7f0000000180)=""/47, 0x2f}], 0x5}}], 0x2, 0x10002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="2800fddbdf250700000300"/20, @ANYRES32=r1, @ANYBLOB="020046000a000200bbbbbbbbbbbb0000"], 0x28}, 0x1, 0x0, 0x0, 0x40884}, 0x0) 36.273223929s ago: executing program 3 (id=1810): socket$igmp6(0xa, 0x3, 0x2) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x18, &(0x7f00000000c0), 0x31}, 0x0) 36.152148795s ago: executing program 3 (id=1811): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r0, &(0x7f0000002300)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c, &(0x7f0000000080)=[{&(0x7f00000022c0)='`', 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000000940)='z', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) 36.040044065s ago: executing program 3 (id=1812): unshare(0x4020380) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) r0 = epoll_create1(0x0) r1 = socket(0x1, 0x80802, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, 0xffffffffffffffff, &(0x7f0000000100)={0xa000000d}) pipe(0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) shutdown(r1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x900) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c00"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r4 = socket$inet_udp(0x2, 0x2, 0x0) pipe(&(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r3, 0x0, 0xffffffffffff8000, 0x0) close(r6) close(r4) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x2d0, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x330) splice(r2, 0x0, r4, 0x0, 0x1100000000f336, 0x0) socket$packet(0x11, 0x2, 0x300) 35.095786462s ago: executing program 3 (id=1813): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x700, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="81ffffff000000001c0012800b00010067726574617000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\r\x00\x00\x00\x007'], 0x44}}, 0x0) 34.51971983s ago: executing program 0 (id=1814): r0 = socket$inet(0x2, 0x4000000805, 0x0) (async) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x20000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r7}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={r7, 0xf6, "4a1ce9130018fea4bb09dd88c998ce86098340c6925d9099ebe1e374b7c971cccd44f8f3dd25e778a1ea42c9cfd1d533b50ac01c4a8703606a109d5a98d696faf84d2c8960c933096a14169b6f174c41cffcec479ca07fcc4f223a43e17b13f1b74f9117feb7728743662fb91028a1428f11762f438332a11502dd65645c92e722c38e52064f17315bc94d4d6fc9f7e3c95d50cde0f120de92da963642f69adf250aed066068b8ea087d521c0e93bd3fa75e146e00e0d81bec458118b3cc84f5e49d4c8c1aa4e3658bb4f69cb4f77bd041e520864bca8af8224962da6a9c876c94aebc5497eb06be2eef0dd3561d819274651f840d24"}, &(0x7f0000000100)=0xfe) (async) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x147) (async) close(r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r10, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x50, 0x1, 0x2, 0x4}, {0x6, 0x0, 0x3}]}) write$ppp(r10, &(0x7f0000000180)="03046e", 0x3) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, 0x0, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x21, &(0x7f00000003c0)=[{&(0x7f0000000740)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8001b000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb7e4ce1b14d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bdffcaab", 0xd8}], 0x1}, 0x20000800) 34.448439551s ago: executing program 1 (id=1815): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fbdbdf251900000008000300", @ANYRES32=r2], 0x34}, 0x1, 0x0, 0x0, 0x2004c051}, 0x14) 34.447285701s ago: executing program 4 (id=1816): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) setsockopt$inet6_tcp_int(r0, 0x6, 0x18, &(0x7f0000000540)=0x1000000, 0x2) 34.386780015s ago: executing program 3 (id=1817): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x14, r1, 0x1}, 0x14}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) accept(r2, &(0x7f0000000080)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @initdev}}}, &(0x7f0000000100)=0x80) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000800000008000300", @ANYRES32=r4], 0x1c}, 0x1, 0x0, 0x0, 0x24000040}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r3, &(0x7f0000001800)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x202000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20008010}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00'}, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x11, 0x0, 0x0, @u64=0x20}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1, 0x0, 0x0, 0x11}, 0x0) 34.38594981s ago: executing program 2 (id=1818): r0 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x0, 0x4, 0x0, 0x6, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f00000010c0)=0xffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x14, 0x0, 0x20, 0x70bd25, 0x25dfdbfe, {}, [@handle=@nsim={{}, {0x0, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_NODE_NAME={0x0, 0xa8, @name2}, @DEVLINK_ATTR_PORT_INDEX={0x0, 0x3, 0x2}]}, 0xfffffe52}, 0x1, 0x0, 0x0, 0x44850}, 0x0) sendmsg$kcm(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2000c040) 34.271015993s ago: executing program 1 (id=1819): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, 0x0}, 0x44040) r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x2, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001c00)={&(0x7f0000000b40)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c000000060000000000000002000006040000000300000000000000020000c60000000000002e61"], 0x0, 0x3a, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r5 = accept$ax25(0xffffffffffffffff, &(0x7f00000000c0)={{0x3, @bcast}, [@null, @default, @null, @default, @netrom, @rose, @remote, @netrom]}, &(0x7f0000000180)=0x48) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'rose0\x00', 0x112}) socket$netlink(0x10, 0x3, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r2) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r8, 0x800, 0x70bd2a, 0x25dfdbfc, {}, [@TIPC_NLA_SOCK={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xe0f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x4}]}, @TIPC_NLA_NODE={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4091}, 0x40004) sendmsg$IPCTNL_MSG_CT_NEW(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="500000000301010400000000000000000a0000003c0002800c00028005000100060000002c000180140003"], 0x50}}, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f00000001c0)={0x0, 0x0}, &(0x7f0000000080)=0xc) ioctl$TUNSETOWNER(r6, 0x400454d0, r9) ioctl$SIOCAX25GETUID(r5, 0x89e0, &(0x7f00000001c0)={0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, r9}) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r4, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x2, 0x1}}}}, 0x30}}, 0x0) setsockopt$sock_attach_bpf(r1, 0x6, 0xd, &(0x7f0000000000), 0x4) 31.444020092s ago: executing program 4 (id=1820): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}}, 0x0) (fail_nth: 20) 22.106417831s ago: executing program 2 (id=1821): socket$packet(0x11, 0x2, 0x300) socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_XFRM_DIR={0x5, 0x3, 0x2}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x6}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xcc}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x5, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x4, 0x3, 0xa4, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0xc, 0x4, 0x4, 0xa4, 0x8, r1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x20, 0x1, 0x2, 0xf07, 0x0, 0x0, {0xa, 0x0, 0x1}, [@CTA_EXPECT_MASTER={0xc, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x2ef84f70c2432ac2}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x12012, r7, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000001000000000000000001851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000001000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="14010000260001002dbd7000fddbdf2503"], 0x114}], 0x1, 0x0, 0x0, 0x5}, 0x50) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c0005006c000000000000000c0002000000000000000000040007800c000800000000000000000008000100000000004400078008000100", @ANYRES32, @ANYBLOB="38000100", @ANYRES32=r5, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB="08000100", @ANYBLOB="06"], 0x90}}, 0x0) 0s ago: executing program 32 (id=1814): r0 = socket$inet(0x2, 0x4000000805, 0x0) (async) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) (async) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000100)={'vxcan1\x00', 0x0}) (async) r6 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r6, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r6, &(0x7f0000000200)={&(0x7f0000000340)={0x1d, r5, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r4, @ANYBLOB="3bf81bb9f9"], 0x20000600}}, 0x0) sendmsg$can_bcm(r6, &(0x7f0000000080)={&(0x7f0000000340)={0x1d, r3, 0x3f420f00}, 0x10, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[], 0x4640}, 0x2}, 0x20000000) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r7}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000000)={r7, 0xf6, "4a1ce9130018fea4bb09dd88c998ce86098340c6925d9099ebe1e374b7c971cccd44f8f3dd25e778a1ea42c9cfd1d533b50ac01c4a8703606a109d5a98d696faf84d2c8960c933096a14169b6f174c41cffcec479ca07fcc4f223a43e17b13f1b74f9117feb7728743662fb91028a1428f11762f438332a11502dd65645c92e722c38e52064f17315bc94d4d6fc9f7e3c95d50cde0f120de92da963642f69adf250aed066068b8ea087d521c0e93bd3fa75e146e00e0d81bec458118b3cc84f5e49d4c8c1aa4e3658bb4f69cb4f77bd041e520864bca8af8224962da6a9c876c94aebc5497eb06be2eef0dd3561d819274651f840d24"}, &(0x7f0000000100)=0xfe) (async) r8 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r8, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r8, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x147) (async) close(r8) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x121c02, 0x0) ioctl$PPPIOCNEWUNIT(r10, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r10, 0x40107446, &(0x7f00000003c0)={0x2, &(0x7f0000000080)=[{0x50, 0x1, 0x2, 0x4}, {0x6, 0x0, 0x3}]}) write$ppp(r10, &(0x7f0000000180)="03046e", 0x3) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r9, 0x84, 0x1, 0x0, 0x0) r11 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r11, &(0x7f0000000940)={0x0, 0x21, &(0x7f00000003c0)=[{&(0x7f0000000740)="d800000010008104687da3aa7143a0b8c81d080b25000000e8fe55a11800150006001400000000120800030043000040a8001b000400014006000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4260000001fb7e4ce1b14d6d93424841f468430dfe1d9d322fe7c0aaa16b8ddc64193071e9f8775730d16a4683f7a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bdffcaab", 0xd8}], 0x1}, 0x20000800) kernel console output (not intermixed with test programs): 576191][T10039] dump_stack_lvl+0x241/0x360 [ 214.580989][T10039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.586208][T10039] ? __pfx__printk+0x10/0x10 [ 214.590815][T10039] ? __pfx_lock_release+0x10/0x10 [ 214.595888][T10039] should_fail_ex+0x3b0/0x4e0 [ 214.600587][T10039] _copy_from_user+0x2f/0xc0 [ 214.605199][T10039] rfcomm_dev_ioctl+0x256/0x2220 [ 214.610164][T10039] ? tomoyo_path_number_perm+0x208/0x880 [ 214.615817][T10039] ? __pfx_lock_release+0x10/0x10 [ 214.620865][T10039] ? lockdep_hardirqs_on+0x99/0x150 [ 214.626081][T10039] ? __pfx_rfcomm_dev_ioctl+0x10/0x10 [ 214.631564][T10039] ? kfree+0x1a0/0x440 [ 214.635649][T10039] ? tomoyo_path_number_perm+0x68d/0x880 [ 214.641306][T10039] ? bt_sock_ioctl+0xe9/0x2c0 [ 214.646005][T10039] sock_do_ioctl+0x158/0x460 [ 214.650622][T10039] ? __pfx_sock_do_ioctl+0x10/0x10 [ 214.655761][T10039] sock_ioctl+0x626/0x8e0 [ 214.660107][T10039] ? __pfx_sock_ioctl+0x10/0x10 [ 214.664974][T10039] ? __fget_files+0x29/0x470 [ 214.669588][T10039] ? __fget_files+0x3f3/0x470 [ 214.674297][T10039] ? __pfx_sock_ioctl+0x10/0x10 [ 214.679166][T10039] __se_sys_ioctl+0xf9/0x170 [ 214.683823][T10039] do_syscall_64+0xf3/0x230 [ 214.688352][T10039] ? clear_bhb_loop+0x35/0x90 [ 214.693055][T10039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.698963][T10039] RIP: 0033:0x7f1b96b7e719 [ 214.703393][T10039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 214.723033][T10039] RSP: 002b:00007f1b94ff6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 214.731507][T10039] RAX: ffffffffffffffda RBX: 00007f1b96d35f80 RCX: 00007f1b96b7e719 [ 214.739494][T10039] RDX: 0000000020000100 RSI: 00000000400452c8 RDI: 0000000000000005 [ 214.747480][T10039] RBP: 00007f1b94ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 214.755552][T10039] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 214.763536][T10039] R13: 0000000000000000 R14: 00007f1b96d35f80 R15: 00007ffd43b00b18 [ 214.771545][T10039] [ 215.093334][T10063] FAULT_INJECTION: forcing a failure. [ 215.093334][T10063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 215.106683][T10063] CPU: 0 UID: 0 PID: 10063 Comm: syz.3.1007 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 215.117593][T10063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 215.127715][T10063] Call Trace: [ 215.131035][T10063] [ 215.134013][T10063] dump_stack_lvl+0x241/0x360 [ 215.138755][T10063] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.144016][T10063] ? __pfx__printk+0x10/0x10 [ 215.148660][T10063] ? do_vfs_ioctl+0xf08/0x2e40 [ 215.153583][T10063] ? __pfx_lock_release+0x10/0x10 [ 215.158809][T10063] should_fail_ex+0x3b0/0x4e0 [ 215.163550][T10063] _copy_from_user+0x2f/0xc0 [ 215.168650][T10063] get_user_ifreq+0xc3/0x200 [ 215.174086][T10063] inet_ioctl+0x3a4/0x4f0 [ 215.178746][T10063] ? __pfx_inet_ioctl+0x10/0x10 [ 215.183654][T10063] ? lockdep_hardirqs_on+0x99/0x150 [ 215.188933][T10063] sock_do_ioctl+0x158/0x460 [ 215.193585][T10063] ? __pfx_sock_do_ioctl+0x10/0x10 [ 215.199387][T10063] sock_ioctl+0x626/0x8e0 [ 215.203799][T10063] ? __pfx_sock_ioctl+0x10/0x10 [ 215.208710][T10063] ? __fget_files+0x29/0x470 [ 215.213450][T10063] ? __fget_files+0x3f3/0x470 [ 215.218200][T10063] ? __pfx_sock_ioctl+0x10/0x10 [ 215.223116][T10063] __se_sys_ioctl+0xf9/0x170 [ 215.227862][T10063] do_syscall_64+0xf3/0x230 [ 215.232429][T10063] ? clear_bhb_loop+0x35/0x90 [ 215.237252][T10063] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.243195][T10063] RIP: 0033:0x7fb2d477e719 [ 215.247662][T10063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.268102][T10063] RSP: 002b:00007fb2d5497038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 215.277189][T10063] RAX: ffffffffffffffda RBX: 00007fb2d4935f80 RCX: 00007fb2d477e719 [ 215.285639][T10063] RDX: 0000000020000540 RSI: 000000000000891c RDI: 0000000000000003 [ 215.293664][T10063] RBP: 00007fb2d5497090 R08: 0000000000000000 R09: 0000000000000000 [ 215.301782][T10063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.310069][T10063] R13: 0000000000000000 R14: 00007fb2d4935f80 R15: 00007fffa91dfb88 [ 215.318117][T10063] [ 215.520478][T10073] bridge13: entered promiscuous mode [ 215.557462][T10077] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1012'. [ 215.757755][T10089] FAULT_INJECTION: forcing a failure. [ 215.757755][T10089] name failslab, interval 1, probability 0, space 0, times 0 [ 215.774375][T10089] CPU: 1 UID: 0 PID: 10089 Comm: syz.4.1015 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 215.785232][T10089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 215.795339][T10089] Call Trace: [ 215.798662][T10089] [ 215.801639][T10089] dump_stack_lvl+0x241/0x360 [ 215.806379][T10089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.811898][T10089] ? __pfx__printk+0x10/0x10 [ 215.816552][T10089] ? __kmalloc_node_noprof+0xb7/0x440 [ 215.822859][T10089] ? __pfx___might_resched+0x10/0x10 [ 215.828217][T10089] should_fail_ex+0x3b0/0x4e0 [ 215.832962][T10089] should_failslab+0xac/0x100 [ 215.837700][T10089] __kmalloc_node_noprof+0xdf/0x440 [ 215.842969][T10089] ? __kvmalloc_node_noprof+0x72/0x190 [ 215.848495][T10089] __kvmalloc_node_noprof+0x72/0x190 [ 215.853798][T10089] xt_alloc_table_info+0x3d/0xa0 [ 215.858755][T10089] do_ip6t_set_ctl+0xba0/0x1270 [ 215.863628][T10089] ? __pfx___might_resched+0x10/0x10 [ 215.868950][T10089] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 215.874251][T10089] ? __pfx_lock_release+0x10/0x10 [ 215.879327][T10089] ? __mutex_unlock_slowpath+0x21d/0x750 [ 215.885036][T10089] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 215.891033][T10089] ? aa_sk_perm+0x96d/0xab0 [ 215.895580][T10089] ? __pfx_aa_sk_perm+0x10/0x10 [ 215.900451][T10089] nf_setsockopt+0x295/0x2c0 [ 215.905196][T10089] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 215.911198][T10089] do_sock_setsockopt+0x3af/0x720 [ 215.916251][T10089] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 215.921835][T10089] ? __fget_files+0x29/0x470 [ 215.926484][T10089] ? __fget_files+0x3f3/0x470 [ 215.931198][T10089] ? __fget_files+0x29/0x470 [ 215.935826][T10089] __sys_setsockopt+0x1a2/0x250 [ 215.940710][T10089] __x64_sys_setsockopt+0xb5/0xd0 [ 215.945889][T10089] do_syscall_64+0xf3/0x230 [ 215.950441][T10089] ? clear_bhb_loop+0x35/0x90 [ 215.955148][T10089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.961319][T10089] RIP: 0033:0x7ff15857e719 [ 215.965752][T10089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.985384][T10089] RSP: 002b:00007ff15929a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 215.993908][T10089] RAX: ffffffffffffffda RBX: 00007ff158735f80 RCX: 00007ff15857e719 [ 216.001908][T10089] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 216.009904][T10089] RBP: 00007ff15929a090 R08: 00000000000007e0 R09: 0000000000000000 [ 216.017889][T10089] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.025977][T10089] R13: 0000000000000000 R14: 00007ff158735f80 R15: 00007ffd0cb30938 [ 216.033992][T10089] [ 216.267596][T10094] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1018'. [ 216.336242][T10100] FAULT_INJECTION: forcing a failure. [ 216.336242][T10100] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.350410][T10100] CPU: 0 UID: 0 PID: 10100 Comm: syz.2.1019 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 216.361239][T10100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 216.371516][T10100] Call Trace: [ 216.374852][T10100] [ 216.377837][T10100] dump_stack_lvl+0x241/0x360 [ 216.382580][T10100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.387847][T10100] ? __pfx__printk+0x10/0x10 [ 216.392497][T10100] ? __pfx_lock_release+0x10/0x10 [ 216.397780][T10100] should_fail_ex+0x3b0/0x4e0 [ 216.402528][T10100] _copy_from_iter+0x21f/0x1e70 [ 216.407443][T10100] ? __virt_addr_valid+0x183/0x530 [ 216.412617][T10100] ? __pfx_lock_release+0x10/0x10 [ 216.417704][T10100] ? alloc_pages_mpol_noprof+0x417/0x680 [ 216.423367][T10100] ? __pfx__copy_from_iter+0x10/0x10 [ 216.428684][T10100] ? __virt_addr_valid+0x183/0x530 [ 216.433829][T10100] ? __virt_addr_valid+0x183/0x530 [ 216.438962][T10100] ? __virt_addr_valid+0x45f/0x530 [ 216.444284][T10100] ? __check_object_size+0x48e/0x900 [ 216.449604][T10100] af_alg_sendmsg+0x1519/0x2650 [ 216.454496][T10100] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 216.459809][T10100] ? __pfx_aa_sk_perm+0x10/0x10 [ 216.464682][T10100] ? __pfx_lock_release+0x10/0x10 [ 216.469752][T10100] ? __import_iovec+0x590/0x870 [ 216.474645][T10100] ? aa_sock_msg_perm+0x91/0x160 [ 216.479603][T10100] ? skcipher_sendmsg+0x28/0xf0 [ 216.484563][T10100] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 216.489954][T10100] __sock_sendmsg+0x221/0x270 [ 216.495057][T10100] ____sys_sendmsg+0x52a/0x7e0 [ 216.499959][T10100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.505338][T10100] __sys_sendmsg+0x292/0x380 [ 216.510062][T10100] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.515508][T10100] ? __pfx_vfs_write+0x10/0x10 [ 216.520682][T10100] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.527041][T10100] ? do_syscall_64+0x100/0x230 [ 216.531917][T10100] ? do_syscall_64+0xb6/0x230 [ 216.536629][T10100] do_syscall_64+0xf3/0x230 [ 216.541149][T10100] ? clear_bhb_loop+0x35/0x90 [ 216.546126][T10100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.552146][T10100] RIP: 0033:0x7ffa7797e719 [ 216.556599][T10100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.576832][T10100] RSP: 002b:00007ffa7872c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.585283][T10100] RAX: ffffffffffffffda RBX: 00007ffa77b35f80 RCX: 00007ffa7797e719 [ 216.593445][T10100] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 216.601438][T10100] RBP: 00007ffa7872c090 R08: 0000000000000000 R09: 0000000000000000 [ 216.609515][T10100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.617503][T10100] R13: 0000000000000000 R14: 00007ffa77b35f80 R15: 00007fff90522758 [ 216.625552][T10100] [ 216.666387][T10104] FAULT_INJECTION: forcing a failure. [ 216.666387][T10104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.679206][T10102] trusted_key: syz.2.1019 sent an empty control message without MSG_MORE. [ 216.735550][T10104] CPU: 0 UID: 0 PID: 10104 Comm: syz.4.1020 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 216.746585][T10104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 216.756781][T10104] Call Trace: [ 216.760103][T10104] [ 216.763068][T10104] dump_stack_lvl+0x241/0x360 [ 216.767805][T10104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.773149][T10104] ? __pfx__printk+0x10/0x10 [ 216.774134][T10106] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1018'. [ 216.777777][T10104] ? __pfx_lock_release+0x10/0x10 [ 216.791799][T10104] should_fail_ex+0x3b0/0x4e0 [ 216.796530][T10104] _copy_from_iter+0x21f/0x1e70 [ 216.801441][T10104] ? __virt_addr_valid+0x183/0x530 [ 216.806614][T10104] ? __pfx_lock_release+0x10/0x10 [ 216.811812][T10104] ? __alloc_skb+0x28f/0x440 [ 216.816461][T10104] ? __pfx__copy_from_iter+0x10/0x10 [ 216.821821][T10104] ? __virt_addr_valid+0x183/0x530 [ 216.826998][T10104] ? __virt_addr_valid+0x183/0x530 [ 216.832185][T10104] ? __virt_addr_valid+0x45f/0x530 [ 216.837890][T10104] ? __check_object_size+0x48e/0x900 [ 216.843517][T10104] netlink_sendmsg+0x73d/0xcb0 [ 216.848354][T10104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.853702][T10104] ? aa_sock_msg_perm+0x91/0x160 [ 216.858715][T10104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.864074][T10104] __sock_sendmsg+0x221/0x270 [ 216.868819][T10104] ____sys_sendmsg+0x52a/0x7e0 [ 216.873656][T10104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.879022][T10104] __sys_sendmsg+0x292/0x380 [ 216.883680][T10104] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.888955][T10104] ? __pfx_vfs_write+0x10/0x10 [ 216.893887][T10104] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 216.900284][T10104] ? do_syscall_64+0x100/0x230 [ 216.905101][T10104] ? do_syscall_64+0xb6/0x230 [ 216.909870][T10104] do_syscall_64+0xf3/0x230 [ 216.914432][T10104] ? clear_bhb_loop+0x35/0x90 [ 216.919267][T10104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.925236][T10104] RIP: 0033:0x7ff15857e719 [ 216.929705][T10104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.949561][T10104] RSP: 002b:00007ff15929a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.958038][T10104] RAX: ffffffffffffffda RBX: 00007ff158735f80 RCX: 00007ff15857e719 [ 216.966252][T10104] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000000a [ 216.974376][T10104] RBP: 00007ff15929a090 R08: 0000000000000000 R09: 0000000000000000 [ 216.982497][T10104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.990527][T10104] R13: 0000000000000000 R14: 00007ff158735f80 R15: 00007ffd0cb30938 [ 216.998921][T10104] [ 217.267449][T10109] veth0_to_team: entered promiscuous mode [ 217.284015][T10109] veth0_to_team: entered allmulticast mode [ 217.537623][T10136] Cannot find del_set index 286 as target [ 217.545930][T10136] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1028'. [ 217.555576][T10137] FAULT_INJECTION: forcing a failure. [ 217.555576][T10137] name failslab, interval 1, probability 0, space 0, times 0 [ 217.575509][T10137] CPU: 1 UID: 0 PID: 10137 Comm: syz.2.1031 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 217.586462][T10137] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 217.596556][T10137] Call Trace: [ 217.599886][T10137] [ 217.603792][T10137] dump_stack_lvl+0x241/0x360 [ 217.608535][T10137] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.613966][T10137] ? __pfx__printk+0x10/0x10 [ 217.618583][T10137] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 217.624080][T10137] ? __pfx___might_resched+0x10/0x10 [ 217.629442][T10137] should_fail_ex+0x3b0/0x4e0 [ 217.634195][T10137] should_failslab+0xac/0x100 [ 217.638930][T10137] ? find_css_set+0xb07/0x1720 [ 217.643987][T10137] __kmalloc_cache_noprof+0x6c/0x2c0 [ 217.649337][T10137] ? _raw_spin_unlock_irq+0x23/0x50 [ 217.654705][T10137] find_css_set+0xb07/0x1720 [ 217.659490][T10137] ? __pfx_find_css_set+0x10/0x10 [ 217.664624][T10137] cgroup_migrate_prepare_dst+0x124/0x690 [ 217.670401][T10137] ? lockdep_hardirqs_on+0x99/0x150 [ 217.676363][T10137] cgroup_attach_task+0x697/0xaf0 [ 217.681511][T10137] ? cgroup_attach_task+0x2b5/0xaf0 [ 217.686756][T10137] ? __pfx_cgroup_attach_task+0x10/0x10 [ 217.692547][T10137] ? _atomic_dec_and_lock+0x9a/0x130 [ 217.697923][T10137] ? cgroup_attach_permissions+0x4fb/0x9f0 [ 217.704222][T10137] ? revert_creds+0xba/0xd0 [ 217.709047][T10137] __cgroup_procs_write+0x2bc/0x4f0 [ 217.714408][T10137] ? __pfx___cgroup_procs_write+0x10/0x10 [ 217.721195][T10137] ? __pfx_cgroup_procs_write+0x10/0x10 [ 217.726872][T10137] cgroup_procs_write+0x29/0x50 [ 217.731805][T10137] ? __pfx_cgroup_procs_write+0x10/0x10 [ 217.737497][T10137] cgroup_file_write+0x2ce/0x6d0 [ 217.742492][T10137] ? kernfs_fop_write_iter+0x1ea/0x500 [ 217.748017][T10137] ? __pfx_cgroup_file_write+0x10/0x10 [ 217.753587][T10137] ? __virt_addr_valid+0x183/0x530 [ 217.758762][T10137] ? __pfx_cgroup_file_write+0x10/0x10 [ 217.764274][T10137] kernfs_fop_write_iter+0x3a0/0x500 [ 217.769621][T10137] vfs_write+0xaeb/0xd30 [ 217.774000][T10137] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 217.780035][T10137] ? __pfx_vfs_write+0x10/0x10 [ 217.784867][T10137] ? fdget_pos+0x24e/0x320 [ 217.789403][T10137] ksys_write+0x183/0x2b0 [ 217.793785][T10137] ? __pfx_ksys_write+0x10/0x10 [ 217.798662][T10137] ? do_syscall_64+0x100/0x230 [ 217.803552][T10137] ? do_syscall_64+0xb6/0x230 [ 217.808362][T10137] do_syscall_64+0xf3/0x230 [ 217.812890][T10137] ? clear_bhb_loop+0x35/0x90 [ 217.818051][T10137] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 217.824014][T10137] RIP: 0033:0x7ffa7797e719 [ 217.828468][T10137] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 217.848926][T10137] RSP: 002b:00007ffa7872c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 217.857382][T10137] RAX: ffffffffffffffda RBX: 00007ffa77b35f80 RCX: 00007ffa7797e719 [ 217.865493][T10137] RDX: 0000000000000012 RSI: 0000000020000c40 RDI: 0000000000000004 [ 217.873487][T10137] RBP: 00007ffa7872c090 R08: 0000000000000000 R09: 0000000000000000 [ 217.881495][T10137] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 217.889621][T10137] R13: 0000000000000000 R14: 00007ffa77b35f80 R15: 00007fff90522758 [ 217.897737][T10137] [ 217.916025][T10140] FAULT_INJECTION: forcing a failure. [ 217.916025][T10140] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 217.956901][T10140] CPU: 0 UID: 0 PID: 10140 Comm: syz.0.1032 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 217.968373][T10140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 217.978671][T10140] Call Trace: [ 217.981985][T10140] [ 217.985063][T10140] dump_stack_lvl+0x241/0x360 [ 217.989802][T10140] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.995062][T10140] ? __pfx__printk+0x10/0x10 [ 217.999726][T10140] ? __pfx_lock_release+0x10/0x10 [ 218.004823][T10140] should_fail_ex+0x3b0/0x4e0 [ 218.009654][T10140] _copy_from_iter+0x21f/0x1e70 [ 218.014668][T10140] ? __virt_addr_valid+0x183/0x530 [ 218.019975][T10140] ? __pfx_lock_release+0x10/0x10 [ 218.025170][T10140] ? __alloc_skb+0x28f/0x440 [ 218.029819][T10140] ? __pfx__copy_from_iter+0x10/0x10 [ 218.035228][T10140] ? __virt_addr_valid+0x183/0x530 [ 218.040398][T10140] ? __virt_addr_valid+0x183/0x530 [ 218.045608][T10140] ? __virt_addr_valid+0x45f/0x530 [ 218.050955][T10140] ? __check_object_size+0x48e/0x900 [ 218.056395][T10140] netlink_sendmsg+0x73d/0xcb0 [ 218.061328][T10140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.066949][T10140] ? aa_sock_msg_perm+0x91/0x160 [ 218.071994][T10140] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.077352][T10140] __sock_sendmsg+0x221/0x270 [ 218.082461][T10140] ____sys_sendmsg+0x52a/0x7e0 [ 218.087913][T10140] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.093584][T10140] __sys_sendmsg+0x292/0x380 [ 218.098272][T10140] ? __pfx___sys_sendmsg+0x10/0x10 [ 218.103501][T10140] ? __pfx_vfs_write+0x10/0x10 [ 218.108715][T10140] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 218.115382][T10140] ? do_syscall_64+0x100/0x230 [ 218.120398][T10140] ? do_syscall_64+0xb6/0x230 [ 218.125331][T10140] do_syscall_64+0xf3/0x230 [ 218.129985][T10140] ? clear_bhb_loop+0x35/0x90 [ 218.134919][T10140] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.137568][T10145] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1035'. [ 218.141212][T10140] RIP: 0033:0x7fd38957e719 [ 218.141250][T10140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.141270][T10140] RSP: 002b:00007fd38a2bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.141296][T10140] RAX: ffffffffffffffda RBX: 00007fd389735f80 RCX: 00007fd38957e719 [ 218.141313][T10140] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 218.141328][T10140] RBP: 00007fd38a2bb090 R08: 0000000000000000 R09: 0000000000000000 [ 218.141343][T10140] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.141357][T10140] R13: 0000000000000000 R14: 00007fd389735f80 R15: 00007fff6a3fba98 [ 218.141389][T10140] [ 218.421563][T10151] FAULT_INJECTION: forcing a failure. [ 218.421563][T10151] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.426439][T10149] Cannot find del_set index 286 as target [ 218.452955][T10151] CPU: 0 UID: 0 PID: 10151 Comm: syz.2.1037 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 218.463905][T10151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 218.474521][T10151] Call Trace: [ 218.477819][T10151] [ 218.480787][T10151] dump_stack_lvl+0x241/0x360 [ 218.485578][T10151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.490816][T10151] ? __pfx__printk+0x10/0x10 [ 218.495436][T10151] ? snprintf+0xda/0x120 [ 218.499720][T10151] should_fail_ex+0x3b0/0x4e0 [ 218.504631][T10151] _copy_to_user+0x31/0xb0 [ 218.510297][T10151] simple_read_from_buffer+0xca/0x150 [ 218.517815][T10151] proc_fail_nth_read+0x1e9/0x250 [ 218.523528][T10151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 218.529209][T10151] ? rw_verify_area+0x55e/0x6f0 [ 218.534308][T10151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 218.540698][T10151] vfs_read+0x1fc/0xb70 [ 218.545400][T10151] ? fdget_pos+0x24e/0x320 [ 218.552045][T10151] ? __pfx_vfs_read+0x10/0x10 [ 218.556889][T10151] ? __fget_files+0x3f3/0x470 [ 218.561815][T10151] ? fdget_pos+0x24e/0x320 [ 218.566268][T10151] ksys_read+0x183/0x2b0 [ 218.570565][T10151] ? __pfx_ksys_read+0x10/0x10 [ 218.575378][T10151] ? do_syscall_64+0x100/0x230 [ 218.580167][T10151] ? do_syscall_64+0xb6/0x230 [ 218.584865][T10151] do_syscall_64+0xf3/0x230 [ 218.589679][T10151] ? clear_bhb_loop+0x35/0x90 [ 218.594388][T10151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.600327][T10151] RIP: 0033:0x7ffa7797d15c [ 218.604778][T10151] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 218.625278][T10151] RSP: 002b:00007ffa7872c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 218.633727][T10151] RAX: ffffffffffffffda RBX: 00007ffa77b35f80 RCX: 00007ffa7797d15c [ 218.641808][T10151] RDX: 000000000000000f RSI: 00007ffa7872c0a0 RDI: 0000000000000004 [ 218.655534][T10151] RBP: 00007ffa7872c090 R08: 0000000000000000 R09: 0000000000000000 [ 218.663813][T10151] R10: 0000000020000280 R11: 0000000000000246 R12: 0000000000000001 [ 218.672711][T10151] R13: 0000000000000000 R14: 00007ffa77b35f80 R15: 00007fff90522758 [ 218.680838][T10151] [ 218.700800][T10149] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1036'. [ 218.717364][T10159] FAULT_INJECTION: forcing a failure. [ 218.717364][T10159] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.731193][T10159] CPU: 0 UID: 0 PID: 10159 Comm: syz.1.1040 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 218.742023][T10159] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 218.752128][T10159] Call Trace: [ 218.755458][T10159] [ 218.758430][T10159] dump_stack_lvl+0x241/0x360 [ 218.759756][T10155] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1039'. [ 218.763314][T10159] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.763350][T10159] ? __pfx__printk+0x10/0x10 [ 218.774193][T10158] FAULT_INJECTION: forcing a failure. [ 218.774193][T10158] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.777712][T10159] ? __pfx_lock_release+0x10/0x10 [ 218.801401][T10159] should_fail_ex+0x3b0/0x4e0 [ 218.806147][T10159] _copy_from_iter+0x21f/0x1e70 [ 218.811063][T10159] ? __virt_addr_valid+0x183/0x530 [ 218.816209][T10159] ? __pfx_lock_release+0x10/0x10 [ 218.821289][T10159] ? __alloc_skb+0x28f/0x440 [ 218.825939][T10159] ? __pfx__copy_from_iter+0x10/0x10 [ 218.831289][T10159] ? __virt_addr_valid+0x183/0x530 [ 218.836481][T10159] ? __virt_addr_valid+0x183/0x530 [ 218.841908][T10159] ? __virt_addr_valid+0x45f/0x530 [ 218.847065][T10159] ? __check_object_size+0x48e/0x900 [ 218.852502][T10159] netlink_sendmsg+0x73d/0xcb0 [ 218.857332][T10159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.862801][T10159] ? aa_sock_msg_perm+0x91/0x160 [ 218.867978][T10159] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.873317][T10159] __sock_sendmsg+0x221/0x270 [ 218.878060][T10159] ____sys_sendmsg+0x52a/0x7e0 [ 218.882880][T10159] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.888738][T10159] __sys_sendmsg+0x292/0x380 [ 218.893599][T10159] ? __pfx___sys_sendmsg+0x10/0x10 [ 218.899242][T10159] ? __pfx_vfs_write+0x10/0x10 [ 218.904386][T10159] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 218.911226][T10159] ? do_syscall_64+0x100/0x230 [ 218.916377][T10159] ? do_syscall_64+0xb6/0x230 [ 218.921086][T10159] do_syscall_64+0xf3/0x230 [ 218.925882][T10159] ? clear_bhb_loop+0x35/0x90 [ 218.930613][T10159] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.936574][T10159] RIP: 0033:0x7f1b96b7e719 [ 218.941032][T10159] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.960759][T10159] RSP: 002b:00007f1b94ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.969303][T10159] RAX: ffffffffffffffda RBX: 00007f1b96d35f80 RCX: 00007f1b96b7e719 [ 218.977584][T10159] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 218.985611][T10159] RBP: 00007f1b94ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 218.993636][T10159] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.001651][T10159] R13: 0000000000000000 R14: 00007f1b96d35f80 R15: 00007ffd43b00b18 [ 219.010209][T10159] [ 219.024021][T10158] CPU: 0 UID: 0 PID: 10158 Comm: syz.3.1038 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 219.035061][T10158] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 219.045603][T10158] Call Trace: [ 219.049256][T10158] [ 219.052324][T10158] dump_stack_lvl+0x241/0x360 [ 219.057091][T10158] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.062359][T10158] ? __pfx__printk+0x10/0x10 [ 219.067015][T10158] ? __pfx_lock_release+0x10/0x10 [ 219.072204][T10158] ? kfree+0x1a0/0x440 [ 219.076698][T10158] should_fail_ex+0x3b0/0x4e0 [ 219.081788][T10158] _copy_from_user+0x2f/0xc0 [ 219.086459][T10158] get_user_ifreq+0xc3/0x200 [ 219.091385][T10158] sock_do_ioctl+0x1a5/0x460 [ 219.096824][T10158] ? __pfx_sock_do_ioctl+0x10/0x10 [ 219.102018][T10158] sock_ioctl+0x626/0x8e0 [ 219.106632][T10158] ? __pfx_sock_ioctl+0x10/0x10 [ 219.111634][T10158] ? __fget_files+0x29/0x470 [ 219.116317][T10158] ? __fget_files+0x3f3/0x470 [ 219.121029][T10158] ? __pfx_sock_ioctl+0x10/0x10 [ 219.125951][T10158] __se_sys_ioctl+0xf9/0x170 [ 219.130807][T10158] do_syscall_64+0xf3/0x230 [ 219.135474][T10158] ? clear_bhb_loop+0x35/0x90 [ 219.140866][T10158] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.146901][T10158] RIP: 0033:0x7fb2d477e719 [ 219.151378][T10158] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 219.173883][T10158] RSP: 002b:00007fb2d2bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 219.182654][T10158] RAX: ffffffffffffffda RBX: 00007fb2d4936058 RCX: 00007fb2d477e719 [ 219.191835][T10158] RDX: 0000000020002280 RSI: 0000000000008914 RDI: 0000000000000005 [ 219.199898][T10158] RBP: 00007fb2d2bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 219.207923][T10158] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 219.216897][T10158] R13: 0000000000000000 R14: 00007fb2d4936058 R15: 00007fffa91dfb88 [ 219.225104][T10158] [ 219.305203][T10164] netlink: 'syz.2.1041': attribute type 14 has an invalid length. [ 219.314845][T10172] FAULT_INJECTION: forcing a failure. [ 219.314845][T10172] name failslab, interval 1, probability 0, space 0, times 0 [ 219.367863][T10172] CPU: 0 UID: 0 PID: 10172 Comm: syz.1.1042 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 219.378739][T10172] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 219.388820][T10172] Call Trace: [ 219.392120][T10172] [ 219.395064][T10172] dump_stack_lvl+0x241/0x360 [ 219.399763][T10172] ? __pfx_dump_stack_lvl+0x10/0x10 [ 219.405060][T10172] ? __pfx__printk+0x10/0x10 [ 219.409670][T10172] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 219.415244][T10172] ? __pfx___might_resched+0x10/0x10 [ 219.420561][T10172] should_fail_ex+0x3b0/0x4e0 [ 219.425260][T10172] ? security_file_alloc+0x32/0x310 [ 219.430651][T10172] should_failslab+0xac/0x100 [ 219.435538][T10172] ? security_file_alloc+0x32/0x310 [ 219.440859][T10172] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 219.446296][T10172] security_file_alloc+0x32/0x310 [ 219.451340][T10172] init_file+0x93/0x1e0 [ 219.455520][T10172] alloc_empty_file+0xb8/0x1d0 [ 219.460558][T10172] path_openat+0x107/0x3590 [ 219.465286][T10172] ? stack_trace_save+0x118/0x1d0 [ 219.470331][T10172] ? __lock_acquire+0x1384/0x2050 [ 219.475481][T10172] ? __pfx_stack_trace_save+0x10/0x10 [ 219.481089][T10172] ? mark_lock+0x9a/0x360 [ 219.486683][T10172] ? __lock_acquire+0x1384/0x2050 [ 219.491760][T10172] ? __pfx_path_openat+0x10/0x10 [ 219.497309][T10172] do_filp_open+0x235/0x490 [ 219.502761][T10172] ? __pfx_do_filp_open+0x10/0x10 [ 219.507859][T10172] ? _raw_spin_unlock+0x28/0x50 [ 219.513101][T10172] ? alloc_fd+0x5a1/0x640 [ 219.518095][T10172] do_sys_openat2+0x13e/0x1d0 [ 219.522885][T10172] ? __pfx_do_sys_openat2+0x10/0x10 [ 219.528195][T10172] ? ppp_ioctl+0x457/0x1cd0 [ 219.532815][T10172] __x64_sys_openat+0x247/0x2a0 [ 219.537784][T10172] ? __pfx___x64_sys_openat+0x10/0x10 [ 219.543268][T10172] ? do_syscall_64+0x100/0x230 [ 219.548052][T10172] ? do_syscall_64+0xb6/0x230 [ 219.552863][T10172] do_syscall_64+0xf3/0x230 [ 219.557390][T10172] ? clear_bhb_loop+0x35/0x90 [ 219.562098][T10172] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 219.568028][T10172] RIP: 0033:0x7f1b96b7d0b0 [ 219.572509][T10172] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 219.592145][T10172] RSP: 002b:00007f1b94ff5f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 219.600592][T10172] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1b96b7d0b0 [ 219.608666][T10172] RDX: 0000000000000000 RSI: 00007f1b96bf172e RDI: 00000000ffffff9c [ 219.616653][T10172] RBP: 00007f1b96bf172e R08: 0000000000000000 R09: 0000000000000000 [ 219.624641][T10172] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 219.632634][T10172] R13: 0000000000000000 R14: 00007f1b96d35f80 R15: 00007ffd43b00b18 [ 219.640756][T10172] [ 219.870755][T10184] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1046'. [ 220.000155][T10184] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 220.075946][T10184] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 220.084812][T10184] gretap1: entered promiscuous mode [ 220.091273][T10184] gretap1: entered allmulticast mode [ 220.288181][T10203] FAULT_INJECTION: forcing a failure. [ 220.288181][T10203] name failslab, interval 1, probability 0, space 0, times 0 [ 220.326037][T10203] CPU: 0 UID: 0 PID: 10203 Comm: syz.0.1052 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 220.340231][T10203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 220.351216][T10203] Call Trace: [ 220.354583][T10203] [ 220.357562][T10203] dump_stack_lvl+0x241/0x360 [ 220.362761][T10203] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.368027][T10203] ? __pfx__printk+0x10/0x10 [ 220.372866][T10203] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 220.379242][T10203] ? __pfx___might_resched+0x10/0x10 [ 220.385480][T10203] should_fail_ex+0x3b0/0x4e0 [ 220.390357][T10203] should_failslab+0xac/0x100 [ 220.395318][T10203] ? __alloc_skb+0x1c3/0x440 [ 220.400763][T10203] kmem_cache_alloc_node_noprof+0x71/0x320 [ 220.407549][T10203] __alloc_skb+0x1c3/0x440 [ 220.412475][T10203] ? __pfx___alloc_skb+0x10/0x10 [ 220.418258][T10203] ? __pfx_rtnl_net_getid+0x10/0x10 [ 220.424988][T10203] ? netlink_ack_tlv_len+0x6e/0x200 [ 220.430693][T10203] netlink_ack+0x13f/0xa30 [ 220.436031][T10203] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 220.441983][T10203] netlink_rcv_skb+0x262/0x430 [ 220.447685][T10203] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 220.453727][T10203] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 220.460594][T10203] ? netlink_deliver_tap+0x2e/0x1b0 [ 220.466822][T10203] netlink_unicast+0x7f6/0x990 [ 220.471940][T10203] ? __pfx_netlink_unicast+0x10/0x10 [ 220.478267][T10203] ? __virt_addr_valid+0x183/0x530 [ 220.484042][T10203] ? __check_object_size+0x48e/0x900 [ 220.491048][T10203] netlink_sendmsg+0x8e4/0xcb0 [ 220.498853][T10203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.504497][T10203] ? __pfx_aa_file_perm+0x10/0x10 [ 220.510065][T10203] ? aa_sock_msg_perm+0x91/0x160 [ 220.515825][T10203] ? __pfx_netlink_sendmsg+0x10/0x10 [ 220.521325][T10203] __sock_sendmsg+0x221/0x270 [ 220.526686][T10203] sock_write_iter+0x2d7/0x3f0 [ 220.531928][T10203] ? __pfx_sock_write_iter+0x10/0x10 [ 220.537458][T10203] ? bpf_lsm_file_permission+0x9/0x10 [ 220.543377][T10203] ? security_file_permission+0x74/0x280 [ 220.549855][T10203] vfs_write+0xaeb/0xd30 [ 220.554232][T10203] ? __pfx_sock_write_iter+0x10/0x10 [ 220.560067][T10203] ? __pfx_vfs_write+0x10/0x10 [ 220.565091][T10203] ? fdget_pos+0x19a/0x320 [ 220.569768][T10203] ksys_write+0x183/0x2b0 [ 220.575885][T10203] ? __pfx_ksys_write+0x10/0x10 [ 220.581085][T10203] ? do_syscall_64+0x100/0x230 [ 220.585915][T10203] ? do_syscall_64+0xb6/0x230 [ 220.590646][T10203] do_syscall_64+0xf3/0x230 [ 220.595426][T10203] ? clear_bhb_loop+0x35/0x90 [ 220.600157][T10203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.606092][T10203] RIP: 0033:0x7fd38957e719 [ 220.610635][T10203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 220.632170][T10203] RSP: 002b:00007fd38a2bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 220.641255][T10203] RAX: ffffffffffffffda RBX: 00007fd389735f80 RCX: 00007fd38957e719 [ 220.649256][T10203] RDX: 0000000000000024 RSI: 00000000200000c0 RDI: 0000000000000006 [ 220.657334][T10203] RBP: 00007fd38a2bb090 R08: 0000000000000000 R09: 0000000000000000 [ 220.665326][T10203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 220.673773][T10203] R13: 0000000000000000 R14: 00007fd389735f80 R15: 00007fff6a3fba98 [ 220.681866][T10203] [ 220.881655][T10211] FAULT_INJECTION: forcing a failure. [ 220.881655][T10211] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 220.896189][T10211] CPU: 1 UID: 0 PID: 10211 Comm: syz.1.1055 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 220.908384][T10211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 220.920816][T10211] Call Trace: [ 220.926033][T10211] [ 220.929243][T10211] dump_stack_lvl+0x241/0x360 [ 220.935790][T10211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.943992][T10211] ? __pfx__printk+0x10/0x10 [ 220.950331][T10211] should_fail_ex+0x3b0/0x4e0 [ 220.955507][T10211] prepare_alloc_pages+0x1da/0x5b0 [ 220.963583][T10211] __alloc_pages_noprof+0x16f/0x710 [ 220.970431][T10211] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 220.977901][T10211] ? __virt_addr_valid+0x183/0x530 [ 220.983422][T10211] alloc_pages_mpol_noprof+0x3e8/0x680 [ 220.989294][T10211] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 220.996040][T10211] ? __virt_addr_valid+0x183/0x530 [ 221.001926][T10211] ? __virt_addr_valid+0x45f/0x530 [ 221.007936][T10211] ? __check_object_size+0x48e/0x900 [ 221.013691][T10211] ? alloc_pages_noprof+0xef/0x170 [ 221.019872][T10211] af_alg_sendmsg+0x1420/0x2650 [ 221.025616][T10211] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 221.031329][T10211] ? __pfx_aa_sk_perm+0x10/0x10 [ 221.037030][T10211] ? __pfx_lock_release+0x10/0x10 [ 221.042236][T10211] ? __import_iovec+0x590/0x870 [ 221.047866][T10211] ? aa_sock_msg_perm+0x91/0x160 [ 221.053105][T10211] ? skcipher_sendmsg+0x28/0xf0 [ 221.058207][T10211] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 221.063921][T10211] __sock_sendmsg+0x221/0x270 [ 221.069462][T10211] ____sys_sendmsg+0x52a/0x7e0 [ 221.074386][T10211] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.080179][T10211] __sys_sendmsg+0x292/0x380 [ 221.085178][T10211] ? __pfx___sys_sendmsg+0x10/0x10 [ 221.091886][T10211] ? __pfx_vfs_write+0x10/0x10 [ 221.097770][T10211] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 221.108358][T10211] ? do_syscall_64+0x100/0x230 [ 221.114693][T10211] ? do_syscall_64+0xb6/0x230 [ 221.119964][T10211] do_syscall_64+0xf3/0x230 [ 221.125886][T10211] ? clear_bhb_loop+0x35/0x90 [ 221.130903][T10211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.137281][T10211] RIP: 0033:0x7f1b96b7e719 [ 221.142365][T10211] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.166163][T10211] RSP: 002b:00007f1b94ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.177076][T10211] RAX: ffffffffffffffda RBX: 00007f1b96d35f80 RCX: 00007f1b96b7e719 [ 221.187066][T10211] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 221.196147][T10211] RBP: 00007f1b94ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 221.204947][T10211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.214092][T10211] R13: 0000000000000000 R14: 00007f1b96d35f80 R15: 00007ffd43b00b18 [ 221.224645][T10211] [ 221.248765][T10212] FAULT_INJECTION: forcing a failure. [ 221.248765][T10212] name failslab, interval 1, probability 0, space 0, times 0 [ 221.335049][T10212] CPU: 1 UID: 0 PID: 10212 Comm: syz.3.1056 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 221.350690][T10212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 221.361180][T10212] Call Trace: [ 221.364709][T10212] [ 221.368492][T10212] dump_stack_lvl+0x241/0x360 [ 221.373610][T10212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.379497][T10212] ? __pfx__printk+0x10/0x10 [ 221.384625][T10212] ? __kmalloc_noprof+0xb0/0x400 [ 221.391113][T10212] ? __pfx___might_resched+0x10/0x10 [ 221.398316][T10212] ? __mutex_lock+0x2ef/0xd70 [ 221.404543][T10212] should_fail_ex+0x3b0/0x4e0 [ 221.409745][T10212] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 221.417342][T10212] should_failslab+0xac/0x100 [ 221.423752][T10212] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 221.431078][T10212] __kmalloc_noprof+0xd8/0x400 [ 221.436161][T10212] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 221.444590][T10212] genl_rcv_msg+0x802/0xec0 [ 221.449593][T10212] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.455030][T10212] ? __pfx_lock_acquire+0x10/0x10 [ 221.460110][T10212] ? __pfx_nbd_genl_connect+0x10/0x10 [ 221.465791][T10212] ? __pfx___might_resched+0x10/0x10 [ 221.471304][T10212] netlink_rcv_skb+0x1e3/0x430 [ 221.476372][T10212] ? __pfx_genl_rcv_msg+0x10/0x10 [ 221.481562][T10212] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 221.486918][T10212] genl_rcv+0x28/0x40 [ 221.491277][T10212] netlink_unicast+0x7f6/0x990 [ 221.496160][T10212] ? __pfx_netlink_unicast+0x10/0x10 [ 221.501466][T10212] ? __virt_addr_valid+0x183/0x530 [ 221.506600][T10212] ? __check_object_size+0x48e/0x900 [ 221.511935][T10212] netlink_sendmsg+0x8e4/0xcb0 [ 221.516749][T10212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.522063][T10212] ? aa_sock_msg_perm+0x91/0x160 [ 221.527027][T10212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 221.532342][T10212] __sock_sendmsg+0x221/0x270 [ 221.537052][T10212] ____sys_sendmsg+0x52a/0x7e0 [ 221.541876][T10212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 221.547196][T10212] __sys_sendmsg+0x292/0x380 [ 221.551954][T10212] ? __pfx___sys_sendmsg+0x10/0x10 [ 221.557216][T10212] ? __pfx_vfs_write+0x10/0x10 [ 221.562036][T10212] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 221.568479][T10212] ? do_syscall_64+0x100/0x230 [ 221.573296][T10212] ? do_syscall_64+0xb6/0x230 [ 221.577996][T10212] do_syscall_64+0xf3/0x230 [ 221.582520][T10212] ? clear_bhb_loop+0x35/0x90 [ 221.587220][T10212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.593147][T10212] RIP: 0033:0x7fb2d477e719 [ 221.597582][T10212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 221.617210][T10212] RSP: 002b:00007fb2d5497038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 221.625644][T10212] RAX: ffffffffffffffda RBX: 00007fb2d4935f80 RCX: 00007fb2d477e719 [ 221.633849][T10212] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 000000000000000a [ 221.641854][T10212] RBP: 00007fb2d5497090 R08: 0000000000000000 R09: 0000000000000000 [ 221.649961][T10212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 221.657946][T10212] R13: 0000000000000000 R14: 00007fb2d4935f80 R15: 00007fffa91dfb88 [ 221.665957][T10212] [ 221.872735][T10232] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1062'. [ 221.897986][T10229] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1060'. [ 221.908629][T10232] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1062'. [ 221.922362][T10225] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1061'. [ 222.275171][T10245] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1067'. [ 222.394841][T10252] tipc: Enabling of bearer rejected, failed to enable media [ 222.478667][T10254] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1069'. [ 222.502116][T10256] FAULT_INJECTION: forcing a failure. [ 222.502116][T10256] name failslab, interval 1, probability 0, space 0, times 0 [ 222.539884][T10256] CPU: 0 UID: 0 PID: 10256 Comm: syz.3.1071 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 222.550738][T10256] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 222.561200][T10256] Call Trace: [ 222.564533][T10256] [ 222.567510][T10256] dump_stack_lvl+0x241/0x360 [ 222.572255][T10256] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.577527][T10256] ? __pfx__printk+0x10/0x10 [ 222.582194][T10256] ? ref_tracker_alloc+0x332/0x490 [ 222.587419][T10256] should_fail_ex+0x3b0/0x4e0 [ 222.592169][T10256] ? skb_clone+0x20c/0x390 [ 222.596657][T10256] should_failslab+0xac/0x100 [ 222.601495][T10256] ? skb_clone+0x20c/0x390 [ 222.605985][T10256] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 222.611422][T10256] skb_clone+0x20c/0x390 [ 222.615720][T10256] __netlink_deliver_tap+0x3cc/0x7f0 [ 222.621077][T10256] ? netlink_deliver_tap+0x2e/0x1b0 [ 222.626343][T10256] netlink_deliver_tap+0x19d/0x1b0 [ 222.631532][T10256] netlink_unicast+0x7c4/0x990 [ 222.636433][T10256] ? __pfx_netlink_unicast+0x10/0x10 [ 222.641795][T10256] ? __virt_addr_valid+0x183/0x530 [ 222.647072][T10256] ? __check_object_size+0x48e/0x900 [ 222.652451][T10256] netlink_sendmsg+0x8e4/0xcb0 [ 222.657328][T10256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.662687][T10256] ? aa_sock_msg_perm+0x91/0x160 [ 222.667732][T10256] ? __pfx_netlink_sendmsg+0x10/0x10 [ 222.673078][T10256] __sock_sendmsg+0x221/0x270 [ 222.677827][T10256] ____sys_sendmsg+0x52a/0x7e0 [ 222.682666][T10256] ? __pfx_____sys_sendmsg+0x10/0x10 [ 222.688032][T10256] __sys_sendmsg+0x292/0x380 [ 222.693212][T10256] ? __pfx___sys_sendmsg+0x10/0x10 [ 222.698405][T10256] ? __pfx_vfs_write+0x10/0x10 [ 222.703253][T10256] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 222.709660][T10256] ? do_syscall_64+0x100/0x230 [ 222.714483][T10256] ? do_syscall_64+0xb6/0x230 [ 222.719217][T10256] do_syscall_64+0xf3/0x230 [ 222.723765][T10256] ? clear_bhb_loop+0x35/0x90 [ 222.728492][T10256] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.734425][T10256] RIP: 0033:0x7fb2d477e719 [ 222.738953][T10256] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.758581][T10256] RSP: 002b:00007fb2d5497038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 222.767034][T10256] RAX: ffffffffffffffda RBX: 00007fb2d4935f80 RCX: 00007fb2d477e719 [ 222.775039][T10256] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 222.783028][T10256] RBP: 00007fb2d5497090 R08: 0000000000000000 R09: 0000000000000000 [ 222.791013][T10256] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 222.798998][T10256] R13: 0000000000000000 R14: 00007fb2d4935f80 R15: 00007fffa91dfb88 [ 222.807113][T10256] [ 222.849297][T10256] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1071'. [ 222.911664][T10264] vlan3: entered promiscuous mode [ 222.949550][T10264] dummy0: entered promiscuous mode [ 222.955941][T10264] vlan3: entered allmulticast mode [ 223.002490][T10264] dummy0: entered allmulticast mode [ 223.061184][T10264] dummy0: left allmulticast mode [ 223.074039][T10264] dummy0: left promiscuous mode [ 223.134038][T10270] Cannot find del_set index 286 as target [ 224.111534][T10305] FAULT_INJECTION: forcing a failure. [ 224.111534][T10305] name failslab, interval 1, probability 0, space 0, times 0 [ 224.147835][T10305] CPU: 1 UID: 0 PID: 10305 Comm: syz.3.1084 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 224.158692][T10305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 224.169068][T10305] Call Trace: [ 224.172389][T10305] [ 224.175363][T10305] dump_stack_lvl+0x241/0x360 [ 224.180098][T10305] ? __pfx_dump_stack_lvl+0x10/0x10 [ 224.185353][T10305] ? __pfx__printk+0x10/0x10 [ 224.190018][T10305] ? ref_tracker_alloc+0x332/0x490 [ 224.195192][T10305] should_fail_ex+0x3b0/0x4e0 [ 224.199940][T10305] ? skb_clone+0x20c/0x390 [ 224.204452][T10305] should_failslab+0xac/0x100 [ 224.209317][T10305] ? skb_clone+0x20c/0x390 [ 224.213793][T10305] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 224.219203][T10305] skb_clone+0x20c/0x390 [ 224.223471][T10305] __netlink_deliver_tap+0x3cc/0x7f0 [ 224.228792][T10305] ? netlink_deliver_tap+0x2e/0x1b0 [ 224.234029][T10305] netlink_deliver_tap+0x19d/0x1b0 [ 224.239253][T10305] netlink_unicast+0x7c4/0x990 [ 224.244072][T10305] ? __pfx_netlink_unicast+0x10/0x10 [ 224.249399][T10305] ? __virt_addr_valid+0x183/0x530 [ 224.254538][T10305] ? __check_object_size+0x48e/0x900 [ 224.259847][T10305] netlink_sendmsg+0x8e4/0xcb0 [ 224.264666][T10305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.270002][T10305] ? aa_sock_msg_perm+0x91/0x160 [ 224.275509][T10305] ? __pfx_netlink_sendmsg+0x10/0x10 [ 224.280816][T10305] __sock_sendmsg+0x221/0x270 [ 224.285522][T10305] ____sys_sendmsg+0x52a/0x7e0 [ 224.290317][T10305] ? __pfx_____sys_sendmsg+0x10/0x10 [ 224.295735][T10305] __sys_sendmsg+0x292/0x380 [ 224.300356][T10305] ? __pfx___sys_sendmsg+0x10/0x10 [ 224.305512][T10305] ? __pfx_vfs_write+0x10/0x10 [ 224.310315][T10305] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 224.316693][T10305] ? do_syscall_64+0x100/0x230 [ 224.321491][T10305] ? do_syscall_64+0xb6/0x230 [ 224.326275][T10305] do_syscall_64+0xf3/0x230 [ 224.330797][T10305] ? clear_bhb_loop+0x35/0x90 [ 224.335498][T10305] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 224.341410][T10305] RIP: 0033:0x7fb2d477e719 [ 224.345840][T10305] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 224.365821][T10305] RSP: 002b:00007fb2d5497038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 224.374374][T10305] RAX: ffffffffffffffda RBX: 00007fb2d4935f80 RCX: 00007fb2d477e719 [ 224.382622][T10305] RDX: 0000000000000000 RSI: 0000000020000540 RDI: 0000000000000003 [ 224.390619][T10305] RBP: 00007fb2d5497090 R08: 0000000000000000 R09: 0000000000000000 [ 224.398624][T10305] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 224.406611][T10305] R13: 0000000000000000 R14: 00007fb2d4935f80 R15: 00007fffa91dfb88 [ 224.414655][T10305] [ 224.790618][T10319] netlink: 'syz.0.1091': attribute type 13 has an invalid length. [ 224.798535][T10319] __nla_validate_parse: 2 callbacks suppressed [ 224.798553][T10319] netlink: 24859 bytes leftover after parsing attributes in process `syz.0.1091'. [ 224.918398][T10329] netlink: 172 bytes leftover after parsing attributes in process `syz.0.1091'. [ 224.985588][T10322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.058049][T10320] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.190668][T10341] FAULT_INJECTION: forcing a failure. [ 225.190668][T10341] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 225.190688][T10339] FAULT_INJECTION: forcing a failure. [ 225.190688][T10339] name failslab, interval 1, probability 0, space 0, times 0 [ 225.227263][T10339] CPU: 1 UID: 0 PID: 10339 Comm: syz.0.1095 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 225.238287][T10339] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 225.248380][T10339] Call Trace: [ 225.251732][T10339] [ 225.254707][T10339] dump_stack_lvl+0x241/0x360 [ 225.259443][T10339] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.264699][T10339] ? __pfx__printk+0x10/0x10 [ 225.269401][T10339] ? __kmalloc_node_noprof+0xb7/0x440 [ 225.275709][T10339] ? __pfx___might_resched+0x10/0x10 [ 225.281135][T10339] ? stack_trace_save+0x118/0x1d0 [ 225.286244][T10339] should_fail_ex+0x3b0/0x4e0 [ 225.290994][T10339] should_failslab+0xac/0x100 [ 225.295730][T10339] __kmalloc_node_noprof+0xdf/0x440 [ 225.301054][T10339] ? __kvmalloc_node_noprof+0x72/0x190 [ 225.306662][T10339] __kvmalloc_node_noprof+0x72/0x190 [ 225.311981][T10339] translate_table+0x174/0x2330 [ 225.316884][T10339] ? __pfx_translate_table+0x10/0x10 [ 225.322199][T10339] ? __might_fault+0xaa/0x120 [ 225.327356][T10339] ? __pfx_lock_release+0x10/0x10 [ 225.332443][T10339] ? __might_fault+0xaa/0x120 [ 225.337196][T10339] ? __might_fault+0xc6/0x120 [ 225.339289][T10340] Cannot find del_set index 286 as target [ 225.341911][T10339] ? _copy_from_user+0x99/0xc0 [ 225.352430][T10339] ? copy_from_sockptr_offset+0x6b/0xb0 [ 225.358013][T10339] do_ip6t_set_ctl+0xe4c/0x1270 [ 225.362901][T10339] ? __pfx___might_resched+0x10/0x10 [ 225.368220][T10339] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 225.373617][T10339] ? __pfx_lock_release+0x10/0x10 [ 225.378687][T10339] ? __mutex_unlock_slowpath+0x21d/0x750 [ 225.384373][T10339] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 225.390387][T10339] ? aa_sk_perm+0x96d/0xab0 [ 225.394924][T10339] ? __pfx_aa_sk_perm+0x10/0x10 [ 225.399849][T10339] nf_setsockopt+0x295/0x2c0 [ 225.404480][T10339] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 225.410409][T10339] do_sock_setsockopt+0x3af/0x720 [ 225.415563][T10339] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 225.421253][T10339] ? __fget_files+0x29/0x470 [ 225.425871][T10339] ? __fget_files+0x3f3/0x470 [ 225.430583][T10339] ? __fget_files+0x29/0x470 [ 225.435219][T10339] __sys_setsockopt+0x1a2/0x250 [ 225.440116][T10339] __x64_sys_setsockopt+0xb5/0xd0 [ 225.445174][T10339] do_syscall_64+0xf3/0x230 [ 225.449696][T10339] ? clear_bhb_loop+0x35/0x90 [ 225.454396][T10339] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.460310][T10339] RIP: 0033:0x7fd38957e719 [ 225.464819][T10339] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 225.484573][T10339] RSP: 002b:00007fd38a2bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 225.493097][T10339] RAX: ffffffffffffffda RBX: 00007fd389735f80 RCX: 00007fd38957e719 [ 225.501106][T10339] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 225.509103][T10339] RBP: 00007fd38a2bb090 R08: 00000000000007e0 R09: 0000000000000000 [ 225.517187][T10339] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 225.525207][T10339] R13: 0000000000000000 R14: 00007fd389735f80 R15: 00007fff6a3fba98 [ 225.533340][T10339] [ 225.536393][T10341] CPU: 0 UID: 0 PID: 10341 Comm: syz.3.1093 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 225.547428][T10341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 225.557532][T10341] Call Trace: [ 225.560835][T10341] [ 225.563797][T10341] dump_stack_lvl+0x241/0x360 [ 225.569110][T10341] ? __pfx_dump_stack_lvl+0x10/0x10 [ 225.574702][T10341] ? __pfx__printk+0x10/0x10 [ 225.579320][T10341] ? __lock_acquire+0x1384/0x2050 [ 225.584651][T10341] should_fail_ex+0x3b0/0x4e0 [ 225.589348][T10341] prepare_alloc_pages+0x1da/0x5b0 [ 225.594484][T10341] __alloc_pages_noprof+0x16f/0x710 [ 225.599790][T10341] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 225.605628][T10341] alloc_pages_mpol_noprof+0x3e8/0x680 [ 225.611116][T10341] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 225.617125][T10341] vma_alloc_folio_noprof+0x12e/0x230 [ 225.622537][T10341] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 225.628632][T10341] ? do_raw_spin_unlock+0x13c/0x8b0 [ 225.633858][T10341] folio_prealloc+0x31/0x170 [ 225.638559][T10341] do_wp_page+0x11c4/0x52d0 [ 225.643102][T10341] ? __pfx_do_wp_page+0x10/0x10 [ 225.648126][T10341] ? __pfx_lock_acquire+0x10/0x10 [ 225.653536][T10341] ? do_raw_spin_lock+0x14f/0x370 [ 225.658598][T10341] handle_pte_fault+0x10e3/0x6820 [ 225.663653][T10341] ? mark_lock+0x9a/0x360 [ 225.668041][T10341] ? __pfx_handle_pte_fault+0x10/0x10 [ 225.673466][T10341] ? __lock_acquire+0x1384/0x2050 [ 225.678570][T10341] ? mt_find+0x2a9/0x920 [ 225.682826][T10341] ? __pfx_lock_release+0x10/0x10 [ 225.687883][T10341] handle_mm_fault+0x1106/0x1bb0 [ 225.692866][T10341] ? mt_find+0x2a9/0x920 [ 225.697169][T10341] ? __pfx_handle_mm_fault+0x10/0x10 [ 225.702491][T10341] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 225.708858][T10341] ? lock_mm_and_find_vma+0x9c/0x2f0 [ 225.714174][T10341] exc_page_fault+0x2b9/0x8c0 [ 225.718886][T10341] asm_exc_page_fault+0x26/0x30 [ 225.723751][T10341] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 225.729577][T10341] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 225.749205][T10341] RSP: 0018:ffffc900171974b8 EFLAGS: 00050206 [ 225.755295][T10341] RAX: ffffffff84bacb01 RBX: 0000000000008000 RCX: 0000000000007480 [ 225.763290][T10341] RDX: 0000000000000000 RSI: ffff88807eba8b80 RDI: 0000000020003000 [ 225.771278][T10341] RBP: ffffc90017197640 R08: ffff88807ebaffff R09: 1ffff1100fd75fff [ 225.779273][T10341] R10: dffffc0000000000 R11: ffffed100fd76000 R12: ffffc90017197e18 [ 225.787263][T10341] R13: 0000000020002480 R14: ffff88807eba8000 R15: 1ffff92002e32fc3 [ 225.795289][T10341] ? _copy_to_iter+0x191/0x1e70 [ 225.800189][T10341] _copy_to_iter+0x29a/0x1e70 [ 225.805075][T10341] ? __virt_addr_valid+0x183/0x530 [ 225.810201][T10341] ? __pfx_lock_release+0x10/0x10 [ 225.815252][T10341] ? __pfx__copy_to_iter+0x10/0x10 [ 225.820651][T10341] ? __virt_addr_valid+0x183/0x530 [ 225.825776][T10341] ? __virt_addr_valid+0x183/0x530 [ 225.830899][T10341] ? __virt_addr_valid+0x45f/0x530 [ 225.836025][T10341] ? __phys_addr_symbol+0x2f/0x70 [ 225.841072][T10341] ? __check_object_size+0x48e/0x900 [ 225.846385][T10341] __skb_datagram_iter+0x3c6/0x900 [ 225.851530][T10341] ? __pfx_simple_copy_to_iter+0x10/0x10 [ 225.857198][T10341] skb_copy_datagram_iter+0xd1/0x250 [ 225.862512][T10341] unix_stream_read_actor+0x70/0xb0 [ 225.867734][T10341] unix_stream_read_generic+0xc47/0x26b0 [ 225.873423][T10341] ? __pfx_unix_stream_read_generic+0x10/0x10 [ 225.879519][T10341] ? aa_sk_perm+0x96d/0xab0 [ 225.884044][T10341] unix_stream_recvmsg+0x22b/0x2c0 [ 225.889180][T10341] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 225.895354][T10341] ? __pfx_unix_stream_read_actor+0x10/0x10 [ 225.901279][T10341] ? __pfx___might_resched+0x10/0x10 [ 225.906611][T10341] ? aa_sock_msg_perm+0x91/0x160 [ 225.911619][T10341] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 225.916937][T10341] ? __pfx_unix_stream_recvmsg+0x10/0x10 [ 225.922602][T10341] sock_recvmsg+0x22f/0x280 [ 225.927151][T10341] ____sys_recvmsg+0x1c6/0x480 [ 225.931950][T10341] ? __pfx_____sys_recvmsg+0x10/0x10 [ 225.937276][T10341] __sys_recvmsg+0x2e6/0x3d0 [ 225.941898][T10341] ? __pfx___sys_recvmsg+0x10/0x10 [ 225.947035][T10341] ? __mutex_unlock_slowpath+0x21d/0x750 [ 225.952707][T10341] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 225.959062][T10341] ? do_syscall_64+0x100/0x230 [ 225.963890][T10341] ? do_syscall_64+0xb6/0x230 [ 225.968669][T10341] do_syscall_64+0xf3/0x230 [ 225.973215][T10341] ? clear_bhb_loop+0x35/0x90 [ 225.977942][T10341] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 225.983861][T10341] RIP: 0033:0x7fb2d477e719 [ 225.988293][T10341] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.008090][T10341] RSP: 002b:00007fb2d2bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002f [ 226.016524][T10341] RAX: ffffffffffffffda RBX: 00007fb2d4936058 RCX: 00007fb2d477e719 [ 226.024514][T10341] RDX: 0000000040000100 RSI: 0000000020001140 RDI: 0000000000000004 [ 226.032669][T10341] RBP: 00007fb2d2bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 226.040782][T10341] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.048864][T10341] R13: 0000000000000001 R14: 00007fb2d4936058 R15: 00007fffa91dfb88 [ 226.057007][T10341] [ 226.154361][T10349] FAULT_INJECTION: forcing a failure. [ 226.154361][T10349] name failslab, interval 1, probability 0, space 0, times 0 [ 226.190659][T10349] CPU: 0 UID: 0 PID: 10349 Comm: syz.0.1098 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 226.201511][T10349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 226.208351][T10352] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1099'. [ 226.211770][T10349] Call Trace: [ 226.211785][T10349] [ 226.211795][T10349] dump_stack_lvl+0x241/0x360 [ 226.211829][T10349] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.237131][T10349] ? __pfx__printk+0x10/0x10 [ 226.241797][T10349] ? ref_tracker_alloc+0x332/0x490 [ 226.246992][T10349] should_fail_ex+0x3b0/0x4e0 [ 226.251813][T10349] ? skb_clone+0x20c/0x390 [ 226.256304][T10349] should_failslab+0xac/0x100 [ 226.261043][T10349] ? skb_clone+0x20c/0x390 [ 226.265514][T10349] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 226.270945][T10349] skb_clone+0x20c/0x390 [ 226.275249][T10349] __netlink_deliver_tap+0x3cc/0x7f0 [ 226.280687][T10349] ? netlink_deliver_tap+0x2e/0x1b0 [ 226.285945][T10349] netlink_deliver_tap+0x19d/0x1b0 [ 226.291119][T10349] netlink_unicast+0x7c4/0x990 [ 226.295955][T10349] ? __pfx_netlink_unicast+0x10/0x10 [ 226.301299][T10349] ? __virt_addr_valid+0x183/0x530 [ 226.306463][T10349] ? __check_object_size+0x48e/0x900 [ 226.311807][T10349] netlink_sendmsg+0x8e4/0xcb0 [ 226.316637][T10349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.321985][T10349] ? aa_sock_msg_perm+0x91/0x160 [ 226.326985][T10349] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.332335][T10349] __sock_sendmsg+0x221/0x270 [ 226.337071][T10349] ____sys_sendmsg+0x52a/0x7e0 [ 226.341898][T10349] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.347272][T10349] __sys_sendmsg+0x292/0x380 [ 226.351927][T10349] ? __pfx___sys_sendmsg+0x10/0x10 [ 226.357105][T10349] ? __pfx_vfs_write+0x10/0x10 [ 226.361938][T10349] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 226.368494][T10349] ? do_syscall_64+0x100/0x230 [ 226.373404][T10349] ? do_syscall_64+0xb6/0x230 [ 226.378154][T10349] do_syscall_64+0xf3/0x230 [ 226.382780][T10349] ? clear_bhb_loop+0x35/0x90 [ 226.387508][T10349] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.393455][T10349] RIP: 0033:0x7fd38957e719 [ 226.397925][T10349] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.417930][T10349] RSP: 002b:00007fd38a2bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.426402][T10349] RAX: ffffffffffffffda RBX: 00007fd389735f80 RCX: 00007fd38957e719 [ 226.434422][T10349] RDX: 0000000000000000 RSI: 0000000020000400 RDI: 0000000000000003 [ 226.442444][T10349] RBP: 00007fd38a2bb090 R08: 0000000000000000 R09: 0000000000000000 [ 226.450464][T10349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 226.458489][T10349] R13: 0000000000000000 R14: 00007fd389735f80 R15: 00007fff6a3fba98 [ 226.466618][T10349] [ 226.743467][T10373] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1099'. [ 226.770839][T10370] raw_sendmsg: syz.0.1103 forgot to set AF_INET. Fix it! [ 227.545913][T10400] Cannot find del_set index 286 as target [ 227.625440][T10403] FAULT_INJECTION: forcing a failure. [ 227.625440][T10403] name failslab, interval 1, probability 0, space 0, times 0 [ 227.659008][T10403] CPU: 0 UID: 0 PID: 10403 Comm: syz.1.1112 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 227.669864][T10403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 227.679937][T10403] Call Trace: [ 227.683231][T10403] [ 227.686181][T10403] dump_stack_lvl+0x241/0x360 [ 227.690878][T10403] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.696092][T10403] ? __pfx__printk+0x10/0x10 [ 227.700720][T10403] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 227.706222][T10403] ? __pfx___might_resched+0x10/0x10 [ 227.711548][T10403] should_fail_ex+0x3b0/0x4e0 [ 227.716278][T10403] should_failslab+0xac/0x100 [ 227.720973][T10403] ? rtnl_newlink+0x12e/0x24f0 [ 227.725758][T10403] __kmalloc_cache_noprof+0x6c/0x2c0 [ 227.731081][T10403] rtnl_newlink+0x12e/0x24f0 [ 227.735780][T10403] ? kasan_save_track+0x51/0x80 [ 227.740647][T10403] ? kasan_save_free_info+0x40/0x50 [ 227.746048][T10403] ? kmem_cache_free+0x1a2/0x420 [ 227.751007][T10403] ? nlmon_xmit+0xaf/0x100 [ 227.755448][T10403] ? dev_hard_start_xmit+0x27a/0x7e0 [ 227.760756][T10403] ? __pfx_rtnl_newlink+0x10/0x10 [ 227.765797][T10403] ? netlink_unicast+0x7c4/0x990 [ 227.770760][T10403] ? __pfx_validate_chain+0x10/0x10 [ 227.775978][T10403] ? __sys_sendmsg+0x292/0x380 [ 227.780772][T10403] ? do_syscall_64+0xf3/0x230 [ 227.785494][T10403] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.791592][T10403] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 227.797606][T10403] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 227.804056][T10403] ? mark_lock+0x9a/0x360 [ 227.808400][T10403] ? __lock_acquire+0x1384/0x2050 [ 227.813469][T10403] ? rcu_read_unlock+0x87/0xa0 [ 227.818261][T10403] ? __dev_queue_xmit+0x1775/0x3f50 [ 227.823574][T10403] ? __pfx_lock_release+0x10/0x10 [ 227.828640][T10403] ? __pfx_rtnl_newlink+0x10/0x10 [ 227.833682][T10403] rtnetlink_rcv_msg+0x791/0xcf0 [ 227.838664][T10403] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 227.843794][T10403] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 227.849274][T10403] ? ref_tracker_free+0x643/0x7e0 [ 227.854323][T10403] netlink_rcv_skb+0x1e3/0x430 [ 227.859130][T10403] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 227.864692][T10403] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 227.870015][T10403] ? netlink_deliver_tap+0x2e/0x1b0 [ 227.875244][T10403] netlink_unicast+0x7f6/0x990 [ 227.880054][T10403] ? __pfx_netlink_unicast+0x10/0x10 [ 227.885351][T10403] ? __virt_addr_valid+0x183/0x530 [ 227.890485][T10403] ? __check_object_size+0x48e/0x900 [ 227.895814][T10403] netlink_sendmsg+0x8e4/0xcb0 [ 227.900608][T10403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.905934][T10403] ? aa_sock_msg_perm+0x91/0x160 [ 227.910902][T10403] ? __pfx_netlink_sendmsg+0x10/0x10 [ 227.916204][T10403] __sock_sendmsg+0x221/0x270 [ 227.920901][T10403] ____sys_sendmsg+0x52a/0x7e0 [ 227.925690][T10403] ? __pfx_____sys_sendmsg+0x10/0x10 [ 227.931008][T10403] __sys_sendmsg+0x292/0x380 [ 227.935625][T10403] ? __pfx___sys_sendmsg+0x10/0x10 [ 227.940764][T10403] ? __pfx_vfs_write+0x10/0x10 [ 227.945581][T10403] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 227.951952][T10403] ? do_syscall_64+0x100/0x230 [ 227.956803][T10403] ? do_syscall_64+0xb6/0x230 [ 227.961567][T10403] do_syscall_64+0xf3/0x230 [ 227.966190][T10403] ? clear_bhb_loop+0x35/0x90 [ 227.970894][T10403] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.976806][T10403] RIP: 0033:0x7f1b96b7e719 [ 227.981259][T10403] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 228.001494][T10403] RSP: 002b:00007f1b94ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 228.009932][T10403] RAX: ffffffffffffffda RBX: 00007f1b96d35f80 RCX: 00007f1b96b7e719 [ 228.017917][T10403] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 228.025922][T10403] RBP: 00007f1b94ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 228.033908][T10403] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 228.041889][T10403] R13: 0000000000000000 R14: 00007f1b96d35f80 R15: 00007ffd43b00b18 [ 228.049888][T10403] [ 228.495926][T10428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1119'. [ 228.519577][T10428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1119'. [ 228.772041][T10444] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1123'. [ 228.989820][T10455] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1128'. [ 229.005108][T10455] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1128'. [ 229.037043][T10455] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1128'. [ 230.082716][T10499] bridge14: entered promiscuous mode [ 230.249654][T10503] __nla_validate_parse: 2 callbacks suppressed [ 230.249677][T10503] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1145'. [ 230.492123][T10513] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1149'. [ 230.529086][T10517] FAULT_INJECTION: forcing a failure. [ 230.529086][T10517] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 230.546115][T10517] CPU: 1 UID: 0 PID: 10517 Comm: syz.1.1150 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 230.556967][T10517] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 230.567072][T10517] Call Trace: [ 230.570401][T10517] [ 230.573364][T10517] dump_stack_lvl+0x241/0x360 [ 230.578110][T10517] ? __pfx_dump_stack_lvl+0x10/0x10 [ 230.583359][T10517] ? __pfx__printk+0x10/0x10 [ 230.587994][T10517] ? __pfx_lock_release+0x10/0x10 [ 230.593091][T10517] should_fail_ex+0x3b0/0x4e0 [ 230.597903][T10517] _copy_from_iter+0x21f/0x1e70 [ 230.602781][T10517] ? __virt_addr_valid+0x183/0x530 [ 230.607942][T10517] ? __pfx_lock_release+0x10/0x10 [ 230.612994][T10517] ? alloc_pages_mpol_noprof+0x417/0x680 [ 230.618645][T10517] ? __pfx__copy_from_iter+0x10/0x10 [ 230.623953][T10517] ? __virt_addr_valid+0x183/0x530 [ 230.629077][T10517] ? __virt_addr_valid+0x183/0x530 [ 230.634200][T10517] ? __virt_addr_valid+0x45f/0x530 [ 230.639329][T10517] ? __check_object_size+0x48e/0x900 [ 230.644645][T10517] af_alg_sendmsg+0x1519/0x2650 [ 230.649529][T10517] ? __pfx_af_alg_sendmsg+0x10/0x10 [ 230.654863][T10517] ? __pfx_aa_sk_perm+0x10/0x10 [ 230.659750][T10517] ? __pfx_lock_release+0x10/0x10 [ 230.665094][T10517] ? __import_iovec+0x590/0x870 [ 230.670000][T10517] ? aa_sock_msg_perm+0x91/0x160 [ 230.674980][T10517] ? skcipher_sendmsg+0x28/0xf0 [ 230.679868][T10517] ? __pfx_skcipher_sendmsg+0x10/0x10 [ 230.685263][T10517] __sock_sendmsg+0x221/0x270 [ 230.689979][T10517] ____sys_sendmsg+0x52a/0x7e0 [ 230.694774][T10517] ? __pfx_____sys_sendmsg+0x10/0x10 [ 230.700096][T10517] __sys_sendmsg+0x292/0x380 [ 230.704711][T10517] ? __pfx___sys_sendmsg+0x10/0x10 [ 230.709878][T10517] ? __pfx_vfs_write+0x10/0x10 [ 230.714678][T10517] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 230.721031][T10517] ? do_syscall_64+0x100/0x230 [ 230.725839][T10517] ? do_syscall_64+0xb6/0x230 [ 230.730535][T10517] do_syscall_64+0xf3/0x230 [ 230.735054][T10517] ? clear_bhb_loop+0x35/0x90 [ 230.739750][T10517] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.745745][T10517] RIP: 0033:0x7f1b96b7e719 [ 230.750186][T10517] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 230.769922][T10517] RSP: 002b:00007f1b94ff6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 230.778361][T10517] RAX: ffffffffffffffda RBX: 00007f1b96d35f80 RCX: 00007f1b96b7e719 [ 230.786346][T10517] RDX: 0000000000000000 RSI: 0000000020000240 RDI: 0000000000000004 [ 230.794330][T10517] RBP: 00007f1b94ff6090 R08: 0000000000000000 R09: 0000000000000000 [ 230.802314][T10517] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.810299][T10517] R13: 0000000000000000 R14: 00007f1b96d35f80 R15: 00007ffd43b00b18 [ 230.818298][T10517] [ 230.943332][T10523] warning: `syz.2.1151' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 231.002979][T10526] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1152'. [ 231.012574][T10526] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1152'. [ 231.021655][T10526] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1152'. [ 231.030818][T10526] block nbd0: Unsupported socket: shutdown callout must be supported. [ 231.062412][T10528] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1153'. [ 231.074161][T10528] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1153'. [ 231.105823][T10528] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1153'. [ 231.748524][T10558] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1163'. [ 232.107845][T10574] netlink: 'syz.1.1166': attribute type 2 has an invalid length. [ 232.180762][T10574] netlink: 'syz.1.1166': attribute type 1 has an invalid length. [ 233.007559][T10601] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1175'. [ 233.111548][T10604] 0ªX¹¦À: renamed from caif0 [ 233.153039][T10604] 0ªX¹¦À: entered allmulticast mode [ 233.158320][T10604] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 233.245522][T10606] vlan2: entered promiscuous mode [ 233.274339][T10606] team0: entered promiscuous mode [ 233.293283][T10606] team_slave_0: entered promiscuous mode [ 233.310290][T10606] team_slave_1: entered promiscuous mode [ 233.330614][T10606] vlan2: entered allmulticast mode [ 233.341327][T10606] team0: entered allmulticast mode [ 233.359172][T10606] team_slave_0: entered allmulticast mode [ 233.388587][T10606] team_slave_1: entered allmulticast mode [ 233.460011][T10606] team0: Device vlan2 is already an upper device of the team interface [ 233.542543][T10606] team0: left allmulticast mode [ 233.571231][T10606] team_slave_0: left allmulticast mode [ 233.589781][T10606] team_slave_1: left allmulticast mode [ 233.611557][T10606] team0: left promiscuous mode [ 233.625170][T10606] team_slave_0: left promiscuous mode [ 233.635211][T10606] team_slave_1: left promiscuous mode [ 233.741872][T10628] geneve2: entered promiscuous mode [ 233.747483][T10628] geneve2: entered allmulticast mode [ 234.506675][T10662] Cannot find del_set index 286 as target [ 235.741776][T10719] __nla_validate_parse: 6 callbacks suppressed [ 235.741802][T10719] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.1209'. [ 237.589593][T10734] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1214'. [ 238.214909][T10760] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1221'. [ 238.290897][T10762] vlan2: entered promiscuous mode [ 238.307772][T10762] vlan2: entered allmulticast mode [ 238.622860][T10783] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1231'. [ 238.796106][T10790] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1235'. [ 238.806452][T10790] netlink: 'syz.0.1235': attribute type 9 has an invalid length. [ 238.922040][T10798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1237'. [ 238.938999][T10798] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1237'. [ 239.059469][T10803] vlan2: entered promiscuous mode [ 239.065269][T10803] vlan2: entered allmulticast mode [ 239.219060][T10809] Cannot find del_set index 286 as target [ 239.230829][T10809] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1241'. [ 239.342351][T10816] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1244'. [ 239.465854][T10820] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1247'. [ 239.548508][T10825] tipc: Enabling of bearer rejected, already enabled [ 240.867383][T10858] FAULT_INJECTION: forcing a failure. [ 240.867383][T10858] name failslab, interval 1, probability 0, space 0, times 0 [ 240.881970][T10858] CPU: 1 UID: 0 PID: 10858 Comm: syz.1.1259 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 240.892805][T10858] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 240.903649][T10858] Call Trace: [ 240.907025][T10858] [ 240.910140][T10858] dump_stack_lvl+0x241/0x360 [ 240.915929][T10858] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.921175][T10858] ? __pfx__printk+0x10/0x10 [ 240.925816][T10858] ? fs_reclaim_acquire+0x93/0x130 [ 240.931018][T10858] ? __pfx___might_resched+0x10/0x10 [ 240.936601][T10858] should_fail_ex+0x3b0/0x4e0 [ 240.941317][T10858] ? security_inode_alloc+0x37/0x310 [ 240.946773][T10858] should_failslab+0xac/0x100 [ 240.951512][T10858] ? security_inode_alloc+0x37/0x310 [ 240.957000][T10858] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 240.963106][T10858] security_inode_alloc+0x37/0x310 [ 240.968420][T10858] inode_init_always_gfp+0x988/0xcd0 [ 240.973819][T10858] ? __pfx_proc_alloc_inode+0x10/0x10 [ 240.980449][T10858] alloc_inode+0x9f/0x1a0 [ 240.985235][T10858] new_inode+0x22/0x1d0 [ 240.989981][T10858] proc_pid_make_inode+0x1f/0x130 [ 240.996402][T10858] proc_pident_instantiate+0x76/0x2b0 [ 241.001807][T10858] proc_pident_lookup+0x1c7/0x2a0 [ 241.006930][T10858] __lookup_slow+0x28c/0x3f0 [ 241.011559][T10858] ? __pfx___lookup_slow+0x10/0x10 [ 241.016893][T10858] ? try_to_unlazy+0x35c/0x5b0 [ 241.021779][T10858] lookup_slow+0x53/0x70 [ 241.026082][T10858] link_path_walk+0x99b/0xea0 [ 241.030815][T10858] path_openat+0x266/0x3590 [ 241.035884][T10858] ? __lock_acquire+0x1384/0x2050 [ 241.041297][T10858] ? __pfx_stack_trace_save+0x10/0x10 [ 241.046728][T10858] ? __pfx_path_openat+0x10/0x10 [ 241.051721][T10858] do_filp_open+0x235/0x490 [ 241.056342][T10858] ? __pfx_do_filp_open+0x10/0x10 [ 241.061488][T10858] ? __pfx_kfree_link+0x10/0x10 [ 241.066601][T10858] ? _raw_spin_unlock+0x28/0x50 [ 241.071523][T10858] ? alloc_fd+0x5a1/0x640 [ 241.075918][T10858] do_sys_openat2+0x13e/0x1d0 [ 241.080652][T10858] ? __pfx_do_sys_openat2+0x10/0x10 [ 241.085879][T10858] ? ppp_ioctl+0x457/0x1cd0 [ 241.090417][T10858] __x64_sys_openat+0x247/0x2a0 [ 241.095382][T10858] ? __pfx___x64_sys_openat+0x10/0x10 [ 241.100805][T10858] ? do_syscall_64+0x100/0x230 [ 241.105592][T10858] ? do_syscall_64+0xb6/0x230 [ 241.110327][T10858] do_syscall_64+0xf3/0x230 [ 241.114880][T10858] ? clear_bhb_loop+0x35/0x90 [ 241.119595][T10858] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.125514][T10858] RIP: 0033:0x7f1b96b7d0b0 [ 241.129955][T10858] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 19 8f 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 6c 8f 02 00 8b 44 [ 241.149775][T10858] RSP: 002b:00007f1b94ff5f60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 241.158776][T10858] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1b96b7d0b0 [ 241.167156][T10858] RDX: 0000000000000000 RSI: 00007f1b96bf172e RDI: 00000000ffffff9c [ 241.175250][T10858] RBP: 00007f1b96bf172e R08: 0000000000000000 R09: 0000000000000000 [ 241.183629][T10858] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 241.191722][T10858] R13: 0000000000000000 R14: 00007f1b96d35f80 R15: 00007ffd43b00b18 [ 241.199732][T10858] [ 241.337362][T10842] syz.2.1253: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 241.446031][T10842] CPU: 1 UID: 0 PID: 10842 Comm: syz.2.1253 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 241.456982][T10842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 241.467268][T10842] Call Trace: [ 241.471075][T10842] [ 241.474145][T10842] dump_stack_lvl+0x241/0x360 [ 241.474714][T10871] __nla_validate_parse: 5 callbacks suppressed [ 241.474734][T10871] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1261'. [ 241.478862][T10842] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.478896][T10842] ? __pfx__printk+0x10/0x10 [ 241.478924][T10842] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 241.478953][T10842] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 241.478984][T10842] warn_alloc+0x278/0x410 [ 241.479015][T10842] ? __pfx_warn_alloc+0x10/0x10 [ 241.526525][T10842] ? translate_table+0x174/0x2330 [ 241.531681][T10842] ? __get_vm_area_node+0x23d/0x270 [ 241.537053][T10842] __vmalloc_node_range_noprof+0x691/0x13f0 [ 241.543113][T10842] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 241.549018][T10842] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 241.555411][T10842] ? rcu_is_watching+0x15/0xb0 [ 241.560305][T10842] ? trace_kmalloc+0x1f/0xd0 [ 241.564954][T10842] ? __kmalloc_node_noprof+0x247/0x440 [ 241.570437][T10842] ? __kvmalloc_node_noprof+0x72/0x190 [ 241.575916][T10842] __kvmalloc_node_noprof+0x142/0x190 [ 241.581308][T10842] ? translate_table+0x174/0x2330 [ 241.588528][T10842] translate_table+0x174/0x2330 [ 241.593428][T10842] ? __pfx_translate_table+0x10/0x10 [ 241.598844][T10842] ? __might_fault+0xaa/0x120 [ 241.603579][T10842] ? __pfx_lock_release+0x10/0x10 [ 241.608748][T10842] ? __might_fault+0xaa/0x120 [ 241.613503][T10842] ? __might_fault+0xc6/0x120 [ 241.618216][T10842] ? _copy_from_user+0x99/0xc0 [ 241.623019][T10842] ? copy_from_sockptr_offset+0x6b/0xb0 [ 241.628593][T10842] do_ip6t_set_ctl+0xe4c/0x1270 [ 241.633475][T10842] ? __pfx___might_resched+0x10/0x10 [ 241.638808][T10842] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 241.644136][T10842] ? __pfx_lock_release+0x10/0x10 [ 241.649220][T10842] ? __mutex_unlock_slowpath+0x21d/0x750 [ 241.654900][T10842] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 241.660903][T10842] ? aa_sk_perm+0x96d/0xab0 [ 241.665438][T10842] ? __pfx_aa_sk_perm+0x10/0x10 [ 241.670313][T10842] nf_setsockopt+0x295/0x2c0 [ 241.674946][T10842] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 241.680863][T10842] do_sock_setsockopt+0x3af/0x720 [ 241.685923][T10842] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 241.691504][T10842] ? __fget_files+0x29/0x470 [ 241.696118][T10842] ? __fget_files+0x3f3/0x470 [ 241.700915][T10842] ? __fget_files+0x29/0x470 [ 241.705542][T10842] __sys_setsockopt+0x1a2/0x250 [ 241.710451][T10842] __x64_sys_setsockopt+0xb5/0xd0 [ 241.715509][T10842] do_syscall_64+0xf3/0x230 [ 241.720046][T10842] ? clear_bhb_loop+0x35/0x90 [ 241.724757][T10842] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.730873][T10842] RIP: 0033:0x7ffa7797e719 [ 241.735580][T10842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 241.755382][T10842] RSP: 002b:00007ffa7872c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 241.763844][T10842] RAX: ffffffffffffffda RBX: 00007ffa77b35f80 RCX: 00007ffa7797e719 [ 241.771875][T10842] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 241.780427][T10842] RBP: 00007ffa779f1616 R08: 00000000000007e0 R09: 0000000000000000 [ 241.788729][T10842] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 241.796726][T10842] R13: 0000000000000000 R14: 00007ffa77b35f80 R15: 00007fff90522758 [ 241.804732][T10842] [ 241.859179][T10842] Mem-Info: [ 241.863559][T10842] active_anon:14304 inactive_anon:0 isolated_anon:0 [ 241.863559][T10842] active_file:1784 inactive_file:38257 isolated_file:0 [ 241.863559][T10842] unevictable:768 dirty:382 writeback:0 [ 241.863559][T10842] slab_reclaimable:9951 slab_unreclaimable:102544 [ 241.863559][T10842] mapped:21794 shmem:1975 pagetables:732 [ 241.863559][T10842] sec_pagetables:0 bounce:0 [ 241.863559][T10842] kernel_misc_reclaimable:0 [ 241.863559][T10842] free:1328732 free_pcp:724 free_cma:0 [ 241.995387][T10842] Node 0 active_anon:58516kB inactive_anon:0kB active_file:7136kB inactive_file:152960kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:85076kB dirty:1528kB writeback:0kB shmem:7964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10760kB pagetables:2828kB sec_pagetables:0kB all_unreclaimable? no [ 242.079377][T10842] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 242.157695][T10842] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.168433][T10882] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1261'. [ 242.241904][T10842] lowmem_reserve[]: 0 2463 2464 0 0 [ 242.255523][T10842] Node 0 DMA32 free:1394584kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:59404kB inactive_anon:0kB active_file:7136kB inactive_file:152376kB unevictable:1536kB writepending:1532kB present:3129332kB managed:2550488kB mlocked:0kB bounce:0kB free_pcp:1348kB local_pcp:604kB free_cma:0kB [ 242.378699][T10842] lowmem_reserve[]: 0 0 0 0 0 [ 242.383757][T10842] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:584kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 242.463054][T10842] lowmem_reserve[]: 0 0 0 0 0 [ 242.479352][T10893] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 242.519158][T10842] Node 1 Normal free:3904076kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:0kB free_cma:0kB [ 242.565194][T10893] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 242.580609][T10893] gretap1: entered promiscuous mode [ 242.590425][T10893] gretap1: entered allmulticast mode [ 242.599785][T10842] lowmem_reserve[]: 0 0 0 0 0 [ 242.613518][T10842] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 242.638934][T10842] Node 0 DMA32: 2*4kB (ME) 5*8kB (UE) 8*16kB (ME) 23*32kB (UE) 16*64kB (UME) 53*128kB (UME) 18*256kB (UME) 6*512kB (UM) 8*1024kB (ME) 3*2048kB (ME) 332*4096kB (M) = 1390608kB [ 242.687999][T10842] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 242.708258][T10842] Node 1 Normal: 249*4kB (UME) 69*8kB (UME) 44*16kB (UME) 220*32kB (UME) 90*64kB (UME) 35*128kB (UME) 14*256kB (UM) 6*512kB (UM) 3*1024kB (UME) 2*2048kB (UE) 945*4096kB (M) = 3904076kB [ 242.764634][T10842] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.786562][T10842] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.801593][T10899] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1273'. [ 242.816788][T10842] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 242.856717][T10842] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 242.876026][T10842] 43969 total pagecache pages [ 242.887712][T10842] 0 pages in swap cache [ 242.914149][T10842] Free swap = 124996kB [ 242.918660][T10842] Total swap = 124996kB [ 242.948982][T10842] 2097051 pages RAM [ 242.953003][T10842] 0 pages HighMem/MovableOnly [ 242.966053][T10842] 427643 pages reserved [ 242.984421][T10842] 0 pages cma reserved [ 243.198452][T10915] Bluetooth: MGMT ver 1.23 [ 243.244698][T10919] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1279'. [ 243.528345][T10929] vlan2: entered promiscuous mode [ 243.565769][T10929] team0: entered promiscuous mode [ 243.572678][T10929] team_slave_0: entered promiscuous mode [ 243.579469][T10929] team_slave_1: entered promiscuous mode [ 243.585683][T10929] vlan2: entered allmulticast mode [ 243.591797][T10929] team0: entered allmulticast mode [ 243.603575][T10929] team_slave_0: entered allmulticast mode [ 243.611393][T10929] team_slave_1: entered allmulticast mode [ 243.624540][T10929] team0: Device vlan2 is already an upper device of the team interface [ 243.646529][T10929] team0: left allmulticast mode [ 243.657604][T10929] team_slave_0: left allmulticast mode [ 243.670966][T10929] team_slave_1: left allmulticast mode [ 243.676963][T10929] team0: left promiscuous mode [ 243.697392][T10929] team_slave_0: left promiscuous mode [ 243.707751][T10929] team_slave_1: left promiscuous mode [ 244.394152][T10954] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1290'. [ 244.800910][T10965] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1293'. [ 245.183186][T10983] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1293'. [ 245.939357][T11006] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1304'. [ 246.110964][T11015] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1302'. [ 246.144494][T11015] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1302'. [ 248.574296][T11053] __nla_validate_parse: 3 callbacks suppressed [ 248.574319][T11053] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1313'. [ 248.827391][T11067] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1311'. [ 248.894843][T11068] Cannot find del_set index 286 as target [ 248.909613][T11067] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1311'. [ 248.977759][T11067] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1311'. [ 248.983990][T11074] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1313'. [ 251.365468][T11083] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1320'. [ 251.995035][T11113] FAULT_INJECTION: forcing a failure. [ 251.995035][T11113] name failslab, interval 1, probability 0, space 0, times 0 [ 252.025927][T11113] CPU: 1 UID: 0 PID: 11113 Comm: syz.0.1329 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 252.037852][T11113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 252.048842][T11113] Call Trace: [ 252.052345][T11113] [ 252.055869][T11113] dump_stack_lvl+0x241/0x360 [ 252.060678][T11113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.066311][T11113] ? __pfx__printk+0x10/0x10 [ 252.074017][T11113] ? __kmalloc_node_noprof+0xb7/0x440 [ 252.079791][T11113] ? __pfx___might_resched+0x10/0x10 [ 252.085152][T11113] should_fail_ex+0x3b0/0x4e0 [ 252.090170][T11113] should_failslab+0xac/0x100 [ 252.095106][T11113] __kmalloc_node_noprof+0xdf/0x440 [ 252.100470][T11113] ? __kvmalloc_node_noprof+0x72/0x190 [ 252.106338][T11113] __kvmalloc_node_noprof+0x72/0x190 [ 252.111688][T11113] nf_tables_newset+0x1770/0x2ee0 [ 252.116812][T11113] ? __pfx_nf_tables_newset+0x10/0x10 [ 252.122345][T11113] ? __pfx_lock_release+0x10/0x10 [ 252.127559][T11113] ? __nla_parse+0x40/0x60 [ 252.132085][T11113] nfnetlink_rcv+0x14dc/0x2ab0 [ 252.137125][T11113] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 252.142894][T11113] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.148979][T11113] ? skb_clone+0x240/0x390 [ 252.153880][T11113] ? __pfx_lock_release+0x10/0x10 [ 252.159447][T11113] ? netlink_deliver_tap+0x2e/0x1b0 [ 252.166027][T11113] netlink_unicast+0x7f6/0x990 [ 252.170875][T11113] ? __pfx_netlink_unicast+0x10/0x10 [ 252.176954][T11113] ? __virt_addr_valid+0x183/0x530 [ 252.183923][T11113] ? __check_object_size+0x48e/0x900 [ 252.189597][T11113] netlink_sendmsg+0x8e4/0xcb0 [ 252.195281][T11113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.200923][T11113] ? aa_sock_msg_perm+0x91/0x160 [ 252.205934][T11113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 252.211280][T11113] __sock_sendmsg+0x221/0x270 [ 252.216017][T11113] ____sys_sendmsg+0x52a/0x7e0 [ 252.220854][T11113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 252.226836][T11113] __sys_sendmsg+0x292/0x380 [ 252.231614][T11113] ? __pfx___sys_sendmsg+0x10/0x10 [ 252.236908][T11113] ? __pfx_vfs_write+0x10/0x10 [ 252.241846][T11113] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.248247][T11113] ? do_syscall_64+0x100/0x230 [ 252.253094][T11113] ? do_syscall_64+0xb6/0x230 [ 252.258803][T11113] do_syscall_64+0xf3/0x230 [ 252.263661][T11113] ? clear_bhb_loop+0x35/0x90 [ 252.268927][T11113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.276409][T11113] RIP: 0033:0x7fd38957e719 [ 252.280920][T11113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.301900][T11113] RSP: 002b:00007fd38a2bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 252.310660][T11113] RAX: ffffffffffffffda RBX: 00007fd389735f80 RCX: 00007fd38957e719 [ 252.319326][T11113] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 252.327653][T11113] RBP: 00007fd38a2bb090 R08: 0000000000000000 R09: 0000000000000000 [ 252.335722][T11113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 252.344023][T11113] R13: 0000000000000000 R14: 00007fd389735f80 R15: 00007fff6a3fba98 [ 252.352072][T11113] [ 252.480472][T11116] Cannot find del_set index 286 as target [ 252.579855][T11120] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1331'. [ 252.948793][T11127] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1331'. [ 254.465172][T11112] bridge14: entered promiscuous mode [ 254.481836][T11118] netlink: 'syz.0.1330': attribute type 21 has an invalid length. [ 254.509402][T11118] IPv6: NLM_F_CREATE should be specified when creating new route [ 254.527487][T11118] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 254.535230][T11118] IPv6: NLM_F_CREATE should be set when creating new route [ 254.542615][T11118] IPv6: NLM_F_CREATE should be set when creating new route [ 254.549958][T11118] IPv6: NLM_F_CREATE should be set when creating new route [ 254.962110][T11147] FAULT_INJECTION: forcing a failure. [ 254.962110][T11147] name failslab, interval 1, probability 0, space 0, times 0 [ 255.019956][T11147] CPU: 1 UID: 0 PID: 11147 Comm: syz.0.1340 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 255.031771][T11147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 255.041874][T11147] Call Trace: [ 255.045193][T11147] [ 255.048251][T11147] dump_stack_lvl+0x241/0x360 [ 255.052992][T11147] ? __pfx_dump_stack_lvl+0x10/0x10 [ 255.058243][T11147] ? __pfx__printk+0x10/0x10 [ 255.062885][T11147] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 255.068925][T11147] ? __pfx___might_resched+0x10/0x10 [ 255.074271][T11147] should_fail_ex+0x3b0/0x4e0 [ 255.079003][T11147] should_failslab+0xac/0x100 [ 255.083886][T11147] ? __alloc_skb+0x1c3/0x440 [ 255.088535][T11147] kmem_cache_alloc_node_noprof+0x71/0x320 [ 255.094422][T11147] __alloc_skb+0x1c3/0x440 [ 255.098916][T11147] ? __pfx___alloc_skb+0x10/0x10 [ 255.103927][T11147] ? netlink_autobind+0xd6/0x2f0 [ 255.108934][T11147] ? netlink_autobind+0x2b0/0x2f0 [ 255.114032][T11147] netlink_sendmsg+0x638/0xcb0 [ 255.118882][T11147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.124324][T11147] ? aa_sock_msg_perm+0x91/0x160 [ 255.129334][T11147] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.134670][T11147] __sock_sendmsg+0x221/0x270 [ 255.139387][T11147] ____sys_sendmsg+0x52a/0x7e0 [ 255.144189][T11147] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.149529][T11147] __sys_sendmsg+0x292/0x380 [ 255.154172][T11147] ? __pfx___sys_sendmsg+0x10/0x10 [ 255.159433][T11147] ? __pfx_vfs_write+0x10/0x10 [ 255.164257][T11147] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 255.170638][T11147] ? do_syscall_64+0x100/0x230 [ 255.175436][T11147] ? do_syscall_64+0xb6/0x230 [ 255.180153][T11147] do_syscall_64+0xf3/0x230 [ 255.184794][T11147] ? clear_bhb_loop+0x35/0x90 [ 255.189492][T11147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.195443][T11147] RIP: 0033:0x7fd38957e719 [ 255.199883][T11147] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 255.219697][T11147] RSP: 002b:00007fd38a2bb038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 255.228144][T11147] RAX: ffffffffffffffda RBX: 00007fd389735f80 RCX: 00007fd38957e719 [ 255.236575][T11147] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 255.244592][T11147] RBP: 00007fd38a2bb090 R08: 0000000000000000 R09: 0000000000000000 [ 255.252582][T11147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.260672][T11147] R13: 0000000000000000 R14: 00007fd389735f80 R15: 00007fff6a3fba98 [ 255.268696][T11147] [ 255.514707][T11161] Cannot find del_set index 286 as target [ 255.693872][T11165] Cannot find del_set index 286 as target [ 255.730914][T11165] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1343'. [ 255.893597][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.900156][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.358896][T11172] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1345'. [ 257.388464][T11172] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1345'. [ 257.449012][T11172] netlink: 92 bytes leftover after parsing attributes in process `syz.4.1345'. [ 257.696638][T11189] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1353'. [ 257.960043][T11202] Cannot find del_set index 286 as target [ 258.148658][T11215] netlink: 'syz.4.1358': attribute type 10 has an invalid length. [ 258.506044][T11224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1367'. [ 258.521217][T11224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1367'. [ 258.532133][T11224] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1367'. [ 258.541513][T11224] block nbd0: Unsupported socket: shutdown callout must be supported. [ 258.597904][T11230] Cannot find del_set index 286 as target [ 258.606072][T11230] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1365'. [ 258.800557][T11235] netlink: 'syz.3.1369': attribute type 1 has an invalid length. [ 258.817766][T11235] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1369'. [ 259.137960][T11251] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 259.278508][T11255] ip6gretap0: entered promiscuous mode [ 259.326424][T11255] batadv_slave_0: entered promiscuous mode [ 259.552656][T11266] netlink: 'syz.1.1378': attribute type 10 has an invalid length. [ 259.587010][T11266] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 259.614276][T11266] netdevsim netdevsim1 : renamed from netdevsim0 (while UP) [ 259.716042][T11281] Cannot find del_set index 286 as target [ 259.767984][T11274] tipc: Enabling of bearer rejected, already enabled [ 259.928094][T11286] bridge0: entered promiscuous mode [ 260.314834][T11295] netlink: 'syz.1.1386': attribute type 4 has an invalid length. [ 260.731841][T11314] Cannot find del_set index 286 as target [ 260.747497][T11314] __nla_validate_parse: 3 callbacks suppressed [ 260.747520][T11314] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1389'. [ 260.837615][T11320] FAULT_INJECTION: forcing a failure. [ 260.837615][T11320] name failslab, interval 1, probability 0, space 0, times 0 [ 260.856681][T11320] CPU: 1 UID: 0 PID: 11320 Comm: syz.4.1394 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 260.867623][T11320] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 260.877726][T11320] Call Trace: [ 260.881049][T11320] [ 260.884023][T11320] dump_stack_lvl+0x241/0x360 [ 260.888754][T11320] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.894013][T11320] ? __pfx__printk+0x10/0x10 [ 260.898659][T11320] ? __kmalloc_noprof+0xb0/0x400 [ 260.903659][T11320] ? __pfx___might_resched+0x10/0x10 [ 260.909127][T11320] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.915349][T11320] should_fail_ex+0x3b0/0x4e0 [ 260.920058][T11320] ? copy_splice_read+0x18d/0xb60 [ 260.925123][T11320] should_failslab+0xac/0x100 [ 260.929844][T11320] ? copy_splice_read+0x18d/0xb60 [ 260.934891][T11320] __kmalloc_noprof+0xd8/0x400 [ 260.939675][T11320] ? __pfx_copy_splice_read+0x10/0x10 [ 260.945072][T11320] copy_splice_read+0x18d/0xb60 [ 260.949984][T11320] ? __asan_memset+0x23/0x50 [ 260.954606][T11320] ? __pfx_copy_splice_read+0x10/0x10 [ 260.960043][T11320] ? __raw_spin_lock_init+0x45/0x100 [ 260.965380][T11320] ? alloc_pipe_info+0x370/0x4d0 [ 260.970342][T11320] ? __pfx_copy_splice_read+0x10/0x10 [ 260.975744][T11320] splice_direct_to_actor+0x4af/0xc80 [ 260.981153][T11320] ? __pfx_direct_splice_actor+0x10/0x10 [ 260.986807][T11320] ? __pfx_splice_direct_to_actor+0x10/0x10 [ 260.992725][T11320] ? __fget_files+0x29/0x470 [ 260.997333][T11320] ? __pfx_lock_release+0x10/0x10 [ 261.002385][T11320] do_splice_direct+0x289/0x3e0 [ 261.007265][T11320] ? __pfx_do_splice_direct+0x10/0x10 [ 261.012666][T11320] ? __pfx_direct_file_splice_eof+0x10/0x10 [ 261.018586][T11320] ? rw_verify_area+0x1c3/0x6f0 [ 261.023463][T11320] do_sendfile+0x561/0xe10 [ 261.027899][T11320] ? __pfx_vfs_write+0x10/0x10 [ 261.032682][T11320] ? __pfx_do_sendfile+0x10/0x10 [ 261.037648][T11320] __se_sys_sendfile64+0x17c/0x1e0 [ 261.042874][T11320] ? __pfx___se_sys_sendfile64+0x10/0x10 [ 261.048522][T11320] ? do_syscall_64+0x100/0x230 [ 261.053424][T11320] ? do_syscall_64+0xb6/0x230 [ 261.058163][T11320] do_syscall_64+0xf3/0x230 [ 261.062727][T11320] ? clear_bhb_loop+0x35/0x90 [ 261.067427][T11320] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.073339][T11320] RIP: 0033:0x7ff15857e719 [ 261.077771][T11320] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.097396][T11320] RSP: 002b:00007ff15929a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 261.106217][T11320] RAX: ffffffffffffffda RBX: 00007ff158735f80 RCX: 00007ff15857e719 [ 261.114253][T11320] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000004 [ 261.122242][T11320] RBP: 00007ff15929a090 R08: 0000000000000000 R09: 0000000000000000 [ 261.130228][T11320] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 261.138208][T11320] R13: 0000000000000000 R14: 00007ff158735f80 R15: 00007ffd0cb30938 [ 261.146212][T11320] [ 261.341533][T11333] netlink: 124 bytes leftover after parsing attributes in process `syz.3.1398'. [ 261.446266][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1399'. [ 261.531868][T11338] bridge14: entered promiscuous mode [ 261.608003][T11342] Cannot find del_set index 286 as target [ 261.620425][T11344] atomic_op ffff88807eb83198 conn xmit_atomic 0000000000000000 [ 261.658956][T11344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1401'. [ 261.708684][T11345] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1398'. [ 261.884990][T11351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1404'. [ 262.016312][T11351] bond1: entered promiscuous mode [ 262.211792][T11362] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1406'. [ 262.463038][T11370] Cannot find del_set index 286 as target [ 262.487397][T11370] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1410'. [ 262.709372][T11385] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1415'. [ 262.758170][T11385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.812339][T11390] bridge11: entered promiscuous mode [ 263.183617][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1420'. [ 263.454477][T11381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.516312][T11417] netlink: 'syz.1.1421': attribute type 10 has an invalid length. [ 263.833387][T11422] netlink: 'syz.3.1425': attribute type 8 has an invalid length. [ 264.527705][T11444] Cannot find del_set index 286 as target [ 265.574726][T11497] netlink: 'syz.2.1447': attribute type 10 has an invalid length. [ 266.057061][T11525] __nla_validate_parse: 4 callbacks suppressed [ 266.057083][T11525] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1456'. [ 266.085217][T11526] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1456'. [ 266.759590][T11563] netlink: 'syz.1.1459': attribute type 10 has an invalid length. [ 268.806585][T11538] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 268.832386][T11545] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1462'. [ 268.865061][T11563] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 268.904128][T11563] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 269.047223][T11571] vlan2: entered promiscuous mode [ 269.099026][T11571] team0: entered promiscuous mode [ 269.104287][T11571] team_slave_0: entered promiscuous mode [ 269.144873][T11571] team_slave_1: entered promiscuous mode [ 269.186881][T11571] vlan2: entered allmulticast mode [ 269.201880][T11571] team0: entered allmulticast mode [ 269.218794][T11571] team_slave_0: entered allmulticast mode [ 269.250124][T11571] team_slave_1: entered allmulticast mode [ 269.274934][T11571] team0: Device vlan2 is already an upper device of the team interface [ 269.315232][T11571] team0: left allmulticast mode [ 269.335568][T11571] team_slave_0: left allmulticast mode [ 269.344971][T11571] team_slave_1: left allmulticast mode [ 269.354154][T11571] team0: left promiscuous mode [ 269.363240][T11571] team_slave_0: left promiscuous mode [ 269.372823][T11571] team_slave_1: left promiscuous mode [ 270.449935][T11634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1480'. [ 270.471598][T11634] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1480'. [ 270.482319][T11635] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1481'. [ 270.685972][T11647] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1483'. [ 270.940385][T11660] netlink: 'syz.3.1484': attribute type 10 has an invalid length. [ 270.983301][T11662] netlink: 'syz.0.1487': attribute type 9 has an invalid length. [ 271.007397][T11662] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1487'. [ 271.340745][T11675] sctp: [Deprecated]: syz.0.1492 (pid 11675) Use of struct sctp_assoc_value in delayed_ack socket option. [ 271.340745][T11675] Use struct sctp_sack_info instead [ 271.590416][T11687] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1494'. [ 271.629967][T11688] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1497'. [ 272.277342][T11724] netlink: 'syz.4.1503': attribute type 10 has an invalid length. [ 272.311103][T11723] netlink: 'syz.0.1504': attribute type 11 has an invalid length. [ 272.337827][T11723] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1504'. [ 272.369714][T11724] macvlan0: entered promiscuous mode [ 272.375194][T11724] macvlan0: entered allmulticast mode [ 272.394023][T11725] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1503'. [ 272.414398][T11724] veth1_vlan: entered allmulticast mode [ 272.422629][T11724] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 272.424007][T11725] netlink: 172 bytes leftover after parsing attributes in process `syz.4.1503'. [ 272.848319][T11744] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1510'. [ 273.231238][T11761] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1516'. [ 273.343140][T11769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1518'. [ 273.629397][T11778] Cannot find del_set index 286 as target [ 273.709377][T11778] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1519'. [ 273.871743][T11782] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1521'. [ 275.263090][T11850] netlink: 'syz.1.1538': attribute type 1 has an invalid length. [ 276.865037][T11865] __nla_validate_parse: 5 callbacks suppressed [ 276.865060][T11865] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1545'. [ 276.880821][T11865] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1545'. [ 276.890187][T11865] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1545'. [ 277.066180][T11882] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1541'. [ 277.152060][T11874] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.1545'. [ 277.730650][T11917] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1556'. [ 277.807346][T11919] Cannot find del_set index 286 as target [ 277.884250][T11919] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1555'. [ 278.309325][T11947] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1563'. [ 278.443659][T11955] vlan2: entered promiscuous mode [ 278.471994][T11955] team0: entered promiscuous mode [ 278.486850][T11955] team_slave_0: entered promiscuous mode [ 278.498355][T11955] team_slave_1: entered promiscuous mode [ 278.518232][T11955] vlan2: entered allmulticast mode [ 278.527481][T11963] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1567'. [ 278.536927][T11955] team0: entered allmulticast mode [ 278.547090][T11955] team_slave_0: entered allmulticast mode [ 278.560207][T11955] team_slave_1: entered allmulticast mode [ 278.575406][T11955] team0: Device vlan2 is already an upper device of the team interface [ 278.643782][T11955] team0: left allmulticast mode [ 278.679020][T11955] team_slave_0: left allmulticast mode [ 278.684576][T11955] team_slave_1: left allmulticast mode [ 278.728991][T11955] team0: left promiscuous mode [ 278.734145][T11955] team_slave_0: left promiscuous mode [ 278.740649][T11955] team_slave_1: left promiscuous mode [ 279.064462][T11984] FAULT_INJECTION: forcing a failure. [ 279.064462][T11984] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 279.107153][T11984] CPU: 1 UID: 0 PID: 11984 Comm: syz.3.1573 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 279.118065][T11984] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 279.128350][T11984] Call Trace: [ 279.131677][T11984] [ 279.134657][T11984] dump_stack_lvl+0x241/0x360 [ 279.139398][T11984] ? __pfx_dump_stack_lvl+0x10/0x10 [ 279.144661][T11984] ? __pfx__printk+0x10/0x10 [ 279.149311][T11984] ? __pfx_lock_release+0x10/0x10 [ 279.154422][T11984] should_fail_ex+0x3b0/0x4e0 [ 279.159160][T11984] _copy_from_user+0x2f/0xc0 [ 279.163814][T11984] copy_msghdr_from_user+0xae/0x680 [ 279.169104][T11984] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 279.174988][T11984] __sys_sendmsg+0x22d/0x380 [ 279.179734][T11984] ? __pfx___sys_sendmsg+0x10/0x10 [ 279.184929][T11984] ? __pfx_vfs_write+0x10/0x10 [ 279.189780][T11984] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 279.196183][T11984] ? do_syscall_64+0x100/0x230 [ 279.201013][T11984] ? do_syscall_64+0xb6/0x230 [ 279.205751][T11984] do_syscall_64+0xf3/0x230 [ 279.210332][T11984] ? clear_bhb_loop+0x35/0x90 [ 279.215424][T11984] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.221423][T11984] RIP: 0033:0x7fb2d477e719 [ 279.225905][T11984] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 279.245608][T11984] RSP: 002b:00007fb2d5497038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 279.254087][T11984] RAX: ffffffffffffffda RBX: 00007fb2d4935f80 RCX: 00007fb2d477e719 [ 279.262404][T11984] RDX: 0000000000000000 RSI: 0000000020000500 RDI: 0000000000000003 [ 279.270438][T11984] RBP: 00007fb2d5497090 R08: 0000000000000000 R09: 0000000000000000 [ 279.278472][T11984] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 279.286702][T11984] R13: 0000000000000000 R14: 00007fb2d4935f80 R15: 00007fffa91dfb88 [ 279.294833][T11984] [ 279.369942][T11987] netlink: 76 bytes leftover after parsing attributes in process `syz.4.1574'. [ 279.386007][T11987] nbd: must specify at least one socket [ 279.483707][T11994] erspan0: entered promiscuous mode [ 279.510693][T11994] batadv_slave_1: entered promiscuous mode [ 279.537033][T11994] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 279.576321][T11994] Cannot create hsr debugfs directory [ 280.332049][T12034] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 280.677544][T12051] netlink: 'syz.2.1591': attribute type 11 has an invalid length. [ 281.143483][T12076] xt_limit: Overflow, try lower: 262144/524288 [ 281.491833][T12093] netlink: 'syz.4.1604': attribute type 11 has an invalid length. [ 281.978800][T12111] __nla_validate_parse: 5 callbacks suppressed [ 281.998940][T12111] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1610'. [ 282.045732][T12115] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1611'. [ 282.076129][T12118] tipc: Enabling of bearer rejected, already enabled [ 282.176955][T12120] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1613'. [ 282.239101][T12122] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1612'. [ 282.289779][T12122] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 282.350056][T12122] gretap1: entered promiscuous mode [ 282.368562][T12122] gretap1: entered allmulticast mode [ 282.968971][T12159] netlink: 'syz.0.1621': attribute type 1 has an invalid length. [ 283.000724][T12159] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.1621'. [ 283.123357][T12164] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1625'. [ 283.143549][T12161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1624'. [ 283.160482][T12164] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1625'. [ 283.174351][T12161] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1624'. [ 283.512462][T12185] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1632'. [ 283.659224][T12194] tipc: Enabling of bearer rejected, already enabled [ 284.082597][T12223] netlink: 'syz.1.1638': attribute type 1 has an invalid length. [ 284.797159][T12261] netlink: 'syz.4.1649': attribute type 1 has an invalid length. [ 285.135168][T12280] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 285.255077][T12285] Bluetooth: MGMT ver 1.23 [ 285.373855][T12291] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 285.478174][T12303] tipc: Enabling of bearer rejected, already enabled [ 285.769291][T12315] pim6reg: entered allmulticast mode [ 285.797536][T12315] netlink: zone id is out of range [ 285.822892][T12315] netlink: del zone limit has 4 unknown bytes [ 286.053962][T12328] vlan2: entered promiscuous mode [ 286.066993][T12328] vlan2: entered allmulticast mode [ 287.412025][ T54] Bluetooth: hci0: command tx timeout [ 288.733315][T12388] Cannot find del_set index 286 as target [ 288.778926][T12388] __nla_validate_parse: 4 callbacks suppressed [ 288.778950][T12388] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1684'. [ 289.157209][T12420] bridge15: entered promiscuous mode [ 289.664071][T12439] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1694'. [ 289.877191][T12451] netlink: 'syz.3.1698': attribute type 11 has an invalid length. [ 289.898693][T12456] xt_bpf: check failed: parse error [ 289.934655][T12451] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1698'. [ 290.097782][T12461] vlan2: entered promiscuous mode [ 290.115243][T12461] vlan2: entered allmulticast mode [ 290.630661][T12478] Cannot find del_set index 286 as target [ 290.668505][T12478] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1703'. [ 291.147839][T12511] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1711'. [ 291.157494][T12511] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1711'. [ 291.495301][T12519] can: request_module (can-proto-0) failed. [ 291.669001][T12530] netlink: 'syz.3.1716': attribute type 1 has an invalid length. [ 291.687742][T12530] netlink: 'syz.3.1716': attribute type 2 has an invalid length. [ 292.219658][T12558] netlink: 'syz.3.1723': attribute type 11 has an invalid length. [ 292.248747][T12558] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1723'. [ 292.580708][T12582] netlink: 104 bytes leftover after parsing attributes in process `syz.1.1730'. [ 292.922762][T12597] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1735'. [ 293.129140][T12604] syz_tun: entered promiscuous mode [ 293.144052][T12604] syz_tun: left promiscuous mode [ 293.518196][T12623] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1739'. [ 293.929313][T12635] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1744'. [ 294.424734][T12659] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1749'. [ 294.703767][T12671] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1749'. [ 295.419216][T12692] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1754'. [ 295.572825][T12700] netlink: 'syz.1.1757': attribute type 11 has an invalid length. [ 295.624603][T12700] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1757'. [ 295.810211][T12706] sctp: [Deprecated]: syz.3.1759 (pid 12706) Use of int in maxseg socket option. [ 295.810211][T12706] Use struct sctp_assoc_value instead [ 295.959924][T12711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1760'. [ 296.017369][T12711] bridge_slave_1: left allmulticast mode [ 296.027500][T12711] bridge_slave_1: left promiscuous mode [ 296.039902][T12711] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.116276][T12711] bridge_slave_0: left allmulticast mode [ 296.129575][ T5154] Bluetooth: hci4: command 0x0406 tx timeout [ 296.145828][T12711] bridge_slave_0: left promiscuous mode [ 296.179671][T12711] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.324679][T12730] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1765'. [ 296.351785][T12711] bond0: (slave bridge0): Releasing backup interface [ 296.380736][T12737] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1767'. [ 296.423205][T12730] sch_tbf: peakrate 4 is lower than or equals to rate 33554432 ! [ 296.605545][T12748] FAULT_INJECTION: forcing a failure. [ 296.605545][T12748] name failslab, interval 1, probability 0, space 0, times 0 [ 296.635578][T12745] netlink: 'syz.4.1768': attribute type 11 has an invalid length. [ 296.635958][T12748] CPU: 1 UID: 0 PID: 12748 Comm: syz.2.1769 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 296.654272][T12748] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 296.654812][T12745] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1768'. [ 296.664345][T12748] Call Trace: [ 296.664364][T12748] [ 296.664374][T12748] dump_stack_lvl+0x241/0x360 [ 296.664410][T12748] ? __pfx_dump_stack_lvl+0x10/0x10 [ 296.664437][T12748] ? __pfx__printk+0x10/0x10 [ 296.664464][T12748] ? __kmalloc_noprof+0xb0/0x400 [ 296.684461][T12748] ? __pfx___might_resched+0x10/0x10 [ 296.684505][T12748] should_fail_ex+0x3b0/0x4e0 [ 296.684535][T12748] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 296.715776][T12748] should_failslab+0xac/0x100 [ 296.720511][T12748] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 296.726821][T12748] __kmalloc_noprof+0xd8/0x400 [ 296.731646][T12748] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 296.737781][T12748] genl_rcv_msg+0x802/0xec0 [ 296.742348][T12748] ? __pfx_genl_rcv_msg+0x10/0x10 [ 296.747540][T12748] ? __pfx_lock_acquire+0x10/0x10 [ 296.752626][T12748] ? __pfx_ovs_ct_limit_cmd_get+0x10/0x10 [ 296.758396][T12748] ? __pfx___might_resched+0x10/0x10 [ 296.763749][T12748] netlink_rcv_skb+0x1e3/0x430 [ 296.768621][T12748] ? __pfx_genl_rcv_msg+0x10/0x10 [ 296.773695][T12748] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 296.779059][T12748] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 296.784589][T12748] genl_rcv+0x28/0x40 [ 296.788621][T12748] netlink_unicast+0x7f6/0x990 [ 296.793445][T12748] ? __pfx_netlink_unicast+0x10/0x10 [ 296.798784][T12748] ? __virt_addr_valid+0x183/0x530 [ 296.803966][T12748] ? __check_object_size+0x48e/0x900 [ 296.809308][T12748] netlink_sendmsg+0x8e4/0xcb0 [ 296.814142][T12748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.819487][T12748] ? aa_sock_msg_perm+0x91/0x160 [ 296.824508][T12748] ? __pfx_netlink_sendmsg+0x10/0x10 [ 296.829853][T12748] __sock_sendmsg+0x221/0x270 [ 296.834581][T12748] ____sys_sendmsg+0x52a/0x7e0 [ 296.839407][T12748] ? __pfx_____sys_sendmsg+0x10/0x10 [ 296.844787][T12748] __sys_sendmsg+0x292/0x380 [ 296.849445][T12748] ? __pfx___sys_sendmsg+0x10/0x10 [ 296.854627][T12748] ? __pfx_vfs_write+0x10/0x10 [ 296.859462][T12748] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 296.865845][T12748] ? do_syscall_64+0x100/0x230 [ 296.870661][T12748] ? do_syscall_64+0xb6/0x230 [ 296.875467][T12748] do_syscall_64+0xf3/0x230 [ 296.879999][T12748] ? clear_bhb_loop+0x35/0x90 [ 296.884727][T12748] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.890733][T12748] RIP: 0033:0x7ffa7797e719 [ 296.895189][T12748] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.915541][T12748] RSP: 002b:00007ffa7872c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 296.924011][T12748] RAX: ffffffffffffffda RBX: 00007ffa77b35f80 RCX: 00007ffa7797e719 [ 296.932035][T12748] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000003 [ 296.940062][T12748] RBP: 00007ffa7872c090 R08: 0000000000000000 R09: 0000000000000000 [ 296.948095][T12748] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 296.956119][T12748] R13: 0000000000000000 R14: 00007ffa77b35f80 R15: 00007fff90522758 [ 296.964165][T12748] [ 297.135395][T12769] FAULT_INJECTION: forcing a failure. [ 297.135395][T12769] name failslab, interval 1, probability 0, space 0, times 0 [ 297.160564][T12769] CPU: 1 UID: 0 PID: 12769 Comm: syz.0.1775 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 297.171414][T12769] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 297.181619][T12769] Call Trace: [ 297.185017][T12769] [ 297.187991][T12769] dump_stack_lvl+0x241/0x360 [ 297.192731][T12769] ? __pfx_dump_stack_lvl+0x10/0x10 [ 297.197981][T12769] ? __pfx__printk+0x10/0x10 [ 297.202636][T12769] ? fs_reclaim_acquire+0x93/0x130 [ 297.207809][T12769] ? __pfx___might_resched+0x10/0x10 [ 297.213256][T12769] should_fail_ex+0x3b0/0x4e0 [ 297.217991][T12769] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 297.223770][T12769] should_failslab+0xac/0x100 [ 297.228586][T12769] ? tomoyo_realpath_from_path+0xcf/0x5e0 [ 297.234456][T12769] __kmalloc_noprof+0xd8/0x400 [ 297.239281][T12769] tomoyo_realpath_from_path+0xcf/0x5e0 [ 297.244943][T12769] tomoyo_path_number_perm+0x23a/0x880 [ 297.250462][T12769] ? tomoyo_path_number_perm+0x208/0x880 [ 297.256151][T12769] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 297.262228][T12769] ? __fget_files+0x29/0x470 [ 297.266973][T12769] ? __fget_files+0x3f3/0x470 [ 297.271744][T12769] security_file_ioctl+0xc6/0x2a0 [ 297.276826][T12769] __se_sys_ioctl+0x47/0x170 [ 297.281485][T12769] do_syscall_64+0xf3/0x230 [ 297.286104][T12769] ? clear_bhb_loop+0x35/0x90 [ 297.290838][T12769] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.296784][T12769] RIP: 0033:0x7fd38957e719 [ 297.301248][T12769] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 297.320903][T12769] RSP: 002b:00007fd38a29a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 297.329373][T12769] RAX: ffffffffffffffda RBX: 00007fd389736058 RCX: 00007fd38957e719 [ 297.337429][T12769] RDX: 0000000000000000 RSI: 0000000000005411 RDI: 0000000000000003 [ 297.345451][T12769] RBP: 00007fd38a29a090 R08: 0000000000000000 R09: 0000000000000000 [ 297.353471][T12769] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 297.361458][T12777] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1778'. [ 297.370351][T12769] R13: 0000000000000001 R14: 00007fd389736058 R15: 00007fff6a3fba98 [ 297.378482][T12769] [ 297.393848][T12769] ERROR: Out of memory at tomoyo_realpath_from_path. [ 297.525222][T12785] pimreg: entered allmulticast mode [ 297.674928][T12794] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 297.694103][T12796] IPVS: stopping master sync thread 12794 ... [ 298.190803][T12817] vlan2: entered promiscuous mode [ 298.598708][T12843] vlan2: entered promiscuous mode [ 298.644900][T12843] vlan2: entered allmulticast mode [ 299.032017][T12861] __nla_validate_parse: 7 callbacks suppressed [ 299.032042][T12861] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1792'. [ 299.693141][T12893] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1800'. [ 299.910748][T12898] FAULT_INJECTION: forcing a failure. [ 299.910748][T12898] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 299.949642][T12898] CPU: 0 UID: 0 PID: 12898 Comm: syz.0.1804 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 299.960611][T12898] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 299.970736][T12898] Call Trace: [ 299.974044][T12898] [ 299.976996][T12898] dump_stack_lvl+0x241/0x360 [ 299.981711][T12898] ? __pfx_dump_stack_lvl+0x10/0x10 [ 299.986935][T12898] ? __pfx__printk+0x10/0x10 [ 299.991550][T12898] ? snprintf+0xda/0x120 [ 299.995818][T12898] should_fail_ex+0x3b0/0x4e0 [ 300.000520][T12898] _copy_to_user+0x31/0xb0 [ 300.004970][T12898] simple_read_from_buffer+0xca/0x150 [ 300.010486][T12898] proc_fail_nth_read+0x1e9/0x250 [ 300.015576][T12898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.021174][T12898] ? rw_verify_area+0x55e/0x6f0 [ 300.026054][T12898] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 300.031641][T12898] vfs_read+0x1fc/0xb70 [ 300.035832][T12898] ? fdget_pos+0x24e/0x320 [ 300.040276][T12898] ? __pfx_vfs_read+0x10/0x10 [ 300.044997][T12898] ? dev_load+0x21/0x1f0 [ 300.049544][T12898] ? __fget_files+0x3f3/0x470 [ 300.054256][T12898] ? fdget_pos+0x24e/0x320 [ 300.058702][T12898] ksys_read+0x183/0x2b0 [ 300.062966][T12898] ? __pfx_ksys_read+0x10/0x10 [ 300.067924][T12898] ? do_syscall_64+0x100/0x230 [ 300.072887][T12898] ? do_syscall_64+0xb6/0x230 [ 300.077619][T12898] do_syscall_64+0xf3/0x230 [ 300.082147][T12898] ? clear_bhb_loop+0x35/0x90 [ 300.086851][T12898] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 300.092771][T12898] RIP: 0033:0x7fd38957d15c [ 300.097212][T12898] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 300.117033][T12898] RSP: 002b:00007fd38a2bb030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 300.125493][T12898] RAX: ffffffffffffffda RBX: 00007fd389735f80 RCX: 00007fd38957d15c [ 300.133492][T12898] RDX: 000000000000000f RSI: 00007fd38a2bb0a0 RDI: 0000000000000004 [ 300.141487][T12898] RBP: 00007fd38a2bb090 R08: 0000000000000000 R09: 0000000000000000 [ 300.149484][T12898] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 300.157493][T12898] R13: 0000000000000000 R14: 00007fd389735f80 R15: 00007fff6a3fba98 [ 300.165529][T12898] [ 302.761604][T12948] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1815'. [ 303.394892][T12962] netlink: 'syz.3.1817': attribute type 11 has an invalid length. [ 303.426665][T12962] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1817'. [ 305.975280][T12963] netlink: 5 bytes leftover after parsing attributes in process `syz.1.1819'. [ 309.868819][ C0] sched: DL replenish lagged too much [ 493.498741][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 493.505764][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P12949/1:b..l P12966/1:b..l [ 493.515621][ C0] rcu: (detected by 0, t=10503 jiffies, g=48393, q=494 ncpus=2) [ 493.523391][ C0] task:dhcpcd-run-hook state:R running task stack:23072 pid:12966 tgid:12966 ppid:5510 flags:0x00004002 [ 493.536324][ C0] Call Trace: [ 493.539645][ C0] [ 493.542617][ C0] __schedule+0x184f/0x4c30 [ 493.547161][ C0] ? psi_task_change+0xed/0x270 [ 493.552077][ C0] ? mark_lock+0x9a/0x360 [ 493.556545][ C0] ? __pfx___schedule+0x10/0x10 [ 493.561467][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 493.567510][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 493.573899][ C0] ? preempt_schedule+0xe1/0xf0 [ 493.578796][ C0] preempt_schedule_common+0x84/0xd0 [ 493.584126][ C0] preempt_schedule+0xe1/0xf0 [ 493.588846][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 493.594279][ C0] ? unwind_next_frame+0xcfb/0x22d0 [ 493.599535][ C0] preempt_schedule_thunk+0x1a/0x30 [ 493.604786][ C0] unwind_next_frame+0x18f8/0x22d0 [ 493.610051][ C0] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 493.615741][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 493.621941][ C0] arch_stack_walk+0x11c/0x150 [ 493.626759][ C0] ? vm_area_dup+0x27/0x290 [ 493.631314][ C0] stack_trace_save+0x118/0x1d0 [ 493.636207][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 493.641636][ C0] save_stack+0xfb/0x1f0 [ 493.645932][ C0] ? __pfx_save_stack+0x10/0x10 [ 493.650826][ C0] ? free_unref_page+0xcfb/0xf20 [ 493.655812][ C0] ? __put_partials+0xeb/0x130 [ 493.660625][ C0] ? put_cpu_partial+0x17c/0x250 [ 493.665598][ C0] ? __slab_free+0x2ea/0x3d0 [ 493.670224][ C0] ? qlist_free_all+0x9a/0x140 [ 493.675023][ C0] ? kasan_quarantine_reduce+0x14f/0x170 [ 493.680699][ C0] ? __kasan_slab_alloc+0x23/0x80 [ 493.685759][ C0] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 493.691450][ C0] ? page_ext_get+0x20/0x2a0 [ 493.696125][ C0] __reset_page_owner+0x76/0x430 [ 493.701104][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 493.706533][ C0] free_unref_page+0xcfb/0xf20 [ 493.711531][ C0] __put_partials+0xeb/0x130 [ 493.716173][ C0] put_cpu_partial+0x17c/0x250 [ 493.720974][ C0] ? put_cpu_partial+0x70/0x250 [ 493.725864][ C0] __slab_free+0x2ea/0x3d0 [ 493.730319][ C0] ? __phys_addr+0xba/0x170 [ 493.734875][ C0] qlist_free_all+0x9a/0x140 [ 493.739506][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 493.745010][ C0] __kasan_slab_alloc+0x23/0x80 [ 493.749914][ C0] ? vm_area_dup+0x27/0x290 [ 493.754471][ C0] kmem_cache_alloc_noprof+0x135/0x2a0 [ 493.760074][ C0] vm_area_dup+0x27/0x290 [ 493.764509][ C0] copy_mm+0xb61/0x1e80 [ 493.768744][ C0] ? __pfx_copy_mm+0x10/0x10 [ 493.773428][ C0] ? __init_rwsem+0x122/0x160 [ 493.778164][ C0] ? copy_signal+0x52a/0x650 [ 493.782813][ C0] copy_process+0x1845/0x3d50 [ 493.787543][ C0] ? mark_lock+0x9a/0x360 [ 493.791925][ C0] ? copy_process+0x9fa/0x3d50 [ 493.796748][ C0] ? __pfx_copy_process+0x10/0x10 [ 493.801846][ C0] kernel_clone+0x226/0x8f0 [ 493.806419][ C0] ? __might_fault+0xaa/0x120 [ 493.811176][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 493.816260][ C0] ? __might_fault+0xaa/0x120 [ 493.820993][ C0] __x64_sys_clone+0x258/0x2a0 [ 493.825808][ C0] ? __pfx___x64_sys_clone+0x10/0x10 [ 493.831167][ C0] ? do_syscall_64+0x100/0x230 [ 493.835978][ C0] ? do_syscall_64+0xb6/0x230 [ 493.840695][ C0] do_syscall_64+0xf3/0x230 [ 493.845239][ C0] ? clear_bhb_loop+0x35/0x90 [ 493.849958][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 493.855886][ C0] RIP: 0033:0x7fce6b7d2a12 [ 493.860337][ C0] RSP: 002b:00007fff22482718 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 493.868912][ C0] RAX: ffffffffffffffda RBX: 0000000000000001 RCX: 00007fce6b7d2a12 [ 493.876921][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 493.884938][ C0] RBP: 000055e4bde14b70 R08: 0000000000000000 R09: 0000000000000200 [ 493.892949][ C0] R10: 00007fce6b698650 R11: 0000000000000246 R12: 0000000000000084 [ 493.900961][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000024 [ 493.908993][ C0] [ 493.912140][ C0] task:syz.0.1814 state:R running task stack:25336 pid:12949 tgid:12946 ppid:5839 flags:0x00004006 [ 493.923987][ C0] Call Trace: [ 493.927316][ C0] [ 493.930283][ C0] __schedule+0x184f/0x4c30 [ 493.934829][ C0] ? __pfx_validate_chain+0x10/0x10 [ 493.940094][ C0] ? __pfx___schedule+0x10/0x10 [ 493.945004][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 493.951044][ C0] ? __lock_acquire+0x1384/0x2050 [ 493.956145][ C0] ? preempt_schedule_irq+0xf0/0x1c0 [ 493.961475][ C0] preempt_schedule_irq+0xfb/0x1c0 [ 493.966629][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 493.972406][ C0] irqentry_exit+0x5e/0x90 [ 493.976874][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 493.982913][ C0] RIP: 0010:rcu_is_watching+0x8/0xb0 [ 493.988254][ C0] Code: 7b 03 eb cd 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 41 57 41 56 <53> 65 ff 05 08 0e 89 7e e8 5b 0d 4f 0a 89 c3 83 f8 08 73 7a 49 bf [ 494.007919][ C0] RSP: 0018:ffffc90003e5f508 EFLAGS: 00000246 [ 494.014043][ C0] RAX: 0000000000000001 RBX: 0000000000000000 RCX: ffff888021acda00 [ 494.022075][ C0] RDX: 0000000000000000 RSI: 0000000005742a40 RDI: 000000ffffffffc0 [ 494.030117][ C0] RBP: 0000000000000560 R08: ffffffff820b709e R09: 1ffffffff285c100 [ 494.038165][ C0] R10: dffffc0000000000 R11: fffffbfff285c101 R12: 000000000015d0a9 [ 494.046180][ C0] R13: ffffea0005742a48 R14: ffffffff820b6fd0 R15: ffff88813a480000 [ 494.054231][ C0] ? page_ext_get+0x20/0x2a0 [ 494.058885][ C0] ? page_ext_get+0xee/0x2a0 [ 494.063525][ C0] ? page_ext_get+0x20/0x2a0 [ 494.068167][ C0] rcu_read_lock_held+0x15/0x50 [ 494.073164][ C0] page_ext_get+0x192/0x2a0 [ 494.077716][ C0] __reset_page_owner+0x30/0x430 [ 494.082694][ C0] ? do_raw_spin_unlock+0x13c/0x8b0 [ 494.087957][ C0] free_unref_page+0xcfb/0xf20 [ 494.092781][ C0] __put_partials+0xeb/0x130 [ 494.097425][ C0] put_cpu_partial+0x17c/0x250 [ 494.102232][ C0] ? put_cpu_partial+0x70/0x250 [ 494.107146][ C0] __slab_free+0x2ea/0x3d0 [ 494.111625][ C0] ? __phys_addr+0xba/0x170 [ 494.116335][ C0] qlist_free_all+0x9a/0x140 [ 494.120973][ C0] kasan_quarantine_reduce+0x14f/0x170 [ 494.126478][ C0] __kasan_kmalloc+0x23/0xb0 [ 494.131148][ C0] ? __register_sysctl_table+0x65/0x1550 [ 494.136839][ C0] ? __register_sysctl_table+0x65/0x1550 [ 494.142514][ C0] __kmalloc_noprof+0x1fc/0x400 [ 494.147418][ C0] __register_sysctl_table+0x65/0x1550 [ 494.153004][ C0] ? is_module_address+0x27/0x50 [ 494.158003][ C0] ? register_net_sysctl_sz+0x33e/0x3b0 [ 494.163671][ C0] __addrconf_sysctl_register+0x234/0x3a0 [ 494.169539][ C0] ? __pfx___addrconf_sysctl_register+0x10/0x10 [ 494.175829][ C0] ? __raw_spin_lock_init+0x45/0x100 [ 494.181199][ C0] addrconf_sysctl_register+0x167/0x1c0 [ 494.186806][ C0] ipv6_add_dev+0xcf6/0x1220 [ 494.191453][ C0] addrconf_notify+0x6a7/0x1020 [ 494.196360][ C0] notifier_call_chain+0x19f/0x3e0 [ 494.201527][ C0] register_netdevice+0x167f/0x1b00 [ 494.206879][ C0] ? __pfx_register_netdevice+0x10/0x10 [ 494.212475][ C0] ? __pfx_snprintf+0x10/0x10 [ 494.217217][ C0] ? radix_tree_lookup+0x282/0x290 [ 494.222379][ C0] ? net_generic+0x1f/0x240 [ 494.226922][ C0] ppp_dev_configure+0x883/0xb10 [ 494.232008][ C0] ppp_ioctl+0x797/0x1cd0 [ 494.236394][ C0] ? __pfx_ppp_ioctl+0x10/0x10 [ 494.241225][ C0] ? __fget_files+0x3f3/0x470 [ 494.245955][ C0] ? __pfx_ppp_ioctl+0x10/0x10 [ 494.250774][ C0] __se_sys_ioctl+0xf9/0x170 [ 494.255420][ C0] do_syscall_64+0xf3/0x230 [ 494.259965][ C0] ? clear_bhb_loop+0x35/0x90 [ 494.264684][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 494.270627][ C0] RIP: 0033:0x7fd38957e719 [ 494.275076][ C0] RSP: 002b:00007fd38a2bb038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 494.283592][ C0] RAX: ffffffffffffffda RBX: 00007fd389735f80 RCX: 00007fd38957e719 [ 494.291605][ C0] RDX: 0000000020000100 RSI: 00000000c004743e RDI: 0000000000000009 [ 494.299618][ C0] RBP: 00007fd3895f1616 R08: 0000000000000000 R09: 0000000000000000 [ 494.307630][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 494.315636][ C0] R13: 0000000000000000 R14: 00007fd389735f80 R15: 00007fff6a3fba98 [ 494.323670][ C0] [ 494.326734][ C0] rcu: rcu_preempt kthread starved for 10582 jiffies! g48393 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 494.337971][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 494.347985][ C0] rcu: RCU grace-period kthread stack dump: [ 494.353986][ C0] task:rcu_preempt state:R running task stack:25040 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 494.365800][ C0] Call Trace: [ 494.369111][ C0] [ 494.372104][ C0] __schedule+0x184f/0x4c30 [ 494.376691][ C0] ? __pfx___schedule+0x10/0x10 [ 494.381601][ C0] ? __pfx_lock_release+0x10/0x10 [ 494.386668][ C0] ? __asan_memset+0x23/0x50 [ 494.391308][ C0] ? __pfx_lockdep_init_map_type+0x10/0x10 [ 494.397207][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 494.403585][ C0] ? schedule+0x90/0x320 [ 494.407861][ C0] schedule+0x14b/0x320 [ 494.412054][ C0] schedule_timeout+0x1be/0x310 [ 494.416947][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 494.422373][ C0] ? __pfx_process_timeout+0x10/0x10 [ 494.427710][ C0] ? prepare_to_swait_event+0x330/0x350 [ 494.433317][ C0] rcu_gp_fqs_loop+0x2df/0x1330 [ 494.438210][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 494.443547][ C0] ? __pfx_rcu_watching_snap_save+0x10/0x10 [ 494.449490][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 494.454812][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 494.460757][ C0] ? finish_swait+0xd4/0x1e0 [ 494.465397][ C0] rcu_gp_kthread+0xa7/0x3b0 [ 494.470028][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 494.475260][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 494.481208][ C0] ? __kthread_parkme+0x169/0x1d0 [ 494.486286][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 494.491519][ C0] kthread+0x2f0/0x390 [ 494.495624][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 494.500856][ C0] ? __pfx_kthread+0x10/0x10 [ 494.505482][ C0] ret_from_fork+0x4b/0x80 [ 494.509942][ C0] ? __pfx_kthread+0x10/0x10 [ 494.514574][ C0] ret_from_fork_asm+0x1a/0x30 [ 494.519398][ C0] [ 494.522442][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 494.528794][ C0] CPU: 0 UID: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 494.539417][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 494.549510][ C0] RIP: 0010:preempt_count_add+0x44/0x190 [ 494.555190][ C0] Code: 00 00 00 fc ff df 42 0f b6 04 38 84 c0 0f 85 ed 00 00 00 83 3d 5c 4a db 18 00 75 07 65 8b 05 db a6 a0 7e 65 01 1d d4 a6 a0 7e <48> c7 c0 40 79 3e 9a 48 c1 e8 03 42 0f b6 04 38 84 c0 0f 85 e4 00 [ 494.574839][ C0] RSP: 0018:ffffc900001572d0 EFLAGS: 00000282 [ 494.580947][ C0] RAX: 0000000080000100 RBX: 0000000000000001 RCX: ffffffff9a3e7903 [ 494.589042][ C0] RDX: dffffc0000000000 RSI: ffffffff8ab2a7a2 RDI: 0000000000000001 [ 494.597049][ C0] RBP: ffffc900001573f8 R08: 0000000000000005 R09: ffffc900001574b0 [ 494.605055][ C0] R10: ffffc90000157410 R11: ffffffff818092c0 R12: dffffc0000000000 [ 494.613062][ C0] R13: ffffc900001573c0 R14: ffffffff8ab2a7a2 R15: dffffc0000000000 [ 494.621074][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 494.630046][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 494.636663][ C0] CR2: 00005555867eb350 CR3: 000000000e734000 CR4: 00000000003526f0 [ 494.644671][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 494.652676][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 494.660685][ C0] Call Trace: [ 494.663995][ C0] [ 494.666869][ C0] ? rcu_check_gp_kthread_starvation+0x278/0x310 [ 494.673245][ C0] ? print_other_cpu_stall+0x1475/0x15b0 [ 494.678943][ C0] ? __pfx_print_other_cpu_stall+0x10/0x10 [ 494.684887][ C0] ? seqcount_lockdep_reader_access+0x1c6/0x220 [ 494.691172][ C0] ? __pfx_seqcount_lockdep_reader_access+0x10/0x10 [ 494.697810][ C0] ? kvm_check_and_clear_guest_paused+0x6a/0xd0 [ 494.704099][ C0] ? rcu_sched_clock_irq+0xa1a/0x10d0 [ 494.709531][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 494.715209][ C0] ? hrtimer_run_queues+0x16c/0x460 [ 494.720454][ C0] ? acct_account_cputime+0x207/0x210 [ 494.725871][ C0] ? update_process_times+0x1ce/0x230 [ 494.731316][ C0] ? tick_nohz_handler+0x37c/0x500 [ 494.736466][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 494.741960][ C0] ? __hrtimer_run_queues+0x551/0xd50 [ 494.747369][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 494.753406][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 494.759170][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 494.765289][ C0] ? hrtimer_interrupt+0x396/0x990 [ 494.770567][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 494.776763][ C0] ? sysvec_apic_timer_interrupt+0xa1/0xc0 [ 494.782621][ C0] [ 494.785588][ C0] [ 494.788544][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 494.794741][ C0] ? bcm_tx_timeout_handler+0x182/0x520 [ 494.800327][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 494.806528][ C0] ? bcm_tx_timeout_handler+0x182/0x520 [ 494.812116][ C0] ? preempt_count_add+0x44/0x190 [ 494.817199][ C0] ? bcm_tx_timeout_handler+0x182/0x520 [ 494.822781][ C0] unwind_next_frame+0xb0/0x22d0 [ 494.827778][ C0] ? bcm_can_tx+0x1fa/0x9a0 [ 494.832321][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 494.838523][ C0] arch_stack_walk+0x11c/0x150 [ 494.843332][ C0] ? bcm_tx_timeout_handler+0x182/0x520 [ 494.848925][ C0] stack_trace_save+0x118/0x1d0 [ 494.853822][ C0] ? smpboot_thread_fn+0x544/0xa30 [ 494.858978][ C0] ? kthread+0x2f0/0x390 [ 494.863259][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 494.868676][ C0] ? __pfx_validate_chain+0x10/0x10 [ 494.873944][ C0] kasan_save_track+0x3f/0x80 [ 494.878665][ C0] ? kasan_save_track+0x3f/0x80 [ 494.883566][ C0] ? __kasan_slab_alloc+0x66/0x80 [ 494.888648][ C0] ? kmem_cache_alloc_node_noprof+0x16b/0x320 [ 494.894774][ C0] ? __alloc_skb+0x1c3/0x440 [ 494.899419][ C0] ? bcm_can_tx+0x1fa/0x9a0 [ 494.903965][ C0] ? bcm_tx_timeout_handler+0x182/0x520 [ 494.909602][ C0] __kasan_slab_alloc+0x66/0x80 [ 494.914496][ C0] ? __alloc_skb+0x1c3/0x440 [ 494.919135][ C0] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 494.925094][ C0] __alloc_skb+0x1c3/0x440 [ 494.929562][ C0] ? __pfx___alloc_skb+0x10/0x10 [ 494.934580][ C0] ? dev_get_by_index+0x23/0x2d0 [ 494.939574][ C0] bcm_can_tx+0x1fa/0x9a0 [ 494.943957][ C0] ? __pfx_bcm_can_tx+0x10/0x10 [ 494.948856][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 494.954893][ C0] bcm_tx_timeout_handler+0x182/0x520 [ 494.960320][ C0] ? __pfx_bcm_tx_timeout_handler+0x10/0x10 [ 494.966268][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 494.972235][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 494.978724][ C0] ? __pfx_bcm_tx_timeout_handler+0x10/0x10 [ 494.984664][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 494.989905][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 494.995952][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 495.001809][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 495.007934][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 495.013097][ C0] handle_softirqs+0x2c5/0x980 [ 495.017912][ C0] ? run_ksoftirqd+0xca/0x130 [ 495.022644][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 495.027986][ C0] run_ksoftirqd+0xca/0x130 [ 495.032552][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 495.037734][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 495.042914][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 495.048074][ C0] smpboot_thread_fn+0x544/0xa30 [ 495.053160][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 495.058238][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 495.063752][ C0] kthread+0x2f0/0x390 [ 495.067863][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 495.073368][ C0] ? __pfx_kthread+0x10/0x10 [ 495.078001][ C0] ret_from_fork+0x4b/0x80 [ 495.082472][ C0] ? __pfx_kthread+0x10/0x10 [ 495.087111][ C0] ret_from_fork_asm+0x1a/0x30 [ 495.091944][ C0]