last executing test programs: 3.015905935s ago: executing program 4 (id=1588): r0 = accept4(0xffffffffffffffff, &(0x7f0000000180)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x80, 0x0) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f0000000480)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000380)={&(0x7f00000000c0)={0x4c, 0xc, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x4, 0x2, 'syz2\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x48080}, 0x40090) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x79) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000580)) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500), 0x98) 2.832520853s ago: executing program 3 (id=1591): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x10003, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000002840)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f2aa3d9b18ed812a2e2c49e8020a6f4e0e4f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546000677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289d01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5467a932b77674e802a0d42bc6099ad238af770b5ed8925161729298700000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809b5b9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed3957f813567f7a95435ac15fc0288d9b2a169cdcacc413b48dafb7a2c8cb482bac0ac559eaf39027ceb379a902d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bff57002c1097f92e91002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff7a1ef3282830689da6b53b263339863297771429d120000003341bf4abacac94500fca0493cf29b33dcc9ffffffffffffffd39f6ce0c6ff01589646efd1cf870cd7bb2366fdf870ce5dfd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f761038b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1293b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd000c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2acd1fe582786105c7df8be5877050c91301fb997316dbf17866fb84d4173731efe895ff2e1c55ef08235a0126e01254c44060926e90109b598502d3e959efc71f665c4d75cf2458e3542c9062ece84c99a861887a20639b41c8096d5742db41bd61080dcbe40e0f802fc12ee86c50804042b3eac1f879b136345cf67ca3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc74aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7ad333545794f37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f4df90400000000000000d6b2c5ea139376f24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8e3070000001e48418046c216c1f895778cb25122a2a998de0842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec84ac3571f02f647b3385b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba2f58ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250df986741517abf11389b751f4e109b60000000000000000d6d5210d7560eb92d6a97a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750890ae71555b3228b1bd627e87306703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288d139bd3da230ed05a8fe64680b0a3f9f2dd704e4214de5946912d6c98cd1a9fbe1e7d58c08acaf30235b9100000000a55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854356cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c776f4b4ce07e1c6fa66fcfc7a228805f76785efc0ceb1c8e5729c66418d169fc03aa18854693ad2a182068e1e3a0e2505bc7f41019645466ac96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a428f1da1f68df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7e478950aa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945e20fa26b8471d42645288d7226bbd9c9e9e1cc9eb3d541e407cc2dae5e690cd628ab848753203b458b97ec1afb079b4b4ba686fcdf240430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7db3c4be290159f6bcd75f0dda9de5532e71ae9e48b0ed1254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b70ebc660309e1e245b0fdf9743af932cd6db49a47613808bad959719c0000000000378ac2e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6ca0400966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e3030108000000000000c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bffef97dcecc467ace456597685c5870d25f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4cba6e6390a9f302c6eb2df7766411bef0ebb5000000000006065d6735eb7a00e127c0000000000000000000000bfb0bba79344643b1d8daa9f38e4b62c1e2af68c6f5054b078acd74b4a9c944e4505da485a3a4154387a0a88370d9ed9467b09c5888a06431df3f68abf0b366c4d5f8bea7b29c257ed756dff7a21c6b661cbdd43de65afd7f661d5c84f915c90e3d6ea012b68b787eb01d8320000000000000060176dacba0ec503a37fae6b472ec369c79ee6a420c0fd8d8d82fe136d5af6c30bfeb0a7275babfdb96a127aa9386e0671c6454245a18c1c8c49552cff5d27b547cdc34c0858c77a47a9ff86ee9fbd9ceda428716a4218821176d8067997527230fa67d26950d3e4f2750fa7c872874ad3a2d11f9f6eb08e6d7b6fa257b04d8ce36360f524e3dfd2211641f3d2637d86b80681eca50ce0eecafdd22d41fa515c15591e70ded4b70efac3cb42fb352d82e8f7573e8ed8248da356fa91a252976d3a4d8c1843a8d5bb7f5f1028453a0562a3ea93117076dd4940b7df50d78289fe66197525f6095f8662d232970bef61b03fa83027963a1a2e07cfee30c0d0b4c5877f93b3637ca21eab5afcf5d4638dfe8f9202aaad51c979049dd76d65368cbd4187d9f74257c7c4a23ac4a34eec5aa17e78c5167216f5e72138d20f8325dd5f8f96c32189c904eaef580987f1ce601a7cdc35461db9981ac42f9e24b0699bbe4e3d986e38952b0b7938eefd9e7a292bbb66367ad77045fdc18855c81c031dedd185c723238373fc698d676791d04f1ff5f0825a6619e844882f31ed190233d58ecee949e310bf2b1a51b8a33ae65a06d2b6ad386bf8dc49dd328bcd75d1843a13d68560175a18af7efc3c0f20e32f84f6aaaf000000000000000000000013a6c66bce74a8fb9092023df695da2714a7933d699d42de2bc4a85e0a0e22228290a7a7553ab93a16e42453ed86869a02df2f47d4088fac1772d3cd955c81cbf91c2ca7942942f61723b558079b82547844f92df2499c4b2c2ef2539e5daa8d8727baaa6b5755e6f83bbfca00"/3261], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write$binfmt_script(r3, &(0x7f0000000580)={'#! ', './file0'}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) read(r2, &(0x7f0000000140)=""/173, 0xad) write$binfmt_elf64(r1, 0x0, 0x10034) 2.723735993s ago: executing program 4 (id=1594): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) close(r0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000080)=0x400000001, 0x4) r2 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/net\x00') read(r2, 0x0, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x22, &(0x7f0000356000)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000340)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$BTRFS_IOC_QUOTA_RESCAN(r1, 0x4040942c, &(0x7f0000000000)={0x0, 0x378, [0x100000001, 0x7ff, 0x0, 0x2, 0x7, 0xfedb]}) sendto$inet6(r0, 0x0, 0x4, 0x0, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd60cb4a4800100000fc000000000000000000000000000000ff0200000000000000000000000000010000", @ANYRES8], 0x0) 2.496116392s ago: executing program 2 (id=1598): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf2501"], 0x84}}, 0x0) 2.214883725s ago: executing program 2 (id=1600): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r1, @ANYBLOB="010000000000fbdbdf2501"], 0x84}}, 0x0) (fail_nth: 1) 2.099850778s ago: executing program 1 (id=1601): socket$netlink(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0) getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000000}]}]}}, 0x0, 0x2e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) shutdown(r1, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/129, 0x81}], 0x1) connect$inet6(r3, &(0x7f0000000040), 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x0, 0x0, 0x0) 1.924041446s ago: executing program 0 (id=1603): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000002000240012800b0001006d616373656300001400028005000a00010000000500090001"], 0x44}}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000080)}], 0x1) r2 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x6a, 0x5, 0x20000002, 0x3) r3 = socket$packet(0x11, 0x3, 0x300) socket$inet6(0xa, 0x5, 0x100) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f00000001c0)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x20, 0x0, 0x0, 0xfffff010}, {0x6}]}, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[], 0x1c}}, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x14}, 0x14}}, 0x0) sendmmsg$unix(r4, &(0x7f00000000c0), 0x3f, 0x0) setsockopt$packet_int(r3, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000080)=0x125, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000180)="10031400e0ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r7}, 0x14) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="010000001894ffff050000000300000044420000", @ANYRES32=0x1, @ANYBLOB="0100008000200000000000000000000000bb000000", @ANYRES32=r7, @ANYRES32, @ANYBLOB="01000000030000000300"/28], 0x50) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x13, 0x7d, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/3743], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5, 0x0, 0x0, 0xffffffff}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r8}, 0x10) close(r1) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004a60000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 1.851905374s ago: executing program 3 (id=1604): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r1) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x30, r2, 0x10, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffffa, 0x57}}}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0xf}]}, 0x30}, 0x1, 0x0, 0x0, 0x2004c014}, 0x800) bind$inet(r1, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r1) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [@IPSET_ATTR_REVISION={0x5, 0x4, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20040800}, 0x20004800) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000004c0)='./cgroup.net/syz1\x00', 0x1ff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x20, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r9}]}, 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x64, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x30, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x64}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="210000000000ffff070003020000006583ed6bf8df6a25a4b3264abcc136aa00", @ANYRES32=0x0, @ANYBLOB="29000e006804000000002d1a0000000000000000000000000000000000000000000000000000100100000000"], 0x48}}, 0x0) 1.851725984s ago: executing program 2 (id=1605): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e", 0x12}], 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 1.80870568s ago: executing program 4 (id=1606): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) close(r0) socket$kcm(0x10, 0x400000002, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c0000007a006bcd9e3fe3dc6e08000007000004a60000007ea60864160af36504005425198bc3488bc3a0e69ee517d34460bc24eab556a705251e4e82949a3651f668c3664402682fb6e27bbfa83b5cae0300c9fcd1938037e786a6", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (fail_nth: 2) 1.73717609s ago: executing program 2 (id=1607): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640)=r0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4, 0x2000000, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x0, 0x0, 0x19, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='.\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000000800034000000000080002"], 0x88}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r9], 0x20}}, 0x8080) sendto$inet6(r3, 0x0, 0xfffffffffffffff1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000040)=ANY=[@ANYBLOB="26fc44c00ae9ada919fe12adde03f72cf48166a4582df4a706c559cbef1aef4357ea36ee678cb941e8fa27bc6fce57", @ANYRES16=r12, @ANYBLOB="ff8305000700fffeff00", @ANYRES32], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESOCT=r7, @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0xc805) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xcfb9cc821fc0631b}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x16, 0x0, 0x4, 0x7fffffff, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.687914417s ago: executing program 0 (id=1608): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pwrite64(r0, &(0x7f00000006c0)="3a3ad81969aeda6c287ee255e0d07c064c7c3b5443e06075a5a8595da4605819aec69941cfa052", 0x27, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x20, r2, 0x800, 0x70bd25, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x16}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x40080}, 0x4000) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x64, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x40002}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x20000000) listen(r0, 0xfff) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x103d, &(0x7f0000000b40)={@broadcast, @empty, @val={@val={0x88a8, 0x2, 0x0, 0x3}, {0x8100, 0x3, 0x0, 0x2}}, {@mpls_mc={0x8848, {[{0x55150}, {0x6}, {0x8, 0x0, 0x1}, {0x200, 0x0, 0x1}, {0x6}, {0xe4fd}, {0x3}, {0x1, 0x0, 0x1}, {0x75c7}], @llc={@llc={0xbc, 0xaa, 'n', "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"}}}}}}, 0x0) sendmsg$NL80211_CMD_GET_SURVEY(r3, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x28, r2, 0x8, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x156a, 0x3b}}}}, [""]}, 0x28}, 0x1, 0x0, 0x0, 0x51}, 0x40010) syz_emit_ethernet(0x4a, &(0x7f0000000440)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000040086dd600000000014060020010000000000000000000000000002fe800000080000000000000000ffffffff004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5002000090780000"], 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x83, &(0x7f0000000480), 0x8) r5 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r5, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r5, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x10000001}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f00000001c0)={0x42, 0x4}, 0x10) setsockopt$TIPC_GROUP_LEAVE(r6, 0x10f, 0x88) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(0xffffffffffffffff, 0x10c933, &(0x7f0000000900)="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") syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r8) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 1.399127385s ago: executing program 3 (id=1609): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85000000080000007b0a00ff000000001d000000000000009500000000000000181000", @ANYRES32, @ANYBLOB="10000000000000250500000000000000950000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.388935522s ago: executing program 4 (id=1610): r0 = socket$nl_audit(0x10, 0x3, 0x9) ioctl$sock_SIOCETHTOOL(r0, 0x8993, &(0x7f0000000080)={'bond0\x00', &(0x7f00000000c0)=@ethtool_channels={0x0, 0x0, 0x0, 0x0, 0xfffffffc}}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffe0}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_FWMARK={0x8, 0x12, 0x4}]}}]}, 0x3c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) (async) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) (async) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000180)="ae13c045ae79c98ebf885abd228ea432d3b72921c859c44185b653835f12c5f5aae40c4bdffd1224703d1b36cedecb48c662aba3b7e5b5a286d93af003c08747b7e26d0226488ac68859f5624da1818b604be4b542c8df4497458574d9c1f5c6dc6e2275b61c") splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) 1.247954903s ago: executing program 0 (id=1611): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xa2f80, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000040)={0x0, 'syzkaller1\x00'}) close(0x3) 1.243813667s ago: executing program 3 (id=1612): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='GPL\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffc95, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg$inet(r2, &(0x7f0000001500)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x5452, &(0x7f00000001c0)) 1.223617376s ago: executing program 1 (id=1613): socket$pppl2tp(0x18, 0x1, 0x1) socket$inet6_udp(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket(0x40000000015, 0x5, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x38, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2001, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0xf, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) pselect6(0x40, &(0x7f00000001c0), 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x5}, 0x0, 0x0) (fail_nth: 2) 1.129676483s ago: executing program 2 (id=1614): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x10003, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000002840)=ANY=[@ANYBLOB="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"/3261], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) write$binfmt_script(r3, &(0x7f0000000580)={'#! ', './file0'}, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) read(r2, &(0x7f0000000140)=""/173, 0xad) write$binfmt_elf64(r1, 0x0, 0x10034) 812.055347ms ago: executing program 1 (id=1615): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x95, &(0x7f0000000000), &(0x7f0000000240)=0x4) (fail_nth: 2) 800.340304ms ago: executing program 0 (id=1616): r0 = socket(0x2b, 0x1, 0x1) sendmmsg$sock(r0, &(0x7f0000001280)=[{{&(0x7f0000000240)=@in6={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x80, 0x0}}], 0x1, 0x20000001) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) ioctl$EXT4_IOC_MIGRATE(r1, 0x6609) (async) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}, 0x1, 0x0, 0x0, 0x6}, 0x0) (async) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000380)=""/142, 0x8e}, {&(0x7f00000004c0)=""/126, 0x7e}], 0x2}, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) (async) writev(r4, &(0x7f0000000540)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47380c90800", 0xe}, {&(0x7f0000000600)="9b1266926bac6fe17589a03ea03dd982ae36633c", 0x14}, {0x0}], 0x3) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) socket$kcm(0x11, 0x3, 0x0) epoll_create1(0x0) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100001304000000030000100400000001000000", @ANYRES32, @ANYBLOB="170700"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000020000000400"/28], 0x3d) ioctl$SIOCSIFHWADDR(r6, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000440)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_FLAGS={0x8}]}}]}, 0x48}}, 0x0) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0}, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) 500.802876ms ago: executing program 1 (id=1617): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e", 0x12}], 0x2) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) 418.123604ms ago: executing program 0 (id=1618): r0 = socket(0x1, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5a, &(0x7f0000002200)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x80, 0x0}, @local}, @parameter_prob={0xc, 0x0, 0x0, 0x6, 0x0, 0x0, {0xc, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev, {[@timestamp_prespec={0x44, 0x14, 0x0, 0x3, 0x1, [{@dev}, {@private}]}, @cipso={0x86, 0x6}]}}}}}}}, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r3, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000011}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000300)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x8, 0x8, 0x12, @private0, @ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x20, 0x0, 0xffffff81}}) syz_emit_ethernet(0xa6, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaabb86dd6000000000703afffe8000000000000000000000000000bbff020000e9c7f37b000000000000000186009078080002000000000000000000050aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18020001ffffffffff60000000000000"], 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000005c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x48854) sendmsg$MPTCP_PM_CMD_ANNOUNCE(r0, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x58, r3, 0x20, 0x70bd27, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x3c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e24}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000001) shutdown(r1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000180), &(0x7f00000000c0)=@tcp6=r0}, 0x20) bind$unix(r0, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f00000001c0), 0x2, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r9, &(0x7f0000000000), 0xc) bind$qrtr(r9, &(0x7f00000000c0)={0x2a, 0x1}, 0xc) preadv(r8, &(0x7f0000001a80)=[{&(0x7f0000000580)=""/200, 0xc8}], 0x1, 0x1000000, 0x0) sendmmsg$unix(r0, &(0x7f0000001680)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000040)=""/45, 0x2d}], 0x1}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000bc0)=""/91, 0x5b}], 0x1}}], 0x2, 0x10140, 0x0) 414.535182ms ago: executing program 4 (id=1619): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640)=r0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4, 0x2000000, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x0, 0x0, 0x19, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='.\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000000800034000000000080002"], 0x88}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r9], 0x20}}, 0x8080) sendto$inet6(r3, 0x0, 0xfffffffffffffff1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000040)=ANY=[@ANYBLOB="26fc44c00ae9ada919fe12adde03f72cf48166a4582df4a706c559cbef1aef4357ea36ee678cb941e8fa27bc6fce57", @ANYRES16=r12, @ANYBLOB="ff8305000700fffeff00", @ANYRES32], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESOCT=r7, @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0xc805) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xcfb9cc821fc0631b}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x16, 0x0, 0x4, 0x7fffffff, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 413.914892ms ago: executing program 1 (id=1620): r0 = accept$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000040)=0x14) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000080)={0x3, 0x8000}, 0x4) ioctl$sock_TIOCINQ(r0, 0x541b, &(0x7f00000000c0)) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r2, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r3, 0x800, 0x70bd29, 0x25dfdbfc, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0xc800}, 0x4001) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@bloom_filter={0x1e, 0x2, 0xb6, 0x2, 0x40000, 0x1, 0x5, '\x00', r1, 0xffffffffffffffff, 0x4, 0x2, 0x4, 0x7, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r4, &(0x7f00000002c0)="2d3208dae94269fd4e950d2464cdcc1964faff496c62f2152a3e7747", &(0x7f0000000300)=""/203, 0x4}, 0x20) (async, rerun: 32) syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x6, 0x3, &(0x7f0000000480)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0, 0x0, 0x0], 0x0, 0xb0, &(0x7f0000000500)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xc0, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000740)=r6, 0x4) sendmsg$NFT_MSG_GETSET(r2, &(0x7f0000000b00)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000ac0)={&(0x7f00000007c0)={0x2ec, 0xa, 0xa, 0x401, 0x0, 0x0, {0x0, 0x0, 0xa}, [@NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_EXPRESSIONS={0x250, 0x12, 0x0, 0x1, [{0x48, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x14}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0xa}, @NFTA_NAT_FLAGS={0x8, 0x7, 0x1, 0x0, 0x25}, @NFTA_NAT_REG_PROTO_MIN={0x8, 0x5, 0x1, 0x0, 0x8}, @NFTA_NAT_REG_ADDR_MAX={0x8, 0x4, 0x1, 0x0, 0x17}]}}}, {0x44, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x34, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x13}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x1d}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x10, 0x1, 0x0, 0x1, @reject={{0xb}, @void}}, {0x1a0, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x18c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x188, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xd1, 0x1, "62061d0d4b24238c2511a625d0e23f2f35d155b093326f33b64ecef5041e2af121e7e2236dcfebed19e6a4a540ead60de6cf70a3b3a3458815c73aa7fc5347cbd1dc468c0ece69db1e67e562a04479e8e92c0fc280ace9644f06bf10731d3706dd2850887298ef07bd4b5532a0c8c61ff472e4ebd426fa710a21bbf26f7039146d68f65654f97db6950d5441a2f9d8a1b6a45905a1265ddeb56b3752f543ac019cceab3a60094d636162c0ebde742a94c802128e1aa4eec5e81afc598aa4007308272e7695d89e63c33e4f07be"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x14, 0x1, "7b961ee572bfa636a29f5b180aabd670"}, @NFTA_DATA_VALUE={0x97, 0x1, "ceef5aac5e6da89f7e74e920300fcca74e51c2fb258062a19ca0584d7007a1ab12d27c96aacfb3fda2fec25c2642fd1447091f13bfaee2c77c571a1b9a0e6918293b8e4ad538970d6235059c6f6574adc4abc7303d4cabbc8fb92bcfb7a26d6e6885c609f82448422ff5ba87406d7a659952d67e0a78d633ab71313739ddc0930fe443e4fbcb7dae6aeff94ddc22f985ab9239"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_SET_USERDATA={0x5a, 0xd, 0x1, 0x0, "63694f6d5bc6209e21916c94e216b257ffaf05d434f7a49d03aaa0a5072941152f99e7677cc347b99dbc54000dd6b446f0ca29abe6d729f2a9e346cc1da670dc3f77b205114cfebe156a091c6781c6022de56d6ce1d9"}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x6}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x1c}]}, 0x2ec}, 0x1, 0x0, 0x0, 0x8800}, 0x881) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000bc0)={{r4, 0xffffffffffffffff}, &(0x7f0000000b40), &(0x7f0000000b80)}, 0x20) (async, rerun: 64) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000dc0)={'syztnl2\x00', &(0x7f0000000d40)={'ip6_vti0\x00', r5, 0x4, 0x3, 0x10, 0x7, 0x0, @loopback, @private0={0xfc, 0x0, '\x00', 0x1}, 0x10, 0x700, 0xbc63, 0x75}}) (async, rerun: 64) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000e80)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0xa22, '\x00', r5, r7, 0x2, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000f40)=@generic={&(0x7f0000000f00)='.\x00'}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001000)={0x11, 0x15, &(0x7f0000000c00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x6}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000cc0)='syzkaller\x00', 0x10000, 0x0, &(0x7f0000000d00), 0x41100, 0x0, '\x00', r9, 0x0, r7, 0x8, &(0x7f0000000e00)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000e40)={0x3, 0x10, 0x6, 0x4}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000f80)=[r10, r4, r4, r4, r4, r4, r11], &(0x7f0000000fc0)=[{0x5, 0x4, 0x10, 0x7}, {0x0, 0x1, 0x7fffffff}, {0x0, 0x3, 0xe, 0x5}, {0x4, 0x1, 0x10, 0x2}], 0x10, 0x8, @void, @value}, 0x94) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000001140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r2, &(0x7f0000001200)={&(0x7f00000010c0), 0xc, &(0x7f00000011c0)={&(0x7f0000001180)={0x1c, r12, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x44000001}, 0x4) (async) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000001240), 0x1, 0x0) write$tun(r14, &(0x7f0000001280)={@void, @void, @x25={0x3, 0x8, 0x5, "e569800a33b6a9eb57ffebc82c585667a6655100b62350d5730140e31bea8864ad803e59e1e1ac86123807d9218b1c9ea3ac44d81560036cb8e7f94474da556e28b4757380a0330a84773a4e294164bc5fe51ddb82a61e5dfc8eb077181231836c54dafc4d15577ce90f70428caaa339607f5435b0969bff336d4aa9d007cc286ad74b9f1307f71c86f86c1795b407c6bf5b978fc10e455d195b77c56f69163d769e01a15c82555ec452d9e1a65493afac0f6f59606ce4b404db7fc06c691633cd28f76e39cf36ce2dadfb867c53ddaff229"}}, 0xd5) (async, rerun: 32) ioctl$sock_SIOCGPGRP(r2, 0x8904, &(0x7f0000001380)=0x0) (rerun: 32) syz_open_procfs$namespace(r15, &(0x7f00000013c0)='ns/cgroup\x00') (async) syz_emit_ethernet(0x7e, &(0x7f0000001400)={@random="d24fc592a0b8", @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @val={@void, {0x8100, 0x1, 0x1}}, {@llc_tr={0x11, {@llc={0xf8, 0x4, "be70", "cc30b2eee3c73a250a6d42c93a62b7db14915815e62fb59ad4f3db2815f60ec52e6c81ba9fcae95fa86f9c5f8b3a64e4d43474837d4b84a545b36448ee3f5f9763bd880fb743ee05315a0ef84801d563fdb9d222c8e909ea68c47a68e96a28240e0a0bb88fe6a4ad"}}}}}, &(0x7f0000001480)={0x1, 0x1, [0x3c, 0xf37, 0xe89, 0x1d1]}) (async) r16 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r16, 0x8933, &(0x7f00000014c0)={'wpan3\x00', 0x0}) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r18 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001540), r16) (rerun: 64) sendmsg$NL802154_CMD_SET_SHORT_ADDR(0xffffffffffffffff, &(0x7f0000001680)={&(0x7f0000001500)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001640)={&(0x7f00000015c0)={0x58, r18, 0x8, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r17}, @NL802154_ATTR_SHORT_ADDR={0x6, 0xa, 0xaaa1}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SHORT_ADDR={0x6}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000090}, 0xc800) 303.737172ms ago: executing program 3 (id=1621): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x297880e5d24e7381}, 0x9c) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x28, 0x2, 0x8, 0x101, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x16}]}, 0x28}, 0x1, 0x0, 0x0, 0x800}, 0x8000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x88}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x5c, 0x3, 0x1, 0x5, 0x0, 0x0, {0x5}, [@CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x2}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x7}, @CTA_LABELS={0x10, 0x16, 0x1, 0x0, [0x2, 0x7f, 0x7]}, @CTA_PROTOINFO={0x20, 0x4, 0x0, 0x1, @CTA_PROTOINFO_DCCP={0x1c, 0x2, 0x0, 0x1, [@CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x2}, @CTA_PROTOINFO_DCCP_HANDSHAKE_SEQ={0xc, 0x3, 0x1, 0x0, 0x7}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x0, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='tlb_flush\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x11, r0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)="fe", 0x1}], 0x1, 0x0, 0xb0}}], 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) 167.798032ms ago: executing program 0 (id=1622): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000000b06010400000000dc059e136c552cb2"], 0x14}, 0x1, 0x0, 0x0, 0x4}, 0x2004c051) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20048004, 0x0, 0x0) (async) sendto$inet6(r1, 0x0, 0x0, 0x20048004, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_BEARER_ENABLE(r2, 0x0, 0x40011) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r2, 0x0, 0x40011) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x54, 0x0, 0x400, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x54}}, 0x0) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x54, 0x0, 0x400, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x54}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000100000000000800001e00"/28], 0x48) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000100000000000800001e00"/28], 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xf, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {}, {0x85, 0x0, 0x0, 0x10}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$MRT_DEL_MFC(0xffffffffffffffff, 0x0, 0xcd, &(0x7f0000000340)={@local, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x1, "82135b48cf6b9ae5ed5e1c1a5c73956b410d07a5b0bb36058d15d505b6150f19", 0x83, 0x7, 0xa, 0x5}, 0x3c) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x38, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}]}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) getsockopt$inet_tcp_buf(r7, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) (async) getsockopt$inet_tcp_buf(r7, 0x6, 0x1a, 0x0, &(0x7f00000000c0)) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r8, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2400000018000900"], 0x24}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x20210, r8, 0x0) r10 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r10, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) 167.557675ms ago: executing program 2 (id=1623): socket$netlink(0x10, 0x3, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0) getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000880)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@enum={0x0, 0x1, 0x0, 0x6, 0x4, [{0x1000000}]}]}}, 0x0, 0x2e, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1a"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) shutdown(r1, 0x2) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) r3 = socket$inet6(0xa, 0x2, 0x3a) readv(r3, &(0x7f00000006c0)=[{&(0x7f0000000440)=""/129, 0x81}], 0x1) connect$inet6(r3, &(0x7f0000000040), 0x1c) sendto$inet6(r3, &(0x7f0000000080)="800037bbfa9ba1ce", 0x8, 0x0, 0x0, 0x0) 122.071289ms ago: executing program 4 (id=1624): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='io.stat\x00', 0x26e1, 0x0) r1 = socket$kcm(0x2, 0x2, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0xf, &(0x7f00000002c0), 0x161) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x31, &(0x7f0000000640)=r0, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x4, 0x2000000, @private0={0xfc, 0x0, '\x00', 0x1}}}, 0x0, 0x0, 0x19, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) r3 = socket$l2tp6(0xa, 0x2, 0x73) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='.\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r6}, 0x10) ioctl$TUNSETIFF(r4, 0x400454ca, 0x0) ioctl$TUNSETQUEUE(r4, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r11, 0x10e, 0x1, &(0x7f0000000140)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(r11, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=ANY=[@ANYBLOB="88000000000101040000000000000000020000002c00018014000180080001007f00000108000200e00000020c000280050001000000000006000340000300002400028014000180080001000000000008000200ac1414bb0c000280050001000000000008000740000000001c000f8008000140000000000800034000000000080002"], 0x88}}, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r9], 0x20}}, 0x8080) sendto$inet6(r3, 0x0, 0xfffffffffffffff1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1}, 0x1c) r12 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000040)=ANY=[@ANYBLOB="26fc44c00ae9ada919fe12adde03f72cf48166a4582df4a706c559cbef1aef4357ea36ee678cb941e8fa27bc6fce57", @ANYRES16=r12, @ANYBLOB="ff8305000700fffeff00", @ANYRES32], 0x4}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRESOCT=r7, @ANYRES16], 0x24}, 0x1, 0x0, 0x0, 0x5}, 0xc805) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000240)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xcfb9cc821fc0631b}}}}}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x16, 0x0, 0x4, 0x7fffffff, 0x0, r5, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x20000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 98.025677ms ago: executing program 3 (id=1625): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000d40)=""/4096, 0x1000}, {&(0x7f0000000000)=""/45, 0x2d}], 0x2}}], 0x1, 0x2, 0x0) (fail_nth: 2) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 0s ago: executing program 1 (id=1626): r0 = socket$inet6_icmp(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0xfff, @mcast1, 0xc}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000140)='rxrpc_client\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) kernel console output (not intermixed with test programs): .953490][ T8900] __kmalloc_noprof+0xd8/0x400 [ 230.958264][ T8900] bpf_test_init+0xe1/0x180 [ 230.962766][ T8900] bpf_prog_test_run_xdp+0x48e/0x11b0 [ 230.968650][ T8900] ? __pfx_lock_acquire+0x10/0x10 [ 230.973671][ T8900] ? __pfx_lock_release+0x10/0x10 [ 230.978702][ T8900] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 230.984497][ T8900] ? __fget_files+0x29/0x470 [ 230.989089][ T8900] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 230.994889][ T8900] bpf_prog_test_run+0x33a/0x3b0 [ 230.999821][ T8900] __sys_bpf+0x48d/0x810 [ 231.004057][ T8900] ? __pfx___sys_bpf+0x10/0x10 [ 231.008822][ T8900] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 231.014815][ T8900] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 231.021142][ T8900] ? do_syscall_64+0x100/0x230 [ 231.025906][ T8900] __x64_sys_bpf+0x7c/0x90 [ 231.030316][ T8900] do_syscall_64+0xf3/0x230 [ 231.034813][ T8900] ? clear_bhb_loop+0x35/0x90 [ 231.039488][ T8900] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.045411][ T8900] RIP: 0033:0x7ff205f7def9 [ 231.049819][ T8900] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.069435][ T8900] RSP: 002b:00007ff206e24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 231.077856][ T8900] RAX: ffffffffffffffda RBX: 00007ff206135f80 RCX: 00007ff205f7def9 [ 231.085821][ T8900] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 231.093872][ T8900] RBP: 00007ff206e24090 R08: 0000000000000000 R09: 0000000000000000 [ 231.101863][ T8900] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.109998][ T8900] R13: 0000000000000000 R14: 00007ff206135f80 R15: 00007fffb002c268 [ 231.117974][ T8900] [ 231.270069][ T8908] __nla_validate_parse: 3 callbacks suppressed [ 231.270091][ T8908] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1231'. [ 231.282254][ T8911] FAULT_INJECTION: forcing a failure. [ 231.282254][ T8911] name failslab, interval 1, probability 0, space 0, times 0 [ 231.286734][ T8908] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1231'. [ 231.304914][ T8911] CPU: 1 UID: 0 PID: 8911 Comm: syz.2.1232 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 231.318119][ T8911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 231.328177][ T8911] Call Trace: [ 231.331466][ T8911] [ 231.334400][ T8911] dump_stack_lvl+0x241/0x360 [ 231.339089][ T8911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.344288][ T8911] ? __pfx__printk+0x10/0x10 [ 231.348885][ T8911] ? __kmalloc_noprof+0xb0/0x400 [ 231.353842][ T8911] ? __pfx___might_resched+0x10/0x10 [ 231.359141][ T8911] should_fail_ex+0x3b0/0x4e0 [ 231.363838][ T8911] ? bpf_test_init+0xe1/0x180 [ 231.368703][ T8911] should_failslab+0xac/0x100 [ 231.373407][ T8911] ? bpf_test_init+0xe1/0x180 [ 231.378075][ T8911] __kmalloc_noprof+0xd8/0x400 [ 231.382931][ T8911] bpf_test_init+0xe1/0x180 [ 231.387474][ T8911] bpf_prog_test_run_xdp+0x48e/0x11b0 [ 231.392846][ T8911] ? __pfx_lock_acquire+0x10/0x10 [ 231.397959][ T8911] ? __pfx_lock_release+0x10/0x10 [ 231.403002][ T8911] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 231.408810][ T8911] ? __fget_files+0x29/0x470 [ 231.413402][ T8911] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 231.419215][ T8911] bpf_prog_test_run+0x33a/0x3b0 [ 231.424170][ T8911] __sys_bpf+0x48d/0x810 [ 231.428424][ T8911] ? __pfx___sys_bpf+0x10/0x10 [ 231.433197][ T8911] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 231.439182][ T8911] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 231.445517][ T8911] ? do_syscall_64+0x100/0x230 [ 231.450324][ T8911] __x64_sys_bpf+0x7c/0x90 [ 231.454778][ T8911] do_syscall_64+0xf3/0x230 [ 231.459318][ T8911] ? clear_bhb_loop+0x35/0x90 [ 231.464043][ T8911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.469943][ T8911] RIP: 0033:0x7ff205f7def9 [ 231.474364][ T8911] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 231.493970][ T8911] RSP: 002b:00007ff206e24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 231.502408][ T8911] RAX: ffffffffffffffda RBX: 00007ff206135f80 RCX: 00007ff205f7def9 [ 231.510392][ T8911] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 231.518547][ T8911] RBP: 00007ff206e24090 R08: 0000000000000000 R09: 0000000000000000 [ 231.526522][ T8911] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.534511][ T8911] R13: 0000000000000000 R14: 00007ff206135f80 R15: 00007fffb002c268 [ 231.542495][ T8911] [ 231.968508][ T8943] netlink: 'syz.4.1240': attribute type 7 has an invalid length. [ 231.986328][ T8943] netlink: 188520 bytes leftover after parsing attributes in process `syz.4.1240'. [ 232.157218][ T8953] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 232.194763][ T12] wlan0: Trigger new scan to find an IBSS to join [ 232.307340][ T8958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1245'. [ 232.317228][ T8958] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1245'. [ 232.740386][ T8982] netlink: 'syz.1.1254': attribute type 7 has an invalid length. [ 232.751039][ T8982] netlink: 188520 bytes leftover after parsing attributes in process `syz.1.1254'. [ 232.922844][ T8989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1257'. [ 232.932154][ T8989] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1257'. [ 233.156335][ T9007] FAULT_INJECTION: forcing a failure. [ 233.156335][ T9007] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 233.169867][ T9007] CPU: 1 UID: 0 PID: 9007 Comm: syz.2.1264 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 233.180584][ T9007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 233.190723][ T9007] Call Trace: [ 233.194002][ T9007] [ 233.196940][ T9007] dump_stack_lvl+0x241/0x360 [ 233.201719][ T9007] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.206969][ T9007] ? __pfx__printk+0x10/0x10 [ 233.211601][ T9007] ? __pfx_lock_release+0x10/0x10 [ 233.216649][ T9007] ? __lock_acquire+0x137a/0x2040 [ 233.221699][ T9007] should_fail_ex+0x3b0/0x4e0 [ 233.226413][ T9007] _copy_from_iter+0x1f6/0x1960 [ 233.231298][ T9007] ? __pfx__copy_from_iter+0x10/0x10 [ 233.236614][ T9007] ? tun_get_user+0x871/0x4720 [ 233.241408][ T9007] ? __pfx_lock_release+0x10/0x10 [ 233.246469][ T9007] ? page_copy_sane+0x46/0x260 [ 233.251259][ T9007] copy_page_from_iter+0x7a/0x100 [ 233.256307][ T9007] tun_get_user+0x1f7d/0x4720 [ 233.261009][ T9007] ? tun_get_user+0x871/0x4720 [ 233.265804][ T9007] ? __lock_acquire+0x137a/0x2040 [ 233.270859][ T9007] ? __pfx_tun_get_user+0x10/0x10 [ 233.275928][ T9007] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 233.281407][ T9007] ? tun_get+0x1e/0x2f0 [ 233.285581][ T9007] ? __pfx_lock_release+0x10/0x10 [ 233.290650][ T9007] ? tun_get+0x1e/0x2f0 [ 233.294824][ T9007] ? tun_get+0x27d/0x2f0 [ 233.299090][ T9007] tun_chr_write_iter+0x113/0x1f0 [ 233.304133][ T9007] vfs_write+0xa72/0xc90 [ 233.308402][ T9007] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 233.313965][ T9007] ? __pfx_vfs_write+0x10/0x10 [ 233.318782][ T9007] ksys_write+0x1a0/0x2c0 [ 233.323223][ T9007] ? __pfx_ksys_write+0x10/0x10 [ 233.328094][ T9007] ? do_syscall_64+0x100/0x230 [ 233.332882][ T9007] ? do_syscall_64+0xb6/0x230 [ 233.337586][ T9007] do_syscall_64+0xf3/0x230 [ 233.342111][ T9007] ? clear_bhb_loop+0x35/0x90 [ 233.346815][ T9007] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.352733][ T9007] RIP: 0033:0x7ff205f7c9df [ 233.357211][ T9007] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 233.376836][ T9007] RSP: 002b:00007ff206e24000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 233.385283][ T9007] RAX: ffffffffffffffda RBX: 00007ff206135f80 RCX: 00007ff205f7c9df [ 233.393275][ T9007] RDX: 000000000000006e RSI: 0000000020000000 RDI: 00000000000000c8 [ 233.401273][ T9007] RBP: 00007ff206e24090 R08: 0000000000000000 R09: 0000000000000000 [ 233.409268][ T9007] R10: 000000000000006e R11: 0000000000000293 R12: 0000000000000001 [ 233.417525][ T9007] R13: 0000000000000000 R14: 00007ff206135f80 R15: 00007fffb002c268 [ 233.425537][ T9007] [ 233.430723][ T9015] FAULT_INJECTION: forcing a failure. [ 233.430723][ T9015] name failslab, interval 1, probability 0, space 0, times 0 [ 233.449953][ T9015] CPU: 1 UID: 0 PID: 9015 Comm: syz.0.1266 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 233.460663][ T9015] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 233.470739][ T9015] Call Trace: [ 233.474036][ T9015] [ 233.476983][ T9015] dump_stack_lvl+0x241/0x360 [ 233.481687][ T9015] ? __pfx_dump_stack_lvl+0x10/0x10 [ 233.485350][ T9020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.486890][ T9015] ? __pfx__printk+0x10/0x10 [ 233.486922][ T9015] ? __kmalloc_noprof+0xb0/0x400 [ 233.486945][ T9015] ? __pfx___might_resched+0x10/0x10 [ 233.511480][ T9015] should_fail_ex+0x3b0/0x4e0 [ 233.516187][ T9015] ? bpf_test_init+0xe1/0x180 [ 233.520878][ T9015] should_failslab+0xac/0x100 [ 233.525582][ T9015] ? bpf_test_init+0xe1/0x180 [ 233.530278][ T9015] __kmalloc_noprof+0xd8/0x400 [ 233.535091][ T9015] bpf_test_init+0xe1/0x180 [ 233.539620][ T9015] bpf_prog_test_run_xdp+0x48e/0x11b0 [ 233.545011][ T9015] ? __pfx_lock_acquire+0x10/0x10 [ 233.550057][ T9015] ? __pfx_lock_release+0x10/0x10 [ 233.555121][ T9015] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 233.560933][ T9015] ? __fget_files+0x29/0x470 [ 233.565527][ T9015] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 233.571325][ T9015] bpf_prog_test_run+0x33a/0x3b0 [ 233.576257][ T9015] __sys_bpf+0x48d/0x810 [ 233.580492][ T9015] ? __pfx___sys_bpf+0x10/0x10 [ 233.585255][ T9015] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 233.591315][ T9015] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 233.597635][ T9015] ? do_syscall_64+0x100/0x230 [ 233.602393][ T9015] __x64_sys_bpf+0x7c/0x90 [ 233.606800][ T9015] do_syscall_64+0xf3/0x230 [ 233.611300][ T9015] ? clear_bhb_loop+0x35/0x90 [ 233.615974][ T9015] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 233.621883][ T9015] RIP: 0033:0x7f5b0b97def9 [ 233.626287][ T9015] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 233.645880][ T9015] RSP: 002b:00007f5b0c722038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 233.654288][ T9015] RAX: ffffffffffffffda RBX: 00007f5b0bb35f80 RCX: 00007f5b0b97def9 [ 233.662257][ T9015] RDX: 0000000000000050 RSI: 0000000020000640 RDI: 000000000000000a [ 233.670215][ T9015] RBP: 00007f5b0c722090 R08: 0000000000000000 R09: 0000000000000000 [ 233.678182][ T9015] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 233.686141][ T9015] R13: 0000000000000000 R14: 00007f5b0bb35f80 R15: 00007ffeeb9417f8 [ 233.694113][ T9015] [ 233.772531][ T9026] netlink: 'syz.2.1268': attribute type 7 has an invalid length. [ 233.800679][ T9026] netlink: 188520 bytes leftover after parsing attributes in process `syz.2.1268'. [ 233.910389][ T9030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1270'. [ 234.373907][ T9066] netlink: 'syz.2.1281': attribute type 7 has an invalid length. [ 234.949331][ T9099] netlink: 'syz.2.1293': attribute type 7 has an invalid length. [ 235.069327][ T9103] FAULT_INJECTION: forcing a failure. [ 235.069327][ T9103] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 235.098469][ T9103] CPU: 0 UID: 0 PID: 9103 Comm: syz.4.1296 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 235.109195][ T9103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 235.119272][ T9103] Call Trace: [ 235.122563][ T9103] [ 235.125505][ T9103] dump_stack_lvl+0x241/0x360 [ 235.130208][ T9103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.135441][ T9103] ? __pfx__printk+0x10/0x10 [ 235.140146][ T9103] ? snprintf+0xda/0x120 [ 235.144416][ T9103] should_fail_ex+0x3b0/0x4e0 [ 235.149120][ T9103] _copy_to_user+0x2f/0xb0 [ 235.153566][ T9103] simple_read_from_buffer+0xca/0x150 [ 235.155514][ T2976] wlan0: Trigger new scan to find an IBSS to join [ 235.158948][ T9103] proc_fail_nth_read+0x1ec/0x260 [ 235.170377][ T9103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.175951][ T9103] ? rw_verify_area+0x520/0x6b0 [ 235.180828][ T9103] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 235.186406][ T9103] vfs_read+0x204/0xbc0 [ 235.190843][ T9103] ? __pfx_lock_release+0x10/0x10 [ 235.195910][ T9103] ? __pfx_vfs_read+0x10/0x10 [ 235.200602][ T9103] ? __fget_files+0x29/0x470 [ 235.205208][ T9103] ? __fget_files+0x3f6/0x470 [ 235.209893][ T9103] ksys_read+0x1a0/0x2c0 [ 235.214134][ T9103] ? __pfx_ksys_read+0x10/0x10 [ 235.218906][ T9103] ? do_syscall_64+0x100/0x230 [ 235.223680][ T9103] ? do_syscall_64+0xb6/0x230 [ 235.228366][ T9103] do_syscall_64+0xf3/0x230 [ 235.232877][ T9103] ? clear_bhb_loop+0x35/0x90 [ 235.237564][ T9103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 235.243459][ T9103] RIP: 0033:0x7f03edb7c93c [ 235.247949][ T9103] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 235.267546][ T9103] RSP: 002b:00007f03eea1e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 235.275954][ T9103] RAX: ffffffffffffffda RBX: 00007f03edd35f80 RCX: 00007f03edb7c93c [ 235.283920][ T9103] RDX: 000000000000000f RSI: 00007f03eea1e0a0 RDI: 0000000000000004 [ 235.291880][ T9103] RBP: 00007f03eea1e090 R08: 0000000000000000 R09: 0000000000000000 [ 235.299844][ T9103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 235.307804][ T9103] R13: 0000000000000000 R14: 00007f03edd35f80 R15: 00007ffc68dff748 [ 235.315791][ T9103] [ 235.436120][ T9112] syz.1.1300[9112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.436364][ T9112] syz.1.1300[9112] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 235.766910][ T9135] FAULT_INJECTION: forcing a failure. [ 235.766910][ T9135] name failslab, interval 1, probability 0, space 0, times 0 [ 235.793464][ T9134] FAULT_INJECTION: forcing a failure. [ 235.793464][ T9134] name failslab, interval 1, probability 0, space 0, times 0 [ 235.812776][ T9135] CPU: 0 UID: 0 PID: 9135 Comm: syz.0.1311 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 235.823486][ T9135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 235.833641][ T9135] Call Trace: [ 235.836929][ T9135] [ 235.839858][ T9135] dump_stack_lvl+0x241/0x360 [ 235.844556][ T9135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 235.849785][ T9135] ? __pfx__printk+0x10/0x10 [ 235.854576][ T9135] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 235.860490][ T9135] ? __pfx___might_resched+0x10/0x10 [ 235.865809][ T9135] should_fail_ex+0x3b0/0x4e0 [ 235.870515][ T9135] should_failslab+0xac/0x100 [ 235.875213][ T9135] __kmalloc_cache_node_noprof+0x74/0x300 [ 235.880946][ T9135] ? __get_vm_area_node+0x113/0x270 [ 235.886163][ T9135] __get_vm_area_node+0x113/0x270 [ 235.891209][ T9135] __vmalloc_node_range_noprof+0x3c6/0x1400 [ 235.897105][ T9135] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 235.902654][ T9135] ? mark_lock+0x9a/0x350 [ 235.907027][ T9135] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 235.913370][ T9135] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 235.918921][ T9135] __vmalloc_noprof+0x79/0x90 [ 235.923601][ T9135] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 235.929161][ T9135] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 235.934550][ T9135] ? bpf_prog_alloc+0x28/0x1b0 [ 235.939338][ T9135] bpf_prog_alloc+0x3a/0x1b0 [ 235.943954][ T9135] bpf_prog_load+0x7f7/0x20f0 [ 235.948667][ T9135] ? __pfx_bpf_prog_load+0x10/0x10 [ 235.953800][ T9135] ? __pfx___might_resched+0x10/0x10 [ 235.959109][ T9135] ? __might_fault+0xc6/0x120 [ 235.964227][ T9135] ? bpf_lsm_bpf+0x9/0x10 [ 235.968558][ T9135] ? security_bpf+0x87/0xb0 [ 235.973057][ T9135] __sys_bpf+0x4ee/0x810 [ 235.977304][ T9135] ? __pfx___sys_bpf+0x10/0x10 [ 235.982092][ T9135] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 235.988110][ T9135] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 235.994442][ T9135] ? do_syscall_64+0x100/0x230 [ 235.999294][ T9135] __x64_sys_bpf+0x7c/0x90 [ 236.003711][ T9135] do_syscall_64+0xf3/0x230 [ 236.008213][ T9135] ? clear_bhb_loop+0x35/0x90 [ 236.012888][ T9135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.018775][ T9135] RIP: 0033:0x7f5b0b97def9 [ 236.023270][ T9135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.042866][ T9135] RSP: 002b:00007f5b0c722038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.051298][ T9135] RAX: ffffffffffffffda RBX: 00007f5b0bb35f80 RCX: 00007f5b0b97def9 [ 236.059276][ T9135] RDX: 0000000000000090 RSI: 0000000020000140 RDI: 0000000000000005 [ 236.067240][ T9135] RBP: 00007f5b0c722090 R08: 0000000000000000 R09: 0000000000000000 [ 236.075210][ T9135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.083175][ T9135] R13: 0000000000000001 R14: 00007f5b0bb35f80 R15: 00007ffeeb9417f8 [ 236.091149][ T9135] [ 236.108408][ T9134] CPU: 0 UID: 0 PID: 9134 Comm: syz.2.1310 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 236.119122][ T9134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 236.129177][ T9134] Call Trace: [ 236.132446][ T9134] [ 236.135370][ T9134] dump_stack_lvl+0x241/0x360 [ 236.140045][ T9134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.145235][ T9134] ? __pfx__printk+0x10/0x10 [ 236.149818][ T9134] ? __kmalloc_noprof+0xb0/0x400 [ 236.154749][ T9134] ? __pfx___might_resched+0x10/0x10 [ 236.160033][ T9134] should_fail_ex+0x3b0/0x4e0 [ 236.164709][ T9134] ? bpf_test_init+0xe1/0x180 [ 236.169372][ T9134] should_failslab+0xac/0x100 [ 236.174042][ T9134] ? bpf_test_init+0xe1/0x180 [ 236.178726][ T9134] __kmalloc_noprof+0xd8/0x400 [ 236.183501][ T9134] bpf_test_init+0xe1/0x180 [ 236.188020][ T9134] bpf_prog_test_run_skb+0x2bb/0x1820 [ 236.193395][ T9134] ? __pfx_lock_release+0x10/0x10 [ 236.198441][ T9134] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 236.204423][ T9134] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 236.210233][ T9134] bpf_prog_test_run+0x33a/0x3b0 [ 236.215179][ T9134] __sys_bpf+0x48d/0x810 [ 236.219429][ T9134] ? __pfx___sys_bpf+0x10/0x10 [ 236.224192][ T9134] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 236.230178][ T9134] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 236.236501][ T9134] ? do_syscall_64+0x100/0x230 [ 236.241270][ T9134] __x64_sys_bpf+0x7c/0x90 [ 236.245703][ T9134] do_syscall_64+0xf3/0x230 [ 236.250212][ T9134] ? clear_bhb_loop+0x35/0x90 [ 236.254889][ T9134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.260789][ T9134] RIP: 0033:0x7ff205f7def9 [ 236.265198][ T9134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.284801][ T9134] RSP: 002b:00007ff206e24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.293204][ T9134] RAX: ffffffffffffffda RBX: 00007ff206135f80 RCX: 00007ff205f7def9 [ 236.301164][ T9134] RDX: 0000000000000050 RSI: 0000000020000900 RDI: 000000000000000a [ 236.309123][ T9134] RBP: 00007ff206e24090 R08: 0000000000000000 R09: 0000000000000000 [ 236.317083][ T9134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.325042][ T9134] R13: 0000000000000000 R14: 00007ff206135f80 R15: 00007fffb002c268 [ 236.333011][ T9134] [ 236.352725][ T9135] warn_alloc: 1 callbacks suppressed [ 236.352742][ T9135] syz.0.1311: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 236.406770][ T9135] CPU: 1 UID: 0 PID: 9135 Comm: syz.0.1311 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 236.417496][ T9135] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 236.427661][ T9135] Call Trace: [ 236.430953][ T9135] [ 236.433898][ T9135] dump_stack_lvl+0x241/0x360 [ 236.438602][ T9135] ? __pfx_dump_stack_lvl+0x10/0x10 [ 236.443822][ T9135] ? __pfx__printk+0x10/0x10 [ 236.448438][ T9135] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 236.454871][ T9135] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 236.461401][ T9135] warn_alloc+0x278/0x410 [ 236.465771][ T9135] ? __pfx_warn_alloc+0x10/0x10 [ 236.470736][ T9135] ? __get_vm_area_node+0x113/0x270 [ 236.476056][ T9135] ? __get_vm_area_node+0x261/0x270 [ 236.481286][ T9135] __vmalloc_node_range_noprof+0x3eb/0x1400 [ 236.487205][ T9135] ? mark_lock+0x9a/0x350 [ 236.491587][ T9135] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 236.497941][ T9135] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 236.503503][ T9135] __vmalloc_noprof+0x79/0x90 [ 236.508197][ T9135] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 236.513763][ T9135] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 236.519235][ T9135] ? bpf_prog_alloc+0x28/0x1b0 [ 236.524009][ T9135] bpf_prog_alloc+0x3a/0x1b0 [ 236.528595][ T9135] bpf_prog_load+0x7f7/0x20f0 [ 236.533271][ T9135] ? __pfx_bpf_prog_load+0x10/0x10 [ 236.538373][ T9135] ? __pfx___might_resched+0x10/0x10 [ 236.543668][ T9135] ? __might_fault+0xc6/0x120 [ 236.548340][ T9135] ? bpf_lsm_bpf+0x9/0x10 [ 236.552656][ T9135] ? security_bpf+0x87/0xb0 [ 236.557148][ T9135] __sys_bpf+0x4ee/0x810 [ 236.561382][ T9135] ? __pfx___sys_bpf+0x10/0x10 [ 236.566146][ T9135] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 236.572121][ T9135] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 236.578438][ T9135] ? do_syscall_64+0x100/0x230 [ 236.583194][ T9135] __x64_sys_bpf+0x7c/0x90 [ 236.587598][ T9135] do_syscall_64+0xf3/0x230 [ 236.592092][ T9135] ? clear_bhb_loop+0x35/0x90 [ 236.596763][ T9135] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 236.602646][ T9135] RIP: 0033:0x7f5b0b97def9 [ 236.607048][ T9135] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 236.626641][ T9135] RSP: 002b:00007f5b0c722038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 236.635045][ T9135] RAX: ffffffffffffffda RBX: 00007f5b0bb35f80 RCX: 00007f5b0b97def9 [ 236.643004][ T9135] RDX: 0000000000000090 RSI: 0000000020000140 RDI: 0000000000000005 [ 236.650961][ T9135] RBP: 00007f5b0c722090 R08: 0000000000000000 R09: 0000000000000000 [ 236.658923][ T9135] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 236.666881][ T9135] R13: 0000000000000001 R14: 00007f5b0bb35f80 R15: 00007ffeeb9417f8 [ 236.674853][ T9135] [ 236.721436][ T9135] Mem-Info: [ 236.725813][ T9135] active_anon:4188 inactive_anon:0 isolated_anon:0 [ 236.725813][ T9135] active_file:1934 inactive_file:38258 isolated_file:0 [ 236.725813][ T9135] unevictable:768 dirty:242 writeback:0 [ 236.725813][ T9135] slab_reclaimable:9161 slab_unreclaimable:99971 [ 236.725813][ T9135] mapped:21412 shmem:1246 pagetables:761 [ 236.725813][ T9135] sec_pagetables:0 bounce:0 [ 236.725813][ T9135] kernel_misc_reclaimable:0 [ 236.725813][ T9135] free:1360421 free_pcp:528 free_cma:0 [ 236.813742][ T9135] Node 0 active_anon:16652kB inactive_anon:0kB active_file:7736kB inactive_file:152964kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:85648kB dirty:968kB writeback:0kB shmem:3448kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10240kB pagetables:2944kB sec_pagetables:0kB all_unreclaimable? no [ 236.856200][ T9135] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 236.892959][ T9135] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 236.933195][ T9135] lowmem_reserve[]: 0 2467 2468 0 0 [ 236.939076][ T9135] Node 0 DMA32 free:1479808kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:16812kB inactive_anon:0kB active_file:7736kB inactive_file:152148kB unevictable:1536kB writepending:968kB present:3129332kB managed:2554980kB mlocked:0kB bounce:0kB free_pcp:1540kB local_pcp:836kB free_cma:0kB [ 236.969825][ T9135] lowmem_reserve[]: 0 0 0 0 0 [ 236.975236][ T9135] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 237.007222][ T9135] lowmem_reserve[]: 0 0 0 0 0 [ 237.012102][ T9135] Node 1 Normal free:3946952kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:248kB local_pcp:248kB free_cma:0kB [ 237.050582][ T9158] __nla_validate_parse: 6 callbacks suppressed [ 237.050601][ T9158] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1321'. [ 237.051862][ T9135] lowmem_reserve[]: 0 0 0 0 0 [ 237.079865][ T9135] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 237.093416][ T9135] Node 0 DMA32: 1*4kB (U) 235*8kB (UE) 584*16kB (UME) 301*32kB (UME) 184*64kB (UME) 160*128kB (UME) 78*256kB (UM) 24*512kB (UM) 11*1024kB (UM) 3*2048kB (UME) 336*4096kB (UM) = 1479036kB [ 237.112477][ T9135] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 237.129127][ T9135] Node 1 Normal: 1*4kB (U) 1*8kB (U) 1*16kB (U) 9*32kB (U) 7*64kB (UM) 6*128kB (U) 4*256kB (UM) 6*512kB (UM) 5*1024kB (U) 2*2048kB (U) 960*4096kB (M) = 3947004kB [ 237.151112][ T9135] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 237.171298][ T9135] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 237.187181][ T9135] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 237.197505][ T9135] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 237.207241][ T9135] 41443 total pagecache pages [ 237.212380][ T9135] 0 pages in swap cache [ 237.212589][ T9167] FAULT_INJECTION: forcing a failure. [ 237.212589][ T9167] name failslab, interval 1, probability 0, space 0, times 0 [ 237.217037][ T9135] Free swap = 124996kB [ 237.217050][ T9135] Total swap = 124996kB [ 237.217060][ T9135] 2097051 pages RAM [ 237.217068][ T9135] 0 pages HighMem/MovableOnly [ 237.217076][ T9135] 426968 pages reserved [ 237.217083][ T9135] 0 pages cma reserved [ 237.263154][ T9167] CPU: 1 UID: 0 PID: 9167 Comm: syz.1.1324 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 237.273868][ T9167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 237.283947][ T9167] Call Trace: [ 237.287243][ T9167] [ 237.290192][ T9167] dump_stack_lvl+0x241/0x360 [ 237.294905][ T9167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 237.300128][ T9167] ? __pfx__printk+0x10/0x10 [ 237.304747][ T9167] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 237.310688][ T9167] ? __pfx___might_resched+0x10/0x10 [ 237.316004][ T9167] should_fail_ex+0x3b0/0x4e0 [ 237.320716][ T9167] should_failslab+0xac/0x100 [ 237.325420][ T9167] __kmalloc_cache_node_noprof+0x74/0x300 [ 237.331166][ T9167] ? __get_vm_area_node+0x113/0x270 [ 237.336395][ T9167] __get_vm_area_node+0x113/0x270 [ 237.341455][ T9167] __vmalloc_node_range_noprof+0x3c6/0x1400 [ 237.347378][ T9167] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 237.352949][ T9167] ? mark_lock+0x9a/0x350 [ 237.356795][ T9172] syz.3.1326[9172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.357311][ T9167] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 237.357501][ T9172] syz.3.1326[9172] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 237.368776][ T9167] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 237.368810][ T9167] __vmalloc_noprof+0x79/0x90 [ 237.368831][ T9167] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 237.368852][ T9167] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 237.368872][ T9167] ? bpf_prog_alloc+0x28/0x1b0 [ 237.368900][ T9167] bpf_prog_alloc+0x3a/0x1b0 [ 237.368922][ T9167] bpf_prog_load+0x7f7/0x20f0 [ 237.368957][ T9167] ? __pfx_bpf_prog_load+0x10/0x10 [ 237.368978][ T9167] ? __pfx___might_resched+0x10/0x10 [ 237.369015][ T9167] ? __might_fault+0xc6/0x120 [ 237.369038][ T9167] ? bpf_lsm_bpf+0x9/0x10 [ 237.369055][ T9167] ? security_bpf+0x87/0xb0 [ 237.369077][ T9167] __sys_bpf+0x4ee/0x810 [ 237.369101][ T9167] ? __pfx___sys_bpf+0x10/0x10 [ 237.369136][ T9167] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 237.369163][ T9167] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 237.369184][ T9167] ? do_syscall_64+0x100/0x230 [ 237.471502][ T9167] __x64_sys_bpf+0x7c/0x90 [ 237.475918][ T9167] do_syscall_64+0xf3/0x230 [ 237.480414][ T9167] ? clear_bhb_loop+0x35/0x90 [ 237.485088][ T9167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 237.490975][ T9167] RIP: 0033:0x7f8acd37def9 [ 237.495383][ T9167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 237.514978][ T9167] RSP: 002b:00007f8ace0d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 237.523403][ T9167] RAX: ffffffffffffffda RBX: 00007f8acd535f80 RCX: 00007f8acd37def9 [ 237.531384][ T9167] RDX: 0000000000000094 RSI: 0000000020000240 RDI: 0000000000000005 [ 237.539358][ T9167] RBP: 00007f8ace0d5090 R08: 0000000000000000 R09: 0000000000000000 [ 237.547324][ T9167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 237.555306][ T9167] R13: 0000000000000000 R14: 00007f8acd535f80 R15: 00007ffcc39b1128 [ 237.563284][ T9167] [ 239.235199][ T2932] wlan0: Trigger new scan to find an IBSS to join [ 240.018238][ T9202] syz.1.1338[9202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.018394][ T9202] syz.1.1338[9202] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 240.145989][ T12] wlan0: Creating new IBSS network, BSSID 46:50:51:4a:2b:2c [ 240.151665][ T9215] FAULT_INJECTION: forcing a failure. [ 240.151665][ T9215] name failslab, interval 1, probability 0, space 0, times 0 [ 240.182281][ T9215] CPU: 1 UID: 0 PID: 9215 Comm: syz.3.1341 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 240.192994][ T9215] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 240.203057][ T9215] Call Trace: [ 240.206337][ T9215] [ 240.209281][ T9215] dump_stack_lvl+0x241/0x360 [ 240.213978][ T9215] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.219189][ T9215] ? __pfx__printk+0x10/0x10 [ 240.223777][ T9215] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 240.229664][ T9215] ? __pfx___might_resched+0x10/0x10 [ 240.234947][ T9215] should_fail_ex+0x3b0/0x4e0 [ 240.239631][ T9215] should_failslab+0xac/0x100 [ 240.244308][ T9215] __kmalloc_cache_node_noprof+0x74/0x300 [ 240.250021][ T9215] ? __get_vm_area_node+0x113/0x270 [ 240.255221][ T9215] __get_vm_area_node+0x113/0x270 [ 240.260249][ T9215] __vmalloc_node_range_noprof+0x3c6/0x1400 [ 240.266139][ T9215] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 240.271685][ T9215] ? mark_lock+0x9a/0x350 [ 240.276032][ T9215] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 240.282532][ T9215] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 240.288084][ T9215] __vmalloc_noprof+0x79/0x90 [ 240.292747][ T9215] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 240.298287][ T9215] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 240.303772][ T9215] ? bpf_prog_alloc+0x28/0x1b0 [ 240.308539][ T9215] bpf_prog_alloc+0x3a/0x1b0 [ 240.313122][ T9215] bpf_prog_load+0x7f7/0x20f0 [ 240.317890][ T9215] ? __pfx_bpf_prog_load+0x10/0x10 [ 240.322991][ T9215] ? __pfx___might_resched+0x10/0x10 [ 240.328283][ T9215] ? __might_fault+0xc6/0x120 [ 240.332953][ T9215] ? bpf_lsm_bpf+0x9/0x10 [ 240.337272][ T9215] ? security_bpf+0x87/0xb0 [ 240.341765][ T9215] __sys_bpf+0x4ee/0x810 [ 240.346009][ T9215] ? __pfx___sys_bpf+0x10/0x10 [ 240.350776][ T9215] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 240.356754][ T9215] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 240.363075][ T9215] ? do_syscall_64+0x100/0x230 [ 240.367837][ T9215] __x64_sys_bpf+0x7c/0x90 [ 240.372246][ T9215] do_syscall_64+0xf3/0x230 [ 240.376739][ T9215] ? clear_bhb_loop+0x35/0x90 [ 240.381413][ T9215] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.387300][ T9215] RIP: 0033:0x7fb9ad17def9 [ 240.391715][ T9215] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.411311][ T9215] RSP: 002b:00007fb9ae024038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 240.419727][ T9215] RAX: ffffffffffffffda RBX: 00007fb9ad335f80 RCX: 00007fb9ad17def9 [ 240.427690][ T9215] RDX: 0000000000000090 RSI: 0000000020000140 RDI: 0000000000000005 [ 240.435651][ T9215] RBP: 00007fb9ae024090 R08: 0000000000000000 R09: 0000000000000000 [ 240.443613][ T9215] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 240.451585][ T9215] R13: 0000000000000001 R14: 00007fb9ad335f80 R15: 00007ffdcec127c8 [ 240.459565][ T9215] [ 240.606259][ T9221] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1343'. [ 240.725964][ T9230] FAULT_INJECTION: forcing a failure. [ 240.725964][ T9230] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 240.739366][ T9230] CPU: 0 UID: 0 PID: 9230 Comm: syz.3.1344 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 240.750069][ T9230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 240.760223][ T9230] Call Trace: [ 240.763494][ T9230] [ 240.766425][ T9230] dump_stack_lvl+0x241/0x360 [ 240.771135][ T9230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 240.776361][ T9230] ? __pfx__printk+0x10/0x10 [ 240.780974][ T9230] ? __pfx_lock_release+0x10/0x10 [ 240.786030][ T9230] should_fail_ex+0x3b0/0x4e0 [ 240.790821][ T9230] _copy_from_user+0x2f/0xe0 [ 240.795522][ T9230] sctp_getsockopt_local_addrs+0x128/0xec0 [ 240.801369][ T9230] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 240.807723][ T9230] ? __pfx_sctp_getsockopt_local_addrs+0x10/0x10 [ 240.814074][ T9230] ? __local_bh_enable_ip+0x168/0x200 [ 240.819464][ T9230] ? lockdep_hardirqs_on+0x99/0x150 [ 240.824679][ T9230] ? __local_bh_enable_ip+0x168/0x200 [ 240.830160][ T9230] ? sctp_getsockopt+0x13a/0xbb0 [ 240.835131][ T9230] sctp_getsockopt+0x6ad/0xbb0 [ 240.839909][ T9230] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 240.845825][ T9230] do_sock_getsockopt+0x3c4/0x7e0 [ 240.850870][ T9230] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 240.856416][ T9230] ? __fget_files+0x3f6/0x470 [ 240.861094][ T9230] __sys_getsockopt+0x271/0x330 [ 240.865942][ T9230] ? __pfx___sys_getsockopt+0x10/0x10 [ 240.871310][ T9230] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 240.877636][ T9230] ? do_syscall_64+0x100/0x230 [ 240.882392][ T9230] __x64_sys_getsockopt+0xb5/0xd0 [ 240.887422][ T9230] do_syscall_64+0xf3/0x230 [ 240.891913][ T9230] ? clear_bhb_loop+0x35/0x90 [ 240.896591][ T9230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.902476][ T9230] RIP: 0033:0x7fb9ad17def9 [ 240.906882][ T9230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.926476][ T9230] RSP: 002b:00007fb9ae003038 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 240.934882][ T9230] RAX: ffffffffffffffda RBX: 00007fb9ad336058 RCX: 00007fb9ad17def9 [ 240.942841][ T9230] RDX: 000000000000006d RSI: 0000000000000084 RDI: 0000000000000003 [ 240.950799][ T9230] RBP: 00007fb9ae003090 R08: 0000000020000140 R09: 0000000000000000 [ 240.958757][ T9230] R10: 0000000020000400 R11: 0000000000000246 R12: 0000000000000001 [ 240.966715][ T9230] R13: 0000000000000001 R14: 00007fb9ad336058 R15: 00007ffdcec127c8 [ 240.974694][ T9230] [ 241.039231][ T9235] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1348'. [ 241.201678][ T9244] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1352'. [ 241.212183][ T9244] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1352'. [ 241.296880][ T9251] netlink: 'syz.0.1354': attribute type 72 has an invalid length. [ 241.336200][ T9251] netlink: 'syz.0.1354': attribute type 8 has an invalid length. [ 241.371318][ T9255] FAULT_INJECTION: forcing a failure. [ 241.371318][ T9255] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 241.394724][ T9255] CPU: 0 UID: 0 PID: 9255 Comm: syz.4.1355 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 241.405445][ T9255] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 241.415519][ T9255] Call Trace: [ 241.418816][ T9255] [ 241.421762][ T9255] dump_stack_lvl+0x241/0x360 [ 241.426465][ T9255] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.431682][ T9255] ? __pfx__printk+0x10/0x10 [ 241.436288][ T9255] ? __pfx_lock_release+0x10/0x10 [ 241.441332][ T9255] ? rcu_is_watching+0x15/0xb0 [ 241.446122][ T9255] should_fail_ex+0x3b0/0x4e0 [ 241.450838][ T9255] _copy_from_iter+0x1f6/0x1960 [ 241.455729][ T9255] ? alloc_pages_mpol_noprof+0x417/0x680 [ 241.461389][ T9255] ? __pfx__copy_from_iter+0x10/0x10 [ 241.466701][ T9255] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 241.472716][ T9255] ? alloc_pages_noprof+0xef/0x170 [ 241.477849][ T9255] ? page_copy_sane+0x46/0x260 [ 241.482634][ T9255] copy_page_from_iter+0x7a/0x100 [ 241.487682][ T9255] tun_get_user+0x1f7d/0x4720 [ 241.492380][ T9255] ? tun_get_user+0x871/0x4720 [ 241.497167][ T9255] ? __lock_acquire+0x137a/0x2040 [ 241.502234][ T9255] ? __pfx_tun_get_user+0x10/0x10 [ 241.507307][ T9255] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 241.512786][ T9255] ? tun_get+0x1e/0x2f0 [ 241.516956][ T9255] ? __pfx_lock_release+0x10/0x10 [ 241.522010][ T9255] ? tun_get+0x1e/0x2f0 [ 241.526178][ T9255] ? tun_get+0x27d/0x2f0 [ 241.530444][ T9255] tun_chr_write_iter+0x113/0x1f0 [ 241.535502][ T9255] vfs_write+0xa72/0xc90 [ 241.539769][ T9255] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 241.545339][ T9255] ? __pfx_vfs_write+0x10/0x10 [ 241.550143][ T9255] ksys_write+0x1a0/0x2c0 [ 241.554494][ T9255] ? __pfx_ksys_write+0x10/0x10 [ 241.559362][ T9255] ? do_syscall_64+0x100/0x230 [ 241.564147][ T9255] ? do_syscall_64+0xb6/0x230 [ 241.568849][ T9255] do_syscall_64+0xf3/0x230 [ 241.573375][ T9255] ? clear_bhb_loop+0x35/0x90 [ 241.578167][ T9255] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 241.584092][ T9255] RIP: 0033:0x7f03edb7c9df [ 241.588521][ T9255] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 241.608147][ T9255] RSP: 002b:00007f03eea1e000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 241.616593][ T9255] RAX: ffffffffffffffda RBX: 00007f03edd35f80 RCX: 00007f03edb7c9df [ 241.623434][ T9265] syz.1.1359[9265] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.624564][ T9255] RDX: 000000000000005e RSI: 00000000200009c0 RDI: 00000000000000c8 [ 241.624584][ T9255] RBP: 00007f03eea1e090 R08: 0000000000000000 R09: 0000000000000000 [ 241.624598][ T9255] R10: 000000000000005e R11: 0000000000000293 R12: 0000000000000001 [ 241.624608][ T9255] R13: 0000000000000000 R14: 00007f03edd35f80 R15: 00007ffc68dff748 [ 241.624637][ T9255] [ 241.636640][ T9265] syz.1.1359[9265] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 241.905966][ T9280] FAULT_INJECTION: forcing a failure. [ 241.905966][ T9280] name failslab, interval 1, probability 0, space 0, times 0 [ 241.947702][ T9280] CPU: 1 UID: 0 PID: 9280 Comm: syz.3.1366 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 241.958517][ T9280] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 241.968593][ T9280] Call Trace: [ 241.971968][ T9280] [ 241.974909][ T9280] dump_stack_lvl+0x241/0x360 [ 241.979605][ T9280] ? __pfx_dump_stack_lvl+0x10/0x10 [ 241.984812][ T9280] ? __pfx__printk+0x10/0x10 [ 241.989417][ T9280] ? __kmalloc_noprof+0xb0/0x400 [ 241.994362][ T9280] ? __pfx___might_resched+0x10/0x10 [ 241.999668][ T9280] should_fail_ex+0x3b0/0x4e0 [ 242.004362][ T9280] ? bpf_test_init+0xe1/0x180 [ 242.009079][ T9280] should_failslab+0xac/0x100 [ 242.013757][ T9280] ? bpf_test_init+0xe1/0x180 [ 242.018446][ T9280] __kmalloc_noprof+0xd8/0x400 [ 242.023231][ T9280] bpf_test_init+0xe1/0x180 [ 242.027739][ T9280] bpf_prog_test_run_skb+0x2bb/0x1820 [ 242.033106][ T9280] ? __pfx_lock_release+0x10/0x10 [ 242.038144][ T9280] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 242.043948][ T9280] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 242.049746][ T9280] bpf_prog_test_run+0x33a/0x3b0 [ 242.054681][ T9280] __sys_bpf+0x48d/0x810 [ 242.058917][ T9280] ? __pfx___sys_bpf+0x10/0x10 [ 242.063681][ T9280] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 242.069660][ T9280] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 242.075982][ T9280] ? do_syscall_64+0x100/0x230 [ 242.080742][ T9280] __x64_sys_bpf+0x7c/0x90 [ 242.085151][ T9280] do_syscall_64+0xf3/0x230 [ 242.089654][ T9280] ? clear_bhb_loop+0x35/0x90 [ 242.094331][ T9280] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.100217][ T9280] RIP: 0033:0x7fb9ad17def9 [ 242.104623][ T9280] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.124224][ T9280] RSP: 002b:00007fb9ae024038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 242.132818][ T9280] RAX: ffffffffffffffda RBX: 00007fb9ad335f80 RCX: 00007fb9ad17def9 [ 242.140781][ T9280] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 242.148744][ T9280] RBP: 00007fb9ae024090 R08: 0000000000000000 R09: 0000000000000000 [ 242.156707][ T9280] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.165106][ T9280] R13: 0000000000000000 R14: 00007fb9ad335f80 R15: 00007ffdcec127c8 [ 242.173078][ T9280] [ 242.292863][ T9289] netlink: 'syz.3.1369': attribute type 72 has an invalid length. [ 242.301502][ T9289] netlink: 'syz.3.1369': attribute type 8 has an invalid length. [ 242.441461][ T9300] x_tables: duplicate underflow at hook 2 [ 242.530855][ T9302] FAULT_INJECTION: forcing a failure. [ 242.530855][ T9302] name failslab, interval 1, probability 0, space 0, times 0 [ 242.558421][ T9302] CPU: 1 UID: 0 PID: 9302 Comm: syz.4.1375 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 242.569134][ T9302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 242.579212][ T9302] Call Trace: [ 242.582505][ T9302] [ 242.585451][ T9302] dump_stack_lvl+0x241/0x360 [ 242.590158][ T9302] ? __pfx_dump_stack_lvl+0x10/0x10 [ 242.591785][ T9308] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1377'. [ 242.595621][ T9302] ? __pfx__printk+0x10/0x10 [ 242.595652][ T9302] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 242.595674][ T9302] ? __pfx___might_resched+0x10/0x10 [ 242.595700][ T9302] should_fail_ex+0x3b0/0x4e0 [ 242.595731][ T9302] should_failslab+0xac/0x100 [ 242.595758][ T9302] __kmalloc_cache_node_noprof+0x74/0x300 [ 242.595779][ T9302] ? __get_vm_area_node+0x113/0x270 [ 242.595808][ T9302] __get_vm_area_node+0x113/0x270 [ 242.595839][ T9302] __vmalloc_node_range_noprof+0x3c6/0x1400 [ 242.595860][ T9302] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 242.595881][ T9302] ? mark_lock+0x9a/0x350 [ 242.595927][ T9302] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 242.668136][ T9302] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 242.673770][ T9302] __vmalloc_noprof+0x79/0x90 [ 242.678445][ T9302] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 242.683984][ T9302] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 242.689358][ T9302] ? bpf_prog_alloc+0x28/0x1b0 [ 242.694206][ T9302] bpf_prog_alloc+0x3a/0x1b0 [ 242.698800][ T9302] bpf_prog_load+0x7f7/0x20f0 [ 242.703487][ T9302] ? __pfx_bpf_prog_load+0x10/0x10 [ 242.708593][ T9302] ? __pfx___might_resched+0x10/0x10 [ 242.713884][ T9302] ? __might_fault+0xc6/0x120 [ 242.718553][ T9302] ? bpf_lsm_bpf+0x9/0x10 [ 242.722872][ T9302] ? security_bpf+0x87/0xb0 [ 242.727369][ T9302] __sys_bpf+0x4ee/0x810 [ 242.731608][ T9302] ? __pfx___sys_bpf+0x10/0x10 [ 242.736379][ T9302] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 242.742357][ T9302] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 242.748678][ T9302] ? do_syscall_64+0x100/0x230 [ 242.753434][ T9302] __x64_sys_bpf+0x7c/0x90 [ 242.757842][ T9302] do_syscall_64+0xf3/0x230 [ 242.762337][ T9302] ? clear_bhb_loop+0x35/0x90 [ 242.767016][ T9302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 242.772908][ T9302] RIP: 0033:0x7f03edb7def9 [ 242.777400][ T9302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 242.796996][ T9302] RSP: 002b:00007f03eea1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 242.805402][ T9302] RAX: ffffffffffffffda RBX: 00007f03edd35f80 RCX: 00007f03edb7def9 [ 242.813366][ T9302] RDX: 0000000000000094 RSI: 00000000200001c0 RDI: 0000000000000005 [ 242.821329][ T9302] RBP: 00007f03eea1e090 R08: 0000000000000000 R09: 0000000000000000 [ 242.829294][ T9302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 242.837254][ T9302] R13: 0000000000000001 R14: 00007f03edd35f80 R15: 00007ffc68dff748 [ 242.845227][ T9302] [ 242.859621][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.884557][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.042573][ T9317] netlink: 'syz.1.1381': attribute type 72 has an invalid length. [ 243.050642][ T9317] netlink: 'syz.1.1381': attribute type 8 has an invalid length. [ 243.236221][ T9326] syz.0.1384[9326] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.236462][ T9326] syz.0.1384[9326] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 243.276347][ T9321] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1382'. [ 243.324406][ T9329] veth1_macvtap: left promiscuous mode [ 243.334561][ T9329] macsec0: entered promiscuous mode [ 243.340058][ T9329] macsec0: entered allmulticast mode [ 243.368670][ T9329] FAULT_INJECTION: forcing a failure. [ 243.368670][ T9329] name failslab, interval 1, probability 0, space 0, times 0 [ 243.392815][ T9329] CPU: 1 UID: 0 PID: 9329 Comm: syz.2.1385 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 243.403539][ T9329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 243.413607][ T9329] Call Trace: [ 243.416883][ T9329] [ 243.419814][ T9329] dump_stack_lvl+0x241/0x360 [ 243.424523][ T9329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 243.429738][ T9329] ? __pfx__printk+0x10/0x10 [ 243.434333][ T9329] ? fs_reclaim_acquire+0x93/0x140 [ 243.439451][ T9329] ? __pfx___might_resched+0x10/0x10 [ 243.444732][ T9329] ? dynamic_dname+0x141/0x1b0 [ 243.449583][ T9329] should_fail_ex+0x3b0/0x4e0 [ 243.454264][ T9329] ? tomoyo_encode+0x26f/0x540 [ 243.459026][ T9329] should_failslab+0xac/0x100 [ 243.463699][ T9329] ? tomoyo_encode+0x26f/0x540 [ 243.468539][ T9329] __kmalloc_noprof+0xd8/0x400 [ 243.473298][ T9329] tomoyo_encode+0x26f/0x540 [ 243.477882][ T9329] ? __pfx_sockfs_dname+0x10/0x10 [ 243.482897][ T9329] tomoyo_realpath_from_path+0x59e/0x5e0 [ 243.488532][ T9329] tomoyo_path_number_perm+0x23a/0x880 [ 243.493990][ T9329] ? tomoyo_path_number_perm+0x208/0x880 [ 243.499618][ T9329] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 243.505631][ T9329] ? __fget_files+0x29/0x470 [ 243.510219][ T9329] ? __fget_files+0x3f6/0x470 [ 243.514889][ T9329] ? __fget_files+0x29/0x470 [ 243.519474][ T9329] security_file_ioctl+0x75/0xb0 [ 243.524409][ T9329] __se_sys_ioctl+0x47/0x170 [ 243.528995][ T9329] do_syscall_64+0xf3/0x230 [ 243.533492][ T9329] ? clear_bhb_loop+0x35/0x90 [ 243.538171][ T9329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 243.544058][ T9329] RIP: 0033:0x7ff205f7def9 [ 243.548464][ T9329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 243.568066][ T9329] RSP: 002b:00007ff206e24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 243.576472][ T9329] RAX: ffffffffffffffda RBX: 00007ff206135f80 RCX: 00007ff205f7def9 [ 243.584778][ T9329] RDX: 0000000020000240 RSI: 0000000000008914 RDI: 0000000000000003 [ 243.592738][ T9329] RBP: 00007ff206e24090 R08: 0000000000000000 R09: 0000000000000000 [ 243.600699][ T9329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 243.608659][ T9329] R13: 0000000000000000 R14: 00007ff206135f80 R15: 00007fffb002c268 [ 243.616633][ T9329] [ 243.625635][ T9329] ERROR: Out of memory at tomoyo_realpath_from_path. [ 243.633256][ T9329] veth1_macvtap: entered promiscuous mode [ 243.639889][ T9329] veth1_macvtap: entered allmulticast mode [ 243.646207][ T9329] macsec0: left promiscuous mode [ 243.651423][ T9329] macsec0: left allmulticast mode [ 243.656895][ T9329] veth1_macvtap: left allmulticast mode [ 244.030714][ T9351] pim6reg: entered allmulticast mode [ 244.155986][ T9357] pim6reg: left allmulticast mode [ 244.336189][ T9363] FAULT_INJECTION: forcing a failure. [ 244.336189][ T9363] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 244.361510][ T9365] netlink: 268 bytes leftover after parsing attributes in process `syz.0.1398'. [ 244.371352][ T9363] CPU: 1 UID: 0 PID: 9363 Comm: syz.1.1397 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 244.382063][ T9363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 244.392141][ T9363] Call Trace: [ 244.395438][ T9363] [ 244.398387][ T9363] dump_stack_lvl+0x241/0x360 [ 244.403093][ T9363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 244.408316][ T9363] ? __pfx__printk+0x10/0x10 [ 244.413105][ T9363] ? __pfx_lock_release+0x10/0x10 [ 244.418264][ T9363] ? rcu_is_watching+0x15/0xb0 [ 244.423060][ T9363] should_fail_ex+0x3b0/0x4e0 [ 244.424732][ T9361] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1391'. [ 244.427748][ T9363] _copy_from_iter+0x1f6/0x1960 [ 244.427788][ T9363] ? alloc_pages_mpol_noprof+0x417/0x680 [ 244.447258][ T9363] ? __pfx__copy_from_iter+0x10/0x10 [ 244.452571][ T9363] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 244.458588][ T9363] ? alloc_pages_noprof+0xef/0x170 [ 244.463720][ T9363] ? page_copy_sane+0x46/0x260 [ 244.468508][ T9363] copy_page_from_iter+0x7a/0x100 [ 244.473562][ T9363] tun_get_user+0x1f7d/0x4720 [ 244.478272][ T9363] ? tun_get_user+0x871/0x4720 [ 244.483069][ T9363] ? __lock_acquire+0x137a/0x2040 [ 244.488123][ T9363] ? __pfx_tun_get_user+0x10/0x10 [ 244.493178][ T9363] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 244.498658][ T9363] ? tun_get+0x1e/0x2f0 [ 244.502835][ T9363] ? __pfx_lock_release+0x10/0x10 [ 244.507896][ T9363] ? tun_get+0x1e/0x2f0 [ 244.512071][ T9363] ? tun_get+0x27d/0x2f0 [ 244.516335][ T9363] tun_chr_write_iter+0x113/0x1f0 [ 244.521387][ T9363] vfs_write+0xa72/0xc90 [ 244.525660][ T9363] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 244.531231][ T9363] ? __pfx_vfs_write+0x10/0x10 [ 244.536036][ T9363] ksys_write+0x1a0/0x2c0 [ 244.540386][ T9363] ? __pfx_ksys_write+0x10/0x10 [ 244.545264][ T9363] ? do_syscall_64+0x100/0x230 [ 244.550052][ T9363] ? do_syscall_64+0xb6/0x230 [ 244.554752][ T9363] do_syscall_64+0xf3/0x230 [ 244.559277][ T9363] ? clear_bhb_loop+0x35/0x90 [ 244.563990][ T9363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 244.569909][ T9363] RIP: 0033:0x7f8acd37c9df [ 244.574336][ T9363] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 244.594053][ T9363] RSP: 002b:00007f8ace0d5000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 244.602498][ T9363] RAX: ffffffffffffffda RBX: 00007f8acd535f80 RCX: 00007f8acd37c9df [ 244.610491][ T9363] RDX: 000000000000003e RSI: 0000000020000340 RDI: 00000000000000c8 [ 244.618490][ T9363] RBP: 00007f8ace0d5090 R08: 0000000000000000 R09: 0000000000000000 [ 244.626565][ T9363] R10: 000000000000003e R11: 0000000000000293 R12: 0000000000000001 [ 244.631959][ T9365] unsupported nla_type 65024 [ 244.634536][ T9363] R13: 0000000000000000 R14: 00007f8acd535f80 R15: 00007ffcc39b1128 [ 244.634572][ T9363] [ 244.673025][ T9367] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1398'. [ 244.901126][ T9379] netlink: 'syz.3.1403': attribute type 6 has an invalid length. [ 244.912455][ T9379] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1403'. [ 244.930673][ T9379] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1403'. [ 244.946063][ T9379] netlink: 'syz.3.1403': attribute type 11 has an invalid length. [ 245.351084][ T9407] netlink: 164880 bytes leftover after parsing attributes in process `syz.1.1412'. [ 245.456873][ T9410] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1413'. [ 245.847088][ T9416] Bluetooth: MGMT ver 1.23 [ 245.852757][ T9416] Bluetooth: hci3: invalid len left 7, exp >= 132 [ 245.862301][ T9416] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1416'. [ 246.123859][ T9426] FAULT_INJECTION: forcing a failure. [ 246.123859][ T9426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 246.152628][ T9426] CPU: 1 UID: 0 PID: 9426 Comm: syz.4.1421 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 246.163354][ T9426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 246.173408][ T9426] Call Trace: [ 246.176684][ T9426] [ 246.179789][ T9426] dump_stack_lvl+0x241/0x360 [ 246.184471][ T9426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 246.189682][ T9426] ? __pfx__printk+0x10/0x10 [ 246.194290][ T9426] ? snprintf+0xda/0x120 [ 246.198546][ T9426] should_fail_ex+0x3b0/0x4e0 [ 246.203227][ T9426] _copy_to_user+0x2f/0xb0 [ 246.207642][ T9426] simple_read_from_buffer+0xca/0x150 [ 246.213012][ T9426] proc_fail_nth_read+0x1ec/0x260 [ 246.218034][ T9426] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.223573][ T9426] ? rw_verify_area+0x520/0x6b0 [ 246.228437][ T9426] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 246.233991][ T9426] vfs_read+0x204/0xbc0 [ 246.238160][ T9426] ? __pfx_lock_release+0x10/0x10 [ 246.243201][ T9426] ? __pfx_vfs_read+0x10/0x10 [ 246.247881][ T9426] ? __fget_files+0x29/0x470 [ 246.252470][ T9426] ? __fget_files+0x3f6/0x470 [ 246.257157][ T9426] ksys_read+0x1a0/0x2c0 [ 246.261406][ T9426] ? __pfx_ksys_read+0x10/0x10 [ 246.266165][ T9426] ? do_syscall_64+0x100/0x230 [ 246.271020][ T9426] ? do_syscall_64+0xb6/0x230 [ 246.275695][ T9426] do_syscall_64+0xf3/0x230 [ 246.280370][ T9426] ? clear_bhb_loop+0x35/0x90 [ 246.285048][ T9426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 246.290943][ T9426] RIP: 0033:0x7f03edb7c93c [ 246.295363][ T9426] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 246.314964][ T9426] RSP: 002b:00007f03eea1e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 246.323377][ T9426] RAX: ffffffffffffffda RBX: 00007f03edd35f80 RCX: 00007f03edb7c93c [ 246.331342][ T9426] RDX: 000000000000000f RSI: 00007f03eea1e0a0 RDI: 0000000000000004 [ 246.339306][ T9426] RBP: 00007f03eea1e090 R08: 0000000000000000 R09: 0000000000000000 [ 246.347268][ T9426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 246.355227][ T9426] R13: 0000000000000000 R14: 00007f03edd35f80 R15: 00007ffc68dff748 [ 246.363202][ T9426] [ 249.576297][ T9444] netlink: 'syz.1.1425': attribute type 7 has an invalid length. [ 249.584086][ T9444] __nla_validate_parse: 1 callbacks suppressed [ 249.584102][ T9444] netlink: 188520 bytes leftover after parsing attributes in process `syz.1.1425'. [ 250.258340][ T9483] FAULT_INJECTION: forcing a failure. [ 250.258340][ T9483] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 250.290679][ T9483] CPU: 1 UID: 0 PID: 9483 Comm: syz.3.1438 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 250.301406][ T9483] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 250.312006][ T9483] Call Trace: [ 250.315285][ T9483] [ 250.318209][ T9483] dump_stack_lvl+0x241/0x360 [ 250.322891][ T9483] ? __pfx_dump_stack_lvl+0x10/0x10 [ 250.328087][ T9483] ? __pfx__printk+0x10/0x10 [ 250.332677][ T9483] ? __pfx_lock_release+0x10/0x10 [ 250.337698][ T9483] ? __lock_acquire+0x137a/0x2040 [ 250.342722][ T9483] should_fail_ex+0x3b0/0x4e0 [ 250.347402][ T9483] _copy_from_user+0x2f/0xe0 [ 250.351990][ T9483] kstrtouint_from_user+0xc6/0x190 [ 250.357098][ T9483] ? __pfx_kstrtouint_from_user+0x10/0x10 [ 250.362898][ T9483] ? __pfx_lock_acquire+0x10/0x10 [ 250.367925][ T9483] proc_fail_nth_write+0xaa/0x2d0 [ 250.372942][ T9483] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 250.378839][ T9483] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 250.384472][ T9483] ? __pfx_proc_fail_nth_write+0x10/0x10 [ 250.390104][ T9483] vfs_write+0x2a2/0xc90 [ 250.394365][ T9483] ? __pfx_vfs_write+0x10/0x10 [ 250.399133][ T9483] ? __fget_files+0x29/0x470 [ 250.403725][ T9483] ? __fget_files+0x3f6/0x470 [ 250.408408][ T9483] ksys_write+0x1a0/0x2c0 [ 250.412734][ T9483] ? __pfx_ksys_write+0x10/0x10 [ 250.417581][ T9483] ? do_syscall_64+0x100/0x230 [ 250.422345][ T9483] ? do_syscall_64+0xb6/0x230 [ 250.427020][ T9483] do_syscall_64+0xf3/0x230 [ 250.431518][ T9483] ? clear_bhb_loop+0x35/0x90 [ 250.436193][ T9483] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 250.442080][ T9483] RIP: 0033:0x7fb9ad17c9df [ 250.446489][ T9483] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 250.466087][ T9483] RSP: 002b:00007fb9ae003030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 250.474493][ T9483] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb9ad17c9df [ 250.482460][ T9483] RDX: 0000000000000001 RSI: 00007fb9ae0030a0 RDI: 0000000000000008 [ 250.490440][ T9483] RBP: 00007fb9ae003090 R08: 0000000000000000 R09: 0000000000000000 [ 250.498415][ T9483] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 250.506379][ T9483] R13: 0000000000000000 R14: 00007fb9ad336058 R15: 00007ffdcec127c8 [ 250.514362][ T9483] [ 250.786788][ T9492] netlink: 'syz.3.1440': attribute type 7 has an invalid length. [ 250.810459][ T9492] netlink: 188520 bytes leftover after parsing attributes in process `syz.3.1440'. [ 252.513812][ T9511] FAULT_INJECTION: forcing a failure. [ 252.513812][ T9511] name failslab, interval 1, probability 0, space 0, times 0 [ 252.535367][ T9511] CPU: 1 UID: 0 PID: 9511 Comm: syz.3.1450 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 252.546094][ T9511] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 252.556165][ T9511] Call Trace: [ 252.559456][ T9511] [ 252.562407][ T9511] dump_stack_lvl+0x241/0x360 [ 252.567107][ T9511] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.572329][ T9511] ? __pfx__printk+0x10/0x10 [ 252.576943][ T9511] ? __kmalloc_noprof+0xb0/0x400 [ 252.581899][ T9511] ? __pfx___might_resched+0x10/0x10 [ 252.587208][ T9511] should_fail_ex+0x3b0/0x4e0 [ 252.591910][ T9511] ? bpf_test_init+0xe1/0x180 [ 252.596598][ T9511] should_failslab+0xac/0x100 [ 252.601290][ T9511] ? bpf_test_init+0xe1/0x180 [ 252.605979][ T9511] __kmalloc_noprof+0xd8/0x400 [ 252.610765][ T9511] bpf_test_init+0xe1/0x180 [ 252.612590][ T9516] FAULT_INJECTION: forcing a failure. [ 252.612590][ T9516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.615270][ T9511] bpf_prog_test_run_skb+0x2bb/0x1820 [ 252.615294][ T9511] ? __pfx_lock_release+0x10/0x10 [ 252.615336][ T9511] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 252.615360][ T9511] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 252.615388][ T9511] bpf_prog_test_run+0x33a/0x3b0 [ 252.655243][ T9511] __sys_bpf+0x48d/0x810 [ 252.659485][ T9511] ? __pfx___sys_bpf+0x10/0x10 [ 252.664255][ T9511] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 252.670230][ T9511] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.676552][ T9511] ? do_syscall_64+0x100/0x230 [ 252.683461][ T9511] __x64_sys_bpf+0x7c/0x90 [ 252.687891][ T9511] do_syscall_64+0xf3/0x230 [ 252.692392][ T9511] ? clear_bhb_loop+0x35/0x90 [ 252.697075][ T9511] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.702964][ T9511] RIP: 0033:0x7fb9ad17def9 [ 252.707375][ T9511] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.726976][ T9511] RSP: 002b:00007fb9ae024038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 252.735388][ T9511] RAX: ffffffffffffffda RBX: 00007fb9ad335f80 RCX: 00007fb9ad17def9 [ 252.743451][ T9511] RDX: 0000000000000050 RSI: 0000000020000000 RDI: 000000000000000a [ 252.751443][ T9511] RBP: 00007fb9ae024090 R08: 0000000000000000 R09: 0000000000000000 [ 252.759407][ T9511] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.767371][ T9511] R13: 0000000000000000 R14: 00007fb9ad335f80 R15: 00007ffdcec127c8 [ 252.775351][ T9511] [ 252.785701][ T9516] CPU: 0 UID: 0 PID: 9516 Comm: syz.2.1448 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 252.796423][ T9516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 252.806496][ T9516] Call Trace: [ 252.809795][ T9516] [ 252.812736][ T9516] dump_stack_lvl+0x241/0x360 [ 252.817437][ T9516] ? __pfx_dump_stack_lvl+0x10/0x10 [ 252.822662][ T9516] ? __pfx__printk+0x10/0x10 [ 252.827278][ T9516] ? __pfx_lock_release+0x10/0x10 [ 252.832332][ T9516] should_fail_ex+0x3b0/0x4e0 [ 252.837039][ T9516] _copy_from_user+0x2f/0xe0 [ 252.841646][ T9516] get_timespec64+0x97/0x280 [ 252.846262][ T9516] ? __pfx_get_timespec64+0x10/0x10 [ 252.851572][ T9516] ? __sys_connect+0xde/0x310 [ 252.856289][ T9516] __se_sys_ppoll+0xd1/0x330 [ 252.860877][ T9516] ? __pfx___se_sys_ppoll+0x10/0x10 [ 252.866066][ T9516] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 252.872649][ T9516] ? do_syscall_64+0x100/0x230 [ 252.877406][ T9516] ? __x64_sys_ppoll+0x20/0xc0 [ 252.882168][ T9516] do_syscall_64+0xf3/0x230 [ 252.886665][ T9516] ? clear_bhb_loop+0x35/0x90 [ 252.891339][ T9516] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 252.897224][ T9516] RIP: 0033:0x7ff205f7def9 [ 252.901629][ T9516] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 252.921226][ T9516] RSP: 002b:00007ff206e03038 EFLAGS: 00000246 ORIG_RAX: 000000000000010f [ 252.929643][ T9516] RAX: ffffffffffffffda RBX: 00007ff206136058 RCX: 00007ff205f7def9 [ 252.937606][ T9516] RDX: 0000000020000100 RSI: 0000000000000001 RDI: 0000000020000080 [ 252.945567][ T9516] RBP: 00007ff206e03090 R08: 0000000000000000 R09: 0000000000000000 [ 252.953528][ T9516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 252.961494][ T9516] R13: 0000000000000000 R14: 00007ff206136058 R15: 00007fffb002c268 [ 252.969471][ T9516] [ 252.982197][ T9520] FAULT_INJECTION: forcing a failure. [ 252.982197][ T9520] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 252.998936][ T9520] CPU: 1 UID: 0 PID: 9520 Comm: syz.0.1445 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 253.009646][ T9520] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 253.019721][ T9520] Call Trace: [ 253.023022][ T9520] [ 253.025986][ T9520] dump_stack_lvl+0x241/0x360 [ 253.030671][ T9520] ? __pfx_dump_stack_lvl+0x10/0x10 [ 253.035865][ T9520] ? __pfx__printk+0x10/0x10 [ 253.040457][ T9520] ? __pfx_lock_release+0x10/0x10 [ 253.045489][ T9520] should_fail_ex+0x3b0/0x4e0 [ 253.050171][ T9520] _copy_from_user+0x2f/0xe0 [ 253.054763][ T9520] copy_msghdr_from_user+0xae/0x680 [ 253.059963][ T9520] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 253.065774][ T9520] __sys_sendmsg+0x23d/0x3a0 [ 253.070449][ T9520] ? __pfx___sys_sendmsg+0x10/0x10 [ 253.075574][ T9520] ? vfs_write+0x7c4/0xc90 [ 253.080022][ T9520] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 253.086364][ T9520] ? do_syscall_64+0x100/0x230 [ 253.091142][ T9520] ? do_syscall_64+0xb6/0x230 [ 253.095820][ T9520] do_syscall_64+0xf3/0x230 [ 253.100325][ T9520] ? clear_bhb_loop+0x35/0x90 [ 253.105123][ T9520] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.111016][ T9520] RIP: 0033:0x7f5b0b97def9 [ 253.115428][ T9520] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 253.135024][ T9520] RSP: 002b:00007f5b0c722038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 253.143434][ T9520] RAX: ffffffffffffffda RBX: 00007f5b0bb35f80 RCX: 00007f5b0b97def9 [ 253.151396][ T9520] RDX: 0000000000000000 RSI: 00000000200012c0 RDI: 0000000000000003 [ 253.159362][ T9520] RBP: 00007f5b0c722090 R08: 0000000000000000 R09: 0000000000000000 [ 253.167326][ T9520] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 253.175288][ T9520] R13: 0000000000000000 R14: 00007f5b0bb35f80 R15: 00007ffeeb9417f8 [ 253.183263][ T9520] [ 253.191855][ T5242] Bluetooth: hci1: command 0x0405 tx timeout [ 253.269701][ T9518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.470655][ T9539] netlink: 'syz.2.1455': attribute type 15 has an invalid length. [ 254.556457][ T9602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.579306][ T9605] netlink: 'syz.0.1482': attribute type 29 has an invalid length. [ 254.597659][ T9603] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1481'. [ 254.624408][ T9605] netlink: 'syz.0.1482': attribute type 29 has an invalid length. [ 254.641601][ T9605] netlink: 'syz.0.1482': attribute type 29 has an invalid length. [ 254.661641][ T9605] netlink: 'syz.0.1482': attribute type 29 has an invalid length. [ 254.672502][ T9605] netlink: 'syz.0.1482': attribute type 29 has an invalid length. [ 254.691217][ T9605] netlink: 'syz.0.1482': attribute type 29 has an invalid length. [ 254.787794][ T9618] FAULT_INJECTION: forcing a failure. [ 254.787794][ T9618] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 254.801839][ T9618] CPU: 0 UID: 0 PID: 9618 Comm: syz.3.1486 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 254.812633][ T9618] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 254.822711][ T9618] Call Trace: [ 254.826008][ T9618] [ 254.828963][ T9618] dump_stack_lvl+0x241/0x360 [ 254.833657][ T9618] ? __pfx_dump_stack_lvl+0x10/0x10 [ 254.838852][ T9618] ? __pfx__printk+0x10/0x10 [ 254.843435][ T9618] ? __pfx_lock_release+0x10/0x10 [ 254.848455][ T9618] ? __bpf_prog_test_run_raw_tp+0x2ce/0x440 [ 254.854354][ T9618] should_fail_ex+0x3b0/0x4e0 [ 254.859047][ T9618] _copy_to_user+0x2f/0xb0 [ 254.863462][ T9618] bpf_prog_test_run_raw_tp+0x4f0/0x6a0 [ 254.869004][ T9618] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 254.875060][ T9618] ? __fget_files+0x3f6/0x470 [ 254.879734][ T9618] ? __pfx_bpf_prog_test_run_raw_tp+0x10/0x10 [ 254.885790][ T9618] bpf_prog_test_run+0x33a/0x3b0 [ 254.890721][ T9618] __sys_bpf+0x48d/0x810 [ 254.894960][ T9618] ? __pfx___sys_bpf+0x10/0x10 [ 254.899723][ T9618] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 254.905698][ T9618] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 254.912019][ T9618] ? do_syscall_64+0x100/0x230 [ 254.916775][ T9618] __x64_sys_bpf+0x7c/0x90 [ 254.921186][ T9618] do_syscall_64+0xf3/0x230 [ 254.925681][ T9618] ? clear_bhb_loop+0x35/0x90 [ 254.930354][ T9618] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.936241][ T9618] RIP: 0033:0x7fb9ad17def9 [ 254.940648][ T9618] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 254.960244][ T9618] RSP: 002b:00007fb9ae024038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 254.968649][ T9618] RAX: ffffffffffffffda RBX: 00007fb9ad335f80 RCX: 00007fb9ad17def9 [ 254.976608][ T9618] RDX: 0000000000000050 RSI: 0000000020000000 RDI: 000000000000000a [ 254.984564][ T9618] RBP: 00007fb9ae024090 R08: 0000000000000000 R09: 0000000000000000 [ 254.992521][ T9618] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 255.000481][ T9618] R13: 0000000000000000 R14: 00007fb9ad335f80 R15: 00007ffdcec127c8 [ 255.008487][ T9618] [ 255.018683][ T9609] netlink: 'syz.4.1483': attribute type 1 has an invalid length. [ 255.093548][ T9621] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1487'. [ 255.506867][ T9642] netlink: 'syz.2.1494': attribute type 7 has an invalid length. [ 255.540748][ T9642] netlink: 188520 bytes leftover after parsing attributes in process `syz.2.1494'. [ 255.569970][ T9645] netlink: 210620 bytes leftover after parsing attributes in process `syz.3.1495'. [ 255.606874][ T9649] netlink: 'syz.4.1496': attribute type 29 has an invalid length. [ 255.629619][ T9649] netlink: 'syz.4.1496': attribute type 29 has an invalid length. [ 255.641430][ T9649] netlink: 'syz.4.1496': attribute type 29 has an invalid length. [ 255.833270][ T9662] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.1500'. [ 256.029168][ T9668] FAULT_INJECTION: forcing a failure. [ 256.029168][ T9668] name failslab, interval 1, probability 0, space 0, times 0 [ 256.071675][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.078412][ T9668] CPU: 1 UID: 0 PID: 9668 Comm: syz.3.1502 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 256.089126][ T9668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 256.099205][ T9668] Call Trace: [ 256.102502][ T9668] [ 256.105450][ T9668] dump_stack_lvl+0x241/0x360 [ 256.110152][ T9668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.115354][ T9668] ? __pfx__printk+0x10/0x10 [ 256.119940][ T9668] ? __kmalloc_noprof+0xb0/0x400 [ 256.124873][ T9668] ? __pfx___might_resched+0x10/0x10 [ 256.130155][ T9668] should_fail_ex+0x3b0/0x4e0 [ 256.134832][ T9668] ? bpf_test_init+0xe1/0x180 [ 256.139501][ T9668] should_failslab+0xac/0x100 [ 256.144175][ T9668] ? bpf_test_init+0xe1/0x180 [ 256.148844][ T9668] __kmalloc_noprof+0xd8/0x400 [ 256.153602][ T9668] bpf_test_init+0xe1/0x180 [ 256.158101][ T9668] bpf_prog_test_run_skb+0x2bb/0x1820 [ 256.163465][ T9668] ? __pfx_lock_release+0x10/0x10 [ 256.168497][ T9668] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 256.174302][ T9668] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 256.180101][ T9668] bpf_prog_test_run+0x33a/0x3b0 [ 256.185041][ T9668] __sys_bpf+0x48d/0x810 [ 256.189275][ T9668] ? __pfx___sys_bpf+0x10/0x10 [ 256.194124][ T9668] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 256.200109][ T9668] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.206438][ T9668] ? do_syscall_64+0x100/0x230 [ 256.211222][ T9668] __x64_sys_bpf+0x7c/0x90 [ 256.215679][ T9668] do_syscall_64+0xf3/0x230 [ 256.220187][ T9668] ? clear_bhb_loop+0x35/0x90 [ 256.224880][ T9668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.230790][ T9668] RIP: 0033:0x7fb9ad17def9 [ 256.235201][ T9668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.254810][ T9668] RSP: 002b:00007fb9ae024038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 256.263215][ T9668] RAX: ffffffffffffffda RBX: 00007fb9ad335f80 RCX: 00007fb9ad17def9 [ 256.271201][ T9668] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 256.279162][ T9668] RBP: 00007fb9ae024090 R08: 0000000000000000 R09: 0000000000000000 [ 256.287122][ T9668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.295175][ T9668] R13: 0000000000000000 R14: 00007fb9ad335f80 R15: 00007ffdcec127c8 [ 256.303149][ T9668] [ 256.392079][ T9677] IPv6: sit1: Disabled Multicast RS [ 256.423118][ T9678] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 256.517832][ T9682] FAULT_INJECTION: forcing a failure. [ 256.517832][ T9682] name failslab, interval 1, probability 0, space 0, times 0 [ 256.557833][ T9682] CPU: 0 UID: 0 PID: 9682 Comm: syz.4.1507 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 256.568565][ T9682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 256.578648][ T9682] Call Trace: [ 256.581951][ T9682] [ 256.584922][ T9682] dump_stack_lvl+0x241/0x360 [ 256.589636][ T9682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.594860][ T9682] ? __pfx__printk+0x10/0x10 [ 256.599473][ T9682] ? __kmalloc_noprof+0xb0/0x400 [ 256.604431][ T9682] ? __pfx___might_resched+0x10/0x10 [ 256.609740][ T9682] should_fail_ex+0x3b0/0x4e0 [ 256.614535][ T9682] ? bpf_test_init+0xe1/0x180 [ 256.619232][ T9682] should_failslab+0xac/0x100 [ 256.623936][ T9682] ? bpf_test_init+0xe1/0x180 [ 256.628632][ T9682] __kmalloc_noprof+0xd8/0x400 [ 256.633424][ T9682] bpf_test_init+0xe1/0x180 [ 256.637952][ T9682] bpf_prog_test_run_skb+0x2bb/0x1820 [ 256.643346][ T9682] ? __pfx_lock_release+0x10/0x10 [ 256.648417][ T9682] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 256.654244][ T9682] ? __pfx_bpf_prog_test_run_skb+0x10/0x10 [ 256.660075][ T9682] bpf_prog_test_run+0x33a/0x3b0 [ 256.665041][ T9682] __sys_bpf+0x48d/0x810 [ 256.669313][ T9682] ? __pfx___sys_bpf+0x10/0x10 [ 256.674108][ T9682] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 256.680114][ T9682] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 256.686468][ T9682] ? do_syscall_64+0x100/0x230 [ 256.691263][ T9682] __x64_sys_bpf+0x7c/0x90 [ 256.695702][ T9682] do_syscall_64+0xf3/0x230 [ 256.700229][ T9682] ? clear_bhb_loop+0x35/0x90 [ 256.704934][ T9682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 256.710850][ T9682] RIP: 0033:0x7f03edb7def9 [ 256.715286][ T9682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 256.734912][ T9682] RSP: 002b:00007f03eea1e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 256.743347][ T9682] RAX: ffffffffffffffda RBX: 00007f03edd35f80 RCX: 00007f03edb7def9 [ 256.751325][ T9682] RDX: 0000000000000050 RSI: 00000000200002c0 RDI: 000000000000000a [ 256.759292][ T9682] RBP: 00007f03eea1e090 R08: 0000000000000000 R09: 0000000000000000 [ 256.767254][ T9682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 256.775216][ T9682] R13: 0000000000000000 R14: 00007f03edd35f80 R15: 00007ffc68dff748 [ 256.783192][ T9682] [ 256.882627][ T9701] FAULT_INJECTION: forcing a failure. [ 256.882627][ T9701] name failslab, interval 1, probability 0, space 0, times 0 [ 256.900437][ T9701] CPU: 1 UID: 0 PID: 9701 Comm: syz.2.1514 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 256.911147][ T9701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 256.921208][ T9701] Call Trace: [ 256.924482][ T9701] [ 256.927410][ T9701] dump_stack_lvl+0x241/0x360 [ 256.932085][ T9701] ? __pfx_dump_stack_lvl+0x10/0x10 [ 256.937282][ T9701] ? __pfx__printk+0x10/0x10 [ 256.941953][ T9701] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 256.947927][ T9701] ? __pfx___might_resched+0x10/0x10 [ 256.953210][ T9701] should_fail_ex+0x3b0/0x4e0 [ 256.957885][ T9701] should_failslab+0xac/0x100 [ 256.962562][ T9701] ? __alloc_skb+0x1c3/0x440 [ 256.967143][ T9701] kmem_cache_alloc_node_noprof+0x71/0x320 [ 256.972942][ T9701] __alloc_skb+0x1c3/0x440 [ 256.977497][ T9701] ? __pfx___alloc_skb+0x10/0x10 [ 256.982455][ T9701] ? netlink_autobind+0xd6/0x2f0 [ 256.987403][ T9701] ? netlink_autobind+0x2b0/0x2f0 [ 256.992429][ T9701] netlink_sendmsg+0x638/0xcb0 [ 256.997374][ T9701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.002657][ T9701] ? __import_iovec+0x536/0x820 [ 257.007500][ T9701] ? aa_sock_msg_perm+0x91/0x160 [ 257.012431][ T9701] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 257.017711][ T9701] ? security_socket_sendmsg+0x87/0xb0 [ 257.023164][ T9701] ? __pfx_netlink_sendmsg+0x10/0x10 [ 257.028441][ T9701] __sock_sendmsg+0x221/0x270 [ 257.033116][ T9701] ____sys_sendmsg+0x525/0x7d0 [ 257.037882][ T9701] ? __pfx_____sys_sendmsg+0x10/0x10 [ 257.043173][ T9701] __sys_sendmsg+0x2b0/0x3a0 [ 257.047780][ T9701] ? __pfx___sys_sendmsg+0x10/0x10 [ 257.052899][ T9701] ? vfs_write+0x7c4/0xc90 [ 257.057342][ T9701] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 257.063672][ T9701] ? do_syscall_64+0x100/0x230 [ 257.068438][ T9701] ? do_syscall_64+0xb6/0x230 [ 257.073114][ T9701] do_syscall_64+0xf3/0x230 [ 257.077615][ T9701] ? clear_bhb_loop+0x35/0x90 [ 257.082291][ T9701] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.088179][ T9701] RIP: 0033:0x7ff205f7def9 [ 257.092583][ T9701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 257.112181][ T9701] RSP: 002b:00007ff206e24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 257.120587][ T9701] RAX: ffffffffffffffda RBX: 00007ff206135f80 RCX: 00007ff205f7def9 [ 257.128552][ T9701] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000003 [ 257.136511][ T9701] RBP: 00007ff206e24090 R08: 0000000000000000 R09: 0000000000000000 [ 257.144482][ T9701] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.152530][ T9701] R13: 0000000000000000 R14: 00007ff206135f80 R15: 00007fffb002c268 [ 257.160508][ T9701] [ 257.555134][ T9723] FAULT_INJECTION: forcing a failure. [ 257.555134][ T9723] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 257.606218][ T9723] CPU: 0 UID: 0 PID: 9723 Comm: syz.4.1522 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 257.616953][ T9723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 257.627119][ T9723] Call Trace: [ 257.630421][ T9723] [ 257.633372][ T9723] dump_stack_lvl+0x241/0x360 [ 257.638084][ T9723] ? __pfx_dump_stack_lvl+0x10/0x10 [ 257.643307][ T9723] ? __pfx__printk+0x10/0x10 [ 257.647932][ T9723] ? snprintf+0xda/0x120 [ 257.652203][ T9723] should_fail_ex+0x3b0/0x4e0 [ 257.656927][ T9723] _copy_to_user+0x2f/0xb0 [ 257.661383][ T9723] simple_read_from_buffer+0xca/0x150 [ 257.666783][ T9723] proc_fail_nth_read+0x1ec/0x260 [ 257.671836][ T9723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.677402][ T9723] ? rw_verify_area+0x520/0x6b0 [ 257.682255][ T9723] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 257.687794][ T9723] vfs_read+0x204/0xbc0 [ 257.691940][ T9723] ? __pfx_lock_release+0x10/0x10 [ 257.696962][ T9723] ? fput+0x193/0x210 [ 257.700948][ T9723] ? __pfx_vfs_read+0x10/0x10 [ 257.705616][ T9723] ? __fget_files+0x29/0x470 [ 257.710211][ T9723] ? __fget_files+0x3f6/0x470 [ 257.714894][ T9723] ksys_read+0x1a0/0x2c0 [ 257.719131][ T9723] ? __pfx_ksys_read+0x10/0x10 [ 257.723888][ T9723] ? do_syscall_64+0x100/0x230 [ 257.728650][ T9723] ? do_syscall_64+0xb6/0x230 [ 257.733318][ T9723] do_syscall_64+0xf3/0x230 [ 257.737813][ T9723] ? clear_bhb_loop+0x35/0x90 [ 257.742485][ T9723] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 257.748369][ T9723] RIP: 0033:0x7f03edb7c93c [ 257.752772][ T9723] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 257.772469][ T9723] RSP: 002b:00007f03eea1e030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 257.780876][ T9723] RAX: ffffffffffffffda RBX: 00007f03edd35f80 RCX: 00007f03edb7c93c [ 257.788839][ T9723] RDX: 000000000000000f RSI: 00007f03eea1e0a0 RDI: 0000000000000003 [ 257.796830][ T9723] RBP: 00007f03eea1e090 R08: 0000000000000000 R09: 0000000000000000 [ 257.804794][ T9723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 257.813013][ T9723] R13: 0000000000000001 R14: 00007f03edd35f80 R15: 00007ffc68dff748 [ 257.821002][ T9723] [ 258.220414][ T9754] FAULT_INJECTION: forcing a failure. [ 258.220414][ T9754] name failslab, interval 1, probability 0, space 0, times 0 [ 258.237204][ T9754] CPU: 1 UID: 0 PID: 9754 Comm: syz.0.1534 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 258.247916][ T9754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 258.257989][ T9754] Call Trace: [ 258.261296][ T9754] [ 258.264241][ T9754] dump_stack_lvl+0x241/0x360 [ 258.268947][ T9754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.274169][ T9754] ? __pfx__printk+0x10/0x10 [ 258.278779][ T9754] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 258.284697][ T9754] ? __pfx___might_resched+0x10/0x10 [ 258.290002][ T9754] should_fail_ex+0x3b0/0x4e0 [ 258.294687][ T9754] should_failslab+0xac/0x100 [ 258.299361][ T9754] __kmalloc_cache_node_noprof+0x74/0x300 [ 258.305077][ T9754] ? __get_vm_area_node+0x113/0x270 [ 258.310362][ T9754] __get_vm_area_node+0x113/0x270 [ 258.315388][ T9754] __vmalloc_node_range_noprof+0x3c6/0x1400 [ 258.321271][ T9754] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 258.326810][ T9754] ? mark_lock+0x9a/0x350 [ 258.331158][ T9754] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 258.337574][ T9754] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 258.343110][ T9754] __vmalloc_noprof+0x79/0x90 [ 258.347774][ T9754] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 258.353311][ T9754] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 258.358672][ T9754] ? bpf_prog_alloc+0x28/0x1b0 [ 258.363427][ T9754] bpf_prog_alloc+0x3a/0x1b0 [ 258.368010][ T9754] bpf_prog_load+0x7f7/0x20f0 [ 258.372696][ T9754] ? __pfx_bpf_prog_load+0x10/0x10 [ 258.377801][ T9754] ? __pfx___might_resched+0x10/0x10 [ 258.383097][ T9754] ? __might_fault+0xc6/0x120 [ 258.387766][ T9754] ? bpf_lsm_bpf+0x9/0x10 [ 258.392081][ T9754] ? security_bpf+0x87/0xb0 [ 258.396572][ T9754] __sys_bpf+0x4ee/0x810 [ 258.400809][ T9754] ? __pfx___sys_bpf+0x10/0x10 [ 258.405579][ T9754] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 258.411555][ T9754] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 258.417877][ T9754] ? do_syscall_64+0x100/0x230 [ 258.422634][ T9754] __x64_sys_bpf+0x7c/0x90 [ 258.427043][ T9754] do_syscall_64+0xf3/0x230 [ 258.431535][ T9754] ? clear_bhb_loop+0x35/0x90 [ 258.436208][ T9754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.442091][ T9754] RIP: 0033:0x7f5b0b97def9 [ 258.446497][ T9754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.466178][ T9754] RSP: 002b:00007f5b0c722038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 258.474582][ T9754] RAX: ffffffffffffffda RBX: 00007f5b0bb35f80 RCX: 00007f5b0b97def9 [ 258.482542][ T9754] RDX: 0000000000000094 RSI: 00000000200001c0 RDI: 0000000000000005 [ 258.490501][ T9754] RBP: 00007f5b0c722090 R08: 0000000000000000 R09: 0000000000000000 [ 258.498458][ T9754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.506427][ T9754] R13: 0000000000000001 R14: 00007f5b0bb35f80 R15: 00007ffeeb9417f8 [ 258.514410][ T9754] [ 258.544928][ T9758] FAULT_INJECTION: forcing a failure. [ 258.544928][ T9758] name failslab, interval 1, probability 0, space 0, times 0 [ 258.574436][ T9754] warn_alloc: 3 callbacks suppressed [ 258.574477][ T9754] syz.0.1534: vmalloc error: size 4096, vm_struct allocation failed, mode:0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), nodemask=(null) [ 258.579871][ T9758] CPU: 0 UID: 0 PID: 9758 Comm: syz.2.1535 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 258.604331][ T9758] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 258.614380][ T9758] Call Trace: [ 258.617652][ T9758] [ 258.620621][ T9758] dump_stack_lvl+0x241/0x360 [ 258.625296][ T9758] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.630487][ T9758] ? __pfx__printk+0x10/0x10 [ 258.635072][ T9758] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 258.640960][ T9758] ? __pfx___might_resched+0x10/0x10 [ 258.646242][ T9758] should_fail_ex+0x3b0/0x4e0 [ 258.650919][ T9758] should_failslab+0xac/0x100 [ 258.655596][ T9758] __kmalloc_cache_node_noprof+0x74/0x300 [ 258.661304][ T9758] ? __get_vm_area_node+0x113/0x270 [ 258.666504][ T9758] __get_vm_area_node+0x113/0x270 [ 258.671535][ T9758] __vmalloc_node_range_noprof+0x3c6/0x1400 [ 258.677505][ T9758] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 258.683043][ T9758] ? mark_lock+0x9a/0x350 [ 258.687388][ T9758] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 258.693710][ T9758] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 258.699248][ T9758] __vmalloc_noprof+0x79/0x90 [ 258.703919][ T9758] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 258.709454][ T9758] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 258.714816][ T9758] ? bpf_prog_alloc+0x28/0x1b0 [ 258.719572][ T9758] bpf_prog_alloc+0x3a/0x1b0 [ 258.724156][ T9758] bpf_prog_load+0x7f7/0x20f0 [ 258.728845][ T9758] ? __pfx_bpf_prog_load+0x10/0x10 [ 258.733968][ T9758] ? __pfx___might_resched+0x10/0x10 [ 258.739259][ T9758] ? __might_fault+0xc6/0x120 [ 258.743938][ T9758] ? bpf_lsm_bpf+0x9/0x10 [ 258.748259][ T9758] ? security_bpf+0x87/0xb0 [ 258.752751][ T9758] __sys_bpf+0x4ee/0x810 [ 258.756986][ T9758] ? __pfx___sys_bpf+0x10/0x10 [ 258.761747][ T9758] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 258.767719][ T9758] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 258.774035][ T9758] ? do_syscall_64+0x100/0x230 [ 258.778790][ T9758] __x64_sys_bpf+0x7c/0x90 [ 258.783217][ T9758] do_syscall_64+0xf3/0x230 [ 258.787715][ T9758] ? clear_bhb_loop+0x35/0x90 [ 258.792388][ T9758] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 258.798269][ T9758] RIP: 0033:0x7ff205f7def9 [ 258.802671][ T9758] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 258.822351][ T9758] RSP: 002b:00007ff206e24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 258.830751][ T9758] RAX: ffffffffffffffda RBX: 00007ff206135f80 RCX: 00007ff205f7def9 [ 258.838714][ T9758] RDX: 0000000000000090 RSI: 0000000020001ec0 RDI: 0000000000000005 [ 258.846671][ T9758] RBP: 00007ff206e24090 R08: 0000000000000000 R09: 0000000000000000 [ 258.854629][ T9758] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 258.862585][ T9758] R13: 0000000000000001 R14: 00007ff206135f80 R15: 00007fffb002c268 [ 258.870556][ T9758] [ 258.878618][ T9754] ,cpuset=syz0,mems_allowed=0-1 [ 258.883578][ T9754] CPU: 1 UID: 0 PID: 9754 Comm: syz.0.1534 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 258.894261][ T9754] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 258.904327][ T9754] Call Trace: [ 258.907620][ T9754] [ 258.910567][ T9754] dump_stack_lvl+0x241/0x360 [ 258.915265][ T9754] ? __pfx_dump_stack_lvl+0x10/0x10 [ 258.920480][ T9754] ? __pfx__printk+0x10/0x10 [ 258.925091][ T9754] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 258.931523][ T9754] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 258.938050][ T9754] warn_alloc+0x278/0x410 [ 258.942406][ T9754] ? __pfx_warn_alloc+0x10/0x10 [ 258.947279][ T9754] ? __get_vm_area_node+0x113/0x270 [ 258.952766][ T9754] ? __get_vm_area_node+0x261/0x270 [ 258.957994][ T9754] __vmalloc_node_range_noprof+0x3eb/0x1400 [ 258.963900][ T9754] ? mark_lock+0x9a/0x350 [ 258.968283][ T9754] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 258.974639][ T9754] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 258.980198][ T9754] __vmalloc_noprof+0x79/0x90 [ 258.984892][ T9754] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 258.990459][ T9754] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 258.995855][ T9754] ? bpf_prog_alloc+0x28/0x1b0 [ 259.000644][ T9754] bpf_prog_alloc+0x3a/0x1b0 [ 259.005253][ T9754] bpf_prog_load+0x7f7/0x20f0 [ 259.009966][ T9754] ? __pfx_bpf_prog_load+0x10/0x10 [ 259.015108][ T9754] ? __pfx___might_resched+0x10/0x10 [ 259.020430][ T9754] ? __might_fault+0xc6/0x120 [ 259.025135][ T9754] ? bpf_lsm_bpf+0x9/0x10 [ 259.029482][ T9754] ? security_bpf+0x87/0xb0 [ 259.034004][ T9754] __sys_bpf+0x4ee/0x810 [ 259.038275][ T9754] ? __pfx___sys_bpf+0x10/0x10 [ 259.043075][ T9754] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 259.049076][ T9754] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 259.055416][ T9754] ? do_syscall_64+0x100/0x230 [ 259.060176][ T9754] __x64_sys_bpf+0x7c/0x90 [ 259.064595][ T9754] do_syscall_64+0xf3/0x230 [ 259.069093][ T9754] ? clear_bhb_loop+0x35/0x90 [ 259.073768][ T9754] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.079656][ T9754] RIP: 0033:0x7f5b0b97def9 [ 259.084062][ T9754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.103663][ T9754] RSP: 002b:00007f5b0c722038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 259.112088][ T9754] RAX: ffffffffffffffda RBX: 00007f5b0bb35f80 RCX: 00007f5b0b97def9 [ 259.120049][ T9754] RDX: 0000000000000094 RSI: 00000000200001c0 RDI: 0000000000000005 [ 259.128007][ T9754] RBP: 00007f5b0c722090 R08: 0000000000000000 R09: 0000000000000000 [ 259.135966][ T9754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.143924][ T9754] R13: 0000000000000001 R14: 00007f5b0bb35f80 R15: 00007ffeeb9417f8 [ 259.151896][ T9754] [ 259.178831][ T9772] FAULT_INJECTION: forcing a failure. [ 259.178831][ T9772] name failslab, interval 1, probability 0, space 0, times 0 [ 259.190478][ T9754] Mem-Info: [ 259.199446][ T9754] active_anon:4216 inactive_anon:0 isolated_anon:0 [ 259.199446][ T9754] active_file:1934 inactive_file:38266 isolated_file:0 [ 259.199446][ T9754] unevictable:768 dirty:590 writeback:0 [ 259.199446][ T9754] slab_reclaimable:9260 slab_unreclaimable:100193 [ 259.199446][ T9754] mapped:22437 shmem:1275 pagetables:749 [ 259.199446][ T9754] sec_pagetables:0 bounce:0 [ 259.199446][ T9754] kernel_misc_reclaimable:0 [ 259.199446][ T9754] free:1360228 free_pcp:378 free_cma:0 [ 259.261485][ T9772] CPU: 1 UID: 0 PID: 9772 Comm: syz.2.1538 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 259.272213][ T9772] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 259.282289][ T9772] Call Trace: [ 259.285584][ T9772] [ 259.288532][ T9772] dump_stack_lvl+0x241/0x360 [ 259.293236][ T9772] ? __pfx_dump_stack_lvl+0x10/0x10 [ 259.298451][ T9772] ? __pfx__printk+0x10/0x10 [ 259.303063][ T9772] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 259.308957][ T9772] ? __pfx___might_resched+0x10/0x10 [ 259.314246][ T9772] should_fail_ex+0x3b0/0x4e0 [ 259.318931][ T9772] should_failslab+0xac/0x100 [ 259.323606][ T9772] __kmalloc_cache_node_noprof+0x74/0x300 [ 259.329316][ T9772] ? __get_vm_area_node+0x113/0x270 [ 259.334511][ T9772] __get_vm_area_node+0x113/0x270 [ 259.339531][ T9772] __vmalloc_node_range_noprof+0x3c6/0x1400 [ 259.345411][ T9772] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 259.350951][ T9772] ? mark_lock+0x9a/0x350 [ 259.355292][ T9772] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 259.361611][ T9772] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 259.367146][ T9772] __vmalloc_noprof+0x79/0x90 [ 259.371812][ T9772] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 259.377348][ T9772] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 259.382708][ T9772] ? bpf_prog_alloc+0x28/0x1b0 [ 259.387465][ T9772] bpf_prog_alloc+0x3a/0x1b0 [ 259.392053][ T9772] bpf_prog_load+0x7f7/0x20f0 [ 259.396734][ T9772] ? __pfx_bpf_prog_load+0x10/0x10 [ 259.401835][ T9772] ? __pfx___might_resched+0x10/0x10 [ 259.407125][ T9772] ? __might_fault+0xc6/0x120 [ 259.411798][ T9772] ? bpf_lsm_bpf+0x9/0x10 [ 259.416113][ T9772] ? security_bpf+0x87/0xb0 [ 259.420625][ T9772] __sys_bpf+0x4ee/0x810 [ 259.424860][ T9772] ? __pfx___sys_bpf+0x10/0x10 [ 259.429622][ T9772] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 259.435594][ T9772] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 259.441914][ T9772] ? do_syscall_64+0x100/0x230 [ 259.446673][ T9772] __x64_sys_bpf+0x7c/0x90 [ 259.451076][ T9772] do_syscall_64+0xf3/0x230 [ 259.455568][ T9772] ? clear_bhb_loop+0x35/0x90 [ 259.460238][ T9772] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 259.466122][ T9772] RIP: 0033:0x7ff205f7def9 [ 259.470527][ T9772] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 259.490207][ T9772] RSP: 002b:00007ff206e24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 259.498613][ T9772] RAX: ffffffffffffffda RBX: 00007ff206135f80 RCX: 00007ff205f7def9 [ 259.506578][ T9772] RDX: 0000000000000094 RSI: 0000000020000280 RDI: 0000000000000005 [ 259.514536][ T9772] RBP: 00007ff206e24090 R08: 0000000000000000 R09: 0000000000000000 [ 259.522495][ T9772] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 259.530456][ T9772] R13: 0000000000000001 R14: 00007ff206135f80 R15: 00007fffb002c268 [ 259.538437][ T9772] [ 259.595846][ T9754] Node 0 active_anon:17136kB inactive_anon:0kB active_file:7736kB inactive_file:152996kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:89760kB dirty:2360kB writeback:0kB shmem:3576kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10512kB pagetables:3200kB sec_pagetables:0kB all_unreclaimable? no [ 259.644814][ T9754] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 259.717067][ T9754] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.795177][ T9754] lowmem_reserve[]: 0 2467 2468 0 0 [ 259.816845][ T9754] Node 0 DMA32 free:1478204kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:17596kB inactive_anon:0kB active_file:7736kB inactive_file:152180kB unevictable:1536kB writepending:2360kB present:3129332kB managed:2554980kB mlocked:0kB bounce:0kB free_pcp:1672kB local_pcp:244kB free_cma:0kB [ 259.862161][ T9754] lowmem_reserve[]: 0 0 0 0 0 [ 259.872419][ T9754] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:816kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 259.956755][ T9754] lowmem_reserve[]: 0 0 0 0 0 [ 259.969439][ T9788] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1541'. [ 259.973424][ T9754] Node 1 Normal free:3947252kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 259.988905][ T9788] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1541'. [ 260.066942][ T9754] lowmem_reserve[]: 0 0 0 0 0 [ 260.075120][ T9788] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1541'. [ 260.083905][ T9754] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 260.094443][ T9788] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1541'. [ 260.112957][ T9754] Node 0 DMA32: 185*4kB (UM) 156*8kB (UME) 217*16kB (UME) 323*32kB (UME) 257*64kB (UME) 161*128kB (UME) 77*256kB (UM) 24*512kB (UM) 11*1024kB (UM) 3*2048kB (UME) 336*4096kB (UM) = 1478516kB [ 260.148637][ T9754] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 260.171957][ T9754] Node 1 Normal: 1*4kB (U) 6*8kB (U) 10*16kB (U) 11*32kB (U) 7*64kB (UM) 6*128kB (U) 4*256kB (UM) 6*512kB (UM) 5*1024kB (U) 2*2048kB (U) 960*4096kB (M) = 3947252kB [ 260.194033][ T9790] validate_nla: 22 callbacks suppressed [ 260.194052][ T9790] netlink: 'syz.4.1544': attribute type 29 has an invalid length. [ 260.215448][ T9754] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.231539][ T9754] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 260.231643][ T9793] netlink: 'syz.4.1544': attribute type 29 has an invalid length. [ 260.249460][ T9754] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 260.269214][ T9790] netlink: 'syz.4.1544': attribute type 29 has an invalid length. [ 260.276235][ T9754] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 260.288247][ T9754] 41432 total pagecache pages [ 260.292954][ T9754] 0 pages in swap cache [ 260.301845][ T9790] netlink: 'syz.4.1544': attribute type 29 has an invalid length. [ 260.322048][ T9754] Free swap = 124996kB [ 260.326564][ T9754] Total swap = 124996kB [ 260.330741][ T9754] 2097051 pages RAM [ 260.337300][ T9790] netlink: 'syz.4.1544': attribute type 29 has an invalid length. [ 260.354343][ T9754] 0 pages HighMem/MovableOnly [ 260.355360][ T9790] netlink: 'syz.4.1544': attribute type 29 has an invalid length. [ 260.364273][ T9754] 426968 pages reserved [ 260.383936][ T9754] 0 pages cma reserved [ 260.708646][ T9807] FAULT_INJECTION: forcing a failure. [ 260.708646][ T9807] name failslab, interval 1, probability 0, space 0, times 0 [ 260.740371][ T9810] netlink: 'syz.0.1550': attribute type 11 has an invalid length. [ 260.750410][ T9807] CPU: 1 UID: 0 PID: 9807 Comm: syz.2.1549 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 260.761113][ T9807] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 260.771168][ T9807] Call Trace: [ 260.774438][ T9807] [ 260.777363][ T9807] dump_stack_lvl+0x241/0x360 [ 260.782077][ T9807] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.787267][ T9807] ? __pfx__printk+0x10/0x10 [ 260.791848][ T9807] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 260.797742][ T9807] ? __pfx___might_resched+0x10/0x10 [ 260.803022][ T9807] should_fail_ex+0x3b0/0x4e0 [ 260.807787][ T9807] should_failslab+0xac/0x100 [ 260.812461][ T9807] __kmalloc_cache_node_noprof+0x74/0x300 [ 260.818172][ T9807] ? __get_vm_area_node+0x113/0x270 [ 260.823455][ T9807] __get_vm_area_node+0x113/0x270 [ 260.828479][ T9807] __vmalloc_node_range_noprof+0x3c6/0x1400 [ 260.834364][ T9807] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 260.839902][ T9807] ? mark_lock+0x9a/0x350 [ 260.844257][ T9807] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 260.850585][ T9807] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 260.856125][ T9807] __vmalloc_noprof+0x79/0x90 [ 260.860789][ T9807] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 260.866328][ T9807] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 260.871691][ T9807] ? bpf_prog_alloc+0x28/0x1b0 [ 260.876452][ T9807] bpf_prog_alloc+0x3a/0x1b0 [ 260.881038][ T9807] bpf_prog_load+0x7f7/0x20f0 [ 260.885743][ T9807] ? __pfx_bpf_prog_load+0x10/0x10 [ 260.890851][ T9807] ? __pfx___might_resched+0x10/0x10 [ 260.896143][ T9807] ? __might_fault+0xc6/0x120 [ 260.900812][ T9807] ? bpf_lsm_bpf+0x9/0x10 [ 260.905129][ T9807] ? security_bpf+0x87/0xb0 [ 260.909625][ T9807] __sys_bpf+0x4ee/0x810 [ 260.913862][ T9807] ? __pfx___sys_bpf+0x10/0x10 [ 260.918625][ T9807] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 260.924600][ T9807] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 260.930922][ T9807] ? do_syscall_64+0x100/0x230 [ 260.935681][ T9807] __x64_sys_bpf+0x7c/0x90 [ 260.940087][ T9807] do_syscall_64+0xf3/0x230 [ 260.944585][ T9807] ? clear_bhb_loop+0x35/0x90 [ 260.949258][ T9807] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.955142][ T9807] RIP: 0033:0x7ff205f7def9 [ 260.959546][ T9807] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 260.979156][ T9807] RSP: 002b:00007ff206e24038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 260.987567][ T9807] RAX: ffffffffffffffda RBX: 00007ff206135f80 RCX: 00007ff205f7def9 [ 260.995531][ T9807] RDX: 0000000000000094 RSI: 0000000020000040 RDI: 0000000000000005 [ 261.003497][ T9807] RBP: 00007ff206e24090 R08: 0000000000000000 R09: 0000000000000000 [ 261.011500][ T9807] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.019472][ T9807] R13: 0000000000000001 R14: 00007ff206135f80 R15: 00007fffb002c268 [ 261.027446][ T9807] [ 261.035338][ T9810] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1550'. [ 261.409509][ T9827] FAULT_INJECTION: forcing a failure. [ 261.409509][ T9827] name failslab, interval 1, probability 0, space 0, times 0 [ 261.498015][ T9827] CPU: 1 UID: 0 PID: 9827 Comm: syz.3.1556 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 261.508751][ T9827] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 261.518828][ T9827] Call Trace: [ 261.522129][ T9827] [ 261.525084][ T9827] dump_stack_lvl+0x241/0x360 [ 261.529784][ T9827] ? __pfx_dump_stack_lvl+0x10/0x10 [ 261.535092][ T9827] ? __pfx__printk+0x10/0x10 [ 261.539709][ T9827] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 261.545624][ T9827] ? __pfx___might_resched+0x10/0x10 [ 261.550942][ T9827] should_fail_ex+0x3b0/0x4e0 [ 261.555653][ T9827] should_failslab+0xac/0x100 [ 261.560353][ T9827] __kmalloc_cache_node_noprof+0x74/0x300 [ 261.566094][ T9827] ? __get_vm_area_node+0x113/0x270 [ 261.571322][ T9827] __get_vm_area_node+0x113/0x270 [ 261.576377][ T9827] __vmalloc_node_range_noprof+0x3c6/0x1400 [ 261.582294][ T9827] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 261.587863][ T9827] ? mark_lock+0x9a/0x350 [ 261.592242][ T9827] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 261.598593][ T9827] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 261.604153][ T9827] __vmalloc_noprof+0x79/0x90 [ 261.608838][ T9827] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 261.614384][ T9827] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 261.619749][ T9827] ? bpf_prog_alloc+0x28/0x1b0 [ 261.624512][ T9827] bpf_prog_alloc+0x3a/0x1b0 [ 261.629097][ T9827] bpf_prog_load+0x7f7/0x20f0 [ 261.633780][ T9827] ? __pfx_bpf_prog_load+0x10/0x10 [ 261.638884][ T9827] ? __pfx___might_resched+0x10/0x10 [ 261.644171][ T9827] ? __might_fault+0xc6/0x120 [ 261.648845][ T9827] ? bpf_lsm_bpf+0x9/0x10 [ 261.653166][ T9827] ? security_bpf+0x87/0xb0 [ 261.657662][ T9827] __sys_bpf+0x4ee/0x810 [ 261.661899][ T9827] ? __pfx___sys_bpf+0x10/0x10 [ 261.666665][ T9827] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 261.672641][ T9827] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 261.678965][ T9827] ? do_syscall_64+0x100/0x230 [ 261.683727][ T9827] __x64_sys_bpf+0x7c/0x90 [ 261.688142][ T9827] do_syscall_64+0xf3/0x230 [ 261.692639][ T9827] ? clear_bhb_loop+0x35/0x90 [ 261.697311][ T9827] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 261.703195][ T9827] RIP: 0033:0x7fb9ad17def9 [ 261.707601][ T9827] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 261.727198][ T9827] RSP: 002b:00007fb9ae024038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 261.735603][ T9827] RAX: ffffffffffffffda RBX: 00007fb9ad335f80 RCX: 00007fb9ad17def9 [ 261.743562][ T9827] RDX: 0000000000000048 RSI: 00000000200054c0 RDI: 0000000000000005 [ 261.751521][ T9827] RBP: 00007fb9ae024090 R08: 0000000000000000 R09: 0000000000000000 [ 261.759487][ T9827] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 261.767450][ T9827] R13: 0000000000000001 R14: 00007fb9ad335f80 R15: 00007ffdcec127c8 [ 261.775423][ T9827] [ 261.989022][ T9841] netlink: 'syz.0.1561': attribute type 29 has an invalid length. [ 262.040962][ T9844] FAULT_INJECTION: forcing a failure. [ 262.040962][ T9844] name failslab, interval 1, probability 0, space 0, times 0 [ 262.078715][ T9844] CPU: 1 UID: 0 PID: 9844 Comm: syz.3.1563 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 262.089437][ T9844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 262.099514][ T9844] Call Trace: [ 262.102805][ T9844] [ 262.105743][ T9844] dump_stack_lvl+0x241/0x360 [ 262.110444][ T9844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.115667][ T9844] ? __pfx__printk+0x10/0x10 [ 262.120274][ T9844] ? __kmalloc_cache_node_noprof+0x4c/0x300 [ 262.126181][ T9844] ? __pfx___might_resched+0x10/0x10 [ 262.131496][ T9844] should_fail_ex+0x3b0/0x4e0 [ 262.136292][ T9844] should_failslab+0xac/0x100 [ 262.140972][ T9844] __kmalloc_cache_node_noprof+0x74/0x300 [ 262.146684][ T9844] ? __get_vm_area_node+0x113/0x270 [ 262.151881][ T9844] __get_vm_area_node+0x113/0x270 [ 262.156904][ T9844] __vmalloc_node_range_noprof+0x3c6/0x1400 [ 262.162787][ T9844] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 262.168328][ T9844] ? mark_lock+0x9a/0x350 [ 262.172673][ T9844] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 262.178996][ T9844] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 262.184539][ T9844] __vmalloc_noprof+0x79/0x90 [ 262.189209][ T9844] ? bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 262.194747][ T9844] bpf_prog_alloc_no_stats+0x4d/0x4b0 [ 262.200111][ T9844] ? bpf_prog_alloc+0x28/0x1b0 [ 262.204869][ T9844] bpf_prog_alloc+0x3a/0x1b0 [ 262.209460][ T9844] bpf_prog_load+0x7f7/0x20f0 [ 262.214143][ T9844] ? __pfx_bpf_prog_load+0x10/0x10 [ 262.219247][ T9844] ? __pfx___might_resched+0x10/0x10 [ 262.224554][ T9844] ? __might_fault+0xc6/0x120 [ 262.229248][ T9844] ? bpf_lsm_bpf+0x9/0x10 [ 262.233581][ T9844] ? security_bpf+0x87/0xb0 [ 262.238083][ T9844] __sys_bpf+0x4ee/0x810 [ 262.242324][ T9844] ? __pfx___sys_bpf+0x10/0x10 [ 262.247178][ T9844] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.253159][ T9844] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 262.259482][ T9844] ? do_syscall_64+0x100/0x230 [ 262.264247][ T9844] __x64_sys_bpf+0x7c/0x90 [ 262.268697][ T9844] do_syscall_64+0xf3/0x230 [ 262.273194][ T9844] ? clear_bhb_loop+0x35/0x90 [ 262.277871][ T9844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.283758][ T9844] RIP: 0033:0x7fb9ad17def9 [ 262.288165][ T9844] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.307760][ T9844] RSP: 002b:00007fb9ae024038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 262.316169][ T9844] RAX: ffffffffffffffda RBX: 00007fb9ad335f80 RCX: 00007fb9ad17def9 [ 262.324129][ T9844] RDX: 0000000000000094 RSI: 0000000020000040 RDI: 0000000000000005 [ 262.332094][ T9844] RBP: 00007fb9ae024090 R08: 0000000000000000 R09: 0000000000000000 [ 262.340053][ T9844] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.348015][ T9844] R13: 0000000000000001 R14: 00007fb9ad335f80 R15: 00007ffdcec127c8 [ 262.356077][ T9844] [ 262.673505][ T9865] FAULT_INJECTION: forcing a failure. [ 262.673505][ T9865] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 262.687142][ T9865] CPU: 0 UID: 0 PID: 9865 Comm: syz.1.1569 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 262.697854][ T9865] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 262.707927][ T9865] Call Trace: [ 262.711210][ T9865] [ 262.714140][ T9865] dump_stack_lvl+0x241/0x360 [ 262.718820][ T9865] ? __pfx_dump_stack_lvl+0x10/0x10 [ 262.724009][ T9865] ? __pfx__printk+0x10/0x10 [ 262.728595][ T9865] ? shmem_get_folio_gfp+0x19c7/0x2370 [ 262.734135][ T9865] ? irqentry_exit+0x63/0x90 [ 262.738718][ T9865] ? exc_page_fault+0x590/0x8c0 [ 262.743570][ T9865] should_fail_ex+0x3b0/0x4e0 [ 262.748252][ T9865] copy_page_from_iter_atomic+0x24f/0x1aa0 [ 262.754051][ T9865] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 262.759681][ T9865] ? fault_in_readable+0x1a6/0x2b0 [ 262.764791][ T9865] ? __pfx_copy_page_from_iter_atomic+0x10/0x10 [ 262.771017][ T9865] ? shmem_write_begin+0x23f/0x4d0 [ 262.776117][ T9865] ? __pfx_shmem_write_begin+0x10/0x10 [ 262.781576][ T9865] generic_perform_write+0x4a1/0x840 [ 262.786860][ T9865] ? __pfx_generic_perform_write+0x10/0x10 [ 262.792654][ T9865] ? __pfx_generic_write_checks+0x10/0x10 [ 262.798370][ T9865] ? rcu_read_lock_any_held+0xb7/0x160 [ 262.803832][ T9865] ? file_update_time+0x2a6/0x430 [ 262.809121][ T9865] shmem_file_write_iter+0xfc/0x120 [ 262.814402][ T9865] vfs_write+0xa72/0xc90 [ 262.818637][ T9865] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 262.824434][ T9865] ? __pfx_vfs_write+0x10/0x10 [ 262.829203][ T9865] ksys_write+0x1a0/0x2c0 [ 262.833525][ T9865] ? __pfx_ksys_write+0x10/0x10 [ 262.838362][ T9865] ? do_syscall_64+0x100/0x230 [ 262.843120][ T9865] ? do_syscall_64+0xb6/0x230 [ 262.847794][ T9865] do_syscall_64+0xf3/0x230 [ 262.852291][ T9865] ? clear_bhb_loop+0x35/0x90 [ 262.856963][ T9865] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 262.862846][ T9865] RIP: 0033:0x7f8acd37def9 [ 262.867252][ T9865] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 262.886849][ T9865] RSP: 002b:00007f8ace0d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 262.895346][ T9865] RAX: ffffffffffffffda RBX: 00007f8acd535f80 RCX: 00007f8acd37def9 [ 262.903400][ T9865] RDX: 0000000000043400 RSI: 0000000020000200 RDI: 0000000000000006 [ 262.911357][ T9865] RBP: 00007f8ace0d5090 R08: 0000000000000000 R09: 0000000000000000 [ 262.919318][ T9865] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 262.927274][ T9865] R13: 0000000000000000 R14: 00007f8acd535f80 R15: 00007ffcc39b1128 [ 262.935248][ T9865] [ 263.072278][ T9868] Bluetooth: MGMT ver 1.23 [ 263.228523][ T9885] syz.3.1576[9885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.228771][ T9885] syz.3.1576[9885] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 263.246555][ T9886] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1575'. [ 263.621318][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1582'. [ 263.630403][ T9909] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.638815][ T9909] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.648417][ T9909] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.661008][ T9909] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.696649][ T9905] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1581'. [ 263.706661][ T9905] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1581'. [ 263.716679][ T9911] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1584'. [ 264.400818][ T9954] FAULT_INJECTION: forcing a failure. [ 264.400818][ T9954] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.418339][ T9954] CPU: 0 UID: 0 PID: 9954 Comm: syz.1.1597 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 264.429046][ T9954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 264.439092][ T9954] Call Trace: [ 264.442374][ T9954] [ 264.445297][ T9954] dump_stack_lvl+0x241/0x360 [ 264.449985][ T9954] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.455174][ T9954] ? __pfx__printk+0x10/0x10 [ 264.459766][ T9954] ? snprintf+0xda/0x120 [ 264.464004][ T9954] should_fail_ex+0x3b0/0x4e0 [ 264.468680][ T9954] _copy_to_user+0x2f/0xb0 [ 264.473095][ T9954] simple_read_from_buffer+0xca/0x150 [ 264.478468][ T9954] proc_fail_nth_read+0x1ec/0x260 [ 264.483489][ T9954] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.489056][ T9954] ? rw_verify_area+0x520/0x6b0 [ 264.493907][ T9954] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 264.499441][ T9954] vfs_read+0x204/0xbc0 [ 264.503582][ T9954] ? __pfx_lock_release+0x10/0x10 [ 264.508691][ T9954] ? __pfx_vfs_read+0x10/0x10 [ 264.513355][ T9954] ? __fget_files+0x29/0x470 [ 264.517936][ T9954] ? __fget_files+0x3f6/0x470 [ 264.522620][ T9954] ksys_read+0x1a0/0x2c0 [ 264.526860][ T9954] ? __pfx_ksys_read+0x10/0x10 [ 264.531612][ T9954] ? do_syscall_64+0x100/0x230 [ 264.536370][ T9954] ? do_syscall_64+0xb6/0x230 [ 264.541038][ T9954] do_syscall_64+0xf3/0x230 [ 264.545529][ T9954] ? clear_bhb_loop+0x35/0x90 [ 264.550206][ T9954] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.556176][ T9954] RIP: 0033:0x7f8acd37c93c [ 264.560583][ T9954] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 264.580184][ T9954] RSP: 002b:00007f8ace0d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 264.588589][ T9954] RAX: ffffffffffffffda RBX: 00007f8acd535f80 RCX: 00007f8acd37c93c [ 264.596548][ T9954] RDX: 000000000000000f RSI: 00007f8ace0d50a0 RDI: 0000000000000004 [ 264.604506][ T9954] RBP: 00007f8ace0d5090 R08: 0000000000000000 R09: 0000000000000000 [ 264.612461][ T9954] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.620417][ T9954] R13: 0000000000000000 R14: 00007f8acd535f80 R15: 00007ffcc39b1128 [ 264.628392][ T9954] [ 264.731656][ T9960] FAULT_INJECTION: forcing a failure. [ 264.731656][ T9960] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 264.750994][ T9960] CPU: 0 UID: 0 PID: 9960 Comm: syz.2.1600 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 264.761708][ T9960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 264.771780][ T9960] Call Trace: [ 264.775074][ T9960] [ 264.778014][ T9960] dump_stack_lvl+0x241/0x360 [ 264.782714][ T9960] ? __pfx_dump_stack_lvl+0x10/0x10 [ 264.787937][ T9960] ? __pfx__printk+0x10/0x10 [ 264.792553][ T9960] ? __pfx_lock_release+0x10/0x10 [ 264.796038][ T9962] syz.1.1601[9962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.797586][ T9960] should_fail_ex+0x3b0/0x4e0 [ 264.797626][ T9960] _copy_from_user+0x2f/0xe0 [ 264.811743][ T9962] syz.1.1601[9962] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.813535][ T9960] copy_msghdr_from_user+0xae/0x680 [ 264.813570][ T9960] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 264.813604][ T9960] __sys_sendmsg+0x23d/0x3a0 [ 264.845051][ T9960] ? __pfx___sys_sendmsg+0x10/0x10 [ 264.850159][ T9960] ? vfs_write+0x7c4/0xc90 [ 264.854619][ T9960] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 264.860964][ T9960] ? do_syscall_64+0x100/0x230 [ 264.865721][ T9960] ? do_syscall_64+0xb6/0x230 [ 264.870386][ T9960] do_syscall_64+0xf3/0x230 [ 264.874878][ T9960] ? clear_bhb_loop+0x35/0x90 [ 264.879566][ T9960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 264.885479][ T9960] RIP: 0033:0x7ff205f7def9 [ 264.889904][ T9960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 264.909532][ T9960] RSP: 002b:00007ff206e24038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 264.917971][ T9960] RAX: ffffffffffffffda RBX: 00007ff206135f80 RCX: 00007ff205f7def9 [ 264.925963][ T9960] RDX: 0000000000000000 RSI: 0000000020000a80 RDI: 0000000000000003 [ 264.933952][ T9960] RBP: 00007ff206e24090 R08: 0000000000000000 R09: 0000000000000000 [ 264.941946][ T9960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 264.949931][ T9960] R13: 0000000000000000 R14: 00007ff206135f80 R15: 00007fffb002c268 [ 264.957907][ T9960] [ 265.179497][ T9977] FAULT_INJECTION: forcing a failure. [ 265.179497][ T9977] name failslab, interval 1, probability 0, space 0, times 0 [ 265.216882][ T9977] CPU: 0 UID: 0 PID: 9977 Comm: syz.4.1606 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 265.227612][ T9977] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 265.237685][ T9977] Call Trace: [ 265.240961][ T9977] [ 265.243889][ T9977] dump_stack_lvl+0x241/0x360 [ 265.248569][ T9977] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.253848][ T9977] ? __pfx__printk+0x10/0x10 [ 265.258432][ T9977] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 265.264406][ T9977] ? __pfx___might_resched+0x10/0x10 [ 265.269694][ T9977] should_fail_ex+0x3b0/0x4e0 [ 265.274374][ T9977] should_failslab+0xac/0x100 [ 265.279048][ T9977] ? __alloc_skb+0x1c3/0x440 [ 265.283632][ T9977] kmem_cache_alloc_node_noprof+0x71/0x320 [ 265.289433][ T9977] __alloc_skb+0x1c3/0x440 [ 265.293846][ T9977] ? __pfx___alloc_skb+0x10/0x10 [ 265.298775][ T9977] ? netlink_autobind+0xd6/0x2f0 [ 265.303706][ T9977] ? netlink_autobind+0x2b0/0x2f0 [ 265.308721][ T9977] netlink_sendmsg+0x638/0xcb0 [ 265.313482][ T9977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.318756][ T9977] ? __import_iovec+0x536/0x820 [ 265.323596][ T9977] ? aa_sock_msg_perm+0x91/0x160 [ 265.328527][ T9977] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 265.333804][ T9977] ? security_socket_sendmsg+0x87/0xb0 [ 265.339258][ T9977] ? __pfx_netlink_sendmsg+0x10/0x10 [ 265.344529][ T9977] __sock_sendmsg+0x221/0x270 [ 265.349197][ T9977] ____sys_sendmsg+0x525/0x7d0 [ 265.353958][ T9977] ? __pfx_____sys_sendmsg+0x10/0x10 [ 265.359247][ T9977] __sys_sendmsg+0x2b0/0x3a0 [ 265.363917][ T9977] ? __pfx___sys_sendmsg+0x10/0x10 [ 265.369019][ T9977] ? vfs_write+0x7c4/0xc90 [ 265.373455][ T9977] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 265.379781][ T9977] ? do_syscall_64+0x100/0x230 [ 265.384540][ T9977] ? do_syscall_64+0xb6/0x230 [ 265.389208][ T9977] do_syscall_64+0xf3/0x230 [ 265.393699][ T9977] ? clear_bhb_loop+0x35/0x90 [ 265.398371][ T9977] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.404256][ T9977] RIP: 0033:0x7f03edb7def9 [ 265.408678][ T9977] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.428285][ T9977] RSP: 002b:00007f03eea1e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 265.436698][ T9977] RAX: ffffffffffffffda RBX: 00007f03edd35f80 RCX: 00007f03edb7def9 [ 265.444759][ T9977] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000003 [ 265.452807][ T9977] RBP: 00007f03eea1e090 R08: 0000000000000000 R09: 0000000000000000 [ 265.460766][ T9977] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 265.468723][ T9977] R13: 0000000000000000 R14: 00007f03edd35f80 R15: 00007ffc68dff748 [ 265.476695][ T9977] [ 265.632155][ T9988] __nla_validate_parse: 4 callbacks suppressed [ 265.632173][ T9988] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1610'. [ 265.670368][ T9988] netlink: 'syz.4.1610': attribute type 18 has an invalid length. [ 265.708898][ T9988] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.718189][ T9988] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.727244][ T9988] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.736045][ T9988] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 265.747369][ T9988] vxlan0: entered promiscuous mode [ 265.817197][ T9996] FAULT_INJECTION: forcing a failure. [ 265.817197][ T9996] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 265.830807][ T9996] CPU: 1 UID: 0 PID: 9996 Comm: syz.1.1613 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 265.841501][ T9996] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 265.851553][ T9996] Call Trace: [ 265.854835][ T9996] [ 265.857772][ T9996] dump_stack_lvl+0x241/0x360 [ 265.862454][ T9996] ? __pfx_dump_stack_lvl+0x10/0x10 [ 265.867657][ T9996] ? __pfx__printk+0x10/0x10 [ 265.872245][ T9996] ? __pfx_lock_release+0x10/0x10 [ 265.877391][ T9996] should_fail_ex+0x3b0/0x4e0 [ 265.882198][ T9996] _copy_from_user+0x2f/0xe0 [ 265.886798][ T9996] core_sys_select+0x639/0x910 [ 265.891588][ T9996] ? __pfx_core_sys_select+0x10/0x10 [ 265.896873][ T9996] ? ksys_write+0x23e/0x2c0 [ 265.901407][ T9996] ? __pfx_set_user_sigmask+0x10/0x10 [ 265.906775][ T9996] ? __fget_files+0x3f6/0x470 [ 265.911448][ T9996] __se_sys_pselect6+0x319/0x3f0 [ 265.916382][ T9996] ? __pfx___se_sys_pselect6+0x10/0x10 [ 265.921834][ T9996] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 265.928167][ T9996] ? do_syscall_64+0x100/0x230 [ 265.932946][ T9996] ? __x64_sys_pselect6+0x21/0xf0 [ 265.938035][ T9996] do_syscall_64+0xf3/0x230 [ 265.942632][ T9996] ? clear_bhb_loop+0x35/0x90 [ 265.947319][ T9996] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 265.953215][ T9996] RIP: 0033:0x7f8acd37def9 [ 265.957625][ T9996] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 265.977312][ T9996] RSP: 002b:00007f8ace0d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 265.985740][ T9996] RAX: ffffffffffffffda RBX: 00007f8acd535f80 RCX: 00007f8acd37def9 [ 265.993707][ T9996] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000040 [ 266.001675][ T9996] RBP: 00007f8ace0d5090 R08: 0000000000000000 R09: 0000000000000000 [ 266.009635][ T9996] R10: 00000000200002c0 R11: 0000000000000246 R12: 0000000000000001 [ 266.017595][ T9996] R13: 0000000000000000 R14: 00007f8acd535f80 R15: 00007ffcc39b1128 [ 266.025580][ T9996] [ 266.123603][T10005] FAULT_INJECTION: forcing a failure. [ 266.123603][T10005] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.138340][T10005] CPU: 0 UID: 0 PID: 10005 Comm: syz.1.1615 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 266.149311][T10005] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 266.159385][T10005] Call Trace: [ 266.159462][T10008] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1616'. [ 266.162654][T10005] [ 266.162665][T10005] dump_stack_lvl+0x241/0x360 [ 266.162697][T10005] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.184421][T10005] ? __pfx__printk+0x10/0x10 [ 266.189045][T10005] ? snprintf+0xda/0x120 [ 266.193307][T10005] should_fail_ex+0x3b0/0x4e0 [ 266.197998][T10005] _copy_to_user+0x2f/0xb0 [ 266.202420][T10005] simple_read_from_buffer+0xca/0x150 [ 266.207790][T10005] proc_fail_nth_read+0x1ec/0x260 [ 266.212806][T10005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.218343][T10005] ? rw_verify_area+0x520/0x6b0 [ 266.223183][T10005] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 266.228718][T10005] vfs_read+0x204/0xbc0 [ 266.232861][T10005] ? __pfx_lock_release+0x10/0x10 [ 266.237884][T10005] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 266.243775][T10005] ? __pfx_vfs_read+0x10/0x10 [ 266.248445][T10005] ? __fget_files+0x29/0x470 [ 266.253027][T10005] ? __fget_files+0x3f6/0x470 [ 266.257706][T10005] ksys_read+0x1a0/0x2c0 [ 266.261944][T10005] ? __pfx_ksys_read+0x10/0x10 [ 266.266697][T10005] ? do_syscall_64+0x100/0x230 [ 266.271455][T10005] ? do_syscall_64+0xb6/0x230 [ 266.276211][T10005] do_syscall_64+0xf3/0x230 [ 266.280966][T10005] ? clear_bhb_loop+0x35/0x90 [ 266.285641][T10005] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.291613][T10005] RIP: 0033:0x7f8acd37c93c [ 266.296026][T10005] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 266.315636][T10005] RSP: 002b:00007f8ace0b4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 266.324060][T10005] RAX: ffffffffffffffda RBX: 00007f8acd536058 RCX: 00007f8acd37c93c [ 266.332026][T10005] RDX: 000000000000000f RSI: 00007f8ace0b40a0 RDI: 0000000000000005 [ 266.339988][T10005] RBP: 00007f8ace0b4090 R08: 0000000000000000 R09: 0000000000000000 [ 266.347961][T10005] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000001 [ 266.355919][T10005] R13: 0000000000000001 R14: 00007f8acd536058 R15: 00007ffcc39b1128 [ 266.363895][T10005] [ 266.523671][T10014] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 266.840524][T10034] syz.2.1623[10034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.840757][T10034] syz.2.1623[10034] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.919211][T10039] FAULT_INJECTION: forcing a failure. [ 266.919211][T10039] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 266.919292][T10039] [ 266.919297][T10039] ====================================================== [ 266.919304][T10039] WARNING: possible circular locking dependency detected [ 266.919311][T10039] 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 Not tainted [ 266.919321][T10039] ------------------------------------------------------ [ 266.919327][T10039] syz.3.1625/10039 is trying to acquire lock: [ 266.919336][T10039] ffffffff8e813cb8 ((console_sem).lock){-.-.}-{2:2}, at: down_trylock+0x20/0xa0 [ 266.919382][T10039] [ 266.919382][T10039] but task is already holding lock: [ 266.919387][T10039] ffff8880b883e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 266.919427][T10039] [ 266.919427][T10039] which lock already depends on the new lock. [ 266.919427][T10039] [ 266.919433][T10039] [ 266.919433][T10039] the existing dependency chain (in reverse order) is: [ 266.919438][T10039] [ 266.919438][T10039] -> #2 (&rq->__lock){-.-.}-{2:2}: [ 266.919460][T10039] lock_acquire+0x1ed/0x550 [ 266.919481][T10039] _raw_spin_lock_nested+0x31/0x40 [ 266.919498][T10039] raw_spin_rq_lock_nested+0x2a/0x140 [ 266.919516][T10039] task_fork_fair+0x61/0x1e0 [ 266.919537][T10039] sched_cgroup_fork+0x37c/0x410 [ 266.919550][T10039] copy_process+0x2217/0x3dc0 [ 266.919569][T10039] kernel_clone+0x226/0x8f0 [ 266.919587][T10039] user_mode_thread+0x132/0x1a0 [ 266.919607][T10039] rest_init+0x23/0x300 [ 266.919626][T10039] start_kernel+0x47a/0x500 [ 266.919646][T10039] x86_64_start_reservations+0x2a/0x30 [ 266.919663][T10039] x86_64_start_kernel+0x9f/0xa0 [ 266.919679][T10039] common_startup_64+0x13e/0x147 [ 266.919696][T10039] [ 266.919696][T10039] -> #1 (&p->pi_lock){-.-.}-{2:2}: [ 266.919718][T10039] lock_acquire+0x1ed/0x550 [ 266.919737][T10039] _raw_spin_lock_irqsave+0xd5/0x120 [ 266.919752][T10039] try_to_wake_up+0xb0/0x1470 [ 266.919772][T10039] up+0x72/0x90 [ 266.919788][T10039] console_unlock+0x22f/0x4d0 [ 266.919802][T10039] vprintk_emit+0x5dc/0x7c0 [ 266.919817][T10039] dev_vprintk_emit+0x2ae/0x330 [ 266.919832][T10039] dev_printk_emit+0xdd/0x120 [ 266.919848][T10039] _dev_warn+0x122/0x170 [ 266.919862][T10039] firmware_fallback_sysfs+0x4cf/0x9e0 [ 266.919882][T10039] _request_firmware+0xcf5/0x12b0 [ 266.919898][T10039] request_firmware_work_func+0x12a/0x280 [ 266.919917][T10039] process_scheduled_works+0xa2c/0x1830 [ 266.919937][T10039] worker_thread+0x86d/0xd10 [ 266.919956][T10039] kthread+0x2f0/0x390 [ 266.919975][T10039] ret_from_fork+0x4b/0x80 [ 266.919995][T10039] ret_from_fork_asm+0x1a/0x30 [ 266.920015][T10039] [ 266.920015][T10039] -> #0 ((console_sem).lock){-.-.}-{2:2}: [ 266.920037][T10039] validate_chain+0x18e0/0x5900 [ 266.920059][T10039] __lock_acquire+0x137a/0x2040 [ 266.920077][T10039] lock_acquire+0x1ed/0x550 [ 266.920096][T10039] _raw_spin_lock_irqsave+0xd5/0x120 [ 266.920111][T10039] down_trylock+0x20/0xa0 [ 266.920129][T10039] __down_trylock_console_sem+0x109/0x250 [ 266.920146][T10039] vprintk_emit+0x2aa/0x7c0 [ 266.920160][T10039] _printk+0xd5/0x120 [ 266.920174][T10039] should_fail_ex+0x391/0x4e0 [ 266.920195][T10039] copy_to_user_nofault+0x86/0x140 [ 266.920217][T10039] bpf_prog_9595256994ab4478+0x42/0x44 [ 266.920231][T10039] bpf_trace_run4+0x334/0x590 [ 266.920248][T10039] __traceiter_sched_switch+0x98/0xd0 [ 266.920263][T10039] __schedule+0x2591/0x4a60 [ 266.920279][T10039] schedule+0x14b/0x320 [ 266.920294][T10039] schedule_timeout+0xb0/0x310 [ 266.920314][T10039] __skb_wait_for_more_packets+0x399/0x600 [ 266.920335][T10039] __skb_recv_udp+0x8a2/0xb40 [ 266.920351][T10039] udp_recvmsg+0x21b/0x1800 [ 266.920367][T10039] inet_recvmsg+0x22e/0x2d0 [ 266.920380][T10039] sock_recvmsg+0x1ae/0x280 [ 266.920396][T10039] ____sys_recvmsg+0x1db/0x470 [ 266.920415][T10039] do_recvmmsg+0x474/0xae0 [ 266.920434][T10039] __x64_sys_recvmmsg+0x199/0x250 [ 266.920455][T10039] do_syscall_64+0xf3/0x230 [ 266.920471][T10039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.920492][T10039] [ 266.920492][T10039] other info that might help us debug this: [ 266.920492][T10039] [ 266.920498][T10039] Chain exists of: [ 266.920498][T10039] (console_sem).lock --> &p->pi_lock --> &rq->__lock [ 266.920498][T10039] [ 266.920523][T10039] Possible unsafe locking scenario: [ 266.920523][T10039] [ 266.920528][T10039] CPU0 CPU1 [ 266.920533][T10039] ---- ---- [ 266.920538][T10039] lock(&rq->__lock); [ 266.920548][T10039] lock(&p->pi_lock); [ 266.920559][T10039] lock(&rq->__lock); [ 266.920569][T10039] lock((console_sem).lock); [ 266.920580][T10039] [ 266.920580][T10039] *** DEADLOCK *** [ 266.920580][T10039] [ 266.920584][T10039] 2 locks held by syz.3.1625/10039: [ 266.920594][T10039] #0: ffff8880b883e758 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 266.920637][T10039] #1: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590 [ 266.920676][T10039] [ 266.920676][T10039] stack backtrace: [ 266.920682][T10039] CPU: 0 UID: 0 PID: 10039 Comm: syz.3.1625 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 266.920701][T10039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 266.920711][T10039] Call Trace: [ 266.920718][T10039] [ 266.920725][T10039] dump_stack_lvl+0x241/0x360 [ 266.920746][T10039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.920770][T10039] ? print_circular_bug+0x130/0x1a0 [ 266.920790][T10039] check_noncircular+0x36a/0x4a0 [ 266.920810][T10039] ? __pfx_check_noncircular+0x10/0x10 [ 266.920828][T10039] ? lockdep_lock+0x123/0x2b0 [ 266.920855][T10039] validate_chain+0x18e0/0x5900 [ 266.920885][T10039] ? __pfx_validate_chain+0x10/0x10 [ 266.920902][T10039] ? __pfx_prb_first_seq+0x10/0x10 [ 266.920931][T10039] ? this_cpu_in_panic+0x4f/0x80 [ 266.920954][T10039] ? _prb_read_valid+0xa39/0xac0 [ 266.920983][T10039] ? mark_lock+0x9a/0x350 [ 266.921007][T10039] __lock_acquire+0x137a/0x2040 [ 266.921038][T10039] lock_acquire+0x1ed/0x550 [ 266.921063][T10039] ? down_trylock+0x20/0xa0 [ 266.921085][T10039] ? __pfx_desc_update_last_finalized+0x10/0x10 [ 266.921109][T10039] ? __pfx_lock_acquire+0x10/0x10 [ 266.921129][T10039] ? rcu_is_watching+0x15/0xb0 [ 266.921154][T10039] ? vprintk_store+0xd3e/0x1160 [ 266.921177][T10039] _raw_spin_lock_irqsave+0xd5/0x120 [ 266.921194][T10039] ? down_trylock+0x20/0xa0 [ 266.921214][T10039] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 266.921233][T10039] ? __pfx_validate_chain+0x10/0x10 [ 266.921254][T10039] down_trylock+0x20/0xa0 [ 266.921276][T10039] __down_trylock_console_sem+0x109/0x250 [ 266.921309][T10039] ? _printk+0xd5/0x120 [ 266.921326][T10039] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 266.921346][T10039] ? __pfx_validate_chain+0x10/0x10 [ 266.921366][T10039] vprintk_emit+0x2aa/0x7c0 [ 266.921384][T10039] ? __pfx_vprintk_emit+0x10/0x10 [ 266.921401][T10039] ? __lock_acquire+0x137a/0x2040 [ 266.921444][T10039] _printk+0xd5/0x120 [ 266.921464][T10039] ? __pfx__printk+0x10/0x10 [ 266.921484][T10039] ? __pfx_lock_acquire+0x10/0x10 [ 266.921505][T10039] ? bpf_trace_run4+0x244/0x590 [ 266.921540][T10039] should_fail_ex+0x391/0x4e0 [ 266.921573][T10039] copy_to_user_nofault+0x86/0x140 [ 266.921597][T10039] ? bpf_trace_run4+0x244/0x590 [ 266.921615][T10039] bpf_prog_9595256994ab4478+0x42/0x44 [ 266.921630][T10039] bpf_trace_run4+0x334/0x590 [ 266.921649][T10039] ? psi_group_change+0xb88/0x11c0 [ 266.921675][T10039] ? __pfx_bpf_trace_run4+0x10/0x10 [ 266.921698][T10039] ? __pfx_probe_sched_switch+0x10/0x10 [ 266.921717][T10039] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 266.921736][T10039] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 266.921760][T10039] __traceiter_sched_switch+0x98/0xd0 [ 266.921781][T10039] __schedule+0x2591/0x4a60 [ 266.921810][T10039] ? __pfx___schedule+0x10/0x10 [ 266.921830][T10039] ? __pfx_lock_release+0x10/0x10 [ 266.921856][T10039] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 266.921879][T10039] ? schedule+0x90/0x320 [ 266.921896][T10039] schedule+0x14b/0x320 [ 266.921915][T10039] schedule_timeout+0xb0/0x310 [ 266.921937][T10039] ? __pfx_schedule_timeout+0x10/0x10 [ 266.921965][T10039] ? prepare_to_wait_exclusive+0x81/0x220 [ 266.921990][T10039] __skb_wait_for_more_packets+0x399/0x600 [ 266.922017][T10039] ? __pfx___skb_wait_for_more_packets+0x10/0x10 [ 266.922038][T10039] ? __local_bh_enable_ip+0x168/0x200 [ 266.922064][T10039] ? __pfx_receiver_wake_function+0x10/0x10 [ 266.922087][T10039] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 266.922113][T10039] __skb_recv_udp+0x8a2/0xb40 [ 266.922137][T10039] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 266.922159][T10039] ? __pfx___skb_recv_udp+0x10/0x10 [ 266.922183][T10039] ? mark_lock+0x9a/0x350 [ 266.922206][T10039] udp_recvmsg+0x21b/0x1800 [ 266.922234][T10039] ? __pfx___might_resched+0x10/0x10 [ 266.922262][T10039] ? __pfx_udp_recvmsg+0x10/0x10 [ 266.922281][T10039] ? aa_sk_perm+0x96d/0xab0 [ 266.922300][T10039] ? sock_rps_record_flow+0x1a/0x400 [ 266.922315][T10039] ? inet_recvmsg+0xde/0x2d0 [ 266.922332][T10039] ? __pfx_udp_recvmsg+0x10/0x10 [ 266.922349][T10039] inet_recvmsg+0x22e/0x2d0 [ 266.922368][T10039] ? __pfx_inet_recvmsg+0x10/0x10 [ 266.922383][T10039] ? aa_sock_msg_perm+0x91/0x160 [ 266.922402][T10039] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 266.922423][T10039] ? security_socket_recvmsg+0x90/0xb0 [ 266.922447][T10039] sock_recvmsg+0x1ae/0x280 [ 266.922467][T10039] ____sys_recvmsg+0x1db/0x470 [ 266.922493][T10039] ? __pfx_____sys_recvmsg+0x10/0x10 [ 266.922527][T10039] do_recvmmsg+0x474/0xae0 [ 266.922551][T10039] ? __pfx_lock_release+0x10/0x10 [ 266.922574][T10039] ? __pfx_do_recvmmsg+0x10/0x10 [ 266.922605][T10039] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 266.922630][T10039] ? ksys_write+0x23e/0x2c0 [ 266.922648][T10039] ? __pfx_lock_release+0x10/0x10 [ 266.922673][T10039] ? vfs_write+0x7c4/0xc90 [ 266.922694][T10039] ? __mutex_unlock_slowpath+0x21d/0x750 [ 266.922719][T10039] ? __fget_files+0x3f6/0x470 [ 266.922746][T10039] __x64_sys_recvmmsg+0x199/0x250 [ 266.922770][T10039] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 266.922793][T10039] ? do_syscall_64+0x100/0x230 [ 266.922812][T10039] ? do_syscall_64+0xb6/0x230 [ 266.922839][T10039] do_syscall_64+0xf3/0x230 [ 266.922855][T10039] ? clear_bhb_loop+0x35/0x90 [ 266.922877][T10039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.922900][T10039] RIP: 0033:0x7fb9ad17def9 [ 266.922914][T10039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.922929][T10039] RSP: 002b:00007fb9ae024038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 266.922946][T10039] RAX: ffffffffffffffda RBX: 00007fb9ad335f80 RCX: 00007fb9ad17def9 [ 266.922959][T10039] RDX: 0000000000000001 RSI: 0000000020000b40 RDI: 0000000000000003 [ 266.922970][T10039] RBP: 00007fb9ae024090 R08: 0000000000000000 R09: 0000000000000000 [ 266.922981][T10039] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 266.922991][T10039] R13: 0000000000000000 R14: 00007fb9ad335f80 R15: 00007ffdcec127c8 [ 266.923011][T10039] [ 268.027704][T10039] CPU: 0 UID: 0 PID: 10039 Comm: syz.3.1625 Not tainted 6.11.0-rc6-syzkaller-01330-gbf73478b539b #0 [ 268.038451][T10039] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 268.048584][T10039] Call Trace: [ 268.051876][T10039] [ 268.054805][T10039] dump_stack_lvl+0x241/0x360 [ 268.059469][T10039] ? __pfx_dump_stack_lvl+0x10/0x10 [ 268.064648][T10039] ? __pfx__printk+0x10/0x10 [ 268.069218][T10039] ? __pfx_lock_acquire+0x10/0x10 [ 268.074225][T10039] ? bpf_trace_run4+0x244/0x590 [ 268.079057][T10039] should_fail_ex+0x3b0/0x4e0 [ 268.083717][T10039] copy_to_user_nofault+0x86/0x140 [ 268.088809][T10039] ? bpf_trace_run4+0x244/0x590 [ 268.093665][T10039] bpf_prog_9595256994ab4478+0x42/0x44 [ 268.099104][T10039] bpf_trace_run4+0x334/0x590 [ 268.103756][T10039] ? psi_group_change+0xb88/0x11c0 [ 268.108841][T10039] ? __pfx_bpf_trace_run4+0x10/0x10 [ 268.114103][T10039] ? __pfx_probe_sched_switch+0x10/0x10 [ 268.119648][T10039] ? tracing_record_taskinfo_sched_switch+0x7b/0x390 [ 268.126383][T10039] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 268.132439][T10039] __traceiter_sched_switch+0x98/0xd0 [ 268.137806][T10039] __schedule+0x2591/0x4a60 [ 268.142294][T10039] ? __pfx___schedule+0x10/0x10 [ 268.147139][T10039] ? __pfx_lock_release+0x10/0x10 [ 268.152158][T10039] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 268.158470][T10039] ? schedule+0x90/0x320 [ 268.162691][T10039] schedule+0x14b/0x320 [ 268.166827][T10039] schedule_timeout+0xb0/0x310 [ 268.171575][T10039] ? __pfx_schedule_timeout+0x10/0x10 [ 268.176936][T10039] ? prepare_to_wait_exclusive+0x81/0x220 [ 268.182639][T10039] __skb_wait_for_more_packets+0x399/0x600 [ 268.188425][T10039] ? __pfx___skb_wait_for_more_packets+0x10/0x10 [ 268.194729][T10039] ? __local_bh_enable_ip+0x168/0x200 [ 268.200077][T10039] ? __pfx_receiver_wake_function+0x10/0x10 [ 268.205947][T10039] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 268.211643][T10039] __skb_recv_udp+0x8a2/0xb40 [ 268.216301][T10039] ? __pfx_sk_busy_loop_end+0x10/0x10 [ 268.221735][T10039] ? __pfx___skb_recv_udp+0x10/0x10 [ 268.226911][T10039] ? mark_lock+0x9a/0x350 [ 268.231221][T10039] udp_recvmsg+0x21b/0x1800 [ 268.235696][T10039] ? __pfx___might_resched+0x10/0x10 [ 268.240977][T10039] ? __pfx_udp_recvmsg+0x10/0x10 [ 268.245985][T10039] ? aa_sk_perm+0x96d/0xab0 [ 268.250468][T10039] ? sock_rps_record_flow+0x1a/0x400 [ 268.255734][T10039] ? inet_recvmsg+0xde/0x2d0 [ 268.260306][T10039] ? __pfx_udp_recvmsg+0x10/0x10 [ 268.265242][T10039] inet_recvmsg+0x22e/0x2d0 [ 268.269731][T10039] ? __pfx_inet_recvmsg+0x10/0x10 [ 268.274739][T10039] ? aa_sock_msg_perm+0x91/0x160 [ 268.279665][T10039] ? bpf_lsm_socket_recvmsg+0x9/0x10 [ 268.284935][T10039] ? security_socket_recvmsg+0x90/0xb0 [ 268.290378][T10039] sock_recvmsg+0x1ae/0x280 [ 268.294881][T10039] ____sys_recvmsg+0x1db/0x470 [ 268.299626][T10039] ? __pfx_____sys_recvmsg+0x10/0x10 [ 268.304963][T10039] do_recvmmsg+0x474/0xae0 [ 268.309389][T10039] ? __pfx_lock_release+0x10/0x10 [ 268.314398][T10039] ? __pfx_do_recvmmsg+0x10/0x10 [ 268.319320][T10039] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 268.325212][T10039] ? ksys_write+0x23e/0x2c0 [ 268.329700][T10039] ? __pfx_lock_release+0x10/0x10 [ 268.334749][T10039] ? vfs_write+0x7c4/0xc90 [ 268.339145][T10039] ? __mutex_unlock_slowpath+0x21d/0x750 [ 268.344780][T10039] ? __fget_files+0x3f6/0x470 [ 268.349446][T10039] __x64_sys_recvmmsg+0x199/0x250 [ 268.354470][T10039] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 268.360032][T10039] ? do_syscall_64+0x100/0x230 [ 268.364792][T10039] ? do_syscall_64+0xb6/0x230 [ 268.369447][T10039] do_syscall_64+0xf3/0x230 [ 268.373929][T10039] ? clear_bhb_loop+0x35/0x90 [ 268.378586][T10039] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 268.384457][T10039] RIP: 0033:0x7fb9ad17def9 [ 268.388849][T10039] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 268.408449][T10039] RSP: 002b:00007fb9ae024038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 268.416846][T10039] RAX: ffffffffffffffda RBX: 00007fb9ad335f80 RCX: 00007fb9ad17def9 [ 268.424817][T10039] RDX: 0000000000000001 RSI: 0000000020000b40 RDI: 0000000000000003 [ 268.432853][T10039] RBP: 00007fb9ae024090 R08: 0000000000000000 R09: 0000000000000000 [ 268.440804][T10039] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000001 [ 268.448758][T10039] R13: 0000000000000000 R14: 00007fb9ad335f80 R15: 00007ffdcec127c8 [ 268.456713][T10039]