last executing test programs: 2.256047968s ago: executing program 3 (id=2090): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000240)={'broute\x00', 0x0, 0x0, 0x0, [0xf1, 0x8, 0x7, 0x619347a8, 0x5, 0x3]}, &(0x7f0000000340)=0x78) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x8, 0x6, 0x678, 0x0, 0x370, 0x270, 0xd0, 0x488, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x5a8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @private2, [], [], 'pimreg0\x00', 'nicvf0\x00'}, 0x0, 0x178, 0x1a0, 0x0, {0x5002}, [@common=@unspec=@physdev={{0x68}, {'ipvlan0\x00', {}, 'netpci0\x00', {}, 0x0, 0x15}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_bridge\x00', {}, 'gretap0\x00', {}, 0x0, 0x10}}]}, @common=@unspec=@CLASSIFY={0x28}}, {{@ipv6={@local, @rand_addr=' \x01\x00', [], [], 'veth1_to_batadv\x00', 'dvmrp1\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@dev, @ipv4=@loopback}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@eui64={{0x28}}]}, @inet=@TOS={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d8) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) (async) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="0180c200908600000180c200000008004500001c00000000001190780800001ce0000001000017c10008"], 0x0) close(r4) r5 = socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) (async) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x36) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) pselect6(0x0, 0x0, 0x0, &(0x7f00000010c0)={0x2, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, &(0x7f0000000300)={0x0, 0x3938700}, 0x0) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000140), &(0x7f0000000240)=0x4) (async) getsockopt$SO_J1939_SEND_PRIO(0xffffffffffffffff, 0x6b, 0x3, &(0x7f0000000140), &(0x7f0000000240)=0x4) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r6, &(0x7f00000001c0)=""/64, 0x40) sendmsg$IPSET_CMD_SAVE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=ANY=[@ANYRESHEX=r3], 0x1c}, 0x1, 0x0, 0x0, 0x24008000}, 0x40) mmap(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x30, 0xffffffffffffffff, 0x78492000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[], 0x7c}}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002003007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000071000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r8, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800a000100717565756500000014000280080004400000001006000340000300000900010073797a30000000000900020073797a"], 0xa0}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000000000020000004c000480240001800b000100736f636b657400001400028008000240000000030800014000000002240001800a000100717565756500000014000280080004400000001006000340000300000900010073797a30000000000900020073797a"], 0xa0}}, 0x0) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) (async) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000b80)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/233, 0xe9, 0x1, &(0x7f0000000000)=""/36, 0x24}, &(0x7f0000000bc0)=0x40) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000b80)={&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, &(0x7f0000000380)=""/233, 0xe9, 0x1, &(0x7f0000000000)=""/36, 0x24}, &(0x7f0000000bc0)=0x40) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x4, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000020d700000000000095"], &(0x7f00000000c0)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f00, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1.918059779s ago: executing program 1 (id=2099): sendmsg$IEEE802154_START_REQ(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)=ANY=[@ANYBLOB="19517b", @ANYRES16=0x0, @ANYBLOB="000400000000000000000d0000000500190005000000050018004d00000006000a0001"], 0x2c}, 0x1, 0x0, 0x0, 0x18000}, 0x4004011) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x60, &(0x7f0000000080)={'filter\x00', 0x1058, [{}, {0x0, 0x100000000000000}]}, 0x68) socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x5, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000540)=[@in6={0xa, 0x0, 0x800, @mcast2, 0x4}], 0x1c) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, 0x0, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r4, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x12, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711219000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYRES8=r5], 0x0, 0x5b4230ff, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf739, @void, @value}, 0x94) r6 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=r3, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r6, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) socket$nl_rdma(0x10, 0x3, 0x14) 1.891080543s ago: executing program 3 (id=2100): r0 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x8000) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000080000000000000000000008500000022000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000d4448d49850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0x18000000000002a0, 0x4f, 0x0, &(0x7f00000002c0)="d2ff03076003008cb89e08f086dd", 0x0, 0xd5b1, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x78, 0x78, 0x9, [@union={0x0, 0x3, 0x0, 0x5, 0x0, 0x2, [{0xb, 0x1, 0x6}, {0x1, 0x3, 0x2}, {0x9, 0x4, 0x6}]}, @union={0xf, 0x5, 0x0, 0x5, 0x0, 0x5, [{0x0, 0x0, 0xeb6}, {0x1, 0x3, 0x3}, {0x2, 0x5, 0x4}, {0x7, 0x4, 0x81}, {0xd, 0x4, 0x8}]}]}, {0x0, [0x61, 0x72866bce230f5154, 0x5f, 0x61, 0x0, 0x5f, 0x30]}}, &(0x7f0000000500)=""/121, 0x99, 0x79, 0x1, 0x56, 0x0, @void, @value}, 0x28) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000280)=@o_path={&(0x7f0000000240)='./file0\x00', 0x0, 0x4018, r0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@bloom_filter={0x1e, 0x9, 0x1, 0x10000, 0xa, r2, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x1, 0xd, @void, @value, @void, @value}, 0x50) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) close(r3) recvmsg$unix(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)=[{&(0x7f0000001600)=""/18, 0x12}], 0x1, &(0x7f0000001880)}, 0x40) socket$kcm(0x2, 0xa, 0x2) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x80001, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000004000000000000000000009500000000000000"], &(0x7f0000000440)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0x5}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x87) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0xb4}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 1.866216035s ago: executing program 0 (id=2102): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e0000000000000000001800028008"], 0x44}}, 0x10) 1.521224807s ago: executing program 3 (id=2104): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) 1.363429546s ago: executing program 1 (id=2105): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x1c1341, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x800) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x8004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@private0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x30, 0x0, 0x0, 0xee01}, {0x0, 0x300, 0x0, 0x0, 0x4}}}, 0xb8}}, 0x0) 1.34057749s ago: executing program 0 (id=2107): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000ff0004ffffff0806000108100604"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) write$ppp(r2, &(0x7f00000005c0)="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", 0xaf6) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(r5, 0x8916, &(0x7f0000000000)={@dev, 0x0, r7}) tee(r1, r4, 0xaf5, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx2\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) recvmmsg$unix(r10, &(0x7f0000003700)=[{{0x0, 0x700, 0x0, 0x0, 0x0, 0x500}}], 0x600, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x4, &(0x7f0000000300)=0x6, 0x4) 1.252451266s ago: executing program 3 (id=2109): unshare(0x2c060000) unshare(0x24020400) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e) close(0x3) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) r3 = socket$l2tp(0x2, 0x2, 0x73) close(r3) unshare(0x62040200) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0xfd, 0x6, 0x0, @loopback, @multicast2}, {{0x4e20, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x4, 0x2}}}}}}, 0x0) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x0, 0x20, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x8090}, 0x410c2) socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="70f49b1400000038d8a45ec3b395492a0fb351c9526164f5f8358aa9c1240486b1be9dbdd58aeef35e4b6aafc91531ce760113b61871d1868be8ef977f04b7d969c15a7669373ca0750ee1ccd4880dda92c8568ecf0d31359b5f6180a2091d9d32a84d5332cb253f9ec2fcf2370525040520d52801751205d1790b33295575dea985cef79e361280dd413852625ad453c5b8c98007119df62553731f0568769864c337dea454036038116b33b24898a49131cf381c65eeb69cd3d05a784a38b06cc5002f000000"], 0x14}}, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) pipe(0x0) write(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 1.18267661s ago: executing program 1 (id=2110): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300200095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.10186723s ago: executing program 1 (id=2112): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x50, 0x30, 0x1, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_mpls={0x38, 0x1, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8, 0x5, 0x4dcbf5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x50}}, 0x8000) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {}, {0x5, 0xf}}}, 0x24}}, 0x40004) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="030000000492fd74394be18c390000000400000009fffffffffd0000", @ANYRES32=0x1, @ANYBLOB='\t\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="05000000010000000300"/28], 0x50) listen(r1, 0x5) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000000c0)={r6, &(0x7f0000000380)="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", &(0x7f0000000500)=""/76, 0x4}, 0x20) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r1, 0x8983, &(0x7f0000000580)={0x6, 'bridge_slave_1\x00', {0x7}, 0xd587}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="343f3f2d1d8944e524e895f71d000000", @ANYRES16=r7, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r5, @ANYBLOB="080026006c09000008002700010000000800a0006c090000"], 0x34}}, 0x40) r8 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000940)=@newqdisc={0x28, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x4}]}, 0x28}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) ioctl$sock_inet_SIOCGIFNETMASK(r1, 0x891b, &(0x7f0000000080)={'netdevsim0\x00', {0x2, 0x0, @empty}}) getsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x27) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r4) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000000)={r10, 0x6, 0x30}, &(0x7f0000000040)=0xc) 1.013169933s ago: executing program 0 (id=2113): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x400c0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x50) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a00308000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB='\x00'/104], 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000780)=ANY=[@ANYRESOCT=r3], 0xb8}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r4, 0x0, 0x4004040) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r4) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400002059def8d141515ef086ced66f1dff65830bdb945879216d472b2a0be22c4560ddf3d4d9e98b9168d4b6c82f1994743e73a3af9d71d381be3b0c74996646d55b", @ANYRES16=r7, @ANYBLOB="2503000000000000000008000000"], 0x14}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa802, 0x0) close(r10) socketpair(0x6, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) 880.79658ms ago: executing program 2 (id=2115): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000001c0)=@ipv6_newroute={0x1c, 0x18, 0x111, 0xffffffff, 0x0, {0xa, 0x60, 0x0, 0x0, 0xff, 0x0, 0x0, 0x6}}, 0x1c}}, 0x0) 822.546999ms ago: executing program 0 (id=2116): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)={0x40, r1, 0x1, 0xfffffffd, 0x25dfdbfe, {0x1, 0x0, 0xffff}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x1c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x40}}, 0x0) mmap(&(0x7f000064c000/0x2000)=nil, 0x2000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba9432}) readv(r2, &(0x7f00000001c0)=[{&(0x7f0000001400)=""/227, 0x10}], 0x4) r3 = socket$kcm(0x2, 0xa, 0x2) socket$igmp6(0xa, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 805.648536ms ago: executing program 2 (id=2117): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0x0, 0x29, 0x0, &(0x7f0000000380)="cc9f4d42d0e005000000bb03d0b5afd0", 0xfffffffffffffffd, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 670.663062ms ago: executing program 2 (id=2118): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$inet6(0xa, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$xdp(0x2c, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2a41, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x403, 0xfffffffc, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) 627.988122ms ago: executing program 2 (id=2119): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socket$l2tp(0x2, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000850000002a000000180100002025642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000089cdc832850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$xdp(0x2c, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=@framed={{}, [@printk={@i, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb0}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000012000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00', @ANYRES32=r0], 0x28}}, 0x802) 614.009689ms ago: executing program 4 (id=2120): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_LISTDEF(r2, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="040025bd7000ffdbdf250600000014000600ff02000000000000000000000000000108000c0003000000140005000000000000000000000108000c0002000000000000000000"], 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x80) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250100050005000400020000006b675c95da68b48a2fb281edc6c47dd90420fb6068e5b16a69987150c6fc3b9454aac8a8b76a728836085f5c875c9ece76a74834c7c571dd0fcd597a37357b83055af4246451b07cc69da3a4a4065df279f10e60873355ee9fb3c213ec3f7d6553b25ae3137d324edb08cfaaffaa2ea1"], 0x1c}}, 0x4844) 478.706899ms ago: executing program 4 (id=2121): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x12, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bb000000180100002020702500000000002020207b1af8ff00000000bfa100000001020007010000f8ffffffb702000008000000b703000000000000850000003100000095"], &(0x7f0000000380)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41000, 0x60, '\x00', 0x0, @cgroup_sock_addr=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xcc84, @void, @value}, 0x94) 472.413317ms ago: executing program 4 (id=2122): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a"], 0xf0}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) 444.724341ms ago: executing program 2 (id=2123): r0 = socket$inet6(0xa, 0x2, 0x3a) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="06000000040000006c0f00000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2], 0x0, 0x4, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={&(0x7f0000000f00)='kfree\x00', r3}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0), 0x0, 0x0, 0x0, 0x2663}, 0x0) syz_emit_ethernet(0x0, 0x0, &(0x7f0000000180)={0x1, 0x1, [0xac1, 0xd28, 0xd74, 0x4bd]}) bpf$MAP_CREATE(0x0, 0x0, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r6}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0xffffffffffffffe4) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffa, @local, 0x4}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000000)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000a00)=ANY=[@ANYBLOB="180000000000000029000000030000001601"], 0x18}}], 0x1, 0x4000084) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404d0c4c731b168d8", @ANYRES16=r7], 0xfc}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000914) 392.003061ms ago: executing program 0 (id=2124): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, 0x0) r2 = socket$inet(0x2, 0x5, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) setsockopt$packet_int(r1, 0x107, 0x17, &(0x7f0000000080)=0x1, 0x4) socket$packet(0x11, 0x2, 0x300) r3 = socket(0x10, 0x803, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(0xffffffffffffffff, 0x0, 0x0) sendto(r3, &(0x7f0000000740)="1200", 0x2, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket(0x11, 0x4, 0x9) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r4}, 0x18) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000001aa80)=ANY=[@ANYBLOB="14000000000000000000010073797a30000000002c007d67dfcd41003fecc010c07115e10000030a0102000000"], 0x74}}, 0x0) openat$cgroup_ro(r0, &(0x7f0000000140)='blkio.bfq.io_queued_recursive\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) r6 = socket$xdp(0x2c, 0x3, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0xe, &(0x7f0000000000)=[{&(0x7f00000001c0)="d8000000180081054e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e1208000b0000000401a80016000800014009001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360d070100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_STARTDAEMON(r8, 0x0, 0x1a, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(r6, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0x0, 0x56, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) 391.747781ms ago: executing program 4 (id=2125): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20042041) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_RTOINFO(r2, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x44, 0x80, 0xfffffffe}, 0x10) 236.960997ms ago: executing program 4 (id=2126): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_CHANNEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000040)={0x54, 0x0, 0x10, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x226}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x27}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x22}, @NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x146}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}]}, 0x54}}, 0x8000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000b40)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x56}]}, &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r2, 0x84, 0x75, 0x0, &(0x7f00000000c0)=0xe) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0xffffff1f, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x590b, 0x10080}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LOCAL={0x14, 0x2, @remote}]}}}, @IFLA_CARRIER={0x5, 0x21, 0x7}]}, 0x50}, 0x1, 0x0, 0x0, 0x4004040}, 0x0) 236.534361ms ago: executing program 3 (id=2127): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0xffffffffffffffff, 0x5a, 0xfffffffffffffffe}, 0x10) connect$llc(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="5300030002"], 0x8) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8840) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) 169.395135ms ago: executing program 1 (id=2128): socket(0x1e, 0x4, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="14000000108c7534f1000000000000000a000000"], 0x14}}, 0x20000080) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='nr0\x00', 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x34, 0x41, 0x107, 0x0, 0x7, {0x2, 0x7c}, [@nested={0x4, 0xfc}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0xd, 0x6, 0x0, 0x0, @str='\x00h\xe2\xe7\f\xf7R\xdd\x00'}, @typed={0x8, 0x7a, 0x0, 0x0, @u32=0x5}]}]}, 0x34}}, 0x4010) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x34, 0x0, &(0x7f0000000240)="0840572d1f40cae31624c58f5054d11fce9f2bf563894788e75ae82ced7adb38315d08fcd1034bd15522d4088d397b96294b6747", 0x0, 0x7, 0x0, 0x0, 0xfffffffffffffea0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmmsg$inet(r0, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) 165.82003ms ago: executing program 2 (id=2129): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = getpid() r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r2}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={r3, r4, 0x0, 0x5, &(0x7f0000000100)='\'\\>&\x00'}, 0x30) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x5, 0x4, 0x8, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_MPP(r6, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, 0x0, 0x200, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x20042041) sendmsg$nl_xfrm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ffffffff0000000000000000000000000000000032000000ac141417000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c001c"], 0x154}}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, &(0x7f0000000180)) setsockopt$inet_sctp6_SCTP_RTOINFO(r7, 0x84, 0x0, &(0x7f00000001c0)={0x0, 0x44, 0x80, 0xfffffffe}, 0x10) r8 = socket$inet(0x2, 0x1, 0x100) r9 = socket$inet_smc(0x2b, 0x1, 0x0) getpeername(r9, 0x0, 0x0) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r8, 0x0, 0x0, 0x11, 0x0, 0x0) r10 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r10, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(r10, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x48014}, 0x20004000) sendmsg$L2TP_CMD_TUNNEL_GET(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x38}, 0x1, 0x0, 0x0, 0xc044885}, 0x200401d4) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f000000b500), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMKSA(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x60, r11, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0xff}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_PMKID={0x14, 0x55, "7295d84d2d550e3423e109c3b7184df2"}, @NL80211_ATTR_FILS_CACHE_ID={0x6}, @NL80211_ATTR_PMK={0x14, 0xfe, "847e482344279ee1378f9f40075820c7"}]}, 0x60}, 0x1, 0x0, 0x0, 0x44804}, 0x0) 34.702501ms ago: executing program 4 (id=2130): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000001823", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x8, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000059c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x2, 0x4001, @dev={0xac, 0x14, 0x14, 0x32}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x200048cc) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r2) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001000)=ANY=[@ANYBLOB="6c00000010001fff01000000000000000006", @ANYRES32=0x0, @ANYBLOB="81ffffff00000000440012800b00010067656e6576650000340002800500090000000000050009000100000005000a000000000005000300f90000000500040040000000050004000800000008000a00", @ANYBLOB="b5"], 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 34.328796ms ago: executing program 0 (id=2131): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x17}}}]}, 0x58}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x18, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1000}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000300)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x17}}}]}, 0x58}}, 0x0) (async) 4.812737ms ago: executing program 3 (id=2132): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="01002bbd7000ffdbdf250100050005000400020000006b675c95da68b48a2fb281edc6c47dd90420fb6068e5b16a69987150c6fc3b9454aac8a8b76a728836085f5c875c9ece76a74834c7c571dd0fcd597a37357b83055af4246451b07cc69da3a4a4065df279f10e60873355ee9fb3c213ec3f7d6553b25ae3137d324edb08cfaaffaa2ea1"], 0x1c}}, 0x4844) 0s ago: executing program 1 (id=2133): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000200000000000000000000060400000000000000010000840000000000000007"], 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000b"], 0x50) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYBLOB="180000000000e3ff000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r1}, &(0x7f0000000180), &(0x7f00000002c0)=r2}, 0x20) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1b, 0x10, &(0x7f0000000780)=@framed={{0x18, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{}, &(0x7f0000000500)=0x2, &(0x7f0000000540)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0xb, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x6c}, [@call={0x85, 0x0, 0x0, 0xc4}, @alu={0x4, 0x1, 0xc, 0x9, 0x6, 0xffffffffffffffe0, 0x10}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3ff}]}, &(0x7f00000001c0)='GPL\x00', 0x9, 0x82, &(0x7f0000000200)=""/130, 0x40f00, 0x4, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x0, 0x8, 0x6, 0x800}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000a80)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x2c8f, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000900000000000000", @ANYRESHEX, @ANYBLOB="000000000000e440000000000000040000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000040000000200"/28], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000640)={{0x1}, 0x0, &(0x7f0000000600)}, 0x20) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000340)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000140)="c7", 0x1}], 0x1, 0x0, 0x0, 0x8054}}], 0x1, 0x4000045) sendto$inet(r5, &(0x7f00000002c0)="cc", 0x1, 0x880, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r5, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) sendto$inet(r5, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="24000000190001090000000000000000021800000002fe010000000008000100ac141400c6a10188fef401950a07905a6c32a7a7"], 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000003c0)={0x0, 0x4}, 0x8) sendto$inet6(r5, &(0x7f0000000180)="931a", 0x2, 0x8840, 0x0, 0x0) close(r5) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0b0000004f000000cc0002000600000005000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000015000000000000000000000000000000000041a42b4dd36884b96af9ef03c13d730f952af9b2259951c60b2ae1288dd551f7d6ac8f13808b4d0f9e000000000000008addf814f14bb7239a15419166a0f3d711b5632ef281a4d699669c5dfca28aa2ef1a4da90d3c94c6a10977abcb20bfb780bc06bb70ccc77cd8b1aaed400d7a4c2d0bf292f140"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)='T', &(0x7f0000000240), 0x4af, r7}, 0x38) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000069000b0000000000000000000000000000001adc080001"], 0x20}}, 0x0) kernel console output (not intermixed with test programs): 19d/0x2d0 [ 166.721625][ T9356] ? __pfx_ksys_write+0x10/0x10 [ 166.721649][ T9356] ? do_syscall_64+0xb6/0x230 [ 166.721672][ T9356] do_syscall_64+0xf3/0x230 [ 166.721690][ T9356] ? clear_bhb_loop+0x45/0xa0 [ 166.721712][ T9356] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.721728][ T9356] RIP: 0033:0x7fa28bf8cc1f [ 166.721744][ T9356] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 166.721757][ T9356] RSP: 002b:00007fa28ce08030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 166.721776][ T9356] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa28bf8cc1f [ 166.721788][ T9356] RDX: 0000000000000001 RSI: 00007fa28ce080a0 RDI: 0000000000000004 [ 166.721799][ T9356] RBP: 00007fa28ce08090 R08: 0000000000000000 R09: 0000000000000000 [ 166.721810][ T9356] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 166.721820][ T9356] R13: 0000000000000000 R14: 00007fa28c1b5fa0 R15: 00007ffd3ce106d8 [ 166.721849][ T9356] [ 166.953813][ T9357] netlink: 'syz.1.1219': attribute type 4 has an invalid length. [ 167.011580][ T9359] ipvlan2: entered promiscuous mode [ 167.021071][ T9359] bridge0: port 1(ipvlan2) entered blocking state [ 167.028563][ T9359] bridge0: port 1(ipvlan2) entered disabled state [ 167.036947][ T9359] ipvlan2: entered allmulticast mode [ 167.043561][ T9359] bridge0: entered allmulticast mode [ 167.051655][ T9359] ipvlan2: left allmulticast mode [ 167.057076][ T9359] bridge0: left allmulticast mode [ 167.093722][ T9365] ipvlan3: entered promiscuous mode [ 167.285724][ T9377] ipvlan2: entered promiscuous mode [ 167.531238][ T9395] __nla_validate_parse: 4 callbacks suppressed [ 167.531256][ T9395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1232'. [ 167.576909][ T9393] ipvlan2: entered promiscuous mode [ 167.660220][ T5150] block nbd10: Receive control failed (result -107) [ 167.674138][ T9402] nbd10: detected capacity change from 0 to 32 [ 167.795501][ T9407] SET target dimension over the limit! [ 167.841801][ T9412] netlink: 'syz.3.1239': attribute type 3 has an invalid length. [ 167.882166][ T9416] ipvlan2: entered promiscuous mode [ 167.888713][ T9416] bridge0: port 1(ipvlan2) entered blocking state [ 167.895591][ T9416] bridge0: port 1(ipvlan2) entered disabled state [ 167.902350][ T9416] ipvlan2: entered allmulticast mode [ 167.909152][ T9416] bridge0: entered allmulticast mode [ 167.917697][ T9416] ipvlan2: left allmulticast mode [ 167.922989][ T9416] bridge0: left allmulticast mode [ 167.985350][ T9412] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1239'. [ 168.041486][ T9412] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1239'. [ 168.098542][ T9425] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1242'. [ 168.429326][ T9441] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1249'. [ 168.464933][ T9445] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1250'. [ 168.474307][ T9445] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1250'. [ 168.474382][ T9447] IPVS: sync thread started: state = MASTER, mcast_ifn = dummy0, syncid = 4, id = 0 [ 168.497696][ T5150] block nbd11: Receive control failed (result -107) [ 168.534618][ T9442] nbd11: detected capacity change from 0 to 32 [ 168.569769][ T9450] ipvlan2: entered promiscuous mode [ 168.578396][ T9450] bridge0: port 1(ipvlan2) entered blocking state [ 168.585980][ T9450] bridge0: port 1(ipvlan2) entered disabled state [ 168.592619][ T9450] ipvlan2: entered allmulticast mode [ 168.598861][ T9450] bridge0: entered allmulticast mode [ 168.607065][ T9450] ipvlan2: left allmulticast mode [ 168.612238][ T9450] bridge0: left allmulticast mode [ 168.794468][ T9457] ipvlan2: entered promiscuous mode [ 168.909681][ T9462] ipvlan2: entered promiscuous mode [ 169.162884][ T9483] ipvlan2: entered promiscuous mode [ 169.296526][ T5150] block nbd12: Receive control failed (result -107) [ 169.323605][ T9496] netlink: 356 bytes leftover after parsing attributes in process `syz.2.1268'. [ 169.344315][ T9496] netlink: 356 bytes leftover after parsing attributes in process `syz.2.1268'. [ 169.354391][ T9493] nbd12: detected capacity change from 0 to 32 [ 169.507300][ T9507] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1274'. [ 169.893508][ T9526] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 170.122680][ T9543] ipvlan2: entered promiscuous mode [ 170.128889][ T9543] bridge0: port 1(ipvlan2) entered blocking state [ 170.136218][ T9543] bridge0: port 1(ipvlan2) entered disabled state [ 170.142874][ T9543] ipvlan2: entered allmulticast mode [ 170.148779][ T9543] bridge0: entered allmulticast mode [ 170.169161][ T9543] ipvlan2: left allmulticast mode [ 170.174395][ T9543] bridge0: left allmulticast mode [ 170.921666][ T9585] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 170.933228][ T5913] hid-generic 0005:10CF:0058.0001: item fetching failed at offset 0/1 [ 170.946565][ T5913] hid-generic 0005:10CF:0058.0001: probe with driver hid-generic failed with error -22 [ 171.279669][ T9599] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.287268][ T9599] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.539530][ T9614] netlink: 'syz.4.1307': attribute type 4 has an invalid length. [ 171.759722][ T9626] netlink: 'syz.1.1315': attribute type 10 has an invalid length. [ 172.018044][ T9642] ipvlan2: entered promiscuous mode [ 172.147127][ T9653] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 172.241896][ T9659] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 172.260026][ T9659] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 172.880706][ T5150] block nbd13: Receive control failed (result -107) [ 172.904743][ T9693] nbd13: detected capacity change from 0 to 32 [ 172.908376][ T9697] __nla_validate_parse: 18 callbacks suppressed [ 172.908395][ T9697] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1347'. [ 173.247855][ T9716] netlink: 84 bytes leftover after parsing attributes in process `syz.0.1356'. [ 173.328147][ T9722] C: renamed from team_slave_0 [ 173.360336][ T9722] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1359'. [ 173.381358][ T9722] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 173.458875][ T9733] netlink: 'syz.0.1361': attribute type 4 has an invalid length. [ 173.492737][ T9736] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1360'. [ 173.515180][ T9736] netlink: 356 bytes leftover after parsing attributes in process `syz.1.1360'. [ 173.654578][ T9744] syzkaller1: entered promiscuous mode [ 173.663427][ T9744] syzkaller1: entered allmulticast mode [ 174.018260][ T9765] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1371'. [ 174.027981][ T9765] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1371'. [ 174.160457][ T9769] netlink: 'syz.0.1374': attribute type 2 has an invalid length. [ 174.795193][ T9805] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1388'. [ 174.897746][ T9809] netlink: 356 bytes leftover after parsing attributes in process `syz.2.1387'. [ 174.907685][ T9809] netlink: 356 bytes leftover after parsing attributes in process `syz.2.1387'. [ 175.282898][ T9833] bridge0: Device is already in use. [ 175.456831][ T9845] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 175.511237][ T9845] bond1: entered promiscuous mode [ 175.520373][ T9845] bond1: entered allmulticast mode [ 175.526514][ T9845] 8021q: adding VLAN 0 to HW filter on device bond1 [ 175.535946][ T9850] netlink: 'syz.3.1404': attribute type 3 has an invalid length. [ 175.685260][ T9859] FAULT_INJECTION: forcing a failure. [ 175.685260][ T9859] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 175.700522][ T9859] CPU: 1 UID: 0 PID: 9859 Comm: syz.0.1407 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 175.700547][ T9859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.700557][ T9859] Call Trace: [ 175.700564][ T9859] [ 175.700571][ T9859] dump_stack_lvl+0x241/0x360 [ 175.700610][ T9859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.700633][ T9859] ? __pfx__printk+0x10/0x10 [ 175.700667][ T9859] should_fail_ex+0x424/0x570 [ 175.700694][ T9859] prepare_alloc_pages+0x220/0x610 [ 175.700722][ T9859] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 175.700745][ T9859] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 175.700771][ T9859] ? __lock_acquire+0xad5/0xd80 [ 175.700799][ T9859] alloc_pages_mpol+0x339/0x690 [ 175.700827][ T9859] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 175.700859][ T9859] vma_alloc_folio_noprof+0x12d/0x260 [ 175.700884][ T9859] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 175.700917][ T9859] folio_prealloc+0x2e/0x170 [ 175.700943][ T9859] do_wp_page+0x14f6/0x5e00 [ 175.700969][ T9859] ? __lock_acquire+0xad5/0xd80 [ 175.700998][ T9859] ? __pfx_do_wp_page+0x10/0x10 [ 175.701025][ T9859] ? __lock_acquire+0xad5/0xd80 [ 175.701047][ T9859] ? do_raw_spin_lock+0x151/0x370 [ 175.701089][ T9859] handle_pte_fault+0xfaf/0x61c0 [ 175.701120][ T9859] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 175.701145][ T9859] ? __pfx_handle_pte_fault+0x10/0x10 [ 175.701174][ T9859] ? rcu_is_watching+0x15/0xb0 [ 175.701198][ T9859] ? __lock_acquire+0xad5/0xd80 [ 175.701228][ T9859] ? __lock_acquire+0xad5/0xd80 [ 175.701250][ T9859] ? do_raw_spin_lock+0x151/0x370 [ 175.701283][ T9859] handle_mm_fault+0x1129/0x1bf0 [ 175.701332][ T9859] ? __pfx_handle_mm_fault+0x10/0x10 [ 175.701354][ T9859] ? follow_page_pte+0xec9/0x15e0 [ 175.701387][ T9859] ? __pfx_find_vma+0x10/0x10 [ 175.701410][ T9859] ? vma_is_secretmem+0xd/0x50 [ 175.701429][ T9859] ? check_vma_flags+0x51b/0x590 [ 175.701458][ T9859] __get_user_pages+0x1adc/0x4180 [ 175.701518][ T9859] ? __pfx___get_user_pages+0x10/0x10 [ 175.701540][ T9859] ? __gup_longterm_locked+0xd86/0x1850 [ 175.701564][ T9859] ? __pfx_down_read_killable+0x10/0x10 [ 175.701595][ T9859] ? __lock_acquire+0xad5/0xd80 [ 175.701629][ T9859] __gup_longterm_locked+0xec1/0x1850 [ 175.701667][ T9859] ? try_get_folio+0xfd/0x6a0 [ 175.701693][ T9859] ? try_grab_folio_fast+0x373/0x500 [ 175.701717][ T9859] ? __pfx___gup_longterm_locked+0x10/0x10 [ 175.701744][ T9859] ? sanity_check_pinned_pages+0x11b2/0x12a0 [ 175.701776][ T9859] gup_fast_fallback+0x2227/0x2980 [ 175.701831][ T9859] ? __pfx_gup_fast_fallback+0x10/0x10 [ 175.701855][ T9859] ? is_bpf_text_address+0x26/0x2a0 [ 175.701873][ T9859] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 175.701898][ T9859] ? kernel_text_address+0xa7/0xe0 [ 175.701923][ T9859] ? __kernel_text_address+0xd/0x40 [ 175.701945][ T9859] ? unwind_get_return_address+0x4d/0x90 [ 175.701967][ T9859] ? arch_stack_walk+0xff/0x150 [ 175.702003][ T9859] ? stack_trace_save+0x11a/0x1d0 [ 175.702024][ T9859] ? is_valid_gup_args+0x124/0x200 [ 175.702050][ T9859] pin_user_pages_fast+0xd2/0x160 [ 175.702077][ T9859] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 175.702112][ T9859] iov_iter_extract_pages+0x3bd/0x5c0 [ 175.702133][ T9859] ? __x64_sys_recvmmsg+0x1ab/0x260 [ 175.702159][ T9859] extract_iter_to_sg+0xebc/0x2680 [ 175.702199][ T9859] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 175.702242][ T9859] ? __asan_memset+0x23/0x50 [ 175.702261][ T9859] af_alg_get_rsgl+0x41e/0x860 [ 175.702303][ T9859] skcipher_recvmsg+0x3fa/0x1250 [ 175.702347][ T9859] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 175.702372][ T9859] ? __import_iovec+0x585/0x830 [ 175.702388][ T9859] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 175.702411][ T9859] sock_recvmsg_nosec+0x18e/0x1d0 [ 175.702441][ T9859] ____sys_recvmsg+0x3d4/0x480 [ 175.702470][ T9859] ? __pfx_____sys_recvmsg+0x10/0x10 [ 175.702514][ T9859] do_recvmmsg+0x428/0xab0 [ 175.702549][ T9859] ? __pfx_do_recvmmsg+0x10/0x10 [ 175.702593][ T9859] ? rcu_read_lock_any_held+0xbb/0x160 [ 175.702613][ T9859] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 175.702636][ T9859] ? vfs_write+0xb29/0xd10 [ 175.702662][ T9859] ? ksys_write+0x24e/0x2d0 [ 175.702684][ T9859] ? __mutex_unlock_slowpath+0x229/0x800 [ 175.702712][ T9859] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 175.702729][ T9859] ? __fget_files+0x2a/0x420 [ 175.702768][ T9859] __x64_sys_recvmmsg+0x1ab/0x260 [ 175.702791][ T9859] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 175.702818][ T9859] ? do_syscall_64+0xb6/0x230 [ 175.702838][ T9859] do_syscall_64+0xf3/0x230 [ 175.702856][ T9859] ? clear_bhb_loop+0x45/0xa0 [ 175.702876][ T9859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.702891][ T9859] RIP: 0033:0x7f68a618e169 [ 175.702907][ T9859] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.702920][ T9859] RSP: 002b:00007f68a6f39038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 175.702937][ T9859] RAX: ffffffffffffffda RBX: 00007f68a63b5fa0 RCX: 00007f68a618e169 [ 175.702949][ T9859] RDX: 000000000000001e RSI: 0000200000000240 RDI: 0000000000000004 [ 175.702960][ T9859] RBP: 00007f68a6f39090 R08: 0000000000000000 R09: 0000000000000000 [ 175.702970][ T9859] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 175.702979][ T9859] R13: 0000000000000000 R14: 00007f68a63b5fa0 R15: 00007ffee6fd2448 [ 175.703007][ T9859] [ 176.294318][ T9869] ipvlan2: entered promiscuous mode [ 176.301629][ T9869] bridge0: port 1(ipvlan2) entered blocking state [ 176.308457][ T9869] bridge0: port 1(ipvlan2) entered disabled state [ 176.315126][ T9869] ipvlan2: entered allmulticast mode [ 176.320439][ T9869] bridge0: entered allmulticast mode [ 176.328119][ T9869] ipvlan2: left allmulticast mode [ 176.333780][ T9869] bridge0: left allmulticast mode [ 176.762450][ T9894] ipvlan2: entered promiscuous mode [ 176.947301][ T9901] ipvlan2: entered promiscuous mode [ 176.989157][ T9905] ipvlan2: entered promiscuous mode [ 177.193145][ T9916] ipvlan3: entered promiscuous mode [ 177.363696][ T9924] ipvlan3: entered promiscuous mode [ 177.768083][ T5150] block nbd14: Receive control failed (result -107) [ 177.814208][ T9943] nbd14: detected capacity change from 0 to 32 [ 177.826135][ T9952] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 178.042793][ T9960] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20000 [ 178.087009][ T9963] ipvlan2: entered promiscuous mode [ 178.093224][ T9963] bridge0: port 1(ipvlan2) entered blocking state [ 178.100333][ T9963] bridge0: port 1(ipvlan2) entered disabled state [ 178.110162][ T9963] ipvlan2: entered allmulticast mode [ 178.132836][ T9963] bridge0: entered allmulticast mode [ 178.146474][ T9963] ipvlan2: left allmulticast mode [ 178.154676][ T9963] bridge0: left allmulticast mode [ 178.197560][ T9968] FAULT_INJECTION: forcing a failure. [ 178.197560][ T9968] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 178.213149][ T9968] CPU: 0 UID: 0 PID: 9968 Comm: syz.3.1452 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 178.213175][ T9968] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 178.213185][ T9968] Call Trace: [ 178.213193][ T9968] [ 178.213199][ T9968] dump_stack_lvl+0x241/0x360 [ 178.213230][ T9968] ? __pfx_dump_stack_lvl+0x10/0x10 [ 178.213252][ T9968] ? __pfx__printk+0x10/0x10 [ 178.213288][ T9968] should_fail_ex+0x424/0x570 [ 178.213314][ T9968] _copy_from_user+0x2d/0xb0 [ 178.213333][ T9968] copy_msghdr_from_user+0xb3/0x580 [ 178.213364][ T9968] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 178.213387][ T9968] ? __fget_files+0x2a/0x420 [ 178.213414][ T9968] ? __fget_files+0x2a/0x420 [ 178.213447][ T9968] __sys_sendmsg+0x20a/0x360 [ 178.213475][ T9968] ? __pfx___sys_sendmsg+0x10/0x10 [ 178.213549][ T9968] ? do_syscall_64+0xb6/0x230 [ 178.213571][ T9968] do_syscall_64+0xf3/0x230 [ 178.213589][ T9968] ? clear_bhb_loop+0x45/0xa0 [ 178.213609][ T9968] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 178.213626][ T9968] RIP: 0033:0x7f932598e169 [ 178.213641][ T9968] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 178.213662][ T9968] RSP: 002b:00007f932679d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 178.213681][ T9968] RAX: ffffffffffffffda RBX: 00007f9325bb5fa0 RCX: 00007f932598e169 [ 178.213693][ T9968] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 178.213704][ T9968] RBP: 00007f932679d090 R08: 0000000000000000 R09: 0000000000000000 [ 178.213715][ T9968] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 178.213725][ T9968] R13: 0000000000000000 R14: 00007f9325bb5fa0 R15: 00007ffd4ea7c0e8 [ 178.213754][ T9968] [ 178.449428][ T9974] __nla_validate_parse: 13 callbacks suppressed [ 178.449448][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1454'. [ 178.466616][ T9974] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1454'. [ 178.539377][ T9974] netlink: 'syz.3.1454': attribute type 33 has an invalid length. [ 178.547766][ T9974] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1454'. [ 178.682990][ T9982] netlink: 'syz.3.1458': attribute type 4 has an invalid length. [ 178.868292][ T9997] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1463'. [ 179.028013][T10005] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1466'. [ 179.045495][T10005] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1466'. [ 179.059668][T10005] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 179.102477][T10010] netlink: 'syz.3.1465': attribute type 1 has an invalid length. [ 179.165592][T10012] netlink: 'syz.1.1468': attribute type 2 has an invalid length. [ 179.647439][T10031] netlink: 'syz.1.1476': attribute type 1 has an invalid length. [ 179.656290][T10031] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1476'. [ 179.683896][T10031] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1476'. [ 179.832742][T10037] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1480'. [ 180.365476][T10041] geneve1: left allmulticast mode [ 180.414823][T10041] xfrm1: left promiscuous mode [ 180.419781][T10041] xfrm1: left allmulticast mode [ 180.428414][T10041] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.437637][T10041] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.446539][T10041] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.455510][T10041] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.465767][T10041] geneve3: left promiscuous mode [ 180.473604][T10041] gtp0: left promiscuous mode [ 180.482734][T10041] bond1: left promiscuous mode [ 180.488012][T10041] bond1: left allmulticast mode [ 180.529951][T10055] netlink: 'syz.1.1483': attribute type 4 has an invalid length. [ 180.813513][T10080] ipvlan2: entered promiscuous mode [ 180.919182][T10088] netlink: 'syz.2.1493': attribute type 1 has an invalid length. [ 180.930527][T10088] netlink: 'syz.2.1493': attribute type 2 has an invalid length. [ 180.992765][T10084] wg2: entered promiscuous mode [ 181.002863][T10084] wg2: entered allmulticast mode [ 181.057504][T10093] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1495'. [ 181.242573][T10100] netlink: 'syz.3.1499': attribute type 4 has an invalid length. [ 181.533531][T10119] bridge0: Device is already in use. [ 181.801456][T10134] FAULT_INJECTION: forcing a failure. [ 181.801456][T10134] name failslab, interval 1, probability 0, space 0, times 0 [ 181.815311][T10134] CPU: 1 UID: 0 PID: 10134 Comm: syz.0.1511 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 181.815336][T10134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.815346][T10134] Call Trace: [ 181.815354][T10134] [ 181.815361][T10134] dump_stack_lvl+0x241/0x360 [ 181.815402][T10134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.815425][T10134] ? __pfx__printk+0x10/0x10 [ 181.815453][T10134] ? __pfx___might_resched+0x10/0x10 [ 181.815479][T10134] should_fail_ex+0x424/0x570 [ 181.815505][T10134] should_failslab+0xac/0x100 [ 181.815529][T10134] __kmalloc_cache_noprof+0x73/0x370 [ 181.815550][T10134] ? tcf_proto_create+0x62/0x370 [ 181.815576][T10134] tcf_proto_create+0x62/0x370 [ 181.815600][T10134] tc_new_tfilter+0x15e8/0x1a90 [ 181.815644][T10134] ? __pfx_tc_new_tfilter+0x10/0x10 [ 181.815676][T10134] ? __lock_acquire+0xad5/0xd80 [ 181.815715][T10134] ? __pfx_tc_new_tfilter+0x10/0x10 [ 181.815736][T10134] rtnetlink_rcv_msg+0x80f/0xd70 [ 181.815751][T10134] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 181.815773][T10134] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 181.815787][T10134] ? __lock_acquire+0xad5/0xd80 [ 181.815821][T10134] netlink_rcv_skb+0x208/0x480 [ 181.815841][T10134] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 181.815859][T10134] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 181.815896][T10134] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.815916][T10134] ? netlink_deliver_tap+0x2e/0x1b0 [ 181.815936][T10134] netlink_unicast+0x7f8/0x9a0 [ 181.815970][T10134] ? __pfx_netlink_unicast+0x10/0x10 [ 181.815996][T10134] ? skb_put+0x114/0x1f0 [ 181.816020][T10134] netlink_sendmsg+0x8c3/0xcd0 [ 181.816058][T10134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.816080][T10134] ? aa_sock_msg_perm+0x91/0x160 [ 181.816110][T10134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.816125][T10134] __sock_sendmsg+0x221/0x270 [ 181.816154][T10134] ____sys_sendmsg+0x523/0x860 [ 181.816185][T10134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.816203][T10134] ? __fget_files+0x2a/0x420 [ 181.816234][T10134] ? __fget_files+0x2a/0x420 [ 181.816268][T10134] __sys_sendmsg+0x271/0x360 [ 181.816294][T10134] ? __pfx___sys_sendmsg+0x10/0x10 [ 181.816374][T10134] ? do_syscall_64+0xb6/0x230 [ 181.816396][T10134] do_syscall_64+0xf3/0x230 [ 181.816415][T10134] ? clear_bhb_loop+0x45/0xa0 [ 181.816435][T10134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.816451][T10134] RIP: 0033:0x7f68a618e169 [ 181.816473][T10134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.816487][T10134] RSP: 002b:00007f68a6f39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.816511][T10134] RAX: ffffffffffffffda RBX: 00007f68a63b5fa0 RCX: 00007f68a618e169 [ 181.816524][T10134] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 181.816535][T10134] RBP: 00007f68a6f39090 R08: 0000000000000000 R09: 0000000000000000 [ 181.816545][T10134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.816555][T10134] R13: 0000000000000000 R14: 00007f68a63b5fa0 R15: 00007ffee6fd2448 [ 181.816585][T10134] [ 182.587913][T10165] ipvlan2: entered promiscuous mode [ 182.606865][ T5150] block nbd15: Receive control failed (result -107) [ 182.631326][T10170] netlink: 'syz.1.1523': attribute type 1 has an invalid length. [ 182.646395][T10163] nbd15: detected capacity change from 0 to 32 [ 182.684458][T10167] wg2: entered promiscuous mode [ 182.700591][T10167] wg2: entered allmulticast mode [ 182.863171][T10185] sctp: [Deprecated]: syz.0.1527 (pid 10185) Use of int in max_burst socket option deprecated. [ 182.863171][T10185] Use struct sctp_assoc_value instead [ 182.905020][T10176] can: request_module (can-proto-0) failed. [ 183.179689][T10206] ipvlan3: entered promiscuous mode [ 183.187063][T10204] syz.0.1538: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 183.215255][T10204] CPU: 1 UID: 0 PID: 10204 Comm: syz.0.1538 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 183.215286][T10204] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.215299][T10204] Call Trace: [ 183.215307][T10204] [ 183.215316][T10204] dump_stack_lvl+0x241/0x360 [ 183.215351][T10204] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.215376][T10204] ? __pfx__printk+0x10/0x10 [ 183.215400][T10204] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 183.215431][T10204] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 183.215456][T10204] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 183.215483][T10204] warn_alloc+0x27c/0x410 [ 183.215505][T10204] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 183.215534][T10204] ? __pfx_warn_alloc+0x10/0x10 [ 183.215553][T10204] ? kasan_save_track+0x3f/0x80 [ 183.215573][T10204] ? __kasan_kmalloc+0x9d/0xb0 [ 183.215594][T10204] ? xsk_setsockopt+0x449/0x840 [ 183.215619][T10204] ? do_sock_setsockopt+0x3b1/0x710 [ 183.215640][T10204] ? __x64_sys_setsockopt+0x1ee/0x280 [ 183.215659][T10204] ? do_syscall_64+0xf3/0x230 [ 183.215679][T10204] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.215708][T10204] __vmalloc_node_range_noprof+0x128/0x1390 [ 183.215771][T10204] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 183.215804][T10204] ? __kasan_kmalloc+0x9d/0xb0 [ 183.215830][T10204] vmalloc_user_noprof+0x74/0x80 [ 183.215855][T10204] ? xskq_create+0xb6/0x170 [ 183.215871][T10204] xskq_create+0xb6/0x170 [ 183.215890][T10204] xsk_init_queue+0xa1/0x100 [ 183.215922][T10204] xsk_setsockopt+0x449/0x840 [ 183.215954][T10204] ? __pfx_xsk_setsockopt+0x10/0x10 [ 183.215980][T10204] ? __pfx_aa_sk_perm+0x10/0x10 [ 183.216009][T10204] ? aa_sock_opt_perm+0x79/0x120 [ 183.216041][T10204] ? __pfx_xsk_setsockopt+0x10/0x10 [ 183.216066][T10204] do_sock_setsockopt+0x3b1/0x710 [ 183.216096][T10204] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 183.216116][T10204] ? __fget_files+0x2a/0x420 [ 183.216150][T10204] ? __fget_files+0x39d/0x420 [ 183.216173][T10204] ? __fget_files+0x2a/0x420 [ 183.216218][T10204] __x64_sys_setsockopt+0x1ee/0x280 [ 183.216248][T10204] do_syscall_64+0xf3/0x230 [ 183.216270][T10204] ? clear_bhb_loop+0x45/0xa0 [ 183.216293][T10204] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.216311][T10204] RIP: 0033:0x7f68a618e169 [ 183.216329][T10204] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.216345][T10204] RSP: 002b:00007f68a6f39038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 183.216367][T10204] RAX: ffffffffffffffda RBX: 00007f68a63b5fa0 RCX: 00007f68a618e169 [ 183.216381][T10204] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 183.216393][T10204] RBP: 00007f68a6210a68 R08: 0000000000000004 R09: 0000000000000000 [ 183.216405][T10204] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.216417][T10204] R13: 0000000000000000 R14: 00007f68a63b5fa0 R15: 00007ffee6fd2448 [ 183.216450][T10204] [ 183.216458][T10204] Mem-Info: [ 183.524330][T10204] active_anon:4110 inactive_anon:0 isolated_anon:0 [ 183.524330][T10204] active_file:1838 inactive_file:38351 isolated_file:0 [ 183.524330][T10204] unevictable:768 dirty:324 writeback:0 [ 183.524330][T10204] slab_reclaimable:10703 slab_unreclaimable:99401 [ 183.524330][T10204] mapped:28900 shmem:1402 pagetables:860 [ 183.524330][T10204] sec_pagetables:0 bounce:0 [ 183.524330][T10204] kernel_misc_reclaimable:0 [ 183.524330][T10204] free:1346004 free_pcp:619 free_cma:0 [ 183.570414][T10204] Node 0 active_anon:16440kB inactive_anon:0kB active_file:7352kB inactive_file:153328kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115600kB dirty:1292kB writeback:0kB shmem:4072kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11516kB pagetables:3440kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 183.606165][T10204] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 183.612308][T10215] ipvlan2: entered promiscuous mode [ 183.646399][T10204] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.654520][ T5150] block nbd16: Receive control failed (result -107) [ 183.689354][T10204] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 183.695546][T10204] Node 0 DMA32 free:1457084kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:16432kB inactive_anon:0kB active_file:7352kB inactive_file:153232kB unevictable:1536kB writepending:1292kB present:3129332kB managed:2547412kB mlocked:0kB bounce:0kB free_pcp:2888kB local_pcp:1568kB free_cma:0kB [ 183.726653][T10204] lowmem_reserve[]: 0 0 0 0 0 [ 183.731428][T10204] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:96kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 183.758203][T10212] nbd16: detected capacity change from 0 to 32 [ 183.764755][T10204] lowmem_reserve[]: 0 0 0 0 0 [ 183.784821][T10204] Node 1 Normal free:3911348kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.819856][T10204] lowmem_reserve[]: 0 0 0 0 0 [ 183.854113][T10204] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 183.886473][T10204] Node 0 DMA32: 468*4kB (UME) 323*8kB (UME) 121*16kB (UME) 1039*32kB (UME) 831*64kB (UME) 178*128kB (UME) 36*256kB (UME) 8*512kB (UME) 8*1024kB (UM) 5*2048kB (UM) 320*4096kB (UM) = 1458072kB [ 183.916283][T10204] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 183.930340][T10204] Node 1 Normal: 221*4kB (UME) 46*8kB (UME) 47*16kB (UME) 201*32kB (UME) 91*64kB (UME) 34*128kB (UME) 14*256kB (UME) 8*512kB (UME) 4*1024kB (UME) 1*2048kB (E) 947*4096kB (M) = 3911348kB [ 183.946533][T10218] FAULT_INJECTION: forcing a failure. [ 183.946533][T10218] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 183.953385][T10204] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.980393][T10204] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.990258][T10204] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.991705][T10218] CPU: 1 UID: 0 PID: 10218 Comm: syz.4.1542 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 183.991727][T10218] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 183.991737][T10218] Call Trace: [ 183.991744][T10218] [ 183.991750][T10218] dump_stack_lvl+0x241/0x360 [ 183.991783][T10218] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.991806][T10218] ? __pfx__printk+0x10/0x10 [ 183.991842][T10218] should_fail_ex+0x424/0x570 [ 183.991869][T10218] _copy_from_iter+0x211/0x1c70 [ 183.991899][T10218] ? __build_skb_around+0x247/0x3d0 [ 183.991923][T10218] ? __alloc_skb+0x298/0x480 [ 183.991941][T10218] ? __pfx__copy_from_iter+0x10/0x10 [ 183.991969][T10218] ? __pfx___alloc_skb+0x10/0x10 [ 183.991989][T10218] ? skb_put+0x114/0x1f0 [ 183.992012][T10218] netlink_sendmsg+0x73c/0xcd0 [ 183.992044][T10218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.992066][T10218] ? aa_sock_msg_perm+0x91/0x160 [ 183.992094][T10218] ? __pfx_netlink_sendmsg+0x10/0x10 [ 183.992117][T10218] __sock_sendmsg+0x221/0x270 [ 183.992146][T10218] ____sys_sendmsg+0x523/0x860 [ 183.992176][T10218] ? __pfx_____sys_sendmsg+0x10/0x10 [ 183.992195][T10218] ? __fget_files+0x2a/0x420 [ 183.992223][T10218] ? __fget_files+0x2a/0x420 [ 183.992256][T10218] __sys_sendmsg+0x271/0x360 [ 183.992282][T10218] ? __pfx___sys_sendmsg+0x10/0x10 [ 183.992355][T10218] ? do_syscall_64+0xb6/0x230 [ 183.992377][T10218] do_syscall_64+0xf3/0x230 [ 183.992395][T10218] ? clear_bhb_loop+0x45/0xa0 [ 183.992415][T10218] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.992432][T10218] RIP: 0033:0x7fa28bf8e169 [ 183.992448][T10218] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.992461][T10218] RSP: 002b:00007fa28ce08038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 183.992480][T10218] RAX: ffffffffffffffda RBX: 00007fa28c1b5fa0 RCX: 00007fa28bf8e169 [ 183.992492][T10218] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 183.992503][T10218] RBP: 00007fa28ce08090 R08: 0000000000000000 R09: 0000000000000000 [ 183.992515][T10218] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 183.992525][T10218] R13: 0000000000000000 R14: 00007fa28c1b5fa0 R15: 00007ffd3ce106d8 [ 183.992553][T10218] [ 184.229934][T10204] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 184.249241][T10204] 41602 total pagecache pages [ 184.260053][T10204] 0 pages in swap cache [ 184.264325][T10204] Free swap = 124996kB [ 184.268555][T10204] Total swap = 124996kB [ 184.272731][T10204] 2097051 pages RAM [ 184.281847][T10204] 0 pages HighMem/MovableOnly [ 184.287577][T10204] 428540 pages reserved [ 184.291754][T10204] 0 pages cma reserved [ 184.444589][T10240] vcan0: Master is either lo or non-ether device [ 184.509252][T10244] ipvlan3: entered promiscuous mode [ 184.575573][T10246] FAULT_INJECTION: forcing a failure. [ 184.575573][T10246] name failslab, interval 1, probability 0, space 0, times 0 [ 184.588742][T10246] CPU: 0 UID: 0 PID: 10246 Comm: syz.0.1553 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 184.588766][T10246] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 184.588777][T10246] Call Trace: [ 184.588792][T10246] [ 184.588800][T10246] dump_stack_lvl+0x241/0x360 [ 184.588830][T10246] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.588852][T10246] ? __pfx__printk+0x10/0x10 [ 184.588879][T10246] ? __pfx___might_resched+0x10/0x10 [ 184.588903][T10246] should_fail_ex+0x424/0x570 [ 184.588929][T10246] should_failslab+0xac/0x100 [ 184.588956][T10246] __kmalloc_cache_noprof+0x73/0x370 [ 184.588978][T10246] ? flow_init+0x51/0xd0 [ 184.588997][T10246] flow_init+0x51/0xd0 [ 184.589013][T10246] tcf_proto_create+0x262/0x370 [ 184.589037][T10246] tc_new_tfilter+0x15e8/0x1a90 [ 184.589079][T10246] ? __pfx_tc_new_tfilter+0x10/0x10 [ 184.589111][T10246] ? __lock_acquire+0xad5/0xd80 [ 184.589145][T10246] ? __pfx_tc_new_tfilter+0x10/0x10 [ 184.589164][T10246] rtnetlink_rcv_msg+0x80f/0xd70 [ 184.589179][T10246] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 184.589201][T10246] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 184.589215][T10246] ? __lock_acquire+0xad5/0xd80 [ 184.589242][T10246] netlink_rcv_skb+0x208/0x480 [ 184.589259][T10246] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 184.589276][T10246] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 184.589309][T10246] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.589327][T10246] ? netlink_deliver_tap+0x2e/0x1b0 [ 184.589345][T10246] netlink_unicast+0x7f8/0x9a0 [ 184.589375][T10246] ? __pfx_netlink_unicast+0x10/0x10 [ 184.589400][T10246] ? skb_put+0x114/0x1f0 [ 184.589422][T10246] netlink_sendmsg+0x8c3/0xcd0 [ 184.589449][T10246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.589469][T10246] ? aa_sock_msg_perm+0x91/0x160 [ 184.589497][T10246] ? __pfx_netlink_sendmsg+0x10/0x10 [ 184.589512][T10246] __sock_sendmsg+0x221/0x270 [ 184.589539][T10246] ____sys_sendmsg+0x523/0x860 [ 184.589567][T10246] ? __pfx_____sys_sendmsg+0x10/0x10 [ 184.589584][T10246] ? __fget_files+0x2a/0x420 [ 184.589609][T10246] ? __fget_files+0x2a/0x420 [ 184.589639][T10246] __sys_sendmsg+0x271/0x360 [ 184.589664][T10246] ? __pfx___sys_sendmsg+0x10/0x10 [ 184.589736][T10246] ? do_syscall_64+0xb6/0x230 [ 184.589759][T10246] do_syscall_64+0xf3/0x230 [ 184.589777][T10246] ? clear_bhb_loop+0x45/0xa0 [ 184.589807][T10246] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.589822][T10246] RIP: 0033:0x7f68a618e169 [ 184.589838][T10246] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 184.589851][T10246] RSP: 002b:00007f68a6f39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 184.589869][T10246] RAX: ffffffffffffffda RBX: 00007f68a63b5fa0 RCX: 00007f68a618e169 [ 184.589882][T10246] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 184.589892][T10246] RBP: 00007f68a6f39090 R08: 0000000000000000 R09: 0000000000000000 [ 184.589903][T10246] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 184.589912][T10246] R13: 0000000000000000 R14: 00007f68a63b5fa0 R15: 00007ffee6fd2448 [ 184.589941][T10246] [ 185.012688][T10257] __nla_validate_parse: 4 callbacks suppressed [ 185.012710][T10257] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1556'. [ 185.106586][ T5150] block nbd17: Receive control failed (result -107) [ 185.147022][T10261] nbd17: detected capacity change from 0 to 32 [ 185.181934][T10268] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1561'. [ 185.303663][T10276] FAULT_INJECTION: forcing a failure. [ 185.303663][T10276] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 185.318191][T10276] CPU: 1 UID: 0 PID: 10276 Comm: syz.4.1564 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 185.318217][T10276] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 185.318228][T10276] Call Trace: [ 185.318235][T10276] [ 185.318243][T10276] dump_stack_lvl+0x241/0x360 [ 185.318273][T10276] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.318296][T10276] ? __pfx__printk+0x10/0x10 [ 185.318330][T10276] should_fail_ex+0x424/0x570 [ 185.318357][T10276] prepare_alloc_pages+0x220/0x610 [ 185.318384][T10276] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 185.318407][T10276] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 185.318434][T10276] ? __lock_acquire+0xad5/0xd80 [ 185.318463][T10276] alloc_pages_mpol+0x339/0x690 [ 185.318491][T10276] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 185.318523][T10276] vma_alloc_folio_noprof+0x12d/0x260 [ 185.318549][T10276] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 185.318582][T10276] folio_prealloc+0x2e/0x170 [ 185.318613][T10276] do_wp_page+0x14f6/0x5e00 [ 185.318638][T10276] ? __lock_acquire+0xad5/0xd80 [ 185.318669][T10276] ? __pfx_do_wp_page+0x10/0x10 [ 185.318696][T10276] ? __lock_acquire+0xad5/0xd80 [ 185.318719][T10276] ? do_raw_spin_lock+0x151/0x370 [ 185.318762][T10276] handle_pte_fault+0xfaf/0x61c0 [ 185.318794][T10276] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 185.318819][T10276] ? __pfx_handle_pte_fault+0x10/0x10 [ 185.318849][T10276] ? rcu_is_watching+0x15/0xb0 [ 185.318873][T10276] ? __lock_acquire+0xad5/0xd80 [ 185.318904][T10276] ? __lock_acquire+0xad5/0xd80 [ 185.318926][T10276] ? do_raw_spin_lock+0x151/0x370 [ 185.318959][T10276] handle_mm_fault+0x1129/0x1bf0 [ 185.319021][T10276] ? __pfx_handle_mm_fault+0x10/0x10 [ 185.319045][T10276] ? follow_page_pte+0xec9/0x15e0 [ 185.319082][T10276] ? __pfx_find_vma+0x10/0x10 [ 185.319107][T10276] ? vma_is_secretmem+0xd/0x50 [ 185.319126][T10276] ? check_vma_flags+0x51b/0x590 [ 185.319155][T10276] __get_user_pages+0x1adc/0x4180 [ 185.319219][T10276] ? __pfx___get_user_pages+0x10/0x10 [ 185.319241][T10276] ? __gup_longterm_locked+0xd86/0x1850 [ 185.319266][T10276] ? __pfx_down_read_killable+0x10/0x10 [ 185.319289][T10276] ? __lock_acquire+0xad5/0xd80 [ 185.319323][T10276] __gup_longterm_locked+0xec1/0x1850 [ 185.319362][T10276] ? try_get_folio+0xfd/0x6a0 [ 185.319390][T10276] ? try_grab_folio_fast+0x373/0x500 [ 185.319413][T10276] ? __pfx___gup_longterm_locked+0x10/0x10 [ 185.319440][T10276] ? sanity_check_pinned_pages+0x11b2/0x12a0 [ 185.319472][T10276] gup_fast_fallback+0x2227/0x2980 [ 185.319530][T10276] ? __pfx_gup_fast_fallback+0x10/0x10 [ 185.319552][T10276] ? 0xffffffffa0001fb0 [ 185.319570][T10276] ? is_bpf_text_address+0x26/0x2a0 [ 185.319590][T10276] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 185.319615][T10276] ? kernel_text_address+0xa7/0xe0 [ 185.319640][T10276] ? __kernel_text_address+0xd/0x40 [ 185.319663][T10276] ? unwind_get_return_address+0x4d/0x90 [ 185.319684][T10276] ? arch_stack_walk+0xff/0x150 [ 185.319719][T10276] ? stack_trace_save+0x11a/0x1d0 [ 185.319741][T10276] ? is_valid_gup_args+0x124/0x200 [ 185.319767][T10276] pin_user_pages_fast+0xd2/0x160 [ 185.319795][T10276] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 185.319830][T10276] iov_iter_extract_pages+0x3bd/0x5c0 [ 185.319850][T10276] ? __x64_sys_recvmmsg+0x1ab/0x260 [ 185.319877][T10276] extract_iter_to_sg+0xebc/0x2680 [ 185.319918][T10276] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 185.319961][T10276] ? __asan_memset+0x23/0x50 [ 185.319981][T10276] af_alg_get_rsgl+0x41e/0x860 [ 185.320028][T10276] skcipher_recvmsg+0x3fa/0x1250 [ 185.320072][T10276] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 185.320098][T10276] ? __import_iovec+0x585/0x830 [ 185.320115][T10276] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 185.320137][T10276] sock_recvmsg_nosec+0x18e/0x1d0 [ 185.320166][T10276] ____sys_recvmsg+0x3d4/0x480 [ 185.320197][T10276] ? __pfx_____sys_recvmsg+0x10/0x10 [ 185.320243][T10276] do_recvmmsg+0x428/0xab0 [ 185.320277][T10276] ? __pfx_do_recvmmsg+0x10/0x10 [ 185.320316][T10276] ? rcu_read_lock_any_held+0xbb/0x160 [ 185.320337][T10276] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 185.320363][T10276] ? vfs_write+0xb29/0xd10 [ 185.320392][T10276] ? ksys_write+0x24e/0x2d0 [ 185.320414][T10276] ? __mutex_unlock_slowpath+0x229/0x800 [ 185.320444][T10276] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 185.320461][T10276] ? __fget_files+0x2a/0x420 [ 185.320502][T10276] __x64_sys_recvmmsg+0x1ab/0x260 [ 185.320527][T10276] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 185.320557][T10276] ? do_syscall_64+0xb6/0x230 [ 185.320579][T10276] do_syscall_64+0xf3/0x230 [ 185.320597][T10276] ? clear_bhb_loop+0x45/0xa0 [ 185.320618][T10276] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.320634][T10276] RIP: 0033:0x7fa28bf8e169 [ 185.320649][T10276] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.320663][T10276] RSP: 002b:00007fa28ce08038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 185.320682][T10276] RAX: ffffffffffffffda RBX: 00007fa28c1b5fa0 RCX: 00007fa28bf8e169 [ 185.320693][T10276] RDX: 000000000000001e RSI: 0000200000000240 RDI: 0000000000000004 [ 185.320704][T10276] RBP: 00007fa28ce08090 R08: 0000000000000000 R09: 0000000000000000 [ 185.320715][T10276] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 185.320725][T10276] R13: 0000000000000000 R14: 00007fa28c1b5fa0 R15: 00007ffd3ce106d8 [ 185.320754][T10276] [ 185.870355][T10278] vcan0: Master is either lo or non-ether device [ 186.135401][T10281] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1566'. [ 187.543870][T10314] ipvlan2: entered promiscuous mode [ 187.552604][ T5150] block nbd18: Receive control failed (result -107) [ 187.584700][T10316] nbd18: detected capacity change from 0 to 32 [ 187.595536][ T53] bond0: (slave bridge0): link status definitely down, disabling slave [ 187.625556][T10319] validate_nla: 1 callbacks suppressed [ 187.625603][T10319] netlink: 'syz.1.1582': attribute type 4 has an invalid length. [ 187.837676][T10330] netlink: 'syz.1.1586': attribute type 1 has an invalid length. [ 188.032517][T10343] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1588'. [ 188.051544][T10333] bond1: (slave gretap1): making interface the new active one [ 188.061853][T10345] FAULT_INJECTION: forcing a failure. [ 188.061853][T10345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 188.080662][T10333] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 188.082217][T10345] CPU: 1 UID: 0 PID: 10345 Comm: syz.0.1590 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 188.082241][T10345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 188.082252][T10345] Call Trace: [ 188.082259][T10345] [ 188.082266][T10345] dump_stack_lvl+0x241/0x360 [ 188.082295][T10345] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.082318][T10345] ? __pfx__printk+0x10/0x10 [ 188.082353][T10345] should_fail_ex+0x424/0x570 [ 188.082378][T10345] _copy_from_iter+0x211/0x1c70 [ 188.082409][T10345] ? __build_skb_around+0x247/0x3d0 [ 188.082433][T10345] ? __alloc_skb+0x298/0x480 [ 188.082450][T10345] ? __pfx__copy_from_iter+0x10/0x10 [ 188.082477][T10345] ? __pfx___alloc_skb+0x10/0x10 [ 188.082497][T10345] ? skb_put+0x114/0x1f0 [ 188.082520][T10345] netlink_sendmsg+0x73c/0xcd0 [ 188.082550][T10345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.082571][T10345] ? aa_sock_msg_perm+0x91/0x160 [ 188.082599][T10345] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.082614][T10345] __sock_sendmsg+0x221/0x270 [ 188.082641][T10345] ____sys_sendmsg+0x523/0x860 [ 188.082670][T10345] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.082688][T10345] ? __fget_files+0x2a/0x420 [ 188.082715][T10345] ? __fget_files+0x2a/0x420 [ 188.082746][T10345] __sys_sendmsg+0x271/0x360 [ 188.082778][T10345] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.082851][T10345] ? do_syscall_64+0xb6/0x230 [ 188.082873][T10345] do_syscall_64+0xf3/0x230 [ 188.082891][T10345] ? clear_bhb_loop+0x45/0xa0 [ 188.082911][T10345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.082926][T10345] RIP: 0033:0x7f68a618e169 [ 188.082941][T10345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.082954][T10345] RSP: 002b:00007f68a6f39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.082972][T10345] RAX: ffffffffffffffda RBX: 00007f68a63b5fa0 RCX: 00007f68a618e169 [ 188.082984][T10345] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 188.082994][T10345] RBP: 00007f68a6f39090 R08: 0000000000000000 R09: 0000000000000000 [ 188.083005][T10345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.083014][T10345] R13: 0000000000000000 R14: 00007f68a63b5fa0 R15: 00007ffee6fd2448 [ 188.083041][T10345] [ 188.352679][T10347] ipvlan2: entered promiscuous mode [ 188.378237][T10347] bridge0: port 1(ipvlan2) entered blocking state [ 188.404682][T10347] bridge0: port 1(ipvlan2) entered disabled state [ 188.424440][T10347] ipvlan2: entered allmulticast mode [ 188.441318][T10347] bridge0: entered allmulticast mode [ 188.451211][T10347] ipvlan2: left allmulticast mode [ 188.466075][T10347] bridge0: left allmulticast mode [ 188.549386][T10355] FAULT_INJECTION: forcing a failure. [ 188.549386][T10355] name failslab, interval 1, probability 0, space 0, times 0 [ 188.570783][T10355] CPU: 1 UID: 0 PID: 10355 Comm: syz.2.1593 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 188.570809][T10355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 188.570819][T10355] Call Trace: [ 188.570825][T10355] [ 188.570832][T10355] dump_stack_lvl+0x241/0x360 [ 188.570862][T10355] ? __pfx_dump_stack_lvl+0x10/0x10 [ 188.570885][T10355] ? __pfx__printk+0x10/0x10 [ 188.570912][T10355] ? __pfx___might_resched+0x10/0x10 [ 188.570937][T10355] should_fail_ex+0x424/0x570 [ 188.570962][T10355] should_failslab+0xac/0x100 [ 188.570985][T10355] __kmalloc_cache_noprof+0x73/0x370 [ 188.571006][T10355] ? tcf_proto_create+0x62/0x370 [ 188.571028][T10355] tcf_proto_create+0x62/0x370 [ 188.571049][T10355] tc_new_tfilter+0x15e8/0x1a90 [ 188.571088][T10355] ? __pfx_tc_new_tfilter+0x10/0x10 [ 188.571119][T10355] ? __lock_acquire+0xad5/0xd80 [ 188.571156][T10355] ? __pfx_tc_new_tfilter+0x10/0x10 [ 188.571176][T10355] rtnetlink_rcv_msg+0x80f/0xd70 [ 188.571190][T10355] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 188.571211][T10355] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.571233][T10355] ? ref_tracker_free+0x63e/0x7e0 [ 188.571260][T10355] netlink_rcv_skb+0x208/0x480 [ 188.571279][T10355] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 188.571297][T10355] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 188.571332][T10355] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.571351][T10355] ? netlink_deliver_tap+0x2e/0x1b0 [ 188.571368][T10355] netlink_unicast+0x7f8/0x9a0 [ 188.571398][T10355] ? __pfx_netlink_unicast+0x10/0x10 [ 188.571423][T10355] ? skb_put+0x114/0x1f0 [ 188.571446][T10355] netlink_sendmsg+0x8c3/0xcd0 [ 188.571475][T10355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.571498][T10355] ? aa_sock_msg_perm+0x91/0x160 [ 188.571527][T10355] ? __pfx_netlink_sendmsg+0x10/0x10 [ 188.571541][T10355] __sock_sendmsg+0x221/0x270 [ 188.571569][T10355] ____sys_sendmsg+0x523/0x860 [ 188.571597][T10355] ? __pfx_____sys_sendmsg+0x10/0x10 [ 188.571616][T10355] ? __fget_files+0x2a/0x420 [ 188.571643][T10355] ? __fget_files+0x2a/0x420 [ 188.571673][T10355] __sys_sendmsg+0x271/0x360 [ 188.571697][T10355] ? __pfx___sys_sendmsg+0x10/0x10 [ 188.571776][T10355] ? do_syscall_64+0xb6/0x230 [ 188.571798][T10355] do_syscall_64+0xf3/0x230 [ 188.571818][T10355] ? clear_bhb_loop+0x45/0xa0 [ 188.571843][T10355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 188.571859][T10355] RIP: 0033:0x7f20a9d8e169 [ 188.571875][T10355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 188.571889][T10355] RSP: 002b:00007f20a7bd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 188.571908][T10355] RAX: ffffffffffffffda RBX: 00007f20a9fb6080 RCX: 00007f20a9d8e169 [ 188.571920][T10355] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 188.571931][T10355] RBP: 00007f20a7bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 188.571940][T10355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 188.571950][T10355] R13: 0000000000000000 R14: 00007f20a9fb6080 R15: 00007ffcbc35efc8 [ 188.571979][T10355] [ 189.159141][T10371] vcan0: Master is either lo or non-ether device [ 189.180314][T10375] FAULT_INJECTION: forcing a failure. [ 189.180314][T10375] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 189.195693][T10375] CPU: 1 UID: 0 PID: 10375 Comm: syz.0.1602 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 189.195720][T10375] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 189.195730][T10375] Call Trace: [ 189.195738][T10375] [ 189.195745][T10375] dump_stack_lvl+0x241/0x360 [ 189.195775][T10375] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.195799][T10375] ? __pfx__printk+0x10/0x10 [ 189.195833][T10375] should_fail_ex+0x424/0x570 [ 189.195860][T10375] prepare_alloc_pages+0x220/0x610 [ 189.195888][T10375] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 189.195911][T10375] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 189.195937][T10375] ? __lock_acquire+0xad5/0xd80 [ 189.195966][T10375] alloc_pages_mpol+0x339/0x690 [ 189.195994][T10375] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 189.196027][T10375] vma_alloc_folio_noprof+0x12d/0x260 [ 189.196053][T10375] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 189.196086][T10375] folio_prealloc+0x2e/0x170 [ 189.196113][T10375] do_wp_page+0x14f6/0x5e00 [ 189.196139][T10375] ? __lock_acquire+0xad5/0xd80 [ 189.196169][T10375] ? __pfx_do_wp_page+0x10/0x10 [ 189.196194][T10375] ? __lock_acquire+0xad5/0xd80 [ 189.196215][T10375] ? do_raw_spin_lock+0x151/0x370 [ 189.196259][T10375] handle_pte_fault+0xfaf/0x61c0 [ 189.196292][T10375] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 189.196317][T10375] ? __pfx_handle_pte_fault+0x10/0x10 [ 189.196346][T10375] ? rcu_is_watching+0x15/0xb0 [ 189.196371][T10375] ? __lock_acquire+0xad5/0xd80 [ 189.196402][T10375] ? __lock_acquire+0xad5/0xd80 [ 189.196424][T10375] ? do_raw_spin_lock+0x151/0x370 [ 189.196457][T10375] handle_mm_fault+0x1129/0x1bf0 [ 189.196512][T10375] ? __pfx_handle_mm_fault+0x10/0x10 [ 189.196536][T10375] ? follow_page_pte+0xec9/0x15e0 [ 189.196574][T10375] ? __pfx_find_vma+0x10/0x10 [ 189.196598][T10375] ? vma_is_secretmem+0xd/0x50 [ 189.196617][T10375] ? check_vma_flags+0x51b/0x590 [ 189.196652][T10375] __get_user_pages+0x1adc/0x4180 [ 189.196717][T10375] ? __pfx___get_user_pages+0x10/0x10 [ 189.196739][T10375] ? __gup_longterm_locked+0xd86/0x1850 [ 189.196764][T10375] ? __pfx_down_read_killable+0x10/0x10 [ 189.196788][T10375] ? __lock_acquire+0xad5/0xd80 [ 189.196822][T10375] __gup_longterm_locked+0xec1/0x1850 [ 189.196862][T10375] ? try_get_folio+0xfd/0x6a0 [ 189.196889][T10375] ? try_grab_folio_fast+0x373/0x500 [ 189.196912][T10375] ? __pfx___gup_longterm_locked+0x10/0x10 [ 189.196939][T10375] ? sanity_check_pinned_pages+0x11b2/0x12a0 [ 189.196971][T10375] gup_fast_fallback+0x2227/0x2980 [ 189.197031][T10375] ? __pfx_gup_fast_fallback+0x10/0x10 [ 189.197053][T10375] ? 0xffffffffa0001fb0 [ 189.197070][T10375] ? is_bpf_text_address+0x26/0x2a0 [ 189.197091][T10375] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 189.197116][T10375] ? kernel_text_address+0xa7/0xe0 [ 189.197141][T10375] ? __kernel_text_address+0xd/0x40 [ 189.197164][T10375] ? unwind_get_return_address+0x4d/0x90 [ 189.197186][T10375] ? arch_stack_walk+0xff/0x150 [ 189.197222][T10375] ? stack_trace_save+0x11a/0x1d0 [ 189.197244][T10375] ? is_valid_gup_args+0x124/0x200 [ 189.197271][T10375] pin_user_pages_fast+0xd2/0x160 [ 189.197298][T10375] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 189.197334][T10375] iov_iter_extract_pages+0x3bd/0x5c0 [ 189.197354][T10375] ? __x64_sys_recvmmsg+0x1ab/0x260 [ 189.197381][T10375] extract_iter_to_sg+0xebc/0x2680 [ 189.197421][T10375] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 189.197465][T10375] ? __asan_memset+0x23/0x50 [ 189.197485][T10375] af_alg_get_rsgl+0x41e/0x860 [ 189.197526][T10375] skcipher_recvmsg+0x3fa/0x1250 [ 189.197570][T10375] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 189.197596][T10375] ? __import_iovec+0x585/0x830 [ 189.197612][T10375] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 189.197637][T10375] sock_recvmsg_nosec+0x18e/0x1d0 [ 189.197675][T10375] ____sys_recvmsg+0x3d4/0x480 [ 189.197707][T10375] ? __pfx_____sys_recvmsg+0x10/0x10 [ 189.197755][T10375] do_recvmmsg+0x428/0xab0 [ 189.197789][T10375] ? __pfx_do_recvmmsg+0x10/0x10 [ 189.197830][T10375] ? rcu_read_lock_any_held+0xbb/0x160 [ 189.197851][T10375] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 189.197876][T10375] ? vfs_write+0xb29/0xd10 [ 189.197906][T10375] ? ksys_write+0x24e/0x2d0 [ 189.197929][T10375] ? __mutex_unlock_slowpath+0x229/0x800 [ 189.197958][T10375] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 189.197975][T10375] ? __fget_files+0x2a/0x420 [ 189.198018][T10375] __x64_sys_recvmmsg+0x1ab/0x260 [ 189.198043][T10375] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 189.198071][T10375] ? do_syscall_64+0xb6/0x230 [ 189.198093][T10375] do_syscall_64+0xf3/0x230 [ 189.198112][T10375] ? clear_bhb_loop+0x45/0xa0 [ 189.198133][T10375] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 189.198150][T10375] RIP: 0033:0x7f68a618e169 [ 189.198165][T10375] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 189.198179][T10375] RSP: 002b:00007f68a6f39038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 189.198198][T10375] RAX: ffffffffffffffda RBX: 00007f68a63b5fa0 RCX: 00007f68a618e169 [ 189.198211][T10375] RDX: 000000000000001e RSI: 0000200000000240 RDI: 0000000000000004 [ 189.198222][T10375] RBP: 00007f68a6f39090 R08: 0000000000000000 R09: 0000000000000000 [ 189.198232][T10375] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 189.198243][T10375] R13: 0000000000000000 R14: 00007f68a63b5fa0 R15: 00007ffee6fd2448 [ 189.198273][T10375] [ 191.059239][ T5150] block nbd19: Receive control failed (result -107) [ 191.105918][T10431] nbd19: detected capacity change from 0 to 32 [ 191.290869][T10446] FAULT_INJECTION: forcing a failure. [ 191.290869][T10446] name failslab, interval 1, probability 0, space 0, times 0 [ 191.331653][T10446] CPU: 1 UID: 0 PID: 10446 Comm: syz.0.1624 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 191.331679][T10446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 191.331689][T10446] Call Trace: [ 191.331696][T10446] [ 191.331704][T10446] dump_stack_lvl+0x241/0x360 [ 191.331735][T10446] ? __pfx_dump_stack_lvl+0x10/0x10 [ 191.331758][T10446] ? __pfx__printk+0x10/0x10 [ 191.331786][T10446] ? __pfx___might_resched+0x10/0x10 [ 191.331812][T10446] should_fail_ex+0x424/0x570 [ 191.331839][T10446] should_failslab+0xac/0x100 [ 191.331863][T10446] __kmalloc_noprof+0xdf/0x4d0 [ 191.331883][T10446] ? genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 191.331904][T10446] ? apparmor_capable+0x13b/0x1b0 [ 191.331925][T10446] genl_family_rcv_msg_attrs_parse+0xa3/0x290 [ 191.331956][T10446] genl_rcv_msg+0x819/0xf00 [ 191.331987][T10446] ? __pfx_genl_rcv_msg+0x10/0x10 [ 191.332006][T10446] ? stack_trace_save+0x11a/0x1d0 [ 191.332032][T10446] ? __pfx_stack_trace_save+0x10/0x10 [ 191.332057][T10446] ? stack_depot_save_flags+0x44/0x940 [ 191.332076][T10446] ? stack_trace_snprint+0x71/0xf0 [ 191.332114][T10446] ? __lock_acquire+0xad5/0xd80 [ 191.332132][T10446] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 191.332155][T10446] ? __pfx_nl80211_set_cqm+0x10/0x10 [ 191.332178][T10446] ? __pfx_nl80211_post_doit+0x10/0x10 [ 191.332215][T10446] netlink_rcv_skb+0x208/0x480 [ 191.332233][T10446] ? __pfx_genl_rcv_msg+0x10/0x10 [ 191.332257][T10446] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 191.332297][T10446] ? netlink_deliver_tap+0x2e/0x1b0 [ 191.332322][T10446] genl_rcv+0x28/0x40 [ 191.332341][T10446] netlink_unicast+0x7f8/0x9a0 [ 191.332377][T10446] ? __pfx_netlink_unicast+0x10/0x10 [ 191.332403][T10446] ? skb_put+0x114/0x1f0 [ 191.332433][T10446] netlink_sendmsg+0x8c3/0xcd0 [ 191.332465][T10446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.332488][T10446] ? aa_sock_msg_perm+0x91/0x160 [ 191.332517][T10446] ? __pfx_netlink_sendmsg+0x10/0x10 [ 191.332533][T10446] __sock_sendmsg+0x221/0x270 [ 191.332561][T10446] ____sys_sendmsg+0x523/0x860 [ 191.332592][T10446] ? __pfx_____sys_sendmsg+0x10/0x10 [ 191.332609][T10446] ? __fget_files+0x2a/0x420 [ 191.332635][T10446] ? __fget_files+0x2a/0x420 [ 191.332669][T10446] __sys_sendmsg+0x271/0x360 [ 191.332696][T10446] ? __pfx___sys_sendmsg+0x10/0x10 [ 191.332778][T10446] ? do_syscall_64+0xb6/0x230 [ 191.332799][T10446] do_syscall_64+0xf3/0x230 [ 191.332817][T10446] ? clear_bhb_loop+0x45/0xa0 [ 191.332838][T10446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 191.332855][T10446] RIP: 0033:0x7f68a618e169 [ 191.332870][T10446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 191.332884][T10446] RSP: 002b:00007f68a6f39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 191.332903][T10446] RAX: ffffffffffffffda RBX: 00007f68a63b5fa0 RCX: 00007f68a618e169 [ 191.332915][T10446] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 191.332926][T10446] RBP: 00007f68a6f39090 R08: 0000000000000000 R09: 0000000000000000 [ 191.332937][T10446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 191.332947][T10446] R13: 0000000000000000 R14: 00007f68a63b5fa0 R15: 00007ffee6fd2448 [ 191.332977][T10446] [ 191.797680][ T5150] block nbd20: Receive control failed (result -107) [ 191.800527][T10462] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1630'. [ 191.813886][T10462] netlink: 356 bytes leftover after parsing attributes in process `syz.0.1630'. [ 191.824356][T10451] nbd20: detected capacity change from 0 to 32 [ 191.933465][T10470] sctp: [Deprecated]: syz.1.1636 (pid 10470) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.933465][T10470] Use struct sctp_sack_info instead [ 192.011403][T10478] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1636'. [ 192.080989][T10470] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1636'. [ 192.108585][T10482] FAULT_INJECTION: forcing a failure. [ 192.108585][T10482] name failslab, interval 1, probability 0, space 0, times 0 [ 192.179852][T10482] CPU: 1 UID: 0 PID: 10482 Comm: syz.3.1637 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 192.179878][T10482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 192.179888][T10482] Call Trace: [ 192.179895][T10482] [ 192.179902][T10482] dump_stack_lvl+0x241/0x360 [ 192.179933][T10482] ? __pfx_dump_stack_lvl+0x10/0x10 [ 192.179954][T10482] ? __pfx__printk+0x10/0x10 [ 192.179980][T10482] ? __pfx___might_resched+0x10/0x10 [ 192.180005][T10482] should_fail_ex+0x424/0x570 [ 192.180031][T10482] should_failslab+0xac/0x100 [ 192.180056][T10482] __kmalloc_cache_noprof+0x73/0x370 [ 192.180076][T10482] ? flow_change+0x449/0x1b10 [ 192.180105][T10482] flow_change+0x449/0x1b10 [ 192.180129][T10482] ? __pfx_flow_change+0x10/0x10 [ 192.180143][T10482] ? tcf_chain_tp_insert_unique+0x99d/0xa80 [ 192.180184][T10482] ? __pfx_flow_change+0x10/0x10 [ 192.180201][T10482] tc_new_tfilter+0x112f/0x1a90 [ 192.180248][T10482] ? __pfx_tc_new_tfilter+0x10/0x10 [ 192.180279][T10482] ? __lock_acquire+0xad5/0xd80 [ 192.180316][T10482] ? __pfx_tc_new_tfilter+0x10/0x10 [ 192.180337][T10482] rtnetlink_rcv_msg+0x80f/0xd70 [ 192.180353][T10482] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 192.180374][T10482] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 192.180399][T10482] ? ref_tracker_free+0x63e/0x7e0 [ 192.180428][T10482] netlink_rcv_skb+0x208/0x480 [ 192.180447][T10482] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 192.180465][T10482] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 192.180500][T10482] ? netlink_deliver_tap+0x2e/0x1b0 [ 192.180519][T10482] ? netlink_deliver_tap+0x2e/0x1b0 [ 192.180538][T10482] netlink_unicast+0x7f8/0x9a0 [ 192.180571][T10482] ? __pfx_netlink_unicast+0x10/0x10 [ 192.180597][T10482] ? skb_put+0x114/0x1f0 [ 192.180620][T10482] netlink_sendmsg+0x8c3/0xcd0 [ 192.180649][T10482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.180669][T10482] ? aa_sock_msg_perm+0x91/0x160 [ 192.180696][T10482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 192.180711][T10482] __sock_sendmsg+0x221/0x270 [ 192.180740][T10482] ____sys_sendmsg+0x523/0x860 [ 192.180769][T10482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 192.180787][T10482] ? __fget_files+0x2a/0x420 [ 192.180815][T10482] ? __fget_files+0x2a/0x420 [ 192.180846][T10482] __sys_sendmsg+0x271/0x360 [ 192.180873][T10482] ? __pfx___sys_sendmsg+0x10/0x10 [ 192.180944][T10482] ? do_syscall_64+0xb6/0x230 [ 192.180968][T10482] do_syscall_64+0xf3/0x230 [ 192.180986][T10482] ? clear_bhb_loop+0x45/0xa0 [ 192.181006][T10482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 192.181021][T10482] RIP: 0033:0x7f932598e169 [ 192.181037][T10482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 192.181050][T10482] RSP: 002b:00007f932679d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 192.181069][T10482] RAX: ffffffffffffffda RBX: 00007f9325bb5fa0 RCX: 00007f932598e169 [ 192.181080][T10482] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000005 [ 192.181090][T10482] RBP: 00007f932679d090 R08: 0000000000000000 R09: 0000000000000000 [ 192.181108][T10482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 192.181118][T10482] R13: 0000000000000000 R14: 00007f9325bb5fa0 R15: 00007ffd4ea7c0e8 [ 192.181146][T10482] [ 192.756662][T10497] vcan0: Master is either lo or non-ether device [ 193.112507][T10527] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1653'. [ 193.139380][T10527] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1653'. [ 193.155545][T10527] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 193.280793][T10539] netlink: 148 bytes leftover after parsing attributes in process `syz.3.1656'. [ 193.372071][T10542] netlink: 'syz.2.1657': attribute type 10 has an invalid length. [ 193.382286][T10542] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1657'. [ 193.394862][T10542] batadv0: entered promiscuous mode [ 193.400195][T10542] batadv0: entered allmulticast mode [ 193.412218][T10542] bridge0: port 1(batadv0) entered blocking state [ 193.421091][T10542] bridge0: port 1(batadv0) entered disabled state [ 193.438339][T10542] A link change request failed with some changes committed already. Interface batadv0 may have been left with an inconsistent configuration, please check. [ 193.709395][T10562] FAULT_INJECTION: forcing a failure. [ 193.709395][T10562] name failslab, interval 1, probability 0, space 0, times 0 [ 193.729906][T10562] CPU: 1 UID: 0 PID: 10562 Comm: syz.0.1665 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 193.729932][T10562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 193.729942][T10562] Call Trace: [ 193.729949][T10562] [ 193.729956][T10562] dump_stack_lvl+0x241/0x360 [ 193.729986][T10562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 193.730016][T10562] ? __pfx__printk+0x10/0x10 [ 193.730039][T10562] ? __pfx___might_resched+0x10/0x10 [ 193.730064][T10562] should_fail_ex+0x424/0x570 [ 193.730087][T10562] should_failslab+0xac/0x100 [ 193.730110][T10562] __kmalloc_noprof+0xdf/0x4d0 [ 193.730131][T10562] ? nl80211_set_cqm+0x9f8/0x1060 [ 193.730159][T10562] nl80211_set_cqm+0x9f8/0x1060 [ 193.730192][T10562] ? __pfx_nl80211_set_cqm+0x10/0x10 [ 193.730238][T10562] genl_rcv_msg+0xb38/0xf00 [ 193.730268][T10562] ? __pfx_genl_rcv_msg+0x10/0x10 [ 193.730286][T10562] ? stack_trace_save+0x11a/0x1d0 [ 193.730311][T10562] ? __pfx_stack_trace_save+0x10/0x10 [ 193.730335][T10562] ? stack_depot_save_flags+0x44/0x940 [ 193.730354][T10562] ? stack_trace_snprint+0x71/0xf0 [ 193.730389][T10562] ? __lock_acquire+0xad5/0xd80 [ 193.730404][T10562] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 193.730422][T10562] ? __pfx_nl80211_set_cqm+0x10/0x10 [ 193.730442][T10562] ? __pfx_nl80211_post_doit+0x10/0x10 [ 193.730474][T10562] netlink_rcv_skb+0x208/0x480 [ 193.730490][T10562] ? __pfx_genl_rcv_msg+0x10/0x10 [ 193.730511][T10562] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 193.730548][T10562] ? netlink_deliver_tap+0x2e/0x1b0 [ 193.730569][T10562] genl_rcv+0x28/0x40 [ 193.730588][T10562] netlink_unicast+0x7f8/0x9a0 [ 193.730620][T10562] ? __pfx_netlink_unicast+0x10/0x10 [ 193.730646][T10562] ? skb_put+0x114/0x1f0 [ 193.730670][T10562] netlink_sendmsg+0x8c3/0xcd0 [ 193.730699][T10562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.730719][T10562] ? aa_sock_msg_perm+0x91/0x160 [ 193.730744][T10562] ? __pfx_netlink_sendmsg+0x10/0x10 [ 193.730759][T10562] __sock_sendmsg+0x221/0x270 [ 193.730785][T10562] ____sys_sendmsg+0x523/0x860 [ 193.730812][T10562] ? __pfx_____sys_sendmsg+0x10/0x10 [ 193.730828][T10562] ? __fget_files+0x2a/0x420 [ 193.730860][T10562] ? __fget_files+0x2a/0x420 [ 193.730888][T10562] __sys_sendmsg+0x271/0x360 [ 193.730914][T10562] ? __pfx___sys_sendmsg+0x10/0x10 [ 193.730985][T10562] ? do_syscall_64+0xb6/0x230 [ 193.731014][T10562] do_syscall_64+0xf3/0x230 [ 193.731032][T10562] ? clear_bhb_loop+0x45/0xa0 [ 193.731051][T10562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.731067][T10562] RIP: 0033:0x7f68a618e169 [ 193.731082][T10562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.731096][T10562] RSP: 002b:00007f68a6f39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 193.731113][T10562] RAX: ffffffffffffffda RBX: 00007f68a63b5fa0 RCX: 00007f68a618e169 [ 193.731125][T10562] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 193.731135][T10562] RBP: 00007f68a6f39090 R08: 0000000000000000 R09: 0000000000000000 [ 193.731143][T10562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.731153][T10562] R13: 0000000000000000 R14: 00007f68a63b5fa0 R15: 00007ffee6fd2448 [ 193.731177][T10562] [ 194.232390][T10575] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1669'. [ 194.281430][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.460272][T10591] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1676'. [ 194.731754][T10613] ipvlan2: entered promiscuous mode [ 194.740445][T10613] bridge0: port 1(ipvlan2) entered blocking state [ 194.747288][T10613] bridge0: port 1(ipvlan2) entered disabled state [ 194.754582][T10613] ipvlan2: entered allmulticast mode [ 194.759979][T10613] bridge0: entered allmulticast mode [ 194.768598][T10613] ipvlan2: left allmulticast mode [ 194.773767][T10613] bridge0: left allmulticast mode [ 195.016820][ T5844] block nbd21: Receive control failed (result -107) [ 195.064402][T10621] nbd21: detected capacity change from 0 to 32 [ 195.078547][T10624] netlink: 'syz.0.1686': attribute type 11 has an invalid length. [ 195.089148][T10624] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.418693][ T10] IPVS: starting estimator thread 0... [ 195.497176][T10643] netlink: 'syz.1.1695': attribute type 1 has an invalid length. [ 195.518988][T10646] IPVS: using max 34 ests per chain, 81600 per kthread [ 195.547933][T10651] FAULT_INJECTION: forcing a failure. [ 195.547933][T10651] name failslab, interval 1, probability 0, space 0, times 0 [ 195.592619][T10651] CPU: 1 UID: 0 PID: 10651 Comm: syz.0.1697 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 195.592646][T10651] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 195.592656][T10651] Call Trace: [ 195.592663][T10651] [ 195.592671][T10651] dump_stack_lvl+0x241/0x360 [ 195.592703][T10651] ? __pfx_dump_stack_lvl+0x10/0x10 [ 195.592726][T10651] ? __pfx__printk+0x10/0x10 [ 195.592753][T10651] ? __pfx___might_resched+0x10/0x10 [ 195.592778][T10651] should_fail_ex+0x424/0x570 [ 195.592803][T10651] should_failslab+0xac/0x100 [ 195.592828][T10651] __kmalloc_noprof+0xdf/0x4d0 [ 195.592850][T10651] ? nl80211_set_cqm+0x9f8/0x1060 [ 195.592880][T10651] nl80211_set_cqm+0x9f8/0x1060 [ 195.592913][T10651] ? __pfx_nl80211_set_cqm+0x10/0x10 [ 195.592959][T10651] genl_rcv_msg+0xb38/0xf00 [ 195.592990][T10651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.593008][T10651] ? stack_trace_save+0x11a/0x1d0 [ 195.593033][T10651] ? __pfx_stack_trace_save+0x10/0x10 [ 195.593066][T10651] ? stack_depot_save_flags+0x44/0x940 [ 195.593084][T10651] ? stack_trace_snprint+0x71/0xf0 [ 195.593122][T10651] ? __lock_acquire+0xad5/0xd80 [ 195.593141][T10651] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 195.593163][T10651] ? __pfx_nl80211_set_cqm+0x10/0x10 [ 195.593185][T10651] ? __pfx_nl80211_post_doit+0x10/0x10 [ 195.593223][T10651] netlink_rcv_skb+0x208/0x480 [ 195.593241][T10651] ? __pfx_genl_rcv_msg+0x10/0x10 [ 195.593262][T10651] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 195.593304][T10651] ? netlink_deliver_tap+0x2e/0x1b0 [ 195.593328][T10651] genl_rcv+0x28/0x40 [ 195.593347][T10651] netlink_unicast+0x7f8/0x9a0 [ 195.593382][T10651] ? __pfx_netlink_unicast+0x10/0x10 [ 195.593408][T10651] ? skb_put+0x114/0x1f0 [ 195.593431][T10651] netlink_sendmsg+0x8c3/0xcd0 [ 195.593463][T10651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.593486][T10651] ? aa_sock_msg_perm+0x91/0x160 [ 195.593516][T10651] ? __pfx_netlink_sendmsg+0x10/0x10 [ 195.593531][T10651] __sock_sendmsg+0x221/0x270 [ 195.593560][T10651] ____sys_sendmsg+0x523/0x860 [ 195.593592][T10651] ? __pfx_____sys_sendmsg+0x10/0x10 [ 195.593611][T10651] ? __fget_files+0x2a/0x420 [ 195.593639][T10651] ? __fget_files+0x2a/0x420 [ 195.593674][T10651] __sys_sendmsg+0x271/0x360 [ 195.593701][T10651] ? __pfx___sys_sendmsg+0x10/0x10 [ 195.593785][T10651] ? do_syscall_64+0xb6/0x230 [ 195.593808][T10651] do_syscall_64+0xf3/0x230 [ 195.593826][T10651] ? clear_bhb_loop+0x45/0xa0 [ 195.593847][T10651] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 195.593864][T10651] RIP: 0033:0x7f68a618e169 [ 195.593879][T10651] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 195.593893][T10651] RSP: 002b:00007f68a6f39038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 195.593911][T10651] RAX: ffffffffffffffda RBX: 00007f68a63b5fa0 RCX: 00007f68a618e169 [ 195.593922][T10651] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000007 [ 195.593933][T10651] RBP: 00007f68a6f39090 R08: 0000000000000000 R09: 0000000000000000 [ 195.593943][T10651] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 195.593952][T10651] R13: 0000000000000000 R14: 00007f68a63b5fa0 R15: 00007ffee6fd2448 [ 195.593980][T10651] [ 196.289436][T10687] vlan2: entered allmulticast mode [ 196.304336][T10687] bond0: entered allmulticast mode [ 196.306164][ T5844] block nbd22: Receive control failed (result -107) [ 196.356417][ T5844] Bluetooth: hci1: command 0x0406 tx timeout [ 196.368219][T10689] nbd22: detected capacity change from 0 to 32 [ 196.371434][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 196.375293][ T5844] Bluetooth: hci4: command 0x0406 tx timeout [ 196.647939][T10711] FAULT_INJECTION: forcing a failure. [ 196.647939][T10711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 196.661851][T10711] CPU: 0 UID: 0 PID: 10711 Comm: syz.1.1722 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 196.661876][T10711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.661887][T10711] Call Trace: [ 196.661894][T10711] [ 196.661901][T10711] dump_stack_lvl+0x241/0x360 [ 196.661930][T10711] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.661952][T10711] ? __pfx__printk+0x10/0x10 [ 196.661988][T10711] should_fail_ex+0x424/0x570 [ 196.662015][T10711] _copy_from_user+0x2d/0xb0 [ 196.662033][T10711] copy_msghdr_from_user+0xb3/0x580 [ 196.662066][T10711] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 196.662088][T10711] ? __fget_files+0x2a/0x420 [ 196.662116][T10711] ? __fget_files+0x2a/0x420 [ 196.662149][T10711] __sys_sendmsg+0x20a/0x360 [ 196.662176][T10711] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.662250][T10711] ? do_syscall_64+0xb6/0x230 [ 196.662272][T10711] do_syscall_64+0xf3/0x230 [ 196.662290][T10711] ? clear_bhb_loop+0x45/0xa0 [ 196.662310][T10711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.662326][T10711] RIP: 0033:0x7ff75b38e169 [ 196.662341][T10711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.662354][T10711] RSP: 002b:00007ff75c2aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.662373][T10711] RAX: ffffffffffffffda RBX: 00007ff75b5b5fa0 RCX: 00007ff75b38e169 [ 196.662386][T10711] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 196.662396][T10711] RBP: 00007ff75c2aa090 R08: 0000000000000000 R09: 0000000000000000 [ 196.662407][T10711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.662417][T10711] R13: 0000000000000000 R14: 00007ff75b5b5fa0 R15: 00007ffde4090418 [ 196.662445][T10711] [ 196.896272][T10721] FAULT_INJECTION: forcing a failure. [ 196.896272][T10721] name failslab, interval 1, probability 0, space 0, times 0 [ 196.955703][T10721] CPU: 1 UID: 0 PID: 10721 Comm: syz.3.1726 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 196.955729][T10721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 196.955739][T10721] Call Trace: [ 196.955746][T10721] [ 196.955754][T10721] dump_stack_lvl+0x241/0x360 [ 196.955785][T10721] ? __pfx_dump_stack_lvl+0x10/0x10 [ 196.955808][T10721] ? __pfx__printk+0x10/0x10 [ 196.955837][T10721] ? ref_tracker_alloc+0x316/0x4c0 [ 196.955862][T10721] should_fail_ex+0x424/0x570 [ 196.955889][T10721] should_failslab+0xac/0x100 [ 196.955913][T10721] kmem_cache_alloc_noprof+0x78/0x390 [ 196.955934][T10721] ? skb_clone+0x20c/0x390 [ 196.955961][T10721] skb_clone+0x20c/0x390 [ 196.955986][T10721] __netlink_deliver_tap+0x3c4/0x7f0 [ 196.956017][T10721] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.956033][T10721] netlink_deliver_tap+0x19d/0x1b0 [ 196.956051][T10721] netlink_sendskb+0x68/0x140 [ 196.956078][T10721] netlink_unicast+0x39f/0x9a0 [ 196.956099][T10721] ? __asan_memcpy+0x40/0x70 [ 196.956125][T10721] ? __pfx_netlink_unicast+0x10/0x10 [ 196.956160][T10721] netlink_rcv_skb+0x296/0x480 [ 196.956179][T10721] ? __pfx_xfrm_user_rcv_msg+0x10/0x10 [ 196.956205][T10721] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 196.956242][T10721] ? netlink_deliver_tap+0x2e/0x1b0 [ 196.956264][T10721] xfrm_netlink_rcv+0x79/0x90 [ 196.956289][T10721] netlink_unicast+0x7f8/0x9a0 [ 196.956323][T10721] ? __pfx_netlink_unicast+0x10/0x10 [ 196.956349][T10721] ? skb_put+0x114/0x1f0 [ 196.956373][T10721] netlink_sendmsg+0x8c3/0xcd0 [ 196.956405][T10721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.956427][T10721] ? aa_sock_msg_perm+0x91/0x160 [ 196.956456][T10721] ? __pfx_netlink_sendmsg+0x10/0x10 [ 196.956471][T10721] __sock_sendmsg+0x221/0x270 [ 196.956501][T10721] ____sys_sendmsg+0x523/0x860 [ 196.956532][T10721] ? __pfx_____sys_sendmsg+0x10/0x10 [ 196.956550][T10721] ? __fget_files+0x2a/0x420 [ 196.956577][T10721] ? __fget_files+0x2a/0x420 [ 196.956611][T10721] __sys_sendmsg+0x271/0x360 [ 196.956638][T10721] ? __pfx___sys_sendmsg+0x10/0x10 [ 196.956726][T10721] ? do_syscall_64+0xb6/0x230 [ 196.956749][T10721] do_syscall_64+0xf3/0x230 [ 196.956768][T10721] ? clear_bhb_loop+0x45/0xa0 [ 196.956789][T10721] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 196.956805][T10721] RIP: 0033:0x7f932598e169 [ 196.956820][T10721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 196.956834][T10721] RSP: 002b:00007f932679d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 196.956852][T10721] RAX: ffffffffffffffda RBX: 00007f9325bb5fa0 RCX: 00007f932598e169 [ 196.956865][T10721] RDX: 0000000000000000 RSI: 0000200000000580 RDI: 0000000000000003 [ 196.956875][T10721] RBP: 00007f932679d090 R08: 0000000000000000 R09: 0000000000000000 [ 196.956886][T10721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 196.956896][T10721] R13: 0000000000000000 R14: 00007f9325bb5fa0 R15: 00007ffd4ea7c0e8 [ 196.956926][T10721] [ 197.351930][T10736] __nla_validate_parse: 13 callbacks suppressed [ 197.351950][T10736] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1733'. [ 197.368806][T10736] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1733'. [ 197.517900][T10746] FAULT_INJECTION: forcing a failure. [ 197.517900][T10746] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 197.610005][T10746] CPU: 1 UID: 0 PID: 10746 Comm: syz.0.1736 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 197.610031][T10746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 197.610042][T10746] Call Trace: [ 197.610049][T10746] [ 197.610056][T10746] dump_stack_lvl+0x241/0x360 [ 197.610085][T10746] ? __pfx_dump_stack_lvl+0x10/0x10 [ 197.610105][T10746] ? __pfx__printk+0x10/0x10 [ 197.610138][T10746] should_fail_ex+0x424/0x570 [ 197.610164][T10746] prepare_alloc_pages+0x220/0x610 [ 197.610191][T10746] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 197.610214][T10746] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 197.610240][T10746] ? __lock_acquire+0xad5/0xd80 [ 197.610268][T10746] alloc_pages_mpol+0x339/0x690 [ 197.610295][T10746] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 197.610327][T10746] vma_alloc_folio_noprof+0x12d/0x260 [ 197.610350][T10746] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 197.610381][T10746] folio_prealloc+0x2e/0x170 [ 197.610406][T10746] do_wp_page+0x14f6/0x5e00 [ 197.610430][T10746] ? __lock_acquire+0xad5/0xd80 [ 197.610456][T10746] ? __pfx_do_wp_page+0x10/0x10 [ 197.610480][T10746] ? __lock_acquire+0xad5/0xd80 [ 197.610499][T10746] ? do_raw_spin_lock+0x151/0x370 [ 197.610537][T10746] handle_pte_fault+0xfaf/0x61c0 [ 197.610566][T10746] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 197.610589][T10746] ? __pfx_handle_pte_fault+0x10/0x10 [ 197.610616][T10746] ? rcu_is_watching+0x15/0xb0 [ 197.610649][T10746] ? __lock_acquire+0xad5/0xd80 [ 197.610680][T10746] ? __lock_acquire+0xad5/0xd80 [ 197.610702][T10746] ? do_raw_spin_lock+0x151/0x370 [ 197.610734][T10746] handle_mm_fault+0x1129/0x1bf0 [ 197.610786][T10746] ? __pfx_handle_mm_fault+0x10/0x10 [ 197.610809][T10746] ? follow_page_pte+0xec9/0x15e0 [ 197.610846][T10746] ? __pfx_find_vma+0x10/0x10 [ 197.610869][T10746] ? vma_is_secretmem+0xd/0x50 [ 197.610887][T10746] ? check_vma_flags+0x51b/0x590 [ 197.610913][T10746] __get_user_pages+0x1adc/0x4180 [ 197.610973][T10746] ? __pfx___get_user_pages+0x10/0x10 [ 197.610995][T10746] ? __gup_longterm_locked+0xd86/0x1850 [ 197.611019][T10746] ? __pfx_down_read_killable+0x10/0x10 [ 197.611042][T10746] ? __up_read+0x2c4/0x6b0 [ 197.611065][T10746] ? __pfx___up_read+0x10/0x10 [ 197.611090][T10746] ? __lock_acquire+0xad5/0xd80 [ 197.611110][T10746] __gup_longterm_locked+0xec1/0x1850 [ 197.611151][T10746] ? rcu_is_watching+0x15/0xb0 [ 197.611171][T10746] ? ___pte_offset_map+0x29a/0x350 [ 197.611193][T10746] ? __pfx___gup_longterm_locked+0x10/0x10 [ 197.611220][T10746] ? sanity_check_pinned_pages+0x11b9/0x12a0 [ 197.611244][T10746] ? gup_fast_fallback+0x203f/0x2980 [ 197.611270][T10746] gup_fast_fallback+0x2227/0x2980 [ 197.611329][T10746] ? __pfx_gup_fast_fallback+0x10/0x10 [ 197.611350][T10746] ? unwind_get_return_address+0x4d/0x90 [ 197.611372][T10746] ? arch_stack_walk+0xff/0x150 [ 197.611408][T10746] ? stack_trace_save+0x11a/0x1d0 [ 197.611433][T10746] ? __pfx_stack_trace_save+0x10/0x10 [ 197.611459][T10746] ? stack_depot_save_flags+0x44/0x940 [ 197.611480][T10746] ? stack_trace_save+0x11a/0x1d0 [ 197.611501][T10746] ? is_valid_gup_args+0x124/0x200 [ 197.611525][T10746] pin_user_pages_fast+0xd2/0x160 [ 197.611546][T10746] ? __kmalloc_noprof+0x28e/0x4d0 [ 197.611566][T10746] ? sock_kmalloc+0xd7/0x160 [ 197.611589][T10746] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 197.611609][T10746] ? __x64_sys_recvmmsg+0x1ab/0x260 [ 197.611629][T10746] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.611662][T10746] iov_iter_extract_pages+0x3bd/0x5c0 [ 197.611687][T10746] extract_iter_to_sg+0xebc/0x2680 [ 197.611727][T10746] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 197.611756][T10746] ? rcu_is_watching+0x15/0xb0 [ 197.611775][T10746] ? trace_kmalloc+0x1f/0xd0 [ 197.611793][T10746] ? __kmalloc_noprof+0x2ae/0x4d0 [ 197.611820][T10746] ? __asan_memset+0x23/0x50 [ 197.611840][T10746] af_alg_get_rsgl+0x41e/0x860 [ 197.611884][T10746] skcipher_recvmsg+0x3fa/0x1250 [ 197.611927][T10746] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 197.611951][T10746] ? __import_iovec+0x585/0x830 [ 197.611968][T10746] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 197.611992][T10746] sock_recvmsg_nosec+0x18e/0x1d0 [ 197.612022][T10746] ____sys_recvmsg+0x3d4/0x480 [ 197.612053][T10746] ? __pfx_____sys_recvmsg+0x10/0x10 [ 197.612098][T10746] do_recvmmsg+0x428/0xab0 [ 197.612132][T10746] ? __pfx_do_recvmmsg+0x10/0x10 [ 197.612171][T10746] ? rcu_read_lock_any_held+0xbb/0x160 [ 197.612192][T10746] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 197.612216][T10746] ? vfs_write+0xb29/0xd10 [ 197.612245][T10746] ? ksys_write+0x24e/0x2d0 [ 197.612267][T10746] ? __mutex_unlock_slowpath+0x229/0x800 [ 197.612298][T10746] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 197.612315][T10746] ? __fget_files+0x2a/0x420 [ 197.612355][T10746] __x64_sys_recvmmsg+0x1ab/0x260 [ 197.612380][T10746] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 197.612408][T10746] ? do_syscall_64+0xb6/0x230 [ 197.612430][T10746] do_syscall_64+0xf3/0x230 [ 197.612448][T10746] ? clear_bhb_loop+0x45/0xa0 [ 197.612469][T10746] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 197.612484][T10746] RIP: 0033:0x7f68a618e169 [ 197.612501][T10746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 197.612514][T10746] RSP: 002b:00007f68a6f39038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 197.612532][T10746] RAX: ffffffffffffffda RBX: 00007f68a63b5fa0 RCX: 00007f68a618e169 [ 197.612544][T10746] RDX: 000000000000001e RSI: 0000200000000240 RDI: 0000000000000004 [ 197.612555][T10746] RBP: 00007f68a6f39090 R08: 0000000000000000 R09: 0000000000000000 [ 197.612565][T10746] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 197.612575][T10746] R13: 0000000000000000 R14: 00007f68a63b5fa0 R15: 00007ffee6fd2448 [ 197.612605][T10746] [ 198.274618][T10765] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1738'. [ 198.486732][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1739'. [ 198.532463][T10775] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1739'. [ 199.021467][T10807] netlink: 'syz.3.1752': attribute type 1 has an invalid length. [ 199.066502][ T5841] block nbd23: Receive control failed (result -107) [ 199.104531][T10808] nbd23: detected capacity change from 0 to 32 [ 200.180790][T10843] netlink: 'syz.2.1762': attribute type 1 has an invalid length. [ 200.194251][T10843] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1762'. [ 200.222538][T10861] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1768'. [ 200.415371][T10872] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1772'. [ 200.562864][T10880] nbd: must specify a size in bytes for the device [ 200.907616][T10874] team0 (unregistering): Port device team_slave_0 removed [ 200.938714][T10874] team0 (unregistering): Port device team_slave_1 removed [ 201.059683][T10907] syzkaller1: entered promiscuous mode [ 201.078600][T10907] syzkaller1: entered allmulticast mode [ 201.153584][T10915] ipvlan2: entered promiscuous mode [ 201.229488][T10923] lo: entered allmulticast mode [ 201.247565][T10923] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 201.341417][T10926] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1786'. [ 201.442024][T10932] netlink: 'syz.0.1789': attribute type 3 has an invalid length. [ 201.456588][T10932] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1789'. [ 201.467195][T10930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.507681][T10930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.520650][T10930] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 201.537527][T10930] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 201.567180][T10930] ipvlan2: entered promiscuous mode [ 201.711215][T10944] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 201.869559][T10955] sctp: [Deprecated]: syz.2.1796 (pid 10955) Use of int in max_burst socket option. [ 201.869559][T10955] Use struct sctp_assoc_value instead [ 201.903518][T10957] FAULT_INJECTION: forcing a failure. [ 201.903518][T10957] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 201.907913][T10955] IPVS: Error joining to the multicast group [ 201.938911][T10957] CPU: 1 UID: 0 PID: 10957 Comm: syz.3.1799 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 201.938938][T10957] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 201.938948][T10957] Call Trace: [ 201.938956][T10957] [ 201.938963][T10957] dump_stack_lvl+0x241/0x360 [ 201.938995][T10957] ? __pfx_dump_stack_lvl+0x10/0x10 [ 201.939019][T10957] ? __pfx__printk+0x10/0x10 [ 201.939054][T10957] should_fail_ex+0x424/0x570 [ 201.939080][T10957] prepare_alloc_pages+0x220/0x610 [ 201.939108][T10957] __alloc_frozen_pages_noprof+0x162/0x5b0 [ 201.939131][T10957] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 201.939158][T10957] ? __lock_acquire+0xad5/0xd80 [ 201.939186][T10957] alloc_pages_mpol+0x339/0x690 [ 201.939221][T10957] ? __pfx_alloc_pages_mpol+0x10/0x10 [ 201.939254][T10957] vma_alloc_folio_noprof+0x12d/0x260 [ 201.939279][T10957] ? __pfx_vma_alloc_folio_noprof+0x10/0x10 [ 201.939312][T10957] folio_prealloc+0x2e/0x170 [ 201.939339][T10957] do_wp_page+0x14f6/0x5e00 [ 201.939366][T10957] ? __lock_acquire+0xad5/0xd80 [ 201.939396][T10957] ? __pfx_do_wp_page+0x10/0x10 [ 201.939424][T10957] ? __lock_acquire+0xad5/0xd80 [ 201.939446][T10957] ? do_raw_spin_lock+0x151/0x370 [ 201.939489][T10957] handle_pte_fault+0xfaf/0x61c0 [ 201.939522][T10957] ? __pfx_cgroup_rstat_updated+0x10/0x10 [ 201.939558][T10957] ? __pfx_handle_pte_fault+0x10/0x10 [ 201.939588][T10957] ? rcu_is_watching+0x15/0xb0 [ 201.939613][T10957] ? __lock_acquire+0xad5/0xd80 [ 201.939646][T10957] ? __lock_acquire+0xad5/0xd80 [ 201.939668][T10957] ? do_raw_spin_lock+0x151/0x370 [ 201.939701][T10957] handle_mm_fault+0x1129/0x1bf0 [ 201.939755][T10957] ? __pfx_handle_mm_fault+0x10/0x10 [ 201.939778][T10957] ? follow_page_pte+0xec9/0x15e0 [ 201.939816][T10957] ? __pfx_find_vma+0x10/0x10 [ 201.939840][T10957] ? vma_is_secretmem+0xd/0x50 [ 201.939860][T10957] ? check_vma_flags+0x51b/0x590 [ 201.939889][T10957] __get_user_pages+0x1adc/0x4180 [ 201.939952][T10957] ? __pfx___get_user_pages+0x10/0x10 [ 201.939973][T10957] ? __gup_longterm_locked+0xd86/0x1850 [ 201.939998][T10957] ? __pfx_down_read_killable+0x10/0x10 [ 201.940021][T10957] ? __up_read+0x2c4/0x6b0 [ 201.940043][T10957] ? __pfx___up_read+0x10/0x10 [ 201.940066][T10957] ? __lock_acquire+0xad5/0xd80 [ 201.940085][T10957] __gup_longterm_locked+0xec1/0x1850 [ 201.940127][T10957] ? rcu_is_watching+0x15/0xb0 [ 201.940146][T10957] ? ___pte_offset_map+0x29a/0x350 [ 201.940168][T10957] ? __pfx___gup_longterm_locked+0x10/0x10 [ 201.940194][T10957] ? sanity_check_pinned_pages+0x11b9/0x12a0 [ 201.940230][T10957] ? gup_fast_fallback+0x203f/0x2980 [ 201.940257][T10957] gup_fast_fallback+0x2227/0x2980 [ 201.940314][T10957] ? __pfx_gup_fast_fallback+0x10/0x10 [ 201.940335][T10957] ? unwind_get_return_address+0x4d/0x90 [ 201.940357][T10957] ? arch_stack_walk+0xff/0x150 [ 201.940392][T10957] ? stack_trace_save+0x11a/0x1d0 [ 201.940418][T10957] ? __pfx_stack_trace_save+0x10/0x10 [ 201.940444][T10957] ? stack_depot_save_flags+0x44/0x940 [ 201.940465][T10957] ? stack_trace_save+0x11a/0x1d0 [ 201.940488][T10957] ? is_valid_gup_args+0x124/0x200 [ 201.940510][T10957] pin_user_pages_fast+0xd2/0x160 [ 201.940530][T10957] ? __kmalloc_noprof+0x28e/0x4d0 [ 201.940548][T10957] ? sock_kmalloc+0xd7/0x160 [ 201.940567][T10957] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 201.940586][T10957] ? __x64_sys_recvmmsg+0x1ab/0x260 [ 201.940603][T10957] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.940623][T10957] iov_iter_extract_pages+0x3bd/0x5c0 [ 201.940647][T10957] extract_iter_to_sg+0xebc/0x2680 [ 201.940680][T10957] ? __pfx_extract_iter_to_sg+0x10/0x10 [ 201.940702][T10957] ? rcu_is_watching+0x15/0xb0 [ 201.940717][T10957] ? trace_kmalloc+0x1f/0xd0 [ 201.940731][T10957] ? __kmalloc_noprof+0x2ae/0x4d0 [ 201.940753][T10957] ? __asan_memset+0x23/0x50 [ 201.940768][T10957] af_alg_get_rsgl+0x41e/0x860 [ 201.940801][T10957] skcipher_recvmsg+0x3fa/0x1250 [ 201.940836][T10957] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 201.940856][T10957] ? __import_iovec+0x585/0x830 [ 201.940868][T10957] ? __pfx_skcipher_recvmsg+0x10/0x10 [ 201.940887][T10957] sock_recvmsg_nosec+0x18e/0x1d0 [ 201.940911][T10957] ____sys_recvmsg+0x3d4/0x480 [ 201.940936][T10957] ? __pfx_____sys_recvmsg+0x10/0x10 [ 201.940974][T10957] do_recvmmsg+0x428/0xab0 [ 201.941001][T10957] ? __pfx_do_recvmmsg+0x10/0x10 [ 201.941032][T10957] ? rcu_read_lock_any_held+0xbb/0x160 [ 201.941049][T10957] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 201.941070][T10957] ? vfs_write+0xb29/0xd10 [ 201.941096][T10957] ? ksys_write+0x24e/0x2d0 [ 201.941115][T10957] ? __mutex_unlock_slowpath+0x229/0x800 [ 201.941140][T10957] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 201.941154][T10957] ? __fget_files+0x2a/0x420 [ 201.941189][T10957] __x64_sys_recvmmsg+0x1ab/0x260 [ 201.941219][T10957] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 201.941242][T10957] ? do_syscall_64+0xb6/0x230 [ 201.941259][T10957] do_syscall_64+0xf3/0x230 [ 201.941273][T10957] ? clear_bhb_loop+0x45/0xa0 [ 201.941290][T10957] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 201.941304][T10957] RIP: 0033:0x7f932598e169 [ 201.941318][T10957] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 201.941329][T10957] RSP: 002b:00007f932679d038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 201.941345][T10957] RAX: ffffffffffffffda RBX: 00007f9325bb5fa0 RCX: 00007f932598e169 [ 201.941355][T10957] RDX: 000000000000001e RSI: 0000200000000240 RDI: 0000000000000004 [ 201.941366][T10957] RBP: 00007f932679d090 R08: 0000000000000000 R09: 0000000000000000 [ 201.941375][T10957] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000002 [ 201.941385][T10957] R13: 0000000000000000 R14: 00007f9325bb5fa0 R15: 00007ffd4ea7c0e8 [ 201.941412][T10957] [ 202.593009][ T5841] block nbd24: Receive control failed (result -107) [ 202.616538][T10959] nbd24: detected capacity change from 0 to 32 [ 202.716677][T10973] netlink: 'syz.0.1804': attribute type 4 has an invalid length. [ 202.920410][T10987] syzkaller0: entered promiscuous mode [ 202.926171][T10987] syzkaller0: entered allmulticast mode [ 202.953140][T10989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.980886][T10989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.991610][T10989] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.002645][T10989] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.014002][T10989] ipvlan3: entered promiscuous mode [ 204.543921][T11012] __nla_validate_parse: 6 callbacks suppressed [ 204.543942][T11012] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1814'. [ 204.634147][T11012] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1814'. [ 204.670003][T11012] A link change request failed with some changes committed already. Interface macvlan1 may have been left with an inconsistent configuration, please check. [ 204.743953][T11024] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1817'. [ 205.090844][T11042] FAULT_INJECTION: forcing a failure. [ 205.090844][T11042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.125298][T11042] CPU: 0 UID: 0 PID: 11042 Comm: syz.2.1822 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 205.125325][T11042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 205.125335][T11042] Call Trace: [ 205.125342][T11042] [ 205.125349][T11042] dump_stack_lvl+0x241/0x360 [ 205.125382][T11042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.125405][T11042] ? __pfx__printk+0x10/0x10 [ 205.125441][T11042] should_fail_ex+0x424/0x570 [ 205.125468][T11042] _copy_from_user+0x2d/0xb0 [ 205.125486][T11042] do_tcp_setsockopt+0x414/0x2670 [ 205.125507][T11042] ? __pfx_do_tcp_setsockopt+0x10/0x10 [ 205.125525][T11042] ? ksys_write+0x24e/0x2d0 [ 205.125543][T11042] ? __pfx_aa_sk_perm+0x10/0x10 [ 205.125568][T11042] ? aa_sock_opt_perm+0x79/0x120 [ 205.125590][T11042] ? tcp_setsockopt+0x3e/0xf0 [ 205.125607][T11042] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 205.125624][T11042] do_sock_setsockopt+0x3b1/0x710 [ 205.125651][T11042] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 205.125668][T11042] ? __fget_files+0x2a/0x420 [ 205.125695][T11042] ? __fget_files+0x39d/0x420 [ 205.125717][T11042] ? __fget_files+0x2a/0x420 [ 205.125749][T11042] __x64_sys_setsockopt+0x1ee/0x280 [ 205.125775][T11042] do_syscall_64+0xf3/0x230 [ 205.125795][T11042] ? clear_bhb_loop+0x45/0xa0 [ 205.125815][T11042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.125832][T11042] RIP: 0033:0x7f20a9d8e169 [ 205.125847][T11042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 205.125861][T11042] RSP: 002b:00007f20a7bf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 205.125879][T11042] RAX: ffffffffffffffda RBX: 00007f20a9fb5fa0 RCX: 00007f20a9d8e169 [ 205.125892][T11042] RDX: 0000000000000004 RSI: 0000000000000006 RDI: 0000000000000003 [ 205.125902][T11042] RBP: 00007f20a7bf6090 R08: 0000000000000004 R09: 0000000000000000 [ 205.125912][T11042] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 205.125930][T11042] R13: 0000000000000000 R14: 00007f20a9fb5fa0 R15: 00007ffcbc35efc8 [ 205.125963][T11042] [ 205.382123][T11047] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 205.438504][ T7835] hid-generic 0005:16C0:05DF.0002: item fetching failed at offset 0/1 [ 205.447855][ T7835] hid-generic 0005:16C0:05DF.0002: probe with driver hid-generic failed with error -22 [ 205.646836][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1828'. [ 205.832442][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1835'. [ 205.841031][T11075] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1836'. [ 206.201882][T11093] netlink: 'syz.4.1844': attribute type 17 has an invalid length. [ 206.375775][T11106] netlink: 'syz.3.1849': attribute type 4 has an invalid length. [ 206.383265][T11107] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1851'. [ 206.427749][T11111] netlink: 'syz.3.1849': attribute type 4 has an invalid length. [ 206.449259][T11113] FAULT_INJECTION: forcing a failure. [ 206.449259][T11113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 206.512450][T11113] CPU: 0 UID: 0 PID: 11113 Comm: syz.1.1852 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 206.512478][T11113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 206.512488][T11113] Call Trace: [ 206.512496][T11113] [ 206.512503][T11113] dump_stack_lvl+0x241/0x360 [ 206.512534][T11113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.512557][T11113] ? __pfx__printk+0x10/0x10 [ 206.512591][T11113] should_fail_ex+0x424/0x570 [ 206.512617][T11113] _copy_to_user+0x31/0xb0 [ 206.512637][T11113] simple_read_from_buffer+0xc4/0x170 [ 206.512665][T11113] proc_fail_nth_read+0x1ef/0x260 [ 206.512689][T11113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.512709][T11113] ? rw_verify_area+0x246/0x630 [ 206.512726][T11113] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 206.512745][T11113] vfs_read+0x21f/0xb90 [ 206.512768][T11113] ? __pfx___mutex_lock+0x10/0x10 [ 206.512788][T11113] ? __pfx_vfs_read+0x10/0x10 [ 206.512808][T11113] ? __fget_files+0x2a/0x420 [ 206.512833][T11113] ? __fget_files+0x39d/0x420 [ 206.512855][T11113] ? __fget_files+0x2a/0x420 [ 206.512887][T11113] ksys_read+0x19d/0x2d0 [ 206.512907][T11113] ? __pfx_ksys_read+0x10/0x10 [ 206.512931][T11113] ? do_syscall_64+0xb6/0x230 [ 206.512959][T11113] do_syscall_64+0xf3/0x230 [ 206.512977][T11113] ? clear_bhb_loop+0x45/0xa0 [ 206.512997][T11113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.513013][T11113] RIP: 0033:0x7ff75b38cb7c [ 206.513028][T11113] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 206.513042][T11113] RSP: 002b:00007ff75c2aa030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 206.513064][T11113] RAX: ffffffffffffffda RBX: 00007ff75b5b5fa0 RCX: 00007ff75b38cb7c [ 206.513076][T11113] RDX: 000000000000000f RSI: 00007ff75c2aa0a0 RDI: 0000000000000005 [ 206.513095][T11113] RBP: 00007ff75c2aa090 R08: 0000000000000000 R09: 0000000000000000 [ 206.513105][T11113] R10: 0000200000000300 R11: 0000000000000246 R12: 0000000000000001 [ 206.513115][T11113] R13: 0000000000000000 R14: 00007ff75b5b5fa0 R15: 00007ffde4090418 [ 206.513144][T11113] [ 207.119198][T11128] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1856'. [ 207.129982][T11128] netlink: 156 bytes leftover after parsing attributes in process `syz.1.1856'. [ 207.283823][T11136] FAULT_INJECTION: forcing a failure. [ 207.283823][T11136] name failslab, interval 1, probability 0, space 0, times 0 [ 207.351394][T11136] CPU: 1 UID: 0 PID: 11136 Comm: syz.3.1860 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 207.351421][T11136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 207.351431][T11136] Call Trace: [ 207.351438][T11136] [ 207.351446][T11136] dump_stack_lvl+0x241/0x360 [ 207.351478][T11136] ? __pfx_dump_stack_lvl+0x10/0x10 [ 207.351505][T11136] ? __pfx__printk+0x10/0x10 [ 207.351533][T11136] ? __pfx___might_resched+0x10/0x10 [ 207.351559][T11136] should_fail_ex+0x424/0x570 [ 207.351585][T11136] should_failslab+0xac/0x100 [ 207.351611][T11136] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 207.351633][T11136] ? __alloc_skb+0x1c2/0x480 [ 207.351651][T11136] ? __dev_queue_xmit+0x1780/0x3f60 [ 207.351677][T11136] __alloc_skb+0x1c2/0x480 [ 207.351695][T11136] ? do_syscall_64+0xf3/0x230 [ 207.351718][T11136] ? __pfx___alloc_skb+0x10/0x10 [ 207.351743][T11136] ? netlink_ack_tlv_len+0x6e/0x200 [ 207.351764][T11136] netlink_ack+0x147/0xa70 [ 207.351781][T11136] ? __pfx_nl80211_del_pmksa+0x10/0x10 [ 207.351820][T11136] netlink_rcv_skb+0x296/0x480 [ 207.351838][T11136] ? __pfx_genl_rcv_msg+0x10/0x10 [ 207.351860][T11136] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 207.351897][T11136] ? netlink_deliver_tap+0x2e/0x1b0 [ 207.351920][T11136] genl_rcv+0x28/0x40 [ 207.351938][T11136] netlink_unicast+0x7f8/0x9a0 [ 207.351978][T11136] ? __pfx_netlink_unicast+0x10/0x10 [ 207.352005][T11136] ? skb_put+0x114/0x1f0 [ 207.352028][T11136] netlink_sendmsg+0x8c3/0xcd0 [ 207.352058][T11136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.352080][T11136] ? aa_sock_msg_perm+0x91/0x160 [ 207.352108][T11136] ? __pfx_netlink_sendmsg+0x10/0x10 [ 207.352123][T11136] __sock_sendmsg+0x221/0x270 [ 207.352151][T11136] ____sys_sendmsg+0x523/0x860 [ 207.352179][T11136] ? __pfx_____sys_sendmsg+0x10/0x10 [ 207.352196][T11136] ? __fget_files+0x2a/0x420 [ 207.352226][T11136] ? __fget_files+0x2a/0x420 [ 207.352257][T11136] __sys_sendmsg+0x271/0x360 [ 207.352282][T11136] ? __pfx___sys_sendmsg+0x10/0x10 [ 207.352356][T11136] ? do_syscall_64+0xb6/0x230 [ 207.352377][T11136] do_syscall_64+0xf3/0x230 [ 207.352394][T11136] ? clear_bhb_loop+0x45/0xa0 [ 207.352415][T11136] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 207.352431][T11136] RIP: 0033:0x7f932598e169 [ 207.352446][T11136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 207.352459][T11136] RSP: 002b:00007f932679d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 207.352477][T11136] RAX: ffffffffffffffda RBX: 00007f9325bb5fa0 RCX: 00007f932598e169 [ 207.352489][T11136] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 207.352500][T11136] RBP: 00007f932679d090 R08: 0000000000000000 R09: 0000000000000000 [ 207.352510][T11136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 207.352520][T11136] R13: 0000000000000000 R14: 00007f9325bb5fa0 R15: 00007ffd4ea7c0e8 [ 207.352549][T11136] [ 207.401818][T11143] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1864'. [ 209.151725][T11217] vxcan3: entered allmulticast mode [ 209.621091][T11232] __nla_validate_parse: 6 callbacks suppressed [ 209.621109][T11232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1892'. [ 209.666457][ T5841] block nbd25: Receive control failed (result -107) [ 209.706752][T11228] nbd25: detected capacity change from 0 to 32 [ 210.050608][T11256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1902'. [ 210.113272][T11261] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1905'. [ 210.292189][T11272] ipvlan3: entered promiscuous mode [ 210.340697][T11269] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1908'. [ 211.152613][T11303] SET target dimension over the limit! [ 211.236042][T11310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1923'. [ 211.261799][T11314] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1926'. [ 211.317924][T11316] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1927'. [ 211.396681][T11321] netlink: 292 bytes leftover after parsing attributes in process `syz.3.1929'. [ 211.408375][T11321] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1929'. [ 211.566461][T11332] netlink: 'syz.3.1931': attribute type 4 has an invalid length. [ 211.800690][T11344] netlink: 'syz.3.1937': attribute type 17 has an invalid length. [ 212.229780][T11367] FAULT_INJECTION: forcing a failure. [ 212.229780][T11367] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 212.243427][T11367] CPU: 0 UID: 0 PID: 11367 Comm: syz.3.1947 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 212.243451][T11367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 212.243461][T11367] Call Trace: [ 212.243469][T11367] [ 212.243476][T11367] dump_stack_lvl+0x241/0x360 [ 212.243508][T11367] ? __pfx_dump_stack_lvl+0x10/0x10 [ 212.243531][T11367] ? __pfx__printk+0x10/0x10 [ 212.243563][T11367] should_fail_ex+0x424/0x570 [ 212.243588][T11367] _copy_to_user+0x31/0xb0 [ 212.243608][T11367] simple_read_from_buffer+0xc4/0x170 [ 212.243636][T11367] proc_fail_nth_read+0x1ef/0x260 [ 212.243656][T11367] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 212.243677][T11367] ? rw_verify_area+0x246/0x630 [ 212.243694][T11367] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 212.243713][T11367] vfs_read+0x21f/0xb90 [ 212.243736][T11367] ? __pfx___mutex_lock+0x10/0x10 [ 212.243757][T11367] ? __pfx_vfs_read+0x10/0x10 [ 212.243779][T11367] ? __fget_files+0x2a/0x420 [ 212.243804][T11367] ? __fget_files+0x39d/0x420 [ 212.243826][T11367] ? __fget_files+0x2a/0x420 [ 212.243860][T11367] ksys_read+0x19d/0x2d0 [ 212.243880][T11367] ? __pfx_ksys_read+0x10/0x10 [ 212.243906][T11367] ? do_syscall_64+0xb6/0x230 [ 212.243927][T11367] do_syscall_64+0xf3/0x230 [ 212.243946][T11367] ? clear_bhb_loop+0x45/0xa0 [ 212.243967][T11367] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.243983][T11367] RIP: 0033:0x7f932598cb7c [ 212.243998][T11367] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 212.244016][T11367] RSP: 002b:00007f932679d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 212.244033][T11367] RAX: ffffffffffffffda RBX: 00007f9325bb5fa0 RCX: 00007f932598cb7c [ 212.244044][T11367] RDX: 000000000000000f RSI: 00007f932679d0a0 RDI: 0000000000000005 [ 212.244054][T11367] RBP: 00007f932679d090 R08: 0000000000000000 R09: 0000000000000000 [ 212.244062][T11367] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 212.244071][T11367] R13: 0000000000000000 R14: 00007f9325bb5fa0 R15: 00007ffd4ea7c0e8 [ 212.244097][T11367] [ 212.611255][T11373] netlink: 'syz.3.1949': attribute type 17 has an invalid length. [ 212.635880][T11377] netlink: 'syz.0.1953': attribute type 17 has an invalid length. [ 212.698443][T11383] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1954'. [ 212.818837][ T5841] block nbd26: Receive control failed (result -107) [ 212.867028][T11386] nbd26: detected capacity change from 0 to 32 [ 213.207678][T11408] netlink: 'syz.3.1964': attribute type 17 has an invalid length. [ 213.373232][T11415] nbd: socks must be embedded in a SOCK_ITEM attr [ 213.796232][T11444] FAULT_INJECTION: forcing a failure. [ 213.796232][T11444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 213.810172][T11444] CPU: 0 UID: 0 PID: 11444 Comm: syz.2.1978 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 213.810198][T11444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 213.810208][T11444] Call Trace: [ 213.810215][T11444] [ 213.810222][T11444] dump_stack_lvl+0x241/0x360 [ 213.810253][T11444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 213.810275][T11444] ? __pfx__printk+0x10/0x10 [ 213.810308][T11444] should_fail_ex+0x424/0x570 [ 213.810333][T11444] _copy_from_user+0x2d/0xb0 [ 213.810351][T11444] copy_msghdr_from_user+0xb3/0x580 [ 213.810379][T11444] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 213.810405][T11444] ? __fget_files+0x2a/0x420 [ 213.810429][T11444] ? __fget_files+0x2a/0x420 [ 213.810459][T11444] __sys_sendmsg+0x20a/0x360 [ 213.810485][T11444] ? __pfx___sys_sendmsg+0x10/0x10 [ 213.810553][T11444] ? do_syscall_64+0xb6/0x230 [ 213.810574][T11444] do_syscall_64+0xf3/0x230 [ 213.810591][T11444] ? clear_bhb_loop+0x45/0xa0 [ 213.810610][T11444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 213.810625][T11444] RIP: 0033:0x7f20a9d8e169 [ 213.810640][T11444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 213.810654][T11444] RSP: 002b:00007f20a7bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 213.810672][T11444] RAX: ffffffffffffffda RBX: 00007f20a9fb5fa0 RCX: 00007f20a9d8e169 [ 213.810683][T11444] RDX: 0000000000004844 RSI: 0000200000000200 RDI: 0000000000000003 [ 213.810692][T11444] RBP: 00007f20a7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 213.810702][T11444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 213.810711][T11444] R13: 0000000000000000 R14: 00007f20a9fb5fa0 R15: 00007ffcbc35efc8 [ 213.810743][T11444] [ 214.047894][T11442] vlan2: entered allmulticast mode [ 214.055802][T11442] batadv0: entered allmulticast mode [ 214.166933][T11446] netlink: 'syz.4.1979': attribute type 17 has an invalid length. [ 214.415559][T11466] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20003 [ 214.723323][T11487] netlink: 'syz.2.1995': attribute type 17 has an invalid length. [ 214.810449][T11491] __nla_validate_parse: 5 callbacks suppressed [ 214.810470][T11491] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1999'. [ 214.810932][T11492] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1998'. [ 214.878632][T11492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.995809][T11501] caif0: Master is either lo or non-ether device [ 215.152947][T11510] netlink: 144 bytes leftover after parsing attributes in process `syz.4.2006'. [ 215.183671][T11510] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2006'. [ 215.207276][T11510] netlink: 196 bytes leftover after parsing attributes in process `syz.4.2006'. [ 215.219124][T11510] netlink: 19 bytes leftover after parsing attributes in process `syz.4.2006'. [ 215.226701][T11514] FAULT_INJECTION: forcing a failure. [ 215.226701][T11514] name failslab, interval 1, probability 0, space 0, times 0 [ 215.233331][T11513] netlink: 'syz.2.2008': attribute type 17 has an invalid length. [ 215.249729][T11514] CPU: 1 UID: 0 PID: 11514 Comm: syz.1.2007 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 215.249753][T11514] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 215.249763][T11514] Call Trace: [ 215.249770][T11514] [ 215.249777][T11514] dump_stack_lvl+0x241/0x360 [ 215.249807][T11514] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.249830][T11514] ? __pfx__printk+0x10/0x10 [ 215.249857][T11514] ? __pfx___might_resched+0x10/0x10 [ 215.249882][T11514] should_fail_ex+0x424/0x570 [ 215.249908][T11514] should_failslab+0xac/0x100 [ 215.249932][T11514] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 215.249956][T11514] ? __alloc_skb+0x1c2/0x480 [ 215.249979][T11514] __alloc_skb+0x1c2/0x480 [ 215.250003][T11514] ? __pfx___alloc_skb+0x10/0x10 [ 215.250024][T11514] ? netlink_autobind+0xd6/0x2f0 [ 215.250040][T11514] ? netlink_autobind+0x2b0/0x2f0 [ 215.250062][T11514] netlink_sendmsg+0x638/0xcd0 [ 215.250092][T11514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.250113][T11514] ? aa_sock_msg_perm+0x91/0x160 [ 215.250142][T11514] ? __pfx_netlink_sendmsg+0x10/0x10 [ 215.250156][T11514] __sock_sendmsg+0x221/0x270 [ 215.250184][T11514] ____sys_sendmsg+0x523/0x860 [ 215.250214][T11514] ? __pfx_____sys_sendmsg+0x10/0x10 [ 215.250232][T11514] ? __fget_files+0x2a/0x420 [ 215.250258][T11514] ? __fget_files+0x2a/0x420 [ 215.250291][T11514] __sys_sendmsg+0x271/0x360 [ 215.250323][T11514] ? __pfx___sys_sendmsg+0x10/0x10 [ 215.250401][T11514] ? do_syscall_64+0xb6/0x230 [ 215.250423][T11514] do_syscall_64+0xf3/0x230 [ 215.250441][T11514] ? clear_bhb_loop+0x45/0xa0 [ 215.250461][T11514] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.250477][T11514] RIP: 0033:0x7ff75b38e169 [ 215.250491][T11514] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.250504][T11514] RSP: 002b:00007ff75c2aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 215.250523][T11514] RAX: ffffffffffffffda RBX: 00007ff75b5b5fa0 RCX: 00007ff75b38e169 [ 215.250535][T11514] RDX: 0000000000004844 RSI: 0000200000000200 RDI: 0000000000000003 [ 215.250546][T11514] RBP: 00007ff75c2aa090 R08: 0000000000000000 R09: 0000000000000000 [ 215.250556][T11514] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 215.250565][T11514] R13: 0000000000000000 R14: 00007ff75b5b5fa0 R15: 00007ffde4090418 [ 215.250594][T11514] [ 215.610992][T11523] netlink: 292 bytes leftover after parsing attributes in process `syz.1.2012'. [ 215.645895][T11523] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2012'. [ 215.695550][T11526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2013'. [ 215.770231][T11533] syz_tun: entered allmulticast mode [ 215.797502][T11533] lo: entered allmulticast mode [ 215.831300][T11539] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2018'. [ 215.843870][T11533] syz_tun: left allmulticast mode [ 215.859341][T11533] lo: left allmulticast mode [ 215.932514][T11545] netlink: zone id is out of range [ 215.946689][T11545] netlink: 'syz.0.2021': attribute type 1 has an invalid length. [ 216.247898][T11565] ipvlan2: entered promiscuous mode [ 216.345878][T11584] netlink: 'syz.0.2029': attribute type 4 has an invalid length. [ 216.584160][ T5841] block nbd27: Receive control failed (result -107) [ 216.627828][T11600] FAULT_INJECTION: forcing a failure. [ 216.627828][T11600] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 216.670017][T11571] nbd27: detected capacity change from 0 to 32 [ 216.687527][T11600] CPU: 0 UID: 0 PID: 11600 Comm: syz.1.2034 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 216.687548][T11600] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 216.687557][T11600] Call Trace: [ 216.687563][T11600] [ 216.687569][T11600] dump_stack_lvl+0x241/0x360 [ 216.687595][T11600] ? __pfx_dump_stack_lvl+0x10/0x10 [ 216.687614][T11600] ? __pfx__printk+0x10/0x10 [ 216.687644][T11600] should_fail_ex+0x424/0x570 [ 216.687665][T11600] _copy_from_iter+0x211/0x1c70 [ 216.687691][T11600] ? __build_skb_around+0x247/0x3d0 [ 216.687710][T11600] ? __alloc_skb+0x298/0x480 [ 216.687725][T11600] ? __pfx__copy_from_iter+0x10/0x10 [ 216.687747][T11600] ? __pfx___alloc_skb+0x10/0x10 [ 216.687764][T11600] ? skb_put+0x114/0x1f0 [ 216.687785][T11600] netlink_sendmsg+0x73c/0xcd0 [ 216.687815][T11600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.687834][T11600] ? aa_sock_msg_perm+0x91/0x160 [ 216.687862][T11600] ? __pfx_netlink_sendmsg+0x10/0x10 [ 216.687876][T11600] __sock_sendmsg+0x221/0x270 [ 216.687912][T11600] ____sys_sendmsg+0x523/0x860 [ 216.687942][T11600] ? __pfx_____sys_sendmsg+0x10/0x10 [ 216.687961][T11600] ? __fget_files+0x2a/0x420 [ 216.687988][T11600] ? __fget_files+0x2a/0x420 [ 216.688020][T11600] __sys_sendmsg+0x271/0x360 [ 216.688052][T11600] ? __pfx___sys_sendmsg+0x10/0x10 [ 216.688128][T11600] ? do_syscall_64+0xb6/0x230 [ 216.688149][T11600] do_syscall_64+0xf3/0x230 [ 216.688167][T11600] ? clear_bhb_loop+0x45/0xa0 [ 216.688186][T11600] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 216.688202][T11600] RIP: 0033:0x7ff75b38e169 [ 216.688218][T11600] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 216.688232][T11600] RSP: 002b:00007ff75c2aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 216.688251][T11600] RAX: ffffffffffffffda RBX: 00007ff75b5b5fa0 RCX: 00007ff75b38e169 [ 216.688263][T11600] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 216.688274][T11600] RBP: 00007ff75c2aa090 R08: 0000000000000000 R09: 0000000000000000 [ 216.688284][T11600] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 216.688292][T11600] R13: 0000000000000000 R14: 00007ff75b5b5fa0 R15: 00007ffde4090418 [ 216.688322][T11600] [ 218.101219][T11675] FAULT_INJECTION: forcing a failure. [ 218.101219][T11675] name failslab, interval 1, probability 0, space 0, times 0 [ 218.140067][T11675] CPU: 1 UID: 0 PID: 11675 Comm: syz.1.2067 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 218.140093][T11675] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.140103][T11675] Call Trace: [ 218.140111][T11675] [ 218.140118][T11675] dump_stack_lvl+0x241/0x360 [ 218.140149][T11675] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.140173][T11675] ? __pfx__printk+0x10/0x10 [ 218.140194][T11675] ? __lock_acquire+0xad5/0xd80 [ 218.140222][T11675] should_fail_ex+0x424/0x570 [ 218.140249][T11675] should_failslab+0xac/0x100 [ 218.140273][T11675] kmem_cache_alloc_noprof+0x78/0x390 [ 218.140295][T11675] ? skb_clone+0x20c/0x390 [ 218.140321][T11675] skb_clone+0x20c/0x390 [ 218.140346][T11675] __netlink_deliver_tap+0x3c4/0x7f0 [ 218.140377][T11675] ? netlink_deliver_tap+0x2e/0x1b0 [ 218.140392][T11675] netlink_deliver_tap+0x19d/0x1b0 [ 218.140412][T11675] netlink_unicast+0x7c6/0x9a0 [ 218.140446][T11675] ? __pfx_netlink_unicast+0x10/0x10 [ 218.140472][T11675] ? skb_put+0x114/0x1f0 [ 218.140496][T11675] netlink_sendmsg+0x8c3/0xcd0 [ 218.140527][T11675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.140550][T11675] ? aa_sock_msg_perm+0x91/0x160 [ 218.140579][T11675] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.140594][T11675] __sock_sendmsg+0x221/0x270 [ 218.140623][T11675] ____sys_sendmsg+0x523/0x860 [ 218.140653][T11675] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.140672][T11675] ? __fget_files+0x2a/0x420 [ 218.140700][T11675] ? __fget_files+0x2a/0x420 [ 218.140734][T11675] __sys_sendmsg+0x271/0x360 [ 218.140761][T11675] ? __pfx___sys_sendmsg+0x10/0x10 [ 218.140854][T11675] ? do_syscall_64+0xb6/0x230 [ 218.140877][T11675] do_syscall_64+0xf3/0x230 [ 218.140895][T11675] ? clear_bhb_loop+0x45/0xa0 [ 218.140916][T11675] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.140932][T11675] RIP: 0033:0x7ff75b38e169 [ 218.140947][T11675] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.140961][T11675] RSP: 002b:00007ff75c2aa038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.140980][T11675] RAX: ffffffffffffffda RBX: 00007ff75b5b5fa0 RCX: 00007ff75b38e169 [ 218.140993][T11675] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 218.141003][T11675] RBP: 00007ff75c2aa090 R08: 0000000000000000 R09: 0000000000000000 [ 218.141014][T11675] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.141024][T11675] R13: 0000000000000000 R14: 00007ff75b5b5fa0 R15: 00007ffde4090418 [ 218.141057][T11675] [ 218.472535][T11675] ipvlan2: entered promiscuous mode [ 218.532113][T11682] FAULT_INJECTION: forcing a failure. [ 218.532113][T11682] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 218.557264][T11682] CPU: 1 UID: 0 PID: 11682 Comm: syz.2.2071 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 218.557289][T11682] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 218.557299][T11682] Call Trace: [ 218.557306][T11682] [ 218.557313][T11682] dump_stack_lvl+0x241/0x360 [ 218.557344][T11682] ? __pfx_dump_stack_lvl+0x10/0x10 [ 218.557367][T11682] ? __pfx__printk+0x10/0x10 [ 218.557403][T11682] should_fail_ex+0x424/0x570 [ 218.557428][T11682] _copy_from_iter+0x211/0x1c70 [ 218.557459][T11682] ? __build_skb_around+0x247/0x3d0 [ 218.557483][T11682] ? __alloc_skb+0x298/0x480 [ 218.557501][T11682] ? __pfx__copy_from_iter+0x10/0x10 [ 218.557527][T11682] ? __pfx___alloc_skb+0x10/0x10 [ 218.557548][T11682] ? skb_put+0x114/0x1f0 [ 218.557572][T11682] netlink_sendmsg+0x73c/0xcd0 [ 218.557600][T11682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.557621][T11682] ? aa_sock_msg_perm+0x91/0x160 [ 218.557650][T11682] ? __pfx_netlink_sendmsg+0x10/0x10 [ 218.557665][T11682] __sock_sendmsg+0x221/0x270 [ 218.557694][T11682] ____sys_sendmsg+0x523/0x860 [ 218.557732][T11682] ? __pfx_____sys_sendmsg+0x10/0x10 [ 218.557751][T11682] ? __fget_files+0x2a/0x420 [ 218.557779][T11682] ? __fget_files+0x2a/0x420 [ 218.557812][T11682] __sys_sendmsg+0x271/0x360 [ 218.557837][T11682] ? __pfx___sys_sendmsg+0x10/0x10 [ 218.557912][T11682] ? do_syscall_64+0xb6/0x230 [ 218.557934][T11682] do_syscall_64+0xf3/0x230 [ 218.557952][T11682] ? clear_bhb_loop+0x45/0xa0 [ 218.557970][T11682] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.557986][T11682] RIP: 0033:0x7f20a9d8e169 [ 218.557999][T11682] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 218.558011][T11682] RSP: 002b:00007f20a7bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 218.558029][T11682] RAX: ffffffffffffffda RBX: 00007f20a9fb5fa0 RCX: 00007f20a9d8e169 [ 218.558040][T11682] RDX: 0000000000004844 RSI: 0000200000000200 RDI: 0000000000000003 [ 218.558049][T11682] RBP: 00007f20a7bf6090 R08: 0000000000000000 R09: 0000000000000000 [ 218.558062][T11682] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 218.558075][T11682] R13: 0000000000000000 R14: 00007f20a9fb5fa0 R15: 00007ffcbc35efc8 [ 218.558101][T11682] [ 218.831235][T11689] ipvlan3: entered promiscuous mode [ 218.869054][T11687] vcan0: Master is either lo or non-ether device [ 219.037754][ T5913] IPVS: starting estimator thread 0... [ 219.144269][T11700] IPVS: using max 30 ests per chain, 72000 per kthread [ 219.341581][T11719] syz.2.2087 uses old SIOCAX25GETINFO [ 219.615176][T11731] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 219.682746][T11744] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 219.866458][ T5841] block nbd28: Receive control failed (result -107) [ 220.024592][T11750] nbd28: detected capacity change from 0 to 32 [ 220.293108][T11768] netlink: 'syz.3.2104': attribute type 16 has an invalid length. [ 220.460047][T11777] pimreg: entered allmulticast mode [ 220.490298][T11777] pimreg: left allmulticast mode [ 220.549635][T11783] __nla_validate_parse: 21 callbacks suppressed [ 220.549654][T11783] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2111'. [ 220.657683][T11790] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes. [ 220.812864][T11795] IPv6: NLM_F_REPLACE set, but no existing node found! [ 220.866277][T11797] ipvlan3: entered promiscuous mode [ 221.137996][T11806] netlink: 'syz.2.2119': attribute type 16 has an invalid length. [ 221.291597][T11816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2125'. [ 221.397623][T11818] netlink: 'syz.0.2124': attribute type 21 has an invalid length. [ 221.433634][T11820] netlink: 'syz.2.2123': attribute type 4 has an invalid length. [ 221.453581][T11818] netlink: 156 bytes leftover after parsing attributes in process `syz.0.2124'. [ 221.583587][T11829] netlink: zone id is out of range [ 221.613532][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2129'. [ 221.653274][T11832] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2130'. [ 221.709952][T11830] [ 221.712330][T11830] ====================================================== [ 221.719351][T11830] WARNING: possible circular locking dependency detected [ 221.726365][T11830] 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 Not tainted [ 221.733461][T11830] ------------------------------------------------------ [ 221.740467][T11830] syz.2.2129/11830 is trying to acquire lock: [ 221.746520][T11830] ffff88807c320aa8 (&smc->clcsock_release_lock){+.+.}-{4:4}, at: smc_switch_to_fallback+0x35/0xda0 [ 221.757218][T11830] [ 221.757218][T11830] but task is already holding lock: [ 221.764574][T11830] ffff88807c320258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530 [ 221.773357][T11830] [ 221.773357][T11830] which lock already depends on the new lock. [ 221.773357][T11830] [ 221.783746][T11830] [ 221.783746][T11830] the existing dependency chain (in reverse order) is: [ 221.792744][T11830] [ 221.792744][T11830] -> #2 (sk_lock-AF_INET){+.+.}-{0:0}: [ 221.800382][T11830] lock_acquire+0x116/0x2f0 [ 221.805399][T11830] lock_sock_nested+0x48/0x100 [ 221.810679][T11830] do_ip_setsockopt+0x17e9/0x39c0 [ 221.816221][T11830] ip_setsockopt+0x63/0x100 [ 221.821235][T11830] do_sock_setsockopt+0x3b1/0x710 [ 221.826771][T11830] __x64_sys_setsockopt+0x1ee/0x280 [ 221.832478][T11830] do_syscall_64+0xf3/0x230 [ 221.837489][T11830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.843892][T11830] [ 221.843892][T11830] -> #1 (rtnl_mutex){+.+.}-{4:4}: [ 221.851093][T11830] lock_acquire+0x116/0x2f0 [ 221.856105][T11830] __mutex_lock+0x1a5/0x10c0 [ 221.861252][T11830] start_sync_thread+0xde/0x2d60 [ 221.866700][T11830] do_ip_vs_set_ctl+0x48e/0xe50 [ 221.872063][T11830] nf_setsockopt+0x295/0x2c0 [ 221.877162][T11830] smc_setsockopt+0x25c/0xd50 [ 221.882358][T11830] do_sock_setsockopt+0x3b1/0x710 [ 221.887890][T11830] __x64_sys_setsockopt+0x1ee/0x280 [ 221.893601][T11830] do_syscall_64+0xf3/0x230 [ 221.898615][T11830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.905018][T11830] [ 221.905018][T11830] -> #0 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 221.913610][T11830] validate_chain+0xa69/0x24e0 [ 221.918899][T11830] __lock_acquire+0xad5/0xd80 [ 221.924082][T11830] lock_acquire+0x116/0x2f0 [ 221.929091][T11830] __mutex_lock+0x1a5/0x10c0 [ 221.934187][T11830] smc_switch_to_fallback+0x35/0xda0 [ 221.939977][T11830] smc_sendmsg+0x11f/0x530 [ 221.944902][T11830] __sock_sendmsg+0x221/0x270 [ 221.950092][T11830] __sys_sendto+0x365/0x4c0 [ 221.955111][T11830] __x64_sys_sendto+0xde/0x100 [ 221.960382][T11830] do_syscall_64+0xf3/0x230 [ 221.965395][T11830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 221.971798][T11830] [ 221.971798][T11830] other info that might help us debug this: [ 221.971798][T11830] [ 221.982012][T11830] Chain exists of: [ 221.982012][T11830] &smc->clcsock_release_lock --> rtnl_mutex --> sk_lock-AF_INET [ 221.982012][T11830] [ 221.995562][T11830] Possible unsafe locking scenario: [ 221.995562][T11830] [ 222.002998][T11830] CPU0 CPU1 [ 222.008352][T11830] ---- ---- [ 222.013706][T11830] lock(sk_lock-AF_INET); [ 222.018113][T11830] lock(rtnl_mutex); [ 222.025213][T11830] lock(sk_lock-AF_INET); [ 222.032138][T11830] lock(&smc->clcsock_release_lock); [ 222.037499][T11830] [ 222.037499][T11830] *** DEADLOCK *** [ 222.037499][T11830] [ 222.045624][T11830] 1 lock held by syz.2.2129/11830: [ 222.050722][T11830] #0: ffff88807c320258 (sk_lock-AF_INET){+.+.}-{0:0}, at: smc_sendmsg+0x55/0x530 [ 222.059945][T11830] [ 222.059945][T11830] stack backtrace: [ 222.065911][T11830] CPU: 1 UID: 0 PID: 11830 Comm: syz.2.2129 Not tainted 6.15.0-rc1-syzkaller-00412-g4e34a840613b #0 PREEMPT(full) [ 222.065929][T11830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 222.065938][T11830] Call Trace: [ 222.065946][T11830] [ 222.065952][T11830] dump_stack_lvl+0x241/0x360 [ 222.065975][T11830] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.065992][T11830] ? __pfx__printk+0x10/0x10 [ 222.066011][T11830] ? print_lock+0x171/0x1a0 [ 222.066027][T11830] print_circular_bug+0x2e1/0x300 [ 222.066045][T11830] check_noncircular+0x142/0x160 [ 222.066065][T11830] validate_chain+0xa69/0x24e0 [ 222.066085][T11830] ? look_up_lock_class+0x7b/0x170 [ 222.066100][T11830] ? register_lock_class+0x54/0x330 [ 222.066115][T11830] __lock_acquire+0xad5/0xd80 [ 222.066130][T11830] lock_acquire+0x116/0x2f0 [ 222.066142][T11830] ? smc_switch_to_fallback+0x35/0xda0 [ 222.066159][T11830] __mutex_lock+0x1a5/0x10c0 [ 222.066174][T11830] ? smc_switch_to_fallback+0x35/0xda0 [ 222.066191][T11830] ? smc_switch_to_fallback+0x35/0xda0 [ 222.066203][T11830] ? __pfx___mutex_lock+0x10/0x10 [ 222.066220][T11830] ? __local_bh_enable_ip+0x168/0x200 [ 222.066233][T11830] ? lockdep_hardirqs_on+0x9d/0x150 [ 222.066247][T11830] ? __local_bh_enable_ip+0x168/0x200 [ 222.066259][T11830] smc_switch_to_fallback+0x35/0xda0 [ 222.066273][T11830] ? do_raw_spin_unlock+0x13c/0x8b0 [ 222.066293][T11830] smc_sendmsg+0x11f/0x530 [ 222.066307][T11830] ? __pfx_smc_sendmsg+0x10/0x10 [ 222.066319][T11830] __sock_sendmsg+0x221/0x270 [ 222.066341][T11830] __sys_sendto+0x365/0x4c0 [ 222.066357][T11830] ? __pfx___sys_sendto+0x10/0x10 [ 222.066370][T11830] ? do_futex+0x3d5/0x5a0 [ 222.066402][T11830] __x64_sys_sendto+0xde/0x100 [ 222.066418][T11830] do_syscall_64+0xf3/0x230 [ 222.066432][T11830] ? clear_bhb_loop+0x45/0xa0 [ 222.066448][T11830] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.066462][T11830] RIP: 0033:0x7f20a9d8e169 [ 222.066476][T11830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.066487][T11830] RSP: 002b:00007f20a7bf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 222.066502][T11830] RAX: ffffffffffffffda RBX: 00007f20a9fb5fa0 RCX: 00007f20a9d8e169 [ 222.066512][T11830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000b [ 222.066520][T11830] RBP: 00007f20a9e10a68 R08: 0000200000e68000 R09: 0000000000000010 [ 222.066529][T11830] R10: 00000000200007fd R11: 0000000000000246 R12: 0000000000000000 [ 222.066537][T11830] R13: 0000000000000000 R14: 00007f20a9fb5fa0 R15: 00007ffcbc35efc8 [ 222.066551][T11830] [ 222.406150][T11830] xt_CT: No such helper "snmp"