./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3943338616 <...> Warning: Permanently added '10.128.0.96' (ED25519) to the list of known hosts. execve("./syz-executor3943338616", ["./syz-executor3943338616"], 0x7fffed026920 /* 10 vars */) = 0 brk(NULL) = 0x555587ec1000 brk(0x555587ec1d00) = 0x555587ec1d00 arch_prctl(ARCH_SET_FS, 0x555587ec1380) = 0 set_tid_address(0x555587ec1650) = 5094 set_robust_list(0x555587ec1660, 24) = 0 rseq(0x555587ec1ca0, 0x20, 0, 0x53053053) = 0 prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3943338616", 4096) = 28 getrandom("\xeb\x52\x9b\xb5\x22\x54\x19\x61", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555587ec1d00 brk(0x555587ee2d00) = 0x555587ee2d00 brk(0x555587ee3000) = 0x555587ee3000 mprotect(0x7fa3b96f8000, 16384, PROT_READ) = 0 mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000 mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000 mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000 openat(AT_FDCWD, "/proc/self/make-it-fail", O_WRONLY) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_WRONLY) = 3 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5095 attached , child_tidptr=0x555587ec1650) = 5095 [pid 5095] set_robust_list(0x555587ec1660, 24) = 0 [pid 5095] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5095] setpgid(0, 0) = 0 [pid 5095] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5095] write(3, "1000", 4) = 4 [pid 5095] close(3) = 0 [pid 5095] write(1, "executing program\n", 18executing program ) = 18 [pid 5095] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=11, insns=0x20000180, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5095] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_STRICT_ALIGNMENT|BPF_F_TEST_RND_HI32|BPF_F_TEST_STATE_FREQ|0x20, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [pid 5095] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=3}}, 16) = 4 [pid 5095] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5095] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5095] write(6, "25", 2) = 2 [ 62.490012][ T5095] FAULT_INJECTION: forcing a failure. [ 62.490012][ T5095] name failslab, interval 1, probability 0, space 0, times 1 [ 62.503034][ T5095] CPU: 1 PID: 5095 Comm: syz-executor394 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 62.513568][ T5095] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 62.524071][ T5095] Call Trace: [ 62.527357][ T5095] [ 62.530303][ T5095] dump_stack_lvl+0x241/0x360 [ 62.535282][ T5095] ? __pfx_dump_stack_lvl+0x10/0x10 [ 62.540476][ T5095] ? __pfx__printk+0x10/0x10 [ 62.545185][ T5095] ? __pfx___might_resched+0x10/0x10 [ 62.550498][ T5095] should_fail_ex+0x3b0/0x4e0 [ 62.555192][ T5095] should_failslab+0x9/0x20 [ 62.559705][ T5095] __kmalloc_node_noprof+0xdf/0x440 [ 62.564927][ T5095] ? kvmalloc_node_noprof+0x72/0x190 [ 62.570207][ T5095] kvmalloc_node_noprof+0x72/0x190 [ 62.575417][ T5095] __nf_hook_entries_try_shrink+0x330/0x730 [ 62.581311][ T5095] ? __static_key_slow_dec_cpuslocked+0xaa/0x170 [ 62.587724][ T5095] __nf_unregister_net_hook+0x5cf/0x800 [ 62.593285][ T5095] nf_unregister_net_hook+0x98/0xe0 [ 62.598483][ T5095] nf_tables_abort+0x5729/0x7a10 [ 62.603448][ T5095] ? __pfx_nf_tables_abort+0x10/0x10 [ 62.608729][ T5095] ? __pfx_nf_tables_newrule+0x10/0x10 [ 62.614297][ T5095] ? __nla_parse+0x40/0x60 [ 62.618703][ T5095] nfnetlink_rcv+0x1ea2/0x2a90 [ 62.623472][ T5095] ? __pfx_validate_chain+0x10/0x10 [ 62.628705][ T5095] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 62.633818][ T5095] ? __lock_acquire+0x1346/0x1fd0 [ 62.638848][ T5095] ? netlink_deliver_tap+0x2e/0x1b0 [ 62.644046][ T5095] ? __pfx_lock_release+0x10/0x10 [ 62.649077][ T5095] ? netlink_deliver_tap+0x2e/0x1b0 [ 62.654276][ T5095] netlink_unicast+0x7f0/0x990 [ 62.659041][ T5095] ? __pfx_netlink_unicast+0x10/0x10 [ 62.664331][ T5095] ? __check_object_size+0x49c/0x900 [ 62.670062][ T5095] ? bpf_lsm_netlink_send+0x9/0x10 [ 62.675173][ T5095] netlink_sendmsg+0x8e4/0xcb0 [ 62.679963][ T5095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.685253][ T5095] ? __import_iovec+0x536/0x820 [ 62.690215][ T5095] ? aa_sock_msg_perm+0x91/0x160 [ 62.695183][ T5095] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 62.700478][ T5095] ? security_socket_sendmsg+0x87/0xb0 [ 62.705946][ T5095] ? __pfx_netlink_sendmsg+0x10/0x10 [ 62.711268][ T5095] __sock_sendmsg+0x221/0x270 [ 62.715956][ T5095] ____sys_sendmsg+0x525/0x7d0 [ 62.720725][ T5095] ? __pfx_____sys_sendmsg+0x10/0x10 [ 62.726017][ T5095] ? do_raw_spin_lock+0x14f/0x370 [ 62.731045][ T5095] __sys_sendmsg+0x2b0/0x3a0 [ 62.735636][ T5095] ? __pfx___sys_sendmsg+0x10/0x10 [ 62.740775][ T5095] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 62.747121][ T5095] ? _raw_spin_unlock_irq+0x2e/0x50 [ 62.752326][ T5095] ? ptrace_notify+0x279/0x380 [ 62.757093][ T5095] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 62.763413][ T5095] ? do_syscall_64+0x100/0x230 [ 62.768273][ T5095] do_syscall_64+0xf3/0x230 [ 62.772800][ T5095] ? clear_bhb_loop+0x35/0x90 [ 62.777479][ T5095] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 62.783375][ T5095] RIP: 0033:0x7fa3b968c9e9 [ 62.787793][ T5095] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 62.807400][ T5095] RSP: 002b:00007ffd3e026948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 62.815820][ T5095] RAX: ffffffffffffffda RBX: 00007ffd3e026960 RCX: 00007fa3b968c9e9 [ 62.824049][ T5095] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 62.832017][ T5095] RBP: 0000000000000002 R08: 00007ffd3e0266e6 R09: 00000000000000a0 [pid 5095] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x00\x00\x03\x0a\x01\x02\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x03\x00\x73\x79\x7a\x32\x00\x00\x00\x00\x14\x00\x04\x80\x08\x00\x02\x40\x00\x00\x00\x00\x08\x00\x01\x40"..., iov_len=196}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 196 [pid 5095] exit_group(0) = ? [pid 5095] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5095, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5096 attached [pid 5096] set_robust_list(0x555587ec1660, 24) = 0 [ 62.839991][ T5095] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 62.848178][ T5095] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 62.856265][ T5095] [pid 5096] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5094] <... clone resumed>, child_tidptr=0x555587ec1650) = 5096 [pid 5096] <... prctl resumed>) = 0 [pid 5096] setpgid(0, 0) = 0 [pid 5096] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5096] write(3, "1000", 4) = 4 [pid 5096] close(3) = 0 executing program [pid 5096] write(1, "executing program\n", 18) = 18 [pid 5096] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=11, insns=0x20000180, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5096] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_STRICT_ALIGNMENT|BPF_F_TEST_RND_HI32|BPF_F_TEST_STATE_FREQ|0x20, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [pid 5096] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=3}}, 16) = 4 [pid 5096] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5096] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5096] write(6, "25", 2) = 2 [ 62.940837][ T5096] FAULT_INJECTION: forcing a failure. [ 62.940837][ T5096] name failslab, interval 1, probability 0, space 0, times 0 [ 62.953770][ T5096] CPU: 0 PID: 5096 Comm: syz-executor394 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 62.964307][ T5096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 62.974366][ T5096] Call Trace: [ 62.977651][ T5096] [ 62.980570][ T5096] dump_stack_lvl+0x241/0x360 [ 62.985253][ T5096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 62.990441][ T5096] ? __pfx__printk+0x10/0x10 [ 62.995048][ T5096] ? __pfx___might_resched+0x10/0x10 [ 63.000466][ T5096] should_fail_ex+0x3b0/0x4e0 [ 63.005155][ T5096] should_failslab+0x9/0x20 [ 63.009665][ T5096] __kmalloc_node_noprof+0xdf/0x440 [ 63.014929][ T5096] ? kvmalloc_node_noprof+0x72/0x190 [ 63.020423][ T5096] kvmalloc_node_noprof+0x72/0x190 [ 63.025743][ T5096] __nf_hook_entries_try_shrink+0x330/0x730 [ 63.031689][ T5096] ? __static_key_slow_dec_cpuslocked+0xaa/0x170 [ 63.038049][ T5096] __nf_unregister_net_hook+0x5cf/0x800 [ 63.043639][ T5096] nf_unregister_net_hook+0x98/0xe0 [ 63.048850][ T5096] nf_tables_abort+0x5729/0x7a10 [ 63.053816][ T5096] ? __pfx_nf_tables_abort+0x10/0x10 [ 63.059144][ T5096] ? __kasan_kmalloc+0x98/0xb0 [ 63.064000][ T5096] ? nfnetlink_rcv+0x11b8/0x2a90 [ 63.068942][ T5096] ? nfnetlink_rcv+0x1219/0x2a90 [ 63.073917][ T5096] nfnetlink_rcv+0x20cf/0x2a90 [ 63.078701][ T5096] ? __pfx_validate_chain+0x10/0x10 [ 63.083912][ T5096] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 63.089051][ T5096] ? __lock_acquire+0x1346/0x1fd0 [ 63.094089][ T5096] ? netlink_deliver_tap+0x2e/0x1b0 [ 63.099282][ T5096] ? __pfx_lock_release+0x10/0x10 [ 63.104315][ T5096] ? netlink_deliver_tap+0x2e/0x1b0 [ 63.109511][ T5096] netlink_unicast+0x7f0/0x990 [ 63.114273][ T5096] ? __pfx_netlink_unicast+0x10/0x10 [ 63.119556][ T5096] ? __virt_addr_valid+0x183/0x520 [ 63.124682][ T5096] ? __check_object_size+0x49c/0x900 [ 63.129983][ T5096] ? bpf_lsm_netlink_send+0x9/0x10 [ 63.135091][ T5096] netlink_sendmsg+0x8e4/0xcb0 [ 63.139859][ T5096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.145237][ T5096] ? __import_iovec+0x536/0x820 [ 63.150082][ T5096] ? aa_sock_msg_perm+0x91/0x160 [ 63.155026][ T5096] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 63.160306][ T5096] ? security_socket_sendmsg+0x87/0xb0 [ 63.165766][ T5096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.171043][ T5096] __sock_sendmsg+0x221/0x270 [ 63.175725][ T5096] ____sys_sendmsg+0x525/0x7d0 [ 63.180486][ T5096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.185800][ T5096] ? do_raw_spin_lock+0x14f/0x370 [ 63.190831][ T5096] __sys_sendmsg+0x2b0/0x3a0 [ 63.195428][ T5096] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.200589][ T5096] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 63.206954][ T5096] ? _raw_spin_unlock_irq+0x2e/0x50 [ 63.212158][ T5096] ? ptrace_notify+0x279/0x380 [ 63.216929][ T5096] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 63.223263][ T5096] ? do_syscall_64+0x100/0x230 [ 63.228041][ T5096] do_syscall_64+0xf3/0x230 [ 63.232910][ T5096] ? clear_bhb_loop+0x35/0x90 [ 63.237597][ T5096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.243530][ T5096] RIP: 0033:0x7fa3b968c9e9 [ 63.247959][ T5096] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 63.267567][ T5096] RSP: 002b:00007ffd3e026948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.275977][ T5096] RAX: ffffffffffffffda RBX: 00007ffd3e026960 RCX: 00007fa3b968c9e9 [ 63.283943][ T5096] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [pid 5096] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x00\x00\x03\x0a\x01\x02\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x03\x00\x73\x79\x7a\x32\x00\x00\x00\x00\x14\x00\x04\x80\x08\x00\x02\x40\x00\x00\x00\x00\x08\x00\x01\x40"..., iov_len=196}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 196 [pid 5096] exit_group(0) = ? [pid 5096] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5096, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5097 attached , child_tidptr=0x555587ec1650) = 5097 [pid 5097] set_robust_list(0x555587ec1660, 24) = 0 [pid 5097] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5097] setpgid(0, 0) = 0 [pid 5097] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5097] write(3, "1000", 4) = 4 [pid 5097] close(3) = 0 [pid 5097] write(1, "executing program\n", 18executing program ) = 18 [ 63.291933][ T5096] RBP: 0000000000000002 R08: 00007ffd3e0266e6 R09: 00000000000000a0 [ 63.299899][ T5096] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 63.307869][ T5096] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 63.315860][ T5096] [pid 5097] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=11, insns=0x20000180, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5097] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_STRICT_ALIGNMENT|BPF_F_TEST_RND_HI32|BPF_F_TEST_STATE_FREQ|0x20, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [pid 5097] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=3}}, 16) = 4 [pid 5097] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5097] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5097] write(6, "25", 2) = 2 [ 63.390946][ T5097] FAULT_INJECTION: forcing a failure. [ 63.390946][ T5097] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 63.391427][ T5097] [ 63.391432][ T5097] ====================================================== [ 63.391436][ T5097] WARNING: possible circular locking dependency detected [ 63.391439][ T5097] 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 Not tainted [ 63.391445][ T5097] ------------------------------------------------------ [ 63.391448][ T5097] syz-executor394/5097 is trying to acquire lock: [ 63.391454][ T5097] ffffffff8e328140 (console_owner){....}-{0:0}, at: console_flush_all+0x152/0xfd0 [ 63.391484][ T5097] [ 63.391484][ T5097] but task is already holding lock: [ 63.391487][ T5097] ffff8880b943e858 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 63.391513][ T5097] [ 63.391513][ T5097] which lock already depends on the new lock. [ 63.391513][ T5097] [ 63.391516][ T5097] [ 63.391516][ T5097] the existing dependency chain (in reverse order) is: [ 63.391519][ T5097] [ 63.391519][ T5097] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 63.391539][ T5097] lock_acquire+0x1ed/0x550 [ 63.391554][ T5097] _raw_spin_lock_nested+0x31/0x40 [ 63.391572][ T5097] raw_spin_rq_lock_nested+0x2a/0x140 [ 63.391592][ T5097] task_fork_fair+0x61/0x1e0 [ 63.391605][ T5097] sched_cgroup_fork+0x37c/0x410 [ 63.391615][ T5097] copy_process+0x2217/0x3dc0 [ 63.391625][ T5097] kernel_clone+0x226/0x8f0 [ 63.391634][ T5097] user_mode_thread+0x132/0x1a0 [ 63.391643][ T5097] rest_init+0x23/0x300 [ 63.391654][ T5097] start_kernel+0x47a/0x500 [ 63.391674][ T5097] x86_64_start_reservations+0x2a/0x30 [ 63.391685][ T5097] x86_64_start_kernel+0x99/0xa0 [ 63.391695][ T5097] common_startup_64+0x13e/0x147 [ 63.391704][ T5097] [ 63.391704][ T5097] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 63.391723][ T5097] lock_acquire+0x1ed/0x550 [ 63.391731][ T5097] _raw_spin_lock_irqsave+0xd5/0x120 [ 63.391742][ T5097] try_to_wake_up+0xb0/0x1470 [ 63.391752][ T5097] __wake_up_common_lock+0x130/0x1e0 [ 63.391761][ T5097] tty_port_default_wakeup+0xa6/0xf0 [ 63.391774][ T5097] serial8250_tx_chars+0x6e2/0x930 [ 63.391786][ T5097] serial8250_handle_irq+0x558/0x710 [ 63.391796][ T5097] serial8250_default_handle_irq+0xd1/0x1f0 [ 63.391809][ T5097] serial8250_interrupt+0xa9/0x1f0 [ 63.391818][ T5097] __handle_irq_event_percpu+0x29a/0xa80 [ 63.391830][ T5097] handle_irq_event+0x89/0x1f0 [ 63.391840][ T5097] handle_edge_irq+0x25f/0xc20 [ 63.391850][ T5097] __common_interrupt+0x136/0x230 [ 63.391860][ T5097] common_interrupt+0xa5/0xd0 [ 63.391871][ T5097] asm_common_interrupt+0x26/0x40 [ 63.391882][ T5097] count_memcg_event_mm+0x334/0x420 [ 63.391894][ T5097] handle_mm_fault+0x16c4/0x1ba0 [ 63.391907][ T5097] exc_page_fault+0x459/0x8c0 [ 63.391914][ T5097] asm_exc_page_fault+0x26/0x30 [ 63.391924][ T5097] [ 63.391924][ T5097] -> #2 (&tty->write_wait){-.-.}-{2:2}: [ 63.391936][ T5097] lock_acquire+0x1ed/0x550 [ 63.391944][ T5097] _raw_spin_lock_irqsave+0xd5/0x120 [ 63.391954][ T5097] __wake_up_common_lock+0x25/0x1e0 [ 63.391962][ T5097] tty_port_default_wakeup+0xa6/0xf0 [ 63.391975][ T5097] serial8250_tx_chars+0x6e2/0x930 [ 63.391985][ T5097] serial8250_handle_irq+0x558/0x710 [ 63.391996][ T5097] serial8250_default_handle_irq+0xd1/0x1f0 [ 63.392008][ T5097] serial8250_interrupt+0xa9/0x1f0 [ 63.392017][ T5097] __handle_irq_event_percpu+0x29a/0xa80 [ 63.392028][ T5097] handle_irq_event+0x89/0x1f0 [ 63.392038][ T5097] handle_edge_irq+0x25f/0xc20 [ 63.392047][ T5097] __common_interrupt+0x136/0x230 [ 63.392057][ T5097] common_interrupt+0xa5/0xd0 [ 63.392067][ T5097] asm_common_interrupt+0x26/0x40 [ 63.392077][ T5097] _raw_spin_unlock_irqrestore+0xd8/0x140 [ 63.392088][ T5097] uart_write+0x15d/0x380 [ 63.392098][ T5097] n_tty_write+0xd6a/0x1230 [ 63.392106][ T5097] file_tty_write+0x54f/0x9b0 [ 63.392116][ T5097] vfs_write+0xa72/0xc90 [ 63.392126][ T5097] ksys_write+0x1a0/0x2c0 [ 63.392136][ T5097] do_syscall_64+0xf3/0x230 [ 63.392145][ T5097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.392155][ T5097] [ 63.392155][ T5097] -> #1 (&port_lock_key){-.-.}-{2:2}: [ 63.392166][ T5097] lock_acquire+0x1ed/0x550 [ 63.392174][ T5097] _raw_spin_lock_irqsave+0xd5/0x120 [ 63.392185][ T5097] serial8250_console_write+0x1a8/0x1770 [ 63.392196][ T5097] console_flush_all+0x867/0xfd0 [ 63.392207][ T5097] console_unlock+0x13b/0x4d0 [ 63.392219][ T5097] vprintk_emit+0x5a6/0x770 [ 63.392230][ T5097] _printk+0xd5/0x120 [ 63.392238][ T5097] register_console+0x727/0xcf0 [ 63.392249][ T5097] univ8250_console_init+0x49/0x50 [ 63.392257][ T5097] console_init+0x1b8/0x6f0 [ 63.392265][ T5097] start_kernel+0x2d3/0x500 [ 63.392273][ T5097] x86_64_start_reservations+0x2a/0x30 [ 63.392283][ T5097] x86_64_start_kernel+0x99/0xa0 [ 63.392293][ T5097] common_startup_64+0x13e/0x147 [ 63.392301][ T5097] [ 63.392301][ T5097] -> #0 (console_owner){....}-{0:0}: [ 63.392313][ T5097] validate_chain+0x18e0/0x5900 [ 63.392323][ T5097] __lock_acquire+0x1346/0x1fd0 [ 63.392332][ T5097] lock_acquire+0x1ed/0x550 [ 63.392340][ T5097] console_flush_all+0x810/0xfd0 [ 63.392351][ T5097] console_unlock+0x13b/0x4d0 [ 63.392361][ T5097] vprintk_emit+0x5a6/0x770 [ 63.392371][ T5097] _printk+0xd5/0x120 [ 63.392379][ T5097] should_fail_ex+0x391/0x4e0 [ 63.392391][ T5097] strncpy_from_user+0x36/0x2f0 [ 63.392402][ T5097] strncpy_from_user_nofault+0x71/0x140 [ 63.392413][ T5097] bpf_probe_read_compat_str+0xe9/0x180 [ 63.392424][ T5097] bpf_prog_f2ce78ec2d45df6f+0x3d/0x3f [ 63.392431][ T5097] bpf_trace_run4+0x334/0x590 [ 63.392444][ T5097] __schedule+0x2587/0x4a20 [ 63.392455][ T5097] schedule+0x14b/0x320 [ 63.392465][ T5097] synchronize_rcu_expedited+0x684/0x830 [ 63.392476][ T5097] synchronize_rcu+0x11b/0x360 [ 63.392485][ T5097] nf_tables_abort+0x6569/0x7a10 [ 63.392494][ T5097] nfnetlink_rcv+0x20cf/0x2a90 [ 63.392505][ T5097] netlink_unicast+0x7f0/0x990 [ 63.392514][ T5097] netlink_sendmsg+0x8e4/0xcb0 [ 63.392523][ T5097] __sock_sendmsg+0x221/0x270 [ 63.392533][ T5097] ____sys_sendmsg+0x525/0x7d0 [ 63.392545][ T5097] __sys_sendmsg+0x2b0/0x3a0 [ 63.392557][ T5097] do_syscall_64+0xf3/0x230 [ 63.392565][ T5097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.392575][ T5097] [ 63.392575][ T5097] other info that might help us debug this: [ 63.392575][ T5097] [ 63.392578][ T5097] Chain exists of: [ 63.392578][ T5097] console_owner --> &p->pi_lock --> &rq->__lock [ 63.392578][ T5097] [ 63.392591][ T5097] Possible unsafe locking scenario: [ 63.392591][ T5097] [ 63.392594][ T5097] CPU0 CPU1 [ 63.392597][ T5097] ---- ---- [ 63.392599][ T5097] lock(&rq->__lock); [ 63.392604][ T5097] lock(&p->pi_lock); [ 63.392610][ T5097] lock(&rq->__lock); [ 63.392617][ T5097] lock(console_owner); [ 63.392622][ T5097] [ 63.392622][ T5097] *** DEADLOCK *** [ 63.392622][ T5097] [ 63.392625][ T5097] 6 locks held by syz-executor394/5097: [ 63.392630][ T5097] #0: ffff888029a9bcb8 (&nft_net->commit_mutex){+.+.}-{3:3}, at: nf_tables_valid_genid+0x32/0x100 [ 63.392653][ T5097] #1: ffffffff8e3392f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 63.392676][ T5097] #2: ffff8880b943e858 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 63.392701][ T5097] #3: ffffffff8e333f20 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590 [ 63.392729][ T5097] #4: ffffffff8e20fa60 (console_lock){+.+.}-{0:0}, at: _printk+0xd5/0x120 [ 63.392749][ T5097] #5: ffffffff8e20f690 (console_srcu){....}-{0:0}, at: console_flush_all+0x152/0xfd0 [ 63.392788][ T5097] [ 63.392788][ T5097] stack backtrace: [ 63.392792][ T5097] CPU: 0 PID: 5097 Comm: syz-executor394 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 63.392802][ T5097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 63.392807][ T5097] Call Trace: [ 63.392812][ T5097] [ 63.392816][ T5097] dump_stack_lvl+0x241/0x360 [ 63.392829][ T5097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 63.392841][ T5097] ? print_circular_bug+0x130/0x1a0 [ 63.392854][ T5097] check_noncircular+0x36a/0x4a0 [ 63.392867][ T5097] ? __pfx_check_noncircular+0x10/0x10 [ 63.392879][ T5097] ? lockdep_lock+0x123/0x2b0 [ 63.392889][ T5097] ? add_lock_to_list+0x1de/0x2e0 [ 63.392902][ T5097] validate_chain+0x18e0/0x5900 [ 63.392919][ T5097] ? __pfx_validate_chain+0x10/0x10 [ 63.392932][ T5097] ? sprintf+0xda/0x120 [ 63.392944][ T5097] ? vsnprintf+0x1cc3/0x1da0 [ 63.392959][ T5097] ? info_print_prefix+0x204/0x310 [ 63.392969][ T5097] ? mark_lock+0x9a/0x350 [ 63.392980][ T5097] __lock_acquire+0x1346/0x1fd0 [ 63.392994][ T5097] lock_acquire+0x1ed/0x550 [ 63.393003][ T5097] ? console_flush_all+0x152/0xfd0 [ 63.393017][ T5097] ? __pfx_lock_acquire+0x10/0x10 [ 63.393027][ T5097] ? __pfx_lock_release+0x10/0x10 [ 63.393036][ T5097] ? do_raw_spin_lock+0x14f/0x370 [ 63.393050][ T5097] ? do_raw_spin_unlock+0x13c/0x8b0 [ 63.393063][ T5097] ? console_flush_all+0x3a8/0xfd0 [ 63.393076][ T5097] console_flush_all+0x810/0xfd0 [ 63.393088][ T5097] ? console_flush_all+0x152/0xfd0 [ 63.393101][ T5097] ? console_flush_all+0x152/0xfd0 [ 63.393116][ T5097] ? __pfx_console_flush_all+0x10/0x10 [ 63.393129][ T5097] ? __pfx_lock_acquire+0x10/0x10 [ 63.393139][ T5097] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 63.393153][ T5097] console_unlock+0x13b/0x4d0 [ 63.393166][ T5097] ? __pfx_console_unlock+0x10/0x10 [ 63.393177][ T5097] ? _printk+0xd5/0x120 [ 63.393186][ T5097] ? _printk+0xd5/0x120 [ 63.393195][ T5097] ? __pfx___down_trylock_console_sem+0x10/0x10 [ 63.393208][ T5097] ? __lock_acquire+0x1346/0x1fd0 [ 63.393223][ T5097] vprintk_emit+0x5a6/0x770 [ 63.393236][ T5097] ? __pfx_vprintk_emit+0x10/0x10 [ 63.393251][ T5097] _printk+0xd5/0x120 [ 63.393262][ T5097] ? __pfx__printk+0x10/0x10 [ 63.393274][ T5097] should_fail_ex+0x391/0x4e0 [ 63.393288][ T5097] strncpy_from_user+0x36/0x2f0 [ 63.393302][ T5097] strncpy_from_user_nofault+0x71/0x140 [ 63.393314][ T5097] bpf_probe_read_compat_str+0xe9/0x180 [ 63.393326][ T5097] ? bpf_trace_run4+0x244/0x590 [ 63.393338][ T5097] bpf_prog_f2ce78ec2d45df6f+0x3d/0x3f [ 63.393346][ T5097] bpf_trace_run4+0x334/0x590 [ 63.393361][ T5097] ? __pfx_bpf_trace_run4+0x10/0x10 [ 63.393375][ T5097] ? psi_task_switch+0x3a7/0x770 [ 63.393389][ T5097] __schedule+0x2587/0x4a20 [ 63.393406][ T5097] ? __pfx___schedule+0x10/0x10 [ 63.393419][ T5097] ? __pfx_lock_release+0x10/0x10 [ 63.393428][ T5097] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 63.393443][ T5097] ? schedule+0x90/0x320 [ 63.393454][ T5097] schedule+0x14b/0x320 [ 63.393466][ T5097] synchronize_rcu_expedited+0x684/0x830 [ 63.393478][ T5097] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 63.393493][ T5097] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 63.393505][ T5097] ? __pfx___might_resched+0x10/0x10 [ 63.393516][ T5097] ? __pfx_autoremove_wake_function+0x10/0x10 [ 63.393526][ T5097] ? lockdep_hardirqs_on+0x99/0x150 [ 63.393537][ T5097] synchronize_rcu+0x11b/0x360 [ 63.393548][ T5097] ? __pfx_synchronize_rcu+0x10/0x10 [ 63.393560][ T5097] ? __nf_unregister_net_hook+0x5f0/0x800 [ 63.393576][ T5097] nf_tables_abort+0x6569/0x7a10 [ 63.393592][ T5097] ? __pfx_nf_tables_abort+0x10/0x10 [ 63.393605][ T5097] ? __kasan_kmalloc+0x98/0xb0 [ 63.393617][ T5097] ? nfnetlink_rcv+0x11b8/0x2a90 [ 63.393628][ T5097] ? nfnetlink_rcv+0x1219/0x2a90 [ 63.393641][ T5097] nfnetlink_rcv+0x20cf/0x2a90 [ 63.393652][ T5097] ? __pfx_validate_chain+0x10/0x10 [ 63.393671][ T5097] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 63.393685][ T5097] ? __lock_acquire+0x1346/0x1fd0 [ 63.393703][ T5097] ? netlink_deliver_tap+0x2e/0x1b0 [ 63.393718][ T5097] ? __pfx_lock_release+0x10/0x10 [ 63.393731][ T5097] ? netlink_deliver_tap+0x2e/0x1b0 [ 63.393743][ T5097] netlink_unicast+0x7f0/0x990 [ 63.393755][ T5097] ? __pfx_netlink_unicast+0x10/0x10 [ 63.393764][ T5097] ? __virt_addr_valid+0x183/0x520 [ 63.393777][ T5097] ? __check_object_size+0x49c/0x900 [ 63.393786][ T5097] ? bpf_lsm_netlink_send+0x9/0x10 [ 63.393801][ T5097] netlink_sendmsg+0x8e4/0xcb0 [ 63.393815][ T5097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.393827][ T5097] ? __import_iovec+0x536/0x820 [ 63.393837][ T5097] ? aa_sock_msg_perm+0x91/0x160 [ 63.393852][ T5097] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 63.393862][ T5097] ? security_socket_sendmsg+0x87/0xb0 [ 63.393874][ T5097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 63.393884][ T5097] __sock_sendmsg+0x221/0x270 [ 63.393896][ T5097] ____sys_sendmsg+0x525/0x7d0 [ 63.393911][ T5097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 63.393925][ T5097] ? do_raw_spin_lock+0x14f/0x370 [ 63.393940][ T5097] __sys_sendmsg+0x2b0/0x3a0 [ 63.393954][ T5097] ? __pfx___sys_sendmsg+0x10/0x10 [ 63.393970][ T5097] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 63.393983][ T5097] ? _raw_spin_unlock_irq+0x2e/0x50 [ 63.393994][ T5097] ? ptrace_notify+0x279/0x380 [ 63.394011][ T5097] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 63.394021][ T5097] ? do_syscall_64+0x100/0x230 [ 63.394033][ T5097] do_syscall_64+0xf3/0x230 [ 63.394043][ T5097] ? clear_bhb_loop+0x35/0x90 [ 63.394055][ T5097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 63.394067][ T5097] RIP: 0033:0x7fa3b968c9e9 [ 63.394076][ T5097] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 63.394084][ T5097] RSP: 002b:00007ffd3e026948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 63.394094][ T5097] RAX: ffffffffffffffda RBX: 00007ffd3e026960 RCX: 00007fa3b968c9e9 [ 63.394101][ T5097] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 63.394107][ T5097] RBP: 0000000000000002 R08: 00007ffd3e0266e6 R09: 00000000000000a0 [ 63.394113][ T5097] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 63.394119][ T5097] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 63.394128][ T5097] [ 64.783995][ T5097] CPU: 0 PID: 5097 Comm: syz-executor394 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 64.794496][ T5097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 64.804636][ T5097] Call Trace: [ 64.807903][ T5097] [ 64.810919][ T5097] dump_stack_lvl+0x241/0x360 [ 64.815585][ T5097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 64.820771][ T5097] ? __pfx__printk+0x10/0x10 [ 64.825345][ T5097] should_fail_ex+0x3b0/0x4e0 [ 64.830005][ T5097] strncpy_from_user+0x36/0x2f0 [ 64.834842][ T5097] strncpy_from_user_nofault+0x71/0x140 [ 64.840373][ T5097] bpf_probe_read_compat_str+0xe9/0x180 [ 64.845911][ T5097] ? bpf_trace_run4+0x244/0x590 [ 64.850859][ T5097] bpf_prog_f2ce78ec2d45df6f+0x3d/0x3f [ 64.856298][ T5097] bpf_trace_run4+0x334/0x590 [ 64.861083][ T5097] ? __pfx_bpf_trace_run4+0x10/0x10 [ 64.866275][ T5097] ? psi_task_switch+0x3a7/0x770 [ 64.871200][ T5097] __schedule+0x2587/0x4a20 [ 64.875693][ T5097] ? __pfx___schedule+0x10/0x10 [ 64.880527][ T5097] ? __pfx_lock_release+0x10/0x10 [ 64.885536][ T5097] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 64.891419][ T5097] ? schedule+0x90/0x320 [ 64.895644][ T5097] schedule+0x14b/0x320 [ 64.899785][ T5097] synchronize_rcu_expedited+0x684/0x830 [ 64.905403][ T5097] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 64.911552][ T5097] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 64.916836][ T5097] ? __pfx___might_resched+0x10/0x10 [ 64.922115][ T5097] ? __pfx_autoremove_wake_function+0x10/0x10 [ 64.928180][ T5097] ? lockdep_hardirqs_on+0x99/0x150 [ 64.933452][ T5097] synchronize_rcu+0x11b/0x360 [ 64.938218][ T5097] ? __pfx_synchronize_rcu+0x10/0x10 [ 64.943485][ T5097] ? __nf_unregister_net_hook+0x5f0/0x800 [ 64.949192][ T5097] nf_tables_abort+0x6569/0x7a10 [ 64.954124][ T5097] ? __pfx_nf_tables_abort+0x10/0x10 [ 64.959419][ T5097] ? __kasan_kmalloc+0x98/0xb0 [ 64.964175][ T5097] ? nfnetlink_rcv+0x11b8/0x2a90 [ 64.969536][ T5097] ? nfnetlink_rcv+0x1219/0x2a90 [ 64.974467][ T5097] nfnetlink_rcv+0x20cf/0x2a90 [ 64.979828][ T5097] ? __pfx_validate_chain+0x10/0x10 [ 64.985060][ T5097] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 64.990172][ T5097] ? __lock_acquire+0x1346/0x1fd0 [ 64.995191][ T5097] ? netlink_deliver_tap+0x2e/0x1b0 [ 65.000372][ T5097] ? __pfx_lock_release+0x10/0x10 [ 65.005385][ T5097] ? netlink_deliver_tap+0x2e/0x1b0 [ 65.010571][ T5097] netlink_unicast+0x7f0/0x990 [ 65.015319][ T5097] ? __pfx_netlink_unicast+0x10/0x10 [ 65.020760][ T5097] ? __virt_addr_valid+0x183/0x520 [ 65.025865][ T5097] ? __check_object_size+0x49c/0x900 [ 65.031224][ T5097] ? bpf_lsm_netlink_send+0x9/0x10 [ 65.036430][ T5097] netlink_sendmsg+0x8e4/0xcb0 [ 65.041205][ T5097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.046480][ T5097] ? __import_iovec+0x536/0x820 [ 65.051315][ T5097] ? aa_sock_msg_perm+0x91/0x160 [ 65.056253][ T5097] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 65.061518][ T5097] ? security_socket_sendmsg+0x87/0xb0 [ 65.066971][ T5097] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.072287][ T5097] __sock_sendmsg+0x221/0x270 [ 65.076948][ T5097] ____sys_sendmsg+0x525/0x7d0 [ 65.081702][ T5097] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.086973][ T5097] ? do_raw_spin_lock+0x14f/0x370 [ 65.091988][ T5097] __sys_sendmsg+0x2b0/0x3a0 [ 65.096565][ T5097] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.101682][ T5097] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 65.108100][ T5097] ? _raw_spin_unlock_irq+0x2e/0x50 [ 65.113288][ T5097] ? ptrace_notify+0x279/0x380 [ 65.118042][ T5097] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 65.124441][ T5097] ? do_syscall_64+0x100/0x230 [ 65.129189][ T5097] do_syscall_64+0xf3/0x230 [ 65.133687][ T5097] ? clear_bhb_loop+0x35/0x90 [ 65.138353][ T5097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.144252][ T5097] RIP: 0033:0x7fa3b968c9e9 [ 65.148650][ T5097] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 65.168239][ T5097] RSP: 002b:00007ffd3e026948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 65.176631][ T5097] RAX: ffffffffffffffda RBX: 00007ffd3e026960 RCX: 00007fa3b968c9e9 [ 65.184589][ T5097] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 65.192542][ T5097] RBP: 0000000000000002 R08: 00007ffd3e0266e6 R09: 00000000000000a0 [pid 5097] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x00\x00\x03\x0a\x01\x02\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x03\x00\x73\x79\x7a\x32\x00\x00\x00\x00\x14\x00\x04\x80\x08\x00\x02\x40\x00\x00\x00\x00\x08\x00\x01\x40"..., iov_len=196}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 196 [pid 5097] exit_group(0) = ? [pid 5097] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5097, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5098 attached [pid 5098] set_robust_list(0x555587ec1660, 24) = 0 [pid 5094] <... clone resumed>, child_tidptr=0x555587ec1650) = 5098 [pid 5098] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5098] setpgid(0, 0) = 0 [pid 5098] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5098] write(3, "1000", 4) = 4 [pid 5098] close(3) = 0 executing program [pid 5098] write(1, "executing program\n", 18) = 18 [pid 5098] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=11, insns=0x20000180, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5098] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_STRICT_ALIGNMENT|BPF_F_TEST_RND_HI32|BPF_F_TEST_STATE_FREQ|0x20, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [pid 5098] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=3}}, 16) = 4 [pid 5098] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [ 65.200494][ T5097] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 65.208445][ T5097] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 65.216410][ T5097] [pid 5098] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5098] write(6, "25", 2) = 2 [ 65.277002][ T5098] FAULT_INJECTION: forcing a failure. [ 65.277002][ T5098] name failslab, interval 1, probability 0, space 0, times 0 [ 65.289788][ T5098] CPU: 0 PID: 5098 Comm: syz-executor394 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 65.300306][ T5098] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 65.310366][ T5098] Call Trace: [ 65.313638][ T5098] [ 65.316558][ T5098] dump_stack_lvl+0x241/0x360 [ 65.321234][ T5098] ? __pfx_dump_stack_lvl+0x10/0x10 [ 65.326421][ T5098] ? __pfx__printk+0x10/0x10 [ 65.331011][ T5098] ? __pfx___might_resched+0x10/0x10 [ 65.336325][ T5098] ? rcu_is_watching+0x15/0xb0 [ 65.341350][ T5098] should_fail_ex+0x3b0/0x4e0 [ 65.346027][ T5098] should_failslab+0x9/0x20 [ 65.350524][ T5098] __kmalloc_node_noprof+0xdf/0x440 [ 65.355712][ T5098] ? kvmalloc_node_noprof+0x72/0x190 [ 65.360990][ T5098] ? __pfx___might_resched+0x10/0x10 [ 65.366272][ T5098] kvmalloc_node_noprof+0x72/0x190 [ 65.371473][ T5098] __nf_hook_entries_try_shrink+0x330/0x730 [ 65.377366][ T5098] ? __static_key_slow_dec_cpuslocked+0xaa/0x170 [ 65.383681][ T5098] __nf_unregister_net_hook+0x5cf/0x800 [ 65.389224][ T5098] nf_tables_abort+0x5729/0x7a10 [ 65.394163][ T5098] ? __pfx_nf_tables_abort+0x10/0x10 [ 65.399443][ T5098] ? __kasan_kmalloc+0x98/0xb0 [ 65.404201][ T5098] ? nfnetlink_rcv+0x11b8/0x2a90 [ 65.409129][ T5098] ? nfnetlink_rcv+0x1219/0x2a90 [ 65.414058][ T5098] nfnetlink_rcv+0x20cf/0x2a90 [ 65.418811][ T5098] ? __kernel_text_address+0xd/0x40 [ 65.424026][ T5098] ? unwind_get_return_address+0x91/0xc0 [ 65.429659][ T5098] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 65.434773][ T5098] ? lock_release+0xbf/0x9f0 [ 65.439364][ T5098] ? __pfx_lock_release+0x10/0x10 [ 65.444463][ T5098] ? __pfx_lock_release+0x10/0x10 [ 65.449482][ T5098] ? net_generic+0x1f/0x240 [ 65.454494][ T5098] ? netlink_deliver_tap+0x2e/0x1b0 [ 65.459684][ T5098] netlink_unicast+0x7f0/0x990 [ 65.464535][ T5098] ? __pfx_netlink_unicast+0x10/0x10 [ 65.469912][ T5098] ? __virt_addr_valid+0x183/0x520 [ 65.475020][ T5098] ? __check_object_size+0x49c/0x900 [ 65.480290][ T5098] ? bpf_lsm_netlink_send+0x9/0x10 [ 65.485486][ T5098] netlink_sendmsg+0x8e4/0xcb0 [ 65.490248][ T5098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.495621][ T5098] ? __import_iovec+0x536/0x820 [ 65.500464][ T5098] ? aa_sock_msg_perm+0x91/0x160 [ 65.505395][ T5098] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 65.510671][ T5098] ? security_socket_sendmsg+0x87/0xb0 [ 65.516136][ T5098] ? __pfx_netlink_sendmsg+0x10/0x10 [ 65.521410][ T5098] __sock_sendmsg+0x221/0x270 [ 65.526080][ T5098] ____sys_sendmsg+0x525/0x7d0 [ 65.530840][ T5098] ? __pfx_____sys_sendmsg+0x10/0x10 [ 65.536123][ T5098] ? do_raw_spin_lock+0x14f/0x370 [ 65.541143][ T5098] __sys_sendmsg+0x2b0/0x3a0 [ 65.545727][ T5098] ? __pfx___sys_sendmsg+0x10/0x10 [ 65.550834][ T5098] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 65.557153][ T5098] ? _raw_spin_unlock_irq+0x2e/0x50 [ 65.562343][ T5098] ? ptrace_notify+0x279/0x380 [ 65.567152][ T5098] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 65.573487][ T5098] ? rcu_is_watching+0x15/0xb0 [ 65.578342][ T5098] do_syscall_64+0xf3/0x230 [ 65.582842][ T5098] ? clear_bhb_loop+0x35/0x90 [ 65.587515][ T5098] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 65.593403][ T5098] RIP: 0033:0x7fa3b968c9e9 [ 65.597897][ T5098] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 65.617579][ T5098] RSP: 002b:00007ffd3e026948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [pid 5098] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x00\x00\x03\x0a\x01\x02\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x03\x00\x73\x79\x7a\x32\x00\x00\x00\x00\x14\x00\x04\x80\x08\x00\x02\x40\x00\x00\x00\x00\x08\x00\x01\x40"..., iov_len=196}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 196 [pid 5098] exit_group(0) = ? [pid 5098] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5098, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5099 attached , child_tidptr=0x555587ec1650) = 5099 [pid 5099] set_robust_list(0x555587ec1660, 24) = 0 [ 65.625983][ T5098] RAX: ffffffffffffffda RBX: 00007ffd3e026960 RCX: 00007fa3b968c9e9 [ 65.633955][ T5098] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 65.643215][ T5098] RBP: 0000000000000002 R08: 00007ffd3e0266e6 R09: 00000000000000a0 [ 65.651172][ T5098] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 65.659129][ T5098] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 65.667096][ T5098] [pid 5099] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5099] setpgid(0, 0) = 0 [pid 5099] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5099] write(3, "1000", 4) = 4 [pid 5099] close(3) = 0 [pid 5099] write(1, "executing program\n", 18executing program ) = 18 [pid 5099] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=11, insns=0x20000180, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5099] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_STRICT_ALIGNMENT|BPF_F_TEST_RND_HI32|BPF_F_TEST_STATE_FREQ|0x20, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [pid 5099] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=3}}, 16) = 4 [pid 5099] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5099] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5099] write(6, "25", 2) = 2 [ 65.791886][ T5099] FAULT_INJECTION: forcing a failure. [ 65.791886][ T5099] name failslab, interval 1, probability 0, space 0, times 0 [ 65.804621][ T5099] CPU: 1 PID: 5099 Comm: syz-executor394 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 65.815221][ T5099] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 65.825265][ T5099] Call Trace: [ 65.828527][ T5099] [ 65.831443][ T5099] dump_stack_lvl+0x241/0x360 [ 65.836111][ T5099] ? __pfx_dump_stack_lvl+0x10/0x10 [ 65.841293][ T5099] ? __pfx__printk+0x10/0x10 [ 65.845881][ T5099] ? nft_pernet+0x1ef/0x240 [ 65.850458][ T5099] ? nf_tables_module_autoload_cleanup+0x204/0x230 [ 65.856981][ T5099] ? kfree+0x149/0x360 [ 65.861032][ T5099] should_fail_ex+0x3b0/0x4e0 [ 65.865703][ T5099] ? __alloc_skb+0x1c3/0x440 [ 65.870281][ T5099] should_failslab+0x9/0x20 [ 65.874771][ T5099] kmem_cache_alloc_node_noprof+0x71/0x320 [ 65.880564][ T5099] __alloc_skb+0x1c3/0x440 [ 65.885000][ T5099] ? __pfx___alloc_skb+0x10/0x10 [ 65.889923][ T5099] ? nf_tables_commit+0x8960/0x8a40 [ 65.895135][ T5099] ? netlink_ack_tlv_len+0x6e/0x200 [ 65.900323][ T5099] netlink_ack+0x13f/0xa30 [ 65.904728][ T5099] ? __kasan_kmalloc+0x98/0xb0 [ 65.909480][ T5099] ? nfnetlink_rcv+0x11b8/0x2a90 [ 65.914405][ T5099] ? nfnetlink_rcv+0x1219/0x2a90 [ 65.919426][ T5099] nfnetlink_rcv+0x24fd/0x2a90 [ 65.924182][ T5099] ? __kernel_text_address+0xd/0x40 [ 65.929484][ T5099] ? unwind_get_return_address+0x91/0xc0 [ 65.935264][ T5099] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 65.940373][ T5099] ? lock_release+0xbf/0x9f0 [ 65.944965][ T5099] ? __pfx_lock_release+0x10/0x10 [ 65.949973][ T5099] ? __pfx_lock_release+0x10/0x10 [ 65.954988][ T5099] ? net_generic+0x1f/0x240 [ 65.959478][ T5099] ? netlink_deliver_tap+0x2e/0x1b0 [ 65.964668][ T5099] netlink_unicast+0x7f0/0x990 [ 65.969425][ T5099] ? __pfx_netlink_unicast+0x10/0x10 [ 65.974701][ T5099] ? __virt_addr_valid+0x183/0x520 [ 65.979892][ T5099] ? __check_object_size+0x49c/0x900 [ 65.985262][ T5099] ? bpf_lsm_netlink_send+0x9/0x10 [ 65.990371][ T5099] netlink_sendmsg+0x8e4/0xcb0 [ 65.995184][ T5099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.000462][ T5099] ? __import_iovec+0x536/0x820 [ 66.005305][ T5099] ? aa_sock_msg_perm+0x91/0x160 [ 66.010245][ T5099] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 66.015607][ T5099] ? security_socket_sendmsg+0x87/0xb0 [ 66.021057][ T5099] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.026333][ T5099] __sock_sendmsg+0x221/0x270 [ 66.031005][ T5099] ____sys_sendmsg+0x525/0x7d0 [ 66.035777][ T5099] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.041057][ T5099] ? do_raw_spin_lock+0x14f/0x370 [ 66.046082][ T5099] __sys_sendmsg+0x2b0/0x3a0 [ 66.050670][ T5099] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.055794][ T5099] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 66.062114][ T5099] ? _raw_spin_unlock_irq+0x2e/0x50 [ 66.067304][ T5099] ? ptrace_notify+0x279/0x380 [ 66.072069][ T5099] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 66.078392][ T5099] ? rcu_is_watching+0x15/0xb0 [ 66.083148][ T5099] do_syscall_64+0xf3/0x230 [ 66.087645][ T5099] ? clear_bhb_loop+0x35/0x90 [ 66.092314][ T5099] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.098198][ T5099] RIP: 0033:0x7fa3b968c9e9 [ 66.102601][ T5099] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 66.122285][ T5099] RSP: 002b:00007ffd3e026948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.130687][ T5099] RAX: ffffffffffffffda RBX: 00007ffd3e026960 RCX: 00007fa3b968c9e9 [pid 5099] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x00\x00\x03\x0a\x01\x02\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x03\x00\x73\x79\x7a\x32\x00\x00\x00\x00\x14\x00\x04\x80\x08\x00\x02\x40\x00\x00\x00\x00\x08\x00\x01\x40"..., iov_len=196}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 196 [pid 5099] exit_group(0) = ? [pid 5099] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5099, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555587ec1650) = 5100 ./strace-static-x86_64: Process 5100 attached [pid 5100] set_robust_list(0x555587ec1660, 24) = 0 [pid 5100] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 66.138646][ T5099] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 66.146604][ T5099] RBP: 0000000000000002 R08: 00007ffd3e0266e6 R09: 00000000000000a0 [ 66.154560][ T5099] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 66.162521][ T5099] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 66.170486][ T5099] [pid 5100] setpgid(0, 0) = 0 [pid 5100] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5100] write(3, "1000", 4) = 4 [pid 5100] close(3) = 0 executing program [pid 5100] write(1, "executing program\n", 18) = 18 [pid 5100] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=11, insns=0x20000180, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5100] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_STRICT_ALIGNMENT|BPF_F_TEST_RND_HI32|BPF_F_TEST_STATE_FREQ|0x20, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [pid 5100] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=3}}, 16) = 4 [pid 5100] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5100] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5100] write(6, "25", 2) = 2 [ 66.268733][ T5100] FAULT_INJECTION: forcing a failure. [ 66.268733][ T5100] name failslab, interval 1, probability 0, space 0, times 0 [ 66.281414][ T5100] CPU: 0 PID: 5100 Comm: syz-executor394 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 66.291899][ T5100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 66.301959][ T5100] Call Trace: [ 66.305220][ T5100] [ 66.308134][ T5100] dump_stack_lvl+0x241/0x360 [ 66.312827][ T5100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 66.318030][ T5100] ? __pfx__printk+0x10/0x10 [ 66.322611][ T5100] ? nft_pernet+0x1ef/0x240 [ 66.327122][ T5100] ? nf_tables_module_autoload_cleanup+0x204/0x230 [ 66.333604][ T5100] ? kfree+0x149/0x360 [ 66.337654][ T5100] should_fail_ex+0x3b0/0x4e0 [ 66.342845][ T5100] ? __alloc_skb+0x1c3/0x440 [ 66.347418][ T5100] should_failslab+0x9/0x20 [ 66.351901][ T5100] kmem_cache_alloc_node_noprof+0x71/0x320 [ 66.357685][ T5100] __alloc_skb+0x1c3/0x440 [ 66.362083][ T5100] ? __pfx___alloc_skb+0x10/0x10 [ 66.367039][ T5100] ? nf_tables_commit+0x8960/0x8a40 [ 66.372231][ T5100] ? netlink_ack_tlv_len+0x6e/0x200 [ 66.377585][ T5100] netlink_ack+0x13f/0xa30 [ 66.381989][ T5100] ? __kasan_kmalloc+0x98/0xb0 [ 66.386742][ T5100] ? nfnetlink_rcv+0x11b8/0x2a90 [ 66.391865][ T5100] ? nfnetlink_rcv+0x1219/0x2a90 [ 66.396802][ T5100] nfnetlink_rcv+0x24fd/0x2a90 [ 66.401572][ T5100] ? __kernel_text_address+0xd/0x40 [ 66.406779][ T5100] ? unwind_get_return_address+0x91/0xc0 [ 66.412411][ T5100] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 66.417515][ T5100] ? lock_release+0xbf/0x9f0 [ 66.422139][ T5100] ? __pfx_lock_release+0x10/0x10 [ 66.427154][ T5100] ? __pfx_lock_release+0x10/0x10 [ 66.432169][ T5100] ? net_generic+0x1f/0x240 [ 66.436662][ T5100] ? netlink_deliver_tap+0x2e/0x1b0 [ 66.441852][ T5100] netlink_unicast+0x7f0/0x990 [ 66.446643][ T5100] ? __pfx_netlink_unicast+0x10/0x10 [ 66.451912][ T5100] ? __virt_addr_valid+0x183/0x520 [ 66.457013][ T5100] ? __check_object_size+0x49c/0x900 [ 66.462327][ T5100] ? bpf_lsm_netlink_send+0x9/0x10 [ 66.467967][ T5100] netlink_sendmsg+0x8e4/0xcb0 [ 66.472811][ T5100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.478176][ T5100] ? __import_iovec+0x536/0x820 [ 66.483015][ T5100] ? aa_sock_msg_perm+0x91/0x160 [ 66.488030][ T5100] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 66.493299][ T5100] ? security_socket_sendmsg+0x87/0xb0 [ 66.498786][ T5100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.504060][ T5100] __sock_sendmsg+0x221/0x270 [ 66.508725][ T5100] ____sys_sendmsg+0x525/0x7d0 [ 66.513480][ T5100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.518844][ T5100] ? do_raw_spin_lock+0x14f/0x370 [ 66.523876][ T5100] __sys_sendmsg+0x2b0/0x3a0 [ 66.528471][ T5100] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.533670][ T5100] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 66.540003][ T5100] ? _raw_spin_unlock_irq+0x2e/0x50 [ 66.545200][ T5100] ? ptrace_notify+0x279/0x380 [ 66.549964][ T5100] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 66.556399][ T5100] ? rcu_is_watching+0x15/0xb0 [ 66.561162][ T5100] do_syscall_64+0xf3/0x230 [ 66.565660][ T5100] ? clear_bhb_loop+0x35/0x90 [ 66.570853][ T5100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 66.576745][ T5100] RIP: 0033:0x7fa3b968c9e9 [ 66.581150][ T5100] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 66.600921][ T5100] RSP: 002b:00007ffd3e026948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 66.609322][ T5100] RAX: ffffffffffffffda RBX: 00007ffd3e026960 RCX: 00007fa3b968c9e9 [pid 5100] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x00\x00\x03\x0a\x01\x02\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x03\x00\x73\x79\x7a\x32\x00\x00\x00\x00\x14\x00\x04\x80\x08\x00\x02\x40\x00\x00\x00\x00\x08\x00\x01\x40"..., iov_len=196}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 196 [pid 5100] exit_group(0) = ? [pid 5100] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5100, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5101 attached , child_tidptr=0x555587ec1650) = 5101 [pid 5101] set_robust_list(0x555587ec1660, 24) = 0 [pid 5101] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5101] setpgid(0, 0) = 0 [pid 5101] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5101] write(3, "1000", 4) = 4 [pid 5101] close(3) = 0 executing program [pid 5101] write(1, "executing program\n", 18) = 18 [pid 5101] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=11, insns=0x20000180, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5101] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_STRICT_ALIGNMENT|BPF_F_TEST_RND_HI32|BPF_F_TEST_STATE_FREQ|0x20, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [pid 5101] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=3}}, 16) = 4 [pid 5101] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [ 66.617286][ T5100] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 66.625246][ T5100] RBP: 0000000000000002 R08: 00007ffd3e0266e6 R09: 00000000000000a0 [ 66.633207][ T5100] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 66.641203][ T5100] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 66.649166][ T5100] [pid 5101] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5101] write(6, "25", 2) = 2 [ 66.720697][ T5101] FAULT_INJECTION: forcing a failure. [ 66.720697][ T5101] name failslab, interval 1, probability 0, space 0, times 0 [ 66.733454][ T5101] CPU: 0 PID: 5101 Comm: syz-executor394 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 66.744080][ T5101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 66.754144][ T5101] Call Trace: [ 66.757416][ T5101] [ 66.760335][ T5101] dump_stack_lvl+0x241/0x360 [ 66.765002][ T5101] ? __pfx_dump_stack_lvl+0x10/0x10 [ 66.770184][ T5101] ? __pfx__printk+0x10/0x10 [ 66.774773][ T5101] ? __pfx___might_resched+0x10/0x10 [ 66.780195][ T5101] ? rcu_is_watching+0x15/0xb0 [ 66.784973][ T5101] should_fail_ex+0x3b0/0x4e0 [ 66.789678][ T5101] should_failslab+0x9/0x20 [ 66.794169][ T5101] __kmalloc_node_noprof+0xdf/0x440 [ 66.799445][ T5101] ? kvmalloc_node_noprof+0x72/0x190 [ 66.804804][ T5101] ? __pfx___might_resched+0x10/0x10 [ 66.810076][ T5101] kvmalloc_node_noprof+0x72/0x190 [ 66.815179][ T5101] __nf_hook_entries_try_shrink+0x330/0x730 [ 66.821063][ T5101] ? __static_key_slow_dec_cpuslocked+0xaa/0x170 [ 66.827382][ T5101] __nf_unregister_net_hook+0x5cf/0x800 [ 66.832941][ T5101] nf_unregister_net_hook+0x98/0xe0 [ 66.838136][ T5101] nf_tables_abort+0x5729/0x7a10 [ 66.843069][ T5101] ? __pfx_nf_tables_abort+0x10/0x10 [ 66.848369][ T5101] ? __kasan_kmalloc+0x98/0xb0 [ 66.853207][ T5101] ? nfnetlink_rcv+0x11b8/0x2a90 [ 66.858131][ T5101] ? nfnetlink_rcv+0x1219/0x2a90 [ 66.863230][ T5101] nfnetlink_rcv+0x20cf/0x2a90 [ 66.868071][ T5101] ? __kernel_text_address+0xd/0x40 [ 66.873260][ T5101] ? unwind_get_return_address+0x91/0xc0 [ 66.878887][ T5101] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 66.883993][ T5101] ? lock_release+0xbf/0x9f0 [ 66.888592][ T5101] ? __pfx_lock_release+0x10/0x10 [ 66.893604][ T5101] ? __pfx_lock_release+0x10/0x10 [ 66.898613][ T5101] ? net_generic+0x1f/0x240 [ 66.903153][ T5101] ? netlink_deliver_tap+0x2e/0x1b0 [ 66.908335][ T5101] netlink_unicast+0x7f0/0x990 [ 66.913094][ T5101] ? __pfx_netlink_unicast+0x10/0x10 [ 66.918359][ T5101] ? __virt_addr_valid+0x183/0x520 [ 66.923467][ T5101] ? __check_object_size+0x49c/0x900 [ 66.928739][ T5101] ? bpf_lsm_netlink_send+0x9/0x10 [ 66.933840][ T5101] netlink_sendmsg+0x8e4/0xcb0 [ 66.938617][ T5101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.943913][ T5101] ? __import_iovec+0x536/0x820 [ 66.948758][ T5101] ? aa_sock_msg_perm+0x91/0x160 [ 66.953692][ T5101] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 66.958981][ T5101] ? security_socket_sendmsg+0x87/0xb0 [ 66.964543][ T5101] ? __pfx_netlink_sendmsg+0x10/0x10 [ 66.969820][ T5101] __sock_sendmsg+0x221/0x270 [ 66.974490][ T5101] ____sys_sendmsg+0x525/0x7d0 [ 66.979241][ T5101] ? __pfx_____sys_sendmsg+0x10/0x10 [ 66.984606][ T5101] ? do_raw_spin_lock+0x14f/0x370 [ 66.989620][ T5101] __sys_sendmsg+0x2b0/0x3a0 [ 66.994198][ T5101] ? __pfx___sys_sendmsg+0x10/0x10 [ 66.999729][ T5101] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 67.006040][ T5101] ? _raw_spin_unlock_irq+0x2e/0x50 [ 67.011228][ T5101] ? ptrace_notify+0x279/0x380 [ 67.015989][ T5101] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 67.022390][ T5101] ? rcu_is_watching+0x15/0xb0 [ 67.027136][ T5101] do_syscall_64+0xf3/0x230 [ 67.031626][ T5101] ? clear_bhb_loop+0x35/0x90 [ 67.036287][ T5101] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.042180][ T5101] RIP: 0033:0x7fa3b968c9e9 [ 67.046588][ T5101] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [pid 5101] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x00\x00\x03\x0a\x01\x02\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x03\x00\x73\x79\x7a\x32\x00\x00\x00\x00\x14\x00\x04\x80\x08\x00\x02\x40\x00\x00\x00\x00\x08\x00\x01\x40"..., iov_len=196}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 196 [pid 5101] exit_group(0) = ? [pid 5101] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5101, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- [ 67.066179][ T5101] RSP: 002b:00007ffd3e026948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.074585][ T5101] RAX: ffffffffffffffda RBX: 00007ffd3e026960 RCX: 00007fa3b968c9e9 [ 67.082540][ T5101] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 67.090493][ T5101] RBP: 0000000000000002 R08: 00007ffd3e0266e6 R09: 00000000000000a0 [ 67.098450][ T5101] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 67.106494][ T5101] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 67.114468][ T5101] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555587ec1650) = 5102 ./strace-static-x86_64: Process 5102 attached [pid 5102] set_robust_list(0x555587ec1660, 24) = 0 [pid 5102] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5102] setpgid(0, 0) = 0 [pid 5102] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5102] write(3, "1000", 4) = 4 [pid 5102] close(3) = 0 [pid 5102] write(1, "executing program\n", 18executing program ) = 18 [pid 5102] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=11, insns=0x20000180, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5102] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_STRICT_ALIGNMENT|BPF_F_TEST_RND_HI32|BPF_F_TEST_STATE_FREQ|0x20, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [pid 5102] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=3}}, 16) = 4 [pid 5102] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5102] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5102] write(6, "25", 2) = 2 [ 67.213787][ T5102] FAULT_INJECTION: forcing a failure. [ 67.213787][ T5102] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 67.226833][ T5102] CPU: 0 PID: 5102 Comm: syz-executor394 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 67.237311][ T5102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 67.247346][ T5102] Call Trace: [ 67.250615][ T5102] [ 67.253551][ T5102] dump_stack_lvl+0x241/0x360 [ 67.258322][ T5102] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.263517][ T5102] ? __pfx__printk+0x10/0x10 [ 67.268104][ T5102] ? rcu_is_watching+0x15/0xb0 [ 67.272875][ T5102] ? bpf_trace_run4+0x244/0x590 [ 67.277720][ T5102] ? rcu_is_watching+0x15/0xb0 [ 67.282487][ T5102] ? bpf_trace_run4+0x244/0x590 [ 67.287335][ T5102] should_fail_ex+0x3b0/0x4e0 [ 67.292014][ T5102] strncpy_from_user+0x36/0x2f0 [ 67.296852][ T5102] strncpy_from_user_nofault+0x71/0x140 [ 67.302489][ T5102] bpf_probe_read_compat_str+0xe9/0x180 [ 67.308036][ T5102] ? bpf_trace_run4+0x244/0x590 [ 67.312872][ T5102] bpf_prog_f2ce78ec2d45df6f+0x3d/0x3f [ 67.318361][ T5102] bpf_trace_run4+0x334/0x590 [ 67.323045][ T5102] ? set_next_entity+0x10e/0x4c0 [ 67.327976][ T5102] ? __pfx_bpf_trace_run4+0x10/0x10 [ 67.333167][ T5102] ? task_psi_group+0x47/0x1a0 [ 67.337982][ T5102] ? psi_task_switch+0x36d/0x770 [ 67.342904][ T5102] __schedule+0x2587/0x4a20 [ 67.347394][ T5102] ? rcu_is_watching+0x15/0xb0 [ 67.352141][ T5102] ? __enqueue_entity+0x271/0x500 [ 67.357148][ T5102] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 67.363025][ T5102] ? __pfx___schedule+0x10/0x10 [ 67.367858][ T5102] ? rcu_is_watching+0x15/0xb0 [ 67.372601][ T5102] ? lock_release+0xbf/0x9f0 [ 67.377176][ T5102] ? rcu_is_watching+0x15/0xb0 [ 67.381928][ T5102] ? preempt_schedule+0xe1/0xf0 [ 67.386765][ T5102] preempt_schedule_common+0x84/0xd0 [ 67.392036][ T5102] preempt_schedule+0xe1/0xf0 [ 67.396717][ T5102] ? __pfx_preempt_schedule+0x10/0x10 [ 67.402074][ T5102] ? __pfx_lock_release+0x10/0x10 [ 67.407083][ T5102] ? try_to_wake_up+0x939/0x1470 [ 67.412046][ T5102] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 67.418459][ T5102] preempt_schedule_thunk+0x1a/0x30 [ 67.423650][ T5102] _raw_spin_unlock_irqrestore+0x130/0x140 [ 67.429548][ T5102] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 67.435900][ T5102] kthread_queue_work+0x110/0x180 [ 67.440928][ T5102] synchronize_rcu_expedited+0x5ad/0x830 [ 67.446557][ T5102] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 67.452795][ T5102] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 67.458060][ T5102] ? __pfx___might_resched+0x10/0x10 [ 67.463335][ T5102] ? rcu_is_watching+0x15/0xb0 [ 67.468081][ T5102] synchronize_rcu+0x11b/0x360 [ 67.472831][ T5102] ? __pfx_synchronize_rcu+0x10/0x10 [ 67.478099][ T5102] ? __nf_unregister_net_hook+0x5f0/0x800 [ 67.483812][ T5102] nf_tables_abort+0x6569/0x7a10 [ 67.488760][ T5102] ? __pfx_nf_tables_abort+0x10/0x10 [ 67.494047][ T5102] ? __kasan_kmalloc+0x98/0xb0 [ 67.498801][ T5102] ? nfnetlink_rcv+0x11b8/0x2a90 [ 67.503721][ T5102] ? nfnetlink_rcv+0x1219/0x2a90 [ 67.508643][ T5102] nfnetlink_rcv+0x20cf/0x2a90 [ 67.513388][ T5102] ? __kernel_text_address+0xd/0x40 [ 67.518582][ T5102] ? unwind_get_return_address+0x91/0xc0 [ 67.524207][ T5102] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 67.529302][ T5102] ? lock_release+0xbf/0x9f0 [ 67.533899][ T5102] ? __pfx_lock_release+0x10/0x10 [ 67.538991][ T5102] ? __pfx_lock_release+0x10/0x10 [ 67.543999][ T5102] ? net_generic+0x1f/0x240 [ 67.548494][ T5102] ? netlink_deliver_tap+0x2e/0x1b0 [ 67.553676][ T5102] netlink_unicast+0x7f0/0x990 [ 67.558423][ T5102] ? __pfx_netlink_unicast+0x10/0x10 [ 67.563702][ T5102] ? __virt_addr_valid+0x183/0x520 [ 67.568970][ T5102] ? __check_object_size+0x49c/0x900 [ 67.574257][ T5102] ? bpf_lsm_netlink_send+0x9/0x10 [ 67.579385][ T5102] netlink_sendmsg+0x8e4/0xcb0 [ 67.584152][ T5102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.589432][ T5102] ? __import_iovec+0x536/0x820 [ 67.594283][ T5102] ? aa_sock_msg_perm+0x91/0x160 [ 67.599273][ T5102] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 67.604555][ T5102] ? security_socket_sendmsg+0x87/0xb0 [ 67.610009][ T5102] ? __pfx_netlink_sendmsg+0x10/0x10 [ 67.615292][ T5102] __sock_sendmsg+0x221/0x270 [ 67.619956][ T5102] ____sys_sendmsg+0x525/0x7d0 [ 67.624708][ T5102] ? __pfx_____sys_sendmsg+0x10/0x10 [ 67.630069][ T5102] ? do_raw_spin_lock+0x14f/0x370 [ 67.635197][ T5102] __sys_sendmsg+0x2b0/0x3a0 [ 67.639786][ T5102] ? __pfx___sys_sendmsg+0x10/0x10 [ 67.644883][ T5102] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 67.651196][ T5102] ? _raw_spin_unlock_irq+0x2e/0x50 [ 67.656463][ T5102] ? ptrace_notify+0x279/0x380 [ 67.661226][ T5102] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 67.667645][ T5102] ? rcu_is_watching+0x15/0xb0 [ 67.672416][ T5102] do_syscall_64+0xf3/0x230 [ 67.676918][ T5102] ? clear_bhb_loop+0x35/0x90 [ 67.681605][ T5102] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 67.687485][ T5102] RIP: 0033:0x7fa3b968c9e9 [ 67.691881][ T5102] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [pid 5102] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x00\x00\x03\x0a\x01\x02\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x03\x00\x73\x79\x7a\x32\x00\x00\x00\x00\x14\x00\x04\x80\x08\x00\x02\x40\x00\x00\x00\x00\x08\x00\x01\x40"..., iov_len=196}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 196 [pid 5102] exit_group(0) = ? [pid 5102] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5102, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5103 attached , child_tidptr=0x555587ec1650) = 5103 [pid 5103] set_robust_list(0x555587ec1660, 24) = 0 [pid 5103] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5103] setpgid(0, 0) = 0 [pid 5103] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 67.711466][ T5102] RSP: 002b:00007ffd3e026948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 67.719856][ T5102] RAX: ffffffffffffffda RBX: 00007ffd3e026960 RCX: 00007fa3b968c9e9 [ 67.727807][ T5102] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 67.735774][ T5102] RBP: 0000000000000002 R08: 00007ffd3e0266e6 R09: 00000000000000a0 [ 67.743742][ T5102] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 67.751708][ T5102] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 67.759676][ T5102] [pid 5103] write(3, "1000", 4) = 4 [pid 5103] close(3) = 0 executing program [pid 5103] write(1, "executing program\n", 18) = 18 [pid 5103] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=11, insns=0x20000180, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5103] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_STRICT_ALIGNMENT|BPF_F_TEST_RND_HI32|BPF_F_TEST_STATE_FREQ|0x20, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [pid 5103] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=3}}, 16) = 4 [pid 5103] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5103] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5103] write(6, "25", 2) = 2 [ 67.838446][ T5103] FAULT_INJECTION: forcing a failure. [ 67.838446][ T5103] name failslab, interval 1, probability 0, space 0, times 0 [ 67.851134][ T5103] CPU: 0 PID: 5103 Comm: syz-executor394 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 67.861621][ T5103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 67.871663][ T5103] Call Trace: [ 67.874924][ T5103] [ 67.877837][ T5103] dump_stack_lvl+0x241/0x360 [ 67.882506][ T5103] ? __pfx_dump_stack_lvl+0x10/0x10 [ 67.887689][ T5103] ? __pfx__printk+0x10/0x10 [ 67.892262][ T5103] ? __pfx___might_resched+0x10/0x10 [ 67.897530][ T5103] ? rcu_is_watching+0x15/0xb0 [ 67.902284][ T5103] should_fail_ex+0x3b0/0x4e0 [ 67.906964][ T5103] should_failslab+0x9/0x20 [ 67.911453][ T5103] __kmalloc_node_noprof+0xdf/0x440 [ 67.916638][ T5103] ? kvmalloc_node_noprof+0x72/0x190 [ 67.921923][ T5103] ? __pfx___might_resched+0x10/0x10 [ 67.927197][ T5103] kvmalloc_node_noprof+0x72/0x190 [ 67.932295][ T5103] __nf_hook_entries_try_shrink+0x330/0x730 [ 67.938187][ T5103] ? __static_key_slow_dec_cpuslocked+0xaa/0x170 [ 67.944507][ T5103] __nf_unregister_net_hook+0x5cf/0x800 [ 67.950246][ T5103] nf_tables_abort+0x5729/0x7a10 [ 67.955183][ T5103] ? __pfx_nf_tables_abort+0x10/0x10 [ 67.960462][ T5103] ? __kasan_kmalloc+0x98/0xb0 [ 67.965214][ T5103] ? nfnetlink_rcv+0x11b8/0x2a90 [ 67.970139][ T5103] ? nfnetlink_rcv+0x1219/0x2a90 [ 67.975070][ T5103] nfnetlink_rcv+0x20cf/0x2a90 [ 67.979825][ T5103] ? __kernel_text_address+0xd/0x40 [ 67.985016][ T5103] ? unwind_get_return_address+0x91/0xc0 [ 67.990651][ T5103] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 67.995757][ T5103] ? lock_release+0xbf/0x9f0 [ 68.000350][ T5103] ? __pfx_lock_release+0x10/0x10 [ 68.005368][ T5103] ? __pfx_lock_release+0x10/0x10 [ 68.010384][ T5103] ? net_generic+0x1f/0x240 [ 68.014878][ T5103] ? netlink_deliver_tap+0x2e/0x1b0 [ 68.020066][ T5103] netlink_unicast+0x7f0/0x990 [ 68.024822][ T5103] ? __pfx_netlink_unicast+0x10/0x10 [ 68.030096][ T5103] ? __virt_addr_valid+0x183/0x520 [ 68.035200][ T5103] ? __check_object_size+0x49c/0x900 [ 68.040470][ T5103] ? bpf_lsm_netlink_send+0x9/0x10 [ 68.045574][ T5103] netlink_sendmsg+0x8e4/0xcb0 [ 68.050337][ T5103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.055612][ T5103] ? __import_iovec+0x536/0x820 [ 68.060452][ T5103] ? aa_sock_msg_perm+0x91/0x160 [ 68.065403][ T5103] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 68.070822][ T5103] ? security_socket_sendmsg+0x87/0xb0 [ 68.076283][ T5103] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.081567][ T5103] __sock_sendmsg+0x221/0x270 [ 68.086241][ T5103] ____sys_sendmsg+0x525/0x7d0 [ 68.091023][ T5103] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.096478][ T5103] ? do_raw_spin_lock+0x14f/0x370 [ 68.101510][ T5103] __sys_sendmsg+0x2b0/0x3a0 [ 68.106107][ T5103] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.111306][ T5103] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 68.117628][ T5103] ? _raw_spin_unlock_irq+0x2e/0x50 [ 68.122904][ T5103] ? ptrace_notify+0x279/0x380 [ 68.127665][ T5103] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 68.133991][ T5103] ? rcu_is_watching+0x15/0xb0 [ 68.138744][ T5103] do_syscall_64+0xf3/0x230 [ 68.143239][ T5103] ? clear_bhb_loop+0x35/0x90 [ 68.147910][ T5103] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.153792][ T5103] RIP: 0033:0x7fa3b968c9e9 [ 68.158196][ T5103] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 68.177809][ T5103] RSP: 002b:00007ffd3e026948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [pid 5103] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x00\x00\x03\x0a\x01\x02\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x03\x00\x73\x79\x7a\x32\x00\x00\x00\x00\x14\x00\x04\x80\x08\x00\x02\x40\x00\x00\x00\x00\x08\x00\x01\x40"..., iov_len=196}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 196 [pid 5103] exit_group(0) = ? [pid 5103] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5103, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5104 attached , child_tidptr=0x555587ec1650) = 5104 [pid 5104] set_robust_list(0x555587ec1660, 24) = 0 [pid 5104] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5104] setpgid(0, 0) = 0 [pid 5104] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5104] write(3, "1000", 4) = 4 [pid 5104] close(3) = 0 [pid 5104] write(1, "executing program\n", 18executing program ) = 18 [pid 5104] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=11, insns=0x20000180, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5104] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_STRICT_ALIGNMENT|BPF_F_TEST_RND_HI32|BPF_F_TEST_STATE_FREQ|0x20, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [ 68.186228][ T5103] RAX: ffffffffffffffda RBX: 00007ffd3e026960 RCX: 00007fa3b968c9e9 [ 68.194189][ T5103] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 68.202151][ T5103] RBP: 0000000000000002 R08: 00007ffd3e0266e6 R09: 00000000000000a0 [ 68.210124][ T5103] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 68.218121][ T5103] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 68.226103][ T5103] [pid 5104] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=3}}, 16) = 4 [pid 5104] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5104] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5104] write(6, "25", 2) = 2 [ 68.321164][ T5104] FAULT_INJECTION: forcing a failure. [ 68.321164][ T5104] name failslab, interval 1, probability 0, space 0, times 0 [ 68.334023][ T5104] CPU: 0 PID: 5104 Comm: syz-executor394 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 68.344618][ T5104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 68.354669][ T5104] Call Trace: [ 68.357941][ T5104] [ 68.361095][ T5104] dump_stack_lvl+0x241/0x360 [ 68.365793][ T5104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.370986][ T5104] ? __pfx__printk+0x10/0x10 [ 68.375573][ T5104] ? __pfx___might_resched+0x10/0x10 [ 68.380876][ T5104] should_fail_ex+0x3b0/0x4e0 [ 68.385548][ T5104] ? nft_trans_rule_add+0x5a/0x430 [ 68.390674][ T5104] should_failslab+0x9/0x20 [ 68.395168][ T5104] kmalloc_trace_noprof+0x6c/0x2c0 [ 68.400274][ T5104] nft_trans_rule_add+0x5a/0x430 [ 68.405203][ T5104] ? nf_ct_netns_inet_get+0x4f/0x150 [ 68.410476][ T5104] nf_tables_newrule+0x1c2b/0x2960 [ 68.415591][ T5104] ? __pfx_nf_tables_newrule+0x10/0x10 [ 68.421129][ T5104] ? __pfx_nf_tables_newtable+0x10/0x10 [ 68.426710][ T5104] ? __nla_parse+0x40/0x60 [ 68.431399][ T5104] nfnetlink_rcv+0x1427/0x2a90 [ 68.436173][ T5104] ? __kernel_text_address+0xd/0x40 [ 68.441370][ T5104] ? unwind_get_return_address+0x91/0xc0 [ 68.447010][ T5104] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 68.452125][ T5104] ? lock_release+0xbf/0x9f0 [ 68.456720][ T5104] ? __pfx_lock_release+0x10/0x10 [ 68.461738][ T5104] ? __pfx_lock_release+0x10/0x10 [ 68.466765][ T5104] ? net_generic+0x1f/0x240 [ 68.471351][ T5104] ? netlink_deliver_tap+0x2e/0x1b0 [ 68.476541][ T5104] netlink_unicast+0x7f0/0x990 [ 68.481297][ T5104] ? __pfx_netlink_unicast+0x10/0x10 [ 68.486570][ T5104] ? __virt_addr_valid+0x183/0x520 [ 68.491762][ T5104] ? __check_object_size+0x49c/0x900 [ 68.497036][ T5104] ? bpf_lsm_netlink_send+0x9/0x10 [ 68.502231][ T5104] netlink_sendmsg+0x8e4/0xcb0 [ 68.506990][ T5104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.512269][ T5104] ? __import_iovec+0x536/0x820 [ 68.517113][ T5104] ? aa_sock_msg_perm+0x91/0x160 [ 68.522137][ T5104] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 68.527415][ T5104] ? security_socket_sendmsg+0x87/0xb0 [ 68.532874][ T5104] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.538148][ T5104] __sock_sendmsg+0x221/0x270 [ 68.542929][ T5104] ____sys_sendmsg+0x525/0x7d0 [ 68.547692][ T5104] ? __pfx_____sys_sendmsg+0x10/0x10 [ 68.553002][ T5104] ? do_raw_spin_lock+0x14f/0x370 [ 68.558031][ T5104] __sys_sendmsg+0x2b0/0x3a0 [ 68.562637][ T5104] ? __pfx___sys_sendmsg+0x10/0x10 [ 68.567777][ T5104] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 68.574157][ T5104] ? _raw_spin_unlock_irq+0x2e/0x50 [ 68.579374][ T5104] ? ptrace_notify+0x279/0x380 [ 68.584162][ T5104] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 68.590508][ T5104] ? rcu_is_watching+0x15/0xb0 [ 68.595271][ T5104] do_syscall_64+0xf3/0x230 [ 68.599953][ T5104] ? clear_bhb_loop+0x35/0x90 [ 68.604790][ T5104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.610771][ T5104] RIP: 0033:0x7fa3b968c9e9 [ 68.615179][ T5104] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 68.634772][ T5104] RSP: 002b:00007ffd3e026948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 68.643178][ T5104] RAX: ffffffffffffffda RBX: 00007ffd3e026960 RCX: 00007fa3b968c9e9 [ 68.651142][ T5104] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 68.659116][ T5104] RBP: 0000000000000002 R08: 00007ffd3e0266e6 R09: 00000000000000a0 [pid 5104] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x00\x00\x03\x0a\x01\x02\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x03\x00\x73\x79\x7a\x32\x00\x00\x00\x00\x14\x00\x04\x80\x08\x00\x02\x40\x00\x00\x00\x00\x08\x00\x01\x40"..., iov_len=196}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 196 [pid 5104] exit_group(0) = ? [pid 5104] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5104, si_uid=0, si_status=0, si_utime=0, si_stime=2 /* 0.02 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5105 attached [pid 5105] set_robust_list(0x555587ec1660, 24) = 0 [pid 5105] prctl(PR_SET_PDEATHSIG, SIGKILL [pid 5094] <... clone resumed>, child_tidptr=0x555587ec1650) = 5105 [pid 5105] <... prctl resumed>) = 0 [pid 5105] setpgid(0, 0) = 0 [ 68.667113][ T5104] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 68.675078][ T5104] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 68.683046][ T5104] [pid 5105] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5105] write(3, "1000", 4) = 4 [pid 5105] close(3executing program ) = 0 [pid 5105] write(1, "executing program\n", 18) = 18 [pid 5105] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=11, insns=0x20000180, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5105] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_STRICT_ALIGNMENT|BPF_F_TEST_RND_HI32|BPF_F_TEST_STATE_FREQ|0x20, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [pid 5105] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=3}}, 16) = 4 [pid 5105] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5105] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5105] write(6, "25", 2) = 2 [ 68.777448][ T5105] FAULT_INJECTION: forcing a failure. [ 68.777448][ T5105] name failslab, interval 1, probability 0, space 0, times 0 [ 68.790249][ T5105] CPU: 0 PID: 5105 Comm: syz-executor394 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 68.800743][ T5105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 68.810796][ T5105] Call Trace: [ 68.814064][ T5105] [ 68.816983][ T5105] dump_stack_lvl+0x241/0x360 [ 68.821676][ T5105] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.826909][ T5105] ? __pfx__printk+0x10/0x10 [ 68.831492][ T5105] ? nft_pernet+0x1ef/0x240 [ 68.835988][ T5105] ? nf_tables_module_autoload_cleanup+0x204/0x230 [ 68.842921][ T5105] ? kfree+0x149/0x360 [ 68.847084][ T5105] should_fail_ex+0x3b0/0x4e0 [ 68.851779][ T5105] ? __alloc_skb+0x1c3/0x440 [ 68.856362][ T5105] should_failslab+0x9/0x20 [ 68.861029][ T5105] kmem_cache_alloc_node_noprof+0x71/0x320 [ 68.867011][ T5105] __alloc_skb+0x1c3/0x440 [ 68.871426][ T5105] ? __pfx___alloc_skb+0x10/0x10 [ 68.876375][ T5105] ? nf_tables_commit+0x8960/0x8a40 [ 68.881574][ T5105] ? netlink_ack_tlv_len+0x6e/0x200 [ 68.886767][ T5105] netlink_ack+0x13f/0xa30 [ 68.891172][ T5105] ? __kasan_kmalloc+0x98/0xb0 [ 68.895931][ T5105] ? nfnetlink_rcv+0x11b8/0x2a90 [ 68.900863][ T5105] ? nfnetlink_rcv+0x1219/0x2a90 [ 68.905791][ T5105] nfnetlink_rcv+0x24fd/0x2a90 [ 68.910564][ T5105] ? __kernel_text_address+0xd/0x40 [ 68.915762][ T5105] ? unwind_get_return_address+0x91/0xc0 [ 68.921397][ T5105] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 68.926507][ T5105] ? lock_release+0xbf/0x9f0 [ 68.931098][ T5105] ? __pfx_lock_release+0x10/0x10 [ 68.936118][ T5105] ? __pfx_lock_release+0x10/0x10 [ 68.941151][ T5105] ? net_generic+0x1f/0x240 [ 68.945671][ T5105] ? netlink_deliver_tap+0x2e/0x1b0 [ 68.950860][ T5105] netlink_unicast+0x7f0/0x990 [ 68.955617][ T5105] ? __pfx_netlink_unicast+0x10/0x10 [ 68.960891][ T5105] ? __virt_addr_valid+0x183/0x520 [ 68.966008][ T5105] ? __check_object_size+0x49c/0x900 [ 68.971298][ T5105] ? bpf_lsm_netlink_send+0x9/0x10 [ 68.976420][ T5105] netlink_sendmsg+0x8e4/0xcb0 [ 68.981176][ T5105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 68.986446][ T5105] ? __import_iovec+0x536/0x820 [ 68.991304][ T5105] ? aa_sock_msg_perm+0x91/0x160 [ 68.996254][ T5105] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 69.001536][ T5105] ? security_socket_sendmsg+0x87/0xb0 [ 69.007017][ T5105] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.012328][ T5105] __sock_sendmsg+0x221/0x270 [ 69.017110][ T5105] ____sys_sendmsg+0x525/0x7d0 [ 69.021871][ T5105] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.027149][ T5105] ? do_raw_spin_lock+0x14f/0x370 [ 69.032169][ T5105] __sys_sendmsg+0x2b0/0x3a0 [ 69.036760][ T5105] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.041870][ T5105] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.048193][ T5105] ? _raw_spin_unlock_irq+0x2e/0x50 [ 69.053566][ T5105] ? ptrace_notify+0x279/0x380 [ 69.058327][ T5105] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.064734][ T5105] ? rcu_is_watching+0x15/0xb0 [ 69.069493][ T5105] do_syscall_64+0xf3/0x230 [ 69.073985][ T5105] ? clear_bhb_loop+0x35/0x90 [ 69.078647][ T5105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.084529][ T5105] RIP: 0033:0x7fa3b968c9e9 [ 69.088932][ T5105] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 69.108531][ T5105] RSP: 002b:00007ffd3e026948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.116945][ T5105] RAX: ffffffffffffffda RBX: 00007ffd3e026960 RCX: 00007fa3b968c9e9 [pid 5105] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x00\x00\x03\x0a\x01\x02\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x03\x00\x73\x79\x7a\x32\x00\x00\x00\x00\x14\x00\x04\x80\x08\x00\x02\x40\x00\x00\x00\x00\x08\x00\x01\x40"..., iov_len=196}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 196 [pid 5105] exit_group(0) = ? [pid 5105] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5105, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555587ec1650) = 5106 ./strace-static-x86_64: Process 5106 attached [pid 5106] set_robust_list(0x555587ec1660, 24) = 0 [pid 5106] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5106] setpgid(0, 0) = 0 [pid 5106] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5106] write(3, "1000", 4) = 4 [ 69.124937][ T5105] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 69.132912][ T5105] RBP: 0000000000000002 R08: 00007ffd3e0266e6 R09: 00000000000000a0 [ 69.140885][ T5105] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 69.148864][ T5105] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 69.156831][ T5105] [pid 5106] close(3) = 0 executing program [pid 5106] write(1, "executing program\n", 18) = 18 [pid 5106] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=11, insns=0x20000180, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5106] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_STRICT_ALIGNMENT|BPF_F_TEST_RND_HI32|BPF_F_TEST_STATE_FREQ|0x20, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [pid 5106] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=3}}, 16) = 4 [pid 5106] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5106] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5106] write(6, "25", 2) = 2 [ 69.282482][ T5106] FAULT_INJECTION: forcing a failure. [ 69.282482][ T5106] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 69.295558][ T5106] CPU: 1 PID: 5106 Comm: syz-executor394 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 69.306036][ T5106] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 69.316111][ T5106] Call Trace: [ 69.319385][ T5106] [ 69.322310][ T5106] dump_stack_lvl+0x241/0x360 [ 69.326983][ T5106] ? __pfx_dump_stack_lvl+0x10/0x10 [ 69.332215][ T5106] ? __pfx__printk+0x10/0x10 [ 69.336821][ T5106] ? rcu_is_watching+0x15/0xb0 [ 69.341753][ T5106] ? bpf_trace_run4+0x244/0x590 [ 69.346593][ T5106] ? rcu_is_watching+0x15/0xb0 [ 69.351343][ T5106] ? bpf_trace_run4+0x244/0x590 [ 69.356460][ T5106] should_fail_ex+0x3b0/0x4e0 [ 69.361130][ T5106] strncpy_from_user+0x36/0x2f0 [ 69.365969][ T5106] strncpy_from_user_nofault+0x71/0x140 [ 69.371498][ T5106] bpf_probe_read_compat_str+0xe9/0x180 [ 69.377027][ T5106] ? bpf_trace_run4+0x244/0x590 [ 69.381859][ T5106] bpf_prog_f2ce78ec2d45df6f+0x3d/0x3f [ 69.387294][ T5106] bpf_trace_run4+0x334/0x590 [ 69.391955][ T5106] ? set_next_entity+0x10e/0x4c0 [ 69.396873][ T5106] ? __pfx_bpf_trace_run4+0x10/0x10 [ 69.402052][ T5106] ? task_psi_group+0x47/0x1a0 [ 69.406796][ T5106] ? psi_task_switch+0x36d/0x770 [ 69.411807][ T5106] __schedule+0x2587/0x4a20 [ 69.416299][ T5106] ? rcu_is_watching+0x15/0xb0 [ 69.421063][ T5106] ? __enqueue_entity+0x271/0x500 [ 69.426172][ T5106] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 69.432057][ T5106] ? __pfx___schedule+0x10/0x10 [ 69.436900][ T5106] ? rcu_is_watching+0x15/0xb0 [ 69.441729][ T5106] ? lock_release+0xbf/0x9f0 [ 69.446307][ T5106] ? rcu_is_watching+0x15/0xb0 [ 69.451053][ T5106] ? preempt_schedule+0xe1/0xf0 [ 69.455893][ T5106] preempt_schedule_common+0x84/0xd0 [ 69.461169][ T5106] preempt_schedule+0xe1/0xf0 [ 69.465829][ T5106] ? __pfx_preempt_schedule+0x10/0x10 [ 69.471320][ T5106] ? __pfx_lock_release+0x10/0x10 [ 69.476702][ T5106] ? try_to_wake_up+0x939/0x1470 [ 69.481632][ T5106] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.487942][ T5106] preempt_schedule_thunk+0x1a/0x30 [ 69.493998][ T5106] _raw_spin_unlock_irqrestore+0x130/0x140 [ 69.499879][ T5106] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 69.506205][ T5106] kthread_queue_work+0x110/0x180 [ 69.511226][ T5106] synchronize_rcu_expedited+0x5ad/0x830 [ 69.516842][ T5106] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 69.522982][ T5106] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 69.528247][ T5106] ? __pfx___might_resched+0x10/0x10 [ 69.533521][ T5106] ? rcu_is_watching+0x15/0xb0 [ 69.538265][ T5106] synchronize_rcu+0x11b/0x360 [ 69.543009][ T5106] ? __pfx_synchronize_rcu+0x10/0x10 [ 69.548288][ T5106] ? __nf_unregister_net_hook+0x5f0/0x800 [ 69.554010][ T5106] nf_tables_abort+0x6569/0x7a10 [ 69.558933][ T5106] ? __pfx_nf_tables_abort+0x10/0x10 [ 69.564202][ T5106] ? __kasan_kmalloc+0x98/0xb0 [ 69.568945][ T5106] ? nfnetlink_rcv+0x11b8/0x2a90 [ 69.573880][ T5106] ? nfnetlink_rcv+0x1219/0x2a90 [ 69.578844][ T5106] nfnetlink_rcv+0x20cf/0x2a90 [ 69.583623][ T5106] ? __kernel_text_address+0xd/0x40 [ 69.588827][ T5106] ? unwind_get_return_address+0x91/0xc0 [ 69.594652][ T5106] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 69.599775][ T5106] ? lock_release+0xbf/0x9f0 [ 69.604384][ T5106] ? __pfx_lock_release+0x10/0x10 [ 69.609418][ T5106] ? __pfx_lock_release+0x10/0x10 [ 69.614441][ T5106] ? net_generic+0x1f/0x240 [ 69.618945][ T5106] ? netlink_deliver_tap+0x2e/0x1b0 [ 69.624145][ T5106] netlink_unicast+0x7f0/0x990 [ 69.628923][ T5106] ? __pfx_netlink_unicast+0x10/0x10 [ 69.634193][ T5106] ? __virt_addr_valid+0x183/0x520 [ 69.639295][ T5106] ? __check_object_size+0x49c/0x900 [ 69.644737][ T5106] ? bpf_lsm_netlink_send+0x9/0x10 [ 69.649839][ T5106] netlink_sendmsg+0x8e4/0xcb0 [ 69.654760][ T5106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.660026][ T5106] ? __import_iovec+0x536/0x820 [ 69.664859][ T5106] ? aa_sock_msg_perm+0x91/0x160 [ 69.669782][ T5106] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 69.675062][ T5106] ? security_socket_sendmsg+0x87/0xb0 [ 69.680530][ T5106] ? __pfx_netlink_sendmsg+0x10/0x10 [ 69.686164][ T5106] __sock_sendmsg+0x221/0x270 [ 69.690830][ T5106] ____sys_sendmsg+0x525/0x7d0 [ 69.695702][ T5106] ? __pfx_____sys_sendmsg+0x10/0x10 [ 69.700971][ T5106] ? do_raw_spin_lock+0x14f/0x370 [ 69.705981][ T5106] __sys_sendmsg+0x2b0/0x3a0 [ 69.710555][ T5106] ? __pfx___sys_sendmsg+0x10/0x10 [ 69.716006][ T5106] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.722337][ T5106] ? _raw_spin_unlock_irq+0x2e/0x50 [ 69.727534][ T5106] ? ptrace_notify+0x279/0x380 [ 69.732362][ T5106] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 69.738680][ T5106] ? rcu_is_watching+0x15/0xb0 [ 69.743431][ T5106] do_syscall_64+0xf3/0x230 [ 69.747916][ T5106] ? clear_bhb_loop+0x35/0x90 [ 69.752667][ T5106] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 69.758551][ T5106] RIP: 0033:0x7fa3b968c9e9 [ 69.762961][ T5106] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [pid 5106] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x00\x00\x03\x0a\x01\x02\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x03\x00\x73\x79\x7a\x32\x00\x00\x00\x00\x14\x00\x04\x80\x08\x00\x02\x40\x00\x00\x00\x00\x08\x00\x01\x40"..., iov_len=196}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 196 [pid 5106] exit_group(0) = ? [pid 5106] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5106, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 [ 69.782554][ T5106] RSP: 002b:00007ffd3e026948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 69.790952][ T5106] RAX: ffffffffffffffda RBX: 00007ffd3e026960 RCX: 00007fa3b968c9e9 [ 69.798925][ T5106] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 69.806888][ T5106] RBP: 0000000000000002 R08: 00007ffd3e0266e6 R09: 00000000000000a0 [ 69.814847][ T5106] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 69.822885][ T5106] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 69.830846][ T5106] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555587ec1650) = 5107 ./strace-static-x86_64: Process 5107 attached [pid 5107] set_robust_list(0x555587ec1660, 24) = 0 [pid 5107] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5107] setpgid(0, 0) = 0 [pid 5107] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5107] write(3, "1000", 4) = 4 executing program [pid 5107] close(3) = 0 [pid 5107] write(1, "executing program\n", 18) = 18 [pid 5107] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=11, insns=0x20000180, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5107] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_STRICT_ALIGNMENT|BPF_F_TEST_RND_HI32|BPF_F_TEST_STATE_FREQ|0x20, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [pid 5107] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=3}}, 16) = 4 [pid 5107] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5107] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5107] write(6, "25", 2) = 2 [ 69.953619][ T5107] FAULT_INJECTION: forcing a failure. [ 69.953619][ T5107] name failslab, interval 1, probability 0, space 0, times 0 [ 69.966350][ T5107] CPU: 1 PID: 5107 Comm: syz-executor394 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 69.976962][ T5107] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 69.987018][ T5107] Call Trace: [ 69.990304][ T5107] [ 69.993285][ T5107] dump_stack_lvl+0x241/0x360 [ 69.997968][ T5107] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.003185][ T5107] ? __pfx__printk+0x10/0x10 [ 70.007790][ T5107] ? nft_pernet+0x1ef/0x240 [ 70.012291][ T5107] ? nf_tables_module_autoload_cleanup+0x204/0x230 [ 70.018781][ T5107] ? kfree+0x149/0x360 [ 70.022839][ T5107] should_fail_ex+0x3b0/0x4e0 [ 70.027507][ T5107] ? __alloc_skb+0x1c3/0x440 [ 70.032087][ T5107] should_failslab+0x9/0x20 [ 70.036574][ T5107] kmem_cache_alloc_node_noprof+0x71/0x320 [ 70.042456][ T5107] __alloc_skb+0x1c3/0x440 [ 70.046887][ T5107] ? __pfx___alloc_skb+0x10/0x10 [ 70.051815][ T5107] ? nf_tables_commit+0x8960/0x8a40 [ 70.057084][ T5107] ? netlink_ack_tlv_len+0x6e/0x200 [ 70.062266][ T5107] netlink_ack+0x13f/0xa30 [ 70.066700][ T5107] ? __kasan_kmalloc+0x98/0xb0 [ 70.071446][ T5107] ? nfnetlink_rcv+0x11b8/0x2a90 [ 70.076370][ T5107] ? nfnetlink_rcv+0x1219/0x2a90 [ 70.081324][ T5107] nfnetlink_rcv+0x24fd/0x2a90 [ 70.086081][ T5107] ? __kernel_text_address+0xd/0x40 [ 70.091274][ T5107] ? unwind_get_return_address+0x91/0xc0 [ 70.096911][ T5107] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 70.102016][ T5107] ? lock_release+0xbf/0x9f0 [ 70.106606][ T5107] ? __pfx_lock_release+0x10/0x10 [ 70.111619][ T5107] ? __pfx_lock_release+0x10/0x10 [ 70.116636][ T5107] ? net_generic+0x1f/0x240 [ 70.121131][ T5107] ? netlink_deliver_tap+0x2e/0x1b0 [ 70.126407][ T5107] netlink_unicast+0x7f0/0x990 [ 70.131165][ T5107] ? __pfx_netlink_unicast+0x10/0x10 [ 70.136782][ T5107] ? __virt_addr_valid+0x183/0x520 [ 70.141883][ T5107] ? __check_object_size+0x49c/0x900 [ 70.147166][ T5107] ? bpf_lsm_netlink_send+0x9/0x10 [ 70.152274][ T5107] netlink_sendmsg+0x8e4/0xcb0 [ 70.157033][ T5107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.162310][ T5107] ? __import_iovec+0x536/0x820 [ 70.167148][ T5107] ? aa_sock_msg_perm+0x91/0x160 [ 70.172083][ T5107] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 70.177360][ T5107] ? security_socket_sendmsg+0x87/0xb0 [ 70.182808][ T5107] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.188080][ T5107] __sock_sendmsg+0x221/0x270 [ 70.192754][ T5107] ____sys_sendmsg+0x525/0x7d0 [ 70.197522][ T5107] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.202801][ T5107] ? do_raw_spin_lock+0x14f/0x370 [ 70.207821][ T5107] __sys_sendmsg+0x2b0/0x3a0 [ 70.212404][ T5107] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.217568][ T5107] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.223909][ T5107] ? _raw_spin_unlock_irq+0x2e/0x50 [ 70.229113][ T5107] ? ptrace_notify+0x279/0x380 [ 70.233986][ T5107] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.240406][ T5107] ? rcu_is_watching+0x15/0xb0 [ 70.245172][ T5107] do_syscall_64+0xf3/0x230 [ 70.249667][ T5107] ? clear_bhb_loop+0x35/0x90 [ 70.254336][ T5107] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.260225][ T5107] RIP: 0033:0x7fa3b968c9e9 [ 70.264628][ T5107] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 70.284222][ T5107] RSP: 002b:00007ffd3e026948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.292625][ T5107] RAX: ffffffffffffffda RBX: 00007ffd3e026960 RCX: 00007fa3b968c9e9 [pid 5107] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x00\x00\x03\x0a\x01\x02\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x03\x00\x73\x79\x7a\x32\x00\x00\x00\x00\x14\x00\x04\x80\x08\x00\x02\x40\x00\x00\x00\x00\x08\x00\x01\x40"..., iov_len=196}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 196 [pid 5107] exit_group(0) = ? [pid 5107] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5107, si_uid=0, si_status=0, si_utime=0, si_stime=3 /* 0.03 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5108 attached , child_tidptr=0x555587ec1650) = 5108 [pid 5108] set_robust_list(0x555587ec1660, 24) = 0 [pid 5108] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [ 70.300586][ T5107] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 70.308553][ T5107] RBP: 0000000000000002 R08: 00007ffd3e0266e6 R09: 00000000000000a0 [ 70.316509][ T5107] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 70.324470][ T5107] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 70.332437][ T5107] [pid 5108] setpgid(0, 0) = 0 [pid 5108] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5108] write(3, "1000", 4) = 4 [pid 5108] close(3) = 0 executing program [pid 5108] write(1, "executing program\n", 18) = 18 [pid 5108] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=11, insns=0x20000180, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5108] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_STRICT_ALIGNMENT|BPF_F_TEST_RND_HI32|BPF_F_TEST_STATE_FREQ|0x20, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [pid 5108] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=3}}, 16) = 4 [pid 5108] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5108] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5108] write(6, "25", 2) = 2 [ 70.464388][ T5108] FAULT_INJECTION: forcing a failure. [ 70.464388][ T5108] name failslab, interval 1, probability 0, space 0, times 0 [ 70.477453][ T5108] CPU: 1 PID: 5108 Comm: syz-executor394 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 70.487994][ T5108] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 70.498094][ T5108] Call Trace: [ 70.501360][ T5108] [ 70.504281][ T5108] dump_stack_lvl+0x241/0x360 [ 70.509054][ T5108] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.514282][ T5108] ? __pfx__printk+0x10/0x10 [ 70.518879][ T5108] ? nft_pernet+0x1ef/0x240 [ 70.523389][ T5108] ? nf_tables_module_autoload_cleanup+0x204/0x230 [ 70.529906][ T5108] ? kfree+0x149/0x360 [ 70.533975][ T5108] should_fail_ex+0x3b0/0x4e0 [ 70.538646][ T5108] ? __alloc_skb+0x1c3/0x440 [ 70.543235][ T5108] should_failslab+0x9/0x20 [ 70.547735][ T5108] kmem_cache_alloc_node_noprof+0x71/0x320 [ 70.553560][ T5108] __alloc_skb+0x1c3/0x440 [ 70.558088][ T5108] ? __pfx___alloc_skb+0x10/0x10 [ 70.563018][ T5108] ? nf_tables_commit+0x8960/0x8a40 [ 70.568206][ T5108] ? netlink_ack_tlv_len+0x6e/0x200 [ 70.573494][ T5108] netlink_ack+0x13f/0xa30 [ 70.577988][ T5108] ? __kasan_kmalloc+0x98/0xb0 [ 70.582737][ T5108] ? nfnetlink_rcv+0x11b8/0x2a90 [ 70.587663][ T5108] ? nfnetlink_rcv+0x1219/0x2a90 [ 70.592673][ T5108] nfnetlink_rcv+0x24fd/0x2a90 [ 70.598643][ T5108] ? __kernel_text_address+0xd/0x40 [ 70.603831][ T5108] ? unwind_get_return_address+0x91/0xc0 [ 70.609463][ T5108] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 70.614652][ T5108] ? lock_release+0xbf/0x9f0 [ 70.619238][ T5108] ? __pfx_lock_release+0x10/0x10 [ 70.624246][ T5108] ? __pfx_lock_release+0x10/0x10 [ 70.629272][ T5108] ? net_generic+0x1f/0x240 [ 70.633761][ T5108] ? netlink_deliver_tap+0x2e/0x1b0 [ 70.638957][ T5108] netlink_unicast+0x7f0/0x990 [ 70.643729][ T5108] ? __pfx_netlink_unicast+0x10/0x10 [ 70.648999][ T5108] ? __virt_addr_valid+0x183/0x520 [ 70.654115][ T5108] ? __check_object_size+0x49c/0x900 [ 70.659384][ T5108] ? bpf_lsm_netlink_send+0x9/0x10 [ 70.664482][ T5108] netlink_sendmsg+0x8e4/0xcb0 [ 70.669240][ T5108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.674528][ T5108] ? __import_iovec+0x536/0x820 [ 70.679363][ T5108] ? aa_sock_msg_perm+0x91/0x160 [ 70.684291][ T5108] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 70.689574][ T5108] ? security_socket_sendmsg+0x87/0xb0 [ 70.695041][ T5108] ? __pfx_netlink_sendmsg+0x10/0x10 [ 70.700320][ T5108] __sock_sendmsg+0x221/0x270 [ 70.704987][ T5108] ____sys_sendmsg+0x525/0x7d0 [ 70.709749][ T5108] ? __pfx_____sys_sendmsg+0x10/0x10 [ 70.715054][ T5108] ? do_raw_spin_lock+0x14f/0x370 [ 70.720072][ T5108] __sys_sendmsg+0x2b0/0x3a0 [ 70.724653][ T5108] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.730014][ T5108] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.736421][ T5108] ? _raw_spin_unlock_irq+0x2e/0x50 [ 70.741631][ T5108] ? ptrace_notify+0x279/0x380 [ 70.746498][ T5108] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.753007][ T5108] ? rcu_is_watching+0x15/0xb0 [ 70.757764][ T5108] do_syscall_64+0xf3/0x230 [ 70.762274][ T5108] ? clear_bhb_loop+0x35/0x90 [ 70.766953][ T5108] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.772834][ T5108] RIP: 0033:0x7fa3b968c9e9 [ 70.777341][ T5108] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 70.797032][ T5108] RSP: 002b:00007ffd3e026948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.805441][ T5108] RAX: ffffffffffffffda RBX: 00007ffd3e026960 RCX: 00007fa3b968c9e9 [pid 5108] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x00\x00\x03\x0a\x01\x02\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x03\x00\x73\x79\x7a\x32\x00\x00\x00\x00\x14\x00\x04\x80\x08\x00\x02\x40\x00\x00\x00\x00\x08\x00\x01\x40"..., iov_len=196}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 196 [pid 5108] exit_group(0) = ? [pid 5108] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5108, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555587ec1650) = 5109 ./strace-static-x86_64: Process 5109 attached [pid 5109] set_robust_list(0x555587ec1660, 24) = 0 [pid 5109] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5109] setpgid(0, 0) = 0 [pid 5109] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 70.813410][ T5108] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 70.821367][ T5108] RBP: 0000000000000002 R08: 00007ffd3e0266e6 R09: 00000000000000a0 [ 70.829321][ T5108] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 70.837281][ T5108] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 70.845248][ T5108] [pid 5109] write(3, "1000", 4) = 4 [pid 5109] close(3) = 0 executing program [pid 5109] write(1, "executing program\n", 18) = 18 [pid 5109] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=11, insns=0x20000180, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5109] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_STRICT_ALIGNMENT|BPF_F_TEST_RND_HI32|BPF_F_TEST_STATE_FREQ|0x20, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [pid 5109] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=3}}, 16) = 4 [pid 5109] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5109] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5109] write(6, "25", 2) = 2 [ 70.925970][ T5109] FAULT_INJECTION: forcing a failure. [ 70.925970][ T5109] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 70.939058][ T5109] CPU: 1 PID: 5109 Comm: syz-executor394 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 70.949542][ T5109] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 70.959579][ T5109] Call Trace: [ 70.962857][ T5109] [ 70.965892][ T5109] dump_stack_lvl+0x241/0x360 [ 70.970555][ T5109] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.975754][ T5109] ? __pfx__printk+0x10/0x10 [ 70.980322][ T5109] ? rcu_is_watching+0x15/0xb0 [ 70.985067][ T5109] ? bpf_trace_run4+0x244/0x590 [ 70.989901][ T5109] ? rcu_is_watching+0x15/0xb0 [ 70.994643][ T5109] ? bpf_trace_run4+0x244/0x590 [ 70.999474][ T5109] should_fail_ex+0x3b0/0x4e0 [ 71.004149][ T5109] strncpy_from_user+0x36/0x2f0 [ 71.008988][ T5109] strncpy_from_user_nofault+0x71/0x140 [ 71.014518][ T5109] bpf_probe_read_compat_str+0xe9/0x180 [ 71.020045][ T5109] ? bpf_trace_run4+0x244/0x590 [ 71.024966][ T5109] bpf_prog_f2ce78ec2d45df6f+0x3d/0x3f [ 71.030404][ T5109] bpf_trace_run4+0x334/0x590 [ 71.035075][ T5109] ? set_next_entity+0x10e/0x4c0 [ 71.039993][ T5109] ? __pfx_bpf_trace_run4+0x10/0x10 [ 71.045176][ T5109] ? task_psi_group+0x47/0x1a0 [ 71.049923][ T5109] ? psi_task_switch+0x36d/0x770 [ 71.054864][ T5109] __schedule+0x2587/0x4a20 [ 71.059354][ T5109] ? rcu_is_watching+0x15/0xb0 [ 71.064271][ T5109] ? __enqueue_entity+0x271/0x500 [ 71.069279][ T5109] ? __pfx_min_vruntime_cb_rotate+0x10/0x10 [ 71.075157][ T5109] ? __pfx___schedule+0x10/0x10 [ 71.079988][ T5109] ? rcu_is_watching+0x15/0xb0 [ 71.084732][ T5109] ? lock_release+0xbf/0x9f0 [ 71.089309][ T5109] ? rcu_is_watching+0x15/0xb0 [ 71.094062][ T5109] ? preempt_schedule+0xe1/0xf0 [ 71.098895][ T5109] preempt_schedule_common+0x84/0xd0 [ 71.104183][ T5109] preempt_schedule+0xe1/0xf0 [ 71.108842][ T5109] ? __pfx_preempt_schedule+0x10/0x10 [ 71.114198][ T5109] ? __pfx_lock_release+0x10/0x10 [ 71.119203][ T5109] ? try_to_wake_up+0x939/0x1470 [ 71.124122][ T5109] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 71.130437][ T5109] preempt_schedule_thunk+0x1a/0x30 [ 71.135618][ T5109] _raw_spin_unlock_irqrestore+0x130/0x140 [ 71.141406][ T5109] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 71.147720][ T5109] kthread_queue_work+0x110/0x180 [ 71.152729][ T5109] synchronize_rcu_expedited+0x5ad/0x830 [ 71.158343][ T5109] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 71.164479][ T5109] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 71.169746][ T5109] ? __pfx___might_resched+0x10/0x10 [ 71.175019][ T5109] ? rcu_is_watching+0x15/0xb0 [ 71.179788][ T5109] synchronize_rcu+0x11b/0x360 [ 71.184571][ T5109] ? __pfx_synchronize_rcu+0x10/0x10 [ 71.189851][ T5109] ? __nf_unregister_net_hook+0x5f0/0x800 [ 71.195563][ T5109] nf_tables_abort+0x6569/0x7a10 [ 71.200487][ T5109] ? __pfx_nf_tables_abort+0x10/0x10 [ 71.205759][ T5109] ? __kasan_kmalloc+0x98/0xb0 [ 71.210504][ T5109] ? nfnetlink_rcv+0x11b8/0x2a90 [ 71.215437][ T5109] ? nfnetlink_rcv+0x1219/0x2a90 [ 71.220356][ T5109] nfnetlink_rcv+0x20cf/0x2a90 [ 71.225147][ T5109] ? __kernel_text_address+0xd/0x40 [ 71.230525][ T5109] ? unwind_get_return_address+0x91/0xc0 [ 71.236181][ T5109] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 71.241295][ T5109] ? lock_release+0xbf/0x9f0 [ 71.245895][ T5109] ? __pfx_lock_release+0x10/0x10 [ 71.251009][ T5109] ? __pfx_lock_release+0x10/0x10 [ 71.256029][ T5109] ? net_generic+0x1f/0x240 [ 71.260516][ T5109] ? netlink_deliver_tap+0x2e/0x1b0 [ 71.265789][ T5109] netlink_unicast+0x7f0/0x990 [ 71.270552][ T5109] ? __pfx_netlink_unicast+0x10/0x10 [ 71.275821][ T5109] ? __virt_addr_valid+0x183/0x520 [ 71.280919][ T5109] ? __check_object_size+0x49c/0x900 [ 71.286214][ T5109] ? bpf_lsm_netlink_send+0x9/0x10 [ 71.291336][ T5109] netlink_sendmsg+0x8e4/0xcb0 [ 71.296094][ T5109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.301455][ T5109] ? __import_iovec+0x536/0x820 [ 71.306308][ T5109] ? aa_sock_msg_perm+0x91/0x160 [ 71.311236][ T5109] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 71.316506][ T5109] ? security_socket_sendmsg+0x87/0xb0 [ 71.321951][ T5109] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.327327][ T5109] __sock_sendmsg+0x221/0x270 [ 71.332109][ T5109] ____sys_sendmsg+0x525/0x7d0 [ 71.337044][ T5109] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.342333][ T5109] ? do_raw_spin_lock+0x14f/0x370 [ 71.347461][ T5109] __sys_sendmsg+0x2b0/0x3a0 [ 71.352050][ T5109] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.357176][ T5109] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 71.363522][ T5109] ? _raw_spin_unlock_irq+0x2e/0x50 [ 71.368734][ T5109] ? ptrace_notify+0x279/0x380 [ 71.373590][ T5109] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 71.379906][ T5109] ? rcu_is_watching+0x15/0xb0 [ 71.384657][ T5109] do_syscall_64+0xf3/0x230 [ 71.389146][ T5109] ? clear_bhb_loop+0x35/0x90 [ 71.393809][ T5109] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.399700][ T5109] RIP: 0033:0x7fa3b968c9e9 [ 71.404097][ T5109] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [pid 5109] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x00\x00\x03\x0a\x01\x02\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x03\x00\x73\x79\x7a\x32\x00\x00\x00\x00\x14\x00\x04\x80\x08\x00\x02\x40\x00\x00\x00\x00\x08\x00\x01\x40"..., iov_len=196}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 196 [pid 5109] exit_group(0) = ? [pid 5109] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5109, si_uid=0, si_status=0, si_utime=0, si_stime=0} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555587ec1650) = 5110 ./strace-static-x86_64: Process 5110 attached [pid 5110] set_robust_list(0x555587ec1660, 24) = 0 [pid 5110] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5110] setpgid(0, 0) = 0 [pid 5110] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5110] write(3, "1000", 4) = 4 [pid 5110] close(3) = 0 executing program [pid 5110] write(1, "executing program\n", 18) = 18 [pid 5110] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=11, insns=0x20000180, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5110] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_STRICT_ALIGNMENT|BPF_F_TEST_RND_HI32|BPF_F_TEST_STATE_FREQ|0x20, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [pid 5110] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=3}}, 16) = 4 [pid 5110] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5110] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5110] write(6, "25", 2) = 2 [ 71.423686][ T5109] RSP: 002b:00007ffd3e026948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.432081][ T5109] RAX: ffffffffffffffda RBX: 00007ffd3e026960 RCX: 00007fa3b968c9e9 [ 71.440058][ T5109] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 71.448117][ T5109] RBP: 0000000000000002 R08: 00007ffd3e0266e6 R09: 00000000000000a0 [ 71.456084][ T5109] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 71.464053][ T5109] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 71.472011][ T5109] [ 71.507676][ T5110] FAULT_INJECTION: forcing a failure. [ 71.507676][ T5110] name failslab, interval 1, probability 0, space 0, times 0 [ 71.520472][ T5110] CPU: 0 PID: 5110 Comm: syz-executor394 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 71.530995][ T5110] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 71.541059][ T5110] Call Trace: [ 71.544550][ T5110] [ 71.547479][ T5110] dump_stack_lvl+0x241/0x360 [ 71.552162][ T5110] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.557385][ T5110] ? __pfx__printk+0x10/0x10 [ 71.561980][ T5110] ? nft_pernet+0x1ef/0x240 [ 71.566490][ T5110] ? nf_tables_module_autoload_cleanup+0x204/0x230 [ 71.573099][ T5110] ? kfree+0x149/0x360 [ 71.577175][ T5110] should_fail_ex+0x3b0/0x4e0 [ 71.582028][ T5110] ? __alloc_skb+0x1c3/0x440 [ 71.586634][ T5110] should_failslab+0x9/0x20 [ 71.591140][ T5110] kmem_cache_alloc_node_noprof+0x71/0x320 [ 71.596937][ T5110] __alloc_skb+0x1c3/0x440 [ 71.601348][ T5110] ? __pfx___alloc_skb+0x10/0x10 [ 71.606281][ T5110] ? nf_tables_commit+0x8960/0x8a40 [ 71.611472][ T5110] ? netlink_ack_tlv_len+0x6e/0x200 [ 71.616664][ T5110] netlink_ack+0x13f/0xa30 [ 71.621071][ T5110] ? __kasan_kmalloc+0x98/0xb0 [ 71.625918][ T5110] ? nfnetlink_rcv+0x11b8/0x2a90 [ 71.630942][ T5110] ? nfnetlink_rcv+0x1219/0x2a90 [ 71.635873][ T5110] nfnetlink_rcv+0x24fd/0x2a90 [ 71.640630][ T5110] ? __kernel_text_address+0xd/0x40 [ 71.645823][ T5110] ? unwind_get_return_address+0x91/0xc0 [ 71.651463][ T5110] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 71.656571][ T5110] ? lock_release+0xbf/0x9f0 [ 71.661344][ T5110] ? __pfx_lock_release+0x10/0x10 [ 71.666357][ T5110] ? __pfx_lock_release+0x10/0x10 [ 71.671372][ T5110] ? net_generic+0x1f/0x240 [ 71.675866][ T5110] ? netlink_deliver_tap+0x2e/0x1b0 [ 71.681053][ T5110] netlink_unicast+0x7f0/0x990 [ 71.685820][ T5110] ? __pfx_netlink_unicast+0x10/0x10 [ 71.691104][ T5110] ? __virt_addr_valid+0x183/0x520 [ 71.696296][ T5110] ? __check_object_size+0x49c/0x900 [ 71.701571][ T5110] ? bpf_lsm_netlink_send+0x9/0x10 [ 71.706678][ T5110] netlink_sendmsg+0x8e4/0xcb0 [ 71.711464][ T5110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.716759][ T5110] ? __import_iovec+0x536/0x820 [ 71.721623][ T5110] ? aa_sock_msg_perm+0x91/0x160 [ 71.726568][ T5110] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 71.731878][ T5110] ? security_socket_sendmsg+0x87/0xb0 [ 71.737505][ T5110] ? __pfx_netlink_sendmsg+0x10/0x10 [ 71.743302][ T5110] __sock_sendmsg+0x221/0x270 [ 71.747983][ T5110] ____sys_sendmsg+0x525/0x7d0 [ 71.752745][ T5110] ? __pfx_____sys_sendmsg+0x10/0x10 [ 71.758119][ T5110] ? do_raw_spin_lock+0x14f/0x370 [ 71.763240][ T5110] __sys_sendmsg+0x2b0/0x3a0 [ 71.767926][ T5110] ? __pfx___sys_sendmsg+0x10/0x10 [ 71.773041][ T5110] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 71.779417][ T5110] ? _raw_spin_unlock_irq+0x2e/0x50 [ 71.784608][ T5110] ? ptrace_notify+0x279/0x380 [ 71.789375][ T5110] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 71.795780][ T5110] ? rcu_is_watching+0x15/0xb0 [ 71.800538][ T5110] do_syscall_64+0xf3/0x230 [ 71.805035][ T5110] ? clear_bhb_loop+0x35/0x90 [ 71.809703][ T5110] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.815586][ T5110] RIP: 0033:0x7fa3b968c9e9 [ 71.819992][ T5110] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 71.839597][ T5110] RSP: 002b:00007ffd3e026948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 71.848023][ T5110] RAX: ffffffffffffffda RBX: 00007ffd3e026960 RCX: 00007fa3b968c9e9 [pid 5110] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x00\x00\x03\x0a\x01\x02\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x03\x00\x73\x79\x7a\x32\x00\x00\x00\x00\x14\x00\x04\x80\x08\x00\x02\x40\x00\x00\x00\x00\x08\x00\x01\x40"..., iov_len=196}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 196 [pid 5110] exit_group(0) = ? [pid 5110] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5110, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555587ec1650) = 5111 ./strace-static-x86_64: Process 5111 attached [pid 5111] set_robust_list(0x555587ec1660, 24) = 0 [pid 5111] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5111] setpgid(0, 0) = 0 [pid 5111] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [ 71.855986][ T5110] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 71.863946][ T5110] RBP: 0000000000000002 R08: 00007ffd3e0266e6 R09: 00000000000000a0 [ 71.872078][ T5110] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 71.880043][ T5110] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 71.888028][ T5110] [pid 5111] write(3, "1000", 4) = 4 [pid 5111] close(3) = 0 executing program [pid 5111] write(1, "executing program\n", 18) = 18 [pid 5111] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=11, insns=0x20000180, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5111] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_STRICT_ALIGNMENT|BPF_F_TEST_RND_HI32|BPF_F_TEST_STATE_FREQ|0x20, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [pid 5111] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=3}}, 16) = 4 [pid 5111] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5111] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5111] write(6, "25", 2) = 2 [ 72.020069][ T5111] FAULT_INJECTION: forcing a failure. [ 72.020069][ T5111] name failslab, interval 1, probability 0, space 0, times 0 [ 72.033115][ T5111] CPU: 1 PID: 5111 Comm: syz-executor394 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 72.043645][ T5111] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 72.053718][ T5111] Call Trace: [ 72.056989][ T5111] [ 72.059902][ T5111] dump_stack_lvl+0x241/0x360 [ 72.064563][ T5111] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.069859][ T5111] ? __pfx__printk+0x10/0x10 [ 72.074429][ T5111] ? __pfx___might_resched+0x10/0x10 [ 72.079697][ T5111] ? rcu_is_watching+0x15/0xb0 [ 72.084442][ T5111] should_fail_ex+0x3b0/0x4e0 [ 72.089105][ T5111] should_failslab+0x9/0x20 [ 72.093612][ T5111] __kmalloc_node_noprof+0xdf/0x440 [ 72.098792][ T5111] ? kvmalloc_node_noprof+0x72/0x190 [ 72.104058][ T5111] ? __pfx___might_resched+0x10/0x10 [ 72.109498][ T5111] kvmalloc_node_noprof+0x72/0x190 [ 72.114677][ T5111] __nf_hook_entries_try_shrink+0x330/0x730 [ 72.120644][ T5111] ? __static_key_slow_dec_cpuslocked+0xaa/0x170 [ 72.127126][ T5111] __nf_unregister_net_hook+0x5cf/0x800 [ 72.132662][ T5111] nf_unregister_net_hook+0x98/0xe0 [ 72.137849][ T5111] nf_tables_abort+0x5729/0x7a10 [ 72.142881][ T5111] ? __pfx_nf_tables_abort+0x10/0x10 [ 72.148149][ T5111] ? __kasan_kmalloc+0x98/0xb0 [ 72.152898][ T5111] ? nfnetlink_rcv+0x11b8/0x2a90 [ 72.157819][ T5111] ? nfnetlink_rcv+0x1219/0x2a90 [ 72.162736][ T5111] nfnetlink_rcv+0x20cf/0x2a90 [ 72.167483][ T5111] ? __kernel_text_address+0xd/0x40 [ 72.172671][ T5111] ? unwind_get_return_address+0x91/0xc0 [ 72.178291][ T5111] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 72.183474][ T5111] ? lock_release+0xbf/0x9f0 [ 72.188056][ T5111] ? __pfx_lock_release+0x10/0x10 [ 72.193061][ T5111] ? __pfx_lock_release+0x10/0x10 [ 72.198068][ T5111] ? net_generic+0x1f/0x240 [ 72.202548][ T5111] ? netlink_deliver_tap+0x2e/0x1b0 [ 72.207728][ T5111] netlink_unicast+0x7f0/0x990 [ 72.212474][ T5111] ? __pfx_netlink_unicast+0x10/0x10 [ 72.217738][ T5111] ? __virt_addr_valid+0x183/0x520 [ 72.222832][ T5111] ? __check_object_size+0x49c/0x900 [ 72.228109][ T5111] ? bpf_lsm_netlink_send+0x9/0x10 [ 72.233202][ T5111] netlink_sendmsg+0x8e4/0xcb0 [ 72.237959][ T5111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.243224][ T5111] ? __import_iovec+0x536/0x820 [ 72.248056][ T5111] ? aa_sock_msg_perm+0x91/0x160 [ 72.252986][ T5111] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 72.258248][ T5111] ? security_socket_sendmsg+0x87/0xb0 [ 72.263785][ T5111] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.269058][ T5111] __sock_sendmsg+0x221/0x270 [ 72.273716][ T5111] ____sys_sendmsg+0x525/0x7d0 [ 72.278509][ T5111] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.283791][ T5111] ? do_raw_spin_lock+0x14f/0x370 [ 72.288801][ T5111] __sys_sendmsg+0x2b0/0x3a0 [ 72.293390][ T5111] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.298489][ T5111] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.304823][ T5111] ? _raw_spin_unlock_irq+0x2e/0x50 [ 72.310018][ T5111] ? ptrace_notify+0x279/0x380 [ 72.314777][ T5111] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.321083][ T5111] ? rcu_is_watching+0x15/0xb0 [ 72.325830][ T5111] do_syscall_64+0xf3/0x230 [ 72.330318][ T5111] ? clear_bhb_loop+0x35/0x90 [ 72.334987][ T5111] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.340863][ T5111] RIP: 0033:0x7fa3b968c9e9 [ 72.345284][ T5111] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [pid 5111] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x00\x00\x03\x0a\x01\x02\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x03\x00\x73\x79\x7a\x32\x00\x00\x00\x00\x14\x00\x04\x80\x08\x00\x02\x40\x00\x00\x00\x00\x08\x00\x01\x40"..., iov_len=196}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 196 [pid 5111] exit_group(0) = ? [pid 5111] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5111, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- [ 72.365939][ T5111] RSP: 002b:00007ffd3e026948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.374512][ T5111] RAX: ffffffffffffffda RBX: 00007ffd3e026960 RCX: 00007fa3b968c9e9 [ 72.382465][ T5111] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 72.390421][ T5111] RBP: 0000000000000002 R08: 00007ffd3e0266e6 R09: 00000000000000a0 [ 72.398471][ T5111] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 72.406443][ T5111] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 72.414419][ T5111] restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 5112 attached , child_tidptr=0x555587ec1650) = 5112 [pid 5112] set_robust_list(0x555587ec1660, 24) = 0 [pid 5112] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5112] setpgid(0, 0) = 0 [pid 5112] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5112] write(3, "1000", 4) = 4 [pid 5112] close(3) = 0 executing program [pid 5112] write(1, "executing program\n", 18) = 18 [pid 5112] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=11, insns=0x20000180, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5112] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_STRICT_ALIGNMENT|BPF_F_TEST_RND_HI32|BPF_F_TEST_STATE_FREQ|0x20, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [pid 5112] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=3}}, 16) = 4 [pid 5112] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5112] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5112] write(6, "25", 2) = 2 [ 72.544662][ T5112] FAULT_INJECTION: forcing a failure. [ 72.544662][ T5112] name failslab, interval 1, probability 0, space 0, times 0 [ 72.557470][ T5112] CPU: 1 PID: 5112 Comm: syz-executor394 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 72.568165][ T5112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 72.578403][ T5112] Call Trace: [ 72.581680][ T5112] [ 72.584598][ T5112] dump_stack_lvl+0x241/0x360 [ 72.589263][ T5112] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.594445][ T5112] ? __pfx__printk+0x10/0x10 [ 72.599021][ T5112] ? __pfx___might_resched+0x10/0x10 [ 72.604292][ T5112] ? rcu_is_watching+0x15/0xb0 [ 72.609156][ T5112] should_fail_ex+0x3b0/0x4e0 [ 72.613948][ T5112] should_failslab+0x9/0x20 [ 72.618457][ T5112] __kmalloc_node_noprof+0xdf/0x440 [ 72.623720][ T5112] ? kvmalloc_node_noprof+0x72/0x190 [ 72.628997][ T5112] ? __pfx___might_resched+0x10/0x10 [ 72.634291][ T5112] kvmalloc_node_noprof+0x72/0x190 [ 72.639910][ T5112] __nf_hook_entries_try_shrink+0x330/0x730 [ 72.645795][ T5112] ? __static_key_slow_dec_cpuslocked+0xaa/0x170 [ 72.652111][ T5112] __nf_unregister_net_hook+0x5cf/0x800 [ 72.658303][ T5112] nf_tables_abort+0x5729/0x7a10 [ 72.663238][ T5112] ? __pfx_nf_tables_abort+0x10/0x10 [ 72.668583][ T5112] ? __kasan_kmalloc+0x98/0xb0 [ 72.673417][ T5112] ? nfnetlink_rcv+0x11b8/0x2a90 [ 72.678337][ T5112] ? nfnetlink_rcv+0x1219/0x2a90 [ 72.683264][ T5112] nfnetlink_rcv+0x20cf/0x2a90 [ 72.688051][ T5112] ? __kernel_text_address+0xd/0x40 [ 72.693260][ T5112] ? unwind_get_return_address+0x91/0xc0 [ 72.698979][ T5112] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 72.704090][ T5112] ? lock_release+0xbf/0x9f0 [ 72.708793][ T5112] ? __pfx_lock_release+0x10/0x10 [ 72.713835][ T5112] ? __pfx_lock_release+0x10/0x10 [ 72.718851][ T5112] ? net_generic+0x1f/0x240 [ 72.723375][ T5112] ? netlink_deliver_tap+0x2e/0x1b0 [ 72.728937][ T5112] netlink_unicast+0x7f0/0x990 [ 72.733734][ T5112] ? __pfx_netlink_unicast+0x10/0x10 [ 72.739017][ T5112] ? __virt_addr_valid+0x183/0x520 [ 72.744126][ T5112] ? __check_object_size+0x49c/0x900 [ 72.749392][ T5112] ? bpf_lsm_netlink_send+0x9/0x10 [ 72.754490][ T5112] netlink_sendmsg+0x8e4/0xcb0 [ 72.759334][ T5112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.764615][ T5112] ? __import_iovec+0x536/0x820 [ 72.769452][ T5112] ? aa_sock_msg_perm+0x91/0x160 [ 72.774490][ T5112] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 72.779857][ T5112] ? security_socket_sendmsg+0x87/0xb0 [ 72.785362][ T5112] ? __pfx_netlink_sendmsg+0x10/0x10 [ 72.790644][ T5112] __sock_sendmsg+0x221/0x270 [ 72.795323][ T5112] ____sys_sendmsg+0x525/0x7d0 [ 72.800099][ T5112] ? __pfx_____sys_sendmsg+0x10/0x10 [ 72.805385][ T5112] ? do_raw_spin_lock+0x14f/0x370 [ 72.810505][ T5112] __sys_sendmsg+0x2b0/0x3a0 [ 72.815097][ T5112] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.820224][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.826550][ T5112] ? _raw_spin_unlock_irq+0x2e/0x50 [ 72.831748][ T5112] ? ptrace_notify+0x279/0x380 [ 72.836500][ T5112] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.842822][ T5112] ? rcu_is_watching+0x15/0xb0 [ 72.847591][ T5112] do_syscall_64+0xf3/0x230 [ 72.852082][ T5112] ? clear_bhb_loop+0x35/0x90 [ 72.856835][ T5112] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.862714][ T5112] RIP: 0033:0x7fa3b968c9e9 [ 72.867142][ T5112] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 72.886741][ T5112] RSP: 002b:00007ffd3e026948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [pid 5112] sendmsg(5, {msg_name=NULL, msg_namelen=0, msg_iov=[{iov_base="\x14\x00\x00\x00\x10\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x0a\x20\x00\x00\x00\x00\x0a\x01\x03\x00\x00\x00\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x01\x00\x73\x79\x7a\x30\x00\x00\x00\x00\x40\x00\x00\x00\x03\x0a\x01\x02\x00\x00\x01\x00\x00\x00\x00\x00\x01\x00\x00\x00\x09\x00\x03\x00\x73\x79\x7a\x32\x00\x00\x00\x00\x14\x00\x04\x80\x08\x00\x02\x40\x00\x00\x00\x00\x08\x00\x01\x40"..., iov_len=196}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 196 [pid 5112] exit_group(0) = ? [pid 5112] +++ exited with 0 +++ --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=5112, si_uid=0, si_status=0, si_utime=0, si_stime=1 /* 0.01 s */} --- restart_syscall(<... resuming interrupted clone ...>) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555587ec1650) = 5113 ./strace-static-x86_64: Process 5113 attached [ 72.895140][ T5112] RAX: ffffffffffffffda RBX: 00007ffd3e026960 RCX: 00007fa3b968c9e9 [ 72.903106][ T5112] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000005 [ 72.911169][ T5112] RBP: 0000000000000002 R08: 00007ffd3e0266e6 R09: 00000000000000a0 [ 72.919136][ T5112] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 72.927093][ T5112] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000001 [ 72.935068][ T5112] [pid 5113] set_robust_list(0x555587ec1660, 24) = 0 [pid 5113] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 5113] setpgid(0, 0) = 0 [pid 5113] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 5113] write(3, "1000", 4) = 4 [pid 5113] close(3) = 0 executing program [pid 5113] write(1, "executing program\n", 18) = 18 [pid 5113] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_UNSPEC, insn_cnt=11, insns=0x20000180, license=NULL, log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=0, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=0, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = -1 EFAULT (Bad address) [pid 5113] bpf(BPF_PROG_LOAD, {prog_type=BPF_PROG_TYPE_RAW_TRACEPOINT_WRITABLE, insn_cnt=11, insns=0x20000180, license="GPL", log_level=0, log_size=0, log_buf=NULL, kern_version=KERNEL_VERSION(0, 0, 0), prog_flags=BPF_F_STRICT_ALIGNMENT|BPF_F_TEST_RND_HI32|BPF_F_TEST_STATE_FREQ|0x20, prog_name="", prog_ifindex=0, expected_attach_type=BPF_CGROUP_INET_INGRESS, prog_btf_fd=-1, func_info_rec_size=0, func_info=NULL, func_info_cnt=0, line_info_rec_size=0, line_info=NULL, line_info_cnt=0, attach_btf_id=0, attach_prog_fd=0, fd_array=NULL}, 144) = 3 [pid 5113] bpf(BPF_RAW_TRACEPOINT_OPEN, {raw_tracepoint={name="sched_switch", prog_fd=3}}, 16) = 4 [pid 5113] socket(AF_NETLINK, SOCK_RAW, NETLINK_NETFILTER) = 5 [pid 5113] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 6 [pid 5113] write(6, "25", 2) = 2 [ 73.066966][ T5113] FAULT_INJECTION: forcing a failure. [ 73.066966][ T5113] name failslab, interval 1, probability 0, space 0, times 0 [ 73.079887][ T5113] CPU: 1 PID: 5113 Comm: syz-executor394 Not tainted 6.10.0-rc6-syzkaller-01403-g40ab9e0dc865 #0 [ 73.090473][ T5113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 73.100520][ T5113] Call Trace: [ 73.103823][ T5113] [ 73.106751][ T5113] dump_stack_lvl+0x241/0x360 [ 73.111421][ T5113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 73.116707][ T5113] ? __pfx__printk+0x10/0x10 [ 73.121296][ T5113] ? nft_pernet+0x1ef/0x240 [ 73.125810][ T5113] ? nf_tables_module_autoload_cleanup+0x204/0x230 [ 73.132318][ T5113] ? kfree+0x149/0x360 [ 73.136388][ T5113] should_fail_ex+0x3b0/0x4e0 [ 73.141055][ T5113] ? __alloc_skb+0x1c3/0x440 [ 73.145718][ T5113] should_failslab+0x9/0x20 [ 73.150206][ T5113] kmem_cache_alloc_node_noprof+0x71/0x320 [ 73.156010][ T5113] __alloc_skb+0x1c3/0x440 [ 73.160414][ T5113] ? __pfx___alloc_skb+0x10/0x10 [ 73.165432][ T5113] ? nf_tables_commit+0x8960/0x8a40 [ 73.170615][ T5113] ? netlink_ack_tlv_len+0x6e/0x200 [ 73.175807][ T5113] netlink_ack+0x13f/0xa30 [ 73.180222][ T5113] ? __kasan_kmalloc+0x98/0xb0 [ 73.184985][ T5113] ? nfnetlink_rcv+0x11b8/0x2a90 [ 73.189912][ T5113] ? nfnetlink_rcv+0x1219/0x2a90 [ 73.194838][ T5113] nfnetlink_rcv+0x24fd/0x2a90 [ 73.199671][ T5113] ? __kernel_text_address+0xd/0x40 [ 73.204894][ T5113] ? unwind_get_return_address+0x91/0xc0 [ 73.210537][ T5113] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 73.215752][ T5113] ? lock_release+0xbf/0x9f0 [ 73.220540][ T5113] ? __pfx_lock_release+0x10/0x10 [ 73.225579][ T5113] ? __pfx_lock_release+0x10/0x10 [ 73.230679][ T5113] ? net_generic+0x1f/0x240 [ 73.235173][ T5113] ? netlink_deliver_tap+0x2e/0x1b0 [ 73.240361][ T5113] netlink_unicast+0x7f0/0x990 [ 73.245117][ T5113] ? __pfx_netlink_unicast+0x10/0x10 [ 73.250395][ T5113] ? __virt_addr_valid+0x183/0x520 [ 73.255515][ T5113] ? __check_object_size+0x49c/0x900 [ 73.260958][ T5113] ? bpf_lsm_netlink_send+0x9/0x10 [ 73.266073][ T5113] netlink_sendmsg+0x8e4/0xcb0 [ 73.270856][ T5113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.276129][ T5113] ? __import_iovec+0x536/0x820 [ 73.280967][ T5113] ? aa_sock_msg_perm+0x91/0x160 [ 73.285906][ T5113] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 73.291182][ T5113] ? security_socket_sendmsg+0x87/0xb0 [ 73.296630][ T5113] ? __pfx_netlink_sendmsg+0x10/0x10 [ 73.301907][ T5113] __sock_sendmsg+0x221/0x270 [ 73.306572][ T5113] ____sys_sendmsg+0x525/0x7d0 [ 73.311327][ T5113] ? __pfx_____sys_sendmsg+0x10/0x10 [ 73.316599][ T5113] ? do_raw_spin_lock+0x14f/0x370 [ 73.321645][ T5113] __sys_sendmsg+0x2b0/0x3a0 [ 73.326270][ T5113] ? __pfx___sys_sendmsg+0x10/0x10 [ 73.331389][ T5113] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.337714][ T5113] ? _raw_spin_unlock_irq+0x2e/0x50 [ 73.342902][ T5113] ? ptrace_notify+0x279/0x380 [ 73.347659][ T5113] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 73.353976][ T5113] ? rcu_is_watching+0x15/0xb0 [ 73.358746][ T5113] do_syscall_64+0xf3/0x230 [ 73.363237][ T5113] ? clear_bhb_loop+0x35/0x90 [ 73.367907][ T5113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 73.373788][ T5113] RIP: 0033:0x7fa3b968c9e9 [ 73.378208][ T5113] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 73.397807][ T5113] RSP: 002b:00007ffd3e026948 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 73.406225][ T5113] RAX: ffffffffffffffda RBX: 00007ffd3e026960 RCX: 00007fa3b968c9e9