last executing test programs: 1.592172937s ago: executing program 3 (id=845): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x189240, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'\x00', 0x2}) ioctl$TUNSETTXFILTER(r0, 0x400454d1, &(0x7f0000000040)=ANY=[]) 1.431889187s ago: executing program 3 (id=850): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 1.287063238s ago: executing program 3 (id=854): unshare(0x60400) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000003c0)=0x40, 0x4) 1.202979737s ago: executing program 1 (id=857): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x7, @loopback}, 0x1c) recvmmsg(r0, &(0x7f0000008a00)=[{{0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000880)=""/182, 0xb6}], 0x1}, 0xc45a}], 0x1, 0x10100, 0x0) sendmmsg$inet6(r0, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000140)="343efb", 0x3}], 0x1}}], 0x1, 0x10) shutdown(r0, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x5, 0x3, &(0x7f0000000500)=ANY=[], &(0x7f0000000c00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.163469976s ago: executing program 3 (id=859): r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0xcf, &(0x7f0000000000), &(0x7f0000000280)=0x4) 1.056879614s ago: executing program 2 (id=861): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000fedbdf251700000008000300", @ANYRES32=r2, @ANYBLOB="480030801400040040ac20279d96e04f53f2b6d713459a7a2800018008000100030000001c0403800800020002000000060001000003000006000300a2aa0000050002"], 0x64}}, 0x0) 955.796434ms ago: executing program 1 (id=864): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x60, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x0, 0x3, 0x9}, {0x7, 0x10, 0x7fff}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x9}}]}]}}]}, 0x60}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 928.912124ms ago: executing program 4 (id=865): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_DATA={0x4}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}]}, 0x4c}}, 0x0) 911.633444ms ago: executing program 2 (id=866): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x401, 0x1, 0x0, {0x0, 0x0, 0x0, r2, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0xffffffff}]}}}]}, 0x3c}}, 0x0) 843.9916ms ago: executing program 0 (id=867): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0xd}}}, 0x24}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 814.503207ms ago: executing program 4 (id=868): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x428a4}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'syz_tun\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x8000) 749.648253ms ago: executing program 0 (id=869): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040), 0x6) ioctl$sock_bt_hci(r0, 0x400448e6, &(0x7f0000000500)) 707.995453ms ago: executing program 1 (id=870): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001800)=@ipv4_newroute={0x24, 0x18, 0x1, 0x70bd2d, 0x0, {0x2, 0x20, 0x20, 0x0, 0xff, 0x3, 0xc8, 0x8}, [@RTA_NH_ID={0x8, 0x1e, 0xc}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008800}, 0x24040880) 707.853863ms ago: executing program 2 (id=871): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r0, &(0x7f0000000280)=[{&(0x7f0000000040)=""/21, 0x15}, {0x0}], 0x2) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000000)={'syzkaller1\x00', @link_local}) 592.127118ms ago: executing program 4 (id=872): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket(0x23, 0x80805, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000003200)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth1\x00', 0x0}) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000500)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x7e, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x60000000) listen(r2, 0x0) write$tun(r0, &(0x7f0000000600)=ANY=[@ANYBLOB="1c0000f500000200fffffffffffffffb000067"], 0x1eb) 552.159783ms ago: executing program 0 (id=873): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="40000000190001090000000000000000021800000000fd010000000008001f"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 480.045169ms ago: executing program 1 (id=874): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x24, 0x3e, 0xe01, 0x0, 0x25dfdbfd, {0x3, 0x7c}, [@nested={0x4, 0xfc}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}]}]}, 0x24}, 0x1, 0x0, 0x0, 0xc080}, 0xc010) 479.869768ms ago: executing program 0 (id=875): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}, @NFT_MSG_DELFLOWTABLE={0x30, 0x16, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 437.728612ms ago: executing program 2 (id=876): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000300)=0x3) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0xe9503, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4"], 0x80}}, 0x4814) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$PPPIOCATTACH(r1, 0x4004743d, &(0x7f0000000040)=0x4) 425.064421ms ago: executing program 0 (id=877): socket$inet_sctp(0x2, 0x1, 0x84) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r0, @ANYBLOB="08000100", @ANYRES32=r1], 0x90}}, 0x0) 324.011964ms ago: executing program 4 (id=878): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, 0x0) 317.211191ms ago: executing program 1 (id=879): syz_extract_tcp_res(&(0x7f0000000240), 0x4, 0xffffffff) write$tun(0xffffffffffffffff, &(0x7f00000003c0)=ANY=[], 0x36) syz_emit_ethernet(0x52, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c0000000206050000000000000000000700000014000780080008400000009808000640000000000500010006000000050005000200000005000400000000000900020073797a310000000010000300686173683a69702c6d6163"], 0x5c}}, 0x20000000) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1, 0x810, r0, 0x902a9000) syz_extract_tcp_res(&(0x7f0000000040), 0x10, 0xb) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000200)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000140)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r3, &(0x7f0000007fc0), 0x800001d, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r2, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) socket$nl_route(0x10, 0x3, 0x0) 277.903627ms ago: executing program 4 (id=880): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1ac}}, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000100)={0x1d, r2, 0x1, {}, 0xff}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x1d, 0x0, 0xfe, {0x33455f3bf40dd4e0, 0x0, 0xffffffffffffffff}, 0xff}, 0x18, &(0x7f0000000080)={0x0}, 0x4, 0x0, 0x0, 0x4c014}, 0x40000c1) 202.17759ms ago: executing program 2 (id=881): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001980)=@newlink={0x44, 0x10, 0xffffff1f, 0x70bd29, 0x80, {0x0, 0x0, 0x0, 0x0, 0x0, 0x3f00}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}]}, 0x44}}, 0x0) 201.620278ms ago: executing program 3 (id=882): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000640)={0x2c, r0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_IE={0x4}]}, 0x2c}}, 0x0) 116.144693ms ago: executing program 0 (id=883): unshare(0x22020600) r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000040)=0x2, 0x4) setsockopt$inet_udp_int(r0, 0x11, 0x68, &(0x7f0000000080)=0x1, 0x4) 112.75894ms ago: executing program 1 (id=884): socket$packet(0x11, 0x2, 0x300) r0 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r0, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000280)=@caif=@dgm={0x25, 0x9, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000580)="62042700590200000000002f1eafbcf706e12b30087f5c582d26116642c47a5f8786ee601e65ab3c06d4b8bf4a81cb3e247345af215542f41ddf82f618438a34f90186cee8441e2305e495d04ad68ab8fef69df82de6456fbb48b63f60c9c9097be968ea872c4801e5d0711b4373c7224ed7a9cbd49d40f82bdb6afc0036824be26fc96e49a70e90797e6caa1b38ddacb3cb2b3eac7c068a185b644582f25edfa3d6a46e2a894ca809a422a6a29bd7145bb6e7992570484d6a710292ea0c3f97b7cbff701684b13c5593262534a7af9eab48f2ca", 0xd4}, {&(0x7f0000000c00)="294f28dfe56d2c8ba23606bc7ecd1f634665cb5bed07bac5684da6eb21da1d6926910c5a0c653b0106869a804dd2a44ce42557b2e32e2bd367e9d01a5e7380cc4fc8e7c9044cc4115b978ca7427d749beaefdf2e48b369cb169ad7b1ced26bb161297c7e56a3e83e91b379c179017f8b4657d1b22eca6bca33036d33e1a684059c53cea91ca6637ac780ab2bcfc22a666cd4e5876f11e9aee4724b7cb59731c97e70ebd7f7483994eb07de2f3c6a9448c3206cff6d290b433f331c2399e99ee3bdecf5689eddc3e549966c1106a933bbc47b65ca6e9d7efbee6e3b1dbe87313111e85336d6890002db17751b6044f964dc90ea466f90856112be7f0a54b39a3f66cc4c39544300093158af39cdde429f50d8c7", 0x113}, {&(0x7f0000000680)="0a985d7879f1bbff16c7d66e33657e452299fd0ef8c2afda588eb05891b7da030e01452a7986bea19b59c98dc2996c0ea09604d00ea48336d0c813d83025aca8623a5915ddddce2c11c5e374f2e0f387d2398fe0b899ff60dc7a73addcf253cf32aafbe2b9f90799e7fc583bdd9b564697ba988080270bdcea4714219a2d4c4b985418cc8fbcd2935f4e8b229fffb0d86fb286e3553a8b3ac02badc66ada5fceabe5303c79da96e641a45901128063d6e1e31b11bcfbc3e70bd3c8c6c0be5118c3f21f91d2", 0xc5}], 0x3}, 0x4008001) 97.740169ms ago: executing program 4 (id=885): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000440)=""/165, 0xa5}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/192, 0x25}], 0x3}, 0x7}], 0x1, 0x40008062, 0x0) 45.647497ms ago: executing program 2 (id=886): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f0000000380)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) syz_init_net_socket$rose(0xb, 0x5, 0x0) 0s ago: executing program 3 (id=887): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000400)=[{{0x0, 0xf5ffffff, 0x0, 0x0, 0x0, 0x4000000}, 0xf5ff}], 0xf00, 0x0, 0x0) shutdown(r0, 0x0) kernel console output (not intermixed with test programs): MPT(full) [ 122.489929][ T6671] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 122.489941][ T6671] Call Trace: [ 122.489949][ T6671] [ 122.489958][ T6671] dump_stack_lvl+0x241/0x360 [ 122.489997][ T6671] ? __pfx_dump_stack_lvl+0x10/0x10 [ 122.490027][ T6671] ? __pfx__printk+0x10/0x10 [ 122.490069][ T6671] should_fail_ex+0x424/0x570 [ 122.490095][ T6671] _copy_from_iter+0x211/0x1c70 [ 122.490129][ T6671] ? alloc_pages_mpol+0x4e6/0x690 [ 122.490163][ T6671] ? __pfx__copy_from_iter+0x10/0x10 [ 122.490196][ T6671] ? set_page_refcounted+0xa1/0x1e0 [ 122.490225][ T6671] ? alloc_pages_noprof+0x136/0x190 [ 122.490250][ T6671] ? page_copy_sane+0x46/0x260 [ 122.490279][ T6671] copy_page_from_iter+0x7a/0x100 [ 122.490315][ T6671] tun_get_user+0x1f6c/0x47c0 [ 122.490351][ T6671] ? tun_get_user+0x852/0x47c0 [ 122.490399][ T6671] ? aa_file_perm+0x139/0xf60 [ 122.490429][ T6671] ? aa_file_perm+0x3f1/0xf60 [ 122.490458][ T6671] ? __pfx_tun_get_user+0x10/0x10 [ 122.490508][ T6671] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 122.490549][ T6671] ? tun_get+0x1e/0x2f0 [ 122.490580][ T6671] ? tun_get+0x1e/0x2f0 [ 122.490609][ T6671] ? tun_get+0x27d/0x2f0 [ 122.490640][ T6671] tun_chr_write_iter+0x10d/0x1f0 [ 122.490674][ T6671] vfs_write+0x70f/0xd10 [ 122.490705][ T6671] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 122.490736][ T6671] ? __pfx_vfs_write+0x10/0x10 [ 122.490765][ T6671] ? __fget_files+0x2a/0x420 [ 122.490787][ T6671] ? __fget_files+0x2a/0x420 [ 122.490814][ T6671] ksys_write+0x19d/0x2d0 [ 122.490839][ T6671] ? __pfx_ksys_write+0x10/0x10 [ 122.490864][ T6671] ? do_syscall_64+0xb6/0x230 [ 122.490892][ T6671] do_syscall_64+0xf3/0x230 [ 122.490917][ T6671] ? clear_bhb_loop+0x45/0xa0 [ 122.490939][ T6671] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 122.490959][ T6671] RIP: 0033:0x7f3849b8bc1f [ 122.490976][ T6671] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 122.490993][ T6671] RSP: 002b:00007f384a92b000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 122.491015][ T6671] RAX: ffffffffffffffda RBX: 00007f3849da5fa0 RCX: 00007f3849b8bc1f [ 122.491029][ T6671] RDX: 000000000000004e RSI: 0000200000000640 RDI: 00000000000000c8 [ 122.491043][ T6671] RBP: 00007f384a92b090 R08: 0000000000000000 R09: 0000000000000000 [ 122.491055][ T6671] R10: 000000000000004e R11: 0000000000000293 R12: 0000000000000001 [ 122.491067][ T6671] R13: 0000000000000000 R14: 00007f3849da5fa0 R15: 00007fffc5c2fe08 [ 122.491098][ T6671] [ 122.822909][ T6680] siw: device registration error -23 [ 122.983538][ T6690] Bluetooth: MGMT ver 1.23 [ 123.073852][ T6690] ipip0: entered promiscuous mode [ 123.345945][ T6705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.281'. [ 123.367664][ T6705] netlink: 32 bytes leftover after parsing attributes in process `syz.3.281'. [ 123.387028][ T6705] gretap1: entered promiscuous mode [ 123.961904][ T6723] lo speed is unknown, defaulting to 1000 [ 123.985000][ T6725] @ÿ: renamed from veth0_vlan (while UP) [ 124.012171][ T6723] lo speed is unknown, defaulting to 1000 [ 124.048659][ T6723] lo speed is unknown, defaulting to 1000 [ 124.077686][ T6723] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 124.159646][ T6723] lo speed is unknown, defaulting to 1000 [ 124.206753][ T6723] lo speed is unknown, defaulting to 1000 [ 124.228985][ T6723] lo speed is unknown, defaulting to 1000 [ 124.271311][ T6723] lo speed is unknown, defaulting to 1000 [ 124.317615][ T6723] lo speed is unknown, defaulting to 1000 [ 124.391135][ T6732] net veth1_virt_wifi ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 124.443798][ T6736] netlink: 32 bytes leftover after parsing attributes in process `syz.1.293'. [ 124.925457][ T6756] FAULT_INJECTION: forcing a failure. [ 124.925457][ T6756] name failslab, interval 1, probability 0, space 0, times 0 [ 124.987235][ T6756] CPU: 1 UID: 0 PID: 6756 Comm: syz.0.300 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 124.987265][ T6756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 124.987277][ T6756] Call Trace: [ 124.987284][ T6756] [ 124.987292][ T6756] dump_stack_lvl+0x241/0x360 [ 124.987328][ T6756] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.987356][ T6756] ? __pfx__printk+0x10/0x10 [ 124.987386][ T6756] ? __pfx___might_resched+0x10/0x10 [ 124.987416][ T6756] should_fail_ex+0x424/0x570 [ 124.987441][ T6756] should_failslab+0xac/0x100 [ 124.987470][ T6756] __kmalloc_noprof+0xdf/0x4d0 [ 124.987495][ T6756] ? sock_kmalloc+0xd7/0x160 [ 124.987539][ T6756] sock_kmalloc+0xd7/0x160 [ 124.987565][ T6756] ____sys_sendmsg+0x23b/0x860 [ 124.987596][ T6756] ? __pfx_____sys_sendmsg+0x10/0x10 [ 124.987616][ T6756] ? __fget_files+0x2a/0x420 [ 124.987639][ T6756] ? __fget_files+0x2a/0x420 [ 124.987667][ T6756] __sys_sendmsg+0x271/0x360 [ 124.987694][ T6756] ? __pfx___sys_sendmsg+0x10/0x10 [ 124.987771][ T6756] ? do_syscall_64+0xb6/0x230 [ 124.987801][ T6756] do_syscall_64+0xf3/0x230 [ 124.987827][ T6756] ? clear_bhb_loop+0x45/0xa0 [ 124.987851][ T6756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.987871][ T6756] RIP: 0033:0x7fbbfdd8d169 [ 124.987888][ T6756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.987905][ T6756] RSP: 002b:00007fbbfbbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.987927][ T6756] RAX: ffffffffffffffda RBX: 00007fbbfdfa5fa0 RCX: 00007fbbfdd8d169 [ 124.987941][ T6756] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000004 [ 124.987954][ T6756] RBP: 00007fbbfbbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 124.987967][ T6756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 124.987978][ T6756] R13: 0000000000000000 R14: 00007fbbfdfa5fa0 R15: 00007fff29152af8 [ 124.988010][ T6756] [ 125.496474][ T6765] netlink: 4 bytes leftover after parsing attributes in process `syz.1.303'. [ 125.818977][ T6780] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 125.904590][ T6780] netlink: 4 bytes leftover after parsing attributes in process `syz.4.306'. [ 125.913661][ T6780] netlink: 'syz.4.306': attribute type 14 has an invalid length. [ 125.933809][ T6780] netlink: 'syz.4.306': attribute type 12 has an invalid length. [ 125.974297][ T6787] netlink: 8 bytes leftover after parsing attributes in process `syz.4.306'. [ 126.025602][ T6789] netlink: ct family unspecified [ 126.039753][ T6789] openvswitch: netlink: Actions may not be safe on all matching packets [ 126.185809][ T6795] openvswitch: netlink: Actions may not be safe on all matching packets [ 126.432909][ T6802] FAULT_INJECTION: forcing a failure. [ 126.432909][ T6802] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.510344][ T6802] CPU: 0 UID: 0 PID: 6802 Comm: syz.2.312 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 126.510374][ T6802] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 126.510386][ T6802] Call Trace: [ 126.510394][ T6802] [ 126.510402][ T6802] dump_stack_lvl+0x241/0x360 [ 126.510437][ T6802] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.510465][ T6802] ? __pfx__printk+0x10/0x10 [ 126.510504][ T6802] should_fail_ex+0x424/0x570 [ 126.510529][ T6802] _copy_from_user+0x2d/0xb0 [ 126.510558][ T6802] copy_msghdr_from_user+0xb3/0x580 [ 126.510590][ T6802] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 126.510613][ T6802] ? __fget_files+0x2a/0x420 [ 126.510634][ T6802] ? __fget_files+0x2a/0x420 [ 126.510660][ T6802] __sys_sendmsg+0x20a/0x360 [ 126.510686][ T6802] ? __pfx___sys_sendmsg+0x10/0x10 [ 126.510759][ T6802] ? do_syscall_64+0xb6/0x230 [ 126.510789][ T6802] do_syscall_64+0xf3/0x230 [ 126.510814][ T6802] ? clear_bhb_loop+0x45/0xa0 [ 126.510838][ T6802] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.510857][ T6802] RIP: 0033:0x7f002278d169 [ 126.510875][ T6802] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 126.510891][ T6802] RSP: 002b:00007f0023585038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 126.510913][ T6802] RAX: ffffffffffffffda RBX: 00007f00229a5fa0 RCX: 00007f002278d169 [ 126.510928][ T6802] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 126.510940][ T6802] RBP: 00007f0023585090 R08: 0000000000000000 R09: 0000000000000000 [ 126.510953][ T6802] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.510965][ T6802] R13: 0000000000000000 R14: 00007f00229a5fa0 R15: 00007ffd37a47728 [ 126.510996][ T6802] [ 126.793639][ T6806] openvswitch: netlink: IP tunnel TTL not specified. [ 126.913000][ T6811] netlink: 'syz.1.317': attribute type 11 has an invalid length. [ 126.923931][ T6811] netlink: 'syz.1.317': attribute type 11 has an invalid length. [ 126.933373][ T6811] netlink: 224 bytes leftover after parsing attributes in process `syz.1.317'. [ 127.198085][ T6812] netlink: 16 bytes leftover after parsing attributes in process `syz.3.316'. [ 127.363313][ T6821] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 127.377326][ T6813] lo speed is unknown, defaulting to 1000 [ 127.625970][ T6825] bond0: (slave ip6gretap1): Enslaving as an active interface with an up link [ 127.792015][ T6835] netlink: 4 bytes leftover after parsing attributes in process `syz.2.324'. [ 127.920123][ T6839] netlink: 788 bytes leftover after parsing attributes in process `syz.1.325'. [ 127.995237][ T6844] FAULT_INJECTION: forcing a failure. [ 127.995237][ T6844] name failslab, interval 1, probability 0, space 0, times 0 [ 128.027330][ T6844] CPU: 1 UID: 0 PID: 6844 Comm: syz.3.326 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 128.027363][ T6844] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 128.027375][ T6844] Call Trace: [ 128.027384][ T6844] [ 128.027393][ T6844] dump_stack_lvl+0x241/0x360 [ 128.027433][ T6844] ? __pfx_dump_stack_lvl+0x10/0x10 [ 128.027463][ T6844] ? __pfx__printk+0x10/0x10 [ 128.027498][ T6844] ? __pfx___might_resched+0x10/0x10 [ 128.027530][ T6844] should_fail_ex+0x424/0x570 [ 128.027558][ T6844] should_failslab+0xac/0x100 [ 128.027588][ T6844] kmem_cache_alloc_lru_noprof+0x7d/0x390 [ 128.027617][ T6844] ? __d_alloc+0x31/0x740 [ 128.027645][ T6844] __d_alloc+0x31/0x740 [ 128.027667][ T6844] ? do_raw_spin_lock+0x151/0x370 [ 128.027702][ T6844] d_alloc_pseudo+0x1f/0xb0 [ 128.027737][ T6844] alloc_file_pseudo+0x143/0x320 [ 128.027764][ T6844] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 128.027784][ T6844] ? _raw_spin_unlock+0x28/0x50 [ 128.027804][ T6844] ? alloc_fd+0x6bd/0x730 [ 128.027837][ T6844] sock_alloc_file+0xb7/0x2e0 [ 128.027867][ T6844] __sys_socket+0x1dc/0x3c0 [ 128.027898][ T6844] ? __pfx___sys_socket+0x10/0x10 [ 128.027936][ T6844] __x64_sys_socket+0x7a/0x90 [ 128.027966][ T6844] do_syscall_64+0xf3/0x230 [ 128.027991][ T6844] ? clear_bhb_loop+0x45/0xa0 [ 128.028020][ T6844] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 128.028039][ T6844] RIP: 0033:0x7f3849b8f087 [ 128.028057][ T6844] Code: f0 ff ff 77 06 c3 0f 1f 44 00 00 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 0f 1f 44 00 00 b8 29 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 128.028073][ T6844] RSP: 002b:00007f384a929fa8 EFLAGS: 00000286 ORIG_RAX: 0000000000000029 [ 128.028095][ T6844] RAX: ffffffffffffffda RBX: 00007f3849da5fa0 RCX: 00007f3849b8f087 [ 128.028109][ T6844] RDX: 0000000000000010 RSI: 0000000000000003 RDI: 0000000000000010 [ 128.028121][ T6844] RBP: 00000000ffffffff R08: 0000000000000000 R09: 0000000000000000 [ 128.028133][ T6844] R10: 0000200000000580 R11: 0000000000000286 R12: 0000000000000001 [ 128.028146][ T6844] R13: 0000000000000000 R14: 00007f3849da5fa0 R15: 00007fffc5c2fe08 [ 128.028177][ T6844] [ 129.223811][ T6879] netlink: 36 bytes leftover after parsing attributes in process `syz.0.334'. [ 129.327922][ T6881] Unknown options in mask 1f4 [ 129.350066][ T6878] syz.4.335 (6878) used greatest stack depth: 19176 bytes left [ 129.856604][ T6897] netlink: 8 bytes leftover after parsing attributes in process `syz.4.339'. [ 129.931117][ T55] block nbd1: Receive control failed (result -107) [ 129.975144][ T6897] nbd1: detected capacity change from 0 to 256 [ 130.005886][ T5843] block nbd1: Dead connection, failed to find a fallback [ 130.012986][ T5843] block nbd1: shutting down sockets [ 130.061102][ T5843] blk_print_req_error: 27 callbacks suppressed [ 130.061120][ T5843] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.154715][ T5843] buffer_io_error: 27 callbacks suppressed [ 130.154738][ T5843] Buffer I/O error on dev nbd1, logical block 0, async page read [ 130.214450][ T5843] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.223549][ T5843] Buffer I/O error on dev nbd1, logical block 0, async page read [ 130.322731][ T5843] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.360708][ T5843] Buffer I/O error on dev nbd1, logical block 0, async page read [ 130.388330][ T5843] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.426094][ T5843] Buffer I/O error on dev nbd1, logical block 0, async page read [ 130.457058][ T5843] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.491645][ T5843] Buffer I/O error on dev nbd1, logical block 0, async page read [ 130.512646][ T6928] sctp: [Deprecated]: syz.2.346 (pid 6928) Use of int in maxseg socket option. [ 130.512646][ T6928] Use struct sctp_assoc_value instead [ 130.526723][ T5843] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.570779][ T5843] Buffer I/O error on dev nbd1, logical block 0, async page read [ 130.579479][ T5843] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.591600][ T5843] Buffer I/O error on dev nbd1, logical block 0, async page read [ 130.600004][ T5843] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.609347][ T5843] Buffer I/O error on dev nbd1, logical block 0, async page read [ 130.627746][ T5843] ldm_validate_partition_table(): Disk read failed. [ 130.639955][ T5843] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.649369][ T5843] Buffer I/O error on dev nbd1, logical block 0, async page read [ 130.657600][ T5843] I/O error, dev nbd1, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 130.666950][ T5843] Buffer I/O error on dev nbd1, logical block 0, async page read [ 130.676865][ T5843] Dev nbd1: unable to read RDB block 0 [ 130.686815][ T5843] nbd1: unable to read partition table [ 130.699431][ T5843] ldm_validate_partition_table(): Disk read failed. [ 130.706853][ T5843] Dev nbd1: unable to read RDB block 0 [ 130.712781][ T5843] nbd1: unable to read partition table [ 130.935639][ T6938] __nla_validate_parse: 3 callbacks suppressed [ 130.935660][ T6938] netlink: 36 bytes leftover after parsing attributes in process `syz.2.347'. [ 131.045767][ T6947] FAULT_INJECTION: forcing a failure. [ 131.045767][ T6947] name failslab, interval 1, probability 0, space 0, times 0 [ 131.065232][ T6941] Unknown options in mask 1f4 [ 131.103054][ T6947] CPU: 0 UID: 0 PID: 6947 Comm: syz.0.350 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 131.103084][ T6947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 131.103096][ T6947] Call Trace: [ 131.103104][ T6947] [ 131.103113][ T6947] dump_stack_lvl+0x241/0x360 [ 131.103150][ T6947] ? __pfx_dump_stack_lvl+0x10/0x10 [ 131.103179][ T6947] ? __pfx__printk+0x10/0x10 [ 131.103212][ T6947] ? __pfx___might_resched+0x10/0x10 [ 131.103243][ T6947] should_fail_ex+0x424/0x570 [ 131.103270][ T6947] should_failslab+0xac/0x100 [ 131.103300][ T6947] __kmalloc_noprof+0xdf/0x4d0 [ 131.103327][ T6947] ? sock_kmalloc+0xd7/0x160 [ 131.103353][ T6947] sock_kmalloc+0xd7/0x160 [ 131.103378][ T6947] ____sys_sendmsg+0x23b/0x860 [ 131.103410][ T6947] ? __pfx_____sys_sendmsg+0x10/0x10 [ 131.103429][ T6947] ? __fget_files+0x2a/0x420 [ 131.103452][ T6947] ? __fget_files+0x2a/0x420 [ 131.103478][ T6947] __sys_sendmsg+0x271/0x360 [ 131.103505][ T6947] ? __pfx___sys_sendmsg+0x10/0x10 [ 131.103582][ T6947] ? do_syscall_64+0xb6/0x230 [ 131.103612][ T6947] do_syscall_64+0xf3/0x230 [ 131.103637][ T6947] ? clear_bhb_loop+0x45/0xa0 [ 131.103662][ T6947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.103681][ T6947] RIP: 0033:0x7fbbfdd8d169 [ 131.103698][ T6947] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 131.103722][ T6947] RSP: 002b:00007fbbfbbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.103745][ T6947] RAX: ffffffffffffffda RBX: 00007fbbfdfa5fa0 RCX: 00007fbbfdd8d169 [ 131.103760][ T6947] RDX: 0000000000000000 RSI: 0000200000001180 RDI: 0000000000000003 [ 131.103772][ T6947] RBP: 00007fbbfbbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 131.103785][ T6947] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.103797][ T6947] R13: 0000000000000000 R14: 00007fbbfdfa5fa0 R15: 00007fff29152af8 [ 131.103828][ T6947] [ 131.402315][ T6949] lo speed is unknown, defaulting to 1000 [ 131.557235][ T6960] netlink: 12 bytes leftover after parsing attributes in process `syz.1.353'. [ 131.807868][ T6970] rdma_op ffff88805b47e9f0 conn xmit_rdma 0000000000000000 [ 132.113835][ T6981] sctp: [Deprecated]: syz.3.360 (pid 6981) Use of int in max_burst socket option deprecated. [ 132.113835][ T6981] Use struct sctp_assoc_value instead [ 132.412887][ T6983] netlink: 'syz.1.361': attribute type 12 has an invalid length. [ 132.454103][ T6983] netlink: 'syz.1.361': attribute type 29 has an invalid length. [ 132.460532][ T6987] xt_hashlimit: size too large, truncated to 1048576 [ 132.490924][ T6983] netlink: 148 bytes leftover after parsing attributes in process `syz.1.361'. [ 132.491098][ T6987] xt_hashlimit: max too large, truncated to 1048576 [ 132.554280][ T6983] netlink: 'syz.1.361': attribute type 2 has an invalid length. [ 132.576904][ T6983] netlink: 43 bytes leftover after parsing attributes in process `syz.1.361'. [ 132.655802][ T6987] Cannot find del_set index 1 as target [ 132.840186][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.854460][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.288739][ T7012] netlink: 20 bytes leftover after parsing attributes in process `syz.1.368'. [ 133.915065][ T7033] netlink: 356 bytes leftover after parsing attributes in process `syz.4.373'. [ 133.930028][ T7039] netlink: 36 bytes leftover after parsing attributes in process `syz.0.372'. [ 134.018083][ T7042] netlink: 4 bytes leftover after parsing attributes in process `syz.0.372'. [ 134.025694][ T7033] netlink: 1760 bytes leftover after parsing attributes in process `syz.4.373'. [ 134.045018][ T7042] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 134.075804][ T7042] Unknown options in mask 1f4 [ 134.968343][ T7062] syzkaller1: entered promiscuous mode [ 134.973981][ T7062] syzkaller1: entered allmulticast mode [ 134.977088][ T7064] rdma_op ffff888034b3e1f0 conn xmit_rdma 0000000000000000 [ 135.624696][ T7090] siw: device registration error -23 [ 135.640451][ T7091] netlink: 'syz.1.387': attribute type 11 has an invalid length. [ 136.501883][ T7109] lo speed is unknown, defaulting to 1000 [ 136.643407][ T7114] FAULT_INJECTION: forcing a failure. [ 136.643407][ T7114] name failslab, interval 1, probability 0, space 0, times 0 [ 136.688967][ T7114] CPU: 0 UID: 0 PID: 7114 Comm: syz.0.398 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 136.689001][ T7114] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 136.689013][ T7114] Call Trace: [ 136.689022][ T7114] [ 136.689030][ T7114] dump_stack_lvl+0x241/0x360 [ 136.689069][ T7114] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.689100][ T7114] ? __pfx__printk+0x10/0x10 [ 136.689133][ T7114] ? __pfx___might_resched+0x10/0x10 [ 136.689166][ T7114] should_fail_ex+0x424/0x570 [ 136.689194][ T7114] should_failslab+0xac/0x100 [ 136.689231][ T7114] __kmalloc_cache_noprof+0x73/0x370 [ 136.689261][ T7114] ? ipv6_flowlabel_opt+0x1083/0x29d0 [ 136.689297][ T7114] ipv6_flowlabel_opt+0x1083/0x29d0 [ 136.689329][ T7114] ? __lock_acquire+0xad5/0xd80 [ 136.689363][ T7114] ? __pfx_ipv6_flowlabel_opt+0x10/0x10 [ 136.689390][ T7114] ? look_up_lock_class+0x7b/0x170 [ 136.689419][ T7114] ? register_lock_class+0x54/0x330 [ 136.689446][ T7114] ? __lock_acquire+0xad5/0xd80 [ 136.689477][ T7114] ? __local_bh_enable_ip+0x168/0x200 [ 136.689496][ T7114] ? lockdep_hardirqs_on+0x9d/0x150 [ 136.689523][ T7114] ? __local_bh_enable_ip+0x168/0x200 [ 136.689544][ T7114] ? do_ipv6_setsockopt+0xccd/0x3680 [ 136.689589][ T7114] do_ipv6_setsockopt+0xf7c/0x3680 [ 136.689630][ T7114] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 136.689660][ T7114] ? __lock_acquire+0xad5/0xd80 [ 136.689682][ T7114] ? __mutex_trylock_common+0x184/0x2e0 [ 136.689713][ T7114] ? __pfx___mutex_trylock_common+0x10/0x10 [ 136.689740][ T7114] ? rcu_is_watching+0x15/0xb0 [ 136.689766][ T7114] ? trace_contention_end+0x3c/0x120 [ 136.689793][ T7114] ? __mutex_lock+0x380/0x10c0 [ 136.689831][ T7114] ? smc_setsockopt+0x1b2/0xd50 [ 136.689856][ T7114] ? __pfx___mutex_lock+0x10/0x10 [ 136.689893][ T7114] ? rcu_read_lock_any_held+0xbb/0x160 [ 136.689931][ T7114] ipv6_setsockopt+0x5d/0x170 [ 136.689960][ T7114] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 136.690007][ T7114] smc_setsockopt+0x25c/0xd50 [ 136.690032][ T7114] ? __pfx_aa_sk_perm+0x10/0x10 [ 136.690056][ T7114] ? __pfx_smc_setsockopt+0x10/0x10 [ 136.690078][ T7114] ? aa_sock_opt_perm+0x79/0x120 [ 136.690110][ T7114] ? __pfx_smc_setsockopt+0x10/0x10 [ 136.690131][ T7114] do_sock_setsockopt+0x3b1/0x710 [ 136.690157][ T7114] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 136.690174][ T7114] ? __fget_files+0x2a/0x420 [ 136.690196][ T7114] ? __fget_files+0x39d/0x420 [ 136.690212][ T7114] ? __fget_files+0x2a/0x420 [ 136.690244][ T7114] __x64_sys_setsockopt+0x1ee/0x280 [ 136.690271][ T7114] do_syscall_64+0xf3/0x230 [ 136.690295][ T7114] ? clear_bhb_loop+0x45/0xa0 [ 136.690318][ T7114] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.690336][ T7114] RIP: 0033:0x7fbbfdd8d169 [ 136.690353][ T7114] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.690368][ T7114] RSP: 002b:00007fbbfbbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 136.690408][ T7114] RAX: ffffffffffffffda RBX: 00007fbbfdfa5fa0 RCX: 00007fbbfdd8d169 [ 136.690423][ T7114] RDX: 0000000000000020 RSI: 0000000000000029 RDI: 0000000000000003 [ 136.690435][ T7114] RBP: 00007fbbfbbf6090 R08: 0000000000000020 R09: 0000000000000000 [ 136.690447][ T7114] R10: 0000200000000080 R11: 0000000000000246 R12: 0000000000000001 [ 136.690460][ T7114] R13: 0000000000000000 R14: 00007fbbfdfa5fa0 R15: 00007fff29152af8 [ 136.690493][ T7114] [ 136.702656][ T7116] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 137.144714][ T7121] __nla_validate_parse: 2 callbacks suppressed [ 137.144737][ T7121] netlink: 16 bytes leftover after parsing attributes in process `syz.2.401'. [ 137.547401][ T7137] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 137.662262][ T7138] netlink: 20 bytes leftover after parsing attributes in process `syz.3.403'. [ 137.838837][ T7140] syzkaller0: entered promiscuous mode [ 137.844720][ T7140] syzkaller0: entered allmulticast mode [ 138.009715][ T7140] netlink: 20 bytes leftover after parsing attributes in process `syz.2.408'. [ 138.133514][ T7151] FAULT_INJECTION: forcing a failure. [ 138.133514][ T7151] name failslab, interval 1, probability 0, space 0, times 0 [ 138.149381][ T7151] CPU: 0 UID: 0 PID: 7151 Comm: syz.1.409 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 138.149410][ T7151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 138.149422][ T7151] Call Trace: [ 138.149429][ T7151] [ 138.149437][ T7151] dump_stack_lvl+0x241/0x360 [ 138.149473][ T7151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.149501][ T7151] ? __pfx__printk+0x10/0x10 [ 138.149526][ T7151] ? __lock_acquire+0xad5/0xd80 [ 138.149558][ T7151] should_fail_ex+0x424/0x570 [ 138.149583][ T7151] should_failslab+0xac/0x100 [ 138.149612][ T7151] kmem_cache_alloc_noprof+0x78/0x390 [ 138.149637][ T7151] ? skb_clone+0x20c/0x390 [ 138.149664][ T7151] skb_clone+0x20c/0x390 [ 138.149689][ T7151] __netlink_deliver_tap+0x3c4/0x7f0 [ 138.149728][ T7151] ? netlink_deliver_tap+0x2e/0x1b0 [ 138.149753][ T7151] netlink_deliver_tap+0x19d/0x1b0 [ 138.149781][ T7151] netlink_unicast+0x7c6/0x9a0 [ 138.149814][ T7151] ? __pfx_netlink_unicast+0x10/0x10 [ 138.149841][ T7151] ? skb_put+0x114/0x1f0 [ 138.149864][ T7151] netlink_sendmsg+0x8c3/0xcd0 [ 138.149903][ T7151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.149935][ T7151] ? aa_sock_msg_perm+0x91/0x160 [ 138.149969][ T7151] ? __pfx_netlink_sendmsg+0x10/0x10 [ 138.149993][ T7151] __sock_sendmsg+0x221/0x270 [ 138.150022][ T7151] ____sys_sendmsg+0x523/0x860 [ 138.150052][ T7151] ? __pfx_____sys_sendmsg+0x10/0x10 [ 138.150070][ T7151] ? __fget_files+0x2a/0x420 [ 138.150092][ T7151] ? __fget_files+0x2a/0x420 [ 138.150119][ T7151] __sys_sendmsg+0x271/0x360 [ 138.150145][ T7151] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.150229][ T7151] ? do_syscall_64+0xb6/0x230 [ 138.150272][ T7151] do_syscall_64+0xf3/0x230 [ 138.150291][ T7151] ? clear_bhb_loop+0x45/0xa0 [ 138.150311][ T7151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.150326][ T7151] RIP: 0033:0x7f67a918d169 [ 138.150342][ T7151] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.150356][ T7151] RSP: 002b:00007f67a9ff7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.150375][ T7151] RAX: ffffffffffffffda RBX: 00007f67a93a6160 RCX: 00007f67a918d169 [ 138.150387][ T7151] RDX: 0000000004008014 RSI: 0000200000000080 RDI: 0000000000000010 [ 138.150398][ T7151] RBP: 00007f67a9ff7090 R08: 0000000000000000 R09: 0000000000000000 [ 138.150407][ T7151] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.150417][ T7151] R13: 0000000000000000 R14: 00007f67a93a6160 R15: 00007fff31f58888 [ 138.150445][ T7151] [ 138.151653][ T7151] xt_socket: unknown flags 0xd0 [ 138.837013][ T7168] rdma_op ffff88807c98a1f0 conn xmit_rdma 0000000000000000 [ 139.014743][ T7170] netlink: 16 bytes leftover after parsing attributes in process `syz.1.416'. [ 139.193448][ T7166] FAULT_INJECTION: forcing a failure. [ 139.193448][ T7166] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.229537][ T7166] CPU: 1 UID: 0 PID: 7166 Comm: syz.0.414 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 139.229568][ T7166] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.229579][ T7166] Call Trace: [ 139.229587][ T7166] [ 139.229595][ T7166] dump_stack_lvl+0x241/0x360 [ 139.229630][ T7166] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.229657][ T7166] ? __pfx__printk+0x10/0x10 [ 139.229697][ T7166] should_fail_ex+0x424/0x570 [ 139.229722][ T7166] _copy_from_user+0x2d/0xb0 [ 139.229750][ T7166] do_replace+0xf3/0x5d0 [ 139.229776][ T7166] ? __pfx_aa_get_newest_label+0x10/0x10 [ 139.229804][ T7166] ? __pfx_do_replace+0x10/0x10 [ 139.229861][ T7166] ? bpf_lsm_capable+0x9/0x10 [ 139.229885][ T7166] ? security_capable+0x7e/0x2d0 [ 139.229920][ T7166] do_ebt_set_ctl+0x290/0x15a0 [ 139.229953][ T7166] ? __lock_acquire+0xad5/0xd80 [ 139.229984][ T7166] ? __mutex_trylock_common+0x184/0x2e0 [ 139.230018][ T7166] ? __pfx_do_ebt_set_ctl+0x10/0x10 [ 139.230060][ T7166] ? nf_setsockopt+0x240/0x2c0 [ 139.230105][ T7166] ? __mutex_unlock_slowpath+0x229/0x800 [ 139.230139][ T7166] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 139.230161][ T7166] ? aa_sk_perm+0x96f/0xac0 [ 139.230209][ T7166] ? ksys_write+0x24e/0x2d0 [ 139.230233][ T7166] ? __pfx_aa_sk_perm+0x10/0x10 [ 139.230263][ T7166] nf_setsockopt+0x295/0x2c0 [ 139.230299][ T7166] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 139.230326][ T7166] do_sock_setsockopt+0x3b1/0x710 [ 139.230354][ T7166] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 139.230371][ T7166] ? __fget_files+0x2a/0x420 [ 139.230394][ T7166] ? __fget_files+0x39d/0x420 [ 139.230409][ T7166] ? __fget_files+0x2a/0x420 [ 139.230436][ T7166] __x64_sys_setsockopt+0x1ee/0x280 [ 139.230463][ T7166] do_syscall_64+0xf3/0x230 [ 139.230487][ T7166] ? clear_bhb_loop+0x45/0xa0 [ 139.230511][ T7166] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.230530][ T7166] RIP: 0033:0x7fbbfdd8d169 [ 139.230547][ T7166] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.230562][ T7166] RSP: 002b:00007fbbfbbd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 139.230583][ T7166] RAX: ffffffffffffffda RBX: 00007fbbfdfa6080 RCX: 00007fbbfdd8d169 [ 139.230598][ T7166] RDX: 0000000000000080 RSI: 0000000000000000 RDI: 0000000000000003 [ 139.230609][ T7166] RBP: 00007fbbfbbd5090 R08: 0000000000000108 R09: 0000000000000000 [ 139.230622][ T7166] R10: 0000200000000480 R11: 0000000000000246 R12: 0000000000000001 [ 139.230634][ T7166] R13: 0000000000000000 R14: 00007fbbfdfa6080 R15: 00007fff29152af8 [ 139.230665][ T7166] [ 139.586125][ T7176] FAULT_INJECTION: forcing a failure. [ 139.586125][ T7176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 139.607209][ T7176] CPU: 0 UID: 0 PID: 7176 Comm: syz.4.419 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 139.607239][ T7176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.607251][ T7176] Call Trace: [ 139.607258][ T7176] [ 139.607267][ T7176] dump_stack_lvl+0x241/0x360 [ 139.607305][ T7176] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.607344][ T7176] ? __pfx__printk+0x10/0x10 [ 139.607382][ T7176] should_fail_ex+0x424/0x570 [ 139.607407][ T7176] _copy_to_user+0x31/0xb0 [ 139.607436][ T7176] simple_read_from_buffer+0xc4/0x170 [ 139.607484][ T7176] proc_fail_nth_read+0x1ef/0x260 [ 139.607509][ T7176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.607534][ T7176] ? rw_verify_area+0x246/0x630 [ 139.607556][ T7176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 139.607579][ T7176] vfs_read+0x21f/0xb90 [ 139.607608][ T7176] ? __pfx___mutex_lock+0x10/0x10 [ 139.607634][ T7176] ? __pfx_vfs_read+0x10/0x10 [ 139.607660][ T7176] ? __fget_files+0x2a/0x420 [ 139.607681][ T7176] ? __fget_files+0x39d/0x420 [ 139.607698][ T7176] ? __fget_files+0x2a/0x420 [ 139.607726][ T7176] ksys_read+0x19d/0x2d0 [ 139.607751][ T7176] ? __pfx_ksys_read+0x10/0x10 [ 139.607781][ T7176] ? do_syscall_64+0xb6/0x230 [ 139.607809][ T7176] do_syscall_64+0xf3/0x230 [ 139.607834][ T7176] ? clear_bhb_loop+0x45/0xa0 [ 139.607859][ T7176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.607879][ T7176] RIP: 0033:0x7fcc2b58bb7c [ 139.607897][ T7176] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 139.607913][ T7176] RSP: 002b:00007fcc2c369030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 139.607935][ T7176] RAX: ffffffffffffffda RBX: 00007fcc2b7a5fa0 RCX: 00007fcc2b58bb7c [ 139.607956][ T7176] RDX: 000000000000000f RSI: 00007fcc2c3690a0 RDI: 0000000000000006 [ 139.607969][ T7176] RBP: 00007fcc2c369090 R08: 0000000000000000 R09: 0000000000000000 [ 139.607981][ T7176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.607993][ T7176] R13: 0000000000000000 R14: 00007fcc2b7a5fa0 R15: 00007ffdc2ab2db8 [ 139.608025][ T7176] [ 139.886319][ T7178] FAULT_INJECTION: forcing a failure. [ 139.886319][ T7178] name failslab, interval 1, probability 0, space 0, times 0 [ 139.899293][ T7178] CPU: 1 UID: 0 PID: 7178 Comm: syz.1.418 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 139.899321][ T7178] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 139.899334][ T7178] Call Trace: [ 139.899342][ T7178] [ 139.899350][ T7178] dump_stack_lvl+0x241/0x360 [ 139.899387][ T7178] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.899417][ T7178] ? __pfx__printk+0x10/0x10 [ 139.899440][ T7178] ? get_random_u32+0x199/0xab0 [ 139.899484][ T7178] should_fail_ex+0x424/0x570 [ 139.899511][ T7178] should_failslab+0xac/0x100 [ 139.899541][ T7178] kmem_cache_alloc_noprof+0x78/0x390 [ 139.899568][ T7178] ? sctp_get_port_local+0x796/0x1750 [ 139.899594][ T7178] sctp_get_port_local+0x796/0x1750 [ 139.899633][ T7178] ? __pfx_sctp_get_port_local+0x10/0x10 [ 139.899657][ T7178] ? sctp_bind_addr_match+0x295/0x2b0 [ 139.899691][ T7178] sctp_do_bind+0x513/0x950 [ 139.899724][ T7178] sctp_connect_new_asoc+0x2a0/0x700 [ 139.899748][ T7178] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 139.899766][ T7178] ? sctp_sendmsg+0xf30/0x3620 [ 139.899804][ T7178] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 139.899822][ T7178] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 139.899849][ T7178] sctp_sendmsg+0x2009/0x3620 [ 139.899910][ T7178] ? __pfx_sctp_sendmsg+0x10/0x10 [ 139.899945][ T7178] ? aa_sk_perm+0x96f/0xac0 [ 139.899990][ T7178] ? inet_sendmsg+0x330/0x390 [ 139.900018][ T7178] __sock_sendmsg+0x1a6/0x270 [ 139.900049][ T7178] __sys_sendto+0x365/0x4c0 [ 139.900087][ T7178] ? __pfx___sys_sendto+0x10/0x10 [ 139.900130][ T7178] ? __fget_files+0x2a/0x420 [ 139.900159][ T7178] ? ksys_write+0x275/0x2d0 [ 139.900193][ T7178] __x64_sys_sendto+0xde/0x100 [ 139.900216][ T7178] do_syscall_64+0xf3/0x230 [ 139.900242][ T7178] ? clear_bhb_loop+0x45/0xa0 [ 139.900266][ T7178] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.900286][ T7178] RIP: 0033:0x7f67a918d169 [ 139.900304][ T7178] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 139.900321][ T7178] RSP: 002b:00007f67aa039038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 139.900343][ T7178] RAX: ffffffffffffffda RBX: 00007f67a93a5fa0 RCX: 00007f67a918d169 [ 139.900358][ T7178] RDX: 0000000000034000 RSI: 00002000000000c0 RDI: 0000000000000003 [ 139.900371][ T7178] RBP: 00007f67aa039090 R08: 0000200000000100 R09: 0000000000000010 [ 139.900384][ T7178] R10: 0000000026000854 R11: 0000000000000246 R12: 0000000000000001 [ 139.900397][ T7178] R13: 0000000000000000 R14: 00007f67a93a5fa0 R15: 00007fff31f58888 [ 139.900429][ T7178] [ 140.622831][ T55] Bluetooth: hci4: link tx timeout [ 140.628363][ T55] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 140.638323][ T52] IPVS: starting estimator thread 0... [ 140.734792][ T7191] IPVS: using max 27 ests per chain, 64800 per kthread [ 141.307984][ T7200] netlink: 8 bytes leftover after parsing attributes in process `syz.4.425'. [ 141.664331][ T7164] lo speed is unknown, defaulting to 1000 [ 141.671331][ T7203] tipc: Started in network mode [ 141.671351][ T7203] tipc: Node identity , cluster identity 4711 [ 141.671372][ T7203] tipc: Failed to set node id, please configure manually [ 141.671416][ T7203] tipc: Enabling of bearer rejected, failed to enable media [ 141.708180][ T7207] netlink: 16 bytes leftover after parsing attributes in process `syz.2.427'. [ 141.820498][ T7211] netlink: 'syz.1.429': attribute type 5 has an invalid length. [ 141.829321][ T7211] FAULT_INJECTION: forcing a failure. [ 141.829321][ T7211] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.863260][ T7211] CPU: 0 UID: 0 PID: 7211 Comm: syz.1.429 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 141.863289][ T7211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 141.863302][ T7211] Call Trace: [ 141.863309][ T7211] [ 141.863317][ T7211] dump_stack_lvl+0x241/0x360 [ 141.863354][ T7211] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.863383][ T7211] ? __pfx__printk+0x10/0x10 [ 141.863421][ T7211] should_fail_ex+0x424/0x570 [ 141.863448][ T7211] _copy_to_user+0x31/0xb0 [ 141.863479][ T7211] simple_read_from_buffer+0xc4/0x170 [ 141.863520][ T7211] proc_fail_nth_read+0x1ef/0x260 [ 141.863545][ T7211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.863570][ T7211] ? rw_verify_area+0x246/0x630 [ 141.863592][ T7211] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.863615][ T7211] vfs_read+0x21f/0xb90 [ 141.863643][ T7211] ? __pfx___mutex_lock+0x10/0x10 [ 141.863669][ T7211] ? __pfx_vfs_read+0x10/0x10 [ 141.863694][ T7211] ? __fget_files+0x2a/0x420 [ 141.863715][ T7211] ? __fget_files+0x39d/0x420 [ 141.863732][ T7211] ? __fget_files+0x2a/0x420 [ 141.863760][ T7211] ksys_read+0x19d/0x2d0 [ 141.863786][ T7211] ? __pfx_ksys_read+0x10/0x10 [ 141.863815][ T7211] ? do_syscall_64+0xb6/0x230 [ 141.863844][ T7211] do_syscall_64+0xf3/0x230 [ 141.863870][ T7211] ? clear_bhb_loop+0x45/0xa0 [ 141.863894][ T7211] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.863914][ T7211] RIP: 0033:0x7f67a918bb7c [ 141.863932][ T7211] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 141.863948][ T7211] RSP: 002b:00007f67aa039030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.863970][ T7211] RAX: ffffffffffffffda RBX: 00007f67a93a5fa0 RCX: 00007f67a918bb7c [ 141.863985][ T7211] RDX: 000000000000000f RSI: 00007f67aa0390a0 RDI: 0000000000000007 [ 141.863997][ T7211] RBP: 00007f67aa039090 R08: 0000000000000000 R09: 0000000000000000 [ 141.864010][ T7211] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 141.864021][ T7211] R13: 0000000000000000 R14: 00007f67a93a5fa0 R15: 00007fff31f58888 [ 141.864053][ T7211] [ 142.098238][ T7163] lo speed is unknown, defaulting to 1000 [ 142.207183][ T7221] FAULT_INJECTION: forcing a failure. [ 142.207183][ T7221] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 142.252322][ T7221] CPU: 1 UID: 0 PID: 7221 Comm: syz.4.430 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 142.252354][ T7221] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.252366][ T7221] Call Trace: [ 142.252374][ T7221] [ 142.252382][ T7221] dump_stack_lvl+0x241/0x360 [ 142.252420][ T7221] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.252449][ T7221] ? __pfx__printk+0x10/0x10 [ 142.252492][ T7221] should_fail_ex+0x424/0x570 [ 142.252520][ T7221] _copy_from_user+0x2d/0xb0 [ 142.252550][ T7221] copy_msghdr_from_user+0xb3/0x580 [ 142.252585][ T7221] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 142.252630][ T7221] do_recvmmsg+0x3bf/0xab0 [ 142.252666][ T7221] ? __pfx_do_recvmmsg+0x10/0x10 [ 142.252706][ T7221] ? rcu_read_lock_any_held+0xbb/0x160 [ 142.252742][ T7221] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 142.252772][ T7221] ? vfs_write+0xb29/0xd10 [ 142.252806][ T7221] ? ksys_write+0x24e/0x2d0 [ 142.252833][ T7221] ? __mutex_unlock_slowpath+0x229/0x800 [ 142.252870][ T7221] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 142.252895][ T7221] ? __fget_files+0x2a/0x420 [ 142.252931][ T7221] __x64_sys_recvmmsg+0x1ab/0x260 [ 142.252957][ T7221] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 142.252987][ T7221] ? do_syscall_64+0xb6/0x230 [ 142.253016][ T7221] do_syscall_64+0xf3/0x230 [ 142.253041][ T7221] ? clear_bhb_loop+0x45/0xa0 [ 142.253065][ T7221] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.253083][ T7221] RIP: 0033:0x7fcc2b58d169 [ 142.253101][ T7221] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.253129][ T7221] RSP: 002b:00007fcc2c327038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 142.253149][ T7221] RAX: ffffffffffffffda RBX: 00007fcc2b7a6160 RCX: 00007fcc2b58d169 [ 142.253163][ T7221] RDX: 03ffffffffffff67 RSI: 0000200000002440 RDI: 0000000000000008 [ 142.253175][ T7221] RBP: 00007fcc2c327090 R08: 0000000000000000 R09: 0000000000000000 [ 142.253186][ T7221] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 142.253198][ T7221] R13: 0000000000000000 R14: 00007fcc2b7a6160 R15: 00007ffdc2ab2db8 [ 142.253227][ T7221] [ 142.490417][ T7226] netlink: 20 bytes leftover after parsing attributes in process `syz.2.431'. [ 142.510069][ T7213] lo speed is unknown, defaulting to 1000 [ 142.674844][ T5861] Bluetooth: hci4: command 0x0406 tx timeout [ 142.711456][ T7230] FAULT_INJECTION: forcing a failure. [ 142.711456][ T7230] name failslab, interval 1, probability 0, space 0, times 0 [ 142.729680][ T7230] CPU: 1 UID: 0 PID: 7230 Comm: syz.2.434 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 142.729708][ T7230] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 142.729719][ T7230] Call Trace: [ 142.729727][ T7230] [ 142.729735][ T7230] dump_stack_lvl+0x241/0x360 [ 142.729770][ T7230] ? __pfx_dump_stack_lvl+0x10/0x10 [ 142.729797][ T7230] ? __pfx__printk+0x10/0x10 [ 142.729849][ T7230] ? __ip_dev_find+0x49b/0x580 [ 142.729882][ T7230] should_fail_ex+0x424/0x570 [ 142.729909][ T7230] should_failslab+0xac/0x100 [ 142.729940][ T7230] kmem_cache_alloc_noprof+0x78/0x390 [ 142.729967][ T7230] ? dst_alloc+0x12b/0x190 [ 142.729995][ T7230] dst_alloc+0x12b/0x190 [ 142.730022][ T7230] ip_route_output_key_hash_rcu+0x1378/0x2290 [ 142.730061][ T7230] ip_route_output_key_hash+0x195/0x2b0 [ 142.730083][ T7230] ? ip_route_output_key_hash+0xe1/0x2b0 [ 142.730103][ T7230] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 142.730122][ T7230] ? aa_label_sk_perm+0x4f4/0x6d0 [ 142.730166][ T7230] dccp_v4_connect+0x64a/0x1380 [ 142.730206][ T7230] __inet_stream_connect+0x2a7/0xfb0 [ 142.730252][ T7230] ? __local_bh_enable_ip+0x168/0x200 [ 142.730270][ T7230] ? lockdep_hardirqs_on+0x9d/0x150 [ 142.730293][ T7230] ? __pfx___inet_stream_connect+0x10/0x10 [ 142.730311][ T7230] ? __local_bh_enable_ip+0x168/0x200 [ 142.730331][ T7230] ? inet_stream_connect+0x50/0xa0 [ 142.730351][ T7230] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 142.730388][ T7230] inet_stream_connect+0x65/0xa0 [ 142.730413][ T7230] __sys_connect+0x28c/0x2d0 [ 142.730443][ T7230] ? __fget_files+0x2a/0x420 [ 142.730460][ T7230] ? __pfx___sys_connect+0x10/0x10 [ 142.730513][ T7230] __x64_sys_connect+0x7a/0x90 [ 142.730542][ T7230] do_syscall_64+0xf3/0x230 [ 142.730565][ T7230] ? clear_bhb_loop+0x45/0xa0 [ 142.730589][ T7230] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 142.730606][ T7230] RIP: 0033:0x7f002278d169 [ 142.730623][ T7230] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 142.730643][ T7230] RSP: 002b:00007f0023585038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 142.730664][ T7230] RAX: ffffffffffffffda RBX: 00007f00229a5fa0 RCX: 00007f002278d169 [ 142.730678][ T7230] RDX: 0000000000000029 RSI: 0000200000000100 RDI: 0000000000000003 [ 142.730690][ T7230] RBP: 00007f0023585090 R08: 0000000000000000 R09: 0000000000000000 [ 142.730702][ T7230] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 142.730713][ T7230] R13: 0000000000000000 R14: 00007f00229a5fa0 R15: 00007ffd37a47728 [ 142.730743][ T7230] [ 143.236089][ T7235] netlink: 'syz.1.437': attribute type 2 has an invalid length. [ 143.244932][ T7235] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 143.341209][ T7239] netlink: 16 bytes leftover after parsing attributes in process `syz.1.438'. [ 143.691017][ T7249] netlink: 12 bytes leftover after parsing attributes in process `syz.0.442'. [ 143.746110][ T7252] netlink: 'syz.4.443': attribute type 1 has an invalid length. [ 143.764203][ T7252] netlink: 224 bytes leftover after parsing attributes in process `syz.4.443'. [ 143.852710][ T7253] dccp_close: ABORT with 60 bytes unread [ 143.957570][ T7266] siw: device registration error -23 [ 144.180500][ T7271] wireguard0: entered promiscuous mode [ 144.205995][ T7278] netlink: 16 bytes leftover after parsing attributes in process `syz.0.450'. [ 144.206280][ T7271] wireguard0: entered allmulticast mode [ 144.286498][ T7270] netlink: 8 bytes leftover after parsing attributes in process `syz.1.449'. [ 144.681147][ T7292] netlink: 132 bytes leftover after parsing attributes in process `syz.0.456'. [ 144.710282][ T7292] netlink: 'syz.0.456': attribute type 10 has an invalid length. [ 144.765411][ T7292] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 144.982979][ T7306] FAULT_INJECTION: forcing a failure. [ 144.982979][ T7306] name failslab, interval 1, probability 0, space 0, times 0 [ 145.024279][ T7306] CPU: 1 UID: 0 PID: 7306 Comm: syz.4.460 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 145.024310][ T7306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.024322][ T7306] Call Trace: [ 145.024330][ T7306] [ 145.024339][ T7306] dump_stack_lvl+0x241/0x360 [ 145.024376][ T7306] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.024405][ T7306] ? __pfx__printk+0x10/0x10 [ 145.024456][ T7306] should_fail_ex+0x424/0x570 [ 145.024484][ T7306] should_failslab+0xac/0x100 [ 145.024514][ T7306] kmem_cache_alloc_noprof+0x78/0x390 [ 145.024542][ T7306] ? dst_alloc+0x12b/0x190 [ 145.024568][ T7306] dst_alloc+0x12b/0x190 [ 145.024595][ T7306] ip_route_output_key_hash_rcu+0x1378/0x2290 [ 145.024633][ T7306] ip_route_output_key_hash+0x195/0x2b0 [ 145.024656][ T7306] ? ip_route_output_key_hash+0xe1/0x2b0 [ 145.024675][ T7306] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 145.024694][ T7306] ? kstrtouint+0xfc/0x190 [ 145.024720][ T7306] ? aa_label_sk_perm+0x4f4/0x6d0 [ 145.024758][ T7306] ip_route_output_flow+0x29/0x140 [ 145.024792][ T7306] dccp_v4_connect+0x6a8/0x1380 [ 145.024832][ T7306] __inet_stream_connect+0x2a7/0xfb0 [ 145.024868][ T7306] ? __local_bh_enable_ip+0x168/0x200 [ 145.024888][ T7306] ? lockdep_hardirqs_on+0x9d/0x150 [ 145.024913][ T7306] ? __pfx___inet_stream_connect+0x10/0x10 [ 145.024933][ T7306] ? __local_bh_enable_ip+0x168/0x200 [ 145.024954][ T7306] ? inet_stream_connect+0x50/0xa0 [ 145.024976][ T7306] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 145.025008][ T7306] inet_stream_connect+0x65/0xa0 [ 145.025034][ T7306] __sys_connect+0x28c/0x2d0 [ 145.025065][ T7306] ? __fget_files+0x2a/0x420 [ 145.025083][ T7306] ? __pfx___sys_connect+0x10/0x10 [ 145.025142][ T7306] __x64_sys_connect+0x7a/0x90 [ 145.025191][ T7306] do_syscall_64+0xf3/0x230 [ 145.025217][ T7306] ? clear_bhb_loop+0x45/0xa0 [ 145.025242][ T7306] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.025262][ T7306] RIP: 0033:0x7fcc2b58d169 [ 145.025281][ T7306] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.025298][ T7306] RSP: 002b:00007fcc2c369038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 145.025321][ T7306] RAX: ffffffffffffffda RBX: 00007fcc2b7a5fa0 RCX: 00007fcc2b58d169 [ 145.025336][ T7306] RDX: 0000000000000029 RSI: 0000200000000100 RDI: 0000000000000003 [ 145.025350][ T7306] RBP: 00007fcc2c369090 R08: 0000000000000000 R09: 0000000000000000 [ 145.025363][ T7306] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.025375][ T7306] R13: 0000000000000000 R14: 00007fcc2b7a5fa0 R15: 00007ffdc2ab2db8 [ 145.025409][ T7306] [ 145.412086][ T7310] netlink: 16 bytes leftover after parsing attributes in process `syz.2.464'. [ 145.442946][ T7314] FAULT_INJECTION: forcing a failure. [ 145.442946][ T7314] name failslab, interval 1, probability 0, space 0, times 0 [ 145.462700][ T7316] netlink: 28 bytes leftover after parsing attributes in process `syz.0.463'. [ 145.479786][ T7314] CPU: 0 UID: 0 PID: 7314 Comm: syz.4.465 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 145.479815][ T7314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.479827][ T7314] Call Trace: [ 145.479835][ T7314] [ 145.479843][ T7314] dump_stack_lvl+0x241/0x360 [ 145.479881][ T7314] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.479910][ T7314] ? __pfx__printk+0x10/0x10 [ 145.479943][ T7314] ? __pfx___might_resched+0x10/0x10 [ 145.479972][ T7314] should_fail_ex+0x424/0x570 [ 145.479999][ T7314] should_failslab+0xac/0x100 [ 145.480030][ T7314] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 145.480058][ T7314] ? __alloc_skb+0x1c2/0x480 [ 145.480082][ T7314] __alloc_skb+0x1c2/0x480 [ 145.480107][ T7314] ? __pfx___alloc_skb+0x10/0x10 [ 145.480136][ T7314] ? netlink_autobind+0xd6/0x2f0 [ 145.480164][ T7314] ? netlink_autobind+0x2b0/0x2f0 [ 145.480198][ T7314] netlink_sendmsg+0x638/0xcd0 [ 145.480240][ T7314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.480279][ T7314] ? aa_sock_msg_perm+0x91/0x160 [ 145.480314][ T7314] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.480340][ T7314] __sock_sendmsg+0x221/0x270 [ 145.480370][ T7314] ____sys_sendmsg+0x523/0x860 [ 145.480401][ T7314] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.480420][ T7314] ? __fget_files+0x2a/0x420 [ 145.480442][ T7314] ? __fget_files+0x2a/0x420 [ 145.480470][ T7314] __sys_sendmsg+0x271/0x360 [ 145.480498][ T7314] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.480576][ T7314] ? do_syscall_64+0xb6/0x230 [ 145.480605][ T7314] do_syscall_64+0xf3/0x230 [ 145.480630][ T7314] ? clear_bhb_loop+0x45/0xa0 [ 145.480654][ T7314] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.480673][ T7314] RIP: 0033:0x7fcc2b58d169 [ 145.480691][ T7314] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.480707][ T7314] RSP: 002b:00007fcc2c369038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.480729][ T7314] RAX: ffffffffffffffda RBX: 00007fcc2b7a5fa0 RCX: 00007fcc2b58d169 [ 145.480743][ T7314] RDX: 0000000000000000 RSI: 00002000000006c0 RDI: 0000000000000004 [ 145.480756][ T7314] RBP: 00007fcc2c369090 R08: 0000000000000000 R09: 0000000000000000 [ 145.480768][ T7314] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 145.480780][ T7314] R13: 0000000000000000 R14: 00007fcc2b7a5fa0 R15: 00007ffdc2ab2db8 [ 145.480811][ T7314] [ 145.952631][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz.4.469'. [ 146.100004][ T7337] 8021q: adding VLAN 0 to HW filter on device ipvlan0 [ 146.731466][ T7364] FAULT_INJECTION: forcing a failure. [ 146.731466][ T7364] name failslab, interval 1, probability 0, space 0, times 0 [ 146.765012][ T7364] CPU: 0 UID: 0 PID: 7364 Comm: syz.0.480 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 146.765041][ T7364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 146.765053][ T7364] Call Trace: [ 146.765061][ T7364] [ 146.765070][ T7364] dump_stack_lvl+0x241/0x360 [ 146.765108][ T7364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.765142][ T7364] ? __pfx__printk+0x10/0x10 [ 146.765173][ T7364] ? __pfx___might_resched+0x10/0x10 [ 146.765219][ T7364] should_fail_ex+0x424/0x570 [ 146.765247][ T7364] should_failslab+0xac/0x100 [ 146.765279][ T7364] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 146.765318][ T7364] ? __alloc_skb+0x1c2/0x480 [ 146.765342][ T7364] __alloc_skb+0x1c2/0x480 [ 146.765367][ T7364] ? __pfx___alloc_skb+0x10/0x10 [ 146.765389][ T7364] ? netlink_autobind+0xd6/0x2f0 [ 146.765418][ T7364] ? netlink_autobind+0x2b0/0x2f0 [ 146.765454][ T7364] netlink_sendmsg+0x638/0xcd0 [ 146.765497][ T7364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.765531][ T7364] ? aa_sock_msg_perm+0x91/0x160 [ 146.765566][ T7364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 146.765594][ T7364] __sock_sendmsg+0x221/0x270 [ 146.765624][ T7364] ____sys_sendmsg+0x523/0x860 [ 146.765656][ T7364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 146.765676][ T7364] ? __fget_files+0x2a/0x420 [ 146.765699][ T7364] ? __fget_files+0x2a/0x420 [ 146.765735][ T7364] __sys_sendmsg+0x271/0x360 [ 146.765761][ T7364] ? __pfx___sys_sendmsg+0x10/0x10 [ 146.765842][ T7364] ? do_syscall_64+0xb6/0x230 [ 146.765871][ T7364] do_syscall_64+0xf3/0x230 [ 146.765897][ T7364] ? clear_bhb_loop+0x45/0xa0 [ 146.765922][ T7364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.765942][ T7364] RIP: 0033:0x7fbbfdd8d169 [ 146.765961][ T7364] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.765977][ T7364] RSP: 002b:00007fbbfbbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 146.766000][ T7364] RAX: ffffffffffffffda RBX: 00007fbbfdfa5fa0 RCX: 00007fbbfdd8d169 [ 146.766016][ T7364] RDX: 0000000000000000 RSI: 0000200000000200 RDI: 0000000000000006 [ 146.766029][ T7364] RBP: 00007fbbfbbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 146.766042][ T7364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 146.766054][ T7364] R13: 0000000000000000 R14: 00007fbbfdfa5fa0 R15: 00007fff29152af8 [ 146.766087][ T7364] [ 147.360985][ T7387] erspan1: entered promiscuous mode [ 147.388995][ T7390] FAULT_INJECTION: forcing a failure. [ 147.388995][ T7390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 147.434560][ T7390] CPU: 1 UID: 0 PID: 7390 Comm: syz.0.486 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 147.434592][ T7390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 147.434605][ T7390] Call Trace: [ 147.434614][ T7390] [ 147.434623][ T7390] dump_stack_lvl+0x241/0x360 [ 147.434660][ T7390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.434691][ T7390] ? __pfx__printk+0x10/0x10 [ 147.434735][ T7390] should_fail_ex+0x424/0x570 [ 147.434762][ T7390] _copy_from_user+0x2d/0xb0 [ 147.434793][ T7390] generic_map_update_batch+0x53b/0x8e0 [ 147.434838][ T7390] ? __pfx_generic_map_update_batch+0x10/0x10 [ 147.434865][ T7390] ? __fget_files+0x39d/0x420 [ 147.434883][ T7390] ? __fget_files+0x2a/0x420 [ 147.434912][ T7390] ? __pfx_generic_map_update_batch+0x10/0x10 [ 147.434947][ T7390] bpf_map_do_batch+0x39a/0x660 [ 147.434977][ T7390] __sys_bpf+0x3c1/0x8b0 [ 147.434999][ T7390] ? __pfx___sys_bpf+0x10/0x10 [ 147.435034][ T7390] ? ksys_write+0x275/0x2d0 [ 147.435071][ T7390] __x64_sys_bpf+0x7c/0x90 [ 147.435103][ T7390] do_syscall_64+0xf3/0x230 [ 147.435130][ T7390] ? clear_bhb_loop+0x45/0xa0 [ 147.435154][ T7390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.435174][ T7390] RIP: 0033:0x7fbbfdd8d169 [ 147.435193][ T7390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.435210][ T7390] RSP: 002b:00007fbbfbbf6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 147.435233][ T7390] RAX: ffffffffffffffda RBX: 00007fbbfdfa5fa0 RCX: 00007fbbfdd8d169 [ 147.435248][ T7390] RDX: 0000000000000038 RSI: 0000200000000140 RDI: 000000000000001a [ 147.435262][ T7390] RBP: 00007fbbfbbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 147.435275][ T7390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.435286][ T7390] R13: 0000000000000000 R14: 00007fbbfdfa5fa0 R15: 00007fff29152af8 [ 147.435319][ T7390] [ 147.636558][ T7392] FAULT_INJECTION: forcing a failure. [ 147.636558][ T7392] name failslab, interval 1, probability 0, space 0, times 0 [ 147.649616][ T7392] CPU: 0 UID: 0 PID: 7392 Comm: syz.4.487 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 147.649642][ T7392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 147.649652][ T7392] Call Trace: [ 147.649658][ T7392] [ 147.649665][ T7392] dump_stack_lvl+0x241/0x360 [ 147.649694][ T7392] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.649718][ T7392] ? __pfx__printk+0x10/0x10 [ 147.649741][ T7392] ? stack_depot_save_flags+0x44/0x940 [ 147.649766][ T7392] should_fail_ex+0x424/0x570 [ 147.649786][ T7392] should_failslab+0xac/0x100 [ 147.649809][ T7392] kmem_cache_alloc_noprof+0x78/0x390 [ 147.649831][ T7392] ? xfrm_state_alloc+0x26/0x300 [ 147.649851][ T7392] xfrm_state_alloc+0x26/0x300 [ 147.649868][ T7392] __find_acq_core+0x87a/0x1c10 [ 147.649894][ T7392] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 147.649924][ T7392] xfrm_find_acq+0x7a/0xa0 [ 147.649952][ T7392] pfkey_getspi+0x62b/0xec0 [ 147.649976][ T7392] ? pfkey_broadcast+0x45/0x400 [ 147.649999][ T7392] pfkey_sendmsg+0xc96/0x1140 [ 147.650028][ T7392] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 147.650062][ T7392] ? __pfx_aa_sk_perm+0x10/0x10 [ 147.650083][ T7392] ? __import_iovec+0x585/0x830 [ 147.650107][ T7392] ? aa_sock_msg_perm+0x91/0x160 [ 147.650134][ T7392] ? __pfx_pfkey_sendmsg+0x10/0x10 [ 147.650151][ T7392] __sock_sendmsg+0x221/0x270 [ 147.650175][ T7392] ____sys_sendmsg+0x523/0x860 [ 147.650205][ T7392] ? __pfx_____sys_sendmsg+0x10/0x10 [ 147.650220][ T7392] ? __fget_files+0x2a/0x420 [ 147.650238][ T7392] ? __fget_files+0x2a/0x420 [ 147.650260][ T7392] __sys_sendmsg+0x271/0x360 [ 147.650281][ T7392] ? __pfx___sys_sendmsg+0x10/0x10 [ 147.650341][ T7392] ? do_syscall_64+0xb6/0x230 [ 147.650364][ T7392] do_syscall_64+0xf3/0x230 [ 147.650384][ T7392] ? clear_bhb_loop+0x45/0xa0 [ 147.650403][ T7392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.650419][ T7392] RIP: 0033:0x7fcc2b58d169 [ 147.650433][ T7392] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.650446][ T7392] RSP: 002b:00007fcc2c369038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 147.650464][ T7392] RAX: ffffffffffffffda RBX: 00007fcc2b7a5fa0 RCX: 00007fcc2b58d169 [ 147.650476][ T7392] RDX: 0000000000000000 RSI: 0000200000000140 RDI: 0000000000000004 [ 147.650486][ T7392] RBP: 00007fcc2c369090 R08: 0000000000000000 R09: 0000000000000000 [ 147.650496][ T7392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 147.650520][ T7392] R13: 0000000000000000 R14: 00007fcc2b7a5fa0 R15: 00007ffdc2ab2db8 [ 147.650544][ T7392] [ 148.030568][ T7396] FAULT_INJECTION: forcing a failure. [ 148.030568][ T7396] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 148.059164][ T7396] CPU: 1 UID: 0 PID: 7396 Comm: syz.4.492 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 148.059192][ T7396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 148.059204][ T7396] Call Trace: [ 148.059211][ T7396] [ 148.059219][ T7396] dump_stack_lvl+0x241/0x360 [ 148.059254][ T7396] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.059280][ T7396] ? __pfx__printk+0x10/0x10 [ 148.059319][ T7396] should_fail_ex+0x424/0x570 [ 148.059344][ T7396] _copy_to_user+0x31/0xb0 [ 148.059374][ T7396] bpf_obj_get_info_by_fd+0xebf/0x4260 [ 148.059412][ T7396] ? __lock_acquire+0xad5/0xd80 [ 148.059437][ T7396] ? __pfx_bpf_obj_get_info_by_fd+0x10/0x10 [ 148.059483][ T7396] ? __lock_acquire+0xad5/0xd80 [ 148.059531][ T7396] ? bpf_lsm_bpf+0x9/0x10 [ 148.059557][ T7396] __sys_bpf+0x7cb/0x8b0 [ 148.059580][ T7396] ? __pfx___sys_bpf+0x10/0x10 [ 148.059612][ T7396] ? ksys_write+0x275/0x2d0 [ 148.059648][ T7396] __x64_sys_bpf+0x7c/0x90 [ 148.059678][ T7396] do_syscall_64+0xf3/0x230 [ 148.059702][ T7396] ? clear_bhb_loop+0x45/0xa0 [ 148.059724][ T7396] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.059743][ T7396] RIP: 0033:0x7fcc2b58d169 [ 148.059760][ T7396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.059776][ T7396] RSP: 002b:00007fcc2c369038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 148.059796][ T7396] RAX: ffffffffffffffda RBX: 00007fcc2b7a5fa0 RCX: 00007fcc2b58d169 [ 148.059811][ T7396] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 000000000000000f [ 148.059823][ T7396] RBP: 00007fcc2c369090 R08: 0000000000000000 R09: 0000000000000000 [ 148.059836][ T7396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 148.059847][ T7396] R13: 0000000000000000 R14: 00007fcc2b7a5fa0 R15: 00007ffdc2ab2db8 [ 148.059876][ T7396] [ 148.299850][ T7394] lo speed is unknown, defaulting to 1000 [ 148.435478][ T7401] __nla_validate_parse: 3 callbacks suppressed [ 148.435499][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.490'. [ 148.621822][ T7406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.493'. [ 148.776987][ T7411] netlink: 4 bytes leftover after parsing attributes in process `syz.0.494'. [ 149.407587][ T7430] netlink: 8 bytes leftover after parsing attributes in process `syz.2.496'. [ 149.418723][ T7430] netlink: 4 bytes leftover after parsing attributes in process `syz.2.496'. [ 149.429568][ T7430] netlink: 32 bytes leftover after parsing attributes in process `syz.2.496'. [ 149.486376][ T55] block nbd2: Receive control failed (result -107) [ 149.557575][ T7430] nbd2: detected capacity change from 0 to 256 [ 149.580600][ T5843] block nbd2: Dead connection, failed to find a fallback [ 149.638488][ T5843] block nbd2: shutting down sockets [ 149.643756][ T5843] blk_print_req_error: 27 callbacks suppressed [ 149.643773][ T5843] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.726228][ T5843] buffer_io_error: 27 callbacks suppressed [ 149.726250][ T5843] Buffer I/O error on dev nbd2, logical block 0, async page read [ 149.788903][ T5843] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.824419][ T5843] Buffer I/O error on dev nbd2, logical block 0, async page read [ 149.854788][ T5843] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.874867][ T5843] Buffer I/O error on dev nbd2, logical block 0, async page read [ 149.882848][ T5843] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 149.921775][ T7434] lo speed is unknown, defaulting to 1000 [ 149.955379][ T5843] Buffer I/O error on dev nbd2, logical block 0, async page read [ 149.983396][ T5843] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.018510][ T5843] Buffer I/O error on dev nbd2, logical block 0, async page read [ 150.055906][ T7444] FAULT_INJECTION: forcing a failure. [ 150.055906][ T7444] name failslab, interval 1, probability 0, space 0, times 0 [ 150.058673][ T7443] netlink: 76 bytes leftover after parsing attributes in process `syz.4.497'. [ 150.084549][ T5843] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.120580][ T5843] Buffer I/O error on dev nbd2, logical block 0, async page read [ 150.144262][ T7444] CPU: 1 UID: 0 PID: 7444 Comm: syz.3.500 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 150.144293][ T7444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 150.144306][ T7444] Call Trace: [ 150.144313][ T7444] [ 150.144322][ T7444] dump_stack_lvl+0x241/0x360 [ 150.144359][ T7444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.144389][ T7444] ? __pfx__printk+0x10/0x10 [ 150.144421][ T7444] ? __pfx___might_resched+0x10/0x10 [ 150.144450][ T7444] should_fail_ex+0x424/0x570 [ 150.144477][ T7444] should_failslab+0xac/0x100 [ 150.144507][ T7444] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 150.144538][ T7444] ? __alloc_skb+0x1c2/0x480 [ 150.144562][ T7444] __alloc_skb+0x1c2/0x480 [ 150.144587][ T7444] ? __pfx___alloc_skb+0x10/0x10 [ 150.144608][ T7444] ? netlink_autobind+0xd6/0x2f0 [ 150.144637][ T7444] ? netlink_autobind+0x2b0/0x2f0 [ 150.144671][ T7444] netlink_sendmsg+0x638/0xcd0 [ 150.144722][ T7444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.144757][ T7444] ? aa_sock_msg_perm+0x91/0x160 [ 150.144791][ T7444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.144818][ T7444] __sock_sendmsg+0x221/0x270 [ 150.144849][ T7444] ____sys_sendmsg+0x523/0x860 [ 150.144881][ T7444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.144899][ T7444] ? __fget_files+0x2a/0x420 [ 150.144922][ T7444] ? __fget_files+0x2a/0x420 [ 150.144951][ T7444] __sys_sendmmsg+0x3a0/0x7b0 [ 150.144986][ T7444] ? __pfx___sys_sendmmsg+0x10/0x10 [ 150.145047][ T7444] ? rcu_read_lock_any_held+0xbb/0x160 [ 150.145075][ T7444] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 150.145123][ T7444] ? vfs_write+0xb29/0xd10 [ 150.145158][ T7444] ? ksys_write+0x24e/0x2d0 [ 150.145186][ T7444] ? __mutex_unlock_slowpath+0x229/0x800 [ 150.145245][ T7444] ? ksys_write+0x275/0x2d0 [ 150.145283][ T7444] __x64_sys_sendmmsg+0xa0/0xb0 [ 150.145308][ T7444] do_syscall_64+0xf3/0x230 [ 150.145335][ T7444] ? clear_bhb_loop+0x45/0xa0 [ 150.145360][ T7444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.145381][ T7444] RIP: 0033:0x7f3849b8d169 [ 150.145400][ T7444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.145418][ T7444] RSP: 002b:00007f384a90a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 150.145441][ T7444] RAX: ffffffffffffffda RBX: 00007f3849da6080 RCX: 00007f3849b8d169 [ 150.145457][ T7444] RDX: 040000000000009f RSI: 00002000000002c0 RDI: 000000000000001d [ 150.145469][ T7444] RBP: 00007f384a90a090 R08: 0000000000000000 R09: 0000000000000000 [ 150.145480][ T7444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 150.145490][ T7444] R13: 0000000000000000 R14: 00007f3849da6080 R15: 00007fffc5c2fe08 [ 150.145517][ T7444] [ 150.146982][ T5843] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.445447][ T5843] Buffer I/O error on dev nbd2, logical block 0, async page read [ 150.490540][ T7456] netlink: 16 bytes leftover after parsing attributes in process `syz.4.497'. [ 150.557934][ T5843] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.584227][ T5843] Buffer I/O error on dev nbd2, logical block 0, async page read [ 150.671333][ T7462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.506'. [ 150.884506][ T5843] ldm_validate_partition_table(): Disk read failed. [ 150.891258][ T5843] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.916994][ T5843] Buffer I/O error on dev nbd2, logical block 0, async page read [ 150.939544][ T5843] I/O error, dev nbd2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 150.970993][ T5843] Buffer I/O error on dev nbd2, logical block 0, async page read [ 151.000596][ T5843] Dev nbd2: unable to read RDB block 0 [ 151.017853][ T5843] nbd2: unable to read partition table [ 151.056040][ T5843] ldm_validate_partition_table(): Disk read failed. [ 151.074728][ T5843] Dev nbd2: unable to read RDB block 0 [ 151.080966][ T5843] nbd2: unable to read partition table [ 151.291950][ T7453] lo speed is unknown, defaulting to 1000 [ 151.398755][ T7474] xt_hashlimit: size too large, truncated to 1048576 [ 151.526844][ T7472] syzkaller1: entered promiscuous mode [ 151.532498][ T7472] syzkaller1: entered allmulticast mode [ 151.697087][ T7477] hsr0: entered promiscuous mode [ 151.707983][ T7480] siw: device registration error -23 [ 151.929563][ T7489] netlink: 'syz.2.513': attribute type 4 has an invalid length. [ 151.986838][ T5895] lo speed is unknown, defaulting to 1000 [ 152.057415][ T7492] netlink: 'syz.1.514': attribute type 4 has an invalid length. [ 152.077409][ T7492] netlink: 'syz.1.514': attribute type 4 has an invalid length. [ 152.151802][ T7492] FAULT_INJECTION: forcing a failure. [ 152.151802][ T7492] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 152.214478][ T7492] CPU: 1 UID: 0 PID: 7492 Comm: syz.1.514 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 152.214507][ T7492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 152.214518][ T7492] Call Trace: [ 152.214533][ T7492] [ 152.214541][ T7492] dump_stack_lvl+0x241/0x360 [ 152.214574][ T7492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.214598][ T7492] ? __pfx__printk+0x10/0x10 [ 152.214632][ T7492] should_fail_ex+0x424/0x570 [ 152.214654][ T7492] _copy_from_user+0x2d/0xb0 [ 152.214680][ T7492] copy_from_sockptr+0x57/0xb0 [ 152.214703][ T7492] do_ip_setsockopt+0x21fa/0x39c0 [ 152.214731][ T7492] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 152.214754][ T7492] ? aa_sk_perm+0x96f/0xac0 [ 152.214782][ T7492] ? ksys_write+0x24e/0x2d0 [ 152.214802][ T7492] ? __pfx_aa_sk_perm+0x10/0x10 [ 152.214830][ T7492] ip_setsockopt+0x63/0x100 [ 152.214851][ T7492] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 152.214875][ T7492] do_sock_setsockopt+0x3b1/0x710 [ 152.214898][ T7492] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 152.214913][ T7492] ? __fget_files+0x2a/0x420 [ 152.214931][ T7492] ? __fget_files+0x39d/0x420 [ 152.214945][ T7492] ? __fget_files+0x2a/0x420 [ 152.214969][ T7492] __x64_sys_setsockopt+0x1ee/0x280 [ 152.214997][ T7492] do_syscall_64+0xf3/0x230 [ 152.215019][ T7492] ? clear_bhb_loop+0x45/0xa0 [ 152.215039][ T7492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 152.215055][ T7492] RIP: 0033:0x7f67a918d169 [ 152.215070][ T7492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 152.215084][ T7492] RSP: 002b:00007f67aa039038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 152.215102][ T7492] RAX: ffffffffffffffda RBX: 00007f67a93a5fa0 RCX: 00007f67a918d169 [ 152.215115][ T7492] RDX: 0000000000000024 RSI: 0000000000000000 RDI: 0000000000000003 [ 152.215124][ T7492] RBP: 00007f67aa039090 R08: 000000000000000c R09: 0000000000000000 [ 152.215139][ T7492] R10: 0000200000000440 R11: 0000000000000246 R12: 0000000000000001 [ 152.215150][ T7492] R13: 0000000000000000 R14: 00007f67a93a5fa0 R15: 00007fff31f58888 [ 152.215175][ T7492] [ 152.532402][ T7503] rdma_op ffff88802dd9b1f0 conn xmit_rdma 0000000000000000 [ 152.620795][ T7499] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.796161][ T7506] lo speed is unknown, defaulting to 1000 [ 152.925549][ T7514] siw: device registration error -23 [ 153.277973][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.0.526'. [ 154.298576][ T7551] rdma_op ffff88805ce899f0 conn xmit_rdma 0000000000000000 [ 154.468123][ T7563] siw: device registration error -23 [ 154.660282][ T7568] xt_CT: You must specify a L4 protocol and not use inversions on it [ 154.698582][ T7571] FAULT_INJECTION: forcing a failure. [ 154.698582][ T7571] name failslab, interval 1, probability 0, space 0, times 0 [ 154.712200][ T7571] CPU: 1 UID: 0 PID: 7571 Comm: syz.1.542 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 154.712228][ T7571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 154.712240][ T7571] Call Trace: [ 154.712248][ T7571] [ 154.712268][ T7571] dump_stack_lvl+0x241/0x360 [ 154.712305][ T7571] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.712335][ T7571] ? __pfx__printk+0x10/0x10 [ 154.712368][ T7571] ? __pfx___might_resched+0x10/0x10 [ 154.712397][ T7571] should_fail_ex+0x424/0x570 [ 154.712423][ T7571] should_failslab+0xac/0x100 [ 154.712454][ T7571] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 154.712483][ T7571] ? __alloc_skb+0x1c2/0x480 [ 154.712506][ T7571] __alloc_skb+0x1c2/0x480 [ 154.712524][ T7571] ? __kernel_text_address+0xd/0x40 [ 154.712544][ T7571] ? unwind_get_return_address+0x4d/0x90 [ 154.712573][ T7571] ? __pfx___alloc_skb+0x10/0x10 [ 154.712596][ T7571] ? __lock_acquire+0xad5/0xd80 [ 154.712623][ T7571] alloc_skb_with_frags+0xc3/0x830 [ 154.712660][ T7571] sock_alloc_send_pskb+0x91c/0xa70 [ 154.712703][ T7571] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 154.712734][ T7571] ? dev_get_by_index+0x23/0x2d0 [ 154.712760][ T7571] ? dev_get_by_index+0x23/0x2d0 [ 154.712789][ T7571] packet_sendmsg+0x4322/0x6ed0 [ 154.712840][ T7571] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 154.712894][ T7571] ? __pfx_packet_sendmsg+0x10/0x10 [ 154.712915][ T7571] ? aa_sk_perm+0x96f/0xac0 [ 154.712942][ T7571] ? __pfx_aa_sk_perm+0x10/0x10 [ 154.712962][ T7571] ? __import_iovec+0x585/0x830 [ 154.712986][ T7571] ? aa_sock_msg_perm+0x91/0x160 [ 154.713013][ T7571] ? __pfx_packet_sendmsg+0x10/0x10 [ 154.713034][ T7571] __sock_sendmsg+0x221/0x270 [ 154.713058][ T7571] ____sys_sendmsg+0x523/0x860 [ 154.713082][ T7571] ? __pfx_____sys_sendmsg+0x10/0x10 [ 154.713097][ T7571] ? __fget_files+0x2a/0x420 [ 154.713114][ T7571] ? __fget_files+0x2a/0x420 [ 154.713136][ T7571] __sys_sendmmsg+0x3a0/0x7b0 [ 154.713163][ T7571] ? __pfx___sys_sendmmsg+0x10/0x10 [ 154.713208][ T7571] ? rcu_read_lock_any_held+0xbb/0x160 [ 154.713230][ T7571] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 154.713276][ T7571] ? vfs_write+0xb29/0xd10 [ 154.713303][ T7571] ? ksys_write+0x24e/0x2d0 [ 154.713342][ T7571] ? __mutex_unlock_slowpath+0x229/0x800 [ 154.713388][ T7571] ? ksys_write+0x275/0x2d0 [ 154.713416][ T7571] __x64_sys_sendmmsg+0xa0/0xb0 [ 154.713436][ T7571] do_syscall_64+0xf3/0x230 [ 154.713458][ T7571] ? clear_bhb_loop+0x45/0xa0 [ 154.713478][ T7571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.713495][ T7571] RIP: 0033:0x7f67a918d169 [ 154.713512][ T7571] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 154.713526][ T7571] RSP: 002b:00007f67aa039038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 154.713546][ T7571] RAX: ffffffffffffffda RBX: 00007f67a93a5fa0 RCX: 00007f67a918d169 [ 154.713559][ T7571] RDX: 0000000000000001 RSI: 0000200000000440 RDI: 000000000000000d [ 154.713570][ T7571] RBP: 00007f67aa039090 R08: 0000000000000000 R09: 0000000000000000 [ 154.713581][ T7571] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 154.713591][ T7571] R13: 0000000000000000 R14: 00007f67a93a5fa0 R15: 00007fff31f58888 [ 154.713617][ T7571] [ 155.038890][ T7576] netlink: 36 bytes leftover after parsing attributes in process `syz.2.541'. [ 155.068630][ T7568] vlan0: entered allmulticast mode [ 155.073919][ T7568] veth0_to_batadv: entered allmulticast mode [ 155.095719][ T7568] bridge0: port 3(vlan0) entered blocking state [ 155.133685][ T7568] bridge0: port 3(vlan0) entered disabled state [ 155.159937][ T7568] vlan0: entered promiscuous mode [ 155.172206][ T7568] veth0_to_batadv: entered promiscuous mode [ 155.179944][ T7568] bridge0: port 3(vlan0) entered blocking state [ 155.186682][ T7568] bridge0: port 3(vlan0) entered forwarding state [ 155.208465][ T7572] netlink: 8 bytes leftover after parsing attributes in process `syz.2.541'. [ 155.283302][ T7576] netlink: 4 bytes leftover after parsing attributes in process `syz.2.541'. [ 155.329050][ T7572] Unknown options in mask 1f4 [ 155.354850][ T7575] netlink: 'syz.4.540': attribute type 1 has an invalid length. [ 155.678706][ T7601] netlink: 16 bytes leftover after parsing attributes in process `syz.1.549'. [ 155.689569][ T7600] siw: device registration error -23 [ 155.923816][ T7607] netlink: 8 bytes leftover after parsing attributes in process `syz.1.553'. [ 156.012444][ T7618] netlink: 36 bytes leftover after parsing attributes in process `syz.2.554'. [ 156.113677][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.2.554'. [ 156.157299][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.554'. [ 156.180355][ T7612] Unknown options in mask 1f4 [ 156.229165][ T7626] netlink: 24 bytes leftover after parsing attributes in process `syz.0.558'. [ 156.272742][ T7626] netlink: 32 bytes leftover after parsing attributes in process `syz.0.558'. [ 156.293545][ T7626] netem: unknown loss type 13 [ 156.299022][ T7626] netem: change failed [ 156.301529][ T7612] syz.2.554 (7612) used greatest stack depth: 18840 bytes left [ 156.547458][ T55] block nbd3: Receive control failed (result -107) [ 156.577002][ T7637] FAULT_INJECTION: forcing a failure. [ 156.577002][ T7637] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 156.593765][ T7637] CPU: 0 UID: 0 PID: 7637 Comm: syz.3.563 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 156.593798][ T7637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 156.593812][ T7637] Call Trace: [ 156.593821][ T7637] [ 156.593829][ T7637] dump_stack_lvl+0x241/0x360 [ 156.593869][ T7637] ? __pfx_dump_stack_lvl+0x10/0x10 [ 156.593900][ T7637] ? __pfx__printk+0x10/0x10 [ 156.593945][ T7637] should_fail_ex+0x424/0x570 [ 156.593972][ T7637] _copy_from_user+0x2d/0xb0 [ 156.594004][ T7637] copy_msghdr_from_user+0xb3/0x580 [ 156.594039][ T7637] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 156.594065][ T7637] ? __fget_files+0x2a/0x420 [ 156.594088][ T7637] ? __fget_files+0x2a/0x420 [ 156.594121][ T7637] __sys_sendmsg+0x20a/0x360 [ 156.594149][ T7637] ? __pfx___sys_sendmsg+0x10/0x10 [ 156.594238][ T7637] ? do_syscall_64+0xb6/0x230 [ 156.594269][ T7637] do_syscall_64+0xf3/0x230 [ 156.594295][ T7637] ? clear_bhb_loop+0x45/0xa0 [ 156.594321][ T7637] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 156.594342][ T7637] RIP: 0033:0x7f3849b8d169 [ 156.594361][ T7637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 156.594379][ T7637] RSP: 002b:00007f384a92b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 156.594402][ T7637] RAX: ffffffffffffffda RBX: 00007f3849da5fa0 RCX: 00007f3849b8d169 [ 156.594418][ T7637] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 156.594432][ T7637] RBP: 00007f384a92b090 R08: 0000000000000000 R09: 0000000000000000 [ 156.594447][ T7637] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 156.594460][ T7637] R13: 0000000000000000 R14: 00007f3849da5fa0 R15: 00007fffc5c2fe08 [ 156.594493][ T7637] [ 156.614207][ T7640] siw: device registration error -23 [ 156.652371][ T7632] nbd3: detected capacity change from 0 to 256 [ 156.790206][ T5843] block nbd3: Dead connection, failed to find a fallback [ 156.802967][ T5843] block nbd3: shutting down sockets [ 156.838322][ T5843] blk_print_req_error: 27 callbacks suppressed [ 156.838342][ T5843] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.863606][ T5843] buffer_io_error: 27 callbacks suppressed [ 156.863624][ T5843] Buffer I/O error on dev nbd3, logical block 0, async page read [ 156.889893][ T5843] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.918820][ T5843] Buffer I/O error on dev nbd3, logical block 0, async page read [ 156.987268][ T5843] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 156.996949][ T5843] Buffer I/O error on dev nbd3, logical block 0, async page read [ 157.009312][ T5843] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 157.022529][ T5843] Buffer I/O error on dev nbd3, logical block 0, async page read [ 157.093047][ T5843] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 157.166316][ T5843] Buffer I/O error on dev nbd3, logical block 0, async page read [ 157.195054][ T5843] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 157.241919][ T5843] Buffer I/O error on dev nbd3, logical block 0, async page read [ 157.251197][ T5843] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 157.305731][ T5843] Buffer I/O error on dev nbd3, logical block 0, async page read [ 157.343028][ T7664] Unknown options in mask 1f4 [ 157.365941][ T5843] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 157.380582][ T7667] netlink: 'syz.0.574': attribute type 9 has an invalid length. [ 157.400328][ T5843] Buffer I/O error on dev nbd3, logical block 0, async page read [ 157.452347][ T5843] ldm_validate_partition_table(): Disk read failed. [ 157.460067][ T5843] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 157.470025][ T5843] Buffer I/O error on dev nbd3, logical block 0, async page read [ 157.496329][ T7670] netlink: 'syz.3.572': attribute type 1 has an invalid length. [ 157.521400][ T5843] I/O error, dev nbd3, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 157.534270][ T5843] Buffer I/O error on dev nbd3, logical block 0, async page read [ 157.551678][ T5843] Dev nbd3: unable to read RDB block 0 [ 157.566586][ T5843] nbd3: unable to read partition table [ 157.579223][ T7670] xt_socket: unknown flags 0xd0 [ 157.612673][ T5843] ldm_validate_partition_table(): Disk read failed. [ 157.645436][ T5843] Dev nbd3: unable to read RDB block 0 [ 157.651647][ T5843] nbd3: unable to read partition table [ 157.683016][ T7673] syzkaller1: entered promiscuous mode [ 157.725971][ T7673] syzkaller1: entered allmulticast mode [ 158.038706][ T7694] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 33554432, id = 0 [ 158.437279][ C0] Illegal XDP return value 16128 on prog (id 150) dev hsr_slave_1, expect packet loss! [ 158.545609][ T7705] Unknown options in mask 1f4 [ 158.722617][ T5919] IPVS: starting estimator thread 0... [ 158.864612][ T7720] IPVS: using max 26 ests per chain, 62400 per kthread [ 159.083105][ T7729] siw: device registration error -23 [ 159.503935][ T7741] syzkaller1: entered promiscuous mode [ 159.518128][ T7741] syzkaller1: entered allmulticast mode [ 160.962109][ T7799] __nla_validate_parse: 11 callbacks suppressed [ 160.962129][ T7799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 161.022050][ T7803] FAULT_INJECTION: forcing a failure. [ 161.022050][ T7803] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 161.053628][ T7803] CPU: 1 UID: 0 PID: 7803 Comm: syz.2.624 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 161.053661][ T7803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.053674][ T7803] Call Trace: [ 161.053690][ T7803] [ 161.053699][ T7803] dump_stack_lvl+0x241/0x360 [ 161.053738][ T7803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.053769][ T7803] ? __pfx__printk+0x10/0x10 [ 161.053811][ T7803] should_fail_ex+0x424/0x570 [ 161.053844][ T7803] _copy_from_iter+0x211/0x1c70 [ 161.053878][ T7803] ? __build_skb_around+0x247/0x3d0 [ 161.053916][ T7803] ? __alloc_skb+0x298/0x480 [ 161.053935][ T7803] ? __pfx__copy_from_iter+0x10/0x10 [ 161.053966][ T7803] ? __pfx___alloc_skb+0x10/0x10 [ 161.053988][ T7803] ? skb_put+0x114/0x1f0 [ 161.054013][ T7803] netlink_sendmsg+0x73c/0xcd0 [ 161.054058][ T7803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.054092][ T7803] ? aa_sock_msg_perm+0x91/0x160 [ 161.054126][ T7803] ? __pfx_netlink_sendmsg+0x10/0x10 [ 161.054154][ T7803] __sock_sendmsg+0x221/0x270 [ 161.054196][ T7803] ____sys_sendmsg+0x523/0x860 [ 161.054227][ T7803] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.054245][ T7803] ? __fget_files+0x2a/0x420 [ 161.054267][ T7803] ? __fget_files+0x2a/0x420 [ 161.054295][ T7803] __sys_sendmsg+0x271/0x360 [ 161.054321][ T7803] ? __pfx___sys_sendmsg+0x10/0x10 [ 161.054398][ T7803] ? do_syscall_64+0xb6/0x230 [ 161.054428][ T7803] do_syscall_64+0xf3/0x230 [ 161.054453][ T7803] ? clear_bhb_loop+0x45/0xa0 [ 161.054478][ T7803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.054498][ T7803] RIP: 0033:0x7f002278d169 [ 161.054517][ T7803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.054535][ T7803] RSP: 002b:00007f0023585038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 161.054558][ T7803] RAX: ffffffffffffffda RBX: 00007f00229a5fa0 RCX: 00007f002278d169 [ 161.054573][ T7803] RDX: 0000000000040010 RSI: 00002000000012c0 RDI: 0000000000000003 [ 161.054587][ T7803] RBP: 00007f0023585090 R08: 0000000000000000 R09: 0000000000000000 [ 161.054600][ T7803] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 161.054612][ T7803] R13: 0000000000000000 R14: 00007f00229a5fa0 R15: 00007ffd37a47728 [ 161.054645][ T7803] [ 161.324480][ T7808] FAULT_INJECTION: forcing a failure. [ 161.324480][ T7808] name failslab, interval 1, probability 0, space 0, times 0 [ 161.340319][ T7808] CPU: 1 UID: 0 PID: 7808 Comm: syz.3.626 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 161.340349][ T7808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 161.340362][ T7808] Call Trace: [ 161.340369][ T7808] [ 161.340378][ T7808] dump_stack_lvl+0x241/0x360 [ 161.340413][ T7808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 161.340441][ T7808] ? __pfx__printk+0x10/0x10 [ 161.340480][ T7808] should_fail_ex+0x424/0x570 [ 161.340508][ T7808] should_failslab+0xac/0x100 [ 161.340534][ T7808] __kmalloc_cache_noprof+0x73/0x370 [ 161.340559][ T7808] ? sctp_add_bind_addr+0x89/0x3a0 [ 161.340588][ T7808] sctp_add_bind_addr+0x89/0x3a0 [ 161.340614][ T7808] sctp_copy_local_addr_list+0x313/0x500 [ 161.340640][ T7808] ? sctp_copy_local_addr_list+0xad/0x500 [ 161.340671][ T7808] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 161.340695][ T7808] ? sctp_v6_is_any+0x60/0x70 [ 161.340719][ T7808] ? sctp_copy_one_addr+0x94/0x360 [ 161.340745][ T7808] sctp_bind_addr_copy+0xad/0x3b0 [ 161.340766][ T7808] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 161.340789][ T7808] sctp_connect_new_asoc+0x337/0x700 [ 161.340809][ T7808] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 161.340824][ T7808] ? sctp_sendmsg+0xf30/0x3620 [ 161.340854][ T7808] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 161.340869][ T7808] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 161.340890][ T7808] sctp_sendmsg+0x2009/0x3620 [ 161.340936][ T7808] ? __pfx_sctp_sendmsg+0x10/0x10 [ 161.340964][ T7808] ? aa_sk_perm+0x96f/0xac0 [ 161.341000][ T7808] ? inet_sendmsg+0x330/0x390 [ 161.341022][ T7808] __sock_sendmsg+0x1a6/0x270 [ 161.341047][ T7808] ____sys_sendmsg+0x523/0x860 [ 161.341072][ T7808] ? __pfx_____sys_sendmsg+0x10/0x10 [ 161.341088][ T7808] ? __fget_files+0x2a/0x420 [ 161.341106][ T7808] ? __fget_files+0x2a/0x420 [ 161.341129][ T7808] __sys_sendmmsg+0x3a0/0x7b0 [ 161.341159][ T7808] ? __pfx___sys_sendmmsg+0x10/0x10 [ 161.341211][ T7808] ? rcu_read_lock_any_held+0xbb/0x160 [ 161.341239][ T7808] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 161.341263][ T7808] ? vfs_write+0xb29/0xd10 [ 161.341291][ T7808] ? ksys_write+0x24e/0x2d0 [ 161.341312][ T7808] ? __mutex_unlock_slowpath+0x229/0x800 [ 161.341359][ T7808] ? ksys_write+0x275/0x2d0 [ 161.341388][ T7808] __x64_sys_sendmmsg+0xa0/0xb0 [ 161.341407][ T7808] do_syscall_64+0xf3/0x230 [ 161.341428][ T7808] ? clear_bhb_loop+0x45/0xa0 [ 161.341448][ T7808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.341464][ T7808] RIP: 0033:0x7f3849b8d169 [ 161.341479][ T7808] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 161.341493][ T7808] RSP: 002b:00007f384a92b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 161.341512][ T7808] RAX: ffffffffffffffda RBX: 00007f3849da5fa0 RCX: 00007f3849b8d169 [ 161.341524][ T7808] RDX: 0000000000000005 RSI: 0000200000001800 RDI: 0000000000000003 [ 161.341535][ T7808] RBP: 00007f384a92b090 R08: 0000000000000000 R09: 0000000000000000 [ 161.341545][ T7808] R10: 000000002004c040 R11: 0000000000000246 R12: 0000000000000002 [ 161.341556][ T7808] R13: 0000000000000000 R14: 00007f3849da5fa0 R15: 00007fffc5c2fe08 [ 161.341582][ T7808] [ 161.756923][ T7809] syzkaller1: entered promiscuous mode [ 161.810486][ T7809] syzkaller1: entered allmulticast mode [ 161.822801][ T7816] netlink: 20 bytes leftover after parsing attributes in process `syz.2.629'. [ 162.036955][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.2.633'. [ 162.102873][ T7836] FAULT_INJECTION: forcing a failure. [ 162.102873][ T7836] name failslab, interval 1, probability 0, space 0, times 0 [ 162.124579][ T7836] CPU: 1 UID: 0 PID: 7836 Comm: syz.3.634 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 162.124610][ T7836] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 162.124623][ T7836] Call Trace: [ 162.124632][ T7836] [ 162.124640][ T7836] dump_stack_lvl+0x241/0x360 [ 162.124678][ T7836] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.124708][ T7836] ? __pfx__printk+0x10/0x10 [ 162.124736][ T7836] ? __lock_acquire+0xad5/0xd80 [ 162.124773][ T7836] should_fail_ex+0x424/0x570 [ 162.124799][ T7836] should_failslab+0xac/0x100 [ 162.124830][ T7836] kmem_cache_alloc_noprof+0x78/0x390 [ 162.124858][ T7836] ? skb_clone+0x20c/0x390 [ 162.124887][ T7836] skb_clone+0x20c/0x390 [ 162.124914][ T7836] __netlink_deliver_tap+0x3c4/0x7f0 [ 162.124957][ T7836] ? netlink_deliver_tap+0x2e/0x1b0 [ 162.124985][ T7836] netlink_deliver_tap+0x19d/0x1b0 [ 162.125014][ T7836] netlink_unicast+0x7c6/0x9a0 [ 162.125048][ T7836] ? __pfx_netlink_unicast+0x10/0x10 [ 162.125076][ T7836] ? skb_put+0x114/0x1f0 [ 162.125099][ T7836] netlink_sendmsg+0x8c3/0xcd0 [ 162.125142][ T7836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.125175][ T7836] ? aa_sock_msg_perm+0x91/0x160 [ 162.125229][ T7836] ? __pfx_netlink_sendmsg+0x10/0x10 [ 162.125257][ T7836] __sock_sendmsg+0x221/0x270 [ 162.125288][ T7836] ____sys_sendmsg+0x523/0x860 [ 162.125321][ T7836] ? __pfx_____sys_sendmsg+0x10/0x10 [ 162.125341][ T7836] ? __fget_files+0x2a/0x420 [ 162.125364][ T7836] ? __fget_files+0x2a/0x420 [ 162.125393][ T7836] __sys_sendmsg+0x271/0x360 [ 162.125420][ T7836] ? __pfx___sys_sendmsg+0x10/0x10 [ 162.125500][ T7836] ? do_syscall_64+0xb6/0x230 [ 162.125529][ T7836] do_syscall_64+0xf3/0x230 [ 162.125555][ T7836] ? clear_bhb_loop+0x45/0xa0 [ 162.125589][ T7836] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.125610][ T7836] RIP: 0033:0x7f3849b8d169 [ 162.125629][ T7836] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.125647][ T7836] RSP: 002b:00007f384a92b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 162.125670][ T7836] RAX: ffffffffffffffda RBX: 00007f3849da5fa0 RCX: 00007f3849b8d169 [ 162.125685][ T7836] RDX: 0000000000044000 RSI: 00002000000001c0 RDI: 0000000000000003 [ 162.125700][ T7836] RBP: 00007f384a92b090 R08: 0000000000000000 R09: 0000000000000000 [ 162.125712][ T7836] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 162.125725][ T7836] R13: 0000000000000000 R14: 00007f3849da5fa0 R15: 00007fffc5c2fe08 [ 162.125759][ T7836] [ 162.520330][ T7842] veth0_to_bridge: entered promiscuous mode [ 162.980389][ T7868] netlink: 4 bytes leftover after parsing attributes in process `syz.3.645'. [ 163.123991][ T7871] FAULT_INJECTION: forcing a failure. [ 163.123991][ T7871] name failslab, interval 1, probability 0, space 0, times 0 [ 163.137648][ T7871] CPU: 1 UID: 0 PID: 7871 Comm: syz.3.647 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 163.137675][ T7871] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 163.137688][ T7871] Call Trace: [ 163.137696][ T7871] [ 163.137704][ T7871] dump_stack_lvl+0x241/0x360 [ 163.137739][ T7871] ? __pfx_dump_stack_lvl+0x10/0x10 [ 163.137765][ T7871] ? __pfx__printk+0x10/0x10 [ 163.137796][ T7871] should_fail_ex+0x424/0x570 [ 163.137817][ T7871] should_failslab+0xac/0x100 [ 163.137840][ T7871] kmem_cache_alloc_noprof+0x78/0x390 [ 163.137863][ T7871] ? skb_clone+0x20c/0x390 [ 163.137888][ T7871] skb_clone+0x20c/0x390 [ 163.137908][ T7871] __netlink_deliver_tap+0x3c4/0x7f0 [ 163.137939][ T7871] ? netlink_deliver_tap+0x2e/0x1b0 [ 163.137964][ T7871] netlink_deliver_tap+0x19d/0x1b0 [ 163.137987][ T7871] netlink_dump+0x8e6/0xeb0 [ 163.138018][ T7871] ? __pfx_netlink_dump+0x10/0x10 [ 163.138052][ T7871] ? netlink_recvmsg+0x620/0x1180 [ 163.138076][ T7871] ? netlink_recvmsg+0x620/0x1180 [ 163.138101][ T7871] netlink_recvmsg+0x6c7/0x1180 [ 163.138121][ T7871] ? __lock_acquire+0xad5/0xd80 [ 163.138144][ T7871] ? __pfx_netlink_recvmsg+0x10/0x10 [ 163.138169][ T7871] ? __lock_acquire+0xad5/0xd80 [ 163.138196][ T7871] ? __import_iovec+0x3c2/0x830 [ 163.138218][ T7871] ? __pfx_netlink_recvmsg+0x10/0x10 [ 163.138242][ T7871] sock_recvmsg_nosec+0x18e/0x1d0 [ 163.138266][ T7871] ____sys_recvmsg+0x3d4/0x480 [ 163.138289][ T7871] ? __pfx_____sys_recvmsg+0x10/0x10 [ 163.138324][ T7871] do_recvmmsg+0x428/0xab0 [ 163.138350][ T7871] ? __pfx_do_recvmmsg+0x10/0x10 [ 163.138380][ T7871] ? rcu_read_lock_any_held+0xbb/0x160 [ 163.138401][ T7871] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 163.138424][ T7871] ? vfs_write+0xb29/0xd10 [ 163.138449][ T7871] ? ksys_write+0x24e/0x2d0 [ 163.138469][ T7871] ? __mutex_unlock_slowpath+0x229/0x800 [ 163.138497][ T7871] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 163.138519][ T7871] ? __fget_files+0x2a/0x420 [ 163.138545][ T7871] __x64_sys_recvmmsg+0x1ab/0x260 [ 163.138570][ T7871] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 163.138593][ T7871] ? do_syscall_64+0xb6/0x230 [ 163.138614][ T7871] do_syscall_64+0xf3/0x230 [ 163.138633][ T7871] ? clear_bhb_loop+0x45/0xa0 [ 163.138651][ T7871] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 163.138666][ T7871] RIP: 0033:0x7f3849b8d169 [ 163.138679][ T7871] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 163.138693][ T7871] RSP: 002b:00007f384a92b038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 163.138710][ T7871] RAX: ffffffffffffffda RBX: 00007f3849da5fa0 RCX: 00007f3849b8d169 [ 163.138722][ T7871] RDX: 0000000000000300 RSI: 0000200000001640 RDI: 0000000000000004 [ 163.138732][ T7871] RBP: 00007f384a92b090 R08: 0000000000000000 R09: 0000000000000000 [ 163.138742][ T7871] R10: 0000000000034000 R11: 0000000000000246 R12: 0000000000000002 [ 163.138751][ T7871] R13: 0000000000000000 R14: 00007f3849da5fa0 R15: 00007fffc5c2fe08 [ 163.138775][ T7871] [ 163.470958][ T7841] veth0_to_bridge: left promiscuous mode [ 163.690304][ T7882] netlink: 24 bytes leftover after parsing attributes in process `syz.2.650'. [ 164.032730][ T7898] netlink: 'syz.4.653': attribute type 1 has an invalid length. [ 164.051265][ T5843] udevd[5843]: setting mode of /dev/nbd64 to 060660 failed: No such file or directory [ 164.093973][ T5843] udevd[5843]: setting owner of /dev/nbd64 to uid=0, gid=6 failed: No such file or directory [ 164.118913][ T7904] netlink: 12 bytes leftover after parsing attributes in process `syz.2.654'. [ 164.167217][ T7904] netlink: 8 bytes leftover after parsing attributes in process `syz.2.654'. [ 164.240470][ T7904] netlink: 'syz.2.654': attribute type 1 has an invalid length. [ 164.254308][ T7904] netlink: 224 bytes leftover after parsing attributes in process `syz.2.654'. [ 164.491757][ T7910] netlink: 20 bytes leftover after parsing attributes in process `syz.4.658'. [ 164.502549][ T7914] netlink: 20 bytes leftover after parsing attributes in process `syz.4.658'. [ 165.125278][ T7941] FAULT_INJECTION: forcing a failure. [ 165.125278][ T7941] name failslab, interval 1, probability 0, space 0, times 0 [ 165.170906][ T7941] CPU: 1 UID: 0 PID: 7941 Comm: syz.2.666 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 165.170936][ T7941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 165.170948][ T7941] Call Trace: [ 165.170956][ T7941] [ 165.170965][ T7941] dump_stack_lvl+0x241/0x360 [ 165.171002][ T7941] ? __pfx_dump_stack_lvl+0x10/0x10 [ 165.171030][ T7941] ? __pfx__printk+0x10/0x10 [ 165.171063][ T7941] ? __pfx___might_resched+0x10/0x10 [ 165.171091][ T7941] should_fail_ex+0x424/0x570 [ 165.171118][ T7941] should_failslab+0xac/0x100 [ 165.171147][ T7941] kmem_cache_alloc_noprof+0x78/0x390 [ 165.171174][ T7941] ? mas_alloc_nodes+0x267/0x7e0 [ 165.171202][ T7941] mas_alloc_nodes+0x267/0x7e0 [ 165.171234][ T7941] mas_preallocate+0x5ea/0x950 [ 165.171262][ T7941] ? __pfx_mas_preallocate+0x10/0x10 [ 165.171290][ T7941] ? __pfx_mas_next_range+0x10/0x10 [ 165.171320][ T7941] ? __mas_set_range+0x133/0x3c0 [ 165.171370][ T7941] expand_downwards+0x476/0xc30 [ 165.171404][ T7941] ? fault_in_readable+0x177/0x2e0 [ 165.171440][ T7941] ? __pfx_expand_downwards+0x10/0x10 [ 165.171475][ T7941] ? __pfx_find_vma+0x10/0x10 [ 165.171506][ T7941] ? fault_in_readable+0x177/0x2e0 [ 165.171546][ T7941] lock_mm_and_find_vma+0x1b4/0x2f0 [ 165.171579][ T7941] exc_page_fault+0x1c1/0x920 [ 165.171613][ T7941] asm_exc_page_fault+0x26/0x30 [ 165.171633][ T7941] RIP: 0010:fault_in_readable+0x177/0x2e0 [ 165.171662][ T7941] Code: 49 81 c5 ff 0f 00 00 49 81 e5 00 f0 ff ff 49 39 c5 0f 82 85 00 00 00 e8 87 06 b3 ff 4c 39 eb 0f 84 88 00 00 00 4c 89 64 24 10 <44> 8a 23 43 0f b6 04 3e 84 c0 75 18 44 88 64 24 40 48 81 c3 00 10 [ 165.171680][ T7941] RSP: 0018:ffffc90003d8fa00 EFLAGS: 00050287 [ 165.171700][ T7941] RAX: ffffffff821050b9 RBX: 0000200000002000 RCX: ffff88802db83c00 [ 165.171716][ T7941] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 165.171728][ T7941] RBP: ffffc90003d8fab8 R08: ffffffff82105050 R09: ffffffff85022d79 [ 165.171744][ T7941] R10: 0000000000000002 R11: ffff88802db83c00 R12: 0000000000000040 [ 165.171757][ T7941] R13: 0000200000003000 R14: 1ffff920007b1f48 R15: dffffc0000000000 [ 165.171781][ T7941] ? fault_in_iov_iter_readable+0x49/0x280 [ 165.171806][ T7941] ? fault_in_readable+0x100/0x2e0 [ 165.171834][ T7941] ? fault_in_readable+0x169/0x2e0 [ 165.171880][ T7941] ? __pfx_fault_in_readable+0x10/0x10 [ 165.171914][ T7941] ? folio_unlock+0x10e/0x170 [ 165.171945][ T7941] fault_in_iov_iter_readable+0x229/0x280 [ 165.171976][ T7941] generic_perform_write+0x8a4/0xa10 [ 165.172026][ T7941] ? __pfx_generic_perform_write+0x10/0x10 [ 165.172061][ T7941] ? mnt_put_write_access_file+0xbf/0x100 [ 165.172088][ T7941] ? file_update_time+0x3dd/0x450 [ 165.172118][ T7941] shmem_file_write_iter+0xf9/0x120 [ 165.172141][ T7941] vfs_write+0x70f/0xd10 [ 165.172175][ T7941] ? __pfx_shmem_file_write_iter+0x10/0x10 [ 165.172199][ T7941] ? __pfx_vfs_write+0x10/0x10 [ 165.172227][ T7941] ? __fget_files+0x2a/0x420 [ 165.172249][ T7941] ? __fget_files+0x2a/0x420 [ 165.172298][ T7941] ksys_write+0x19d/0x2d0 [ 165.172331][ T7941] ? __pfx_ksys_write+0x10/0x10 [ 165.172363][ T7941] ? do_syscall_64+0xb6/0x230 [ 165.172392][ T7941] do_syscall_64+0xf3/0x230 [ 165.172418][ T7941] ? clear_bhb_loop+0x45/0xa0 [ 165.172443][ T7941] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 165.172463][ T7941] RIP: 0033:0x7f002278d169 [ 165.172481][ T7941] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 165.172498][ T7941] RSP: 002b:00007f0023585038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 165.172519][ T7941] RAX: ffffffffffffffda RBX: 00007f00229a5fa0 RCX: 00007f002278d169 [ 165.172534][ T7941] RDX: 000000000000fea0 RSI: 0000200000000040 RDI: 0000000000000005 [ 165.172547][ T7941] RBP: 00007f0023585090 R08: 0000000000000000 R09: 0000000000000000 [ 165.172561][ T7941] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 165.172573][ T7941] R13: 0000000000000000 R14: 00007f00229a5fa0 R15: 00007ffd37a47728 [ 165.172607][ T7941] [ 166.087443][ T7978] team0: Device ipvlan2 failed to register rx_handler [ 166.159961][ T7977] lo speed is unknown, defaulting to 1000 [ 166.438845][ T7987] __nla_validate_parse: 3 callbacks suppressed [ 166.438866][ T7987] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.679'. [ 166.758518][ T8001] netlink: 4 bytes leftover after parsing attributes in process `syz.2.683'. [ 166.885930][ T8010] netlink: 56 bytes leftover after parsing attributes in process `syz.1.685'. [ 166.940728][ T8010] netlink: 12 bytes leftover after parsing attributes in process `syz.1.685'. [ 167.362035][ T7990] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 167.378798][ T8021] rdma_op ffff88805de2b9f0 conn xmit_rdma 0000000000000000 [ 167.590217][ T8028] bridge0: port 3(hsr0) entered blocking state [ 167.606678][ T8028] bridge0: port 3(hsr0) entered disabled state [ 167.621173][ T8028] hsr0: entered allmulticast mode [ 167.634616][ T8028] hsr_slave_0: entered allmulticast mode [ 167.671304][ T8028] hsr_slave_1: entered allmulticast mode [ 167.698142][ T8028] hsr0: entered promiscuous mode [ 167.724204][ T8028] bridge0: port 3(hsr0) entered blocking state [ 167.730555][ T8028] bridge0: port 3(hsr0) entered forwarding state [ 167.899436][ T8042] FAULT_INJECTION: forcing a failure. [ 167.899436][ T8042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 167.918875][ T8042] CPU: 1 UID: 0 PID: 8042 Comm: syz.0.695 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 167.918905][ T8042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 167.918917][ T8042] Call Trace: [ 167.918925][ T8042] [ 167.918933][ T8042] dump_stack_lvl+0x241/0x360 [ 167.918969][ T8042] ? __pfx_dump_stack_lvl+0x10/0x10 [ 167.918997][ T8042] ? __pfx__printk+0x10/0x10 [ 167.919036][ T8042] should_fail_ex+0x424/0x570 [ 167.919062][ T8042] _copy_from_user+0x2d/0xb0 [ 167.919090][ T8042] copy_msghdr_from_user+0xb3/0x580 [ 167.919129][ T8042] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 167.919152][ T8042] ? __fget_files+0x2a/0x420 [ 167.919173][ T8042] ? __fget_files+0x2a/0x420 [ 167.919200][ T8042] __sys_sendmsg+0x20a/0x360 [ 167.919227][ T8042] ? __pfx___sys_sendmsg+0x10/0x10 [ 167.919301][ T8042] ? do_syscall_64+0xb6/0x230 [ 167.919340][ T8042] do_syscall_64+0xf3/0x230 [ 167.919362][ T8042] ? clear_bhb_loop+0x45/0xa0 [ 167.919384][ T8042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 167.919402][ T8042] RIP: 0033:0x7fbbfdd8d169 [ 167.919417][ T8042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 167.919433][ T8042] RSP: 002b:00007fbbfbbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 167.919453][ T8042] RAX: ffffffffffffffda RBX: 00007fbbfdfa5fa0 RCX: 00007fbbfdd8d169 [ 167.919466][ T8042] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000003 [ 167.919478][ T8042] RBP: 00007fbbfbbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 167.919489][ T8042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 167.919500][ T8042] R13: 0000000000000000 R14: 00007fbbfdfa5fa0 R15: 00007fff29152af8 [ 167.919527][ T8042] [ 168.290626][ T8050] bond_slave_0: entered promiscuous mode [ 168.296576][ T8050] bond_slave_1: entered promiscuous mode [ 168.304966][ T8050] vlan2: entered promiscuous mode [ 168.310138][ T8050] bond0: entered promiscuous mode [ 168.397527][ T8053] netlink: 8 bytes leftover after parsing attributes in process `syz.0.698'. [ 168.422791][ T8053] netlink: 1004 bytes leftover after parsing attributes in process `syz.0.698'. [ 168.526754][ T8053] netlink: 4 bytes leftover after parsing attributes in process `syz.0.698'. [ 168.543626][ T8060] netlink: 'syz.2.701': attribute type 21 has an invalid length. [ 168.563238][ T8060] netlink: 'syz.2.701': attribute type 15 has an invalid length. [ 168.586857][ T8060] netlink: 156 bytes leftover after parsing attributes in process `syz.2.701'. [ 168.599120][ T55] Bluetooth: hci1: command 0x0401 tx timeout [ 168.613492][ T8060] IPv6: NLM_F_CREATE should be specified when creating new route [ 168.625355][ T8060] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 168.633014][ T8060] IPv6: NLM_F_CREATE should be set when creating new route [ 168.640330][ T8060] IPv6: NLM_F_CREATE should be set when creating new route [ 168.647602][ T8060] IPv6: NLM_F_CREATE should be set when creating new route [ 168.747982][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.1.700'. [ 168.951935][ T8068] netlink: 20 bytes leftover after parsing attributes in process `syz.4.704'. [ 168.999360][ T8071] netlink: 'syz.2.706': attribute type 7 has an invalid length. [ 169.214878][ T8082] siw: device registration error -23 [ 170.504256][ T8131] bond0: option all_slaves_active: invalid value (7) [ 170.743481][ T8145] FAULT_INJECTION: forcing a failure. [ 170.743481][ T8145] name failslab, interval 1, probability 0, space 0, times 0 [ 170.778820][ T8145] CPU: 1 UID: 0 PID: 8145 Comm: syz.4.732 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 170.778850][ T8145] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 170.778863][ T8145] Call Trace: [ 170.778871][ T8145] [ 170.778879][ T8145] dump_stack_lvl+0x241/0x360 [ 170.778914][ T8145] ? __pfx_dump_stack_lvl+0x10/0x10 [ 170.778943][ T8145] ? __pfx__printk+0x10/0x10 [ 170.778973][ T8145] ? __pfx___might_resched+0x10/0x10 [ 170.779005][ T8145] should_fail_ex+0x424/0x570 [ 170.779031][ T8145] should_failslab+0xac/0x100 [ 170.779059][ T8145] __kmalloc_cache_noprof+0x73/0x370 [ 170.779085][ T8145] ? rtnl_newlink+0x144/0x1fe0 [ 170.779117][ T8145] rtnl_newlink+0x144/0x1fe0 [ 170.779145][ T8145] ? stack_depot_save_flags+0x44/0x940 [ 170.779179][ T8145] ? kasan_save_track+0x51/0x80 [ 170.779198][ T8145] ? kasan_save_track+0x3f/0x80 [ 170.779220][ T8145] ? __pfx_rtnl_newlink+0x10/0x10 [ 170.779245][ T8145] ? dev_hard_start_xmit+0x2d9/0x830 [ 170.779264][ T8145] ? __dev_queue_xmit+0x1b80/0x3f60 [ 170.779284][ T8145] ? __netlink_deliver_tap+0x561/0x7f0 [ 170.779310][ T8145] ? netlink_deliver_tap+0x19d/0x1b0 [ 170.779334][ T8145] ? netlink_unicast+0x7c6/0x9a0 [ 170.779355][ T8145] ? netlink_sendmsg+0x8c3/0xcd0 [ 170.779379][ T8145] ? __sock_sendmsg+0x221/0x270 [ 170.779402][ T8145] ? ____sys_sendmsg+0x523/0x860 [ 170.779419][ T8145] ? __sys_sendmsg+0x271/0x360 [ 170.779436][ T8145] ? do_syscall_64+0xf3/0x230 [ 170.779458][ T8145] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.779512][ T8145] ? kasan_quarantine_put+0xdc/0x230 [ 170.779533][ T8145] ? lockdep_hardirqs_on+0x9d/0x150 [ 170.779558][ T8145] ? nlmon_xmit+0xaf/0x100 [ 170.779594][ T8145] ? __local_bh_enable_ip+0x168/0x200 [ 170.779612][ T8145] ? lockdep_hardirqs_on+0x9d/0x150 [ 170.779642][ T8145] ? aa_get_newest_label+0x101/0x6f0 [ 170.779676][ T8145] ? __lock_acquire+0xad5/0xd80 [ 170.779718][ T8145] ? __pfx_rtnl_newlink+0x10/0x10 [ 170.779746][ T8145] rtnetlink_rcv_msg+0x80f/0xd70 [ 170.779780][ T8145] ? rtnetlink_rcv_msg+0x1ba/0xd70 [ 170.779811][ T8145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.779844][ T8145] ? ref_tracker_free+0x63e/0x7e0 [ 170.779873][ T8145] netlink_rcv_skb+0x208/0x480 [ 170.779900][ T8145] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 170.779929][ T8145] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 170.779973][ T8145] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.780003][ T8145] ? netlink_deliver_tap+0x2e/0x1b0 [ 170.780033][ T8145] netlink_unicast+0x7f8/0x9a0 [ 170.780065][ T8145] ? __pfx_netlink_unicast+0x10/0x10 [ 170.780092][ T8145] ? skb_put+0x114/0x1f0 [ 170.780115][ T8145] netlink_sendmsg+0x8c3/0xcd0 [ 170.780155][ T8145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.780187][ T8145] ? aa_sock_msg_perm+0x91/0x160 [ 170.780219][ T8145] ? __pfx_netlink_sendmsg+0x10/0x10 [ 170.780244][ T8145] __sock_sendmsg+0x221/0x270 [ 170.780272][ T8145] ____sys_sendmsg+0x523/0x860 [ 170.780301][ T8145] ? __pfx_____sys_sendmsg+0x10/0x10 [ 170.780320][ T8145] ? __fget_files+0x2a/0x420 [ 170.780341][ T8145] ? __fget_files+0x2a/0x420 [ 170.780368][ T8145] __sys_sendmsg+0x271/0x360 [ 170.780392][ T8145] ? __pfx___sys_sendmsg+0x10/0x10 [ 170.780464][ T8145] ? do_syscall_64+0xb6/0x230 [ 170.780491][ T8145] do_syscall_64+0xf3/0x230 [ 170.780514][ T8145] ? clear_bhb_loop+0x45/0xa0 [ 170.780536][ T8145] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 170.780554][ T8145] RIP: 0033:0x7fcc2b58d169 [ 170.780572][ T8145] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 170.780588][ T8145] RSP: 002b:00007fcc2c369038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 170.780609][ T8145] RAX: ffffffffffffffda RBX: 00007fcc2b7a5fa0 RCX: 00007fcc2b58d169 [ 170.780623][ T8145] RDX: 0000000000000000 RSI: 0000200000000280 RDI: 0000000000000007 [ 170.780636][ T8145] RBP: 00007fcc2c369090 R08: 0000000000000000 R09: 0000000000000000 [ 170.780648][ T8145] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 170.780659][ T8145] R13: 0000000000000000 R14: 00007fcc2b7a5fa0 R15: 00007ffdc2ab2db8 [ 170.780688][ T8145] [ 171.759312][ T8167] FAULT_INJECTION: forcing a failure. [ 171.759312][ T8167] name failslab, interval 1, probability 0, space 0, times 0 [ 171.786293][ T8167] CPU: 1 UID: 0 PID: 8167 Comm: syz.0.741 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 171.786324][ T8167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 171.786338][ T8167] Call Trace: [ 171.786346][ T8167] [ 171.786355][ T8167] dump_stack_lvl+0x241/0x360 [ 171.786395][ T8167] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.786427][ T8167] ? __pfx__printk+0x10/0x10 [ 171.786469][ T8167] ? __pfx___might_resched+0x10/0x10 [ 171.786498][ T8167] should_fail_ex+0x424/0x570 [ 171.786523][ T8167] should_failslab+0xac/0x100 [ 171.786552][ T8167] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 171.786580][ T8167] ? __alloc_skb+0x1c2/0x480 [ 171.786603][ T8167] __alloc_skb+0x1c2/0x480 [ 171.786627][ T8167] ? __pfx___alloc_skb+0x10/0x10 [ 171.786647][ T8167] ? netlink_autobind+0xd6/0x2f0 [ 171.786680][ T8167] ? netlink_autobind+0x2b0/0x2f0 [ 171.786713][ T8167] netlink_sendmsg+0x638/0xcd0 [ 171.786753][ T8167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.786785][ T8167] ? aa_sock_msg_perm+0x91/0x160 [ 171.786818][ T8167] ? __pfx_netlink_sendmsg+0x10/0x10 [ 171.786844][ T8167] __sock_sendmsg+0x221/0x270 [ 171.786872][ T8167] ____sys_sendmsg+0x523/0x860 [ 171.786902][ T8167] ? __pfx_____sys_sendmsg+0x10/0x10 [ 171.786921][ T8167] ? __fget_files+0x2a/0x420 [ 171.786943][ T8167] ? __fget_files+0x2a/0x420 [ 171.786970][ T8167] __sys_sendmsg+0x271/0x360 [ 171.786996][ T8167] ? __pfx___sys_sendmsg+0x10/0x10 [ 171.787072][ T8167] ? do_syscall_64+0xb6/0x230 [ 171.787100][ T8167] do_syscall_64+0xf3/0x230 [ 171.787123][ T8167] ? clear_bhb_loop+0x45/0xa0 [ 171.787147][ T8167] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 171.787165][ T8167] RIP: 0033:0x7fbbfdd8d169 [ 171.787182][ T8167] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 171.787199][ T8167] RSP: 002b:00007fbbfbbf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 171.787219][ T8167] RAX: ffffffffffffffda RBX: 00007fbbfdfa5fa0 RCX: 00007fbbfdd8d169 [ 171.787234][ T8167] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 171.787246][ T8167] RBP: 00007fbbfbbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 171.787258][ T8167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 171.787269][ T8167] R13: 0000000000000000 R14: 00007fbbfdfa5fa0 R15: 00007fff29152af8 [ 171.787300][ T8167] [ 172.145562][ T8177] __nla_validate_parse: 3 callbacks suppressed [ 172.145585][ T8177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 172.185862][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.0.747'. [ 172.293198][ T8177] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.298652][ T8182] netlink: 36 bytes leftover after parsing attributes in process `syz.1.746'. [ 172.491750][ T8190] FAULT_INJECTION: forcing a failure. [ 172.491750][ T8190] name failslab, interval 1, probability 0, space 0, times 0 [ 172.524535][ T8190] CPU: 0 UID: 0 PID: 8190 Comm: syz.2.749 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 172.524567][ T8190] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 172.524580][ T8190] Call Trace: [ 172.524589][ T8190] [ 172.524599][ T8190] dump_stack_lvl+0x241/0x360 [ 172.524639][ T8190] ? __pfx_dump_stack_lvl+0x10/0x10 [ 172.524680][ T8190] ? __pfx__printk+0x10/0x10 [ 172.524725][ T8190] should_fail_ex+0x424/0x570 [ 172.524754][ T8190] should_failslab+0xac/0x100 [ 172.524786][ T8190] __kmalloc_cache_noprof+0x73/0x370 [ 172.524815][ T8190] ? sctp_add_bind_addr+0x89/0x3a0 [ 172.524849][ T8190] sctp_add_bind_addr+0x89/0x3a0 [ 172.524882][ T8190] sctp_copy_local_addr_list+0x313/0x500 [ 172.524915][ T8190] ? sctp_copy_local_addr_list+0xad/0x500 [ 172.524945][ T8190] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 172.524977][ T8190] ? sctp_v6_is_any+0x60/0x70 [ 172.525008][ T8190] ? sctp_copy_one_addr+0x94/0x360 [ 172.525042][ T8190] sctp_bind_addr_copy+0xad/0x3b0 [ 172.525071][ T8190] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 172.525101][ T8190] sctp_connect_new_asoc+0x337/0x700 [ 172.525127][ T8190] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 172.525151][ T8190] ? sctp_sendmsg+0xf30/0x3620 [ 172.525191][ T8190] ? sctp_endpoint_lookup_assoc+0xc9/0x250 [ 172.525210][ T8190] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 172.525239][ T8190] sctp_sendmsg+0x2009/0x3620 [ 172.525298][ T8190] ? __pfx_sctp_sendmsg+0x10/0x10 [ 172.525334][ T8190] ? aa_sk_perm+0x96f/0xac0 [ 172.525383][ T8190] ? inet_sendmsg+0x330/0x390 [ 172.525413][ T8190] __sock_sendmsg+0x1a6/0x270 [ 172.525445][ T8190] ____sys_sendmsg+0x523/0x860 [ 172.525480][ T8190] ? __pfx_____sys_sendmsg+0x10/0x10 [ 172.525500][ T8190] ? __fget_files+0x2a/0x420 [ 172.525523][ T8190] ? __fget_files+0x2a/0x420 [ 172.525555][ T8190] __sys_sendmmsg+0x3a0/0x7b0 [ 172.525592][ T8190] ? __pfx___sys_sendmmsg+0x10/0x10 [ 172.525667][ T8190] ? rcu_read_lock_any_held+0xbb/0x160 [ 172.525696][ T8190] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 172.525728][ T8190] ? vfs_write+0xb29/0xd10 [ 172.525764][ T8190] ? ksys_write+0x24e/0x2d0 [ 172.525794][ T8190] ? __mutex_unlock_slowpath+0x229/0x800 [ 172.525857][ T8190] ? ksys_write+0x275/0x2d0 [ 172.525896][ T8190] __x64_sys_sendmmsg+0xa0/0xb0 [ 172.525922][ T8190] do_syscall_64+0xf3/0x230 [ 172.525949][ T8190] ? clear_bhb_loop+0x45/0xa0 [ 172.525975][ T8190] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 172.525995][ T8190] RIP: 0033:0x7f002278d169 [ 172.526014][ T8190] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 172.526032][ T8190] RSP: 002b:00007f0023585038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 172.526055][ T8190] RAX: ffffffffffffffda RBX: 00007f00229a5fa0 RCX: 00007f002278d169 [ 172.526071][ T8190] RDX: 0000000000000002 RSI: 0000200000001800 RDI: 0000000000000003 [ 172.526085][ T8190] RBP: 00007f0023585090 R08: 0000000000000000 R09: 0000000000000000 [ 172.526099][ T8190] R10: 000000002004c040 R11: 0000000000000246 R12: 0000000000000002 [ 172.526112][ T8190] R13: 0000000000000000 R14: 00007f00229a5fa0 R15: 00007ffd37a47728 [ 172.526147][ T8190] [ 173.134995][ T8201] netlink: 'syz.3.755': attribute type 1 has an invalid length. [ 173.142697][ T8201] netlink: 224 bytes leftover after parsing attributes in process `syz.3.755'. [ 173.320294][ T8210] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 173.337621][ T8204] netlink: 12 bytes leftover after parsing attributes in process `syz.0.750'. [ 173.347631][ T8210] openvswitch: netlink: Key type 156 is out of range max 32 [ 173.553474][ T8226] netlink: 36 bytes leftover after parsing attributes in process `syz.1.761'. [ 173.663410][ T8226] Unknown options in mask 1f4 [ 173.673868][ T8230] wireguard0: entered promiscuous mode [ 173.690375][ T8230] wireguard0: entered allmulticast mode [ 174.353963][ T8250] netlink: 12 bytes leftover after parsing attributes in process `syz.4.770'. [ 174.600341][ T8261] netlink: 20 bytes leftover after parsing attributes in process `syz.1.774'. [ 174.616241][ T8266] netlink: 36 bytes leftover after parsing attributes in process `syz.4.775'. [ 174.712206][ T8269] netlink: 4 bytes leftover after parsing attributes in process `syz.4.775'. [ 174.754520][ T8269] Unknown options in mask 1f4 [ 174.989841][ T8275] netlink: 'syz.2.778': attribute type 9 has an invalid length. [ 175.015687][ T8275] netlink: 'syz.2.778': attribute type 6 has an invalid length. [ 175.068947][ T8291] FAULT_INJECTION: forcing a failure. [ 175.068947][ T8291] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 175.107070][ T8291] CPU: 0 UID: 0 PID: 8291 Comm: syz.0.784 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 175.107100][ T8291] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.107112][ T8291] Call Trace: [ 175.107120][ T8291] [ 175.107128][ T8291] dump_stack_lvl+0x241/0x360 [ 175.107162][ T8291] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.107189][ T8291] ? __pfx__printk+0x10/0x10 [ 175.107226][ T8291] should_fail_ex+0x424/0x570 [ 175.107252][ T8291] _copy_to_user+0x31/0xb0 [ 175.107283][ T8291] simple_read_from_buffer+0xc4/0x170 [ 175.107315][ T8291] proc_fail_nth_read+0x1ef/0x260 [ 175.107340][ T8291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.107364][ T8291] ? rw_verify_area+0x246/0x630 [ 175.107384][ T8291] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 175.107405][ T8291] vfs_read+0x21f/0xb90 [ 175.107432][ T8291] ? __pfx___mutex_lock+0x10/0x10 [ 175.107458][ T8291] ? __pfx_vfs_read+0x10/0x10 [ 175.107483][ T8291] ? __fget_files+0x2a/0x420 [ 175.107503][ T8291] ? __fget_files+0x39d/0x420 [ 175.107518][ T8291] ? __fget_files+0x2a/0x420 [ 175.107547][ T8291] ksys_read+0x19d/0x2d0 [ 175.107571][ T8291] ? __pfx_ksys_read+0x10/0x10 [ 175.107606][ T8291] ? do_syscall_64+0xb6/0x230 [ 175.107634][ T8291] do_syscall_64+0xf3/0x230 [ 175.107657][ T8291] ? clear_bhb_loop+0x45/0xa0 [ 175.107681][ T8291] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.107700][ T8291] RIP: 0033:0x7fbbfdd8bb7c [ 175.107717][ T8291] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 175.107734][ T8291] RSP: 002b:00007fbbfbbf6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 175.107755][ T8291] RAX: ffffffffffffffda RBX: 00007fbbfdfa5fa0 RCX: 00007fbbfdd8bb7c [ 175.107770][ T8291] RDX: 000000000000000f RSI: 00007fbbfbbf60a0 RDI: 0000000000000004 [ 175.107782][ T8291] RBP: 00007fbbfbbf6090 R08: 0000000000000000 R09: 0000000000000000 [ 175.107794][ T8291] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.107806][ T8291] R13: 0000000000000000 R14: 00007fbbfdfa5fa0 R15: 00007fff29152af8 [ 175.107838][ T8291] [ 175.757548][ T8321] FAULT_INJECTION: forcing a failure. [ 175.757548][ T8321] name failslab, interval 1, probability 0, space 0, times 0 [ 175.786168][ T8323] Unknown options in mask 1f4 [ 175.800555][ T8321] CPU: 1 UID: 0 PID: 8321 Comm: syz.2.794 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 175.800586][ T8321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 175.800600][ T8321] Call Trace: [ 175.800608][ T8321] [ 175.800617][ T8321] dump_stack_lvl+0x241/0x360 [ 175.800655][ T8321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 175.800687][ T8321] ? __pfx__printk+0x10/0x10 [ 175.800719][ T8321] ? __lock_acquire+0xad5/0xd80 [ 175.800750][ T8321] should_fail_ex+0x424/0x570 [ 175.800778][ T8321] should_failslab+0xac/0x100 [ 175.800811][ T8321] kmem_cache_alloc_node_noprof+0x7d/0x3b0 [ 175.800842][ T8321] ? __alloc_skb+0x1c2/0x480 [ 175.800859][ T8321] ? trace_contention_end+0x3c/0x120 [ 175.800892][ T8321] __alloc_skb+0x1c2/0x480 [ 175.800910][ T8321] ? __lock_acquire+0xad5/0xd80 [ 175.800936][ T8321] ? __pfx___alloc_skb+0x10/0x10 [ 175.800955][ T8321] ? hci_sock_sendmsg+0x550/0x11f0 [ 175.800984][ T8321] ? __pfx___mutex_lock+0x10/0x10 [ 175.801016][ T8321] hci_mgmt_cmd+0x1c5/0xf20 [ 175.801060][ T8321] hci_sock_sendmsg+0x7b8/0x11f0 [ 175.801096][ T8321] ? __pfx_aa_sk_perm+0x10/0x10 [ 175.801124][ T8321] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 175.801152][ T8321] ? __pfx_aa_file_perm+0x10/0x10 [ 175.801181][ T8321] ? aa_sock_msg_perm+0x91/0x160 [ 175.801217][ T8321] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 175.801242][ T8321] __sock_sendmsg+0x221/0x270 [ 175.801274][ T8321] sock_write_iter+0x2d9/0x3f0 [ 175.801312][ T8321] ? __pfx_sock_write_iter+0x10/0x10 [ 175.801352][ T8321] ? bpf_lsm_file_permission+0x9/0x10 [ 175.801386][ T8321] vfs_write+0x70f/0xd10 [ 175.801420][ T8321] ? __pfx_sock_write_iter+0x10/0x10 [ 175.801447][ T8321] ? __pfx_vfs_write+0x10/0x10 [ 175.801468][ T8321] ? do_sys_openat2+0x165/0x1d0 [ 175.801502][ T8321] ? __pfx_do_sys_openat2+0x10/0x10 [ 175.801558][ T8321] ksys_write+0x19d/0x2d0 [ 175.801586][ T8321] ? __pfx_ksys_write+0x10/0x10 [ 175.801617][ T8321] ? do_syscall_64+0xb6/0x230 [ 175.801647][ T8321] do_syscall_64+0xf3/0x230 [ 175.801674][ T8321] ? clear_bhb_loop+0x45/0xa0 [ 175.801700][ T8321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 175.801720][ T8321] RIP: 0033:0x7f002278d169 [ 175.801737][ T8321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 175.801754][ T8321] RSP: 002b:00007f0023585038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 175.801775][ T8321] RAX: ffffffffffffffda RBX: 00007f00229a5fa0 RCX: 00007f002278d169 [ 175.801791][ T8321] RDX: 0000000000000007 RSI: 0000200000000100 RDI: 0000000000000007 [ 175.801804][ T8321] RBP: 00007f0023585090 R08: 0000000000000000 R09: 0000000000000000 [ 175.801818][ T8321] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 175.801831][ T8321] R13: 0000000000000000 R14: 00007f00229a5fa0 R15: 00007ffd37a47728 [ 175.801865][ T8321] [ 176.153331][ T8321] ipip0: entered promiscuous mode [ 176.264501][ T8337] siw: device registration error -23 [ 176.503550][ T8348] xt_policy: output policy not valid in PREROUTING and INPUT [ 176.511989][ T8346] lo speed is unknown, defaulting to 1000 [ 176.514904][ T8346] lo speed is unknown, defaulting to 1000 [ 176.526945][ T8346] lo speed is unknown, defaulting to 1000 [ 176.750335][ T8358] Unknown options in mask 1f4 [ 176.812634][ T8346] infiniband syz0: set active [ 176.817658][ T8346] infiniband syz0: added lo [ 176.852596][ T52] lo speed is unknown, defaulting to 1000 [ 176.875244][ T8346] RDS/IB: syz0: added [ 176.880120][ T8346] smc: adding ib device syz0 with port count 1 [ 176.886910][ T8346] smc: ib device syz0 port 1 has pnetid [ 176.896648][ T8346] lo speed is unknown, defaulting to 1000 [ 176.904376][ T5895] lo speed is unknown, defaulting to 1000 [ 177.174893][ T8369] lo speed is unknown, defaulting to 1000 [ 177.202301][ T8346] lo speed is unknown, defaulting to 1000 [ 177.461051][ T8384] __nla_validate_parse: 9 callbacks suppressed [ 177.461071][ T8384] netlink: 36 bytes leftover after parsing attributes in process `syz.1.813'. [ 177.556798][ T8381] netlink: 4 bytes leftover after parsing attributes in process `syz.1.813'. [ 177.567191][ T8381] Unknown options in mask 1f4 [ 177.709149][ T8369] lo speed is unknown, defaulting to 1000 [ 177.895574][ T8398] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 177.960354][ T8395] netlink: 20 bytes leftover after parsing attributes in process `syz.3.817'. [ 178.153919][ T8346] lo speed is unknown, defaulting to 1000 [ 178.221506][ T8409] netlink: 24 bytes leftover after parsing attributes in process `syz.1.822'. [ 178.293863][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.823'. [ 178.317970][ T8411] netlink: 12 bytes leftover after parsing attributes in process `syz.1.823'. [ 178.565897][ T8346] lo speed is unknown, defaulting to 1000 [ 178.701032][ T8418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.825'. [ 178.859451][ T8346] lo speed is unknown, defaulting to 1000 [ 179.114004][ T8390] siw: device registration error -23 [ 179.124538][ T8426] netlink: 36 bytes leftover after parsing attributes in process `syz.3.827'. [ 179.197854][ T8422] netlink: 4 bytes leftover after parsing attributes in process `syz.3.827'. [ 179.216094][ T8422] Unknown options in mask 1f4 [ 179.544072][ T8440] netlink: 4 bytes leftover after parsing attributes in process `syz.4.830'. [ 180.356077][ T8469] netlink: 'syz.3.841': attribute type 1 has an invalid length. [ 180.877389][ T8500] netlink: 'syz.4.855': attribute type 12 has an invalid length. [ 181.238015][ T8524] bond0: option miimon: invalid value (18446744073709551615) [ 181.247611][ T8524] bond0: option miimon: allowed values 0 - 2147483647 [ 181.329744][ T8528] netlink: 'syz.4.868': attribute type 1 has an invalid length. [ 181.369962][ T8528] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.407780][ T8528] syz_tun: left promiscuous mode [ 181.421961][ T8528] bond0: (slave syz_tun): Releasing backup interface [ 181.437428][ T8528] bond2: (slave syz_tun): making interface the new active one [ 181.447015][ T8528] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 181.742167][ T8548] erspan0: entered promiscuous mode [ 181.766006][ T8548] gretap0: entered promiscuous mode [ 181.772291][ T8548] hsr1: Slave A (erspan0) is not up; please bring it up to get a fully working HSR network [ 181.820261][ T8548] hsr1: Slave B (gretap0) is not up; please bring it up to get a fully working HSR network [ 181.894533][ T8554] vxcan0: tx drop: invalid sa for name 0x0000000000000001 [ 182.041450][ T8562] ------------[ cut here ]------------ [ 182.047832][ T8562] WARNING: CPU: 0 PID: 8562 at net/ipv4/udp_offload.c:123 udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 182.060431][ T8562] Modules linked in: [ 182.065115][ T8562] CPU: 0 UID: 0 PID: 8562 Comm: syz.0.883 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 182.077184][ T8562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.087427][ T8562] RIP: 0010:udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 182.095189][ T8562] Code: 00 00 e8 f6 47 2f f7 48 c1 e5 04 48 8d b5 20 53 c7 9a ba 10 00 00 00 4c 89 ff e8 fe 74 99 f7 e9 ce 00 00 00 e8 d4 47 2f f7 90 <0f> 0b 90 e9 de fd ff ff bf 01 00 00 00 89 ee e8 ff 4b 2f f7 85 ed [ 182.116461][ T8562] RSP: 0018:ffffc90002fc77f8 EFLAGS: 00010293 [ 182.122640][ T8562] RAX: ffffffff8a9410cc RBX: 0000000000000002 RCX: ffff888050920000 [ 182.130709][ T8562] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 182.138953][ T8562] RBP: 0000000000000001 R08: ffffffff8a940dae R09: 1ffffffff20bfb2e [ 182.147075][ T8562] R10: dffffc0000000000 R11: fffffbfff20bfb2f R12: ffffffff8aa5a5b0 [ 182.155270][ T8562] R13: dffffc0000000000 R14: ffff8880366d0e38 R15: 0000000000000000 [ 182.163278][ T8562] FS: 0000000000000000(0000) GS:ffff888124f96000(0000) knlGS:0000000000000000 [ 182.172287][ T8562] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 182.178954][ T8562] CR2: 00007f00234d56c0 CR3: 000000006352a000 CR4: 00000000003526f0 [ 182.187002][ T8562] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 182.196382][ T8562] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 182.205449][ T8562] Call Trace: [ 182.208809][ T8562] [ 182.211773][ T8562] ? sk_common_release+0x71/0x2e0 [ 182.216891][ T8562] udp_destroy_sock+0x2a2/0x300 [ 182.221781][ T8562] ? __pfx_udp_destroy_sock+0x10/0x10 [ 182.227217][ T8562] sk_common_release+0x71/0x2e0 [ 182.232126][ T8562] inet_release+0x17d/0x200 [ 182.236770][ T8562] sock_close+0xbc/0x240 [ 182.241055][ T8562] ? __pfx_sock_close+0x10/0x10 [ 182.245991][ T8562] __fput+0x3e9/0x9f0 [ 182.250021][ T8562] task_work_run+0x251/0x310 [ 182.254731][ T8562] ? __pfx_task_work_run+0x10/0x10 [ 182.259888][ T8562] ? do_exit+0xa0c/0x27f0 [ 182.264321][ T8562] ? do_exit+0xa0c/0x27f0 [ 182.268693][ T8562] do_exit+0xa11/0x27f0 [ 182.272901][ T8562] ? do_raw_spin_lock+0x151/0x370 [ 182.278071][ T8562] ? __pfx_do_exit+0x10/0x10 [ 182.282708][ T8562] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 182.288190][ T8562] do_group_exit+0x207/0x2c0 [ 182.294066][ T8562] ? _raw_spin_unlock_irq+0x23/0x50 [ 182.300724][ T8562] ? lockdep_hardirqs_on+0x9d/0x150 [ 182.306013][ T8562] get_signal+0x1696/0x1730 [ 182.310580][ T8562] ? __pfx_get_signal+0x10/0x10 [ 182.315540][ T8562] arch_do_signal_or_restart+0x98/0x840 [ 182.321127][ T8562] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 182.327380][ T8562] ? syscall_exit_to_user_mode+0xa3/0x340 [ 182.333150][ T8562] syscall_exit_to_user_mode+0xce/0x340 [ 182.338807][ T8562] do_syscall_64+0x100/0x230 [ 182.343437][ T8562] ? clear_bhb_loop+0x45/0xa0 [ 182.348189][ T8562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.354270][ T8562] RIP: 0033:0x7fbbfdd8d169 [ 182.358732][ T8562] Code: Unable to access opcode bytes at 0x7fbbfdd8d13f. [ 182.365819][ T8562] RSP: 002b:00007fbbfbbf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 182.374319][ T8562] RAX: fffffffffffffe00 RBX: 00007fbbfdfa5fa8 RCX: 00007fbbfdd8d169 [ 182.382318][ T8562] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbbfdfa5fa8 [ 182.390456][ T8562] RBP: 00007fbbfdfa5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 182.399337][ T8562] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbbfdfa5fac [ 182.408502][ T8562] R13: 0000000000000000 R14: 00007fff29152a10 R15: 00007fff29152af8 [ 182.416550][ T8562] [ 182.419581][ T8562] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 182.426863][ T8562] CPU: 0 UID: 0 PID: 8562 Comm: syz.0.883 Not tainted 6.14.0-syzkaller-13344-ga9843689e2de #0 PREEMPT(full) [ 182.438408][ T8562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 182.448471][ T8562] Call Trace: [ 182.451757][ T8562] [ 182.454712][ T8562] dump_stack_lvl+0x241/0x360 [ 182.459426][ T8562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 182.464637][ T8562] ? __pfx__printk+0x10/0x10 [ 182.469246][ T8562] ? vscnprintf+0x5d/0x90 [ 182.473578][ T8562] panic+0x349/0x880 [ 182.477499][ T8562] ? __warn+0x174/0x4d0 [ 182.481689][ T8562] ? __pfx_panic+0x10/0x10 [ 182.486139][ T8562] __warn+0x344/0x4d0 [ 182.490137][ T8562] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 182.495954][ T8562] report_bug+0x2b3/0x500 [ 182.500294][ T8562] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 182.506113][ T8562] ? udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 182.511930][ T8562] ? udp_tunnel_update_gro_rcv+0x28f/0x4c0 [ 182.517740][ T8562] handle_bug+0x89/0x170 [ 182.521995][ T8562] exc_invalid_op+0x1a/0x50 [ 182.526512][ T8562] asm_exc_invalid_op+0x1a/0x20 [ 182.531367][ T8562] RIP: 0010:udp_tunnel_update_gro_rcv+0x28d/0x4c0 [ 182.537789][ T8562] Code: 00 00 e8 f6 47 2f f7 48 c1 e5 04 48 8d b5 20 53 c7 9a ba 10 00 00 00 4c 89 ff e8 fe 74 99 f7 e9 ce 00 00 00 e8 d4 47 2f f7 90 <0f> 0b 90 e9 de fd ff ff bf 01 00 00 00 89 ee e8 ff 4b 2f f7 85 ed [ 182.557400][ T8562] RSP: 0018:ffffc90002fc77f8 EFLAGS: 00010293 [ 182.563476][ T8562] RAX: ffffffff8a9410cc RBX: 0000000000000002 RCX: ffff888050920000 [ 182.571452][ T8562] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000007 [ 182.579425][ T8562] RBP: 0000000000000001 R08: ffffffff8a940dae R09: 1ffffffff20bfb2e [ 182.587397][ T8562] R10: dffffc0000000000 R11: fffffbfff20bfb2f R12: ffffffff8aa5a5b0 [ 182.595372][ T8562] R13: dffffc0000000000 R14: ffff8880366d0e38 R15: 0000000000000000 [ 182.603355][ T8562] ? __pfx_gue_gro_receive+0x10/0x10 [ 182.608661][ T8562] ? udp_tunnel_update_gro_rcv+0xce/0x4c0 [ 182.614387][ T8562] ? udp_tunnel_update_gro_rcv+0x3ec/0x4c0 [ 182.620200][ T8562] ? udp_tunnel_update_gro_rcv+0x3ec/0x4c0 [ 182.626012][ T8562] ? sk_common_release+0x71/0x2e0 [ 182.631066][ T8562] udp_destroy_sock+0x2a2/0x300 [ 182.635945][ T8562] ? __pfx_udp_destroy_sock+0x10/0x10 [ 182.641332][ T8562] sk_common_release+0x71/0x2e0 [ 182.646200][ T8562] inet_release+0x17d/0x200 [ 182.650724][ T8562] sock_close+0xbc/0x240 [ 182.654979][ T8562] ? __pfx_sock_close+0x10/0x10 [ 182.659859][ T8562] __fput+0x3e9/0x9f0 [ 182.663854][ T8562] task_work_run+0x251/0x310 [ 182.668460][ T8562] ? __pfx_task_work_run+0x10/0x10 [ 182.673579][ T8562] ? do_exit+0xa0c/0x27f0 [ 182.677918][ T8562] ? do_exit+0xa0c/0x27f0 [ 182.682256][ T8562] do_exit+0xa11/0x27f0 [ 182.686433][ T8562] ? do_raw_spin_lock+0x151/0x370 [ 182.691466][ T8562] ? __pfx_do_exit+0x10/0x10 [ 182.696065][ T8562] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 182.701460][ T8562] do_group_exit+0x207/0x2c0 [ 182.706061][ T8562] ? _raw_spin_unlock_irq+0x23/0x50 [ 182.711269][ T8562] ? lockdep_hardirqs_on+0x9d/0x150 [ 182.716480][ T8562] get_signal+0x1696/0x1730 [ 182.721018][ T8562] ? __pfx_get_signal+0x10/0x10 [ 182.725901][ T8562] arch_do_signal_or_restart+0x98/0x840 [ 182.731481][ T8562] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 182.737665][ T8562] ? syscall_exit_to_user_mode+0xa3/0x340 [ 182.743391][ T8562] syscall_exit_to_user_mode+0xce/0x340 [ 182.748947][ T8562] do_syscall_64+0x100/0x230 [ 182.753541][ T8562] ? clear_bhb_loop+0x45/0xa0 [ 182.758246][ T8562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 182.764157][ T8562] RIP: 0033:0x7fbbfdd8d169 [ 182.768573][ T8562] Code: Unable to access opcode bytes at 0x7fbbfdd8d13f. [ 182.775592][ T8562] RSP: 002b:00007fbbfbbf60e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 182.784013][ T8562] RAX: fffffffffffffe00 RBX: 00007fbbfdfa5fa8 RCX: 00007fbbfdd8d169 [ 182.791985][ T8562] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fbbfdfa5fa8 [ 182.799955][ T8562] RBP: 00007fbbfdfa5fa0 R08: 0000000000000000 R09: 0000000000000000 [ 182.807930][ T8562] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fbbfdfa5fac [ 182.815909][ T8562] R13: 0000000000000000 R14: 00007fff29152a10 R15: 00007fff29152af8 [ 182.823904][ T8562] [ 182.827250][ T8562] Kernel Offset: disabled [ 182.831580][ T8562] Rebooting in 86400 seconds..