last executing test programs: 21m11.074834149s ago: executing program 2 (id=18894): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01e63df", 0xdc000007, 0x0, {[0x5]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x5f, 0x0}}], 0x1, 0x4) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_IRQCHIP(r3, 0x8208ae63, &(0x7f0000000880)={0x0, 0x0, @pic={0x2a, 0xc0, 0x7, 0x6, 0xfb, 0x2, 0xf, 0x4, 0x3, 0x0, 0x3, 0x58, 0x9e, 0x6, 0x6, 0x7f}}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000000)={[0x35, 0xfff, 0x0, 0x180, 0x4, 0x14, 0xf1, 0x0, 0x7fffffffffffe, 0x7, 0x5, 0x3, 0xfffffffffffffffe, 0x45, 0x4, 0xbdb], 0x1, 0x1c4213}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 21m10.948853622s ago: executing program 2 (id=18899): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="150bfeffffff00000000"], 0x28}}, 0x80) 21m10.908799106s ago: executing program 2 (id=18900): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0x3, @local, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)="0d9ab556021da190833c56ec8a23816df49dd3b36a9fee3a28697de01eae67abb7e6c92a0cc6220c2b221c6e2722580411e563bac6fc92a980e8aa2f25584caa926392c4c0dcaa4b4fd3ae88a133be2ac10b92289734d54808a51b68d46c2d522fb6f91c1761b4ba497816dc887f3afaf4929135a75ddc5c477a188de5c0bd5afd34ec9bb2", 0x85}, {&(0x7f0000000400)="b760b39d6c3f49c2a71b3414e7fdf54a4552b9c46b0fbef42c219391fbfebf8b01a16270cb40e89e68ad3a940f412a80395ea7a7e7d2531fbf8e3a0fe3f729a3587783af9d57b06a8b36eb5bc6f7247f81f283942e3d2b920c6f2df35e8e1a1180b2cb520663c1e04ea48ee89201e76793f9ca0e4ced87959727a6ea521845dd9a0a4b36bf9f2442eb35869ca1772da5dd98597cf1409c58fac8f43a7bee738a220097b92d7c15a6a5e34c5dd9055e36422329c8d8717b961731767390f6c3cf2ceb", 0xc2}], 0x2, &(0x7f0000000900)=[@dstopts={{0x1d0, 0x29, 0x37, {0x67, 0x36, '\x00', [@generic={0xeb, 0xc5, "e851b96ff01544bfd1cbd7abac386adcd856dfe18759d2bb53ed4c6522b52413262a3fdfb8f5744324924235dd57a638ab386e5bdcc5e0a4fd99d2b67b4416a2fe3901cffebf1845c201178a4e4db42baf25b6e91ef8877d7a9b7a9de8bcc1884bd0eabf295a00f19cb11c3363663c719181bca290df8d2aaa99d401a2b4bebbde886dafde6fee1881c5df454b9608d5ad161fa003fa76c57bcba51cc0c52ded1b5436fa531ed672c53a97f716a612a220dcac3ac964335d14e04a3ef4f8853c49345cc7eb"}, @enc_lim={0x4, 0x1, 0x7f}, @generic={0x81, 0xea, "10c587cb4653a4821eb3401b69aa0f3c659131be86cd3fab45c74ec5df7880789245e56886484f4aa3d22c30fd2dc712fb1e29c0a49d4b75f6394755455743a47fe3ae0bf340298c571844830ec5aab16699dd5f196e8290dd466b2b3c244373bc70d5ce132adf0c7dff8456cad2eea085bd4f49e8a56503e6496029fb0c6226574d1a0a0abda5b722205902556ce23b0fe83135e4f2b4c54440c345c57d515e015ecef9f9964cf04bfd2fec7ff18e2b91befc6c5135b43f20fe04a13088e4f256eb0dcb0a32fe10011893a243413495f5748406cd467e30906ed5b9bce334e72d189c4573f59ebe8ee5"}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x6c, 0xa, 0x1, 0x3b, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @local, @remote, @private0={0xfc, 0x0, '\x00', 0x1}]}}}], 0x238}}], 0x2, 0x0) r2 = timerfd_create(0x1, 0x0) timerfd_settime(r2, 0x3, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) timerfd_settime(r2, 0x2, &(0x7f0000000200)={{0x0, 0x989680}}, 0x0) 21m10.841809222s ago: executing program 2 (id=18901): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) (async) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) (async) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) (async) mount$bind(&(0x7f0000000480)='./file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x12c5008, 0x0) mount$bind(0x0, &(0x7f0000000080)='./file0/../file0\x00', 0x0, 0x80000, 0x0) (async) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) (async) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1d}}, 0x10) (async) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) (async) read$FUSE(r0, &(0x7f0000006b40)={0x2020}, 0x2020) 21m10.840873303s ago: executing program 2 (id=18903): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x0) 21m10.309280865s ago: executing program 2 (id=18907): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0x3, @local, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)="0d9ab556021da190833c56ec8a23816df49dd3b36a9fee3a28697de01eae67abb7e6c92a0cc6220c2b221c6e2722580411e563bac6fc92a980e8aa2f25584caa926392c4c0dcaa4b4fd3ae88a133be2ac10b92289734d54808a51b68d46c2d522fb6f91c1761b4ba497816dc887f3afaf4929135a75ddc5c477a188de5c0bd5afd34ec9bb2", 0x85}, {&(0x7f0000000400)="b760b39d6c3f49c2a71b3414e7fdf54a4552b9c46b0fbef42c219391fbfebf8b01a16270cb40e89e68ad3a940f412a80395ea7a7e7d2531fbf8e3a0fe3f729a3587783af9d57b06a8b36eb5bc6f7247f81f283942e3d2b920c6f2df35e8e1a1180b2cb520663c1e04ea48ee89201e76793f9ca0e4ced87959727a6ea521845dd9a0a4b36bf9f2442eb35869ca1772da5dd98597cf1409c58fac8f43a7bee738a220097b92d7c15a6a5e34c5dd9055e36422329c8d8717b961731767390f6c3cf2ceb", 0xc2}], 0x2, &(0x7f0000000900)=[@dstopts={{0x1d0, 0x29, 0x37, {0x67, 0x36, '\x00', [@generic={0xeb, 0xc5, "e851b96ff01544bfd1cbd7abac386adcd856dfe18759d2bb53ed4c6522b52413262a3fdfb8f5744324924235dd57a638ab386e5bdcc5e0a4fd99d2b67b4416a2fe3901cffebf1845c201178a4e4db42baf25b6e91ef8877d7a9b7a9de8bcc1884bd0eabf295a00f19cb11c3363663c719181bca290df8d2aaa99d401a2b4bebbde886dafde6fee1881c5df454b9608d5ad161fa003fa76c57bcba51cc0c52ded1b5436fa531ed672c53a97f716a612a220dcac3ac964335d14e04a3ef4f8853c49345cc7eb"}, @enc_lim={0x4, 0x1, 0x7f}, @generic={0x81, 0xea, "10c587cb4653a4821eb3401b69aa0f3c659131be86cd3fab45c74ec5df7880789245e56886484f4aa3d22c30fd2dc712fb1e29c0a49d4b75f6394755455743a47fe3ae0bf340298c571844830ec5aab16699dd5f196e8290dd466b2b3c244373bc70d5ce132adf0c7dff8456cad2eea085bd4f49e8a56503e6496029fb0c6226574d1a0a0abda5b722205902556ce23b0fe83135e4f2b4c54440c345c57d515e015ecef9f9964cf04bfd2fec7ff18e2b91befc6c5135b43f20fe04a13088e4f256eb0dcb0a32fe10011893a243413495f5748406cd467e30906ed5b9bce334e72d189c4573f59ebe8ee5"}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x6c, 0xa, 0x1, 0x3b, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @local, @remote, @private0={0xfc, 0x0, '\x00', 0x1}]}}}], 0x238}}], 0x2, 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) 21m10.255597891s ago: executing program 32 (id=18907): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000100)={0xa, 0x4e22, 0x3, @local, 0x9}, 0x1c, &(0x7f00000002c0)=[{&(0x7f00000001c0)="0d9ab556021da190833c56ec8a23816df49dd3b36a9fee3a28697de01eae67abb7e6c92a0cc6220c2b221c6e2722580411e563bac6fc92a980e8aa2f25584caa926392c4c0dcaa4b4fd3ae88a133be2ac10b92289734d54808a51b68d46c2d522fb6f91c1761b4ba497816dc887f3afaf4929135a75ddc5c477a188de5c0bd5afd34ec9bb2", 0x85}, {&(0x7f0000000400)="b760b39d6c3f49c2a71b3414e7fdf54a4552b9c46b0fbef42c219391fbfebf8b01a16270cb40e89e68ad3a940f412a80395ea7a7e7d2531fbf8e3a0fe3f729a3587783af9d57b06a8b36eb5bc6f7247f81f283942e3d2b920c6f2df35e8e1a1180b2cb520663c1e04ea48ee89201e76793f9ca0e4ced87959727a6ea521845dd9a0a4b36bf9f2442eb35869ca1772da5dd98597cf1409c58fac8f43a7bee738a220097b92d7c15a6a5e34c5dd9055e36422329c8d8717b961731767390f6c3cf2ceb", 0xc2}], 0x2, &(0x7f0000000900)=[@dstopts={{0x1d0, 0x29, 0x37, {0x67, 0x36, '\x00', [@generic={0xeb, 0xc5, "e851b96ff01544bfd1cbd7abac386adcd856dfe18759d2bb53ed4c6522b52413262a3fdfb8f5744324924235dd57a638ab386e5bdcc5e0a4fd99d2b67b4416a2fe3901cffebf1845c201178a4e4db42baf25b6e91ef8877d7a9b7a9de8bcc1884bd0eabf295a00f19cb11c3363663c719181bca290df8d2aaa99d401a2b4bebbde886dafde6fee1881c5df454b9608d5ad161fa003fa76c57bcba51cc0c52ded1b5436fa531ed672c53a97f716a612a220dcac3ac964335d14e04a3ef4f8853c49345cc7eb"}, @enc_lim={0x4, 0x1, 0x7f}, @generic={0x81, 0xea, "10c587cb4653a4821eb3401b69aa0f3c659131be86cd3fab45c74ec5df7880789245e56886484f4aa3d22c30fd2dc712fb1e29c0a49d4b75f6394755455743a47fe3ae0bf340298c571844830ec5aab16699dd5f196e8290dd466b2b3c244373bc70d5ce132adf0c7dff8456cad2eea085bd4f49e8a56503e6496029fb0c6226574d1a0a0abda5b722205902556ce23b0fe83135e4f2b4c54440c345c57d515e015ecef9f9964cf04bfd2fec7ff18e2b91befc6c5135b43f20fe04a13088e4f256eb0dcb0a32fe10011893a243413495f5748406cd467e30906ed5b9bce334e72d189c4573f59ebe8ee5"}]}}}, @rthdr={{0x68, 0x29, 0x39, {0x6c, 0xa, 0x1, 0x3b, 0x0, [@private0={0xfc, 0x0, '\x00', 0x1}, @mcast1, @local, @remote, @private0={0xfc, 0x0, '\x00', 0x1}]}}}], 0x238}}], 0x2, 0x0) setresuid(0xee01, 0x0, 0xffffffffffffffff) 2.042786236s ago: executing program 3 (id=52681): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r3, @ANYRES64=r2], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r3, 0x0) ioctl$KVM_X86_SETUP_MCE(r3, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r4, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0xfffffffe, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000700)={0x1, {{0xa, 0x4e20, 0x1, @mcast2, 0x3}}, 0x1, 0x1, [{{0xa, 0x4e24, 0x1, @ipv4={'\x00', '\xff\xff', @empty}, 0x4}}]}, 0x110) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = fsopen(&(0x7f0000000040)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000001c0)='fuseblk\x00', &(0x7f0000000200)='fuseblk\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000580)='\xc1J\xaf\xfd,\x86\xbc\xa9\x02\xf2\xf6\xe2\xcd\x9f\xf6\x83\xeb\xba_6\xfdR\xd0\x8d\xc1\xf6.$w\xab|*`\x11H+^\xbb\x8ar\xb1\x8ec\xec,\xd5\xfd,\xce`\x9f\x92\xb4\xbe\x06?\xaa\x16Q\x94\x15\xbe\x80E\x9c\x93Hq?<(+\xceb0\xcc\xad\xdd\x1c\xee\x19\x1b\x91Z\x85\xb7\x04\xe7\xaf\xe0W,G\xc8\xc0\xbcR\x90\x17\x19@m\xa5\x19\x16i\xc8\x99)\xa5\xb0\xba\xbc\xe0rV\x06\xd0B\x0f\xcdF\xbc\x8e\x8a^%8k\x849S\x15=kxS\x1c\xc1\xdaT\x9c\b\xb6\xd8\xa0st~\xf1\x93\xb8\xba\xa5gV\x18F\x8f\xe4b\xdc\x19_P\x81\xa4\xc3\\g\x11\xd1\xc8 U\xba\x03\xc9\xf17\x88\r\xb99]\xdfM\xc8AQB\xc3\xf0\xf7t\xee\x95&w\xc3;', &(0x7f0000000180), 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f00000003c0)='\x00', &(0x7f0000000400)='(!\xef(.(\\-]\x00', 0x0) r7 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r7) openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) ptrace$setregs(0xd, r7, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93df39ed4b41924dc225ad4028dd63defb87d698be5c749450b350a789dcfc6b2d6a696b5026d1e52f19274566d1da0f353dd65e330ebf71c5e823f2753c5fd76724828ef31b353e71805205c3dceb44cc4c7b3664e29fb") ptrace$getregset(0x4205, r7, 0x2, &(0x7f0000000080)={&(0x7f0000000000)=""/120, 0x78}) 1.994039101s ago: executing program 3 (id=52683): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x275a, 0x0) write$UHID_CREATE2(r0, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r0, @ANYRES64], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) ioctl$KVM_X86_SETUP_MCE(r0, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x9, 0x0, 0x3, 0x2}, 0x10}}, 0x4000000) 1.923882648s ago: executing program 3 (id=52685): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, r3, 0x1, 0x70bd29, 0xfffffffd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x2, 0x1000056}}}}, [@NL80211_ATTR_TX_RATES={0x4, 0x10d}]}, 0x2c}, 0x1, 0x0, 0x0, 0x45}, 0x4000000) 1.541298506s ago: executing program 1 (id=52694): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket(0x10, 0x803, 0x0) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000037c0)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000000)=""/102, 0x66}], 0x1}}], 0x1, 0x0, 0x0) r3 = socket$inet(0x2, 0x3, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 1.357500954s ago: executing program 1 (id=52699): r0 = dup(0xffffffffffffffff) r1 = getpgid(0x0) lstat(&(0x7f0000000340)='./file0\x00', &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(0xffffffffffffffff, &(0x7f0000000400)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = ioctl$KVM_GET_STATS_FD_vm(0xffffffffffffffff, 0xaece) r6 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = syz_open_dev$char_usb(0xc, 0xb4, 0x7) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) r11 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r12 = accept4$tipc(0xffffffffffffffff, &(0x7f0000002440), &(0x7f0000002480)=0x10, 0x80000) r13 = openat(0xffffffffffffffff, &(0x7f00000024c0)='.\x00', 0x40000, 0x110) r14 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x21) r15 = socket$inet6_udplite(0xa, 0x2, 0x88) r16 = socket$nl_generic(0x10, 0x3, 0x10) r17 = syz_open_dev$char_usb(0xc, 0xb4, 0x3) r18 = openat$hwrng(0xffffffffffffff9c, &(0x7f0000002500), 0x180001, 0x0) r19 = eventfd2(0x1c, 0x1) r20 = openat$rtc(0xffffffffffffff9c, &(0x7f0000002540), 0x0, 0x0) r21 = socket$nl_xfrm(0x10, 0x3, 0x6) r22 = syz_open_procfs$pagemap(0x0, &(0x7f0000002580)) r23 = getpid() getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000025c0)={{{@in, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@multicast2}, 0x0, @in6=@loopback}}, &(0x7f00000026c0)=0xe8) fstat(0xffffffffffffffff, &(0x7f0000002700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r26 = syz_clone3(&(0x7f0000003f80)={0x10000, &(0x7f0000003d40), &(0x7f0000003d80), &(0x7f0000003dc0), {0x15}, &(0x7f0000003e00)=""/244, 0xf4, &(0x7f0000003f00)=""/37, &(0x7f0000003f40)=[0x0, 0xffffffffffffffff], 0x2}, 0x58) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000004000)={0x0, 0x0}, &(0x7f0000004040)=0xc) newfstatat(0xffffffffffffff9c, &(0x7f0000004080)='./file0\x00', &(0x7f00000040c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) sendmmsg$unix(r0, &(0x7f0000008340)=[{{&(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000300)=[{&(0x7f0000000080)}, {&(0x7f00000000c0)="6ab362fc6db2a4d37d2ef3756da0f2f61ed4322b15ca9a256df16ea146349296152e729c9915559582a4995e0099cbab4e804438097d0732d7312d613d7ebdd0a352bc867ca4b65e7b4e1661189e0b8ad4ee69031afb280aaff5388bc442c17216f1fb4ca29b8331248b0b3c64b0bb1b6bb83363953e883db09beaef708dbb410ea04d66bc519fc264e14d77cf772e40a059a933692e640954a218890763ca89c39d52e45490c79777ebd34bbff748bf98879162f8c62125b4cd079f5f7d5432600425dbfe0c0daa287f8970aaf1cee919a66ce1035bb0339258b2e905aafb4606e0ba1d7596c45bc55edf26fc26", 0xee}, {&(0x7f00000001c0)="003cf54d6998fce2a8139718cc599b92a5288928f30da657d5d5a39e21c811916d3f2b8526a0cce008e687baf44ddbdc6d7feaa4", 0x34}, {&(0x7f0000000200)="b6342a903a7377b910a2805b27831e1d2ca6b74c03c41c7673f67274aaf14427e1b1ae065dda04e8d08a77291dad2f09213a395b88d9984c05ab1dce4ef22f959ec40a6b125226c28339ad9f9a601d4333a50b9d5ce12f4b581b3d384678d647ff05eacf9c31ddf6b32580cfae7f069c725d9750e2dce2ab0f0fe55452338749b6671e01350e6cfd04c755c17a5ee7d88bfce46e916b495f0541a1b91fe639906e52fd0962cb9d68c14c24a19a6bcc431b2f726e036a4cb91ba8aa2b10bc1fd0544c30a6f1614d91c681f43d316a934da173cf865943c4a227", 0xd9}], 0x4, &(0x7f0000002780)=[@cred={{0x1c, 0x1, 0x2, {r1, r2, r3}}}, @rights={{0x30, 0x1, 0x1, [r4, r5, r6, r7, r8, r9, r10, 0xffffffffffffffff]}}, @rights={{0x30, 0x1, 0x1, [r11, 0xffffffffffffffff, r12, r13, r14, 0xffffffffffffffff, r15, r16]}}, @rights={{0x20, 0x1, 0x1, [r17, r18, r19, r20]}}, @rights={{0x18, 0x1, 0x1, [r21, r22]}}, @cred={{0x1c, 0x1, 0x2, {r23, r24, r25}}}], 0xd8, 0x1}}, {{&(0x7f0000002880)=@file={0x7e5ae07a92af0c5c, './file0\x00'}, 0x6e, &(0x7f0000003cc0)=[{&(0x7f0000002900)="689aeda1b0a0bf66bc81b8dae8940f6a19277e94f157c69e465adcda5e0c0b7c8e61b51e9d699b4955ac24a0217bd1b3c1ced1b19da1c4175dfade7051fdcbd30d2246a01907cf539e00743f11fe38fa758d5e2733c4025142d20ac099c8aaa46dffbc23e4478988396b63b84760f27f10dcfb4a5a053569b904bc9da0af587a42c3b17034952a4f98dfd05671eab0cef023ef1627dea07313c0d289de6060f9d6a18fbbb9891dc8debafcf8182d47e1be7cdc916e0a4776baf0d984dae0a7b5d18d081de250f9c701089ecc734e39", 0xcf}, {&(0x7f0000002a00)="77b6d5ec725fbeef3d882dbb7f1b7ab48a15f7e03b430e42f2c8368b5d5f9d8679c81d560d0e41029556a6cf128733e28240a8c7073f4477dbbf29623c91ba2d8434e6b19b4fc622c7ce1c1282428e1994a49a7794f816e4f47abf7b0aa5bb52dc5b34515fa8ca032d56fd42601bc60415990516769f7c2a9a9127886983189c3bce932628be664f5edf5a6d7009a334da17cd09f9cbc0de0591a5758a2b50a5156bcae0c2593f5aa33aebe049091c96e8629bf9aa1ea5a9fa92e5559f4e1a2b90b47b6bbdb7cd647c249e27385b7b69", 0xd0}, {&(0x7f0000002b00)="7438a2f45c307d8652c53d7bc02a4f6ca877838078330ff768a88518fe6bcf73b202c8f9a9f1ee7d37df37c236234166029d807c1a4143046af75e0aab28", 0x3e}, {&(0x7f0000002b40)="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", 0x1000}, {&(0x7f0000003b40)="0ba15c0f56ababc62c144b661c28776da87defa6ea5d649c5d28d36df534cb02299b33cb8f641a45c5f5fd25ec6ebf9deb09fbb5d7ebc58a7c6c31b2e65245c7294724a6c0933068c5e9fda1e18a9bf5bf80a1c10ede7631c361593270235d4478961f9cb456aa327d10c5bf4815dfe73e7c6e1e5df234cc6c596e569e656f6e18cdac38820f5977", 0x88}, {&(0x7f0000003c00)="6013024714737749e42a99d81387d3bc5592efbd1f4cb50f4cfe824f72dbd6fb313d0cff01a91101478d9c6e2b5c669d42057b74a473015c5a3ee37e57dd3f994cd7cd1787228b51a1f0d122be09c177f3646419c4f9957178048a3edb694ce687af1ca4061b639c61468cba6d5b5a6ea2dd3ed7936af5f78ab9376de75f17d8c35564bcf8010b9b1f31e651da640888c5bb98fd825ccec1b64a4bfb6449fb73003615ea82150a9f6035b77670c6defbd6e964741f500be8b49774", 0xbb}], 0x6, &(0x7f0000004440)=[@cred={{0x1c, 0x1, 0x2, {r26, r27, r28}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @cred={{0x1c}}], 0x60, 0x10}}, {{&(0x7f00000044c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f00000046c0)=[{&(0x7f0000004540)="851d515f580c6e6f8f1d9cce59afed10a3dd05778d9da43af0352a8c82cbb2012746fd115b6d1d516296f5e978cd90f395e234a570b0a6b6ddcc2f22646b2fcea581c3928feef93ba9555bfdf2f17ed5110d8f7cf34f9c89f86f44bb222c384ac515050e42236209fc362a69b3843063ed6dbbf8d51a3bd2ce4eb9ed7cb348f2735d226e2f78dddc698b9f0b853f4fd49dbb8480f6af711326de2a8a7e3d3d5d09c6b0696556fd88782a723ffb3778a9fa55d137424247694e92661d5bfb6c76caf4f3bc30c3357664ecbf049a83ba3eba42", 0xd2}, {&(0x7f0000004640)="ca57aed0f91d575d5c9887df9c2cfeaf01f58d0a67d67963f4eddc06f45f46fe6e98779d284a3ff6", 0x28}, {&(0x7f0000004680)="46eb169a235244746b37fe1b3c0e0c863299209873cb83b853bab775e1e083a96535ccc297d952b487efb779fe5da1ae", 0x30}], 0x3, &(0x7f0000004840)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x70, 0x810}}, {{&(0x7f00000048c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000004a40)=[{&(0x7f0000004940)="ba4556924d2f1ee6070f7349294dc9509c61f7b01d696ac4aad13f22ba589ac3cb06144b4a4b7bf5dafe6be7f869037dff5a6003ad909b2f1d47fc0fc9563f7f99b6846c0753f1f5faca403a8f1ad1bd54b188751070a03f69bceb7c276efbb9cb2b6f81da6ef734e551ab0f8dafb306a055210447063356202e5615a44ef9997c82181b854a76a4193e16d7c580de604f981f111667f2d3e1e10445132fe66cdca7e7892009687968802ca90b56d2cdedff46e627d5432c897d4e498ca064ce878d1832afe9945f2c3bb26601748139711c4432f7edff8caaea9203aa6fa1795b50cd60", 0xe4}], 0x1, &(0x7f0000008240)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee01}}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0xd8, 0x800}}], 0x4, 0x20000000) 1.250073004s ago: executing program 1 (id=52700): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r2, 0xc008ae88, &(0x7f00000002c0)={0x1, 0x0, [{0x10a, 0x0, 0xa}]}) 1.159534984s ago: executing program 1 (id=52701): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone3(&(0x7f0000001880)={0x80801000, 0x0, 0x0, 0x0, {0x39}, 0x0, 0x0, 0x0, 0x0}, 0x58) 789.735551ms ago: executing program 3 (id=52702): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4c, 0x2565}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000140)={'ip6tnl0\x00', 0x0, 0x4, 0x4, 0x7, 0x8, 0x10, @dev={0xfe, 0x80, '\x00', 0x3e}, @loopback, 0x7, 0x10, 0x492, 0x30000000}}) bind$xdp(r2, &(0x7f00000001c0)={0x2c, 0x4, r3, 0x3f, r2}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="200000001600010000000000000000000a00002c"], 0x20}}, 0x4) sendmsg$ETHTOOL_MSG_DEBUG_SET(r0, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}, 0x1, 0x0, 0x0, 0x10}, 0x8090) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', &(0x7f0000000080), 0xcc84, &(0x7f0000000300)=ANY=[@ANYRESHEX=r0]) 406.409869ms ago: executing program 3 (id=52706): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) socket$netlink(0x10, 0x3, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f4010880700000804800098028a25880060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a004e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d400", @ANYRES16=r2], 0x21c}}, 0x0) 365.038454ms ago: executing program 3 (id=52708): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket(0x28, 0x5, 0x5) setsockopt$sock_int(r2, 0x28, 0x1, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_GET_SPECULATION_CTRL(0x35, 0x0, 0x8) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r3, 0x29, 0x4, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) r4 = syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000751c0110e60f00989ad1010203010902240001000000000904290202b48cbb0009050402100000fa000905820240"], 0x0) syz_usb_control_io$printer(r4, 0x0, 0x0) 239.321756ms ago: executing program 0 (id=52712): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x401, 0x4) listen(r2, 0xb5d6) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) 237.575826ms ago: executing program 1 (id=52714): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = memfd_secret(0x0) ioctl$USBDEVFS_DISCONNECT_CLAIM(r1, 0x8108551b, &(0x7f0000000380)={0x92, 0x0, "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"}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r2, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000200)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@version_u}]}}) 199.49088ms ago: executing program 4 (id=52715): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000100)=ANY=[@ANYRES32, @ANYRES32=r1, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) accept$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2}, &(0x7f0000000080)=0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) preadv2(r1, 0x0, 0x0, 0xb56, 0x1000d, 0xf) 149.749825ms ago: executing program 0 (id=52716): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x4]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) socket$netlink(0x10, 0x3, 0xa) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r3 = syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r3, @ANYBLOB="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", @ANYRES16=r2], 0x21c}}, 0x0) 149.549415ms ago: executing program 4 (id=52717): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, 0x0, 0x0, 0x4) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000080)=ANY=[@ANYRES64, @ANYRES8, @ANYRES8, @ANYBLOB="47481af86b2b48"], 0x118) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) flock(r2, 0x1) 142.788036ms ago: executing program 0 (id=52718): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000a00), 0x80, 0x0) read$snapshot(r2, 0x0, 0x0) 118.452558ms ago: executing program 4 (id=52719): rt_sigaction(0xd, &(0x7f0000000180)={0x0, 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setuid(0xee00) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, 0x0) 52.338074ms ago: executing program 0 (id=52720): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt(r0, 0x29, 0x4, 0x0, 0x0) 52.200764ms ago: executing program 4 (id=52721): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000002, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, 0xffffffffffffffff, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) prctl$PR_GET_NO_NEW_PRIVS(0x27) 52.019305ms ago: executing program 1 (id=52722): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000100)='freezer.parent_freezing\x00', 0x275a, 0x0) write$UHID_CREATE2(r2, &(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB="3d57fbefb6bd4039751c6c99b2e315e96a93fd2ec203c2af5ea89e154233910b93abfe376815e75617287286744020e3e2778daf0767d164848e5baf6dbec111a2a917a06dcbe22d647d0af4d4f8482426aa7fee3415945a92b367c53c72b00227ef19529443a0855f0d3c0e016758004d71b7f13023ceed9e1b9d67b6f6d837d3747f020f1a63b0f3f3ced34c2736557b8dd83b728aca727573e9a66c47145f8d27d3f5a67057a05daf0016e87d7744e8564063a1652cb2fc9569d553fab042a168f71d1d3621c3e0a9a7ae3f34a94be792aea7ea7332c239b1bdf8be7d6e830119b3f611074bda3257d846", @ANYBLOB="2f4d8d4e31507f53711a90fc985ac81d6449d9149c18ee01ea39f76f95a2fa67719edbdd66f2f0134b155ba07ff2d36b5fb2c5060ff0c5735977c3af41b1c76578af1455b485fcbfa328e0ccf3f1bf634b7305924092664fc97c833a79054bd348264b6554f1c2192c8dfebbe37e48d8f56105502be1b32aad3a711109d43e65348892183860c3837ba8132e25e1e1af9469ed5e6bd712e9fbf10c5aa58fc4cf766673f4a0a70d5a4564a3f88ca3c43f35be0d5fa804cf77ba58ecd94d7137003b8ba116e9f3dc22ab6e68a64e56bbf8c17db53353332f5fbc34a4d5480d4f7d5a39dc2c5f399e1d7b0b7bfa684c805309a53f95dbeb53ec6e3632b6bb1606", @ANYRES64=r0], 0x118) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x6) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000b40)={'dummy0\x00'}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r2, 0x0) ioctl$KVM_X86_SETUP_MCE(r2, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000800)=@acquire={0x128, 0x17, 0x1, 0x0, 0x0, {{@in=@rand_addr=0x64010102}, @in=@multicast2, {@in6=@private2, @in6=@local, 0x0, 0x40}, {{@in6=@local, @in=@dev={0xac, 0x14, 0x14, 0x2}, 0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x20}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xfb1}, {}, 0x4, 0x6e6bb8}, 0xfffffffe}}, 0x128}}, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000200)={[{@volatile}]}) 51.916425ms ago: executing program 0 (id=52723): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e22, @multicast1}, 0x10) setsockopt$sock_int(r2, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, 0x0, 0x0) listen(r2, 0xb5d6) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty, 0xffffffff}, 0x1c) 544.25µs ago: executing program 4 (id=52724): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x1]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) setuid(0xee00) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCBRADDBR(r2, 0x89a0, 0x0) 427.39µs ago: executing program 4 (id=52725): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(r0, 0x40047459, &(0x7f0000000080)=0x40) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuset.effective_cpus\x00', 0x275a, 0x0) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000100)="80fd02000040", 0x42}], 0x1, 0x0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MAX_SIZE(r1, 0x28, 0x2, &(0x7f0000000040)=0xfffffffffffffff9, 0x8) r2 = openat$ashmem(0xffffffffffffff9c, &(0x7f0000000000), 0x20340, 0x0) ioctl$ASHMEM_GET_PIN_STATUS(r2, 0x7709, 0x0) ioctl$ASHMEM_SET_NAME(r2, 0x41007701, 0x0) 0s ago: executing program 0 (id=52726): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r2, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) pselect6(0xfffffeb1, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0xdc000006, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r4, @ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(r4, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=ANY=[@ANYBLOB="1400000042000501"], 0x14}, 0x1, 0x0, 0x0, 0x68840}, 0x4) recvmmsg(r5, &(0x7f0000003ac0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000004c0)=""/4091, 0xffb}, {&(0x7f00000000c0)=""/124, 0x7c}, {&(0x7f0000000200)=""/11, 0xb}], 0x3}, 0xfffffffd}], 0x1, 0x2, 0x0) r6 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pread64(r6, 0x0, 0x0, 0x7) kernel console output (not intermixed with test programs): t 1(bridge_slave_0) entered listening state [ 2082.956139][T16529] CoreChips 2-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 2082.982318][T10940] binfmt_misc: register: failed to install interpreter file ./file0 [ 2082.994653][T16529] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 2083.014445][T16529] usb 2-1: USB disconnect, device number 92 [ 2083.037189][T10946] FAULT_INJECTION: forcing a failure. [ 2083.037189][T10946] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2083.063418][T10946] CPU: 1 UID: 0 PID: 10946 Comm: syz.3.49351 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2083.063447][T10946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2083.063459][T10946] Call Trace: [ 2083.063464][T10946] [ 2083.063471][T10946] __dump_stack+0x21/0x30 [ 2083.063498][T10946] dump_stack_lvl+0x10c/0x190 [ 2083.063520][T10946] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2083.063543][T10946] dump_stack+0x19/0x20 [ 2083.063564][T10946] should_fail_ex+0x3d9/0x530 [ 2083.063581][T10946] should_fail+0xf/0x20 [ 2083.063596][T10946] should_fail_usercopy+0x1e/0x30 [ 2083.063614][T10946] strncpy_from_user+0x28/0x270 [ 2083.063631][T10946] getname_flags+0x102/0x710 [ 2083.063647][T10946] ? build_open_flags+0x487/0x600 [ 2083.063669][T10946] getname+0x1b/0x30 [ 2083.063683][T10946] do_sys_openat2+0xcb/0x1c0 [ 2083.063704][T10946] ? fput+0x1a5/0x240 [ 2083.063723][T10946] ? do_sys_open+0x100/0x100 [ 2083.063743][T10946] ? ksys_write+0x1ef/0x250 [ 2083.063757][T10946] ? __cfi_ksys_write+0x10/0x10 [ 2083.063773][T10946] __x64_sys_open+0x120/0x150 [ 2083.063795][T10946] x64_sys_call+0x131a/0x2ee0 [ 2083.063818][T10946] do_syscall_64+0x58/0xf0 [ 2083.063839][T10946] ? clear_bhb_loop+0x50/0xa0 [ 2083.063857][T10946] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2083.063875][T10946] RIP: 0033:0x7f1792f8f6c9 [ 2083.063888][T10946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2083.063903][T10946] RSP: 002b:00007f1793d5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 2083.063930][T10946] RAX: ffffffffffffffda RBX: 00007f17931e5fa0 RCX: 00007f1792f8f6c9 [ 2083.063948][T10946] RDX: 00000000000001a8 RSI: 0000000000040080 RDI: 0000200000000180 [ 2083.063964][T10946] RBP: 00007f1793d5c090 R08: 0000000000000000 R09: 0000000000000000 [ 2083.063979][T10946] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2083.063995][T10946] R13: 00007f17931e6038 R14: 00007f17931e5fa0 R15: 00007fff67e210b8 [ 2083.064009][T10946] [ 2083.302285][ T36] audit: type=1400 audit(1779782704.830:1258): avc: denied { accept } for pid=10953 comm="syz.3.49356" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2083.346795][T10960] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=10960 comm=syz.0.49359 [ 2083.559389][T10984] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1044 sclass=netlink_xfrm_socket pid=10984 comm=syz.3.49371 [ 2083.692759][T11002] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1044 sclass=netlink_xfrm_socket pid=11002 comm=syz.4.49380 [ 2083.737470][T11009] bridge0: port 1(bridge_slave_0) entered listening state [ 2083.822923][T11027] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1044 sclass=netlink_xfrm_socket pid=11027 comm=syz.4.49392 [ 2083.882878][T11035] cgroup: Invalid name [ 2083.921083][T11043] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11043 comm=syz.4.49400 [ 2084.078589][T11063] FAULT_INJECTION: forcing a failure. [ 2084.078589][T11063] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2084.110728][T11063] CPU: 1 UID: 0 PID: 11063 Comm: syz.1.49410 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2084.110768][T11063] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2084.110784][T11063] Call Trace: [ 2084.110792][T11063] [ 2084.110803][T11063] __dump_stack+0x21/0x30 [ 2084.110839][T11063] dump_stack_lvl+0x10c/0x190 [ 2084.110871][T11063] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2084.110903][T11063] ? do_vfs_ioctl+0xeda/0x1e30 [ 2084.110931][T11063] dump_stack+0x19/0x20 [ 2084.110959][T11063] should_fail_ex+0x3d9/0x530 [ 2084.110983][T11063] should_fail+0xf/0x20 [ 2084.111003][T11063] should_fail_usercopy+0x1e/0x30 [ 2084.111029][T11063] _copy_from_user+0x22/0xb0 [ 2084.111058][T11063] kvm_vm_ioctl+0x692/0xb80 [ 2084.111108][T11063] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 2084.111140][T11063] ? ioctl_has_perm+0x3e0/0x4d0 [ 2084.111168][T11063] ? has_cap_mac_admin+0xd0/0xd0 [ 2084.111196][T11063] ? proc_fail_nth_write+0x17e/0x210 [ 2084.111227][T11063] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2084.111260][T11063] ? selinux_file_ioctl+0x6e0/0x1360 [ 2084.111286][T11063] ? vfs_write+0x93e/0xf30 [ 2084.111307][T11063] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 2084.111335][T11063] ? __cfi_vfs_write+0x10/0x10 [ 2084.111356][T11063] ? __kasan_check_write+0x18/0x20 [ 2084.111390][T11063] ? mutex_unlock+0x8b/0x240 [ 2084.111412][T11063] ? __cfi_mutex_unlock+0x10/0x10 [ 2084.111440][T11063] ? __fget_files+0x2c5/0x340 [ 2084.111467][T11063] ? __fget_files+0x2c5/0x340 [ 2084.111491][T11063] ? bpf_lsm_file_ioctl+0xd/0x20 [ 2084.111524][T11063] ? security_file_ioctl+0x34/0xd0 [ 2084.111549][T11063] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 2084.111580][T11063] __se_sys_ioctl+0x135/0x1b0 [ 2084.111606][T11063] __x64_sys_ioctl+0x7f/0xa0 [ 2084.111631][T11063] x64_sys_call+0x1878/0x2ee0 [ 2084.111665][T11063] do_syscall_64+0x58/0xf0 [ 2084.111693][T11063] ? clear_bhb_loop+0x50/0xa0 [ 2084.111719][T11063] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2084.111743][T11063] RIP: 0033:0x7fdac638f6c9 [ 2084.111763][T11063] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2084.111783][T11063] RSP: 002b:00007fdac7300038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2084.111808][T11063] RAX: ffffffffffffffda RBX: 00007fdac65e5fa0 RCX: 00007fdac638f6c9 [ 2084.111826][T11063] RDX: 0000200000000040 RSI: 000000004068aea3 RDI: 0000000000000006 [ 2084.111842][T11063] RBP: 00007fdac7300090 R08: 0000000000000000 R09: 0000000000000000 [ 2084.111858][T11063] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2084.111873][T11063] R13: 00007fdac65e6038 R14: 00007fdac65e5fa0 R15: 00007fff71d26438 [ 2084.111894][T11063] [ 2084.750380][T16529] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 2084.991279][T16529] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 2085.014192][T16529] usb 4-1: config 0 interface 0 altsetting 254 endpoint 0x81 has invalid wMaxPacketSize 0 [ 2085.036375][T16529] usb 4-1: config 0 interface 0 has no altsetting 0 [ 2085.060372][T16529] usb 4-1: New USB device found, idVendor=046d, idProduct=c71c, bcdDevice= 0.00 [ 2085.069606][T16529] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2085.088600][T16529] usb 4-1: config 0 descriptor?? [ 2085.445545][T11099] bridge0: port 1(bridge_slave_0) entered listening state [ 2085.534936][T11106] __nla_validate_parse: 5 callbacks suppressed [ 2085.534962][T11106] netlink: 312 bytes leftover after parsing attributes in process `syz.0.49431'. [ 2085.705762][T11041] /dev/rnullb0: Can't lookup blockdev [ 2085.711904][T16529] usb 4-1: USB disconnect, device number 84 [ 2085.780277][T11127] netlink: 312 bytes leftover after parsing attributes in process `syz.0.49440'. [ 2085.881976][T11131] rust_binder: Write failure EFAULT in pid:738 [ 2086.016197][T11139] netlink: 20 bytes leftover after parsing attributes in process `syz.0.49446'. [ 2086.262126][T11155] netlink: 312 bytes leftover after parsing attributes in process `syz.4.49449'. [ 2086.263018][T11152] netlink: 20 bytes leftover after parsing attributes in process `syz.3.49455'. [ 2086.646938][T11189] netlink: 20 bytes leftover after parsing attributes in process `syz.3.49470'. [ 2086.967781][T11208] netlink: 20 bytes leftover after parsing attributes in process `syz.4.49479'. [ 2087.162713][T11224] netlink: 312 bytes leftover after parsing attributes in process `syz.3.49486'. [ 2087.241087][T11230] netlink: 20 bytes leftover after parsing attributes in process `syz.3.49489'. [ 2087.559636][T11247] netlink: 312 bytes leftover after parsing attributes in process `syz.3.49497'. [ 2088.445986][T11283] binfmt_misc: register: failed to install interpreter file ./file0 [ 2088.825714][T11325] bridge0: port 1(bridge_slave_0) entered listening state [ 2089.270762][T11348] bridge0: port 1(bridge_slave_0) entered listening state [ 2089.858368][T11377] bridge0: port 1(bridge_slave_0) entered listening state [ 2090.043630][T11407] binfmt_misc: register: failed to install interpreter file ./file0 [ 2090.068266][T11411] rust_binder: Write failure EFAULT in pid:749 [ 2090.165824][T11429] bridge0: port 1(bridge_slave_0) entered listening state [ 2090.708576][T11502] __nla_validate_parse: 14 callbacks suppressed [ 2090.708606][T11502] netlink: 312 bytes leftover after parsing attributes in process `syz.3.49620'. [ 2091.323437][T11537] netlink: 12 bytes leftover after parsing attributes in process `syz.4.49637'. [ 2091.327684][T11535] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11535 comm=syz.3.49636 [ 2091.561304][T11558] netlink: 12 bytes leftover after parsing attributes in process `syz.4.49647'. [ 2091.605904][T11564] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1044 sclass=netlink_xfrm_socket pid=11564 comm=syz.4.49650 [ 2091.715201][T11578] netlink: 12 bytes leftover after parsing attributes in process `syz.1.49657'. [ 2091.778770][T11583] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1044 sclass=netlink_xfrm_socket pid=11583 comm=syz.4.49661 [ 2091.923131][T11599] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11599 comm=syz.4.49668 [ 2092.090240][T11623] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11623 comm=syz.1.49678 [ 2092.221745][T11645] bridge0: port 1(bridge_slave_0) entered listening state [ 2092.882020][T11664] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:212 [ 2093.198286][T11672] bridge0: port 1(bridge_slave_0) entered blocking state [ 2093.246102][T11672] bridge0: port 1(bridge_slave_0) entered disabled state [ 2093.253295][T11672] bridge_slave_0: entered allmulticast mode [ 2093.265368][T11672] bridge_slave_0: entered promiscuous mode [ 2093.272328][T11672] bridge0: port 2(bridge_slave_1) entered blocking state [ 2093.279624][T11672] bridge0: port 2(bridge_slave_1) entered disabled state [ 2093.286883][T11672] bridge_slave_1: entered allmulticast mode [ 2093.293492][T11672] bridge_slave_1: entered promiscuous mode [ 2093.610790][T13459] bridge_slave_1: left allmulticast mode [ 2093.616620][T13459] bridge_slave_1: left promiscuous mode [ 2093.622267][T13459] bridge0: port 2(bridge_slave_1) entered disabled state [ 2093.630265][T13459] bridge_slave_0: left allmulticast mode [ 2093.636478][T13459] bridge_slave_0: left promiscuous mode [ 2093.642120][T13459] bridge0: port 1(bridge_slave_0) entered disabled state [ 2093.658186][T11681] rust_binder: Write failure EFAULT in pid:801 [ 2093.820144][T13459] tipc: Left network mode [ 2093.835498][T13459] veth1_macvtap: left promiscuous mode [ 2093.842597][T13459] veth0_vlan: left promiscuous mode [ 2093.855687][T11691] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11691 comm=syz.1.49709 [ 2093.911515][T11672] bridge0: port 2(bridge_slave_1) entered blocking state [ 2093.918621][T11672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2093.925955][T11672] bridge0: port 1(bridge_slave_0) entered blocking state [ 2093.933009][T11672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2093.969754][T13470] bridge0: port 1(bridge_slave_0) entered disabled state [ 2093.977836][T13470] bridge0: port 2(bridge_slave_1) entered disabled state [ 2093.994747][T13470] bridge0: port 1(bridge_slave_0) entered blocking state [ 2094.001960][T13470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2094.010490][T13470] bridge0: port 2(bridge_slave_1) entered blocking state [ 2094.017943][T13470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2094.048921][T11672] veth0_vlan: entered promiscuous mode [ 2094.062982][T11672] veth1_macvtap: entered promiscuous mode [ 2094.101681][T11705] bridge0: port 1(bridge_slave_0) entered listening state [ 2094.198959][T11713] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11713 comm=syz.4.49718 [ 2094.278338][T11725] bridge0: port 1(bridge_slave_0) entered listening state [ 2094.366829][T11733] netlink: 12 bytes leftover after parsing attributes in process `syz.4.49728'. [ 2094.426201][T11744] bridge0: port 1(bridge_slave_0) entered listening state [ 2094.450538][T11747] bridge0: port 1(bridge_slave_0) entered listening state [ 2094.715541][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 2095.135800][T11783] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:845 [ 2095.396882][T11803] netlink: 208 bytes leftover after parsing attributes in process `syz.4.49763'. [ 2095.431501][T11805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:62 [ 2095.557518][T11821] netlink: 208 bytes leftover after parsing attributes in process `syz.4.49772'. [ 2096.131334][T11861] bridge0: port 1(bridge_slave_0) entered listening state [ 2096.715227][T11883] /dev/nullb0: Can't lookup blockdev [ 2096.776284][T11887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.49805'. [ 2096.799570][ T36] audit: type=1400 audit(1779782718.337:1259): avc: denied { connect } for pid=11884 comm="syz.1.49804" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2096.832460][T11896] 9pnet_fd: Insufficient options for proto=fd [ 2096.952326][T11910] netlink: 12 bytes leftover after parsing attributes in process `syz.4.49815'. [ 2096.977430][T11913] 9pnet_fd: Insufficient options for proto=fd [ 2097.029481][T11922] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:112 [ 2097.246507][T11954] bridge0: port 1(bridge_slave_0) entered listening state [ 2097.664552][T11977] rust_binder: Write failure EFAULT in pid:856 [ 2097.953340][T11994] rust_binder: Write failure EFAULT in pid:150 [ 2098.555686][ T36] audit: type=1400 audit(1779782720.098:1260): avc: denied { relabelfrom } for pid=12019 comm="syz.1.49867" name="NETLINK" dev="sockfs" ino=589238 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 2098.604870][ T36] audit: type=1400 audit(1779782720.098:1261): avc: denied { relabelto } for pid=12019 comm="syz.1.49867" name="NETLINK" dev="sockfs" ino=589238 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=netlink_netfilter_socket permissive=1 [ 2099.381347][T12047] bridge0: port 1(bridge_slave_0) entered listening state [ 2099.401214][T12048] fuseblk: Bad value for 'user_id' [ 2099.436809][T12048] fuseblk: Bad value for 'user_id' [ 2099.610703][T12063] rust_binder: Write failure EFAULT in pid:180 [ 2099.642090][T12067] bridge0: port 1(bridge_slave_0) entered disabled state [ 2099.732525][ T36] audit: type=1400 audit(1779782721.269:1262): avc: denied { read } for pid=12071 comm="syz.3.49891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 2099.815114][T12083] bridge0: port 1(bridge_slave_0) entered listening state [ 2100.109187][T12107] bridge0: port 1(bridge_slave_0) entered listening state [ 2100.383572][T12126] FAULT_INJECTION: forcing a failure. [ 2100.383572][T12126] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2100.422117][T12126] CPU: 1 UID: 0 PID: 12126 Comm: syz.1.49915 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2100.422154][T12126] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2100.422170][T12126] Call Trace: [ 2100.422178][T12126] [ 2100.422188][T12126] __dump_stack+0x21/0x30 [ 2100.422224][T12126] dump_stack_lvl+0x10c/0x190 [ 2100.422256][T12126] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2100.422287][T12126] ? __kmalloc_node_noprof+0x265/0x520 [ 2100.422311][T12126] ? check_stack_object+0x82/0x140 [ 2100.422333][T12126] ? __virt_addr_valid+0x2a6/0x380 [ 2100.422359][T12126] dump_stack+0x19/0x20 [ 2100.422388][T12126] should_fail_ex+0x3d9/0x530 [ 2100.422413][T12126] should_fail+0xf/0x20 [ 2100.422434][T12126] should_fail_usercopy+0x1e/0x30 [ 2100.422460][T12126] _copy_from_user+0x22/0xb0 [ 2100.422491][T12126] vmemdup_user+0x7d/0x190 [ 2100.422525][T12126] ? __se_sys_fsetxattr+0x29c/0x4b0 [ 2100.422560][T12126] __se_sys_fsetxattr+0x2dd/0x4b0 [ 2100.422596][T12126] ? __x64_sys_fsetxattr+0xf0/0xf0 [ 2100.422636][T12126] ? __cfi_ksys_write+0x10/0x10 [ 2100.422660][T12126] __x64_sys_fsetxattr+0xc3/0xf0 [ 2100.422694][T12126] x64_sys_call+0x1a16/0x2ee0 [ 2100.422729][T12126] do_syscall_64+0x58/0xf0 [ 2100.422759][T12126] ? clear_bhb_loop+0x50/0xa0 [ 2100.422785][T12126] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2100.422809][T12126] RIP: 0033:0x7fdac638f6c9 [ 2100.422828][T12126] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2100.422850][T12126] RSP: 002b:00007fdac7300038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 2100.422875][T12126] RAX: ffffffffffffffda RBX: 00007fdac65e5fa0 RCX: 00007fdac638f6c9 [ 2100.422894][T12126] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000006 [ 2100.422910][T12126] RBP: 00007fdac7300090 R08: 0000000000000000 R09: 0000000000000000 [ 2100.422926][T12126] R10: 0000000000000020 R11: 0000000000000246 R12: 0000000000000001 [ 2100.422941][T12126] R13: 00007fdac65e6038 R14: 00007fdac65e5fa0 R15: 00007fff71d26438 [ 2100.422962][T12126] [ 2101.222132][T16529] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 2101.372054][T16529] usb 1-1: Using ep0 maxpacket: 16 [ 2101.402264][T16529] usb 1-1: config 0 has an invalid interface number: 41 but max is 0 [ 2101.410412][T16529] usb 1-1: config 0 has no interface number 0 [ 2101.426751][T16529] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2101.456263][T16529] usb 1-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2101.481995][T16529] usb 1-1: config 0 interface 41 has no altsetting 0 [ 2101.510589][T16529] usb 1-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2101.519992][T16529] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2101.543423][T16529] usb 1-1: Product: syz [ 2101.547684][T16529] usb 1-1: Manufacturer: syz [ 2101.571395][T16529] usb 1-1: SerialNumber: syz [ 2101.582174][T16529] usb 1-1: config 0 descriptor?? [ 2101.587460][T12154] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2101.596694][T12154] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2101.662949][T12200] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12200 comm=syz.3.49951 [ 2101.789001][T12206] bridge0: port 1(bridge_slave_0) entered disabled state [ 2101.823569][T12154] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2101.841902][T12154] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 2102.345284][T12221] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12221 comm=syz.1.49960 [ 2102.422424][T12225] bridge0: port 1(bridge_slave_0) entered disabled state [ 2102.597401][T12233] netlink: 312 bytes leftover after parsing attributes in process `syz.1.49967'. [ 2102.666221][T16529] CoreChips 1-1:0.41: probe with driver CoreChips failed with error -71 [ 2102.675632][T16529] usb 1-1: USB disconnect, device number 86 [ 2102.767413][T12244] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:928 [ 2103.212333][T12261] netlink: 20 bytes leftover after parsing attributes in process `syz.0.49980'. [ 2103.251133][T12261] FAULT_INJECTION: forcing a failure. [ 2103.251133][T12261] name failslab, interval 1, probability 0, space 0, times 0 [ 2103.273960][T12261] CPU: 1 UID: 0 PID: 12261 Comm: syz.0.49980 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2103.273986][T12261] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2103.273997][T12261] Call Trace: [ 2103.274003][T12261] [ 2103.274010][T12261] __dump_stack+0x21/0x30 [ 2103.274035][T12261] dump_stack_lvl+0x10c/0x190 [ 2103.274062][T12261] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2103.274086][T12261] dump_stack+0x19/0x20 [ 2103.274107][T12261] should_fail_ex+0x3d9/0x530 [ 2103.274124][T12261] should_failslab+0xac/0x100 [ 2103.274144][T12261] kmem_cache_alloc_node_noprof+0x45/0x440 [ 2103.274160][T12261] ? __alloc_skb+0x10c/0x370 [ 2103.274180][T12261] __alloc_skb+0x10c/0x370 [ 2103.274200][T12261] ? __kasan_check_read+0x15/0x20 [ 2103.274224][T12261] netlink_ack+0x155/0xa50 [ 2103.274246][T12261] ? avc_has_perm_noaudit+0x286/0x360 [ 2103.274270][T12261] ? avc_has_perm+0x144/0x220 [ 2103.274293][T12261] netlink_rcv_skb+0x2b2/0x4a0 [ 2103.274315][T12261] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 2103.274335][T12261] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 2103.274360][T12261] ? netlink_autobind+0x1c0/0x1c0 [ 2103.274384][T12261] ? is_vmalloc_addr+0x11/0x40 [ 2103.274404][T12261] rtnetlink_rcv+0x20/0x30 [ 2103.274421][T12261] netlink_unicast+0x8c0/0xa60 [ 2103.274444][T12261] netlink_sendmsg+0x7f0/0xaf0 [ 2103.274468][T12261] ? __cfi_netlink_sendmsg+0x10/0x10 [ 2103.274493][T12261] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 2103.274513][T12261] ? security_socket_sendmsg+0x33/0xd0 [ 2103.274528][T12261] ? __cfi_netlink_sendmsg+0x10/0x10 [ 2103.274551][T12261] ____sys_sendmsg+0xa15/0xa70 [ 2103.274576][T12261] ? __sys_sendmsg_sock+0x50/0x50 [ 2103.274600][T12261] ? import_iovec+0x81/0xb0 [ 2103.274622][T12261] ___sys_sendmsg+0x220/0x2a0 [ 2103.274646][T12261] ? __sys_sendmsg+0x280/0x280 [ 2103.274669][T12261] ? proc_fail_nth_write+0x17e/0x210 [ 2103.274691][T12261] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2103.274719][T12261] __x64_sys_sendmsg+0x1eb/0x2c0 [ 2103.274742][T12261] ? fput+0x1a5/0x240 [ 2103.274761][T12261] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2103.274785][T12261] ? ksys_write+0x1ef/0x250 [ 2103.274801][T12261] ? __kasan_check_read+0x15/0x20 [ 2103.274826][T12261] x64_sys_call+0x2a4c/0x2ee0 [ 2103.274850][T12261] do_syscall_64+0x58/0xf0 [ 2103.274870][T12261] ? clear_bhb_loop+0x50/0xa0 [ 2103.274888][T12261] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2103.274905][T12261] RIP: 0033:0x7fee5e98f6c9 [ 2103.274919][T12261] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2103.274933][T12261] RSP: 002b:00007fee5f89d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2103.274951][T12261] RAX: ffffffffffffffda RBX: 00007fee5ebe5fa0 RCX: 00007fee5e98f6c9 [ 2103.274963][T12261] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000005 [ 2103.274974][T12261] RBP: 00007fee5f89d090 R08: 0000000000000000 R09: 0000000000000000 [ 2103.274985][T12261] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2103.275001][T12261] R13: 00007fee5ebe6038 R14: 00007fee5ebe5fa0 R15: 00007ffdba1390e8 [ 2103.275016][T12261] [ 2103.665403][ T36] audit: type=1400 audit(1779782725.200:1263): avc: denied { setcurrent } for pid=12265 comm="syz.3.49983" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 2103.680381][T12272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.49986'. [ 2103.685517][ T36] audit: type=1401 audit(1779782725.200:1264): op=security_bounded_transition seresult=denied oldcontext=root:sysadm_r:sysadm_t newcontext=system_u:object_r:hugetlbfs_t [ 2103.724221][T12277] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12277 comm=syz.3.49989 [ 2103.803993][T12281] FAULT_INJECTION: forcing a failure. [ 2103.803993][T12281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2103.817095][T12281] CPU: 1 UID: 0 PID: 12281 Comm: syz.0.49988 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2103.817125][T12281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2103.817136][T12281] Call Trace: [ 2103.817143][T12281] [ 2103.817150][T12281] __dump_stack+0x21/0x30 [ 2103.817176][T12281] dump_stack_lvl+0x10c/0x190 [ 2103.817197][T12281] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2103.817219][T12281] ? unwind_get_return_address+0x51/0x90 [ 2103.817238][T12281] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 2103.817264][T12281] dump_stack+0x19/0x20 [ 2103.817284][T12281] should_fail_ex+0x3d9/0x530 [ 2103.817301][T12281] should_fail+0xf/0x20 [ 2103.817316][T12281] should_fail_usercopy+0x1e/0x30 [ 2103.817333][T12281] _copy_from_user+0x22/0xb0 [ 2103.817353][T12281] sk_setsockopt+0x277/0x2970 [ 2103.817376][T12281] ? __cfi_sk_setsockopt+0x10/0x10 [ 2103.817396][T12281] ? avc_has_perm_noaudit+0x286/0x360 [ 2103.817420][T12281] ? avc_has_perm+0x144/0x220 [ 2103.817442][T12281] ? __cfi_avc_has_perm+0x10/0x10 [ 2103.817466][T12281] udp_lib_setsockopt+0xf5/0x960 [ 2103.817490][T12281] ? __cfi_udp_lib_setsockopt+0x10/0x10 [ 2103.817514][T12281] udpv6_setsockopt+0x7f/0xc0 [ 2103.817529][T12281] ? __cfi_udp_v6_push_pending_frames+0x10/0x10 [ 2103.817546][T12281] sock_common_setsockopt+0xb5/0xd0 [ 2103.817564][T12281] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 2103.817582][T12281] do_sock_setsockopt+0x26d/0x400 [ 2103.817611][T12281] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 2103.817637][T12281] __x64_sys_setsockopt+0x1b8/0x250 [ 2103.817661][T12281] x64_sys_call+0x2adc/0x2ee0 [ 2103.817685][T12281] do_syscall_64+0x58/0xf0 [ 2103.817706][T12281] ? clear_bhb_loop+0x50/0xa0 [ 2103.817726][T12281] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2103.817744][T12281] RIP: 0033:0x7fee5e98f6c9 [ 2103.817757][T12281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2103.817779][T12281] RSP: 002b:00007fee5f89d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2103.817798][T12281] RAX: ffffffffffffffda RBX: 00007fee5ebe5fa0 RCX: 00007fee5e98f6c9 [ 2103.817811][T12281] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000005 [ 2103.817821][T12281] RBP: 00007fee5f89d090 R08: 0000000000000010 R09: 0000000000000000 [ 2103.817832][T12281] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2103.817843][T12281] R13: 00007fee5ebe6038 R14: 00007fee5ebe5fa0 R15: 00007ffdba1390e8 [ 2103.817858][T12281] [ 2104.347844][T12299] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=12299 comm=syz.1.49998 [ 2104.395525][T12305] bridge0: port 1(bridge_slave_0) entered listening state [ 2104.534950][T12323] bridge0: port 1(bridge_slave_0) entered listening state [ 2104.570215][T12329] rust_binder: Write failure EINVAL in pid:976 [ 2104.630090][T12335] FAULT_INJECTION: forcing a failure. [ 2104.630090][T12335] name failslab, interval 1, probability 0, space 0, times 0 [ 2104.649168][T12335] CPU: 1 UID: 0 PID: 12335 Comm: syz.0.50016 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2104.649200][T12335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2104.649211][T12335] Call Trace: [ 2104.649216][T12335] [ 2104.649224][T12335] __dump_stack+0x21/0x30 [ 2104.649265][T12335] dump_stack_lvl+0x10c/0x190 [ 2104.649287][T12335] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2104.649311][T12335] dump_stack+0x19/0x20 [ 2104.649331][T12335] should_fail_ex+0x3d9/0x530 [ 2104.649348][T12335] ? fib6_info_alloc+0x52/0x180 [ 2104.649365][T12335] should_failslab+0xac/0x100 [ 2104.649384][T12335] __kmalloc_noprof+0x69/0x530 [ 2104.649399][T12335] ? fib6_info_alloc+0x52/0x180 [ 2104.649415][T12335] fib6_info_alloc+0x52/0x180 [ 2104.649431][T12335] ? ip6_route_info_create+0x518/0x1500 [ 2104.649451][T12335] ip6_route_info_create+0x52b/0x1500 [ 2104.649474][T12335] ip6_route_add+0x2b/0x180 [ 2104.649494][T12335] addrconf_prefix_route+0x201/0x2c0 [ 2104.649514][T12335] ? addrconf_get_prefix_route+0x4b0/0x4b0 [ 2104.649538][T12335] ? avc_has_perm_noaudit+0x268/0x360 [ 2104.649568][T12335] inet6_addr_add+0x651/0xb50 [ 2104.649589][T12335] inet6_rtm_newaddr+0x73d/0xa40 [ 2104.649611][T12335] ? __cfi_inet6_rtm_newaddr+0x10/0x10 [ 2104.649634][T12335] ? __cfi_mutex_lock+0x10/0x10 [ 2104.649649][T12335] ? ns_capable+0x91/0xf0 [ 2104.649673][T12335] ? netlink_net_capable+0x129/0x160 [ 2104.649700][T12335] ? __cfi_inet6_rtm_newaddr+0x10/0x10 [ 2104.649721][T12335] rtnetlink_rcv_msg+0x882/0xa00 [ 2104.649740][T12335] ? avc_has_perm_noaudit+0x268/0x360 [ 2104.649763][T12335] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 2104.649781][T12335] ? avc_has_perm_noaudit+0x286/0x360 [ 2104.649804][T12335] ? avc_has_perm+0x144/0x220 [ 2104.649827][T12335] netlink_rcv_skb+0x22b/0x4a0 [ 2104.649849][T12335] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 2104.649868][T12335] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 2104.649892][T12335] ? netlink_autobind+0x1c0/0x1c0 [ 2104.649916][T12335] ? is_vmalloc_addr+0x11/0x40 [ 2104.649936][T12335] rtnetlink_rcv+0x20/0x30 [ 2104.649957][T12335] netlink_unicast+0x8c0/0xa60 [ 2104.649982][T12335] netlink_sendmsg+0x7f0/0xaf0 [ 2104.650006][T12335] ? __cfi_netlink_sendmsg+0x10/0x10 [ 2104.650031][T12335] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 2104.650051][T12335] ? security_socket_sendmsg+0x33/0xd0 [ 2104.650066][T12335] ? __cfi_netlink_sendmsg+0x10/0x10 [ 2104.650090][T12335] ____sys_sendmsg+0xa15/0xa70 [ 2104.650115][T12335] ? __sys_sendmsg_sock+0x50/0x50 [ 2104.650140][T12335] ? import_iovec+0x81/0xb0 [ 2104.650162][T12335] ___sys_sendmsg+0x220/0x2a0 [ 2104.650186][T12335] ? __sys_sendmsg+0x280/0x280 [ 2104.650210][T12335] ? proc_fail_nth_write+0x17e/0x210 [ 2104.650231][T12335] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2104.650259][T12335] __x64_sys_sendmsg+0x1eb/0x2c0 [ 2104.650282][T12335] ? fput+0x1a5/0x240 [ 2104.650302][T12335] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2104.650326][T12335] ? ksys_write+0x1ef/0x250 [ 2104.650341][T12335] ? __kasan_check_read+0x15/0x20 [ 2104.650379][T12335] x64_sys_call+0x2a4c/0x2ee0 [ 2104.650411][T12335] do_syscall_64+0x58/0xf0 [ 2104.650439][T12335] ? clear_bhb_loop+0x50/0xa0 [ 2104.650458][T12335] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2104.650476][T12335] RIP: 0033:0x7fee5e98f6c9 [ 2104.650490][T12335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2104.650505][T12335] RSP: 002b:00007fee5f89d038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2104.650524][T12335] RAX: ffffffffffffffda RBX: 00007fee5ebe5fa0 RCX: 00007fee5e98f6c9 [ 2104.650537][T12335] RDX: 0000000000008018 RSI: 00002000000000c0 RDI: 0000000000000005 [ 2104.650548][T12335] RBP: 00007fee5f89d090 R08: 0000000000000000 R09: 0000000000000000 [ 2104.650558][T12335] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2104.650568][T12335] R13: 00007fee5ebe6038 R14: 00007fee5ebe5fa0 R15: 00007ffdba1390e8 [ 2104.650583][T12335] [ 2105.160246][T12349] bridge0: port 1(bridge_slave_0) entered disabled state [ 2105.204101][T12353] bridge0: port 1(bridge_slave_0) entered disabled state [ 2105.242678][T12357] FAULT_INJECTION: forcing a failure. [ 2105.242678][T12357] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2105.278550][T12357] CPU: 1 UID: 0 PID: 12357 Comm: syz.1.50026 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2105.278586][T12357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2105.278601][T12357] Call Trace: [ 2105.278608][T12357] [ 2105.278618][T12357] __dump_stack+0x21/0x30 [ 2105.278653][T12357] dump_stack_lvl+0x10c/0x190 [ 2105.278683][T12357] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2105.278722][T12357] dump_stack+0x19/0x20 [ 2105.278752][T12357] should_fail_ex+0x3d9/0x530 [ 2105.278775][T12357] should_fail+0xf/0x20 [ 2105.278796][T12357] should_fail_usercopy+0x1e/0x30 [ 2105.278822][T12357] strncpy_from_user+0x28/0x270 [ 2105.278846][T12357] getname_flags+0x102/0x710 [ 2105.278871][T12357] user_path_at+0x2b/0x60 [ 2105.278907][T12357] __se_sys_mount+0x288/0x480 [ 2105.278937][T12357] ? __x64_sys_mount+0xf0/0xf0 [ 2105.278960][T12357] __x64_sys_mount+0xc3/0xf0 [ 2105.278982][T12357] x64_sys_call+0x2021/0x2ee0 [ 2105.279015][T12357] do_syscall_64+0x58/0xf0 [ 2105.279045][T12357] ? clear_bhb_loop+0x50/0xa0 [ 2105.279095][T12357] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2105.279133][T12357] RIP: 0033:0x7fdac638f6c9 [ 2105.279153][T12357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2105.279174][T12357] RSP: 002b:00007fdac7300038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2105.279201][T12357] RAX: ffffffffffffffda RBX: 00007fdac65e5fa0 RCX: 00007fdac638f6c9 [ 2105.279221][T12357] RDX: 0000200000000040 RSI: 0000200000000000 RDI: 0000000000000000 [ 2105.279238][T12357] RBP: 00007fdac7300090 R08: 0000200000000100 R09: 0000000000000000 [ 2105.279254][T12357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2105.279268][T12357] R13: 00007fdac65e6038 R14: 00007fdac65e5fa0 R15: 00007fff71d26438 [ 2105.279289][T12357] [ 2105.591695][T12375] bridge0: port 1(bridge_slave_0) entered disabled state [ 2105.732724][ T36] audit: type=1400 audit(1779782727.272:1265): avc: denied { compute_member } for pid=12388 comm="syz.4.50042" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 2105.789850][T16505] usb 1-1: new full-speed USB device number 87 using dummy_hcd [ 2105.867697][T12411] FAULT_INJECTION: forcing a failure. [ 2105.867697][T12411] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2105.880883][T12411] CPU: 0 UID: 0 PID: 12411 Comm: syz.4.50053 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2105.880929][T12411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2105.880944][T12411] Call Trace: [ 2105.880953][T12411] [ 2105.880962][T12411] __dump_stack+0x21/0x30 [ 2105.880999][T12411] dump_stack_lvl+0x10c/0x190 [ 2105.881029][T12411] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2105.881062][T12411] ? check_stack_object+0x12c/0x140 [ 2105.881085][T12411] dump_stack+0x19/0x20 [ 2105.881115][T12411] should_fail_ex+0x3d9/0x530 [ 2105.881140][T12411] should_fail+0xf/0x20 [ 2105.881161][T12411] should_fail_usercopy+0x1e/0x30 [ 2105.881186][T12411] _copy_to_user+0x24/0xa0 [ 2105.881214][T12411] simple_read_from_buffer+0xed/0x160 [ 2105.881245][T12411] proc_fail_nth_read+0x19e/0x210 [ 2105.881274][T12411] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2105.881304][T12411] ? bpf_lsm_file_permission+0xd/0x20 [ 2105.881334][T12411] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2105.881363][T12411] vfs_read+0x27d/0xc70 [ 2105.881383][T12411] ? __cfi_vfs_read+0x10/0x10 [ 2105.881402][T12411] ? __kasan_check_write+0x18/0x20 [ 2105.881436][T12411] ? mutex_lock+0x92/0x1c0 [ 2105.881457][T12411] ? __cfi_mutex_lock+0x10/0x10 [ 2105.881478][T12411] ? __fget_files+0x2c5/0x340 [ 2105.881505][T12411] ksys_read+0x141/0x250 [ 2105.881526][T12411] ? __cfi_ksys_read+0x10/0x10 [ 2105.881548][T12411] ? __kasan_check_read+0x15/0x20 [ 2105.881582][T12411] __x64_sys_read+0x7f/0x90 [ 2105.881603][T12411] x64_sys_call+0x2638/0x2ee0 [ 2105.881635][T12411] do_syscall_64+0x58/0xf0 [ 2105.881664][T12411] ? clear_bhb_loop+0x50/0xa0 [ 2105.881689][T12411] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2105.881713][T12411] RIP: 0033:0x7f2adc78e0dc [ 2105.881732][T12411] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2105.881753][T12411] RSP: 002b:00007f2add59f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2105.881777][T12411] RAX: ffffffffffffffda RBX: 00007f2adc9e5fa0 RCX: 00007f2adc78e0dc [ 2105.881795][T12411] RDX: 000000000000000f RSI: 00007f2add59f0a0 RDI: 0000000000000006 [ 2105.881810][T12411] RBP: 00007f2add59f090 R08: 0000000000000000 R09: 0000000000000000 [ 2105.881825][T12411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2105.881841][T12411] R13: 00007f2adc9e6038 R14: 00007f2adc9e5fa0 R15: 00007ffece624308 [ 2105.881861][T12411] [ 2105.919825][T16505] usb 1-1: device descriptor read/64, error -71 [ 2106.483954][ T36] audit: type=1400 audit(1779782728.022:1266): avc: denied { mount } for pid=12472 comm="syz.4.50083" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 2106.699569][T16505] usb 1-1: device descriptor read/64, error -71 [ 2106.950872][T16505] usb 1-1: new full-speed USB device number 88 using dummy_hcd [ 2107.099230][T16505] usb 1-1: device descriptor read/64, error -71 [ 2107.306649][T12561] rust_binder: Write failure EFAULT in pid:330 [ 2107.349097][T16505] usb 1-1: device descriptor read/64, error -71 [ 2107.469120][T16505] usb usb1-port1: attempt power cycle [ 2107.803115][T12574] bridge0: port 1(bridge_slave_0) entered disabled state [ 2107.810466][T16505] usb 1-1: new full-speed USB device number 89 using dummy_hcd [ 2107.829797][T16505] usb 1-1: device descriptor read/8, error -71 [ 2107.914978][T12588] bridge0: port 1(bridge_slave_0) entered disabled state [ 2107.970442][T16505] usb 1-1: device descriptor read/8, error -71 [ 2108.156700][T12610] bridge0: port 1(bridge_slave_0) entered disabled state [ 2108.218839][T16505] usb 1-1: new full-speed USB device number 90 using dummy_hcd [ 2108.249911][T16505] usb 1-1: device descriptor read/8, error -71 [ 2108.253117][T12623] bridge0: port 1(bridge_slave_0) entered disabled state [ 2108.337816][T12637] FAULT_INJECTION: forcing a failure. [ 2108.337816][T12637] name failslab, interval 1, probability 0, space 0, times 0 [ 2108.350591][T12637] CPU: 0 UID: 0 PID: 12637 Comm: syz.4.50157 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2108.350630][T12637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2108.350645][T12637] Call Trace: [ 2108.350652][T12637] [ 2108.350662][T12637] __dump_stack+0x21/0x30 [ 2108.350700][T12637] dump_stack_lvl+0x10c/0x190 [ 2108.350729][T12637] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2108.350759][T12637] dump_stack+0x19/0x20 [ 2108.350787][T12637] should_fail_ex+0x3d9/0x530 [ 2108.350809][T12637] should_failslab+0xac/0x100 [ 2108.350834][T12637] __kmalloc_cache_noprof+0x41/0x490 [ 2108.350856][T12637] ? ____ip_mc_inc_group+0x1ab/0x960 [ 2108.350882][T12637] ____ip_mc_inc_group+0x1ab/0x960 [ 2108.350907][T12637] __ip_mc_join_group+0x333/0x410 [ 2108.350933][T12637] ip_mc_join_group+0x23/0x40 [ 2108.350957][T12637] ip_mcast_join_leave+0x18f/0x220 [ 2108.350990][T12637] ? compat_ip_mcast_join_leave+0x220/0x220 [ 2108.351023][T12637] ? __cfi_mutex_lock+0x10/0x10 [ 2108.351043][T12637] ? avc_has_perm_noaudit+0x286/0x360 [ 2108.351077][T12637] do_ip_setsockopt+0x1969/0x29e0 [ 2108.351108][T12637] ? __cfi_avc_has_perm+0x10/0x10 [ 2108.351136][T12637] ? __cfi_do_ip_setsockopt+0x10/0x10 [ 2108.351181][T12637] ? selinux_socket_setsockopt+0x2ea/0x390 [ 2108.351217][T12637] ? __cfi_selinux_socket_setsockopt+0x10/0x10 [ 2108.351252][T12637] ip_setsockopt+0x63/0x100 [ 2108.351284][T12637] udp_setsockopt+0xa3/0xc0 [ 2108.351314][T12637] sock_common_setsockopt+0xb5/0xd0 [ 2108.351340][T12637] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 2108.351365][T12637] do_sock_setsockopt+0x26d/0x400 [ 2108.351399][T12637] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 2108.351434][T12637] __x64_sys_setsockopt+0x1b8/0x250 [ 2108.351467][T12637] x64_sys_call+0x2adc/0x2ee0 [ 2108.351500][T12637] do_syscall_64+0x58/0xf0 [ 2108.351538][T12637] ? clear_bhb_loop+0x50/0xa0 [ 2108.351564][T12637] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2108.351589][T12637] RIP: 0033:0x7f2adc78f6c9 [ 2108.351608][T12637] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2108.351630][T12637] RSP: 002b:00007f2add59f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2108.351656][T12637] RAX: ffffffffffffffda RBX: 00007f2adc9e5fa0 RCX: 00007f2adc78f6c9 [ 2108.351675][T12637] RDX: 000000000000002a RSI: 0000000000000000 RDI: 0000000000000005 [ 2108.351690][T12637] RBP: 00007f2add59f090 R08: 0000000000000088 R09: 0000000000000000 [ 2108.351706][T12637] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2108.351722][T12637] R13: 00007f2adc9e6038 R14: 00007f2adc9e5fa0 R15: 00007ffece624308 [ 2108.351742][T12637] [ 2108.429738][T16505] usb 1-1: device descriptor read/8, error -71 [ 2108.662961][T12643] bridge0: port 1(bridge_slave_0) entered disabled state [ 2108.907473][T12670] bridge0: port 1(bridge_slave_0) entered disabled state [ 2109.178255][T16505] usb usb1-port1: unable to enumerate USB device [ 2109.268709][T12690] bridge0: port 1(bridge_slave_0) entered disabled state [ 2109.484050][T12716] bridge0: port 1(bridge_slave_0) entered disabled state [ 2109.504487][T12720] bridge0: port 1(bridge_slave_0) entered disabled state [ 2109.720676][T12745] bridge0: port 1(bridge_slave_0) entered disabled state [ 2109.883656][T12765] rust_binder: Write failure EFAULT in pid:444 [ 2109.938534][T12772] bridge0: port 1(bridge_slave_0) entered disabled state [ 2110.152078][T12798] bridge0: port 1(bridge_slave_0) entered disabled state [ 2110.256086][T12809] overlayfs: missing 'lowerdir' [ 2110.969297][T12850] netlink: 312 bytes leftover after parsing attributes in process `syz.4.50256'. [ 2111.251554][T12884] bridge0: port 1(bridge_slave_0) entered disabled state [ 2111.414656][T12904] bridge0: port 1(bridge_slave_0) entered disabled state [ 2111.666954][T16505] usb 4-1: new low-speed USB device number 85 using dummy_hcd [ 2111.812710][T12943] FAULT_INJECTION: forcing a failure. [ 2111.812710][T12943] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2111.832269][T16505] usb 4-1: Invalid ep0 maxpacket: 64 [ 2111.847171][T12943] CPU: 1 UID: 0 PID: 12943 Comm: syz.0.50297 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2111.847206][T12943] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2111.847221][T12943] Call Trace: [ 2111.847230][T12943] [ 2111.847240][T12943] __dump_stack+0x21/0x30 [ 2111.847279][T12943] dump_stack_lvl+0x10c/0x190 [ 2111.847310][T12943] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2111.847340][T12943] ? unwind_get_return_address+0x51/0x90 [ 2111.847369][T12943] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 2111.847402][T12943] dump_stack+0x19/0x20 [ 2111.847439][T12943] should_fail_ex+0x3d9/0x530 [ 2111.847464][T12943] should_fail+0xf/0x20 [ 2111.847484][T12943] should_fail_usercopy+0x1e/0x30 [ 2111.847508][T12943] _copy_from_user+0x22/0xb0 [ 2111.847536][T12943] sk_setsockopt+0x277/0x2970 [ 2111.847569][T12943] ? __cfi_sk_setsockopt+0x10/0x10 [ 2111.847598][T12943] ? avc_has_perm_noaudit+0x286/0x360 [ 2111.847633][T12943] ? avc_has_perm+0x144/0x220 [ 2111.847665][T12943] ? __cfi_avc_has_perm+0x10/0x10 [ 2111.847698][T12943] udp_lib_setsockopt+0xf5/0x960 [ 2111.847736][T12943] ? __cfi_udp_lib_setsockopt+0x10/0x10 [ 2111.847770][T12943] udpv6_setsockopt+0x7f/0xc0 [ 2111.847791][T12943] ? __cfi_udp_v6_push_pending_frames+0x10/0x10 [ 2111.847814][T12943] sock_common_setsockopt+0xb5/0xd0 [ 2111.847840][T12943] ? __cfi_sock_common_setsockopt+0x10/0x10 [ 2111.847866][T12943] do_sock_setsockopt+0x26d/0x400 [ 2111.847900][T12943] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 2111.847935][T12943] __x64_sys_setsockopt+0x1b8/0x250 [ 2111.847968][T12943] x64_sys_call+0x2adc/0x2ee0 [ 2111.848001][T12943] do_syscall_64+0x58/0xf0 [ 2111.848031][T12943] ? clear_bhb_loop+0x50/0xa0 [ 2111.848057][T12943] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2111.848082][T12943] RIP: 0033:0x7fee5e98f6c9 [ 2111.848102][T12943] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2111.848123][T12943] RSP: 002b:00007fee5f89d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2111.848148][T12943] RAX: ffffffffffffffda RBX: 00007fee5ebe5fa0 RCX: 00007fee5e98f6c9 [ 2111.848174][T12943] RDX: 000000000000001a RSI: 0000000000000001 RDI: 0000000000000005 [ 2111.848188][T12943] RBP: 00007fee5f89d090 R08: 0000000000000010 R09: 0000000000000000 [ 2111.848204][T12943] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2111.848219][T12943] R13: 00007fee5ebe6038 R14: 00007fee5ebe5fa0 R15: 00007ffdba1390e8 [ 2111.848240][T12943] [ 2112.356584][T16505] usb 4-1: new low-speed USB device number 86 using dummy_hcd [ 2112.526448][T16505] usb 4-1: Invalid ep0 maxpacket: 64 [ 2112.531895][T16505] usb usb4-port1: attempt power cycle [ 2112.886335][T16505] usb 4-1: new low-speed USB device number 87 using dummy_hcd [ 2112.916591][T16505] usb 4-1: Invalid ep0 maxpacket: 64 [ 2113.046212][T16505] usb 4-1: new low-speed USB device number 88 using dummy_hcd [ 2113.076549][T16505] usb 4-1: Invalid ep0 maxpacket: 64 [ 2113.081986][T16505] usb usb4-port1: unable to enumerate USB device [ 2114.517529][T13048] FAULT_INJECTION: forcing a failure. [ 2114.517529][T13048] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2114.555557][T13048] CPU: 1 UID: 0 PID: 13048 Comm: syz.0.50349 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2114.555597][T13048] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2114.555609][T13048] Call Trace: [ 2114.555614][T13048] [ 2114.555621][T13048] __dump_stack+0x21/0x30 [ 2114.555648][T13048] dump_stack_lvl+0x10c/0x190 [ 2114.555670][T13048] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2114.555694][T13048] dump_stack+0x19/0x20 [ 2114.555714][T13048] should_fail_ex+0x3d9/0x530 [ 2114.555732][T13048] should_fail+0xf/0x20 [ 2114.555747][T13048] should_fail_usercopy+0x1e/0x30 [ 2114.555764][T13048] _copy_from_user+0x22/0xb0 [ 2114.555785][T13048] copy_siginfo_from_user+0x90/0x3d0 [ 2114.555809][T13048] ? __cfi_copy_siginfo_from_user+0x10/0x10 [ 2114.555832][T13048] ? proc_fail_nth_write+0x17e/0x210 [ 2114.555854][T13048] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2114.555877][T13048] ? bpf_lsm_file_permission+0xd/0x20 [ 2114.555901][T13048] do_pidfd_send_signal+0x15c/0x5f0 [ 2114.555919][T13048] ? kill_proc_info+0xb0/0xb0 [ 2114.555936][T13048] ? __kasan_check_write+0x18/0x20 [ 2114.555962][T13048] ? mutex_unlock+0x8b/0x240 [ 2114.555978][T13048] ? __cfi_mutex_unlock+0x10/0x10 [ 2114.555992][T13048] ? __fget_files+0x2c5/0x340 [ 2114.556013][T13048] __se_sys_pidfd_send_signal+0x294/0x330 [ 2114.556045][T13048] __x64_sys_pidfd_send_signal+0x9f/0xc0 [ 2114.556070][T13048] x64_sys_call+0x2d10/0x2ee0 [ 2114.556094][T13048] do_syscall_64+0x58/0xf0 [ 2114.556115][T13048] ? clear_bhb_loop+0x50/0xa0 [ 2114.556133][T13048] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2114.556151][T13048] RIP: 0033:0x7fee5e98f6c9 [ 2114.556165][T13048] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2114.556181][T13048] RSP: 002b:00007fee5f89d038 EFLAGS: 00000246 ORIG_RAX: 00000000000001a8 [ 2114.556198][T13048] RAX: ffffffffffffffda RBX: 00007fee5ebe5fa0 RCX: 00007fee5e98f6c9 [ 2114.556211][T13048] RDX: 0000200000000000 RSI: 0000000000000025 RDI: 0000000000000005 [ 2114.556222][T13048] RBP: 00007fee5f89d090 R08: 0000000000000000 R09: 0000000000000000 [ 2114.556232][T13048] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2114.556242][T13048] R13: 00007fee5ebe6038 R14: 00007fee5ebe5fa0 R15: 00007ffdba1390e8 [ 2114.556258][T13048] [ 2114.914684][T13068] bridge0: port 1(bridge_slave_0) entered disabled state [ 2114.959815][T13074] FAULT_INJECTION: forcing a failure. [ 2114.959815][T13074] name failslab, interval 1, probability 0, space 0, times 0 [ 2114.972471][T13074] CPU: 1 UID: 0 PID: 13074 Comm: syz.0.50361 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2114.972496][T13074] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2114.972507][T13074] Call Trace: [ 2114.972513][T13074] [ 2114.972520][T13074] __dump_stack+0x21/0x30 [ 2114.972547][T13074] dump_stack_lvl+0x10c/0x190 [ 2114.972568][T13074] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2114.972596][T13074] dump_stack+0x19/0x20 [ 2114.972616][T13074] should_fail_ex+0x3d9/0x530 [ 2114.972634][T13074] should_failslab+0xac/0x100 [ 2114.972653][T13074] kmem_cache_alloc_lru_noprof+0x44/0x430 [ 2114.972670][T13074] ? sock_alloc_inode+0x48/0x150 [ 2114.972688][T13074] sock_alloc_inode+0x48/0x150 [ 2114.972706][T13074] ? __cfi_sock_alloc_inode+0x10/0x10 [ 2114.972723][T13074] alloc_inode+0x7a/0x270 [ 2114.972742][T13074] new_inode_pseudo+0x19/0x40 [ 2114.972761][T13074] do_accept+0x15a/0x6b0 [ 2114.972781][T13074] ? _raw_spin_lock+0x8c/0x120 [ 2114.972802][T13074] ? __cfi_do_accept+0x10/0x10 [ 2114.972825][T13074] __sys_accept4+0x11e/0x1c0 [ 2114.972845][T13074] ? __cfi___sys_accept4+0x10/0x10 [ 2114.972867][T13074] __x64_sys_accept4+0x9e/0xb0 [ 2114.972888][T13074] x64_sys_call+0x2527/0x2ee0 [ 2114.972912][T13074] do_syscall_64+0x58/0xf0 [ 2114.972932][T13074] ? clear_bhb_loop+0x50/0xa0 [ 2114.972950][T13074] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2114.972967][T13074] RIP: 0033:0x7fee5e98f6c9 [ 2114.972980][T13074] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2114.972995][T13074] RSP: 002b:00007fee5f89d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 2114.973018][T13074] RAX: ffffffffffffffda RBX: 00007fee5ebe5fa0 RCX: 00007fee5e98f6c9 [ 2114.973031][T13074] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 2114.973041][T13074] RBP: 00007fee5f89d090 R08: 0000000000000000 R09: 0000000000000000 [ 2114.973052][T13074] R10: 0400000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2114.973063][T13074] R13: 00007fee5ebe6038 R14: 00007fee5ebe5fa0 R15: 00007ffdba1390e8 [ 2114.973077][T13074] [ 2115.291489][T13088] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1044 sclass=netlink_xfrm_socket pid=13088 comm=syz.4.50367 [ 2115.320016][T13090] bridge0: port 1(bridge_slave_0) entered disabled state [ 2115.429290][T13096] FAULT_INJECTION: forcing a failure. [ 2115.429290][T13096] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2115.456823][T13096] CPU: 1 UID: 0 PID: 13096 Comm: syz.0.50371 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2115.456851][T13096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2115.456862][T13096] Call Trace: [ 2115.456868][T13096] [ 2115.456874][T13096] __dump_stack+0x21/0x30 [ 2115.456907][T13096] dump_stack_lvl+0x10c/0x190 [ 2115.456929][T13096] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2115.456953][T13096] dump_stack+0x19/0x20 [ 2115.456973][T13096] should_fail_ex+0x3d9/0x530 [ 2115.456991][T13096] should_fail+0xf/0x20 [ 2115.457005][T13096] should_fail_usercopy+0x1e/0x30 [ 2115.457023][T13096] strncpy_from_user+0x28/0x270 [ 2115.457039][T13096] __se_sys_fsetxattr+0x17e/0x4b0 [ 2115.457065][T13096] ? __x64_sys_fsetxattr+0xf0/0xf0 [ 2115.457092][T13096] ? __cfi_ksys_write+0x10/0x10 [ 2115.457109][T13096] __x64_sys_fsetxattr+0xc3/0xf0 [ 2115.457133][T13096] x64_sys_call+0x1a16/0x2ee0 [ 2115.457157][T13096] do_syscall_64+0x58/0xf0 [ 2115.457177][T13096] ? clear_bhb_loop+0x50/0xa0 [ 2115.457196][T13096] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2115.457213][T13096] RIP: 0033:0x7fee5e98f6c9 [ 2115.457227][T13096] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2115.457241][T13096] RSP: 002b:00007fee5f89d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000be [ 2115.457259][T13096] RAX: ffffffffffffffda RBX: 00007fee5ebe5fa0 RCX: 00007fee5e98f6c9 [ 2115.457271][T13096] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 2115.457282][T13096] RBP: 00007fee5f89d090 R08: 0000000000000000 R09: 0000000000000000 [ 2115.457293][T13096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2115.457303][T13096] R13: 00007fee5ebe6038 R14: 00007fee5ebe5fa0 R15: 00007ffdba1390e8 [ 2115.457317][T13096] [ 2115.839689][T13107] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1044 sclass=netlink_xfrm_socket pid=13107 comm=syz.1.50376 [ 2115.955654][T13125] 9pnet_fd: Insufficient options for proto=fd [ 2116.046016][T13138] FAULT_INJECTION: forcing a failure. [ 2116.046016][T13138] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2116.072995][T13138] CPU: 1 UID: 0 PID: 13138 Comm: syz.0.50391 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2116.073023][T13138] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2116.073034][T13138] Call Trace: [ 2116.073039][T13138] [ 2116.073046][T13138] __dump_stack+0x21/0x30 [ 2116.073073][T13138] dump_stack_lvl+0x10c/0x190 [ 2116.073095][T13138] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2116.073118][T13138] ? check_stack_object+0x12c/0x140 [ 2116.073135][T13138] dump_stack+0x19/0x20 [ 2116.073162][T13138] should_fail_ex+0x3d9/0x530 [ 2116.073179][T13138] should_fail+0xf/0x20 [ 2116.073194][T13138] should_fail_usercopy+0x1e/0x30 [ 2116.073212][T13138] _copy_to_user+0x24/0xa0 [ 2116.073232][T13138] simple_read_from_buffer+0xed/0x160 [ 2116.073254][T13138] proc_fail_nth_read+0x19e/0x210 [ 2116.073276][T13138] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2116.073298][T13138] ? bpf_lsm_file_permission+0xd/0x20 [ 2116.073321][T13138] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2116.073342][T13138] vfs_read+0x27d/0xc70 [ 2116.073356][T13138] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 2116.073378][T13138] ? __cfi_vfs_read+0x10/0x10 [ 2116.073392][T13138] ? __kasan_check_write+0x18/0x20 [ 2116.073416][T13138] ? mutex_lock+0x92/0x1c0 [ 2116.073431][T13138] ? __cfi_mutex_lock+0x10/0x10 [ 2116.073445][T13138] ? __fget_files+0x2c5/0x340 [ 2116.073464][T13138] ksys_read+0x141/0x250 [ 2116.073478][T13138] ? __cfi_ksys_read+0x10/0x10 [ 2116.073493][T13138] ? __kasan_check_read+0x15/0x20 [ 2116.073517][T13138] __x64_sys_read+0x7f/0x90 [ 2116.073531][T13138] x64_sys_call+0x2638/0x2ee0 [ 2116.073555][T13138] do_syscall_64+0x58/0xf0 [ 2116.073575][T13138] ? clear_bhb_loop+0x50/0xa0 [ 2116.073594][T13138] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2116.073611][T13138] RIP: 0033:0x7fee5e98e0dc [ 2116.073625][T13138] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2116.073640][T13138] RSP: 002b:00007fee5f89d030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2116.073659][T13138] RAX: ffffffffffffffda RBX: 00007fee5ebe5fa0 RCX: 00007fee5e98e0dc [ 2116.073672][T13138] RDX: 000000000000000f RSI: 00007fee5f89d0a0 RDI: 0000000000000006 [ 2116.073683][T13138] RBP: 00007fee5f89d090 R08: 0000000000000000 R09: 0000000000000000 [ 2116.073693][T13138] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2116.073703][T13138] R13: 00007fee5ebe6038 R14: 00007fee5ebe5fa0 R15: 00007ffdba1390e8 [ 2116.073718][T13138] [ 2116.427932][T13159] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50402'. [ 2116.562879][T13179] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1044 sclass=netlink_xfrm_socket pid=13179 comm=syz.0.50412 [ 2116.686971][ T36] audit: type=1400 audit(1779782738.237:1267): avc: denied { create } for pid=13196 comm="syz.0.50421" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 2116.795224][T13214] bridge0: port 1(bridge_slave_0) entered disabled state [ 2116.959645][T13239] bridge0: port 1(bridge_slave_0) entered disabled state [ 2117.212876][T13265] SELinux: unrecognized netlink message: protocol=6 nlmsg_type=1044 sclass=netlink_xfrm_socket pid=13265 comm=syz.3.50454 [ 2117.372292][T13289] FAULT_INJECTION: forcing a failure. [ 2117.372292][T13289] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 2117.389332][T13290] netlink: 312 bytes leftover after parsing attributes in process `syz.1.50466'. [ 2117.419923][T13289] CPU: 1 UID: 0 PID: 13289 Comm: syz.3.50465 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2117.419952][T13289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2117.419963][T13289] Call Trace: [ 2117.419968][T13289] [ 2117.419975][T13289] __dump_stack+0x21/0x30 [ 2117.420002][T13289] dump_stack_lvl+0x10c/0x190 [ 2117.420024][T13289] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2117.420048][T13289] dump_stack+0x19/0x20 [ 2117.420068][T13289] should_fail_ex+0x3d9/0x530 [ 2117.420086][T13289] should_fail_alloc_page+0xeb/0x110 [ 2117.420106][T13289] __alloc_pages_noprof+0x19b/0x7b0 [ 2117.420128][T13289] ? __kernel_text_address+0x11/0x40 [ 2117.420150][T13289] ? unwind_get_return_address+0x51/0x90 [ 2117.420170][T13289] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 2117.420195][T13289] ? stack_depot_save_flags+0x38/0x800 [ 2117.420213][T13289] __folio_alloc_noprof+0x14/0x80 [ 2117.420235][T13289] shmem_alloc_and_add_folio+0x452/0x1050 [ 2117.420255][T13289] ? avc_has_perm_noaudit+0x268/0x360 [ 2117.420280][T13289] ? put_swap_device+0x130/0x130 [ 2117.420299][T13289] ? shmem_huge_global_enabled+0x2da/0x360 [ 2117.420318][T13289] ? shmem_allowable_huge_orders+0x1f7/0x430 [ 2117.420336][T13289] ? dput+0xd0/0x510 [ 2117.420358][T13289] shmem_get_folio_gfp+0x5f0/0x1380 [ 2117.420378][T13289] ? shmem_get_folio+0xc0/0xc0 [ 2117.420395][T13289] ? inode_to_bdi+0x6d/0x100 [ 2117.420419][T13289] shmem_write_begin+0xf4/0x270 [ 2117.420439][T13289] generic_perform_write+0x330/0x960 [ 2117.420465][T13289] ? __cfi_generic_perform_write+0x10/0x10 [ 2117.420489][T13289] ? down_write+0xe9/0x2a0 [ 2117.420507][T13289] ? file_update_time+0xa3/0x220 [ 2117.420529][T13289] shmem_file_write_iter+0x105/0x130 [ 2117.420551][T13289] do_iter_readv_writev+0x628/0x810 [ 2117.420569][T13289] ? vfs_iter_read+0x5f0/0x5f0 [ 2117.420585][T13289] ? __cfi_file_remove_privs_flags+0x10/0x10 [ 2117.420607][T13289] ? _parse_integer+0x2e/0x40 [ 2117.420631][T13289] ? ovl_path_type+0x1c1/0x3f0 [ 2117.420653][T13289] ? bpf_lsm_file_permission+0xd/0x20 [ 2117.420676][T13289] vfs_iter_write+0x345/0x920 [ 2117.420693][T13289] backing_file_write_iter+0x34f/0x890 [ 2117.420715][T13289] ovl_write_iter+0x391/0x490 [ 2117.420734][T13289] ? __cfi_ovl_write_iter+0x10/0x10 [ 2117.420751][T13289] ? proc_fail_nth_write+0x17e/0x210 [ 2117.420773][T13289] ? __cfi_ovl_file_end_write+0x10/0x10 [ 2117.420800][T13289] vfs_write+0x718/0xf30 [ 2117.420815][T13289] ? __cfi_ovl_write_iter+0x10/0x10 [ 2117.420834][T13289] ? __cfi_vfs_write+0x10/0x10 [ 2117.420848][T13289] ? __cfi_mutex_lock+0x10/0x10 [ 2117.420865][T13289] ksys_write+0x141/0x250 [ 2117.420880][T13289] ? __cfi_ksys_write+0x10/0x10 [ 2117.420895][T13289] ? __kasan_check_read+0x15/0x20 [ 2117.420920][T13289] __x64_sys_write+0x7f/0x90 [ 2117.420934][T13289] x64_sys_call+0x271c/0x2ee0 [ 2117.420958][T13289] do_syscall_64+0x58/0xf0 [ 2117.420979][T13289] ? clear_bhb_loop+0x50/0xa0 [ 2117.420997][T13289] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2117.421015][T13289] RIP: 0033:0x7f1792f8f6c9 [ 2117.421029][T13289] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2117.421044][T13289] RSP: 002b:00007f1793d5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 2117.421062][T13289] RAX: ffffffffffffffda RBX: 00007f17931e5fa0 RCX: 00007f1792f8f6c9 [ 2117.421075][T13289] RDX: 0000000000000118 RSI: 0000200000000340 RDI: 0000000000000005 [ 2117.421085][T13289] RBP: 00007f1793d5c090 R08: 0000000000000000 R09: 0000000000000000 [ 2117.421096][T13289] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2117.421106][T13289] R13: 00007f17931e6038 R14: 00007f17931e5fa0 R15: 00007fff67e210b8 [ 2117.421121][T13289] [ 2117.807611][ T36] audit: type=1400 audit(1779782739.358:1268): avc: denied { mounton } for pid=13296 comm="syz.1.50470" path="/proc/1202/task" dev="proc" ino=596312 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 2117.808001][T13297] random: crng reseeded on system resumption [ 2117.856288][ T36] audit: type=1400 audit(1779782739.408:1269): avc: denied { associate } for pid=13296 comm="syz.1.50470" name="cpuacct.usage_percpu" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 2118.500147][T13332] FAULT_INJECTION: forcing a failure. [ 2118.500147][T13332] name failslab, interval 1, probability 0, space 0, times 0 [ 2118.533471][T13332] CPU: 1 UID: 0 PID: 13332 Comm: syz.0.50487 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2118.533500][T13332] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2118.533511][T13332] Call Trace: [ 2118.533516][T13332] [ 2118.533524][T13332] __dump_stack+0x21/0x30 [ 2118.533549][T13332] dump_stack_lvl+0x10c/0x190 [ 2118.533571][T13332] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2118.533593][T13332] ? proc_tid_base_lookup+0x2f/0x40 [ 2118.533616][T13332] ? do_filp_open+0x1c6/0x3e0 [ 2118.533637][T13332] ? do_sys_openat2+0x12c/0x1c0 [ 2118.533658][T13332] ? __x64_sys_openat+0x13a/0x170 [ 2118.533679][T13332] ? do_syscall_64+0x58/0xf0 [ 2118.533701][T13332] dump_stack+0x19/0x20 [ 2118.533721][T13332] should_fail_ex+0x3d9/0x530 [ 2118.533739][T13332] should_failslab+0xac/0x100 [ 2118.533757][T13332] kmem_cache_alloc_noprof+0x42/0x430 [ 2118.533772][T13332] ? __asan_memcpy+0x5a/0x80 [ 2118.533787][T13332] ? vm_area_dup+0x42/0x570 [ 2118.533805][T13332] vm_area_dup+0x42/0x570 [ 2118.533822][T13332] __split_vma+0x1bd/0xa80 [ 2118.533837][T13332] ? kasan_save_alloc_info+0x40/0x50 [ 2118.533861][T13332] ? vms_gather_munmap_vmas+0xdd0/0xdd0 [ 2118.533881][T13332] vms_gather_munmap_vmas+0x273/0xdd0 [ 2118.533901][T13332] mmap_region+0x598/0x1bc0 [ 2118.533924][T13332] ? __cfi_mmap_region+0x10/0x10 [ 2118.533942][T13332] ? __kasan_check_read+0x15/0x20 [ 2118.533966][T13332] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 2118.533987][T13332] ? file_mmap_ok+0x147/0x1a0 [ 2118.534003][T13332] do_mmap+0xb6d/0x13c0 [ 2118.534018][T13332] ? __cfi_do_mmap+0x10/0x10 [ 2118.534031][T13332] ? down_write_killable+0xe9/0x2d0 [ 2118.534050][T13332] ? __cfi_down_write_killable+0x10/0x10 [ 2118.534068][T13332] vm_mmap_pgoff+0x38f/0x4e0 [ 2118.534085][T13332] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 2118.534100][T13332] ? __fget_files+0x2c5/0x340 [ 2118.534119][T13332] ksys_mmap_pgoff+0x166/0x1e0 [ 2118.534135][T13332] __x64_sys_mmap+0x121/0x140 [ 2118.534160][T13332] x64_sys_call+0x13bf/0x2ee0 [ 2118.534184][T13332] do_syscall_64+0x58/0xf0 [ 2118.534204][T13332] ? clear_bhb_loop+0x50/0xa0 [ 2118.534222][T13332] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2118.534240][T13332] RIP: 0033:0x7fee5e98f6c9 [ 2118.534254][T13332] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2118.534270][T13332] RSP: 002b:00007fee5f89d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2118.534288][T13332] RAX: ffffffffffffffda RBX: 00007fee5ebe5fa0 RCX: 00007fee5e98f6c9 [ 2118.534300][T13332] RDX: 0000000000000000 RSI: 0000000000030000 RDI: 0000200000001000 [ 2118.534311][T13332] RBP: 00007fee5f89d090 R08: 0000000000000005 R09: 0000000000000000 [ 2118.534321][T13332] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 2118.534332][T13332] R13: 00007fee5ebe6038 R14: 00007fee5ebe5fa0 R15: 00007ffdba1390e8 [ 2118.534346][T13332] [ 2119.252647][T13366] netlink: 312 bytes leftover after parsing attributes in process `syz.0.50502'. [ 2119.372032][T13383] FAULT_INJECTION: forcing a failure. [ 2119.372032][T13383] name failslab, interval 1, probability 0, space 0, times 0 [ 2119.410144][T13383] CPU: 1 UID: 0 PID: 13383 Comm: syz.1.50510 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2119.410173][T13383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2119.410184][T13383] Call Trace: [ 2119.410190][T13383] [ 2119.410197][T13383] __dump_stack+0x21/0x30 [ 2119.410224][T13383] dump_stack_lvl+0x10c/0x190 [ 2119.410246][T13383] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2119.410267][T13383] ? __kasan_check_write+0x18/0x20 [ 2119.410292][T13383] ? proc_fail_nth_write+0x17e/0x210 [ 2119.410314][T13383] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2119.410342][T13383] dump_stack+0x19/0x20 [ 2119.410363][T13383] should_fail_ex+0x3d9/0x530 [ 2119.410380][T13383] should_failslab+0xac/0x100 [ 2119.410398][T13383] kmem_cache_alloc_noprof+0x42/0x430 [ 2119.410413][T13383] ? getname_flags+0xc6/0x710 [ 2119.410429][T13383] ? __kasan_slab_free+0x6a/0x80 [ 2119.410447][T13383] getname_flags+0xc6/0x710 [ 2119.410463][T13383] ? build_open_flags+0x487/0x600 [ 2119.410484][T13383] getname+0x1b/0x30 [ 2119.410499][T13383] do_sys_openat2+0xcb/0x1c0 [ 2119.410520][T13383] ? do_sys_open+0x100/0x100 [ 2119.410540][T13383] ? ksys_write+0x1de/0x250 [ 2119.410555][T13383] ? __cfi_ksys_write+0x10/0x10 [ 2119.410570][T13383] __x64_sys_openat+0x13a/0x170 [ 2119.410592][T13383] x64_sys_call+0xe69/0x2ee0 [ 2119.410616][T13383] do_syscall_64+0x58/0xf0 [ 2119.410637][T13383] ? clear_bhb_loop+0x50/0xa0 [ 2119.410655][T13383] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2119.410673][T13383] RIP: 0033:0x7fdac638df10 [ 2119.410686][T13383] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 2119.410701][T13383] RSP: 002b:00007fdac72fff60 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2119.410719][T13383] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdac638df10 [ 2119.410731][T13383] RDX: 0000000000000000 RSI: 00007fdac641207e RDI: 00000000ffffff9c [ 2119.410742][T13383] RBP: 00007fdac641207e R08: 0000000000000000 R09: 0000000000000000 [ 2119.410753][T13383] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2119.410763][T13383] R13: 00007fdac65e6038 R14: 00007fdac65e5fa0 R15: 00007fff71d26438 [ 2119.410777][T13383] [ 2119.863987][T13391] netlink: 312 bytes leftover after parsing attributes in process `syz.0.50513'. [ 2120.013243][ T36] audit: type=1326 audit(1779782741.559:1270): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13396 comm="syz.0.50518" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fee5e98f6c9 code=0x0 [ 2120.080385][T13400] netlink: 'syz.0.50518': attribute type 4 has an invalid length. [ 2120.094394][T13400] netlink: 8 bytes leftover after parsing attributes in process `syz.0.50518'. [ 2120.109462][T13400] /dev/rnullb0: Can't lookup blockdev [ 2120.237035][T13421] rust_binder: Write failure EFAULT in pid:599 [ 2120.473703][T13430] bridge0: port 1(bridge_slave_0) entered blocking state [ 2120.487019][T13430] bridge0: port 1(bridge_slave_0) entered disabled state [ 2120.494265][T13430] bridge_slave_0: entered allmulticast mode [ 2120.501444][T13430] bridge_slave_0: entered promiscuous mode [ 2120.652967][T13430] bridge0: port 2(bridge_slave_1) entered blocking state [ 2120.660079][T13430] bridge0: port 2(bridge_slave_1) entered disabled state [ 2120.667714][T13430] bridge_slave_1: entered allmulticast mode [ 2120.674408][T13430] bridge_slave_1: entered promiscuous mode [ 2120.680684][T13470] bridge_slave_1: left allmulticast mode [ 2120.686641][T13470] bridge_slave_1: left promiscuous mode [ 2120.692593][T13470] bridge0: port 2(bridge_slave_1) entered disabled state [ 2120.700396][T13470] bridge_slave_0: left allmulticast mode [ 2120.706370][T13470] bridge_slave_0: left promiscuous mode [ 2120.712009][T13470] bridge0: port 1(bridge_slave_0) entered disabled state [ 2120.813688][T13435] FAULT_INJECTION: forcing a failure. [ 2120.813688][T13435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2120.826914][T13435] CPU: 1 UID: 0 PID: 13435 Comm: syz.3.50534 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2120.826948][T13435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2120.826964][T13435] Call Trace: [ 2120.826971][T13435] [ 2120.826981][T13435] __dump_stack+0x21/0x30 [ 2120.827015][T13435] dump_stack_lvl+0x10c/0x190 [ 2120.827045][T13435] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2120.827076][T13435] ? do_vfs_ioctl+0xeda/0x1e30 [ 2120.827103][T13435] dump_stack+0x19/0x20 [ 2120.827132][T13435] should_fail_ex+0x3d9/0x530 [ 2120.827156][T13435] should_fail+0xf/0x20 [ 2120.827177][T13435] should_fail_usercopy+0x1e/0x30 [ 2120.827201][T13435] _copy_from_user+0x22/0xb0 [ 2120.827221][T13435] kvm_vm_ioctl+0x757/0xb80 [ 2120.827243][T13435] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 2120.827265][T13435] ? ioctl_has_perm+0x1aa/0x4d0 [ 2120.827285][T13435] ? __asan_memcpy+0x5a/0x80 [ 2120.827300][T13435] ? ioctl_has_perm+0x3e0/0x4d0 [ 2120.827319][T13435] ? has_cap_mac_admin+0xd0/0xd0 [ 2120.827339][T13435] ? proc_fail_nth_write+0x17e/0x210 [ 2120.827361][T13435] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2120.827383][T13435] ? selinux_file_ioctl+0x6e0/0x1360 [ 2120.827402][T13435] ? vfs_write+0x93e/0xf30 [ 2120.827417][T13435] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 2120.827436][T13435] ? __cfi_vfs_write+0x10/0x10 [ 2120.827451][T13435] ? __kasan_check_write+0x18/0x20 [ 2120.827475][T13435] ? mutex_unlock+0x8b/0x240 [ 2120.827490][T13435] ? __cfi_mutex_unlock+0x10/0x10 [ 2120.827504][T13435] ? __fget_files+0x2c5/0x340 [ 2120.827523][T13435] ? __fget_files+0x2c5/0x340 [ 2120.827540][T13435] ? bpf_lsm_file_ioctl+0xd/0x20 [ 2120.827569][T13435] ? security_file_ioctl+0x34/0xd0 [ 2120.827587][T13435] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 2120.827609][T13435] __se_sys_ioctl+0x135/0x1b0 [ 2120.827626][T13435] __x64_sys_ioctl+0x7f/0xa0 [ 2120.827644][T13435] x64_sys_call+0x1878/0x2ee0 [ 2120.827667][T13435] do_syscall_64+0x58/0xf0 [ 2120.827688][T13435] ? clear_bhb_loop+0x50/0xa0 [ 2120.827706][T13435] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2120.827723][T13435] RIP: 0033:0x7f1792f8f6c9 [ 2120.827737][T13435] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2120.827752][T13435] RSP: 002b:00007f1793d5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2120.827769][T13435] RAX: ffffffffffffffda RBX: 00007f17931e5fa0 RCX: 00007f1792f8f6c9 [ 2120.827783][T13435] RDX: 0000200000000040 RSI: 000000004020ae76 RDI: 0000000000000006 [ 2120.827794][T13435] RBP: 00007f1793d5c090 R08: 0000000000000000 R09: 0000000000000000 [ 2120.827805][T13435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2120.827816][T13435] R13: 00007f17931e6038 R14: 00007f17931e5fa0 R15: 00007fff67e210b8 [ 2120.827830][T13435] [ 2121.106800][T13470] veth1_macvtap: left promiscuous mode [ 2121.115703][T13470] veth0_vlan: left promiscuous mode [ 2121.189822][T13430] bridge0: port 2(bridge_slave_1) entered blocking state [ 2121.196967][T13430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2121.204337][T13430] bridge0: port 1(bridge_slave_0) entered blocking state [ 2121.211571][T13430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2121.242969][T13445] bridge0: port 1(bridge_slave_0) entered disabled state [ 2121.250562][T13445] bridge0: port 2(bridge_slave_1) entered disabled state [ 2121.265947][T13445] bridge0: port 1(bridge_slave_0) entered blocking state [ 2121.273081][T13445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2121.281033][T13445] bridge0: port 2(bridge_slave_1) entered blocking state [ 2121.288152][T13445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2121.313270][T13430] veth0_vlan: entered promiscuous mode [ 2121.324439][T13430] veth1_macvtap: entered promiscuous mode [ 2121.450689][T13481] rust_binder: Error while translating object. [ 2121.450715][T13481] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 2121.457113][T13481] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:1215 [ 2121.467252][T13482] netlink: 104 bytes leftover after parsing attributes in process `syz.1.50544'. [ 2121.666914][T13498] FAULT_INJECTION: forcing a failure. [ 2121.666914][T13498] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2121.683581][T13498] CPU: 1 UID: 0 PID: 13498 Comm: syz.1.50556 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2121.683609][T13498] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2121.683622][T13498] Call Trace: [ 2121.683627][T13498] [ 2121.683634][T13498] __dump_stack+0x21/0x30 [ 2121.683661][T13498] dump_stack_lvl+0x10c/0x190 [ 2121.683683][T13498] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2121.683705][T13498] ? check_stack_object+0x12c/0x140 [ 2121.683723][T13498] dump_stack+0x19/0x20 [ 2121.683743][T13498] should_fail_ex+0x3d9/0x530 [ 2121.683760][T13498] should_fail+0xf/0x20 [ 2121.683775][T13498] should_fail_usercopy+0x1e/0x30 [ 2121.683793][T13498] _copy_to_user+0x24/0xa0 [ 2121.683813][T13498] simple_read_from_buffer+0xed/0x160 [ 2121.683834][T13498] proc_fail_nth_read+0x19e/0x210 [ 2121.683856][T13498] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2121.683878][T13498] ? bpf_lsm_file_permission+0xd/0x20 [ 2121.683900][T13498] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2121.683922][T13498] vfs_read+0x27d/0xc70 [ 2121.683937][T13498] ? __cfi_vfs_read+0x10/0x10 [ 2121.683950][T13498] ? __kasan_check_write+0x18/0x20 [ 2121.683975][T13498] ? mutex_lock+0x92/0x1c0 [ 2121.683989][T13498] ? __cfi_mutex_lock+0x10/0x10 [ 2121.684004][T13498] ? __fget_files+0x2c5/0x340 [ 2121.684022][T13498] ksys_read+0x141/0x250 [ 2121.684036][T13498] ? __cfi_ksys_read+0x10/0x10 [ 2121.684052][T13498] ? __kasan_check_read+0x15/0x20 [ 2121.684076][T13498] __x64_sys_read+0x7f/0x90 [ 2121.684090][T13498] x64_sys_call+0x2638/0x2ee0 [ 2121.684114][T13498] do_syscall_64+0x58/0xf0 [ 2121.684135][T13498] ? clear_bhb_loop+0x50/0xa0 [ 2121.684153][T13498] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2121.684171][T13498] RIP: 0033:0x7fea9458e0dc [ 2121.684185][T13498] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2121.684199][T13498] RSP: 002b:00007fea9548b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2121.684218][T13498] RAX: ffffffffffffffda RBX: 00007fea947e5fa0 RCX: 00007fea9458e0dc [ 2121.684231][T13498] RDX: 000000000000000f RSI: 00007fea9548b0a0 RDI: 0000000000000006 [ 2121.684242][T13498] RBP: 00007fea9548b090 R08: 0000000000000000 R09: 0000000000000000 [ 2121.684253][T13498] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2121.684264][T13498] R13: 00007fea947e6038 R14: 00007fea947e5fa0 R15: 00007ffc9b91a468 [ 2121.684279][T13498] [ 2121.944791][T13503] FAULT_INJECTION: forcing a failure. [ 2121.944791][T13503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2121.957972][T13503] CPU: 1 UID: 0 PID: 13503 Comm: syz.3.50559 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2121.958010][T13503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2121.958025][T13503] Call Trace: [ 2121.958034][T13503] [ 2121.958044][T13503] __dump_stack+0x21/0x30 [ 2121.958080][T13503] dump_stack_lvl+0x10c/0x190 [ 2121.958110][T13503] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2121.958142][T13503] dump_stack+0x19/0x20 [ 2121.958170][T13503] should_fail_ex+0x3d9/0x530 [ 2121.958194][T13503] should_fail+0xf/0x20 [ 2121.958214][T13503] should_fail_usercopy+0x1e/0x30 [ 2121.958238][T13503] _copy_from_user+0x22/0xb0 [ 2121.958267][T13503] _RNvMs2_NtCs5gLWsBERDPK_16rust_binder_main6threadNtB5_6Thread10write_read+0x493/0xa380 [ 2121.958319][T13503] ? __cfi__RNvMs2_NtCs5gLWsBERDPK_16rust_binder_main6threadNtB5_6Thread10write_read+0x10/0x10 [ 2121.958390][T13503] ? is_bpf_text_address+0x17b/0x1a0 [ 2121.958417][T13503] ? kernel_text_address+0xa9/0xe0 [ 2121.958445][T13503] ? __kernel_text_address+0x11/0x40 [ 2121.958480][T13503] ? unwind_get_return_address+0x51/0x90 [ 2121.958506][T13503] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 2121.958540][T13503] ? arch_stack_walk+0x10b/0x170 [ 2121.958564][T13503] ? stack_trace_save+0x9d/0xe0 [ 2121.958597][T13503] ? stack_depot_save_flags+0x38/0x800 [ 2121.958623][T13503] ? _raw_spin_unlock+0x45/0x60 [ 2121.958652][T13503] ? __call_rcu_nocb_wake+0x2fa/0xab0 [ 2121.958677][T13503] ? __kasan_check_write+0x18/0x20 [ 2121.958713][T13503] ? rcutree_migrate_callbacks+0xc40/0xc40 [ 2121.958749][T13503] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2121.958776][T13503] ? call_rcu_nocb+0x276/0xc10 [ 2121.958810][T13503] ? is_bpf_text_address+0x17b/0x1a0 [ 2121.958835][T13503] ? kernel_text_address+0xa9/0xe0 [ 2121.958863][T13503] ? __kernel_text_address+0x11/0x40 [ 2121.958890][T13503] ? unwind_get_return_address+0x51/0x90 [ 2121.958917][T13503] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 2121.958950][T13503] ? arch_stack_walk+0x10b/0x170 [ 2121.958978][T13503] ? is_bpf_text_address+0x17b/0x1a0 [ 2121.959004][T13503] ? kernel_text_address+0xa9/0xe0 [ 2121.959031][T13503] ? __kernel_text_address+0x11/0x40 [ 2121.959059][T13503] ? unwind_get_return_address+0x51/0x90 [ 2121.959086][T13503] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 2121.959118][T13503] ? arch_stack_walk+0x10b/0x170 [ 2121.959145][T13503] ? is_bpf_text_address+0x17b/0x1a0 [ 2121.959170][T13503] ? kernel_text_address+0xa9/0xe0 [ 2121.959199][T13503] ? __kernel_text_address+0x11/0x40 [ 2121.959226][T13503] ? unwind_get_return_address+0x51/0x90 [ 2121.959253][T13503] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 2121.959286][T13503] ? arch_stack_walk+0x10b/0x170 [ 2121.959308][T13503] ? __kasan_check_write+0x18/0x20 [ 2121.959341][T13503] ? _raw_spin_lock+0x8c/0x120 [ 2121.959368][T13503] ? __cfi__raw_spin_lock+0x10/0x10 [ 2121.959396][T13503] ? stack_depot_save_flags+0x38/0x800 [ 2121.959420][T13503] ? stack_trace_save+0x9d/0xe0 [ 2121.959460][T13503] ? _raw_spin_unlock+0x45/0x60 [ 2121.959489][T13503] ? rust_helper_spin_unlock+0x19/0x30 [ 2121.959510][T13503] ? _RNvMs4_NtCs5gLWsBERDPK_16rust_binder_main7processNtB5_7Process18get_current_thread+0x914/0x1400 [ 2121.959542][T13503] ? security_inode_alloc+0x51/0x200 [ 2121.959576][T13503] ? inode_init_always_gfp+0x756/0x9e0 [ 2121.959601][T13503] ? alloc_inode+0xc5/0x270 [ 2121.959626][T13503] ? proc_pident_instantiate+0x6d/0x2c0 [ 2121.959651][T13503] ? proc_pident_lookup+0x1c7/0x270 [ 2121.959677][T13503] ? path_openat+0x1301/0x34b0 [ 2121.959703][T13503] ? do_sys_openat2+0x12c/0x1c0 [ 2121.959732][T13503] ? __x64_sys_openat+0x13a/0x170 [ 2121.959761][T13503] ? x64_sys_call+0xe69/0x2ee0 [ 2121.959793][T13503] ? do_syscall_64+0x58/0xf0 [ 2121.959822][T13503] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2121.959848][T13503] ? __cfi__RNvMs4_NtCs5gLWsBERDPK_16rust_binder_main7processNtB5_7Process18get_current_thread+0x10/0x10 [ 2121.959881][T13503] ? avc_has_perm_noaudit+0x268/0x360 [ 2121.959913][T13503] ? __asan_memcpy+0x5a/0x80 [ 2121.959933][T13503] ? avc_has_perm_noaudit+0x286/0x360 [ 2121.959965][T13503] ? avc_has_perm+0x144/0x220 [ 2121.959996][T13503] ? __cfi_avc_has_perm+0x10/0x10 [ 2121.960026][T13503] ? kasan_save_alloc_info+0x40/0x50 [ 2121.960060][T13503] ? selinux_file_open+0x457/0x610 [ 2121.960088][T13503] _RNvMs6_NtCs5gLWsBERDPK_16rust_binder_main7processNtB5_7Process5ioctl+0x40c/0x2cf0 [ 2121.960122][T13503] ? avc_has_extended_perms+0x7c7/0xdd0 [ 2121.960153][T13503] ? __asan_memcpy+0x5a/0x80 [ 2121.960174][T13503] ? avc_has_extended_perms+0x921/0xdd0 [ 2121.960205][T13503] ? __cfi__RNvMs6_NtCs5gLWsBERDPK_16rust_binder_main7processNtB5_7Process5ioctl+0x10/0x10 [ 2121.960238][T13503] ? do_vfs_ioctl+0xeda/0x1e30 [ 2121.960262][T13503] ? arch_stack_walk+0x10b/0x170 [ 2121.960283][T13503] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 2121.960310][T13503] ? _parse_integer+0x2e/0x40 [ 2121.960348][T13503] ? ioctl_has_perm+0x384/0x4d0 [ 2121.960374][T13503] ? has_cap_mac_admin+0xd0/0xd0 [ 2121.960402][T13503] ? proc_fail_nth_write+0x17e/0x210 [ 2121.960432][T13503] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2121.960468][T13503] ? selinux_file_ioctl+0x6e0/0x1360 [ 2121.960495][T13503] ? vfs_write+0x93e/0xf30 [ 2121.960515][T13503] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 2121.960542][T13503] ? __cfi_vfs_write+0x10/0x10 [ 2121.960563][T13503] ? __kasan_check_write+0x18/0x20 [ 2121.960596][T13503] ? mutex_unlock+0x8b/0x240 [ 2121.960617][T13503] ? __cfi_mutex_unlock+0x10/0x10 [ 2121.960637][T13503] ? __fget_files+0x2c5/0x340 [ 2121.960663][T13503] ? __fget_files+0x2c5/0x340 [ 2121.960688][T13503] _RNvCs5gLWsBERDPK_16rust_binder_main26rust_binder_unlocked_ioctl+0xa0/0x100 [ 2121.960722][T13503] ? __se_sys_ioctl+0x114/0x1b0 [ 2121.960747][T13503] ? __cfi__RNvCs5gLWsBERDPK_16rust_binder_main26rust_binder_unlocked_ioctl+0x10/0x10 [ 2121.960781][T13503] __se_sys_ioctl+0x135/0x1b0 [ 2121.960805][T13503] __x64_sys_ioctl+0x7f/0xa0 [ 2121.960830][T13503] x64_sys_call+0x1878/0x2ee0 [ 2121.960862][T13503] do_syscall_64+0x58/0xf0 [ 2121.960890][T13503] ? clear_bhb_loop+0x50/0xa0 [ 2121.960916][T13503] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2121.960939][T13503] RIP: 0033:0x7f1792f8f6c9 [ 2121.960958][T13503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2121.960981][T13503] RSP: 002b:00007f1793d5c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2121.961007][T13503] RAX: ffffffffffffffda RBX: 00007f17931e5fa0 RCX: 00007f1792f8f6c9 [ 2121.961026][T13503] RDX: 0000200000000940 RSI: 00000000c0306201 RDI: 0000000000000005 [ 2121.961042][T13503] RBP: 00007f1793d5c090 R08: 0000000000000000 R09: 0000000000000000 [ 2121.961058][T13503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2121.961073][T13503] R13: 00007f17931e6038 R14: 00007f17931e5fa0 R15: 00007fff67e210b8 [ 2121.961093][T13503] [ 2122.684985][T13525] SELinux: policydb table sizes (0,0) do not match mine (8,7) [ 2122.692643][T13525] SELinux: failed to load policy [ 2122.725398][T13529] netlink: 84 bytes leftover after parsing attributes in process `syz.0.50571'. [ 2122.727312][T13531] FAULT_INJECTION: forcing a failure. [ 2122.727312][T13531] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2122.748528][T13531] CPU: 0 UID: 0 PID: 13531 Comm: syz.4.50572 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2122.748561][T13531] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2122.748575][T13531] Call Trace: [ 2122.748583][T13531] [ 2122.748591][T13531] __dump_stack+0x21/0x30 [ 2122.748625][T13531] dump_stack_lvl+0x10c/0x190 [ 2122.748660][T13531] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2122.748687][T13531] ? kstrtoull+0x13b/0x1e0 [ 2122.748706][T13531] dump_stack+0x19/0x20 [ 2122.748732][T13531] should_fail_ex+0x3d9/0x530 [ 2122.748753][T13531] should_fail+0xf/0x20 [ 2122.748771][T13531] should_fail_usercopy+0x1e/0x30 [ 2122.748793][T13531] _copy_from_user+0x22/0xb0 [ 2122.748818][T13531] ___sys_sendmsg+0x159/0x2a0 [ 2122.748848][T13531] ? __sys_sendmsg+0x280/0x280 [ 2122.748880][T13531] ? proc_fail_nth_write+0x17e/0x210 [ 2122.748911][T13531] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2122.748947][T13531] __x64_sys_sendmsg+0x1eb/0x2c0 [ 2122.748980][T13531] ? fput+0x1a5/0x240 [ 2122.749007][T13531] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2122.749040][T13531] ? ksys_write+0x1ef/0x250 [ 2122.749062][T13531] ? __kasan_check_read+0x15/0x20 [ 2122.749097][T13531] x64_sys_call+0x2a4c/0x2ee0 [ 2122.749130][T13531] do_syscall_64+0x58/0xf0 [ 2122.749159][T13531] ? clear_bhb_loop+0x50/0xa0 [ 2122.749184][T13531] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2122.749208][T13531] RIP: 0033:0x7f2adc78f6c9 [ 2122.749227][T13531] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2122.749246][T13531] RSP: 002b:00007f2add59f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2122.749271][T13531] RAX: ffffffffffffffda RBX: 00007f2adc9e5fa0 RCX: 00007f2adc78f6c9 [ 2122.749288][T13531] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000005 [ 2122.749304][T13531] RBP: 00007f2add59f090 R08: 0000000000000000 R09: 0000000000000000 [ 2122.749319][T13531] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2122.749333][T13531] R13: 00007f2adc9e6038 R14: 00007f2adc9e5fa0 R15: 00007ffece624308 [ 2122.749354][T13531] [ 2123.091226][ T5519] usb 4-1: new high-speed USB device number 89 using dummy_hcd [ 2123.241117][ T5519] usb 4-1: Using ep0 maxpacket: 16 [ 2123.247458][ T5519] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 2123.255695][ T5519] usb 4-1: config 0 has no interface number 0 [ 2123.261857][ T5519] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2123.271710][ T5519] usb 4-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2123.281715][ T5519] usb 4-1: config 0 interface 41 has no altsetting 0 [ 2123.289704][ T5519] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2123.298870][ T5519] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2123.315134][ T5519] usb 4-1: Product: syz [ 2123.320637][ T5519] usb 4-1: Manufacturer: syz [ 2123.329486][ T5519] usb 4-1: SerialNumber: syz [ 2123.340288][ T5519] usb 4-1: config 0 descriptor?? [ 2123.356310][T13523] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2123.363795][T13523] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2123.491553][T13445] bridge_slave_1: left allmulticast mode [ 2123.497356][T13445] bridge_slave_1: left promiscuous mode [ 2123.506236][T13445] bridge0: port 2(bridge_slave_1) entered disabled state [ 2123.514607][T13445] bridge_slave_0: left allmulticast mode [ 2123.520286][T13445] bridge_slave_0: left promiscuous mode [ 2123.527084][T13445] bridge0: port 1(bridge_slave_0) entered disabled state [ 2123.575432][T13523] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2123.591004][T13523] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 2123.621565][T13445] tipc: Left network mode [ 2123.634781][T13563] bridge0: port 1(bridge_slave_0) entered blocking state [ 2123.642018][T13563] bridge0: port 1(bridge_slave_0) entered disabled state [ 2123.649128][T13563] bridge_slave_0: entered allmulticast mode [ 2123.662482][T13563] bridge_slave_0: entered promiscuous mode [ 2123.669784][T13563] bridge0: port 2(bridge_slave_1) entered blocking state [ 2123.687315][T13563] bridge0: port 2(bridge_slave_1) entered disabled state [ 2123.697492][T13587] FAULT_INJECTION: forcing a failure. [ 2123.697492][T13587] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2123.700959][T13563] bridge_slave_1: entered allmulticast mode [ 2123.710758][T13587] CPU: 0 UID: 0 PID: 13587 Comm: syz.4.50597 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2123.710797][T13587] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2123.710822][T13587] Call Trace: [ 2123.710832][T13587] [ 2123.710843][T13587] __dump_stack+0x21/0x30 [ 2123.710885][T13587] dump_stack_lvl+0x10c/0x190 [ 2123.710921][T13587] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2123.710960][T13587] dump_stack+0x19/0x20 [ 2123.710992][T13587] should_fail_ex+0x3d9/0x530 [ 2123.711021][T13587] should_fail+0xf/0x20 [ 2123.711044][T13587] should_fail_usercopy+0x1e/0x30 [ 2123.711074][T13587] _copy_from_iter+0x1a3/0x14d0 [ 2123.711106][T13587] ? kmalloc_reserve+0xcf/0x500 [ 2123.711141][T13587] ? __virt_addr_valid+0x2a6/0x380 [ 2123.711170][T13587] ? __cfi__copy_from_iter+0x10/0x10 [ 2123.711200][T13587] ? __check_object_size+0x50a/0x810 [ 2123.711227][T13587] ? __cfi___check_object_size+0x10/0x10 [ 2123.711252][T13587] ? skb_put+0x112/0x1f0 [ 2123.711285][T13587] netlink_sendmsg+0x680/0xaf0 [ 2123.711345][T13587] ? __cfi_netlink_sendmsg+0x10/0x10 [ 2123.711383][T13587] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 2123.711416][T13587] ? security_socket_sendmsg+0x33/0xd0 [ 2123.711441][T13587] ? __cfi_netlink_sendmsg+0x10/0x10 [ 2123.711481][T13587] ____sys_sendmsg+0xa15/0xa70 [ 2123.711520][T13587] ? __sys_sendmsg_sock+0x50/0x50 [ 2123.711561][T13587] ? import_iovec+0x81/0xb0 [ 2123.711595][T13587] ___sys_sendmsg+0x220/0x2a0 [ 2123.711634][T13587] ? __sys_sendmsg+0x280/0x280 [ 2123.711680][T13587] ? proc_fail_nth_write+0x17e/0x210 [ 2123.711714][T13587] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2123.711758][T13587] __x64_sys_sendmsg+0x1eb/0x2c0 [ 2123.711796][T13587] ? fput+0x1a5/0x240 [ 2123.711826][T13587] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2123.711864][T13587] ? ksys_write+0x1ef/0x250 [ 2123.711889][T13587] ? __kasan_check_read+0x15/0x20 [ 2123.711930][T13587] x64_sys_call+0x2a4c/0x2ee0 [ 2123.711968][T13587] do_syscall_64+0x58/0xf0 [ 2123.712002][T13587] ? clear_bhb_loop+0x50/0xa0 [ 2123.712031][T13587] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2123.712059][T13587] RIP: 0033:0x7f2adc78f6c9 [ 2123.712082][T13587] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2123.712104][T13587] RSP: 002b:00007f2add59f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2123.712133][T13587] RAX: ffffffffffffffda RBX: 00007f2adc9e5fa0 RCX: 00007f2adc78f6c9 [ 2123.712154][T13587] RDX: 0000000000002000 RSI: 00002000000001c0 RDI: 0000000000000005 [ 2123.712172][T13587] RBP: 00007f2add59f090 R08: 0000000000000000 R09: 0000000000000000 [ 2123.712190][T13587] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2123.712207][T13587] R13: 00007f2adc9e6038 R14: 00007f2adc9e5fa0 R15: 00007ffece624308 [ 2123.712232][T13587] [ 2123.994845][T13563] bridge_slave_1: entered promiscuous mode [ 2124.002236][T13445] veth1_macvtap: left promiscuous mode [ 2124.007805][T13445] veth0_vlan: left promiscuous mode [ 2124.212100][T13563] bridge0: port 2(bridge_slave_1) entered blocking state [ 2124.219379][T13563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2124.226737][T13563] bridge0: port 1(bridge_slave_0) entered blocking state [ 2124.233815][T13563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2124.281420][T13470] bridge0: port 1(bridge_slave_0) entered disabled state [ 2124.288991][T13470] bridge0: port 2(bridge_slave_1) entered disabled state [ 2124.319395][T13459] bridge0: port 1(bridge_slave_0) entered blocking state [ 2124.326710][T13459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2124.346138][T13459] bridge0: port 2(bridge_slave_1) entered blocking state [ 2124.353267][T13459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2124.379314][T13563] veth0_vlan: entered promiscuous mode [ 2124.395578][T13563] veth1_macvtap: entered promiscuous mode [ 2124.602133][ T5519] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 2124.611745][ T5519] usb 4-1: USB disconnect, device number 89 [ 2125.117333][ T36] audit: type=1326 audit(1779782746.661:1271): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13671 comm="syz.4.50632" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2adc78f6c9 code=0x0 [ 2125.580007][ T5519] usb 2-1: new high-speed USB device number 93 using dummy_hcd [ 2125.759883][ T5519] usb 2-1: Using ep0 maxpacket: 16 [ 2125.776178][ T5519] usb 2-1: config 0 has an invalid interface number: 41 but max is 0 [ 2125.789808][ T5519] usb 2-1: config 0 has no interface number 0 [ 2125.805057][ T5519] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 2125.823695][ T5519] usb 2-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 2125.843848][ T5519] usb 2-1: config 0 interface 41 has no altsetting 0 [ 2125.861142][ T5519] usb 2-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2125.870746][ T5519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2125.878884][ T5519] usb 2-1: Product: syz [ 2125.899800][ T5519] usb 2-1: Manufacturer: syz [ 2125.909768][ T5519] usb 2-1: SerialNumber: syz [ 2125.915150][ T5519] usb 2-1: config 0 descriptor?? [ 2125.929996][T13695] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2125.937588][T13695] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2126.046614][ T36] audit: type=1400 audit(1779782747.592:1272): avc: denied { name_bind } for pid=13722 comm="syz.4.50656" src=65530 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=rawip_socket permissive=1 [ 2126.149788][T13695] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2126.157107][T13695] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 2126.228134][T13743] input: syz1 as /devices/virtual/input/input59 [ 2126.314724][ T36] audit: type=1400 audit(1779782747.862:1273): avc: denied { execute } for pid=13748 comm="syz.4.50669" path="/dev/binderfs/binder1" dev="binder" ino=26 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 2126.527549][T13769] rust_binder: 656: no such ref 0 [ 2126.648216][T13787] overlayfs: overlapping lowerdir path [ 2126.660331][T13789] FAULT_INJECTION: forcing a failure. [ 2126.660331][T13789] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2126.694458][T13789] CPU: 1 UID: 0 PID: 13789 Comm: syz.0.50688 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2126.694498][T13789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2126.694514][T13789] Call Trace: [ 2126.694522][T13789] [ 2126.694535][T13789] __dump_stack+0x21/0x30 [ 2126.694572][T13789] dump_stack_lvl+0x10c/0x190 [ 2126.694603][T13789] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2126.694635][T13789] dump_stack+0x19/0x20 [ 2126.694664][T13789] should_fail_ex+0x3d9/0x530 [ 2126.694689][T13789] should_fail+0xf/0x20 [ 2126.694709][T13789] should_fail_usercopy+0x1e/0x30 [ 2126.694734][T13789] _copy_to_user+0x24/0xa0 [ 2126.694763][T13789] kvm_get_hv_cpuid+0x584/0x640 [ 2126.694797][T13789] ? __cfi_kvm_get_hv_cpuid+0x10/0x10 [ 2126.694836][T13789] ? ioctl_has_perm+0x384/0x4d0 [ 2126.694864][T13789] ? __kasan_check_write+0x18/0x20 [ 2126.694899][T13789] kvm_arch_dev_ioctl+0x451/0x890 [ 2126.694934][T13789] ? __cfi_kvm_arch_dev_ioctl+0x10/0x10 [ 2126.694970][T13789] ? selinux_file_ioctl+0x6e0/0x1360 [ 2126.694998][T13789] ? vfs_write+0x93e/0xf30 [ 2126.695019][T13789] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 2126.695048][T13789] ? __cfi_vfs_write+0x10/0x10 [ 2126.695068][T13789] ? __kasan_check_write+0x18/0x20 [ 2126.695102][T13789] ? mutex_unlock+0x8b/0x240 [ 2126.695125][T13789] kvm_dev_ioctl+0x48d/0x14d0 [ 2126.695160][T13789] ? __fget_files+0x2c5/0x340 [ 2126.695185][T13789] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 2126.695219][T13789] ? bpf_lsm_file_ioctl+0xd/0x20 [ 2126.695251][T13789] ? security_file_ioctl+0x34/0xd0 [ 2126.695277][T13789] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 2126.695308][T13789] __se_sys_ioctl+0x135/0x1b0 [ 2126.695335][T13789] __x64_sys_ioctl+0x7f/0xa0 [ 2126.695369][T13789] x64_sys_call+0x1878/0x2ee0 [ 2126.695403][T13789] do_syscall_64+0x58/0xf0 [ 2126.695433][T13789] ? clear_bhb_loop+0x50/0xa0 [ 2126.695459][T13789] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2126.695484][T13789] RIP: 0033:0x7f579538f6c9 [ 2126.695504][T13789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2126.695524][T13789] RSP: 002b:00007f57962ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 2126.695550][T13789] RAX: ffffffffffffffda RBX: 00007f57955e5fa0 RCX: 00007f579538f6c9 [ 2126.695567][T13789] RDX: 0000200000000400 RSI: 00000000c008aec1 RDI: 0000000000000005 [ 2126.695582][T13789] RBP: 00007f57962ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2126.695597][T13789] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2126.695612][T13789] R13: 00007f57955e6038 R14: 00007f57955e5fa0 R15: 00007ffc44da6d88 [ 2126.695632][T13789] [ 2127.070732][T13823] FAULT_INJECTION: forcing a failure. [ 2127.070732][T13823] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2127.083905][T13823] CPU: 0 UID: 0 PID: 13823 Comm: syz.4.50705 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2127.083943][T13823] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2127.083959][T13823] Call Trace: [ 2127.083967][T13823] [ 2127.083978][T13823] __dump_stack+0x21/0x30 [ 2127.084015][T13823] dump_stack_lvl+0x10c/0x190 [ 2127.084046][T13823] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2127.084079][T13823] ? check_stack_object+0x12c/0x140 [ 2127.084103][T13823] dump_stack+0x19/0x20 [ 2127.084133][T13823] should_fail_ex+0x3d9/0x530 [ 2127.084158][T13823] should_fail+0xf/0x20 [ 2127.084179][T13823] should_fail_usercopy+0x1e/0x30 [ 2127.084205][T13823] _copy_to_user+0x24/0xa0 [ 2127.084234][T13823] simple_read_from_buffer+0xed/0x160 [ 2127.084266][T13823] proc_fail_nth_read+0x19e/0x210 [ 2127.084298][T13823] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2127.084336][T13823] ? bpf_lsm_file_permission+0xd/0x20 [ 2127.084368][T13823] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2127.084400][T13823] vfs_read+0x27d/0xc70 [ 2127.084420][T13823] ? __cfi___blk_flush_plug+0x10/0x10 [ 2127.084445][T13823] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 2127.084481][T13823] ? __cfi_vfs_read+0x10/0x10 [ 2127.084501][T13823] ? __kasan_check_write+0x18/0x20 [ 2127.084536][T13823] ? mutex_lock+0x92/0x1c0 [ 2127.084558][T13823] ? __cfi_mutex_lock+0x10/0x10 [ 2127.084580][T13823] ? __fget_files+0x2c5/0x340 [ 2127.084606][T13823] ksys_read+0x141/0x250 [ 2127.084628][T13823] ? __cfi_ksys_read+0x10/0x10 [ 2127.084649][T13823] ? __kasan_check_read+0x15/0x20 [ 2127.084683][T13823] __x64_sys_read+0x7f/0x90 [ 2127.084705][T13823] x64_sys_call+0x2638/0x2ee0 [ 2127.084738][T13823] do_syscall_64+0x58/0xf0 [ 2127.084768][T13823] ? clear_bhb_loop+0x50/0xa0 [ 2127.084794][T13823] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2127.084819][T13823] RIP: 0033:0x7f2adc78e0dc [ 2127.084839][T13823] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2127.084859][T13823] RSP: 002b:00007f2add59f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2127.084884][T13823] RAX: ffffffffffffffda RBX: 00007f2adc9e5fa0 RCX: 00007f2adc78e0dc [ 2127.084903][T13823] RDX: 000000000000000f RSI: 00007f2add59f0a0 RDI: 0000000000000006 [ 2127.084918][T13823] RBP: 00007f2add59f090 R08: 0000000000000000 R09: 0000000000000000 [ 2127.084933][T13823] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2127.084948][T13823] R13: 00007f2adc9e6038 R14: 00007f2adc9e5fa0 R15: 00007ffece624308 [ 2127.084969][T13823] [ 2127.355741][T13825] netlink: 208 bytes leftover after parsing attributes in process `syz.4.50707'. [ 2127.517183][T13846] netlink: 208 bytes leftover after parsing attributes in process `syz.0.50716'. [ 2127.547406][T13854] overlayfs: failed to resolve './file1': -2 [ 2127.577226][T13854] netlink: 12 bytes leftover after parsing attributes in process `syz.0.50719'. [ 2127.634041][ T5519] CoreChips 2-1:0.41: probe with driver CoreChips failed with error -71 [ 2127.643647][ T5519] usb 2-1: USB disconnect, device number 93 [ 2127.663484][T13875] netlink: 208 bytes leftover after parsing attributes in process `syz.0.50727'. [ 2127.700306][T13867] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 2127.828944][T13899] netlink: 208 bytes leftover after parsing attributes in process `syz.0.50739'. [ 2128.184372][T13921] FAULT_INJECTION: forcing a failure. [ 2128.184372][T13921] name failslab, interval 1, probability 0, space 0, times 0 [ 2128.205991][T13921] CPU: 0 UID: 0 PID: 13921 Comm: syz.4.50749 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2128.206032][T13921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2128.206048][T13921] Call Trace: [ 2128.206056][T13921] [ 2128.206065][T13921] __dump_stack+0x21/0x30 [ 2128.206100][T13921] dump_stack_lvl+0x10c/0x190 [ 2128.206130][T13921] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2128.206163][T13921] dump_stack+0x19/0x20 [ 2128.206193][T13921] should_fail_ex+0x3d9/0x530 [ 2128.206218][T13921] should_failslab+0xac/0x100 [ 2128.206264][T13921] kmem_cache_alloc_node_noprof+0x45/0x440 [ 2128.206288][T13921] ? selinux_socket_getpeersec_dgram+0x253/0x360 [ 2128.206313][T13921] ? __alloc_skb+0x10c/0x370 [ 2128.206343][T13921] __alloc_skb+0x10c/0x370 [ 2128.206372][T13921] netlink_alloc_large_skb+0xf7/0x1b0 [ 2128.206403][T13921] netlink_sendmsg+0x586/0xaf0 [ 2128.206438][T13921] ? __cfi_netlink_sendmsg+0x10/0x10 [ 2128.206473][T13921] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 2128.206502][T13921] ? security_socket_sendmsg+0x33/0xd0 [ 2128.206524][T13921] ? __cfi_netlink_sendmsg+0x10/0x10 [ 2128.206559][T13921] ____sys_sendmsg+0xa15/0xa70 [ 2128.206594][T13921] ? __sys_sendmsg_sock+0x50/0x50 [ 2128.206628][T13921] ? import_iovec+0x81/0xb0 [ 2128.206659][T13921] ___sys_sendmsg+0x220/0x2a0 [ 2128.206693][T13921] ? __sys_sendmsg+0x280/0x280 [ 2128.206727][T13921] ? proc_fail_nth_write+0x17e/0x210 [ 2128.206758][T13921] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2128.206796][T13921] __x64_sys_sendmsg+0x1eb/0x2c0 [ 2128.206829][T13921] ? fput+0x1a5/0x240 [ 2128.206856][T13921] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2128.206891][T13921] ? ksys_write+0x1ef/0x250 [ 2128.206914][T13921] ? __kasan_check_read+0x15/0x20 [ 2128.206950][T13921] x64_sys_call+0x2a4c/0x2ee0 [ 2128.206984][T13921] do_syscall_64+0x58/0xf0 [ 2128.207015][T13921] ? clear_bhb_loop+0x50/0xa0 [ 2128.207040][T13921] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2128.207065][T13921] RIP: 0033:0x7f2adc78f6c9 [ 2128.207085][T13921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2128.207106][T13921] RSP: 002b:00007f2add59f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2128.207131][T13921] RAX: ffffffffffffffda RBX: 00007f2adc9e5fa0 RCX: 00007f2adc78f6c9 [ 2128.207149][T13921] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000005 [ 2128.207164][T13921] RBP: 00007f2add59f090 R08: 0000000000000000 R09: 0000000000000000 [ 2128.207179][T13921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2128.207194][T13921] R13: 00007f2adc9e6038 R14: 00007f2adc9e5fa0 R15: 00007ffece624308 [ 2128.207215][T13921] [ 2128.658927][ T36] audit: type=1400 audit(1779782750.213:1274): avc: denied { getopt } for pid=13928 comm="syz.4.50753" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 2128.683077][T13927] rust_binder: 85: no such ref 0 [ 2129.012165][T13946] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2129.012209][T13946] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:758 [ 2129.805129][T13979] netlink: 20 bytes leftover after parsing attributes in process `syz.4.50776'. [ 2129.985454][T14000] FAULT_INJECTION: forcing a failure. [ 2129.985454][T14000] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2130.000817][T14000] CPU: 0 UID: 0 PID: 14000 Comm: syz.4.50789 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2130.000855][T14000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2130.000871][T14000] Call Trace: [ 2130.000880][T14000] [ 2130.000889][T14000] __dump_stack+0x21/0x30 [ 2130.000936][T14000] dump_stack_lvl+0x10c/0x190 [ 2130.000966][T14000] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2130.000998][T14000] ? check_stack_object+0x12c/0x140 [ 2130.001021][T14000] dump_stack+0x19/0x20 [ 2130.001050][T14000] should_fail_ex+0x3d9/0x530 [ 2130.001074][T14000] should_fail+0xf/0x20 [ 2130.001095][T14000] should_fail_usercopy+0x1e/0x30 [ 2130.001120][T14000] _copy_to_user+0x24/0xa0 [ 2130.001148][T14000] simple_read_from_buffer+0xed/0x160 [ 2130.001179][T14000] proc_fail_nth_read+0x19e/0x210 [ 2130.001210][T14000] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2130.001240][T14000] ? bpf_lsm_file_permission+0xd/0x20 [ 2130.001272][T14000] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2130.001302][T14000] vfs_read+0x27d/0xc70 [ 2130.001323][T14000] ? __cfi_vfs_read+0x10/0x10 [ 2130.001342][T14000] ? __kasan_check_write+0x18/0x20 [ 2130.001376][T14000] ? mutex_lock+0x92/0x1c0 [ 2130.001396][T14000] ? __cfi_mutex_lock+0x10/0x10 [ 2130.001417][T14000] ? __fget_files+0x2c5/0x340 [ 2130.001444][T14000] ksys_read+0x141/0x250 [ 2130.001465][T14000] ? __cfi_ksys_read+0x10/0x10 [ 2130.001485][T14000] ? __kasan_check_write+0x18/0x20 [ 2130.001519][T14000] ? __kasan_check_read+0x15/0x20 [ 2130.001553][T14000] __x64_sys_read+0x7f/0x90 [ 2130.001574][T14000] x64_sys_call+0x2638/0x2ee0 [ 2130.001607][T14000] do_syscall_64+0x58/0xf0 [ 2130.001636][T14000] ? clear_bhb_loop+0x50/0xa0 [ 2130.001661][T14000] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2130.001686][T14000] RIP: 0033:0x7f2adc78e0dc [ 2130.001705][T14000] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2130.001725][T14000] RSP: 002b:00007f2add59f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2130.001750][T14000] RAX: ffffffffffffffda RBX: 00007f2adc9e5fa0 RCX: 00007f2adc78e0dc [ 2130.001769][T14000] RDX: 000000000000000f RSI: 00007f2add59f0a0 RDI: 0000000000000007 [ 2130.001784][T14000] RBP: 00007f2add59f090 R08: 0000000000000000 R09: 0000000000000000 [ 2130.001799][T14000] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 2130.001815][T14000] R13: 00007f2adc9e6038 R14: 00007f2adc9e5fa0 R15: 00007ffece624308 [ 2130.001835][T14000] [ 2131.068694][T14044] rust_binder: 700: no such ref 0 [ 2131.467648][T14069] can0: slcan on ttyS3. [ 2131.748003][T14101] FAULT_INJECTION: forcing a failure. [ 2131.748003][T14101] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2131.761161][T14101] CPU: 0 UID: 0 PID: 14101 Comm: syz.4.50829 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2131.761199][T14101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2131.761214][T14101] Call Trace: [ 2131.761223][T14101] [ 2131.761233][T14101] __dump_stack+0x21/0x30 [ 2131.761270][T14101] dump_stack_lvl+0x10c/0x190 [ 2131.761301][T14101] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2131.761334][T14101] ? check_stack_object+0x12c/0x140 [ 2131.761358][T14101] dump_stack+0x19/0x20 [ 2131.761388][T14101] should_fail_ex+0x3d9/0x530 [ 2131.761412][T14101] should_fail+0xf/0x20 [ 2131.761433][T14101] should_fail_usercopy+0x1e/0x30 [ 2131.761459][T14101] _copy_to_user+0x24/0xa0 [ 2131.761489][T14101] simple_read_from_buffer+0xed/0x160 [ 2131.761520][T14101] proc_fail_nth_read+0x19e/0x210 [ 2131.761551][T14101] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2131.761582][T14101] ? bpf_lsm_file_permission+0xd/0x20 [ 2131.761614][T14101] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2131.761645][T14101] vfs_read+0x27d/0xc70 [ 2131.761665][T14101] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 2131.761693][T14101] ? __cfi_vfs_read+0x10/0x10 [ 2131.761713][T14101] ? __kasan_check_write+0x18/0x20 [ 2131.761756][T14101] ? mutex_lock+0x92/0x1c0 [ 2131.761778][T14101] ? __cfi_mutex_lock+0x10/0x10 [ 2131.761800][T14101] ? __fget_files+0x2c5/0x340 [ 2131.761827][T14101] ksys_read+0x141/0x250 [ 2131.761848][T14101] ? __cfi_ksys_read+0x10/0x10 [ 2131.761870][T14101] ? __kasan_check_read+0x15/0x20 [ 2131.761905][T14101] __x64_sys_read+0x7f/0x90 [ 2131.761926][T14101] x64_sys_call+0x2638/0x2ee0 [ 2131.761960][T14101] do_syscall_64+0x58/0xf0 [ 2131.761989][T14101] ? clear_bhb_loop+0x50/0xa0 [ 2131.762016][T14101] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2131.762040][T14101] RIP: 0033:0x7f2adc78e0dc [ 2131.762060][T14101] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2131.762079][T14101] RSP: 002b:00007f2add59f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2131.762102][T14101] RAX: ffffffffffffffda RBX: 00007f2adc9e5fa0 RCX: 00007f2adc78e0dc [ 2131.762119][T14101] RDX: 000000000000000f RSI: 00007f2add59f0a0 RDI: 0000000000000007 [ 2131.762132][T14101] RBP: 00007f2add59f090 R08: 0000000000000000 R09: 0000000000000000 [ 2131.762146][T14101] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2131.762160][T14101] R13: 00007f2adc9e6038 R14: 00007f2adc9e5fa0 R15: 00007ffece624308 [ 2131.762180][T14101] [ 2132.561479][T14071] can0 (unregistered): slcan off ttyS3. [ 2133.086875][T14216] overlayfs: failed to resolve './file1': -2 [ 2133.288937][T14249] overlayfs: failed to resolve './file1': -2 [ 2133.308093][ T36] audit: type=1400 audit(1779782754.855:1275): avc: denied { map } for pid=14251 comm="syz.3.50887" path="socket:[602625]" dev="sockfs" ino=602625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 2133.357143][ T36] audit: type=1400 audit(1779782754.915:1276): avc: denied { write } for pid=14258 comm="syz.3.50890" dev="sockfs" ino=602644 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 2133.746035][T14292] FAULT_INJECTION: forcing a failure. [ 2133.746035][T14292] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2133.773816][T14292] CPU: 1 UID: 0 PID: 14292 Comm: syz.3.50905 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2133.773863][T14292] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2133.773878][T14292] Call Trace: [ 2133.773887][T14292] [ 2133.773896][T14292] __dump_stack+0x21/0x30 [ 2133.773933][T14292] dump_stack_lvl+0x10c/0x190 [ 2133.773964][T14292] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2133.773997][T14292] ? kstrtoull+0x13b/0x1e0 [ 2133.774018][T14292] dump_stack+0x19/0x20 [ 2133.774048][T14292] should_fail_ex+0x3d9/0x530 [ 2133.774072][T14292] should_fail+0xf/0x20 [ 2133.774093][T14292] should_fail_usercopy+0x1e/0x30 [ 2133.774118][T14292] _copy_from_user+0x22/0xb0 [ 2133.774147][T14292] ___sys_sendmsg+0x159/0x2a0 [ 2133.774182][T14292] ? __sys_sendmsg+0x280/0x280 [ 2133.774215][T14292] ? proc_fail_nth_write+0x17e/0x210 [ 2133.774247][T14292] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2133.774285][T14292] __x64_sys_sendmsg+0x1eb/0x2c0 [ 2133.774319][T14292] ? fput+0x1a5/0x240 [ 2133.774346][T14292] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2133.774381][T14292] ? ksys_write+0x1ef/0x250 [ 2133.774404][T14292] ? __kasan_check_read+0x15/0x20 [ 2133.774439][T14292] x64_sys_call+0x2a4c/0x2ee0 [ 2133.774473][T14292] do_syscall_64+0x58/0xf0 [ 2133.774504][T14292] ? clear_bhb_loop+0x50/0xa0 [ 2133.774529][T14292] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2133.774555][T14292] RIP: 0033:0x7f1792f8f6c9 [ 2133.774574][T14292] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2133.774594][T14292] RSP: 002b:00007f1793d5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2133.774619][T14292] RAX: ffffffffffffffda RBX: 00007f17931e5fa0 RCX: 00007f1792f8f6c9 [ 2133.774637][T14292] RDX: 00000000000000c0 RSI: 0000200000005600 RDI: 0000000000000005 [ 2133.774653][T14292] RBP: 00007f1793d5c090 R08: 0000000000000000 R09: 0000000000000000 [ 2133.774668][T14292] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2133.774683][T14292] R13: 00007f17931e6038 R14: 00007f17931e5fa0 R15: 00007fff67e210b8 [ 2133.774704][T14292] [ 2134.032492][T14298] overlayfs: failed to resolve './file1': -2 [ 2134.055088][T14300] netlink: 12 bytes leftover after parsing attributes in process `syz.3.50909'. [ 2134.323924][T14320] overlayfs: failed to resolve './file1': -2 [ 2134.413700][T14336] netlink: 92 bytes leftover after parsing attributes in process `syz.4.50927'. [ 2134.425195][T14340] FAULT_INJECTION: forcing a failure. [ 2134.425195][T14340] name failslab, interval 1, probability 0, space 0, times 0 [ 2134.441646][T14342] overlayfs: failed to resolve './file1': -2 [ 2134.448023][T14340] CPU: 1 UID: 0 PID: 14340 Comm: syz.1.50928 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2134.448062][T14340] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2134.448077][T14340] Call Trace: [ 2134.448085][T14340] [ 2134.448096][T14340] __dump_stack+0x21/0x30 [ 2134.448131][T14340] dump_stack_lvl+0x10c/0x190 [ 2134.448161][T14340] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2134.448190][T14340] ? kstrtoull+0x13b/0x1e0 [ 2134.448211][T14340] dump_stack+0x19/0x20 [ 2134.448237][T14340] should_fail_ex+0x3d9/0x530 [ 2134.448260][T14340] should_failslab+0xac/0x100 [ 2134.448287][T14340] kmem_cache_alloc_noprof+0x42/0x430 [ 2134.448309][T14340] ? getname_flags+0xc6/0x710 [ 2134.448333][T14340] getname_flags+0xc6/0x710 [ 2134.448354][T14340] ? __kasan_check_write+0x18/0x20 [ 2134.448389][T14340] __se_sys_statx+0x166/0x3d0 [ 2134.448417][T14340] ? __x64_sys_statx+0xf0/0xf0 [ 2134.448443][T14340] ? vfs_write+0x93e/0xf30 [ 2134.448464][T14340] ? __cfi_vfs_write+0x10/0x10 [ 2134.448485][T14340] ? __kasan_check_write+0x18/0x20 [ 2134.448518][T14340] ? mutex_unlock+0x8b/0x240 [ 2134.448539][T14340] ? __cfi_mutex_unlock+0x10/0x10 [ 2134.448559][T14340] ? __fget_files+0x2c5/0x340 [ 2134.448593][T14340] ? __kasan_check_write+0x18/0x20 [ 2134.448626][T14340] ? fput+0x1a5/0x240 [ 2134.448653][T14340] ? ksys_write+0x1ef/0x250 [ 2134.448674][T14340] ? __cfi_ksys_write+0x10/0x10 [ 2134.448697][T14340] __x64_sys_statx+0xc3/0xf0 [ 2134.448723][T14340] x64_sys_call+0x2e78/0x2ee0 [ 2134.448757][T14340] do_syscall_64+0x58/0xf0 [ 2134.448785][T14340] ? clear_bhb_loop+0x50/0xa0 [ 2134.448811][T14340] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2134.448834][T14340] RIP: 0033:0x7fea9458f6c9 [ 2134.448850][T14340] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2134.448871][T14340] RSP: 002b:00007fea9548b038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 2134.448896][T14340] RAX: ffffffffffffffda RBX: 00007fea947e5fa0 RCX: 00007fea9458f6c9 [ 2134.448914][T14340] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 2134.448931][T14340] RBP: 00007fea9548b090 R08: 0000000000000000 R09: 0000000000000000 [ 2134.448947][T14340] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 2134.448962][T14340] R13: 00007fea947e6038 R14: 00007fea947e5fa0 R15: 00007ffc9b91a468 [ 2134.448982][T14340] [ 2134.730926][T14362] overlayfs: failed to resolve './file1': -2 [ 2134.851648][T14375] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2135.085781][T14387] overlayfs: failed to resolve './file1': -2 [ 2135.211077][T14399] FAULT_INJECTION: forcing a failure. [ 2135.211077][T14399] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2135.255311][T14399] CPU: 1 UID: 0 PID: 14399 Comm: syz.0.50956 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2135.255350][T14399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2135.255362][T14399] Call Trace: [ 2135.255373][T14399] [ 2135.255380][T14399] __dump_stack+0x21/0x30 [ 2135.255406][T14399] dump_stack_lvl+0x10c/0x190 [ 2135.255428][T14399] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2135.255453][T14399] ? check_stack_object+0x12c/0x140 [ 2135.255470][T14399] dump_stack+0x19/0x20 [ 2135.255490][T14399] should_fail_ex+0x3d9/0x530 [ 2135.255508][T14399] should_fail+0xf/0x20 [ 2135.255523][T14399] should_fail_usercopy+0x1e/0x30 [ 2135.255542][T14399] _copy_to_user+0x24/0xa0 [ 2135.255562][T14399] simple_read_from_buffer+0xed/0x160 [ 2135.255583][T14399] proc_fail_nth_read+0x19e/0x210 [ 2135.255616][T14399] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2135.255637][T14399] ? __cfi_ovl_file_end_write+0x10/0x10 [ 2135.255658][T14399] ? bpf_lsm_file_permission+0xd/0x20 [ 2135.255680][T14399] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2135.255710][T14399] vfs_read+0x27d/0xc70 [ 2135.255731][T14399] ? __cfi_ovl_write_iter+0x10/0x10 [ 2135.255758][T14399] ? __cfi_vfs_read+0x10/0x10 [ 2135.255777][T14399] ? __kasan_check_write+0x18/0x20 [ 2135.255802][T14399] ? mutex_lock+0x92/0x1c0 [ 2135.255817][T14399] ? __cfi_mutex_lock+0x10/0x10 [ 2135.255831][T14399] ? __fget_files+0x2c5/0x340 [ 2135.255851][T14399] ksys_read+0x141/0x250 [ 2135.255866][T14399] ? __cfi_ksys_read+0x10/0x10 [ 2135.255882][T14399] ? __kasan_check_read+0x15/0x20 [ 2135.255906][T14399] __x64_sys_read+0x7f/0x90 [ 2135.255921][T14399] x64_sys_call+0x2638/0x2ee0 [ 2135.255945][T14399] do_syscall_64+0x58/0xf0 [ 2135.255967][T14399] ? clear_bhb_loop+0x50/0xa0 [ 2135.255985][T14399] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2135.256002][T14399] RIP: 0033:0x7f579538e0dc [ 2135.256017][T14399] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2135.256032][T14399] RSP: 002b:00007f57962ed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2135.256049][T14399] RAX: ffffffffffffffda RBX: 00007f57955e5fa0 RCX: 00007f579538e0dc [ 2135.256062][T14399] RDX: 000000000000000f RSI: 00007f57962ed0a0 RDI: 0000000000000006 [ 2135.256072][T14399] RBP: 00007f57962ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2135.256083][T14399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2135.256093][T14399] R13: 00007f57955e6038 R14: 00007f57955e5fa0 R15: 00007ffc44da6d88 [ 2135.256108][T14399] [ 2135.695973][T14407] rust_binder: Write failure EFAULT in pid:762 [ 2135.738089][T14415] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 2135.808070][T14425] overlayfs: failed to resolve './file1': -2 [ 2135.846758][T14431] FAULT_INJECTION: forcing a failure. [ 2135.846758][T14431] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2135.850157][T14430] overlayfs: failed to resolve './file1': -2 [ 2135.860281][T14431] CPU: 0 UID: 0 PID: 14431 Comm: syz.4.50972 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2135.860320][T14431] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2135.860338][T14431] Call Trace: [ 2135.860350][T14431] [ 2135.860361][T14431] __dump_stack+0x21/0x30 [ 2135.860403][T14431] dump_stack_lvl+0x10c/0x190 [ 2135.860441][T14431] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2135.860476][T14431] ? kstrtoull+0x13b/0x1e0 [ 2135.860497][T14431] dump_stack+0x19/0x20 [ 2135.860529][T14431] should_fail_ex+0x3d9/0x530 [ 2135.860566][T14431] should_fail+0xf/0x20 [ 2135.860591][T14431] should_fail_usercopy+0x1e/0x30 [ 2135.860619][T14431] _copy_from_user+0x22/0xb0 [ 2135.860652][T14431] ___sys_sendmsg+0x159/0x2a0 [ 2135.860691][T14431] ? __sys_sendmsg+0x280/0x280 [ 2135.860729][T14431] ? proc_fail_nth_write+0x17e/0x210 [ 2135.860763][T14431] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2135.860805][T14431] __x64_sys_sendmsg+0x1eb/0x2c0 [ 2135.860843][T14431] ? fput+0x1a5/0x240 [ 2135.860873][T14431] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2135.860911][T14431] ? ksys_write+0x1ef/0x250 [ 2135.860937][T14431] ? __kasan_check_read+0x15/0x20 [ 2135.860977][T14431] x64_sys_call+0x2a4c/0x2ee0 [ 2135.861015][T14431] do_syscall_64+0x58/0xf0 [ 2135.861049][T14431] ? clear_bhb_loop+0x50/0xa0 [ 2135.861077][T14431] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2135.861106][T14431] RIP: 0033:0x7f2adc78f6c9 [ 2135.861128][T14431] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2135.861152][T14431] RSP: 002b:00007f2add59f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2135.861180][T14431] RAX: ffffffffffffffda RBX: 00007f2adc9e5fa0 RCX: 00007f2adc78f6c9 [ 2135.861203][T14431] RDX: 00000000000000c0 RSI: 0000200000005600 RDI: 0000000000000005 [ 2135.861221][T14431] RBP: 00007f2add59f090 R08: 0000000000000000 R09: 0000000000000000 [ 2135.861239][T14431] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2135.861255][T14431] R13: 00007f2adc9e6038 R14: 00007f2adc9e5fa0 R15: 00007ffece624308 [ 2135.861279][T14431] [ 2136.510049][T14494] rust_binder: 794: no such ref 0 [ 2136.668476][T14516] FAULT_INJECTION: forcing a failure. [ 2136.668476][T14516] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2136.696166][T14516] CPU: 1 UID: 0 PID: 14516 Comm: syz.1.51013 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2136.696204][T14516] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2136.696220][T14516] Call Trace: [ 2136.696229][T14516] [ 2136.696239][T14516] __dump_stack+0x21/0x30 [ 2136.696276][T14516] dump_stack_lvl+0x10c/0x190 [ 2136.696307][T14516] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2136.696339][T14516] ? check_stack_object+0x12c/0x140 [ 2136.696363][T14516] dump_stack+0x19/0x20 [ 2136.696393][T14516] should_fail_ex+0x3d9/0x530 [ 2136.696417][T14516] should_fail+0xf/0x20 [ 2136.696438][T14516] should_fail_usercopy+0x1e/0x30 [ 2136.696464][T14516] _copy_to_user+0x24/0xa0 [ 2136.696493][T14516] simple_read_from_buffer+0xed/0x160 [ 2136.696524][T14516] proc_fail_nth_read+0x19e/0x210 [ 2136.696555][T14516] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2136.696586][T14516] ? bpf_lsm_file_permission+0xd/0x20 [ 2136.696618][T14516] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2136.696649][T14516] vfs_read+0x27d/0xc70 [ 2136.696670][T14516] ? mix_interrupt_randomness+0x230/0x230 [ 2136.696710][T14516] ? __cfi_vfs_read+0x10/0x10 [ 2136.696729][T14516] ? __kasan_check_write+0x18/0x20 [ 2136.696764][T14516] ? mutex_lock+0x92/0x1c0 [ 2136.696786][T14516] ? __cfi_mutex_lock+0x10/0x10 [ 2136.696806][T14516] ? __fget_files+0x2c5/0x340 [ 2136.696833][T14516] ksys_read+0x141/0x250 [ 2136.696854][T14516] ? __cfi_ksys_read+0x10/0x10 [ 2136.696877][T14516] ? __kasan_check_read+0x15/0x20 [ 2136.696911][T14516] __x64_sys_read+0x7f/0x90 [ 2136.696933][T14516] x64_sys_call+0x2638/0x2ee0 [ 2136.696966][T14516] do_syscall_64+0x58/0xf0 [ 2136.696996][T14516] ? clear_bhb_loop+0x50/0xa0 [ 2136.697022][T14516] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2136.697047][T14516] RIP: 0033:0x7fea9458e0dc [ 2136.697066][T14516] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2136.697087][T14516] RSP: 002b:00007fea9548b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2136.697111][T14516] RAX: ffffffffffffffda RBX: 00007fea947e5fa0 RCX: 00007fea9458e0dc [ 2136.697129][T14516] RDX: 000000000000000f RSI: 00007fea9548b0a0 RDI: 0000000000000005 [ 2136.697145][T14516] RBP: 00007fea9548b090 R08: 0000000000000000 R09: 0000000000000000 [ 2136.697161][T14516] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2136.697181][T14516] R13: 00007fea947e6038 R14: 00007fea947e5fa0 R15: 00007ffc9b91a468 [ 2136.697201][T14516] [ 2136.962498][T14520] pim6reg1: entered promiscuous mode [ 2136.967897][T14520] pim6reg1: entered allmulticast mode [ 2137.155338][T14544] FAULT_INJECTION: forcing a failure. [ 2137.155338][T14544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2137.168608][T14544] CPU: 0 UID: 0 PID: 14544 Comm: syz.4.51026 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2137.168647][T14544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2137.168663][T14544] Call Trace: [ 2137.168672][T14544] [ 2137.168682][T14544] __dump_stack+0x21/0x30 [ 2137.168719][T14544] dump_stack_lvl+0x10c/0x190 [ 2137.168750][T14544] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2137.168781][T14544] ? lock_sock_nested+0x1f5/0x290 [ 2137.168806][T14544] dump_stack+0x19/0x20 [ 2137.168835][T14544] should_fail_ex+0x3d9/0x530 [ 2137.168858][T14544] should_fail+0xf/0x20 [ 2137.168879][T14544] should_fail_usercopy+0x1e/0x30 [ 2137.168904][T14544] _copy_from_user+0x22/0xb0 [ 2137.168932][T14544] rfcomm_sock_setsockopt+0x580/0x740 [ 2137.168967][T14544] ? __cfi_rfcomm_sock_setsockopt+0x10/0x10 [ 2137.169002][T14544] ? __kasan_check_write+0x18/0x20 [ 2137.169036][T14544] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 2137.169066][T14544] ? security_socket_setsockopt+0x33/0xd0 [ 2137.169090][T14544] ? __cfi_rfcomm_sock_setsockopt+0x10/0x10 [ 2137.169124][T14544] do_sock_setsockopt+0x26d/0x400 [ 2137.169158][T14544] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 2137.169193][T14544] __x64_sys_setsockopt+0x1b8/0x250 [ 2137.169226][T14544] x64_sys_call+0x2adc/0x2ee0 [ 2137.169259][T14544] do_syscall_64+0x58/0xf0 [ 2137.169288][T14544] ? clear_bhb_loop+0x50/0xa0 [ 2137.169313][T14544] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2137.169338][T14544] RIP: 0033:0x7f2adc78f6c9 [ 2137.169357][T14544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2137.169376][T14544] RSP: 002b:00007f2add59f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2137.169410][T14544] RAX: ffffffffffffffda RBX: 00007f2adc9e5fa0 RCX: 00007f2adc78f6c9 [ 2137.169428][T14544] RDX: 0000000000000004 RSI: 0000000000000112 RDI: 0000000000000006 [ 2137.169443][T14544] RBP: 00007f2add59f090 R08: 0000000000000002 R09: 0000000000000000 [ 2137.169459][T14544] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 2137.169474][T14544] R13: 00007f2adc9e6038 R14: 00007f2adc9e5fa0 R15: 00007ffece624308 [ 2137.169495][T14544] [ 2137.547405][T14561] FAULT_INJECTION: forcing a failure. [ 2137.547405][T14561] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2137.560538][T14561] CPU: 0 UID: 0 PID: 14561 Comm: syz.4.51034 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2137.560575][T14561] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2137.560591][T14561] Call Trace: [ 2137.560599][T14561] [ 2137.560609][T14561] __dump_stack+0x21/0x30 [ 2137.560652][T14561] dump_stack_lvl+0x10c/0x190 [ 2137.560684][T14561] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2137.560714][T14561] ? __schedule+0x132a/0x1df0 [ 2137.560748][T14561] dump_stack+0x19/0x20 [ 2137.560778][T14561] should_fail_ex+0x3d9/0x530 [ 2137.560803][T14561] should_fail+0xf/0x20 [ 2137.560824][T14561] should_fail_usercopy+0x1e/0x30 [ 2137.560849][T14561] _copy_to_user+0x24/0xa0 [ 2137.560879][T14561] aio_read_events+0x2f4/0x620 [ 2137.560911][T14561] do_io_getevents+0x370/0x5c0 [ 2137.560940][T14561] ? aio_poll_put_work+0x40/0x40 [ 2137.560969][T14561] ? __cfi_hrtimer_wakeup+0x10/0x10 [ 2137.560998][T14561] ? __kasan_check_write+0x18/0x20 [ 2137.561032][T14561] ? mutex_unlock+0x8b/0x240 [ 2137.561054][T14561] ? __cfi_autoremove_wake_function+0x10/0x10 [ 2137.561080][T14561] __se_sys_io_getevents+0xe6/0x210 [ 2137.561106][T14561] ? __x64_sys_io_getevents+0xf0/0xf0 [ 2137.561134][T14561] __x64_sys_io_getevents+0xc3/0xf0 [ 2137.561160][T14561] x64_sys_call+0x26ec/0x2ee0 [ 2137.561193][T14561] do_syscall_64+0x58/0xf0 [ 2137.561222][T14561] ? clear_bhb_loop+0x50/0xa0 [ 2137.561249][T14561] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2137.561273][T14561] RIP: 0033:0x7f2adc78f6c9 [ 2137.561293][T14561] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2137.561314][T14561] RSP: 002b:00007f2add59f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d0 [ 2137.561340][T14561] RAX: ffffffffffffffda RBX: 00007f2adc9e5fa0 RCX: 00007f2adc78f6c9 [ 2137.561358][T14561] RDX: 0000000000000001 RSI: 0000000000000001 RDI: 00007f2adb177000 [ 2137.561373][T14561] RBP: 00007f2add59f090 R08: 0000000000000000 R09: 0000000000000000 [ 2137.561389][T14561] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 2137.561404][T14561] R13: 00007f2adc9e6038 R14: 00007f2adc9e5fa0 R15: 00007ffece624308 [ 2137.561424][T14561] [ 2138.216356][T14595] rust_binder: Error while translating object. [ 2138.216413][T14595] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 2138.243765][T14595] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:214 [ 2138.312155][ T36] audit: type=1400 audit(1779782759.868:1277): avc: denied { create } for pid=14596 comm="syz.1.51051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_iscsi_socket permissive=1 [ 2138.361649][T14599] FAULT_INJECTION: forcing a failure. [ 2138.361649][T14599] name failslab, interval 1, probability 0, space 0, times 0 [ 2138.413579][T14599] CPU: 1 UID: 0 PID: 14599 Comm: syz.1.51052 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2138.413625][T14599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2138.413640][T14599] Call Trace: [ 2138.413648][T14599] [ 2138.413658][T14599] __dump_stack+0x21/0x30 [ 2138.413695][T14599] dump_stack_lvl+0x10c/0x190 [ 2138.413726][T14599] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2138.413759][T14599] dump_stack+0x19/0x20 [ 2138.413789][T14599] should_fail_ex+0x3d9/0x530 [ 2138.413814][T14599] should_failslab+0xac/0x100 [ 2138.413841][T14599] kmem_cache_alloc_lru_noprof+0x44/0x430 [ 2138.413865][T14599] ? sock_alloc_inode+0x48/0x150 [ 2138.413891][T14599] ? __kasan_check_write+0x18/0x20 [ 2138.413926][T14599] sock_alloc_inode+0x48/0x150 [ 2138.413952][T14599] ? __cfi_sock_alloc_inode+0x10/0x10 [ 2138.413977][T14599] alloc_inode+0x7a/0x270 [ 2138.414004][T14599] ? bpf_lsm_socket_create+0xd/0x20 [ 2138.414032][T14599] new_inode_pseudo+0x19/0x40 [ 2138.414059][T14599] __sock_create+0x130/0x810 [ 2138.414088][T14599] __sys_socket+0xe2/0x1c0 [ 2138.414116][T14599] __x64_sys_socket+0x7e/0x90 [ 2138.414144][T14599] x64_sys_call+0x2608/0x2ee0 [ 2138.414176][T14599] do_syscall_64+0x58/0xf0 [ 2138.414204][T14599] ? clear_bhb_loop+0x50/0xa0 [ 2138.414229][T14599] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2138.414254][T14599] RIP: 0033:0x7fea9458f6c9 [ 2138.414273][T14599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2138.414295][T14599] RSP: 002b:00007fea9548b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 2138.414321][T14599] RAX: ffffffffffffffda RBX: 00007fea947e5fa0 RCX: 00007fea9458f6c9 [ 2138.414340][T14599] RDX: 0000000000000008 RSI: 0000000000000003 RDI: 0000000000000010 [ 2138.414355][T14599] RBP: 00007fea9548b090 R08: 0000000000000000 R09: 0000000000000000 [ 2138.414371][T14599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2138.414386][T14599] R13: 00007fea947e6038 R14: 00007fea947e5fa0 R15: 00007ffc9b91a468 [ 2138.414406][T14599] [ 2138.414435][T14599] socket: no more sockets [ 2138.949725][T14631] FAULT_INJECTION: forcing a failure. [ 2138.949725][T14631] name failslab, interval 1, probability 0, space 0, times 0 [ 2138.977155][T14631] CPU: 1 UID: 0 PID: 14631 Comm: syz.3.51065 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2138.977183][T14631] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2138.977194][T14631] Call Trace: [ 2138.977200][T14631] [ 2138.977207][T14631] __dump_stack+0x21/0x30 [ 2138.977233][T14631] dump_stack_lvl+0x10c/0x190 [ 2138.977254][T14631] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2138.977283][T14631] ? pfifo_fast_reset+0x633/0x680 [ 2138.977309][T14631] dump_stack+0x19/0x20 [ 2138.977330][T14631] should_fail_ex+0x3d9/0x530 [ 2138.977347][T14631] should_failslab+0xac/0x100 [ 2138.977366][T14631] kmem_cache_alloc_node_noprof+0x45/0x440 [ 2138.977382][T14631] ? __alloc_skb+0x10c/0x370 [ 2138.977403][T14631] __alloc_skb+0x10c/0x370 [ 2138.977423][T14631] rtmsg_ifinfo_build_skb+0x85/0x270 [ 2138.977440][T14631] rtmsg_ifinfo+0x91/0x1a0 [ 2138.977455][T14631] dev_close_many+0x289/0x4f0 [ 2138.977479][T14631] ? __asan_memset+0x39/0x50 [ 2138.977494][T14631] ? __cfi_dev_close_many+0x10/0x10 [ 2138.977517][T14631] ? kernel_text_address+0xa9/0xe0 [ 2138.977541][T14631] ? __kasan_check_read+0x15/0x20 [ 2138.977566][T14631] unregister_netdevice_many_notify+0x4bb/0x1bd0 [ 2138.977587][T14631] ? __nla_validate+0x70/0x70 [ 2138.977609][T14631] ? __cfi_unregister_netdevice_many_notify+0x10/0x10 [ 2138.977630][T14631] ? __kasan_check_read+0x15/0x20 [ 2138.977654][T14631] ? unregister_netdevice_queue+0x1b4/0x380 [ 2138.977675][T14631] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 2138.977694][T14631] rtnl_dellink+0x468/0x780 [ 2138.977710][T14631] ? __cfi_rtnl_dellink+0x10/0x10 [ 2138.977736][T14631] ? __kasan_check_write+0x18/0x20 [ 2138.977760][T14631] ? mutex_lock+0x92/0x1c0 [ 2138.977775][T14631] ? __cfi_mutex_lock+0x10/0x10 [ 2138.977789][T14631] ? ns_capable+0x91/0xf0 [ 2138.977813][T14631] ? netlink_net_capable+0x129/0x160 [ 2138.977834][T14631] ? __cfi_rtnl_dellink+0x10/0x10 [ 2138.977850][T14631] rtnetlink_rcv_msg+0x882/0xa00 [ 2138.977868][T14631] ? avc_has_perm_noaudit+0x268/0x360 [ 2138.977892][T14631] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 2138.977910][T14631] ? avc_has_perm_noaudit+0x286/0x360 [ 2138.977933][T14631] ? avc_has_perm+0x144/0x220 [ 2138.977956][T14631] netlink_rcv_skb+0x22b/0x4a0 [ 2138.977978][T14631] ? __cfi_rtnetlink_rcv_msg+0x10/0x10 [ 2138.977997][T14631] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 2138.978022][T14631] ? netlink_autobind+0x1c0/0x1c0 [ 2138.978047][T14631] ? is_vmalloc_addr+0x11/0x40 [ 2138.978066][T14631] rtnetlink_rcv+0x20/0x30 [ 2138.978084][T14631] netlink_unicast+0x8c0/0xa60 [ 2138.978106][T14631] netlink_sendmsg+0x7f0/0xaf0 [ 2138.978131][T14631] ? __cfi_netlink_sendmsg+0x10/0x10 [ 2138.978155][T14631] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 2138.978177][T14631] ? security_socket_sendmsg+0x33/0xd0 [ 2138.978201][T14631] ? __cfi_netlink_sendmsg+0x10/0x10 [ 2138.978235][T14631] ____sys_sendmsg+0xa15/0xa70 [ 2138.978267][T14631] ? __sys_sendmsg_sock+0x50/0x50 [ 2138.978297][T14631] ? import_iovec+0x81/0xb0 [ 2138.978319][T14631] ___sys_sendmsg+0x220/0x2a0 [ 2138.978347][T14631] ? __sys_sendmsg+0x280/0x280 [ 2138.978371][T14631] ? proc_fail_nth_write+0x17e/0x210 [ 2138.978392][T14631] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2138.978421][T14631] __x64_sys_sendmsg+0x1eb/0x2c0 [ 2138.978444][T14631] ? fput+0x1a5/0x240 [ 2138.978463][T14631] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2138.978487][T14631] ? ksys_write+0x1ef/0x250 [ 2138.978503][T14631] ? __kasan_check_read+0x15/0x20 [ 2138.978529][T14631] x64_sys_call+0x2a4c/0x2ee0 [ 2138.978553][T14631] do_syscall_64+0x58/0xf0 [ 2138.978574][T14631] ? clear_bhb_loop+0x50/0xa0 [ 2138.978592][T14631] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2138.978610][T14631] RIP: 0033:0x7f1792f8f6c9 [ 2138.978623][T14631] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2138.978638][T14631] RSP: 002b:00007f1793d5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2138.978656][T14631] RAX: ffffffffffffffda RBX: 00007f17931e5fa0 RCX: 00007f1792f8f6c9 [ 2138.978669][T14631] RDX: 0000000000000000 RSI: 0000200000000740 RDI: 0000000000000007 [ 2138.978679][T14631] RBP: 00007f1793d5c090 R08: 0000000000000000 R09: 0000000000000000 [ 2138.978689][T14631] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2138.978700][T14631] R13: 00007f17931e6038 R14: 00007f17931e5fa0 R15: 00007fff67e210b8 [ 2138.978714][T14631] [ 2140.278440][T14680] FAULT_INJECTION: forcing a failure. [ 2140.278440][T14680] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2140.315378][T14680] CPU: 1 UID: 0 PID: 14680 Comm: syz.3.51090 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2140.315418][T14680] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2140.315434][T14680] Call Trace: [ 2140.315442][T14680] [ 2140.315452][T14680] __dump_stack+0x21/0x30 [ 2140.315488][T14680] dump_stack_lvl+0x10c/0x190 [ 2140.315518][T14680] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2140.315549][T14680] ? kstrtoull+0x13b/0x1e0 [ 2140.315570][T14680] dump_stack+0x19/0x20 [ 2140.315598][T14680] should_fail_ex+0x3d9/0x530 [ 2140.315622][T14680] should_fail+0xf/0x20 [ 2140.315643][T14680] should_fail_usercopy+0x1e/0x30 [ 2140.315667][T14680] _copy_from_user+0x22/0xb0 [ 2140.315694][T14680] ___sys_sendmsg+0x159/0x2a0 [ 2140.315728][T14680] ? __sys_sendmsg+0x280/0x280 [ 2140.315760][T14680] ? proc_fail_nth_write+0x17e/0x210 [ 2140.315791][T14680] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2140.315829][T14680] __x64_sys_sendmsg+0x1eb/0x2c0 [ 2140.315863][T14680] ? fput+0x1a5/0x240 [ 2140.315890][T14680] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2140.315922][T14680] ? ksys_write+0x1ef/0x250 [ 2140.315943][T14680] ? __kasan_check_read+0x15/0x20 [ 2140.315977][T14680] x64_sys_call+0x2a4c/0x2ee0 [ 2140.316008][T14680] do_syscall_64+0x58/0xf0 [ 2140.316038][T14680] ? clear_bhb_loop+0x50/0xa0 [ 2140.316064][T14680] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2140.316089][T14680] RIP: 0033:0x7f1792f8f6c9 [ 2140.316109][T14680] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2140.316128][T14680] RSP: 002b:00007f1793d5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2140.316153][T14680] RAX: ffffffffffffffda RBX: 00007f17931e5fa0 RCX: 00007f1792f8f6c9 [ 2140.316171][T14680] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000005 [ 2140.316187][T14680] RBP: 00007f1793d5c090 R08: 0000000000000000 R09: 0000000000000000 [ 2140.316211][T14680] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2140.316226][T14680] R13: 00007f17931e6038 R14: 00007f17931e5fa0 R15: 00007fff67e210b8 [ 2140.316247][T14680] [ 2140.532531][T14693] FAULT_INJECTION: forcing a failure. [ 2140.532531][T14693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2140.545697][T14693] CPU: 0 UID: 0 PID: 14693 Comm: syz.4.51094 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2140.545736][T14693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2140.545751][T14693] Call Trace: [ 2140.545759][T14693] [ 2140.545768][T14693] __dump_stack+0x21/0x30 [ 2140.545806][T14693] dump_stack_lvl+0x10c/0x190 [ 2140.545837][T14693] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2140.545869][T14693] ? vsnprintf+0x7b4/0x1aa0 [ 2140.545896][T14693] ? check_stack_object+0x107/0x140 [ 2140.545919][T14693] dump_stack+0x19/0x20 [ 2140.545948][T14693] should_fail_ex+0x3d9/0x530 [ 2140.545972][T14693] should_fail+0xf/0x20 [ 2140.545993][T14693] should_fail_usercopy+0x1e/0x30 [ 2140.546018][T14693] _copy_from_user+0x22/0xb0 [ 2140.546047][T14693] kstrtouint_from_user+0xc2/0x150 [ 2140.546070][T14693] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 2140.546093][T14693] ? selinux_file_permission+0x309/0xb30 [ 2140.546122][T14693] ? __cfi_selinux_file_permission+0x10/0x10 [ 2140.546151][T14693] proc_fail_nth_write+0x89/0x210 [ 2140.546182][T14693] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2140.546213][T14693] ? bpf_lsm_file_permission+0xd/0x20 [ 2140.546245][T14693] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2140.546276][T14693] vfs_write+0x3c0/0xf30 [ 2140.546299][T14693] ? __cfi_vfs_write+0x10/0x10 [ 2140.546319][T14693] ? __kasan_check_write+0x18/0x20 [ 2140.546354][T14693] ? mutex_lock+0x92/0x1c0 [ 2140.546375][T14693] ? __cfi_mutex_lock+0x10/0x10 [ 2140.546396][T14693] ? __fget_files+0x2c5/0x340 [ 2140.546431][T14693] ksys_write+0x141/0x250 [ 2140.546453][T14693] ? __cfi_ksys_write+0x10/0x10 [ 2140.546474][T14693] ? fdget+0x189/0x1f0 [ 2140.546499][T14693] ? __kasan_check_read+0x15/0x20 [ 2140.546534][T14693] __x64_sys_write+0x7f/0x90 [ 2140.546556][T14693] x64_sys_call+0x271c/0x2ee0 [ 2140.546590][T14693] do_syscall_64+0x58/0xf0 [ 2140.546619][T14693] ? clear_bhb_loop+0x50/0xa0 [ 2140.546646][T14693] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2140.546671][T14693] RIP: 0033:0x7f2adc78e17f [ 2140.546691][T14693] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2140.546711][T14693] RSP: 002b:00007f2add57e030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2140.546737][T14693] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2adc78e17f [ 2140.546755][T14693] RDX: 0000000000000001 RSI: 00007f2add57e0a0 RDI: 0000000000000007 [ 2140.546770][T14693] RBP: 00007f2add57e090 R08: 0000000000000000 R09: 0000000000000000 [ 2140.546786][T14693] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2140.546801][T14693] R13: 00007f2adc9e6128 R14: 00007f2adc9e6090 R15: 00007ffece624308 [ 2140.546822][T14693] [ 2140.996584][T14724] FAULT_INJECTION: forcing a failure. [ 2140.996584][T14724] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2141.009742][T14724] CPU: 0 UID: 0 PID: 14724 Comm: syz.4.51110 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2141.009780][T14724] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2141.009795][T14724] Call Trace: [ 2141.009803][T14724] [ 2141.009813][T14724] __dump_stack+0x21/0x30 [ 2141.009851][T14724] dump_stack_lvl+0x10c/0x190 [ 2141.009882][T14724] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2141.009915][T14724] ? check_stack_object+0x12c/0x140 [ 2141.009938][T14724] dump_stack+0x19/0x20 [ 2141.009968][T14724] should_fail_ex+0x3d9/0x530 [ 2141.009992][T14724] should_fail+0xf/0x20 [ 2141.010014][T14724] should_fail_usercopy+0x1e/0x30 [ 2141.010040][T14724] _copy_to_user+0x24/0xa0 [ 2141.010069][T14724] simple_read_from_buffer+0xed/0x160 [ 2141.010121][T14724] proc_fail_nth_read+0x19e/0x210 [ 2141.010153][T14724] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2141.010185][T14724] ? bpf_lsm_file_permission+0xd/0x20 [ 2141.010217][T14724] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2141.010248][T14724] vfs_read+0x27d/0xc70 [ 2141.010270][T14724] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 2141.010302][T14724] ? __cfi_vfs_read+0x10/0x10 [ 2141.010321][T14724] ? __kasan_check_write+0x18/0x20 [ 2141.010363][T14724] ? mutex_lock+0x92/0x1c0 [ 2141.010384][T14724] ? __cfi_mutex_lock+0x10/0x10 [ 2141.010405][T14724] ? __fget_files+0x2c5/0x340 [ 2141.010433][T14724] ksys_read+0x141/0x250 [ 2141.010454][T14724] ? __cfi_ksys_read+0x10/0x10 [ 2141.010476][T14724] ? __kasan_check_read+0x15/0x20 [ 2141.010510][T14724] __x64_sys_read+0x7f/0x90 [ 2141.010531][T14724] x64_sys_call+0x2638/0x2ee0 [ 2141.010565][T14724] do_syscall_64+0x58/0xf0 [ 2141.010595][T14724] ? clear_bhb_loop+0x50/0xa0 [ 2141.010621][T14724] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2141.010646][T14724] RIP: 0033:0x7f2adc78e0dc [ 2141.010667][T14724] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2141.010686][T14724] RSP: 002b:00007f2add59f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2141.010711][T14724] RAX: ffffffffffffffda RBX: 00007f2adc9e5fa0 RCX: 00007f2adc78e0dc [ 2141.010730][T14724] RDX: 000000000000000f RSI: 00007f2add59f0a0 RDI: 0000000000000005 [ 2141.010745][T14724] RBP: 00007f2add59f090 R08: 0000000000000000 R09: 0000000000000000 [ 2141.010761][T14724] R10: 0000000000000008 R11: 0000000000000246 R12: 0000000000000001 [ 2141.010776][T14724] R13: 00007f2adc9e6038 R14: 00007f2adc9e5fa0 R15: 00007ffece624308 [ 2141.010797][T14724] [ 2141.392079][T14757] overlayfs: missing 'lowerdir' [ 2144.232025][T14940] FAULT_INJECTION: forcing a failure. [ 2144.232025][T14940] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2144.275735][T14940] CPU: 1 UID: 0 PID: 14940 Comm: syz.3.51213 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2144.275775][T14940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2144.275791][T14940] Call Trace: [ 2144.275799][T14940] [ 2144.275809][T14940] __dump_stack+0x21/0x30 [ 2144.275846][T14940] dump_stack_lvl+0x10c/0x190 [ 2144.275885][T14940] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2144.275916][T14940] ? vsnprintf+0x7b4/0x1aa0 [ 2144.275943][T14940] ? check_stack_object+0x107/0x140 [ 2144.275966][T14940] dump_stack+0x19/0x20 [ 2144.275995][T14940] should_fail_ex+0x3d9/0x530 [ 2144.276019][T14940] should_fail+0xf/0x20 [ 2144.276040][T14940] should_fail_usercopy+0x1e/0x30 [ 2144.276064][T14940] _copy_from_user+0x22/0xb0 [ 2144.276093][T14940] kstrtouint_from_user+0xc2/0x150 [ 2144.276117][T14940] ? __cfi_kstrtouint_from_user+0x10/0x10 [ 2144.276140][T14940] ? selinux_file_permission+0x309/0xb30 [ 2144.276169][T14940] ? __cfi_selinux_file_permission+0x10/0x10 [ 2144.276198][T14940] proc_fail_nth_write+0x89/0x210 [ 2144.276229][T14940] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2144.276260][T14940] ? bpf_lsm_file_permission+0xd/0x20 [ 2144.276292][T14940] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2144.276322][T14940] vfs_write+0x3c0/0xf30 [ 2144.276345][T14940] ? __cfi_vfs_write+0x10/0x10 [ 2144.276366][T14940] ? __kasan_check_write+0x18/0x20 [ 2144.276399][T14940] ? mutex_lock+0x92/0x1c0 [ 2144.276420][T14940] ? __cfi_mutex_lock+0x10/0x10 [ 2144.276441][T14940] ? __fget_files+0x2c5/0x340 [ 2144.276468][T14940] ksys_write+0x141/0x250 [ 2144.276489][T14940] ? __cfi_ksys_write+0x10/0x10 [ 2144.276512][T14940] ? __kasan_check_read+0x15/0x20 [ 2144.276546][T14940] __x64_sys_write+0x7f/0x90 [ 2144.276568][T14940] x64_sys_call+0x271c/0x2ee0 [ 2144.276601][T14940] do_syscall_64+0x58/0xf0 [ 2144.276630][T14940] ? clear_bhb_loop+0x50/0xa0 [ 2144.276656][T14940] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2144.276680][T14940] RIP: 0033:0x7f1792f8e17f [ 2144.276700][T14940] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 2144.276720][T14940] RSP: 002b:00007f1793d5c030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 2144.276745][T14940] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f1792f8e17f [ 2144.276763][T14940] RDX: 0000000000000001 RSI: 00007f1793d5c0a0 RDI: 0000000000000006 [ 2144.276778][T14940] RBP: 00007f1793d5c090 R08: 0000000000000000 R09: 0000000000000014 [ 2144.276794][T14940] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2144.276808][T14940] R13: 00007f17931e6038 R14: 00007f17931e5fa0 R15: 00007fff67e210b8 [ 2144.276829][T14940] [ 2144.980645][T14961] rust_binder: 262: no such ref 0 [ 2146.155369][T15007] FAULT_INJECTION: forcing a failure. [ 2146.155369][T15007] name failslab, interval 1, probability 0, space 0, times 0 [ 2146.192067][T15007] CPU: 1 UID: 0 PID: 15007 Comm: syz.0.51246 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2146.192102][T15007] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2146.192118][T15007] Call Trace: [ 2146.192125][T15007] [ 2146.192134][T15007] __dump_stack+0x21/0x30 [ 2146.192170][T15007] dump_stack_lvl+0x10c/0x190 [ 2146.192198][T15007] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2146.192230][T15007] dump_stack+0x19/0x20 [ 2146.192259][T15007] should_fail_ex+0x3d9/0x530 [ 2146.192283][T15007] ? genl_family_rcv_msg_attrs_parse+0xc6/0x390 [ 2146.192310][T15007] should_failslab+0xac/0x100 [ 2146.192336][T15007] __kmalloc_noprof+0x69/0x530 [ 2146.192359][T15007] ? genl_family_rcv_msg_attrs_parse+0xc6/0x390 [ 2146.192385][T15007] ? cred_has_capability+0x281/0x380 [ 2146.192413][T15007] genl_family_rcv_msg_attrs_parse+0xc6/0x390 [ 2146.192441][T15007] genl_family_rcv_msg_doit+0xcd/0x330 [ 2146.192467][T15007] ? genl_family_rcv_msg_dumpit+0x2d0/0x2d0 [ 2146.192493][T15007] ? selinux_capable+0x38/0x50 [ 2146.192527][T15007] ? bpf_lsm_capable+0xd/0x20 [ 2146.192550][T15007] ? ns_capable+0x91/0xf0 [ 2146.192583][T15007] genl_rcv_msg+0x609/0x7a0 [ 2146.192614][T15007] ? __cfi_genl_rcv_msg+0x10/0x10 [ 2146.192638][T15007] ? __cfi_nl80211_pre_doit+0x10/0x10 [ 2146.192661][T15007] ? __cfi_nl80211_req_set_reg+0x10/0x10 [ 2146.192688][T15007] ? __cfi_nl80211_post_doit+0x10/0x10 [ 2146.192713][T15007] netlink_rcv_skb+0x22b/0x4a0 [ 2146.192745][T15007] ? __cfi_genl_rcv_msg+0x10/0x10 [ 2146.192767][T15007] ? __cfi_netlink_rcv_skb+0x10/0x10 [ 2146.192800][T15007] ? rwsem_read_trylock+0x2b1/0x660 [ 2146.192833][T15007] ? down_read+0x79/0xe0 [ 2146.192857][T15007] ? __cfi_down_read+0x10/0x10 [ 2146.192880][T15007] ? is_vmalloc_addr+0x11/0x40 [ 2146.192907][T15007] genl_rcv+0x2c/0x40 [ 2146.192929][T15007] netlink_unicast+0x8c0/0xa60 [ 2146.192960][T15007] netlink_sendmsg+0x7f0/0xaf0 [ 2146.192995][T15007] ? __cfi_netlink_sendmsg+0x10/0x10 [ 2146.193036][T15007] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 2146.193064][T15007] ? security_socket_sendmsg+0x33/0xd0 [ 2146.193086][T15007] ? __cfi_netlink_sendmsg+0x10/0x10 [ 2146.193119][T15007] ____sys_sendmsg+0xa15/0xa70 [ 2146.193154][T15007] ? __sys_sendmsg_sock+0x50/0x50 [ 2146.193188][T15007] ? import_iovec+0x81/0xb0 [ 2146.193218][T15007] ___sys_sendmsg+0x220/0x2a0 [ 2146.193251][T15007] ? __sys_sendmsg+0x280/0x280 [ 2146.193284][T15007] ? proc_fail_nth_write+0x17e/0x210 [ 2146.193314][T15007] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2146.193352][T15007] __x64_sys_sendmsg+0x1eb/0x2c0 [ 2146.193385][T15007] ? fput+0x1a5/0x240 [ 2146.193412][T15007] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2146.193445][T15007] ? ksys_write+0x1ef/0x250 [ 2146.193468][T15007] ? __kasan_check_read+0x15/0x20 [ 2146.193502][T15007] x64_sys_call+0x2a4c/0x2ee0 [ 2146.193535][T15007] do_syscall_64+0x58/0xf0 [ 2146.193564][T15007] ? clear_bhb_loop+0x50/0xa0 [ 2146.193590][T15007] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2146.193614][T15007] RIP: 0033:0x7f579538f6c9 [ 2146.193634][T15007] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2146.193655][T15007] RSP: 002b:00007f57962ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2146.193680][T15007] RAX: ffffffffffffffda RBX: 00007f57955e5fa0 RCX: 00007f579538f6c9 [ 2146.193698][T15007] RDX: 0000000024000000 RSI: 0000200000000180 RDI: 0000000000000005 [ 2146.193714][T15007] RBP: 00007f57962ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2146.193729][T15007] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2146.193744][T15007] R13: 00007f57955e6038 R14: 00007f57955e5fa0 R15: 00007ffc44da6d88 [ 2146.193764][T15007] [ 2146.656570][ T36] audit: type=1400 audit(1779782768.212:1278): avc: denied { setopt } for pid=15025 comm="syz.0.51256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 2147.415822][T15086] usb usb5: usbfs: process 15086 (syz.4.51283) did not claim interface 0 before use [ 2147.558592][T15107] usb usb5: usbfs: process 15107 (syz.3.51293) did not claim interface 0 before use [ 2147.723021][ T36] audit: type=1400 audit(1779782769.283:1279): avc: denied { shutdown } for pid=15129 comm="syz.4.51304" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 2147.768861][T15136] usb usb5: usbfs: process 15136 (syz.1.51305) did not claim interface 0 before use [ 2148.281337][T15174] FAULT_INJECTION: forcing a failure. [ 2148.281337][T15174] name failslab, interval 1, probability 0, space 0, times 0 [ 2148.318558][T15174] CPU: 1 UID: 0 PID: 15174 Comm: syz.1.51327 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2148.318603][T15174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2148.318619][T15174] Call Trace: [ 2148.318627][T15174] [ 2148.318637][T15174] __dump_stack+0x21/0x30 [ 2148.318674][T15174] dump_stack_lvl+0x10c/0x190 [ 2148.318705][T15174] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2148.318736][T15174] ? kstrtoull+0x13b/0x1e0 [ 2148.318757][T15174] dump_stack+0x19/0x20 [ 2148.318786][T15174] should_fail_ex+0x3d9/0x530 [ 2148.318809][T15174] should_failslab+0xac/0x100 [ 2148.318836][T15174] kmem_cache_alloc_noprof+0x42/0x430 [ 2148.318857][T15174] ? getname_flags+0xc6/0x710 [ 2148.318881][T15174] getname_flags+0xc6/0x710 [ 2148.318903][T15174] ? __kasan_check_write+0x18/0x20 [ 2148.318938][T15174] __se_sys_statx+0x166/0x3d0 [ 2148.318965][T15174] ? __x64_sys_statx+0xf0/0xf0 [ 2148.318992][T15174] ? vfs_write+0x93e/0xf30 [ 2148.319014][T15174] ? __cfi_vfs_write+0x10/0x10 [ 2148.319035][T15174] ? __kasan_check_write+0x18/0x20 [ 2148.319069][T15174] ? mutex_unlock+0x8b/0x240 [ 2148.319090][T15174] ? __cfi_mutex_unlock+0x10/0x10 [ 2148.319111][T15174] ? __fget_files+0x2c5/0x340 [ 2148.319136][T15174] ? __kasan_check_write+0x18/0x20 [ 2148.319171][T15174] ? fput+0x1a5/0x240 [ 2148.319197][T15174] ? ksys_write+0x1ef/0x250 [ 2148.319218][T15174] ? __cfi_ksys_write+0x10/0x10 [ 2148.319241][T15174] __x64_sys_statx+0xc3/0xf0 [ 2148.319268][T15174] x64_sys_call+0x2e78/0x2ee0 [ 2148.319302][T15174] do_syscall_64+0x58/0xf0 [ 2148.319330][T15174] ? clear_bhb_loop+0x50/0xa0 [ 2148.319356][T15174] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2148.319380][T15174] RIP: 0033:0x7fea9458f6c9 [ 2148.319399][T15174] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2148.319419][T15174] RSP: 002b:00007fea9548b038 EFLAGS: 00000246 ORIG_RAX: 000000000000014c [ 2148.319446][T15174] RAX: ffffffffffffffda RBX: 00007fea947e5fa0 RCX: 00007fea9458f6c9 [ 2148.319463][T15174] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 2148.319480][T15174] RBP: 00007fea9548b090 R08: 0000000000000000 R09: 0000000000000000 [ 2148.319496][T15174] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000001 [ 2148.319510][T15174] R13: 00007fea947e6038 R14: 00007fea947e5fa0 R15: 00007ffc9b91a468 [ 2148.319531][T15174] [ 2148.666267][T15192] netlink: 'syz.0.51334': attribute type 4 has an invalid length. [ 2148.679115][T15192] tipc: Trying to set illegal importance in message [ 2148.750302][T15200] usb usb5: usbfs: process 15200 (syz.0.51339) did not claim interface 0 before use [ 2149.126375][T15229] rust_binder: 326: no such ref 0 [ 2149.527509][T15247] FAULT_INJECTION: forcing a failure. [ 2149.527509][T15247] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2149.540683][T15247] CPU: 0 UID: 0 PID: 15247 Comm: syz.4.51359 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2149.540719][T15247] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2149.540742][T15247] Call Trace: [ 2149.540751][T15247] [ 2149.540760][T15247] __dump_stack+0x21/0x30 [ 2149.540797][T15247] dump_stack_lvl+0x10c/0x190 [ 2149.540827][T15247] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2149.540859][T15247] ? find_vma+0xcd/0x110 [ 2149.540882][T15247] dump_stack+0x19/0x20 [ 2149.540911][T15247] should_fail_ex+0x3d9/0x530 [ 2149.540935][T15247] should_fail+0xf/0x20 [ 2149.540957][T15247] should_fail_usercopy+0x1e/0x30 [ 2149.540983][T15247] _copy_from_user+0x22/0xb0 [ 2149.541012][T15247] io_submit_one+0xca/0x18c0 [ 2149.541044][T15247] ? lookup_ioctx+0x360/0x360 [ 2149.541070][T15247] ? asm_exc_page_fault+0x2b/0x30 [ 2149.541097][T15247] ? __get_user_4+0x1a/0x40 [ 2149.541121][T15247] ? lookup_ioctx+0x208/0x360 [ 2149.541148][T15247] __se_sys_io_submit+0x164/0x3c0 [ 2149.541174][T15247] ? __x64_sys_io_submit+0xa0/0xa0 [ 2149.541198][T15247] ? ksys_write+0x1ef/0x250 [ 2149.541222][T15247] ? __kasan_check_read+0x15/0x20 [ 2149.541256][T15247] __x64_sys_io_submit+0x7f/0xa0 [ 2149.541282][T15247] x64_sys_call+0x1c95/0x2ee0 [ 2149.541316][T15247] do_syscall_64+0x58/0xf0 [ 2149.541345][T15247] ? clear_bhb_loop+0x50/0xa0 [ 2149.541371][T15247] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2149.541396][T15247] RIP: 0033:0x7f2adc78f6c9 [ 2149.541414][T15247] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2149.541437][T15247] RSP: 002b:00007f2add59f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d1 [ 2149.541461][T15247] RAX: ffffffffffffffda RBX: 00007f2adc9e5fa0 RCX: 00007f2adc78f6c9 [ 2149.541480][T15247] RDX: 00002000000000c0 RSI: 0000000000000002 RDI: 00007f2adb177000 [ 2149.541496][T15247] RBP: 00007f2add59f090 R08: 0000000000000000 R09: 0000000000000000 [ 2149.541512][T15247] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2149.541527][T15247] R13: 00007f2adc9e6038 R14: 00007f2adc9e5fa0 R15: 00007ffece624308 [ 2149.541548][T15247] [ 2149.543499][T15249] rust_binder: 355: no such ref 0 [ 2150.529492][T15291] netlink: 8 bytes leftover after parsing attributes in process `syz.4.51382'. [ 2150.890155][T15320] 9pnet_fd: Insufficient options for proto=fd [ 2151.072345][T15333] 9pnet_fd: Insufficient options for proto=fd [ 2151.417030][ T332] usb 2-1: new high-speed USB device number 94 using dummy_hcd [ 2151.556874][T15368] bridge0: port 1(bridge_slave_0) entered blocking state [ 2151.563990][T15368] bridge0: port 1(bridge_slave_0) entered disabled state [ 2151.571324][T15368] bridge_slave_0: entered allmulticast mode [ 2151.576976][ T332] usb 2-1: Using ep0 maxpacket: 32 [ 2151.578192][T15368] bridge_slave_0: entered promiscuous mode [ 2151.591339][T15368] bridge0: port 2(bridge_slave_1) entered blocking state [ 2151.592139][ T332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2151.598731][T15368] bridge0: port 2(bridge_slave_1) entered disabled state [ 2151.605132][ T332] usb 2-1: New USB device found, idVendor=17ef, idProduct=6009, bcdDevice= 0.00 [ 2151.612523][T15368] bridge_slave_1: entered allmulticast mode [ 2151.628084][T15368] bridge_slave_1: entered promiscuous mode [ 2151.645849][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2151.669514][ T332] usb 2-1: config 0 descriptor?? [ 2151.857383][T13445] bridge_slave_1: left allmulticast mode [ 2151.863097][T13445] bridge_slave_1: left promiscuous mode [ 2151.869057][T13445] bridge0: port 2(bridge_slave_1) entered disabled state [ 2151.877043][T13445] bridge_slave_0: left allmulticast mode [ 2151.882739][T13445] bridge_slave_0: left promiscuous mode [ 2151.888728][T13445] bridge0: port 1(bridge_slave_0) entered disabled state [ 2152.005806][T13445] veth1_macvtap: left promiscuous mode [ 2152.011735][T13445] veth0_vlan: left promiscuous mode [ 2152.092077][ T332] lenovo 0003:17EF:6009.004F: unknown main item tag 0x0 [ 2152.095009][T15368] bridge0: port 2(bridge_slave_1) entered blocking state [ 2152.106153][T15368] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2152.111259][ T332] lenovo 0003:17EF:6009.004F: unknown main item tag 0x0 [ 2152.113490][T15368] bridge0: port 1(bridge_slave_0) entered blocking state [ 2152.113511][T15368] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2152.137419][T13470] bridge0: port 1(bridge_slave_0) entered disabled state [ 2152.156342][T13470] bridge0: port 2(bridge_slave_1) entered disabled state [ 2152.169352][T13470] bridge0: port 1(bridge_slave_0) entered blocking state [ 2152.175878][ T332] lenovo 0003:17EF:6009.004F: unknown main item tag 0x0 [ 2152.176444][T13470] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2152.191649][T13470] bridge0: port 2(bridge_slave_1) entered blocking state [ 2152.192814][ T332] lenovo 0003:17EF:6009.004F: unknown main item tag 0x0 [ 2152.198789][T13470] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2152.232248][T15368] veth0_vlan: entered promiscuous mode [ 2152.246057][T15368] veth1_macvtap: entered promiscuous mode [ 2152.257825][ T332] lenovo 0003:17EF:6009.004F: unknown main item tag 0x0 [ 2152.278688][ T332] lenovo 0003:17EF:6009.004F: hidraw0: USB HID v4.06 Device [HID 17ef:6009] on usb-dummy_hcd.1-1/input0 [ 2152.292731][T15348] tipc: Enabling not permitted [ 2152.298527][T15348] tipc: Enabling of bearer rejected, failed to enable media [ 2152.345088][ T332] usb 2-1: USB disconnect, device number 94 [ 2152.420309][ T36] audit: type=1400 audit(1779782773.985:1280): avc: denied { create } for pid=15420 comm="syz.4.51442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 2152.463053][ T36] audit: type=1400 audit(1779782774.025:1281): avc: denied { lock } for pid=15426 comm="syz.3.51445" path="socket:[608942]" dev="sockfs" ino=608942 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 2152.909083][T15469] usb usb5: usbfs: process 15469 (syz.3.51464) did not claim interface 0 before use [ 2152.974035][T15475] netlink: 'syz.0.51466': attribute type 3 has an invalid length. [ 2153.001982][T15475] binder: Unknown parameter 'seclaÊl' [ 2155.025043][T15576] FAULT_INJECTION: forcing a failure. [ 2155.025043][T15576] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2155.038271][T15576] CPU: 0 UID: 0 PID: 15576 Comm: syz.4.51518 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2155.038310][T15576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2155.038325][T15576] Call Trace: [ 2155.038333][T15576] [ 2155.038343][T15576] __dump_stack+0x21/0x30 [ 2155.038381][T15576] dump_stack_lvl+0x10c/0x190 [ 2155.038412][T15576] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2155.038444][T15576] ? check_stack_object+0x12c/0x140 [ 2155.038468][T15576] dump_stack+0x19/0x20 [ 2155.038497][T15576] should_fail_ex+0x3d9/0x530 [ 2155.038522][T15576] should_fail+0xf/0x20 [ 2155.038544][T15576] should_fail_usercopy+0x1e/0x30 [ 2155.038569][T15576] _copy_to_user+0x24/0xa0 [ 2155.038598][T15576] simple_read_from_buffer+0xed/0x160 [ 2155.038628][T15576] proc_fail_nth_read+0x19e/0x210 [ 2155.038660][T15576] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2155.038691][T15576] ? bpf_lsm_file_permission+0xd/0x20 [ 2155.038724][T15576] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2155.038755][T15576] vfs_read+0x27d/0xc70 [ 2155.038775][T15576] ? ep_destroy_wakeup_source+0x70/0x70 [ 2155.038806][T15576] ? __cfi_vfs_read+0x10/0x10 [ 2155.038826][T15576] ? __kasan_check_write+0x18/0x20 [ 2155.038861][T15576] ? mutex_lock+0x92/0x1c0 [ 2155.038882][T15576] ? __cfi_mutex_lock+0x10/0x10 [ 2155.038903][T15576] ? __fget_files+0x2c5/0x340 [ 2155.038929][T15576] ksys_read+0x141/0x250 [ 2155.038950][T15576] ? __cfi_ksys_read+0x10/0x10 [ 2155.038972][T15576] ? __kasan_check_read+0x15/0x20 [ 2155.039006][T15576] __x64_sys_read+0x7f/0x90 [ 2155.039028][T15576] x64_sys_call+0x2638/0x2ee0 [ 2155.039062][T15576] do_syscall_64+0x58/0xf0 [ 2155.039091][T15576] ? clear_bhb_loop+0x50/0xa0 [ 2155.039117][T15576] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2155.039150][T15576] RIP: 0033:0x7f660138e0dc [ 2155.039171][T15576] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2155.039191][T15576] RSP: 002b:00007f66021dd030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2155.039217][T15576] RAX: ffffffffffffffda RBX: 00007f66015e5fa0 RCX: 00007f660138e0dc [ 2155.039236][T15576] RDX: 000000000000000f RSI: 00007f66021dd0a0 RDI: 0000000000000005 [ 2155.039251][T15576] RBP: 00007f66021dd090 R08: 0000000000000000 R09: 0000000000000000 [ 2155.039267][T15576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2155.039282][T15576] R13: 00007f66015e6038 R14: 00007f66015e5fa0 R15: 00007ffd9a0e4e88 [ 2155.039302][T15576] [ 2155.368471][T15592] 9pnet: Could not find request transport: 0xffffffffffffffff [ 2155.987094][T15604] rust_binder: 76: no such ref 0 [ 2158.074616][T15703] FAULT_INJECTION: forcing a failure. [ 2158.074616][T15703] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2158.113676][T15703] CPU: 1 UID: 0 PID: 15703 Comm: syz.3.51579 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2158.113705][T15703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2158.113716][T15703] Call Trace: [ 2158.113721][T15703] [ 2158.113728][T15703] __dump_stack+0x21/0x30 [ 2158.113754][T15703] dump_stack_lvl+0x10c/0x190 [ 2158.113776][T15703] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2158.113803][T15703] ? kstrtoull+0x13b/0x1e0 [ 2158.113818][T15703] dump_stack+0x19/0x20 [ 2158.113838][T15703] should_fail_ex+0x3d9/0x530 [ 2158.113855][T15703] should_fail+0xf/0x20 [ 2158.113870][T15703] should_fail_usercopy+0x1e/0x30 [ 2158.113939][T15703] _copy_from_user+0x22/0xb0 [ 2158.113959][T15703] ___sys_sendmsg+0x159/0x2a0 [ 2158.113984][T15703] ? __sys_sendmsg+0x280/0x280 [ 2158.114007][T15703] ? proc_fail_nth_write+0x17e/0x210 [ 2158.114029][T15703] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2158.114056][T15703] __x64_sys_sendmsg+0x1eb/0x2c0 [ 2158.114080][T15703] ? fput+0x1a5/0x240 [ 2158.114099][T15703] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2158.114123][T15703] ? ksys_write+0x1ef/0x250 [ 2158.114139][T15703] ? __kasan_check_read+0x15/0x20 [ 2158.114164][T15703] x64_sys_call+0x2a4c/0x2ee0 [ 2158.114188][T15703] do_syscall_64+0x58/0xf0 [ 2158.114209][T15703] ? clear_bhb_loop+0x50/0xa0 [ 2158.114227][T15703] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2158.114244][T15703] RIP: 0033:0x7f1792f8f6c9 [ 2158.114258][T15703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2158.114272][T15703] RSP: 002b:00007f1793d5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2158.114291][T15703] RAX: ffffffffffffffda RBX: 00007f17931e5fa0 RCX: 00007f1792f8f6c9 [ 2158.114304][T15703] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 2158.114314][T15703] RBP: 00007f1793d5c090 R08: 0000000000000000 R09: 0000000000000000 [ 2158.114325][T15703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2158.114335][T15703] R13: 00007f17931e6038 R14: 00007f17931e5fa0 R15: 00007fff67e210b8 [ 2158.114350][T15703] [ 2158.557504][T15707] usb usb5: usbfs: process 15707 (syz.3.51581) did not claim interface 0 before use [ 2158.683865][T15721] rust_binder: 500: no such ref 0 [ 2160.045585][T15785] FAULT_INJECTION: forcing a failure. [ 2160.045585][T15785] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2160.092649][T15785] CPU: 1 UID: 0 PID: 15785 Comm: syz.3.51621 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2160.092677][T15785] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2160.092689][T15785] Call Trace: [ 2160.092695][T15785] [ 2160.092701][T15785] __dump_stack+0x21/0x30 [ 2160.092728][T15785] dump_stack_lvl+0x10c/0x190 [ 2160.092749][T15785] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2160.092772][T15785] ? check_stack_object+0x12c/0x140 [ 2160.092789][T15785] dump_stack+0x19/0x20 [ 2160.092810][T15785] should_fail_ex+0x3d9/0x530 [ 2160.092827][T15785] should_fail+0xf/0x20 [ 2160.092842][T15785] should_fail_usercopy+0x1e/0x30 [ 2160.092860][T15785] _copy_to_user+0x24/0xa0 [ 2160.092881][T15785] simple_read_from_buffer+0xed/0x160 [ 2160.092903][T15785] proc_fail_nth_read+0x19e/0x210 [ 2160.092925][T15785] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2160.092947][T15785] ? bpf_lsm_file_permission+0xd/0x20 [ 2160.092969][T15785] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2160.092991][T15785] vfs_read+0x27d/0xc70 [ 2160.093005][T15785] ? mntput+0xd0/0xd0 [ 2160.093030][T15785] ? __kasan_check_write+0x18/0x20 [ 2160.093055][T15785] ? __cfi_vfs_read+0x10/0x10 [ 2160.093069][T15785] ? __kasan_check_write+0x18/0x20 [ 2160.093093][T15785] ? mutex_lock+0x92/0x1c0 [ 2160.093109][T15785] ? __cfi_mutex_lock+0x10/0x10 [ 2160.093123][T15785] ? __fget_files+0x2c5/0x340 [ 2160.093141][T15785] ksys_read+0x141/0x250 [ 2160.093156][T15785] ? __cfi_ksys_read+0x10/0x10 [ 2160.093172][T15785] ? __se_sys_chdir+0x1ba/0x290 [ 2160.093195][T15785] ? __x64_sys_chdir+0x60/0x60 [ 2160.093213][T15785] ? __kasan_check_read+0x15/0x20 [ 2160.093237][T15785] __x64_sys_read+0x7f/0x90 [ 2160.093251][T15785] x64_sys_call+0x2638/0x2ee0 [ 2160.093275][T15785] do_syscall_64+0x58/0xf0 [ 2160.093295][T15785] ? clear_bhb_loop+0x50/0xa0 [ 2160.093314][T15785] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2160.093331][T15785] RIP: 0033:0x7f1792f8e0dc [ 2160.093345][T15785] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2160.093359][T15785] RSP: 002b:00007f1793d5c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2160.093377][T15785] RAX: ffffffffffffffda RBX: 00007f17931e5fa0 RCX: 00007f1792f8e0dc [ 2160.093389][T15785] RDX: 000000000000000f RSI: 00007f1793d5c0a0 RDI: 0000000000000005 [ 2160.093399][T15785] RBP: 00007f1793d5c090 R08: 0000000000000000 R09: 0000000000000000 [ 2160.093410][T15785] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2160.093420][T15785] R13: 00007f17931e6038 R14: 00007f17931e5fa0 R15: 00007fff67e210b8 [ 2160.093433][T15785] [ 2160.434141][T15789] overlayfs: failed to resolve './file0': -2 [ 2160.481128][T15798] netlink: 57 bytes leftover after parsing attributes in process `syz.3.51626'. [ 2160.642598][T15791] netlink: 'syz.1.51624': attribute type 4 has an invalid length. [ 2160.691520][T15792] loop7: detected capacity change from 0 to 16383 [ 2160.865502][T15812] rust_binder: 439: no such ref 3 [ 2160.872913][T15814] FAULT_INJECTION: forcing a failure. [ 2160.872913][T15814] name failslab, interval 1, probability 0, space 0, times 0 [ 2160.892293][T15812] rust_binder: Write failure EINVAL in pid:439 [ 2160.914321][T15814] CPU: 1 UID: 0 PID: 15814 Comm: syz.0.51633 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2160.914351][T15814] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2160.914363][T15814] Call Trace: [ 2160.914369][T15814] [ 2160.914375][T15814] __dump_stack+0x21/0x30 [ 2160.914403][T15814] dump_stack_lvl+0x10c/0x190 [ 2160.914425][T15814] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2160.914449][T15814] dump_stack+0x19/0x20 [ 2160.914470][T15814] should_fail_ex+0x3d9/0x530 [ 2160.914487][T15814] should_failslab+0xac/0x100 [ 2160.914507][T15814] kmem_cache_alloc_noprof+0x42/0x430 [ 2160.914522][T15814] ? arch_stack_walk+0x10b/0x170 [ 2160.914537][T15814] ? alloc_empty_file+0xbf/0x280 [ 2160.914557][T15814] alloc_empty_file+0xbf/0x280 [ 2160.914577][T15814] path_openat+0xf8/0x34b0 [ 2160.914596][T15814] ? stack_depot_save_flags+0x38/0x800 [ 2160.914615][T15814] ? kasan_save_track+0x4f/0x80 [ 2160.914633][T15814] ? kasan_save_track+0x3e/0x80 [ 2160.914649][T15814] ? kasan_save_alloc_info+0x40/0x50 [ 2160.914672][T15814] ? __kasan_slab_alloc+0x73/0x90 [ 2160.914689][T15814] ? kmem_cache_alloc_noprof+0x1cb/0x430 [ 2160.914704][T15814] ? getname+0x1b/0x30 [ 2160.914719][T15814] ? do_sys_openat2+0xcb/0x1c0 [ 2160.914747][T15814] ? __x64_sys_openat+0x13a/0x170 [ 2160.914768][T15814] ? x64_sys_call+0xe69/0x2ee0 [ 2160.914791][T15814] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2160.914812][T15814] ? do_filp_open+0x3e0/0x3e0 [ 2160.914833][T15814] do_filp_open+0x1c6/0x3e0 [ 2160.914852][T15814] ? __cfi_do_filp_open+0x10/0x10 [ 2160.914875][T15814] ? alloc_fd+0x4e7/0x5a0 [ 2160.914892][T15814] do_sys_openat2+0x12c/0x1c0 [ 2160.914913][T15814] ? fput+0x1a5/0x240 [ 2160.914931][T15814] ? do_sys_open+0x100/0x100 [ 2160.914951][T15814] ? ksys_write+0x1ef/0x250 [ 2160.914966][T15814] ? __cfi_ksys_write+0x10/0x10 [ 2160.914982][T15814] __x64_sys_openat+0x13a/0x170 [ 2160.915004][T15814] x64_sys_call+0xe69/0x2ee0 [ 2160.915027][T15814] do_syscall_64+0x58/0xf0 [ 2160.915049][T15814] ? clear_bhb_loop+0x50/0xa0 [ 2160.915066][T15814] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2160.915083][T15814] RIP: 0033:0x7f579538f6c9 [ 2160.915097][T15814] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2160.915111][T15814] RSP: 002b:00007f57962ed038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 2160.915129][T15814] RAX: ffffffffffffffda RBX: 00007f57955e5fa0 RCX: 00007f579538f6c9 [ 2160.915142][T15814] RDX: 0000000000000000 RSI: 0000200000000000 RDI: ffffffffffffff9c [ 2160.915153][T15814] RBP: 00007f57962ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2160.915164][T15814] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2160.915174][T15814] R13: 00007f57955e6038 R14: 00007f57955e5fa0 R15: 00007ffc44da6d88 [ 2160.915188][T15814] [ 2161.483589][T15843] FAULT_INJECTION: forcing a failure. [ 2161.483589][T15843] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2161.497153][T15843] CPU: 1 UID: 0 PID: 15843 Comm: syz.0.51647 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2161.497190][T15843] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2161.497205][T15843] Call Trace: [ 2161.497214][T15843] [ 2161.497223][T15843] __dump_stack+0x21/0x30 [ 2161.497258][T15843] dump_stack_lvl+0x10c/0x190 [ 2161.497288][T15843] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2161.497319][T15843] ? check_stack_object+0x12c/0x140 [ 2161.497342][T15843] dump_stack+0x19/0x20 [ 2161.497371][T15843] should_fail_ex+0x3d9/0x530 [ 2161.497394][T15843] should_fail+0xf/0x20 [ 2161.497414][T15843] should_fail_usercopy+0x1e/0x30 [ 2161.497439][T15843] _copy_to_user+0x24/0xa0 [ 2161.497467][T15843] simple_read_from_buffer+0xed/0x160 [ 2161.497496][T15843] proc_fail_nth_read+0x19e/0x210 [ 2161.497526][T15843] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2161.497556][T15843] ? bpf_lsm_file_permission+0xd/0x20 [ 2161.497587][T15843] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 2161.497617][T15843] vfs_read+0x27d/0xc70 [ 2161.497637][T15843] ? __cfi_do_mmap+0x10/0x10 [ 2161.497667][T15843] ? __cfi_down_write_killable+0x10/0x10 [ 2161.497693][T15843] ? __cfi_vfs_read+0x10/0x10 [ 2161.497712][T15843] ? __kasan_check_write+0x18/0x20 [ 2161.497744][T15843] ? mutex_lock+0x92/0x1c0 [ 2161.497765][T15843] ? __cfi_mutex_lock+0x10/0x10 [ 2161.497785][T15843] ? __fget_files+0x2c5/0x340 [ 2161.497811][T15843] ksys_read+0x141/0x250 [ 2161.497830][T15843] ? __cfi_ksys_read+0x10/0x10 [ 2161.497852][T15843] ? __kasan_check_read+0x15/0x20 [ 2161.497886][T15843] __x64_sys_read+0x7f/0x90 [ 2161.497907][T15843] x64_sys_call+0x2638/0x2ee0 [ 2161.497941][T15843] do_syscall_64+0x58/0xf0 [ 2161.497971][T15843] ? clear_bhb_loop+0x50/0xa0 [ 2161.497997][T15843] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2161.498021][T15843] RIP: 0033:0x7f579538e0dc [ 2161.498041][T15843] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 2161.498063][T15843] RSP: 002b:00007f57962ed030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 2161.498088][T15843] RAX: ffffffffffffffda RBX: 00007f57955e5fa0 RCX: 00007f579538e0dc [ 2161.498107][T15843] RDX: 000000000000000f RSI: 00007f57962ed0a0 RDI: 0000000000000006 [ 2161.498123][T15843] RBP: 00007f57962ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2161.498139][T15843] R10: 0000000000000011 R11: 0000000000000246 R12: 0000000000000001 [ 2161.498155][T15843] R13: 00007f57955e6038 R14: 00007f57955e5fa0 R15: 00007ffc44da6d88 [ 2161.498175][T15843] [ 2162.052782][T15881] FAULT_INJECTION: forcing a failure. [ 2162.052782][T15881] name failslab, interval 1, probability 0, space 0, times 0 [ 2162.065708][T15881] CPU: 1 UID: 0 PID: 15881 Comm: syz.1.51667 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2162.065742][T15881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2162.065756][T15881] Call Trace: [ 2162.065763][T15881] [ 2162.065771][T15881] __dump_stack+0x21/0x30 [ 2162.065804][T15881] dump_stack_lvl+0x10c/0x190 [ 2162.065831][T15881] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2162.065859][T15881] dump_stack+0x19/0x20 [ 2162.065884][T15881] should_fail_ex+0x3d9/0x530 [ 2162.065915][T15881] should_failslab+0xac/0x100 [ 2162.065941][T15881] __kmalloc_cache_noprof+0x41/0x490 [ 2162.065962][T15881] ? xskq_create+0x68/0x2a0 [ 2162.065994][T15881] xskq_create+0x68/0x2a0 [ 2162.066025][T15881] xsk_init_queue+0xb6/0x120 [ 2162.066058][T15881] xsk_setsockopt+0x43f/0x6f0 [ 2162.066090][T15881] ? __cfi_xsk_setsockopt+0x10/0x10 [ 2162.066122][T15881] ? __cfi_vfs_write+0x10/0x10 [ 2162.066143][T15881] ? __kasan_check_write+0x18/0x20 [ 2162.066177][T15881] ? bpf_lsm_socket_setsockopt+0xd/0x20 [ 2162.066206][T15881] ? security_socket_setsockopt+0x33/0xd0 [ 2162.066229][T15881] ? __cfi_xsk_setsockopt+0x10/0x10 [ 2162.066261][T15881] do_sock_setsockopt+0x26d/0x400 [ 2162.066294][T15881] ? __cfi_do_sock_setsockopt+0x10/0x10 [ 2162.066329][T15881] __x64_sys_setsockopt+0x1b8/0x250 [ 2162.066363][T15881] x64_sys_call+0x2adc/0x2ee0 [ 2162.066395][T15881] do_syscall_64+0x58/0xf0 [ 2162.066424][T15881] ? clear_bhb_loop+0x50/0xa0 [ 2162.066449][T15881] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2162.066474][T15881] RIP: 0033:0x7fea9458f6c9 [ 2162.066494][T15881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2162.066515][T15881] RSP: 002b:00007fea9548b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 2162.066540][T15881] RAX: ffffffffffffffda RBX: 00007fea947e5fa0 RCX: 00007fea9458f6c9 [ 2162.066559][T15881] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000005 [ 2162.066574][T15881] RBP: 00007fea9548b090 R08: 0000000000000004 R09: 0000000000000000 [ 2162.066589][T15881] R10: 0000200000000180 R11: 0000000000000246 R12: 0000000000000001 [ 2162.066605][T15881] R13: 00007fea947e6038 R14: 00007fea947e5fa0 R15: 00007ffc9b91a468 [ 2162.066625][T15881] [ 2162.115801][ T36] audit: type=1400 audit(1779782783.640:1282): avc: denied { map } for pid=15888 comm="syz.4.51670" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 2162.130683][T15889] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 2162.136106][ T36] audit: type=1400 audit(1779782783.690:1283): avc: denied { execute } for pid=15888 comm="syz.4.51670" path="/dev/ptmx" dev="devtmpfs" ino=24 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 2162.387081][T15904] netlink: 'syz.4.51677': attribute type 4 has an invalid length. [ 2162.441126][T15912] FAULT_INJECTION: forcing a failure. [ 2162.441126][T15912] name failslab, interval 1, probability 0, space 0, times 0 [ 2162.457353][T15912] CPU: 1 UID: 0 PID: 15912 Comm: syz.0.51680 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2162.457390][T15912] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2162.457405][T15912] Call Trace: [ 2162.457414][T15912] [ 2162.457424][T15912] __dump_stack+0x21/0x30 [ 2162.457460][T15912] dump_stack_lvl+0x10c/0x190 [ 2162.457492][T15912] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2162.457525][T15912] dump_stack+0x19/0x20 [ 2162.457554][T15912] should_fail_ex+0x3d9/0x530 [ 2162.457578][T15912] should_failslab+0xac/0x100 [ 2162.457615][T15912] __kmalloc_cache_noprof+0x41/0x490 [ 2162.457637][T15912] ? proc_self_get_link+0x11a/0x290 [ 2162.457667][T15912] proc_self_get_link+0x11a/0x290 [ 2162.457695][T15912] ? security_inode_follow_link+0x74/0x140 [ 2162.457718][T15912] ? __cfi_proc_self_get_link+0x10/0x10 [ 2162.457747][T15912] pick_link+0x6d5/0xe80 [ 2162.457769][T15912] step_into+0xc58/0xf50 [ 2162.457788][T15912] ? __kasan_check_read+0x15/0x20 [ 2162.457821][T15912] ? read_word_at_a_time+0x1a/0x40 [ 2162.457846][T15912] ? set_root+0x420/0x420 [ 2162.457866][T15912] ? lookup_fast+0x167/0x530 [ 2162.457886][T15912] ? inode_permission+0xf3/0x4c0 [ 2162.457911][T15912] link_path_walk+0x753/0xec0 [ 2162.457947][T15912] path_openat+0x281/0x34b0 [ 2162.457976][T15912] ? kasan_save_track+0x3e/0x80 [ 2162.457999][T15912] ? kasan_save_alloc_info+0x40/0x50 [ 2162.458031][T15912] ? getname+0x1b/0x30 [ 2162.458051][T15912] ? x64_sys_call+0xe69/0x2ee0 [ 2162.458083][T15912] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2162.458111][T15912] ? do_filp_open+0x3e0/0x3e0 [ 2162.458140][T15912] do_filp_open+0x1c6/0x3e0 [ 2162.458167][T15912] ? __cfi_do_filp_open+0x10/0x10 [ 2162.458199][T15912] ? alloc_fd+0x4e7/0x5a0 [ 2162.458228][T15912] do_sys_openat2+0x12c/0x1c0 [ 2162.458262][T15912] ? fput+0x1a5/0x240 [ 2162.458289][T15912] ? do_sys_open+0x100/0x100 [ 2162.458317][T15912] ? ksys_write+0x1ef/0x250 [ 2162.458338][T15912] ? __cfi_ksys_write+0x10/0x10 [ 2162.458359][T15912] __x64_sys_openat+0x13a/0x170 [ 2162.458389][T15912] x64_sys_call+0xe69/0x2ee0 [ 2162.458422][T15912] do_syscall_64+0x58/0xf0 [ 2162.458451][T15912] ? clear_bhb_loop+0x50/0xa0 [ 2162.458476][T15912] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2162.458500][T15912] RIP: 0033:0x7f579538df10 [ 2162.458519][T15912] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 2162.458538][T15912] RSP: 002b:00007f57962ecf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 2162.458563][T15912] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f579538df10 [ 2162.458580][T15912] RDX: 0000000000000002 RSI: 00007f57962ecfa0 RDI: 00000000ffffff9c [ 2162.458602][T15912] RBP: 00007f57962ecfa0 R08: 0000000000000000 R09: 0000000000000000 [ 2162.458618][T15912] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 2162.458633][T15912] R13: 00007f57955e6038 R14: 00007f57955e5fa0 R15: 00007ffc44da6d88 [ 2162.458653][T15912] [ 2163.050666][ T36] audit: type=1400 audit(1779782784.610:1284): avc: denied { connect } for pid=15935 comm="syz.3.51691" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 2163.390653][ T36] audit: type=1400 audit(1779782784.950:1285): avc: denied { create } for pid=15990 comm="syz.4.51716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 2164.601717][T16051] FAULT_INJECTION: forcing a failure. [ 2164.601717][T16051] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2164.640446][T16051] CPU: 1 UID: 0 PID: 16051 Comm: syz.0.51746 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2164.640490][T16051] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2164.640506][T16051] Call Trace: [ 2164.640514][T16051] [ 2164.640524][T16051] __dump_stack+0x21/0x30 [ 2164.640561][T16051] dump_stack_lvl+0x10c/0x190 [ 2164.640592][T16051] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2164.640624][T16051] ? kstrtoull+0x13b/0x1e0 [ 2164.640646][T16051] dump_stack+0x19/0x20 [ 2164.640675][T16051] should_fail_ex+0x3d9/0x530 [ 2164.640699][T16051] should_fail+0xf/0x20 [ 2164.640720][T16051] should_fail_usercopy+0x1e/0x30 [ 2164.640745][T16051] _copy_from_user+0x22/0xb0 [ 2164.640774][T16051] ___sys_sendmsg+0x159/0x2a0 [ 2164.640809][T16051] ? __sys_sendmsg+0x280/0x280 [ 2164.640844][T16051] ? proc_fail_nth_write+0x17e/0x210 [ 2164.640874][T16051] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2164.640913][T16051] __x64_sys_sendmsg+0x1eb/0x2c0 [ 2164.640947][T16051] ? fput+0x1a5/0x240 [ 2164.640975][T16051] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2164.641008][T16051] ? ksys_write+0x1ef/0x250 [ 2164.641031][T16051] ? __kasan_check_read+0x15/0x20 [ 2164.641067][T16051] x64_sys_call+0x2a4c/0x2ee0 [ 2164.641101][T16051] do_syscall_64+0x58/0xf0 [ 2164.641131][T16051] ? clear_bhb_loop+0x50/0xa0 [ 2164.641157][T16051] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2164.641182][T16051] RIP: 0033:0x7f579538f6c9 [ 2164.641201][T16051] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2164.641223][T16051] RSP: 002b:00007f57962ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2164.641249][T16051] RAX: ffffffffffffffda RBX: 00007f57955e5fa0 RCX: 00007f579538f6c9 [ 2164.641268][T16051] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 2164.641284][T16051] RBP: 00007f57962ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2164.641299][T16051] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2164.641315][T16051] R13: 00007f57955e6038 R14: 00007f57955e5fa0 R15: 00007ffc44da6d88 [ 2164.641335][T16051] [ 2165.219976][T16078] futex_wake_op: syz.1.51758 tries to shift op by 32; fix this program [ 2165.440987][T16096] usb usb5: usbfs: process 16096 (syz.1.51767) did not claim interface 0 before use [ 2166.134334][T16132] 9pnet_fd: Insufficient options for proto=fd [ 2166.591401][T16136] FAULT_INJECTION: forcing a failure. [ 2166.591401][T16136] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2166.629419][T16136] CPU: 1 UID: 0 PID: 16136 Comm: syz.0.51783 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2166.629447][T16136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2166.629459][T16136] Call Trace: [ 2166.629466][T16136] [ 2166.629474][T16136] __dump_stack+0x21/0x30 [ 2166.629515][T16136] dump_stack_lvl+0x10c/0x190 [ 2166.629546][T16136] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2166.629576][T16136] ? kstrtoull+0x13b/0x1e0 [ 2166.629598][T16136] dump_stack+0x19/0x20 [ 2166.629624][T16136] should_fail_ex+0x3d9/0x530 [ 2166.629640][T16136] should_fail+0xf/0x20 [ 2166.629655][T16136] should_fail_usercopy+0x1e/0x30 [ 2166.629673][T16136] _copy_from_user+0x22/0xb0 [ 2166.629693][T16136] ___sys_sendmsg+0x159/0x2a0 [ 2166.629718][T16136] ? __sys_sendmsg+0x280/0x280 [ 2166.629742][T16136] ? proc_fail_nth_write+0x17e/0x210 [ 2166.629764][T16136] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2166.629791][T16136] __x64_sys_sendmsg+0x1eb/0x2c0 [ 2166.629815][T16136] ? fput+0x1a5/0x240 [ 2166.629835][T16136] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2166.629859][T16136] ? ksys_write+0x1ef/0x250 [ 2166.629875][T16136] ? __kasan_check_read+0x15/0x20 [ 2166.629901][T16136] x64_sys_call+0x2a4c/0x2ee0 [ 2166.629925][T16136] do_syscall_64+0x58/0xf0 [ 2166.629946][T16136] ? clear_bhb_loop+0x50/0xa0 [ 2166.629964][T16136] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2166.629981][T16136] RIP: 0033:0x7f579538f6c9 [ 2166.629995][T16136] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2166.630010][T16136] RSP: 002b:00007f57962ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2166.630028][T16136] RAX: ffffffffffffffda RBX: 00007f57955e5fa0 RCX: 00007f579538f6c9 [ 2166.630040][T16136] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 2166.630051][T16136] RBP: 00007f57962ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2166.630062][T16136] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2166.630072][T16136] R13: 00007f57955e6038 R14: 00007f57955e5fa0 R15: 00007ffc44da6d88 [ 2166.630087][T16136] [ 2167.125071][T16149] FAULT_INJECTION: forcing a failure. [ 2167.125071][T16149] name failslab, interval 1, probability 0, space 0, times 0 [ 2167.149147][T16149] CPU: 1 UID: 0 PID: 16149 Comm: syz.0.51789 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2167.149175][T16149] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2167.149186][T16149] Call Trace: [ 2167.149191][T16149] [ 2167.149198][T16149] __dump_stack+0x21/0x30 [ 2167.149224][T16149] dump_stack_lvl+0x10c/0x190 [ 2167.149253][T16149] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2167.149276][T16149] ? kasan_save_track+0x4f/0x80 [ 2167.149293][T16149] ? kasan_save_track+0x3e/0x80 [ 2167.149309][T16149] ? kasan_save_alloc_info+0x40/0x50 [ 2167.149332][T16149] ? kmem_cache_alloc_noprof+0x1cb/0x430 [ 2167.149348][T16149] dump_stack+0x19/0x20 [ 2167.149369][T16149] should_fail_ex+0x3d9/0x530 [ 2167.149386][T16149] should_failslab+0xac/0x100 [ 2167.149404][T16149] kmem_cache_alloc_noprof+0x42/0x430 [ 2167.149419][T16149] ? mas_alloc_nodes+0x254/0x9e0 [ 2167.149438][T16149] mas_alloc_nodes+0x254/0x9e0 [ 2167.149456][T16149] mas_preallocate+0x762/0xc60 [ 2167.149473][T16149] ? __cfi_mas_preallocate+0x10/0x10 [ 2167.149490][T16149] ? __kasan_check_read+0x15/0x20 [ 2167.149515][T16149] ? anon_vma_name+0x51/0xa0 [ 2167.149538][T16149] ? vm_area_dup+0x41c/0x570 [ 2167.149555][T16149] __split_vma+0x412/0xa80 [ 2167.149571][T16149] ? llist_add_batch+0x109/0x1e0 [ 2167.149596][T16149] ? vms_gather_munmap_vmas+0xdd0/0xdd0 [ 2167.149615][T16149] vma_modify+0x6e1/0x1670 [ 2167.149633][T16149] vma_modify_flags_name+0x186/0x1c0 [ 2167.149653][T16149] madvise_update_vma+0x21a/0x7c0 [ 2167.149677][T16149] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 2167.149700][T16149] ? __ia32_sys_process_madvise+0xf0/0xf0 [ 2167.149726][T16149] ? khugepaged_enter_vma+0x3ff/0x430 [ 2167.149747][T16149] madvise_vma_behavior+0xee3/0x2d40 [ 2167.149773][T16149] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 2167.149797][T16149] ? is_bpf_text_address+0x17b/0x1a0 [ 2167.149816][T16149] ? kernel_text_address+0xa9/0xe0 [ 2167.149837][T16149] ? __kernel_text_address+0x11/0x40 [ 2167.149857][T16149] ? unwind_get_return_address+0x51/0x90 [ 2167.149877][T16149] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 2167.149901][T16149] ? arch_stack_walk+0x10b/0x170 [ 2167.149917][T16149] ? _parse_integer_limit+0x195/0x1e0 [ 2167.149943][T16149] ? mt_find+0x87b/0xb50 [ 2167.149962][T16149] ? __cfi_mt_find+0x10/0x10 [ 2167.149980][T16149] ? mas_prev+0x5f/0xa0 [ 2167.149995][T16149] ? find_vma_prev+0xfd/0x170 [ 2167.150010][T16149] ? __cfi_find_vma_prev+0x10/0x10 [ 2167.150025][T16149] ? find_vma+0xcd/0x110 [ 2167.150040][T16149] ? __cfi_find_vma+0x10/0x10 [ 2167.150055][T16149] ? bpf_lsm_file_permission+0xd/0x20 [ 2167.150079][T16149] madvise_walk_vmas+0x3ec/0x700 [ 2167.150102][T16149] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 2167.150126][T16149] ? down_write_killable+0xe9/0x2d0 [ 2167.150143][T16149] ? madvise_set_anon_name+0x610/0x610 [ 2167.150166][T16149] ? __asan_memset+0x39/0x50 [ 2167.150180][T16149] ? blk_start_plug+0x72/0x1c0 [ 2167.150197][T16149] do_madvise+0x5c0/0xb70 [ 2167.150220][T16149] ? __cfi_do_madvise+0x10/0x10 [ 2167.150243][T16149] ? ksys_write+0x1ef/0x250 [ 2167.150263][T16149] ? __cfi_ksys_write+0x10/0x10 [ 2167.150280][T16149] __x64_sys_madvise+0xae/0xc0 [ 2167.150303][T16149] x64_sys_call+0x20c3/0x2ee0 [ 2167.150327][T16149] do_syscall_64+0x58/0xf0 [ 2167.150348][T16149] ? clear_bhb_loop+0x50/0xa0 [ 2167.150366][T16149] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2167.150383][T16149] RIP: 0033:0x7f579538f6c9 [ 2167.150397][T16149] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2167.150412][T16149] RSP: 002b:00007f57962ed038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 2167.150430][T16149] RAX: ffffffffffffffda RBX: 00007f57955e5fa0 RCX: 00007f579538f6c9 [ 2167.150443][T16149] RDX: 000000000000000e RSI: 0000000000800000 RDI: 0000200000000000 [ 2167.150454][T16149] RBP: 00007f57962ed090 R08: 0000000000000000 R09: 0000000000000000 [ 2167.150465][T16149] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2167.150476][T16149] R13: 00007f57955e6038 R14: 00007f57955e5fa0 R15: 00007ffc44da6d88 [ 2167.150490][T16149] [ 2168.211103][T16172] netlink: 57 bytes leftover after parsing attributes in process `syz.1.51799'. [ 2168.450679][ T36] audit: type=1400 audit(1779782790.023:1286): avc: denied { nlmsg_write } for pid=16185 comm="syz.1.51806" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 2168.519992][T16192] netlink: 57 bytes leftover after parsing attributes in process `syz.0.51808'. [ 2168.543915][T16194] netlink: 'syz.1.51809': attribute type 7 has an invalid length. [ 2168.802175][T16228] netlink: 'syz.4.51824': attribute type 7 has an invalid length. [ 2173.407321][T16516] netlink: 'syz.4.51957': attribute type 3 has an invalid length. [ 2174.211137][T16549] netlink: 'syz.0.51973': attribute type 12 has an invalid length. [ 2174.452858][T16567] netlink: 57 bytes leftover after parsing attributes in process `syz.0.51982'. [ 2174.703181][T16595] netlink: 57 bytes leftover after parsing attributes in process `syz.3.51991'. [ 2175.022575][T16627] FAULT_INJECTION: forcing a failure. [ 2175.022575][T16627] name failslab, interval 1, probability 0, space 0, times 0 [ 2175.036045][T16627] CPU: 0 UID: 0 PID: 16627 Comm: syz.4.52008 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2175.036080][T16627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2175.036095][T16627] Call Trace: [ 2175.036104][T16627] [ 2175.036113][T16627] __dump_stack+0x21/0x30 [ 2175.036149][T16627] dump_stack_lvl+0x10c/0x190 [ 2175.036181][T16627] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2175.036212][T16627] ? kasan_save_track+0x4f/0x80 [ 2175.036235][T16627] ? kasan_save_alloc_info+0x40/0x50 [ 2175.036268][T16627] dump_stack+0x19/0x20 [ 2175.036298][T16627] should_fail_ex+0x3d9/0x530 [ 2175.036320][T16627] should_failslab+0xac/0x100 [ 2175.036344][T16627] kmem_cache_alloc_noprof+0x42/0x430 [ 2175.036365][T16627] ? mas_alloc_nodes+0x254/0x9e0 [ 2175.036390][T16627] mas_alloc_nodes+0x254/0x9e0 [ 2175.036415][T16627] mas_preallocate+0x762/0xc60 [ 2175.036439][T16627] ? __cfi_mas_preallocate+0x10/0x10 [ 2175.036464][T16627] ? __asan_memset+0x39/0x50 [ 2175.036482][T16627] ? vm_area_alloc+0x5f/0x1a0 [ 2175.036506][T16627] mmap_region+0x122a/0x1bc0 [ 2175.036529][T16627] ? __cfi_mmap_region+0x10/0x10 [ 2175.036554][T16627] ? __kasan_check_read+0x15/0x20 [ 2175.036588][T16627] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 2175.036616][T16627] ? __get_unmapped_area+0x407/0x470 [ 2175.036637][T16627] ? file_mmap_ok+0x147/0x1a0 [ 2175.036659][T16627] do_mmap+0xb6d/0x13c0 [ 2175.036680][T16627] ? __cfi_do_mmap+0x10/0x10 [ 2175.036700][T16627] ? down_write_killable+0xe9/0x2d0 [ 2175.036725][T16627] ? __cfi_down_write_killable+0x10/0x10 [ 2175.036763][T16627] vm_mmap_pgoff+0x38f/0x4e0 [ 2175.036784][T16627] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 2175.036804][T16627] ? __fget_files+0x2c5/0x340 [ 2175.036829][T16627] ksys_mmap_pgoff+0x166/0x1e0 [ 2175.036850][T16627] __x64_sys_mmap+0x121/0x140 [ 2175.036884][T16627] x64_sys_call+0x13bf/0x2ee0 [ 2175.036919][T16627] do_syscall_64+0x58/0xf0 [ 2175.036948][T16627] ? clear_bhb_loop+0x50/0xa0 [ 2175.036973][T16627] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2175.036999][T16627] RIP: 0033:0x7f660138f6c9 [ 2175.037019][T16627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2175.037040][T16627] RSP: 002b:00007f66021dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2175.037064][T16627] RAX: ffffffffffffffda RBX: 00007f66015e5fa0 RCX: 00007f660138f6c9 [ 2175.037082][T16627] RDX: 0000000002000002 RSI: 0000000000002000 RDI: 0000200000ffb000 [ 2175.037098][T16627] RBP: 00007f66021dd090 R08: 0000000000000005 R09: 0000000008000000 [ 2175.037114][T16627] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2175.037129][T16627] R13: 00007f66015e6038 R14: 00007f66015e5fa0 R15: 00007ffd9a0e4e88 [ 2175.037150][T16627] [ 2175.042413][T16629] netlink: 72 bytes leftover after parsing attributes in process `syz.1.52009'. [ 2175.905516][ T36] audit: type=1400 audit(1779782797.430:1287): avc: denied { mounton } for pid=16628 comm="syz.1.52009" path="/307/file0" dev="tmpfs" ino=1887 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 2176.129175][T16668] netlink: 57 bytes leftover after parsing attributes in process `syz.1.52028'. [ 2176.668750][T16703] FAULT_INJECTION: forcing a failure. [ 2176.668750][T16703] name failslab, interval 1, probability 0, space 0, times 0 [ 2176.708076][T16703] CPU: 1 UID: 0 PID: 16703 Comm: syz.1.52044 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2176.708123][T16703] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2176.708141][T16703] Call Trace: [ 2176.708150][T16703] [ 2176.708160][T16703] __dump_stack+0x21/0x30 [ 2176.708201][T16703] dump_stack_lvl+0x10c/0x190 [ 2176.708233][T16703] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2176.708265][T16703] ? check_stack_object+0x82/0x140 [ 2176.708288][T16703] ? __virt_addr_valid+0x2a6/0x380 [ 2176.708315][T16703] dump_stack+0x19/0x20 [ 2176.708343][T16703] should_fail_ex+0x3d9/0x530 [ 2176.708367][T16703] should_failslab+0xac/0x100 [ 2176.708393][T16703] kmem_cache_alloc_noprof+0x42/0x430 [ 2176.708415][T16703] ? getname_flags+0xc6/0x710 [ 2176.708437][T16703] ? strncpy_from_user+0x14c/0x270 [ 2176.708462][T16703] getname_flags+0xc6/0x710 [ 2176.708487][T16703] __x64_sys_link+0x6e/0xa0 [ 2176.708519][T16703] x64_sys_call+0x1cf5/0x2ee0 [ 2176.708552][T16703] do_syscall_64+0x58/0xf0 [ 2176.708584][T16703] ? clear_bhb_loop+0x50/0xa0 [ 2176.708611][T16703] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2176.708635][T16703] RIP: 0033:0x7fea9458f6c9 [ 2176.708655][T16703] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2176.708676][T16703] RSP: 002b:00007fea9548b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000056 [ 2176.708702][T16703] RAX: ffffffffffffffda RBX: 00007fea947e5fa0 RCX: 00007fea9458f6c9 [ 2176.708720][T16703] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000940 [ 2176.708736][T16703] RBP: 00007fea9548b090 R08: 0000000000000000 R09: 0000000000000000 [ 2176.708752][T16703] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2176.708767][T16703] R13: 00007fea947e6038 R14: 00007fea947e5fa0 R15: 00007ffc9b91a468 [ 2176.708787][T16703] [ 2176.764048][T16715] netlink: 'syz.4.52050': attribute type 12 has an invalid length. [ 2176.942584][T16721] FAULT_INJECTION: forcing a failure. [ 2176.942584][T16721] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2176.956565][T16721] CPU: 0 UID: 0 PID: 16721 Comm: syz.4.52053 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2176.956603][T16721] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2176.956619][T16721] Call Trace: [ 2176.956628][T16721] [ 2176.956646][T16721] __dump_stack+0x21/0x30 [ 2176.956687][T16721] dump_stack_lvl+0x10c/0x190 [ 2176.956718][T16721] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2176.956751][T16721] ? kstrtoull+0x13b/0x1e0 [ 2176.956773][T16721] dump_stack+0x19/0x20 [ 2176.956803][T16721] should_fail_ex+0x3d9/0x530 [ 2176.956828][T16721] should_fail+0xf/0x20 [ 2176.956857][T16721] should_fail_usercopy+0x1e/0x30 [ 2176.956883][T16721] _copy_from_user+0x22/0xb0 [ 2176.956912][T16721] ___sys_sendmsg+0x159/0x2a0 [ 2176.956948][T16721] ? __sys_sendmsg+0x280/0x280 [ 2176.956982][T16721] ? proc_fail_nth_write+0x17e/0x210 [ 2176.957013][T16721] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2176.957051][T16721] __x64_sys_sendmsg+0x1eb/0x2c0 [ 2176.957085][T16721] ? fput+0x1a5/0x240 [ 2176.957113][T16721] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2176.957147][T16721] ? ksys_write+0x1ef/0x250 [ 2176.957171][T16721] ? __kasan_check_read+0x15/0x20 [ 2176.957207][T16721] x64_sys_call+0x2a4c/0x2ee0 [ 2176.957241][T16721] do_syscall_64+0x58/0xf0 [ 2176.957272][T16721] ? clear_bhb_loop+0x50/0xa0 [ 2176.957300][T16721] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2176.957325][T16721] RIP: 0033:0x7f660138f6c9 [ 2176.957346][T16721] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2176.957367][T16721] RSP: 002b:00007f66021dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2176.957393][T16721] RAX: ffffffffffffffda RBX: 00007f66015e5fa0 RCX: 00007f660138f6c9 [ 2176.957411][T16721] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 2176.957426][T16721] RBP: 00007f66021dd090 R08: 0000000000000000 R09: 0000000000000000 [ 2176.957441][T16721] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2176.957456][T16721] R13: 00007f66015e6038 R14: 00007f66015e5fa0 R15: 00007ffd9a0e4e88 [ 2176.957476][T16721] [ 2177.335920][T16731] netlink: 'syz.1.52059': attribute type 7 has an invalid length. [ 2177.582175][T16746] FAULT_INJECTION: forcing a failure. [ 2177.582175][T16746] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2177.619535][T16746] CPU: 1 UID: 0 PID: 16746 Comm: syz.1.52065 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2177.619578][T16746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2177.619590][T16746] Call Trace: [ 2177.619596][T16746] [ 2177.619604][T16746] __dump_stack+0x21/0x30 [ 2177.619634][T16746] dump_stack_lvl+0x10c/0x190 [ 2177.619672][T16746] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2177.619695][T16746] ? kstrtoull+0x13b/0x1e0 [ 2177.619710][T16746] dump_stack+0x19/0x20 [ 2177.619730][T16746] should_fail_ex+0x3d9/0x530 [ 2177.619747][T16746] should_fail+0xf/0x20 [ 2177.619762][T16746] should_fail_usercopy+0x1e/0x30 [ 2177.619779][T16746] _copy_from_user+0x22/0xb0 [ 2177.619800][T16746] ___sys_sendmsg+0x159/0x2a0 [ 2177.619826][T16746] ? __sys_sendmsg+0x280/0x280 [ 2177.619849][T16746] ? proc_fail_nth_write+0x17e/0x210 [ 2177.619871][T16746] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2177.619900][T16746] __x64_sys_sendmsg+0x1eb/0x2c0 [ 2177.619933][T16746] ? fput+0x1a5/0x240 [ 2177.619962][T16746] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2177.619996][T16746] ? ksys_write+0x1ef/0x250 [ 2177.620013][T16746] ? __kasan_check_read+0x15/0x20 [ 2177.620039][T16746] x64_sys_call+0x2a4c/0x2ee0 [ 2177.620063][T16746] do_syscall_64+0x58/0xf0 [ 2177.620084][T16746] ? clear_bhb_loop+0x50/0xa0 [ 2177.620103][T16746] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2177.620120][T16746] RIP: 0033:0x7fea9458f6c9 [ 2177.620135][T16746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2177.620150][T16746] RSP: 002b:00007fea9548b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2177.620168][T16746] RAX: ffffffffffffffda RBX: 00007fea947e5fa0 RCX: 00007fea9458f6c9 [ 2177.620181][T16746] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 2177.620192][T16746] RBP: 00007fea9548b090 R08: 0000000000000000 R09: 0000000000000000 [ 2177.620202][T16746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2177.620212][T16746] R13: 00007fea947e6038 R14: 00007fea947e5fa0 R15: 00007ffc9b91a468 [ 2177.620226][T16746] [ 2177.976626][T16760] netlink: 'syz.3.52072': attribute type 12 has an invalid length. [ 2178.099208][T16774] netlink: 57 bytes leftover after parsing attributes in process `syz.0.52080'. [ 2178.353471][T13445] bridge_slave_1: left allmulticast mode [ 2178.370523][T13445] bridge_slave_1: left promiscuous mode [ 2178.376303][T13445] bridge0: port 2(bridge_slave_1) entered disabled state [ 2178.405122][T13445] bridge_slave_0: left allmulticast mode [ 2178.420243][T13445] bridge_slave_0: left promiscuous mode [ 2178.431127][T13445] bridge0: port 1(bridge_slave_0) entered disabled state [ 2178.531740][T16813] netlink: 'syz.1.52098': attribute type 12 has an invalid length. [ 2178.571341][T13445] veth1_macvtap: left promiscuous mode [ 2178.582970][T13445] veth0_vlan: left promiscuous mode [ 2178.725440][T16787] bridge0: port 1(bridge_slave_0) entered blocking state [ 2178.732553][T16787] bridge0: port 1(bridge_slave_0) entered disabled state [ 2178.739722][T16787] bridge_slave_0: entered allmulticast mode [ 2178.746248][T16787] bridge_slave_0: entered promiscuous mode [ 2178.753275][T16787] bridge0: port 2(bridge_slave_1) entered blocking state [ 2178.760692][T16787] bridge0: port 2(bridge_slave_1) entered disabled state [ 2178.767875][T16787] bridge_slave_1: entered allmulticast mode [ 2178.774531][T16787] bridge_slave_1: entered promiscuous mode [ 2178.874314][ T332] usb 2-1: new high-speed USB device number 95 using dummy_hcd [ 2178.888580][T16787] bridge0: port 2(bridge_slave_1) entered blocking state [ 2178.896534][T16787] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2178.904139][T16787] bridge0: port 1(bridge_slave_0) entered blocking state [ 2178.911560][T16787] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2178.960401][T16852] netlink: 'syz.4.52112': attribute type 12 has an invalid length. [ 2178.972137][T13459] bridge0: port 1(bridge_slave_0) entered disabled state [ 2178.979871][T13459] bridge0: port 2(bridge_slave_1) entered disabled state [ 2179.013262][T13459] bridge0: port 1(bridge_slave_0) entered blocking state [ 2179.020493][T13459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 2179.029831][T13459] bridge0: port 2(bridge_slave_1) entered blocking state [ 2179.036950][T13459] bridge0: port 2(bridge_slave_1) entered forwarding state [ 2179.075157][T16787] veth0_vlan: entered promiscuous mode [ 2179.075812][ T332] usb 2-1: Using ep0 maxpacket: 8 [ 2179.091924][T16787] veth1_macvtap: entered promiscuous mode [ 2179.097606][ T332] usb 2-1: too many endpoints for config 0 interface 0 altsetting 250: 251, using maximum allowed: 30 [ 2179.111563][ T332] usb 2-1: config 0 interface 0 altsetting 250 has 1 endpoint descriptor, different from the interface descriptor's value: 251 [ 2179.138127][ T332] usb 2-1: config 0 interface 0 has no altsetting 0 [ 2179.145225][ T332] usb 2-1: New USB device found, idVendor=13ec, idProduct=0006, bcdDevice= 0.00 [ 2179.176597][ T332] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2179.196768][ T332] usb 2-1: config 0 descriptor?? [ 2179.771992][T16901] netlink: 20 bytes leftover after parsing attributes in process `syz.0.52136'. [ 2179.816839][ T332] usbhid 2-1:0.0: can't add hid device: -71 [ 2179.826754][ T332] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 2179.849924][ T332] usb 2-1: USB disconnect, device number 95 [ 2179.982076][T16937] fuse: Bad value for 'fd' [ 2180.260921][T16993] netlink: 'syz.0.52178': attribute type 12 has an invalid length. [ 2180.528852][T17057] netlink: 'syz.0.52208': attribute type 7 has an invalid length. [ 2180.584944][T17065] netlink: 'syz.0.52213': attribute type 12 has an invalid length. [ 2180.605991][T17070] FAULT_INJECTION: forcing a failure. [ 2180.605991][T17070] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2180.647221][T17070] CPU: 1 UID: 0 PID: 17070 Comm: syz.3.52214 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2180.647261][T17070] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2180.647303][T17070] Call Trace: [ 2180.647312][T17070] [ 2180.647323][T17070] __dump_stack+0x21/0x30 [ 2180.647363][T17070] dump_stack_lvl+0x10c/0x190 [ 2180.647394][T17070] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2180.647426][T17070] ? kstrtoull+0x13b/0x1e0 [ 2180.647449][T17070] dump_stack+0x19/0x20 [ 2180.647478][T17070] should_fail_ex+0x3d9/0x530 [ 2180.647503][T17070] should_fail+0xf/0x20 [ 2180.647524][T17070] should_fail_usercopy+0x1e/0x30 [ 2180.647550][T17070] _copy_from_user+0x22/0xb0 [ 2180.647585][T17070] ___sys_sendmsg+0x159/0x2a0 [ 2180.647621][T17070] ? __sys_sendmsg+0x280/0x280 [ 2180.647654][T17070] ? proc_fail_nth_write+0x17e/0x210 [ 2180.647686][T17070] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 2180.647723][T17070] __x64_sys_sendmsg+0x1eb/0x2c0 [ 2180.647756][T17070] ? fput+0x1a5/0x240 [ 2180.647784][T17070] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 2180.647817][T17070] ? ksys_write+0x1ef/0x250 [ 2180.647841][T17070] ? __kasan_check_read+0x15/0x20 [ 2180.647877][T17070] x64_sys_call+0x2a4c/0x2ee0 [ 2180.647910][T17070] do_syscall_64+0x58/0xf0 [ 2180.647941][T17070] ? clear_bhb_loop+0x50/0xa0 [ 2180.647968][T17070] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2180.647993][T17070] RIP: 0033:0x7fc43f98f6c9 [ 2180.648012][T17070] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2180.648032][T17070] RSP: 002b:00007fc43e3e3038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 2180.648058][T17070] RAX: ffffffffffffffda RBX: 00007fc43fbe5fa0 RCX: 00007fc43f98f6c9 [ 2180.648075][T17070] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 2180.648089][T17070] RBP: 00007fc43e3e3090 R08: 0000000000000000 R09: 0000000000000000 [ 2180.648104][T17070] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2180.648118][T17070] R13: 00007fc43fbe6038 R14: 00007fc43fbe5fa0 R15: 00007fff393d1e08 [ 2180.648137][T17070] [ 2180.883497][T17095] netlink: 'syz.4.52227': attribute type 12 has an invalid length. [ 2180.922341][T17102] netlink: 57 bytes leftover after parsing attributes in process `syz.1.52231'. [ 2180.942865][T17105] netlink: 'syz.4.52233': attribute type 7 has an invalid length. [ 2181.033644][T17127] netlink: 'syz.1.52244': attribute type 7 has an invalid length. [ 2181.122793][T17145] netlink: 'syz.4.52253': attribute type 7 has an invalid length. [ 2181.178933][T17153] FAULT_INJECTION: forcing a failure. [ 2181.178933][T17153] name failslab, interval 1, probability 0, space 0, times 0 [ 2181.191933][T17153] CPU: 0 UID: 0 PID: 17153 Comm: syz.4.52257 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2181.191970][T17153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2181.191985][T17153] Call Trace: [ 2181.191994][T17153] [ 2181.192002][T17153] __dump_stack+0x21/0x30 [ 2181.192039][T17153] dump_stack_lvl+0x10c/0x190 [ 2181.192068][T17153] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2181.192098][T17153] ? kasan_save_track+0x4f/0x80 [ 2181.192121][T17153] ? kasan_save_alloc_info+0x40/0x50 [ 2181.192154][T17153] dump_stack+0x19/0x20 [ 2181.192183][T17153] should_fail_ex+0x3d9/0x530 [ 2181.192208][T17153] should_failslab+0xac/0x100 [ 2181.192235][T17153] kmem_cache_alloc_noprof+0x42/0x430 [ 2181.192258][T17153] ? mas_alloc_nodes+0x254/0x9e0 [ 2181.192284][T17153] mas_alloc_nodes+0x254/0x9e0 [ 2181.192311][T17153] mas_preallocate+0x762/0xc60 [ 2181.192345][T17153] ? __cfi_mas_preallocate+0x10/0x10 [ 2181.192370][T17153] ? __asan_memset+0x39/0x50 [ 2181.192391][T17153] ? vm_area_alloc+0x5f/0x1a0 [ 2181.192416][T17153] mmap_region+0x122a/0x1bc0 [ 2181.192441][T17153] ? __cfi_mmap_region+0x10/0x10 [ 2181.192466][T17153] ? __kasan_check_read+0x15/0x20 [ 2181.192501][T17153] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 2181.192530][T17153] ? __get_unmapped_area+0x407/0x470 [ 2181.192551][T17153] ? file_mmap_ok+0x147/0x1a0 [ 2181.192572][T17153] do_mmap+0xb6d/0x13c0 [ 2181.192595][T17153] ? __cfi_do_mmap+0x10/0x10 [ 2181.192614][T17153] ? down_write_killable+0xe9/0x2d0 [ 2181.192646][T17153] ? __cfi_down_write_killable+0x10/0x10 [ 2181.192673][T17153] vm_mmap_pgoff+0x38f/0x4e0 [ 2181.192695][T17153] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 2181.192716][T17153] ? __fget_files+0x2c5/0x340 [ 2181.192742][T17153] ksys_mmap_pgoff+0x166/0x1e0 [ 2181.192764][T17153] __x64_sys_mmap+0x121/0x140 [ 2181.192798][T17153] x64_sys_call+0x13bf/0x2ee0 [ 2181.192831][T17153] do_syscall_64+0x58/0xf0 [ 2181.192860][T17153] ? clear_bhb_loop+0x50/0xa0 [ 2181.192887][T17153] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2181.192912][T17153] RIP: 0033:0x7f660138f6c9 [ 2181.192932][T17153] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2181.192953][T17153] RSP: 002b:00007f66021dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2181.192978][T17153] RAX: ffffffffffffffda RBX: 00007f66015e5fa0 RCX: 00007f660138f6c9 [ 2181.192997][T17153] RDX: 0000000002000002 RSI: 0000000000002000 RDI: 0000200000ffb000 [ 2181.193012][T17153] RBP: 00007f66021dd090 R08: 0000000000000005 R09: 0000000008000000 [ 2181.193028][T17153] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2181.193043][T17153] R13: 00007f66015e6038 R14: 00007f66015e5fa0 R15: 00007ffd9a0e4e88 [ 2181.193064][T17153] [ 2182.466482][T17245] netlink: 'syz.4.52304': attribute type 7 has an invalid length. [ 2182.650028][T17268] netlink: 'syz.4.52313': attribute type 7 has an invalid length. [ 2182.744106][T17277] netlink: 'syz.4.52317': attribute type 5 has an invalid length. [ 2183.169905][T17336] FAULT_INJECTION: forcing a failure. [ 2183.169905][T17336] name failslab, interval 1, probability 0, space 0, times 0 [ 2183.183464][T17336] CPU: 0 UID: 0 PID: 17336 Comm: syz.4.52344 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2183.183503][T17336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2183.183519][T17336] Call Trace: [ 2183.183528][T17336] [ 2183.183537][T17336] __dump_stack+0x21/0x30 [ 2183.183573][T17336] dump_stack_lvl+0x10c/0x190 [ 2183.183604][T17336] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2183.183636][T17336] ? kasan_save_track+0x4f/0x80 [ 2183.183661][T17336] ? kasan_save_alloc_info+0x40/0x50 [ 2183.183694][T17336] dump_stack+0x19/0x20 [ 2183.183723][T17336] should_fail_ex+0x3d9/0x530 [ 2183.183746][T17336] should_failslab+0xac/0x100 [ 2183.183770][T17336] kmem_cache_alloc_noprof+0x42/0x430 [ 2183.183792][T17336] ? mas_alloc_nodes+0x254/0x9e0 [ 2183.183818][T17336] mas_alloc_nodes+0x254/0x9e0 [ 2183.183843][T17336] mas_preallocate+0x762/0xc60 [ 2183.183866][T17336] ? __cfi_mas_preallocate+0x10/0x10 [ 2183.183891][T17336] ? __asan_memset+0x39/0x50 [ 2183.183910][T17336] ? vm_area_alloc+0x5f/0x1a0 [ 2183.183935][T17336] mmap_region+0x122a/0x1bc0 [ 2183.183960][T17336] ? __cfi_mmap_region+0x10/0x10 [ 2183.183984][T17336] ? __kasan_check_read+0x15/0x20 [ 2183.184016][T17336] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 2183.184044][T17336] ? __get_unmapped_area+0x407/0x470 [ 2183.184066][T17336] ? file_mmap_ok+0x147/0x1a0 [ 2183.184085][T17336] do_mmap+0xb6d/0x13c0 [ 2183.184107][T17336] ? __cfi_do_mmap+0x10/0x10 [ 2183.184127][T17336] ? down_write_killable+0xe9/0x2d0 [ 2183.184164][T17336] ? __cfi_down_write_killable+0x10/0x10 [ 2183.184191][T17336] vm_mmap_pgoff+0x38f/0x4e0 [ 2183.184215][T17336] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 2183.184237][T17336] ? __fget_files+0x2c5/0x340 [ 2183.184264][T17336] ksys_mmap_pgoff+0x166/0x1e0 [ 2183.184286][T17336] __x64_sys_mmap+0x121/0x140 [ 2183.184319][T17336] x64_sys_call+0x13bf/0x2ee0 [ 2183.184350][T17336] do_syscall_64+0x58/0xf0 [ 2183.184379][T17336] ? clear_bhb_loop+0x50/0xa0 [ 2183.184405][T17336] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2183.184430][T17336] RIP: 0033:0x7f660138f6c9 [ 2183.184448][T17336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2183.184469][T17336] RSP: 002b:00007f66021dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 2183.184494][T17336] RAX: ffffffffffffffda RBX: 00007f66015e5fa0 RCX: 00007f660138f6c9 [ 2183.184512][T17336] RDX: 0000000002000002 RSI: 0000000000002000 RDI: 0000200000ffb000 [ 2183.184528][T17336] RBP: 00007f66021dd090 R08: 0000000000000005 R09: 0000000008000000 [ 2183.184543][T17336] R10: 0000000000000013 R11: 0000000000000246 R12: 0000000000000001 [ 2183.184558][T17336] R13: 00007f66015e6038 R14: 00007f66015e5fa0 R15: 00007ffd9a0e4e88 [ 2183.184578][T17336] [ 2185.805053][T17475] rust_binder: 675: no such ref 0 [ 2185.810440][T17475] rust_binder: BC_REQUEST_DEATH_NOTIFICATION invalid ref 0 [ 2185.817958][T17475] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 0 [ 2185.925746][T17488] netlink: 44 bytes leftover after parsing attributes in process `syz.1.52411'. [ 2185.953433][T17488] validate_nla: 69 callbacks suppressed [ 2185.953456][T17488] netlink: 'syz.1.52411': attribute type 6 has an invalid length. [ 2186.006602][T17488] netlink: 'syz.1.52411': attribute type 5 has an invalid length. [ 2186.026849][T17488] netlink: 'syz.1.52411': attribute type 4 has an invalid length. [ 2186.761618][ T36] audit: type=1400 audit(1779782808.212:1288): avc: denied { create } for pid=17530 comm="syz.1.52438" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 2187.145246][T17556] netlink: 'syz.1.52447': attribute type 7 has an invalid length. [ 2187.289038][T17583] netlink: 'syz.4.52464': attribute type 7 has an invalid length. [ 2187.393572][T17599] FAULT_INJECTION: forcing a failure. [ 2187.393572][T17599] name failslab, interval 1, probability 0, space 0, times 0 [ 2187.406300][T17599] CPU: 0 UID: 0 PID: 17599 Comm: syz.4.52472 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2187.406338][T17599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2187.406354][T17599] Call Trace: [ 2187.406362][T17599] [ 2187.406372][T17599] __dump_stack+0x21/0x30 [ 2187.406408][T17599] dump_stack_lvl+0x10c/0x190 [ 2187.406439][T17599] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2187.406473][T17599] dump_stack+0x19/0x20 [ 2187.406503][T17599] should_fail_ex+0x3d9/0x530 [ 2187.406527][T17599] should_failslab+0xac/0x100 [ 2187.406554][T17599] kmem_cache_alloc_noprof+0x42/0x430 [ 2187.406576][T17599] ? kmem_cache_free+0x1c1/0x510 [ 2187.406598][T17599] ? getname_flags+0xc6/0x710 [ 2187.406621][T17599] ? getname_flags+0x438/0x710 [ 2187.406645][T17599] getname_flags+0xc6/0x710 [ 2187.406669][T17599] __x64_sys_rename+0x6e/0xa0 [ 2187.406701][T17599] x64_sys_call+0x150b/0x2ee0 [ 2187.406735][T17599] do_syscall_64+0x58/0xf0 [ 2187.406765][T17599] ? clear_bhb_loop+0x50/0xa0 [ 2187.406791][T17599] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2187.406839][T17599] RIP: 0033:0x7f660138f6c9 [ 2187.406862][T17599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2187.406892][T17599] RSP: 002b:00007f66021dd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000052 [ 2187.406917][T17599] RAX: ffffffffffffffda RBX: 00007f66015e5fa0 RCX: 00007f660138f6c9 [ 2187.406936][T17599] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 2187.406951][T17599] RBP: 00007f66021dd090 R08: 0000000000000000 R09: 0000000000000000 [ 2187.406967][T17599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2187.406982][T17599] R13: 00007f66015e6038 R14: 00007f66015e5fa0 R15: 00007ffd9a0e4e88 [ 2187.407003][T17599] [ 2187.638005][T17607] netlink: 'syz.3.52474': attribute type 7 has an invalid length. [ 2187.656072][T17609] netlink: 'syz.4.52476': attribute type 5 has an invalid length. [ 2188.123658][T17626] netlink: 'syz.0.52485': attribute type 5 has an invalid length. [ 2188.370179][T17634] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 2188.599784][T17652] netlink: 'syz.1.52496': attribute type 7 has an invalid length. [ 2189.446779][ T332] usb 1-1: new low-speed USB device number 91 using dummy_hcd [ 2189.543391][T17678] netlink: 'syz.4.52509': attribute type 7 has an invalid length. [ 2189.598859][ T332] usb 1-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 2189.625790][ T332] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 2189.647885][ T332] usb 1-1: config 0 descriptor?? [ 2189.732751][T17700] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 2189.748840][T17700] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 2189.813017][T17704] rust_binder: Write failure EFAULT in pid:917 [ 2189.868303][T17670] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=0 sclass=netlink_audit_socket pid=17670 comm=syz.0.52506 [ 2190.015758][T17718] tmpfs: Cannot enable swap on remount if it was disabled on first mount [ 2190.331390][ T332] asix 1-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 2190.353562][ T332] asix 1-1:0.0: probe with driver asix failed with error -61 [ 2190.382788][T17740] FAULT_INJECTION: forcing a failure. [ 2190.382788][T17740] name failslab, interval 1, probability 0, space 0, times 0 [ 2190.405730][T17740] CPU: 1 UID: 0 PID: 17740 Comm: syz.4.52538 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2190.405770][T17740] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2190.405786][T17740] Call Trace: [ 2190.405794][T17740] [ 2190.405805][T17740] __dump_stack+0x21/0x30 [ 2190.405841][T17740] dump_stack_lvl+0x10c/0x190 [ 2190.405872][T17740] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2190.405905][T17740] ? check_stack_object+0x82/0x140 [ 2190.405926][T17740] ? __virt_addr_valid+0x2a6/0x380 [ 2190.405953][T17740] dump_stack+0x19/0x20 [ 2190.405981][T17740] should_fail_ex+0x3d9/0x530 [ 2190.406005][T17740] should_failslab+0xac/0x100 [ 2190.406032][T17740] __kmalloc_cache_noprof+0x41/0x490 [ 2190.406055][T17740] ? memdup_user+0xb1/0x180 [ 2190.406087][T17740] ? __se_sys_mount+0x15f/0x480 [ 2190.406110][T17740] __se_sys_mount+0x15f/0x480 [ 2190.406133][T17740] ? ksys_write+0x1ef/0x250 [ 2190.406153][T17740] ? __x64_sys_mount+0xf0/0xf0 [ 2190.406177][T17740] __x64_sys_mount+0xc3/0xf0 [ 2190.406198][T17740] x64_sys_call+0x2021/0x2ee0 [ 2190.406231][T17740] do_syscall_64+0x58/0xf0 [ 2190.406260][T17740] ? clear_bhb_loop+0x50/0xa0 [ 2190.406285][T17740] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2190.406310][T17740] RIP: 0033:0x7f660138f6c9 [ 2190.406329][T17740] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2190.406351][T17740] RSP: 002b:00007f66021dd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2190.406377][T17740] RAX: ffffffffffffffda RBX: 00007f66015e5fa0 RCX: 00007f660138f6c9 [ 2190.406396][T17740] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 2190.406412][T17740] RBP: 00007f66021dd090 R08: 0000200000000540 R09: 0000000000000000 [ 2190.406429][T17740] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2190.406445][T17740] R13: 00007f66015e6038 R14: 00007f66015e5fa0 R15: 00007ffd9a0e4e88 [ 2190.406465][T17740] [ 2191.128774][T17760] validate_nla: 3 callbacks suppressed [ 2191.128798][T17760] netlink: 'syz.1.52547': attribute type 7 has an invalid length. [ 2192.417383][ T5519] usb 1-1: USB disconnect, device number 91 [ 2192.528184][ T332] usb 4-1: new full-speed USB device number 90 using dummy_hcd [ 2192.622475][ T36] audit: type=1326 audit(1779782814.035:1289): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17831 comm="syz.4.52580" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f660138f6c9 code=0x7fc00000 [ 2192.691240][ T332] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 2192.709719][ T332] usb 4-1: config 0 has no interface number 0 [ 2192.736165][ T332] usb 4-1: config 0 interface 41 has no altsetting 0 [ 2192.747676][ T332] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2192.777136][ T332] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2192.797440][ T332] usb 4-1: Product: syz [ 2192.805628][ T332] usb 4-1: Manufacturer: syz [ 2192.827738][ T332] usb 4-1: SerialNumber: syz [ 2192.842862][ T332] usb 4-1: config 0 descriptor?? [ 2193.711764][ T332] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 2194.708043][T17880] netlink: 'syz.1.52602': attribute type 7 has an invalid length. [ 2194.971578][ T332] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffea [ 2195.189795][ T332] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 2195.211977][ T332] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 2195.230057][ T332] usb 4-1: USB disconnect, device number 90 [ 2195.249763][T17891] netlink: 'syz.4.52605': attribute type 7 has an invalid length. [ 2195.693711][T17913] netlink: 'syz.4.52615': attribute type 7 has an invalid length. [ 2195.841406][T17934] netlink: 'syz.1.52625': attribute type 7 has an invalid length. [ 2196.573154][T17951] netlink: 'syz.4.52634': attribute type 7 has an invalid length. [ 2196.808564][T17973] netlink: 'syz.3.52644': attribute type 7 has an invalid length. [ 2197.079456][T17995] netlink: 'syz.0.52653': attribute type 7 has an invalid length. [ 2197.917454][ T5519] usb 2-1: new high-speed USB device number 96 using dummy_hcd [ 2198.098445][ T5519] usb 2-1: Using ep0 maxpacket: 32 [ 2198.118446][ T5519] usb 2-1: unable to get BOS descriptor or descriptor too short [ 2198.126989][ T5519] usb 2-1: config 128 has an invalid interface number: 127 but max is 3 [ 2198.144691][ T5519] usb 2-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 2198.175513][ T5519] usb 2-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 2198.198993][ T5519] usb 2-1: config 128 has no interface number 0 [ 2198.205605][ T5519] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 2198.226826][ T36] audit: type=1400 audit(1779782819.602:1290): avc: denied { setattr } for pid=18020 comm="syz.3.52666" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 2198.239244][ T5519] usb 2-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 2198.304699][ T5519] usb 2-1: config 128 interface 127 has no altsetting 0 [ 2198.316645][ T5519] usb 2-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 2198.325942][ T5519] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2198.336093][ T5519] usb 2-1: Product: syz [ 2198.344252][ T5519] usb 2-1: Manufacturer: syz [ 2198.354389][ T5519] usb 2-1: SerialNumber: syz [ 2199.989547][ T36] audit: type=1400 audit(1779782821.362:1291): avc: denied { write } for pid=18103 comm="syz.1.52699" name="hwrng" dev="devtmpfs" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 2200.789302][T18116] binder: Unknown parameter '0x0000000000000003' [ 2201.175345][T16505] usb 4-1: new full-speed USB device number 91 using dummy_hcd [ 2201.316904][T18164] overlayfs: option "volatile" is meaningless in a non-upper mount, ignoring it. [ 2201.327568][T16505] usb 4-1: config 0 has an invalid interface number: 41 but max is 0 [ 2201.335736][T16505] usb 4-1: config 0 has no interface number 0 [ 2201.355831][T16505] usb 4-1: config 0 interface 41 has no altsetting 0 [ 2201.402036][ T5519] usb 2-1: USB disconnect, device number 96 [ 2201.411426][T16505] usb 4-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 2201.434005][T17671] udevd[17671]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:128.127/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 2201.460702][T16505] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 2201.472943][T18164] overlayfs: missing 'lowerdir' [ 2201.481075][T16505] usb 4-1: Product: syz [ 2201.491135][T16505] usb 4-1: Manufacturer: syz [ 2201.511040][T16505] usb 4-1: SerialNumber: syz [ 2201.546394][T16505] usb 4-1: config 0 descriptor?? [ 2201.720261][T18194] FAULT_INJECTION: forcing a failure. [ 2201.720261][T18194] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 2201.774309][T18194] CPU: 1 UID: 0 PID: 18194 Comm: syz.1.52733 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 2201.774336][T18194] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 2201.774348][T18194] Call Trace: [ 2201.774353][T18194] [ 2201.774360][T18194] __dump_stack+0x21/0x30 [ 2201.774389][T18194] dump_stack_lvl+0x10c/0x190 [ 2201.774410][T18194] ? __cfi_dump_stack_lvl+0x10/0x10 [ 2201.774432][T18194] ? check_stack_object+0x82/0x140 [ 2201.774448][T18194] dump_stack+0x19/0x20 [ 2201.774468][T18194] should_fail_ex+0x3d9/0x530 [ 2201.774485][T18194] should_fail+0xf/0x20 [ 2201.774499][T18194] should_fail_usercopy+0x1e/0x30 [ 2201.774516][T18194] _copy_from_user+0x22/0xb0 [ 2201.774536][T18194] memdup_user+0x81/0x180 [ 2201.774559][T18194] ? strndup_user+0x40/0xd0 [ 2201.774582][T18194] strndup_user+0x6c/0xd0 [ 2201.774605][T18194] __se_sys_mount+0x9f/0x480 [ 2201.774620][T18194] ? ksys_write+0x1ef/0x250 [ 2201.774635][T18194] ? __x64_sys_mount+0xf0/0xf0 [ 2201.774651][T18194] __x64_sys_mount+0xc3/0xf0 [ 2201.774665][T18194] x64_sys_call+0x2021/0x2ee0 [ 2201.774688][T18194] do_syscall_64+0x58/0xf0 [ 2201.774708][T18194] ? clear_bhb_loop+0x50/0xa0 [ 2201.774726][T18194] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 2201.774743][T18194] RIP: 0033:0x7fea9458f6c9 [ 2201.774756][T18194] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 2201.774769][T18194] RSP: 002b:00007fea9548b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 2201.774786][T18194] RAX: ffffffffffffffda RBX: 00007fea947e5fa0 RCX: 00007fea9458f6c9 [ 2201.774799][T18194] RDX: 0000200000000080 RSI: 00002000000000c0 RDI: 0000000000000000 [ 2201.774815][T18194] RBP: 00007fea9548b090 R08: 0000200000000200 R09: 0000000000000000 [ 2201.774826][T18194] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 2201.774836][T18194] R13: 00007fea947e6038 R14: 00007fea947e5fa0 R15: 00007ffc9b91a468 [ 2201.774849][T18194] [ 2201.977681][T16505] CoreChips 4-1:0.41 (unnamed net_device) (uninitialized): set LINK LED failed : -71 [ 2201.987288][T16505] CoreChips 4-1:0.41: probe with driver CoreChips failed with error -71 [ 2201.997095][T16505] usb 4-1: USB disconnect, device number 91