last executing test programs: 2.997542799s ago: executing program 2 (id=19644): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) fremovexattr(r5, 0x0) 2.698880329s ago: executing program 3 (id=19651): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x2, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0xffffffffffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r4, @ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r6, 0x0, 0x0, 0x805, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r7, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) setsockopt$inet_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "bb6a01b16023af5f", "f4313c0639ba22e15ab5cd1d469bfdf7", "923d6e72", "edc5db29365ff501"}, 0x28) 2.645702324s ago: executing program 0 (id=19652): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, 0x0, 0x0, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r7, @ANYRES64=r6], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 2.555830903s ago: executing program 2 (id=19653): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00), 0x0, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket(0x10, 0xa, 0x6) 2.465643633s ago: executing program 2 (id=19654): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r3, &(0x7f0000000040)=[{&(0x7f0000000380)="ea", 0x1}], 0x1) 2.397464749s ago: executing program 2 (id=19655): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0x52022180, 0x0, 0x0, 0x0, 0x0, 0x0) 2.310964018s ago: executing program 3 (id=19656): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000380)="ea", 0x1}], 0x1) 2.310753308s ago: executing program 3 (id=19657): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) sendto$packet(r5, &(0x7f0000000180)="0b036800e0ff64000200", 0xa, 0x0, 0x0, 0x0) 2.230012156s ago: executing program 3 (id=19658): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) write(r0, 0x0, 0x0) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) r5 = openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r5, 0x0, 0x0) 2.180936621s ago: executing program 0 (id=19659): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000001c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r5, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) fremovexattr(r5, 0x0) 2.078939641s ago: executing program 0 (id=19660): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) writev(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000380)="ea", 0x1}], 0x1) 2.078677851s ago: executing program 0 (id=19661): rt_sigaction(0xd, &(0x7f0000000040)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000140)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b66, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) recvmmsg(r3, 0x0, 0x0, 0x100, &(0x7f000000a7c0)={0x0, 0x989680}) 1.459776133s ago: executing program 2 (id=19663): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(r1, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, 0x0, 0x0, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r5, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r7, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r7, @ANYRES64=r6], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r7, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') 1.410180498s ago: executing program 1 (id=19664): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r1, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f00000007c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) 1.286855321s ago: executing program 3 (id=19665): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r2, 0x0, 0x0, 0x805, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) mlockall(0x6) 1.183760991s ago: executing program 1 (id=19666): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) write(r0, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'batadv_slave_1\x00'}) sendto$packet(r5, &(0x7f0000000180)="0b036800e0ff64000200", 0xa, 0x0, 0x0, 0x0) 1.177525342s ago: executing program 0 (id=19667): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = getpid() r6 = syz_pidfd_open(r5, 0x0) setns(r6, 0x24020000) syz_clone(0x52022180, 0x0, 0x0, 0x0, 0x0, 0x0) 1.090971901s ago: executing program 1 (id=19668): rt_sigaction(0xd, 0x0, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) fremovexattr(r4, 0x0) 1.090459871s ago: executing program 1 (id=19669): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wlan0\x00'}) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x24, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, &(0x7f0000000200)="f7790066baa00066b86b4266ef66ba420066b8e20066ef0f29902cbb0000c4e2b1ba8c88d9000000666666440f38826b410f7842280f07b8010000000f01d9c4033921820f47a753fd", 0x49}], 0x1, 0x1, 0x0, 0x0) ioctl$KVM_SET_VAPIC_ADDR(r2, 0x4008ae93, &(0x7f0000000040)=0x1000) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4400ae8f, &(0x7f0000000140)=@x86={0x40, 0x1, 0xc, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x80, 0x9, 0x0, 0x0, 0x2, 0xfffffff8, 0x0, 0xff, 0xff, 0x0, '\x00', 0x0, 0xffffffffffffffff}) ioctl$KVM_RUN(r2, 0xae80, 0x0) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r4, @ANYRES64=r3], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r4, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f25, 0x4}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r5, 0x0, 0x0, 0x805, 0x0, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet(r6, 0x0, 0x0, 0x805, 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r7, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8014) sendmmsg$inet6(r7, &(0x7f00000075c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x40804) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r8, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) setsockopt$inet_tcp_TLS_TX(r6, 0x11a, 0x1, &(0x7f00000000c0)=@ccm_128={{0x303}, "bb6a01b16023af5f", "f4313c0639ba22e15ab5cd1d469bfdf7", "923d6e72", "edc5db29365ff501"}, 0x28) 960.166754ms ago: executing program 1 (id=19670): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) memfd_secret(0x0) 832.798256ms ago: executing program 2 (id=19672): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0x52022180, 0x0, 0x0, 0x0, 0x0, 0x0) 170.974583ms ago: executing program 0 (id=19673): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r3, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f27, 0x4}) sendmmsg$inet6(r4, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) writev(r5, &(0x7f0000000040)=[{&(0x7f0000000380)="ea", 0x1}], 0x1) 170.738923ms ago: executing program 3 (id=19674): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, 0x0) sendmmsg$inet6(r2, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2f, &(0x7f0000000300)={0x6, {{0x2, 0x0, @multicast2=0xe0000001}}, {{0x2, 0x4e21, @local}}}, 0x108) 0s ago: executing program 1 (id=19675): rt_sigaction(0xd, &(0x7f0000000180)={&(0x7f0000000000)="ca00d1c441ef196ec866400fe2de0fae4e0afaf2466ff00fc01ec422e10399c5c1202063df", 0x44000004, 0x0, {[0x2]}}, 0x0, 0x8, &(0x7f0000000300)) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) write$UHID_CREATE2(r1, &(0x7f0000000340)=ANY=[@ANYRES32, @ANYRES8, @ANYRES8=r1, @ANYRES64=r0], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x88fd537e5c114b6e, 0x11, r1, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg$inet6(r2, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) ioctl$KVM_X86_SETUP_MCE(0xffffffffffffffff, 0x4008ae9c, &(0x7f0000000000)={0x1c, 0x526d630517582f26, 0x4}) sendmmsg$inet6(r3, &(0x7f0000000500)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000003c00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) syz_clone(0x52022180, 0x0, 0x0, 0x0, 0x0, 0x0) kernel console output (not intermixed with test programs): 3.887975][T29494] netlink: 'syz.1.13778': attribute type 4 has an invalid length. [ 564.096423][T29506] netlink: 'syz.2.13783': attribute type 4 has an invalid length. [ 564.273202][ T36] audit: type=1400 audit(1763472210.600:208): avc: denied { mounton } for pid=29515 comm="syz.3.13787" path="/385/file0" dev="tmpfs" ino=2350 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=sock_file permissive=1 [ 564.296671][T29516] 9pnet_fd: Insufficient options for proto=fd [ 565.562136][T29572] netlink: 'syz.2.13816': attribute type 4 has an invalid length. [ 565.682595][T29578] 9pnet_fd: Insufficient options for proto=fd [ 565.967283][ T36] audit: type=1400 audit(1763472212.290:209): avc: denied { unlink } for pid=29597 comm="syz.1.13828" name="#1" dev="tmpfs" ino=2713 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 566.016707][ T36] audit: type=1400 audit(1763472212.320:210): avc: denied { mount } for pid=29597 comm="syz.1.13828" name="/" dev="overlay" ino=2709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 566.517704][T29626] netlink: 'syz.3.13842': attribute type 4 has an invalid length. [ 566.869496][T29646] FAULT_INJECTION: forcing a failure. [ 566.869496][T29646] name failslab, interval 1, probability 0, space 0, times 0 [ 566.895814][T29646] CPU: 0 UID: 0 PID: 29646 Comm: syz.2.13853 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 566.895851][T29646] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 566.895865][T29646] Call Trace: [ 566.895872][T29646] [ 566.895881][T29646] __dump_stack+0x21/0x30 [ 566.895913][T29646] dump_stack_lvl+0x10c/0x190 [ 566.895940][T29646] ? __cfi_dump_stack_lvl+0x10/0x10 [ 566.895969][T29646] ? release_sock+0x171/0x1f0 [ 566.895994][T29646] dump_stack+0x19/0x20 [ 566.896020][T29646] should_fail_ex+0x3d9/0x530 [ 566.896041][T29646] should_failslab+0xac/0x100 [ 566.896065][T29646] kmem_cache_alloc_node_noprof+0x45/0x440 [ 566.896103][T29646] ? netlink_data_ready+0x20/0x20 [ 566.896132][T29646] ? __alloc_skb+0x10c/0x370 [ 566.896159][T29646] __alloc_skb+0x10c/0x370 [ 566.896185][T29646] netlink_alloc_large_skb+0xf7/0x1b0 [ 566.896214][T29646] netlink_sendmsg+0x586/0xaf0 [ 566.896247][T29646] ? __cfi_netlink_sendmsg+0x10/0x10 [ 566.896278][T29646] ? __asan_memcpy+0x5a/0x80 [ 566.896298][T29646] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 566.896324][T29646] ? security_socket_sendmsg+0x33/0xd0 [ 566.896356][T29646] sock_write_iter+0x49c/0x4f0 [ 566.896378][T29646] ? __cfi_sock_write_iter+0x10/0x10 [ 566.896403][T29646] do_iter_readv_writev+0x628/0x810 [ 566.896426][T29646] ? vfs_iter_read+0x5f0/0x5f0 [ 566.896447][T29646] ? bpf_lsm_file_permission+0xd/0x20 [ 566.896482][T29646] vfs_writev+0x485/0xcf0 [ 566.896507][T29646] ? do_writev+0x2d0/0x2d0 [ 566.896530][T29646] ? vfs_write+0x93e/0xf30 [ 566.896554][T29646] do_writev+0x14d/0x2d0 [ 566.896577][T29646] ? vfs_readv+0xa50/0xa50 [ 566.896601][T29646] ? __kasan_check_read+0x15/0x20 [ 566.896632][T29646] __x64_sys_writev+0x81/0x90 [ 566.896652][T29646] x64_sys_call+0x1fbb/0x2ee0 [ 566.896681][T29646] do_syscall_64+0x58/0xf0 [ 566.896707][T29646] ? clear_bhb_loop+0x50/0xa0 [ 566.896730][T29646] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 566.896751][T29646] RIP: 0033:0x7fbf5b18f6c9 [ 566.896769][T29646] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 566.896787][T29646] RSP: 002b:00007fbf5c060038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 566.896810][T29646] RAX: ffffffffffffffda RBX: 00007fbf5b3e5fa0 RCX: 00007fbf5b18f6c9 [ 566.896826][T29646] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000008 [ 566.896840][T29646] RBP: 00007fbf5c060090 R08: 0000000000000000 R09: 0000000000000000 [ 566.896853][T29646] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 566.896867][T29646] R13: 00007fbf5b3e6038 R14: 00007fbf5b3e5fa0 R15: 00007ffd49a22b58 [ 566.896885][T29646] [ 567.200573][T29658] netlink: 'syz.2.13858': attribute type 4 has an invalid length. [ 567.242947][T29664] FAULT_INJECTION: forcing a failure. [ 567.242947][T29664] name failslab, interval 1, probability 0, space 0, times 0 [ 567.256840][T29664] CPU: 0 UID: 0 PID: 29664 Comm: syz.2.13862 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 567.256878][T29664] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 567.256893][T29664] Call Trace: [ 567.256901][T29664] [ 567.256911][T29664] __dump_stack+0x21/0x30 [ 567.256947][T29664] dump_stack_lvl+0x10c/0x190 [ 567.256976][T29664] ? __cfi_dump_stack_lvl+0x10/0x10 [ 567.257005][T29664] ? release_sock+0x171/0x1f0 [ 567.257032][T29664] dump_stack+0x19/0x20 [ 567.257096][T29664] should_fail_ex+0x3d9/0x530 [ 567.257121][T29664] should_failslab+0xac/0x100 [ 567.257146][T29664] kmem_cache_alloc_node_noprof+0x45/0x440 [ 567.257168][T29664] ? netlink_data_ready+0x20/0x20 [ 567.257196][T29664] ? __alloc_skb+0x10c/0x370 [ 567.257224][T29664] __alloc_skb+0x10c/0x370 [ 567.257251][T29664] netlink_alloc_large_skb+0xf7/0x1b0 [ 567.257298][T29664] netlink_sendmsg+0x586/0xaf0 [ 567.257350][T29664] ? __cfi_netlink_sendmsg+0x10/0x10 [ 567.257383][T29664] ? __asan_memcpy+0x5a/0x80 [ 567.257404][T29664] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 567.257433][T29664] ? security_socket_sendmsg+0x33/0xd0 [ 567.257457][T29664] sock_write_iter+0x49c/0x4f0 [ 567.257482][T29664] ? __cfi_sock_write_iter+0x10/0x10 [ 567.257510][T29664] do_iter_readv_writev+0x628/0x810 [ 567.257535][T29664] ? vfs_iter_read+0x5f0/0x5f0 [ 567.257559][T29664] ? bpf_lsm_file_permission+0xd/0x20 [ 567.257593][T29664] vfs_writev+0x485/0xcf0 [ 567.257633][T29664] ? do_writev+0x2d0/0x2d0 [ 567.257676][T29664] ? vfs_write+0x93e/0xf30 [ 567.257703][T29664] do_writev+0x14d/0x2d0 [ 567.257730][T29664] ? vfs_readv+0xa50/0xa50 [ 567.257757][T29664] ? __kasan_check_read+0x15/0x20 [ 567.257792][T29664] __x64_sys_writev+0x81/0x90 [ 567.257816][T29664] x64_sys_call+0x1fbb/0x2ee0 [ 567.257850][T29664] do_syscall_64+0x58/0xf0 [ 567.257879][T29664] ? clear_bhb_loop+0x50/0xa0 [ 567.257905][T29664] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 567.257930][T29664] RIP: 0033:0x7fbf5b18f6c9 [ 567.257950][T29664] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.257971][T29664] RSP: 002b:00007fbf5c060038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 567.257996][T29664] RAX: ffffffffffffffda RBX: 00007fbf5b3e5fa0 RCX: 00007fbf5b18f6c9 [ 567.258015][T29664] RDX: 0000000000000001 RSI: 00002000000003c0 RDI: 0000000000000008 [ 567.258030][T29664] RBP: 00007fbf5c060090 R08: 0000000000000000 R09: 0000000000000000 [ 567.258045][T29664] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.258060][T29664] R13: 00007fbf5b3e6038 R14: 00007fbf5b3e5fa0 R15: 00007ffd49a22b58 [ 567.258080][T29664] [ 567.622956][T29684] FAULT_INJECTION: forcing a failure. [ 567.622956][T29684] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 567.636089][T29684] CPU: 1 UID: 0 PID: 29684 Comm: syz.0.13871 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 567.636138][T29684] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 567.636149][T29684] Call Trace: [ 567.636155][T29684] [ 567.636163][T29684] __dump_stack+0x21/0x30 [ 567.636189][T29684] dump_stack_lvl+0x10c/0x190 [ 567.636216][T29684] ? __cfi_dump_stack_lvl+0x10/0x10 [ 567.636252][T29684] ? kstrtoull+0x13b/0x1e0 [ 567.636267][T29684] dump_stack+0x19/0x20 [ 567.636287][T29684] should_fail_ex+0x3d9/0x530 [ 567.636303][T29684] should_fail+0xf/0x20 [ 567.636317][T29684] should_fail_usercopy+0x1e/0x30 [ 567.636334][T29684] _copy_from_user+0x22/0xb0 [ 567.636353][T29684] ___sys_sendmsg+0x159/0x2a0 [ 567.636376][T29684] ? __sys_sendmsg+0x280/0x280 [ 567.636400][T29684] ? proc_fail_nth_write+0x17e/0x210 [ 567.636424][T29684] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 567.636455][T29684] __x64_sys_sendmsg+0x1eb/0x2c0 [ 567.636479][T29684] ? fput+0x1a5/0x240 [ 567.636500][T29684] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 567.636523][T29684] ? ksys_write+0x1ef/0x250 [ 567.636540][T29684] ? __kasan_check_read+0x15/0x20 [ 567.636564][T29684] x64_sys_call+0x2a4c/0x2ee0 [ 567.636587][T29684] do_syscall_64+0x58/0xf0 [ 567.636608][T29684] ? clear_bhb_loop+0x50/0xa0 [ 567.636625][T29684] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 567.636643][T29684] RIP: 0033:0x7f817178f6c9 [ 567.636656][T29684] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 567.636669][T29684] RSP: 002b:00007f817257a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 567.636687][T29684] RAX: ffffffffffffffda RBX: 00007f81719e5fa0 RCX: 00007f817178f6c9 [ 567.636699][T29684] RDX: 0000000000000000 RSI: 0000200000000180 RDI: 0000000000000009 [ 567.636709][T29684] RBP: 00007f817257a090 R08: 0000000000000000 R09: 0000000000000000 [ 567.636719][T29684] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 567.636729][T29684] R13: 00007f81719e6038 R14: 00007f81719e5fa0 R15: 00007fff905a49d8 [ 567.636743][T29684] [ 568.561733][T29727] 9pnet_fd: Insufficient options for proto=fd [ 568.731509][T29735] 9pnet_fd: Insufficient options for proto=fd [ 568.970581][T29745] FAULT_INJECTION: forcing a failure. [ 568.970581][T29745] name failslab, interval 1, probability 0, space 0, times 0 [ 569.000811][T29745] CPU: 0 UID: 0 PID: 29745 Comm: syz.1.13899 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 569.000847][T29745] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 569.000866][T29745] Call Trace: [ 569.000874][T29745] [ 569.000883][T29745] __dump_stack+0x21/0x30 [ 569.000917][T29745] dump_stack_lvl+0x10c/0x190 [ 569.000944][T29745] ? __cfi_dump_stack_lvl+0x10/0x10 [ 569.000972][T29745] ? __kasan_check_write+0x18/0x20 [ 569.001003][T29745] ? proc_fail_nth_write+0x17e/0x210 [ 569.001031][T29745] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 569.001061][T29745] dump_stack+0x19/0x20 [ 569.001087][T29745] should_fail_ex+0x3d9/0x530 [ 569.001110][T29745] should_failslab+0xac/0x100 [ 569.001134][T29745] kmem_cache_alloc_noprof+0x42/0x430 [ 569.001161][T29745] ? getname_flags+0xc6/0x710 [ 569.001184][T29745] getname_flags+0xc6/0x710 [ 569.001204][T29745] ? build_open_flags+0x487/0x600 [ 569.001232][T29745] getname+0x1b/0x30 [ 569.001252][T29745] do_sys_openat2+0xcb/0x1c0 [ 569.001278][T29745] ? fput+0x1a5/0x240 [ 569.001302][T29745] ? do_sys_open+0x100/0x100 [ 569.001328][T29745] ? ksys_write+0x1ef/0x250 [ 569.001348][T29745] ? __cfi_ksys_write+0x10/0x10 [ 569.001368][T29745] __x64_sys_openat+0x13a/0x170 [ 569.001417][T29745] x64_sys_call+0xe69/0x2ee0 [ 569.001450][T29745] do_syscall_64+0x58/0xf0 [ 569.001479][T29745] ? clear_bhb_loop+0x50/0xa0 [ 569.001504][T29745] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 569.001528][T29745] RIP: 0033:0x7f0df2f8df10 [ 569.001547][T29745] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 569.001566][T29745] RSP: 002b:00007f0df3dccf10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 569.001591][T29745] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f0df2f8df10 [ 569.001607][T29745] RDX: 0000000000000002 RSI: 00007f0df3dccfa0 RDI: 00000000ffffff9c [ 569.001623][T29745] RBP: 00007f0df3dccfa0 R08: 0000000000000000 R09: 0000000000000000 [ 569.001638][T29745] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 569.001652][T29745] R13: 00007f0df31e6038 R14: 00007f0df31e5fa0 R15: 00007fff99bb5b58 [ 569.001672][T29745] [ 569.611572][T29759] 9pnet_fd: Insufficient options for proto=fd [ 569.821225][T29783] 9pnet_fd: Insufficient options for proto=fd [ 569.893948][T29787] FAULT_INJECTION: forcing a failure. [ 569.893948][T29787] name failslab, interval 1, probability 0, space 0, times 0 [ 569.930787][T29787] CPU: 1 UID: 0 PID: 29787 Comm: syz.2.13920 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 569.930823][T29787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 569.930837][T29787] Call Trace: [ 569.930845][T29787] [ 569.930853][T29787] __dump_stack+0x21/0x30 [ 569.930886][T29787] dump_stack_lvl+0x10c/0x190 [ 569.930914][T29787] ? __cfi_dump_stack_lvl+0x10/0x10 [ 569.930947][T29787] ? release_sock+0x171/0x1f0 [ 569.930973][T29787] dump_stack+0x19/0x20 [ 569.930999][T29787] should_fail_ex+0x3d9/0x530 [ 569.931022][T29787] should_failslab+0xac/0x100 [ 569.931046][T29787] kmem_cache_alloc_node_noprof+0x45/0x440 [ 569.931066][T29787] ? netlink_data_ready+0x20/0x20 [ 569.931094][T29787] ? __alloc_skb+0x10c/0x370 [ 569.931129][T29787] __alloc_skb+0x10c/0x370 [ 569.931154][T29787] netlink_alloc_large_skb+0xf7/0x1b0 [ 569.931181][T29787] netlink_sendmsg+0x586/0xaf0 [ 569.931212][T29787] ? __cfi_netlink_sendmsg+0x10/0x10 [ 569.931242][T29787] ? __asan_memcpy+0x5a/0x80 [ 569.931261][T29787] ? bpf_lsm_socket_sendmsg+0xd/0x20 [ 569.931287][T29787] ? security_socket_sendmsg+0x33/0xd0 [ 569.931308][T29787] sock_write_iter+0x49c/0x4f0 [ 569.931329][T29787] ? __cfi_sock_write_iter+0x10/0x10 [ 569.931354][T29787] do_iter_readv_writev+0x628/0x810 [ 569.931377][T29787] ? vfs_iter_read+0x5f0/0x5f0 [ 569.931398][T29787] ? bpf_lsm_file_permission+0xd/0x20 [ 569.931427][T29787] vfs_writev+0x485/0xcf0 [ 569.931452][T29787] ? do_writev+0x2d0/0x2d0 [ 569.931475][T29787] ? vfs_write+0x93e/0xf30 [ 569.931499][T29787] do_writev+0x14d/0x2d0 [ 569.931523][T29787] ? vfs_readv+0xa50/0xa50 [ 569.931545][T29787] ? fd_install+0x175/0x2e0 [ 569.931567][T29787] ? __kasan_check_read+0x15/0x20 [ 569.931599][T29787] __x64_sys_writev+0x81/0x90 [ 569.931621][T29787] x64_sys_call+0x1fbb/0x2ee0 [ 569.931652][T29787] do_syscall_64+0x58/0xf0 [ 569.931678][T29787] ? clear_bhb_loop+0x50/0xa0 [ 569.931701][T29787] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 569.931724][T29787] RIP: 0033:0x7fbf5b18f6c9 [ 569.931741][T29787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 569.931760][T29787] RSP: 002b:00007fbf5c060038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 569.931783][T29787] RAX: ffffffffffffffda RBX: 00007fbf5b3e5fa0 RCX: 00007fbf5b18f6c9 [ 569.931801][T29787] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000008 [ 569.931816][T29787] RBP: 00007fbf5c060090 R08: 0000000000000000 R09: 0000000000000000 [ 569.931830][T29787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 569.931844][T29787] R13: 00007fbf5b3e6038 R14: 00007fbf5b3e5fa0 R15: 00007ffd49a22b58 [ 569.931863][T29787] [ 570.379769][T29804] netlink: 'syz.2.13927': attribute type 4 has an invalid length. [ 570.994096][T29833] FAULT_INJECTION: forcing a failure. [ 570.994096][T29833] name failslab, interval 1, probability 0, space 0, times 0 [ 571.025573][T29833] CPU: 0 UID: 0 PID: 29833 Comm: syz.2.13942 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 571.025610][T29833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 571.025626][T29833] Call Trace: [ 571.025635][T29833] [ 571.025644][T29833] __dump_stack+0x21/0x30 [ 571.025682][T29833] dump_stack_lvl+0x10c/0x190 [ 571.025713][T29833] ? __cfi_dump_stack_lvl+0x10/0x10 [ 571.025745][T29833] ? proc_tid_base_lookup+0x2f/0x40 [ 571.025786][T29833] ? do_filp_open+0x1c6/0x3e0 [ 571.025814][T29833] ? do_sys_openat2+0x12c/0x1c0 [ 571.025844][T29833] ? __x64_sys_openat+0x13a/0x170 [ 571.025875][T29833] ? do_syscall_64+0x58/0xf0 [ 571.025905][T29833] dump_stack+0x19/0x20 [ 571.025934][T29833] should_fail_ex+0x3d9/0x530 [ 571.025958][T29833] should_failslab+0xac/0x100 [ 571.025982][T29833] kmem_cache_alloc_noprof+0x42/0x430 [ 571.026004][T29833] ? __asan_memcpy+0x5a/0x80 [ 571.026023][T29833] ? vm_area_dup+0x42/0x570 [ 571.026047][T29833] vm_area_dup+0x42/0x570 [ 571.026071][T29833] __split_vma+0x1bd/0xa80 [ 571.026095][T29833] ? kasan_save_alloc_info+0x40/0x50 [ 571.026128][T29833] ? vms_gather_munmap_vmas+0xdd0/0xdd0 [ 571.026167][T29833] vms_gather_munmap_vmas+0x273/0xdd0 [ 571.026194][T29833] mmap_region+0x598/0x1bc0 [ 571.026216][T29833] ? __cfi_mmap_region+0x10/0x10 [ 571.026239][T29833] ? __kasan_check_read+0x15/0x20 [ 571.026271][T29833] ? arch_get_unmapped_area_topdown+0x232/0x8d0 [ 571.026299][T29833] ? file_mmap_ok+0x147/0x1a0 [ 571.026329][T29833] do_mmap+0xb6d/0x13c0 [ 571.026350][T29833] ? __cfi_do_mmap+0x10/0x10 [ 571.026369][T29833] ? down_write_killable+0xe9/0x2d0 [ 571.026393][T29833] ? __cfi_down_write_killable+0x10/0x10 [ 571.026419][T29833] vm_mmap_pgoff+0x38f/0x4e0 [ 571.026442][T29833] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 571.026462][T29833] ? __fget_files+0x2c5/0x340 [ 571.026487][T29833] ksys_mmap_pgoff+0x166/0x1e0 [ 571.026507][T29833] __x64_sys_mmap+0x121/0x140 [ 571.026541][T29833] x64_sys_call+0x13bf/0x2ee0 [ 571.026572][T29833] do_syscall_64+0x58/0xf0 [ 571.026599][T29833] ? clear_bhb_loop+0x50/0xa0 [ 571.026624][T29833] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 571.026648][T29833] RIP: 0033:0x7fbf5b18f6c9 [ 571.026666][T29833] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.026687][T29833] RSP: 002b:00007fbf5c060038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 571.026712][T29833] RAX: ffffffffffffffda RBX: 00007fbf5b3e5fa0 RCX: 00007fbf5b18f6c9 [ 571.026730][T29833] RDX: 0000000000000000 RSI: 0000000000001000 RDI: 0000200000701000 [ 571.026746][T29833] RBP: 00007fbf5c060090 R08: 0000000000000008 R09: 0000000000000000 [ 571.026761][T29833] R10: 0000000000000012 R11: 0000000000000246 R12: 0000000000000001 [ 571.026775][T29833] R13: 00007fbf5b3e6038 R14: 00007fbf5b3e5fa0 R15: 00007ffd49a22b58 [ 571.026795][T29833] [ 571.607677][T29859] netlink: 'syz.0.13954': attribute type 4 has an invalid length. [ 571.748319][T29884] fuseblk: Bad value for 'group_id' [ 571.753659][T29884] fuseblk: Bad value for 'group_id' [ 571.765905][T29887] FAULT_INJECTION: forcing a failure. [ 571.765905][T29887] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 571.770239][T29884] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 571.779200][T29887] CPU: 1 UID: 0 PID: 29887 Comm: syz.0.13968 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 571.779239][T29887] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 571.779257][T29887] Call Trace: [ 571.779267][T29887] [ 571.779279][T29887] __dump_stack+0x21/0x30 [ 571.779337][T29887] dump_stack_lvl+0x10c/0x190 [ 571.779371][T29887] ? __cfi_dump_stack_lvl+0x10/0x10 [ 571.779407][T29887] ? kstrtoull+0x13b/0x1e0 [ 571.779430][T29887] dump_stack+0x19/0x20 [ 571.779463][T29887] should_fail_ex+0x3d9/0x530 [ 571.779489][T29887] should_fail+0xf/0x20 [ 571.779514][T29887] should_fail_usercopy+0x1e/0x30 [ 571.779542][T29887] _copy_from_user+0x22/0xb0 [ 571.779583][T29887] ___sys_sendmsg+0x159/0x2a0 [ 571.779627][T29887] ? __sys_sendmsg+0x280/0x280 [ 571.779665][T29887] ? proc_fail_nth_write+0x17e/0x210 [ 571.779700][T29887] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 571.779742][T29887] __x64_sys_sendmsg+0x1eb/0x2c0 [ 571.779780][T29887] ? fput+0x1a5/0x240 [ 571.779812][T29887] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 571.779850][T29887] ? ksys_write+0x1ef/0x250 [ 571.779877][T29887] ? __kasan_check_read+0x15/0x20 [ 571.779918][T29887] x64_sys_call+0x2a4c/0x2ee0 [ 571.779956][T29887] do_syscall_64+0x58/0xf0 [ 571.779990][T29887] ? clear_bhb_loop+0x50/0xa0 [ 571.780019][T29887] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 571.780056][T29887] RIP: 0033:0x7f817178f6c9 [ 571.780076][T29887] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 571.780101][T29887] RSP: 002b:00007f817257a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 571.780129][T29887] RAX: ffffffffffffffda RBX: 00007f81719e5fa0 RCX: 00007f817178f6c9 [ 571.780151][T29887] RDX: 00000000000000c4 RSI: 00002000000000c0 RDI: 0000000000000005 [ 571.780170][T29887] RBP: 00007f817257a090 R08: 0000000000000000 R09: 0000000000000000 [ 571.780188][T29887] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 571.780203][T29887] R13: 00007f81719e6038 R14: 00007f81719e5fa0 R15: 00007fff905a49d8 [ 571.780226][T29887] [ 571.805894][T29890] 9pnet_fd: Insufficient options for proto=fd [ 571.812223][T29884] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 572.241443][T29922] FAULT_INJECTION: forcing a failure. [ 572.241443][T29922] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.264892][T29922] CPU: 1 UID: 0 PID: 29922 Comm: syz.1.13985 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 572.264929][T29922] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 572.264944][T29922] Call Trace: [ 572.264952][T29922] [ 572.264962][T29922] __dump_stack+0x21/0x30 [ 572.264996][T29922] dump_stack_lvl+0x10c/0x190 [ 572.265032][T29922] ? __cfi_dump_stack_lvl+0x10/0x10 [ 572.265063][T29922] ? kstrtoull+0x13b/0x1e0 [ 572.265083][T29922] dump_stack+0x19/0x20 [ 572.265112][T29922] should_fail_ex+0x3d9/0x530 [ 572.265135][T29922] should_fail+0xf/0x20 [ 572.265156][T29922] should_fail_usercopy+0x1e/0x30 [ 572.265199][T29922] _copy_from_user+0x22/0xb0 [ 572.265226][T29922] ___sys_sendmsg+0x159/0x2a0 [ 572.265262][T29922] ? __sys_sendmsg+0x280/0x280 [ 572.265295][T29922] ? proc_fail_nth_write+0x17e/0x210 [ 572.265326][T29922] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 572.265364][T29922] __x64_sys_sendmsg+0x1eb/0x2c0 [ 572.265395][T29922] ? fput+0x1a5/0x240 [ 572.265421][T29922] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 572.265453][T29922] ? ksys_write+0x1ef/0x250 [ 572.265476][T29922] ? __kasan_check_read+0x15/0x20 [ 572.265512][T29922] x64_sys_call+0x2a4c/0x2ee0 [ 572.265546][T29922] do_syscall_64+0x58/0xf0 [ 572.265576][T29922] ? clear_bhb_loop+0x50/0xa0 [ 572.265603][T29922] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 572.265628][T29922] RIP: 0033:0x7f0df2f8f6c9 [ 572.265648][T29922] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.265670][T29922] RSP: 002b:00007f0df3dcd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.265695][T29922] RAX: ffffffffffffffda RBX: 00007f0df31e5fa0 RCX: 00007f0df2f8f6c9 [ 572.265714][T29922] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 572.265730][T29922] RBP: 00007f0df3dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 572.265746][T29922] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.265762][T29922] R13: 00007f0df31e6038 R14: 00007f0df31e5fa0 R15: 00007fff99bb5b58 [ 572.265783][T29922] [ 572.620547][T29929] netlink: 'syz.3.13990': attribute type 4 has an invalid length. [ 572.696137][T29939] FAULT_INJECTION: forcing a failure. [ 572.696137][T29939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 572.740812][T29939] CPU: 0 UID: 0 PID: 29939 Comm: syz.3.13996 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 572.740847][T29939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 572.740860][T29939] Call Trace: [ 572.740866][T29939] [ 572.740875][T29939] __dump_stack+0x21/0x30 [ 572.740908][T29939] dump_stack_lvl+0x10c/0x190 [ 572.740935][T29939] ? __cfi_dump_stack_lvl+0x10/0x10 [ 572.740963][T29939] ? kstrtoull+0x13b/0x1e0 [ 572.740982][T29939] dump_stack+0x19/0x20 [ 572.741008][T29939] should_fail_ex+0x3d9/0x530 [ 572.741037][T29939] should_fail+0xf/0x20 [ 572.741057][T29939] should_fail_usercopy+0x1e/0x30 [ 572.741079][T29939] _copy_from_user+0x22/0xb0 [ 572.741105][T29939] ___sys_sendmsg+0x159/0x2a0 [ 572.741136][T29939] ? __sys_sendmsg+0x280/0x280 [ 572.741168][T29939] ? proc_fail_nth_write+0x17e/0x210 [ 572.741196][T29939] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 572.741231][T29939] __x64_sys_sendmsg+0x1eb/0x2c0 [ 572.741261][T29939] ? fput+0x1a5/0x240 [ 572.741287][T29939] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 572.741317][T29939] ? ksys_write+0x1ef/0x250 [ 572.741339][T29939] ? __kasan_check_read+0x15/0x20 [ 572.741370][T29939] x64_sys_call+0x2a4c/0x2ee0 [ 572.741400][T29939] do_syscall_64+0x58/0xf0 [ 572.741426][T29939] ? clear_bhb_loop+0x50/0xa0 [ 572.741450][T29939] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 572.741483][T29939] RIP: 0033:0x7fe4a778f6c9 [ 572.741500][T29939] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 572.741517][T29939] RSP: 002b:00007fe4a8601038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 572.741539][T29939] RAX: ffffffffffffffda RBX: 00007fe4a79e5fa0 RCX: 00007fe4a778f6c9 [ 572.741573][T29939] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000007 [ 572.741588][T29939] RBP: 00007fe4a8601090 R08: 0000000000000000 R09: 0000000000000000 [ 572.741602][T29939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 572.741614][T29939] R13: 00007fe4a79e6038 R14: 00007fe4a79e5fa0 R15: 00007ffead6245d8 [ 572.741633][T29939] [ 573.178515][ T36] audit: type=1400 audit(1763472219.500:211): avc: denied { compute_member } for pid=29958 comm="syz.2.14004" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 573.410812][ T45] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 573.540837][ T45] usb 3-1: device descriptor read/64, error -71 [ 573.581880][T29976] FAULT_INJECTION: forcing a failure. [ 573.581880][T29976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 573.595038][T29976] CPU: 0 UID: 0 PID: 29976 Comm: syz.3.14011 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 573.595075][T29976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 573.595086][T29976] Call Trace: [ 573.595091][T29976] [ 573.595098][T29976] __dump_stack+0x21/0x30 [ 573.595124][T29976] dump_stack_lvl+0x10c/0x190 [ 573.595146][T29976] ? __cfi_dump_stack_lvl+0x10/0x10 [ 573.595168][T29976] ? check_stack_object+0x12c/0x140 [ 573.595185][T29976] dump_stack+0x19/0x20 [ 573.595205][T29976] should_fail_ex+0x3d9/0x530 [ 573.595230][T29976] should_fail+0xf/0x20 [ 573.595244][T29976] should_fail_usercopy+0x1e/0x30 [ 573.595261][T29976] _copy_to_user+0x24/0xa0 [ 573.595282][T29976] simple_read_from_buffer+0xed/0x160 [ 573.595304][T29976] proc_fail_nth_read+0x19e/0x210 [ 573.595326][T29976] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 573.595348][T29976] ? bpf_lsm_file_permission+0xd/0x20 [ 573.595370][T29976] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 573.595392][T29976] vfs_read+0x27d/0xc70 [ 573.595407][T29976] ? __cfi_vfs_read+0x10/0x10 [ 573.595421][T29976] ? __kasan_check_write+0x18/0x20 [ 573.595445][T29976] ? mutex_lock+0x92/0x1c0 [ 573.595460][T29976] ? __cfi_mutex_lock+0x10/0x10 [ 573.595474][T29976] ? __fget_files+0x2c5/0x340 [ 573.595493][T29976] ksys_read+0x141/0x250 [ 573.595507][T29976] ? __cfi_ksys_read+0x10/0x10 [ 573.595523][T29976] ? __kasan_check_read+0x15/0x20 [ 573.595547][T29976] __x64_sys_read+0x7f/0x90 [ 573.595562][T29976] x64_sys_call+0x2638/0x2ee0 [ 573.595585][T29976] do_syscall_64+0x58/0xf0 [ 573.595606][T29976] ? clear_bhb_loop+0x50/0xa0 [ 573.595625][T29976] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 573.595642][T29976] RIP: 0033:0x7fe4a778e0dc [ 573.595656][T29976] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 573.595671][T29976] RSP: 002b:00007fe4a8601030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 573.595689][T29976] RAX: ffffffffffffffda RBX: 00007fe4a79e5fa0 RCX: 00007fe4a778e0dc [ 573.595702][T29976] RDX: 000000000000000f RSI: 00007fe4a86010a0 RDI: 0000000000000008 [ 573.595712][T29976] RBP: 00007fe4a8601090 R08: 0000000000000000 R09: 0000000000000000 [ 573.595722][T29976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 573.595732][T29976] R13: 00007fe4a79e6038 R14: 00007fe4a79e5fa0 R15: 00007ffead6245d8 [ 573.595747][T29976] [ 573.800860][ T45] usb 3-1: device descriptor read/64, error -71 [ 573.926751][T29990] 9pnet_fd: Insufficient options for proto=fd [ 573.948826][T29994] netlink: 'syz.0.14019': attribute type 4 has an invalid length. [ 574.080835][ T45] usb 3-1: new high-speed USB device number 14 using dummy_hcd [ 574.203832][T30017] 9pnet_fd: Insufficient options for proto=fd [ 574.211063][ T45] usb 3-1: device descriptor read/64, error -71 [ 574.470952][ T45] usb 3-1: device descriptor read/64, error -71 [ 574.581312][ T45] usb usb3-port1: attempt power cycle [ 574.725124][T30059] FAULT_INJECTION: forcing a failure. [ 574.725124][T30059] name failslab, interval 1, probability 0, space 0, times 0 [ 574.737846][T30059] CPU: 1 UID: 0 PID: 30059 Comm: syz.0.14050 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 574.737884][T30059] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 574.737898][T30059] Call Trace: [ 574.737907][T30059] [ 574.737916][T30059] __dump_stack+0x21/0x30 [ 574.737962][T30059] dump_stack_lvl+0x10c/0x190 [ 574.737993][T30059] ? __cfi_dump_stack_lvl+0x10/0x10 [ 574.738024][T30059] ? __kasan_check_write+0x18/0x20 [ 574.738059][T30059] ? proc_fail_nth_write+0x17e/0x210 [ 574.738089][T30059] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 574.738120][T30059] dump_stack+0x19/0x20 [ 574.738149][T30059] should_fail_ex+0x3d9/0x530 [ 574.738173][T30059] should_failslab+0xac/0x100 [ 574.738198][T30059] kmem_cache_alloc_noprof+0x42/0x430 [ 574.738220][T30059] ? getname_flags+0xc6/0x710 [ 574.738244][T30059] getname_flags+0xc6/0x710 [ 574.738265][T30059] ? build_open_flags+0x487/0x600 [ 574.738295][T30059] getname+0x1b/0x30 [ 574.738316][T30059] do_sys_openat2+0xcb/0x1c0 [ 574.738345][T30059] ? fput+0x1a5/0x240 [ 574.738371][T30059] ? do_sys_open+0x100/0x100 [ 574.738399][T30059] ? ksys_write+0x1ef/0x250 [ 574.738420][T30059] ? __cfi_ksys_write+0x10/0x10 [ 574.738442][T30059] __x64_sys_openat+0x13a/0x170 [ 574.738473][T30059] x64_sys_call+0xe69/0x2ee0 [ 574.738505][T30059] do_syscall_64+0x58/0xf0 [ 574.738534][T30059] ? clear_bhb_loop+0x50/0xa0 [ 574.738558][T30059] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 574.738583][T30059] RIP: 0033:0x7f817178f6c9 [ 574.738601][T30059] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 574.738620][T30059] RSP: 002b:00007f817257a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 574.738646][T30059] RAX: ffffffffffffffda RBX: 00007f81719e5fa0 RCX: 00007f817178f6c9 [ 574.738664][T30059] RDX: 00000000000a2f01 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 574.738681][T30059] RBP: 00007f817257a090 R08: 0000000000000000 R09: 0000000000000000 [ 574.738696][T30059] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 574.738710][T30059] R13: 00007f81719e6038 R14: 00007f81719e5fa0 R15: 00007fff905a49d8 [ 574.738731][T30059] [ 575.020882][ T45] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 575.043014][ T45] usb 3-1: device descriptor read/8, error -71 [ 575.133507][T30069] netlink: 'syz.0.14055': attribute type 4 has an invalid length. [ 575.171982][ T45] usb 3-1: device descriptor read/8, error -71 [ 575.410841][ T45] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 575.431923][ T45] usb 3-1: device descriptor read/8, error -71 [ 575.463702][ T36] audit: type=1400 audit(1763472221.790:212): avc: denied { getopt } for pid=30092 comm="syz.0.14066" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 575.562209][ T45] usb 3-1: device descriptor read/8, error -71 [ 575.671336][ T45] usb usb3-port1: unable to enumerate USB device [ 575.812470][T30119] FAULT_INJECTION: forcing a failure. [ 575.812470][T30119] name failslab, interval 1, probability 0, space 0, times 0 [ 575.825271][T30119] CPU: 0 UID: 0 PID: 30119 Comm: syz.0.14079 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 575.825310][T30119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 575.825326][T30119] Call Trace: [ 575.825335][T30119] [ 575.825345][T30119] __dump_stack+0x21/0x30 [ 575.825381][T30119] dump_stack_lvl+0x10c/0x190 [ 575.825412][T30119] ? __cfi_dump_stack_lvl+0x10/0x10 [ 575.825443][T30119] ? __kasan_check_write+0x18/0x20 [ 575.825478][T30119] ? proc_fail_nth_write+0x17e/0x210 [ 575.825508][T30119] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 575.825539][T30119] dump_stack+0x19/0x20 [ 575.825568][T30119] should_fail_ex+0x3d9/0x530 [ 575.825592][T30119] should_failslab+0xac/0x100 [ 575.825618][T30119] kmem_cache_alloc_noprof+0x42/0x430 [ 575.825640][T30119] ? getname_flags+0xc6/0x710 [ 575.825664][T30119] getname_flags+0xc6/0x710 [ 575.825687][T30119] ? build_open_flags+0x487/0x600 [ 575.825718][T30119] getname+0x1b/0x30 [ 575.825739][T30119] do_sys_openat2+0xcb/0x1c0 [ 575.825768][T30119] ? fput+0x1a5/0x240 [ 575.825796][T30119] ? do_sys_open+0x100/0x100 [ 575.825824][T30119] ? ksys_write+0x1ef/0x250 [ 575.825846][T30119] ? __cfi_ksys_write+0x10/0x10 [ 575.825867][T30119] __x64_sys_openat+0x13a/0x170 [ 575.825899][T30119] x64_sys_call+0xe69/0x2ee0 [ 575.825932][T30119] do_syscall_64+0x58/0xf0 [ 575.825962][T30119] ? clear_bhb_loop+0x50/0xa0 [ 575.825988][T30119] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 575.826012][T30119] RIP: 0033:0x7f817178f6c9 [ 575.826032][T30119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 575.826051][T30119] RSP: 002b:00007f817257a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 575.826077][T30119] RAX: ffffffffffffffda RBX: 00007f81719e5fa0 RCX: 00007f817178f6c9 [ 575.826096][T30119] RDX: 00000000000a2f01 RSI: 00002000000001c0 RDI: ffffffffffffff9c [ 575.826112][T30119] RBP: 00007f817257a090 R08: 0000000000000000 R09: 0000000000000000 [ 575.826128][T30119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 575.826153][T30119] R13: 00007f81719e6038 R14: 00007f81719e5fa0 R15: 00007fff905a49d8 [ 575.826174][T30119] [ 576.396157][T30143] FAULT_INJECTION: forcing a failure. [ 576.396157][T30143] name failslab, interval 1, probability 0, space 0, times 0 [ 576.408894][T30143] CPU: 1 UID: 0 PID: 30143 Comm: syz.0.14091 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 576.408935][T30143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 576.408950][T30143] Call Trace: [ 576.408959][T30143] [ 576.408968][T30143] __dump_stack+0x21/0x30 [ 576.409007][T30143] dump_stack_lvl+0x10c/0x190 [ 576.409038][T30143] ? __cfi_dump_stack_lvl+0x10/0x10 [ 576.409071][T30143] ? __kasan_check_write+0x18/0x20 [ 576.409107][T30143] ? proc_fail_nth_write+0x17e/0x210 [ 576.409163][T30143] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 576.409193][T30143] dump_stack+0x19/0x20 [ 576.409223][T30143] should_fail_ex+0x3d9/0x530 [ 576.409248][T30143] should_failslab+0xac/0x100 [ 576.409274][T30143] kmem_cache_alloc_noprof+0x42/0x430 [ 576.409294][T30143] ? getname_flags+0xc6/0x710 [ 576.409318][T30143] getname_flags+0xc6/0x710 [ 576.409340][T30143] ? build_open_flags+0x487/0x600 [ 576.409371][T30143] getname+0x1b/0x30 [ 576.409393][T30143] do_sys_openat2+0xcb/0x1c0 [ 576.409421][T30143] ? fput+0x1a5/0x240 [ 576.409448][T30143] ? do_sys_open+0x100/0x100 [ 576.409473][T30143] ? ksys_write+0x1ef/0x250 [ 576.409492][T30143] ? __cfi_ksys_write+0x10/0x10 [ 576.409512][T30143] __x64_sys_openat+0x13a/0x170 [ 576.409542][T30143] x64_sys_call+0xe69/0x2ee0 [ 576.409575][T30143] do_syscall_64+0x58/0xf0 [ 576.409605][T30143] ? clear_bhb_loop+0x50/0xa0 [ 576.409630][T30143] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 576.409652][T30143] RIP: 0033:0x7f817178df10 [ 576.409670][T30143] Code: 48 89 44 24 20 75 93 44 89 54 24 0c e8 69 95 02 00 44 8b 54 24 0c 89 da 48 89 ee 41 89 c0 bf 9c ff ff ff b8 01 01 00 00 0f 05 <48> 3d 00 f0 ff ff 77 38 44 89 c7 89 44 24 0c e8 bc 95 02 00 8b 44 [ 576.409690][T30143] RSP: 002b:00007f8172579f10 EFLAGS: 00000293 ORIG_RAX: 0000000000000101 [ 576.409715][T30143] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007f817178df10 [ 576.409731][T30143] RDX: 0000000000000002 RSI: 00007f8172579fa0 RDI: 00000000ffffff9c [ 576.409746][T30143] RBP: 00007f8172579fa0 R08: 0000000000000000 R09: 0000000000000000 [ 576.409761][T30143] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 576.409775][T30143] R13: 00007f81719e6038 R14: 00007f81719e5fa0 R15: 00007fff905a49d8 [ 576.409794][T30143] [ 577.250981][T30077] Bluetooth: hci0: command 0x1003 tx timeout [ 577.257142][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 577.325171][ T12] bridge_slave_1: left allmulticast mode [ 577.341235][ T12] bridge_slave_1: left promiscuous mode [ 577.347049][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.365094][ T12] bridge_slave_0: left allmulticast mode [ 577.374702][ T12] bridge_slave_0: left promiscuous mode [ 577.380392][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.543674][ T12] veth1_macvtap: left promiscuous mode [ 577.549267][ T12] veth0_vlan: left promiscuous mode [ 577.696355][T30182] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.705199][T30182] bridge0: port 1(bridge_slave_0) entered disabled state [ 577.715912][T30182] bridge_slave_0: entered allmulticast mode [ 577.722584][T30182] bridge_slave_0: entered promiscuous mode [ 577.731330][T30182] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.738508][T30182] bridge0: port 2(bridge_slave_1) entered disabled state [ 577.746143][T30182] bridge_slave_1: entered allmulticast mode [ 577.753271][T30182] bridge_slave_1: entered promiscuous mode [ 577.845576][T30182] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.852756][T30182] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.860127][T30182] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.867256][T30182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.938106][T30182] veth0_vlan: entered promiscuous mode [ 577.954259][T30182] veth1_macvtap: entered promiscuous mode [ 578.012713][ T36] audit: type=1400 audit(1763472224.340:213): avc: denied { create } for pid=30223 comm="syz.2.14124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 578.050834][ T36] audit: type=1400 audit(1763472224.360:214): avc: denied { setopt } for pid=30223 comm="syz.2.14124" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 579.385128][ T36] audit: type=1400 audit(1763472225.710:215): avc: denied { setopt } for pid=30321 comm="syz.2.14171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 579.404974][ T36] audit: type=1400 audit(1763472225.710:216): avc: denied { ioctl } for pid=30321 comm="syz.2.14171" path="anon_inode:[userfaultfd]" dev="anon_inodefs" ino=168665 ioctlcmd=0xaa3f scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=1 [ 580.702626][ T36] audit: type=1326 audit(1763472227.030:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30408 comm="syz.3.14215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a778f6c9 code=0x7ffc0000 [ 580.760795][ T36] audit: type=1326 audit(1763472227.060:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30408 comm="syz.3.14215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a778f6c9 code=0x7ffc0000 [ 580.810802][ T36] audit: type=1326 audit(1763472227.060:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30408 comm="syz.3.14215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fe4a778f6c9 code=0x7ffc0000 [ 580.860789][ T36] audit: type=1326 audit(1763472227.060:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30408 comm="syz.3.14215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a778f6c9 code=0x7ffc0000 [ 580.905188][ T36] audit: type=1326 audit(1763472227.060:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30408 comm="syz.3.14215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a778f6c9 code=0x7ffc0000 [ 580.955584][ T36] audit: type=1326 audit(1763472227.060:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30408 comm="syz.3.14215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fe4a778f6c9 code=0x7ffc0000 [ 581.010384][ T36] audit: type=1326 audit(1763472227.060:223): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30408 comm="syz.3.14215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a778f6c9 code=0x7ffc0000 [ 581.050852][ T36] audit: type=1326 audit(1763472227.060:224): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=30408 comm="syz.3.14215" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe4a778f6c9 code=0x7ffc0000 [ 581.806056][T30450] FAULT_INJECTION: forcing a failure. [ 581.806056][T30450] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 581.819383][T30450] CPU: 1 UID: 0 PID: 30450 Comm: syz.1.14236 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 581.819420][T30450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 581.819434][T30450] Call Trace: [ 581.819442][T30450] [ 581.819451][T30450] __dump_stack+0x21/0x30 [ 581.819488][T30450] dump_stack_lvl+0x10c/0x190 [ 581.819518][T30450] ? __cfi_dump_stack_lvl+0x10/0x10 [ 581.819548][T30450] ? proc_fail_nth_write+0x17e/0x210 [ 581.819580][T30450] ? check_stack_object+0x107/0x140 [ 581.819603][T30450] dump_stack+0x19/0x20 [ 581.819631][T30450] should_fail_ex+0x3d9/0x530 [ 581.819656][T30450] should_fail+0xf/0x20 [ 581.819677][T30450] should_fail_usercopy+0x1e/0x30 [ 581.819702][T30450] _copy_from_user+0x22/0xb0 [ 581.819738][T30450] __tun_chr_ioctl+0x1f2/0x1f10 [ 581.819765][T30450] ? __kasan_check_write+0x18/0x20 [ 581.819800][T30450] ? tun_flow_create+0x410/0x410 [ 581.819824][T30450] ? __fget_files+0x2c5/0x340 [ 581.819850][T30450] ? __fget_files+0x2c5/0x340 [ 581.819875][T30450] tun_chr_ioctl+0x2e/0x40 [ 581.819898][T30450] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 581.819920][T30450] __se_sys_ioctl+0x135/0x1b0 [ 581.819946][T30450] __x64_sys_ioctl+0x7f/0xa0 [ 581.819970][T30450] x64_sys_call+0x1878/0x2ee0 [ 581.820004][T30450] do_syscall_64+0x58/0xf0 [ 581.820032][T30450] ? clear_bhb_loop+0x50/0xa0 [ 581.820058][T30450] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 581.820081][T30450] RIP: 0033:0x7f0df2f8f6c9 [ 581.820100][T30450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 581.820120][T30450] RSP: 002b:00007f0df3dcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 581.820145][T30450] RAX: ffffffffffffffda RBX: 00007f0df31e5fa0 RCX: 00007f0df2f8f6c9 [ 581.820163][T30450] RDX: 00002000000000c0 RSI: 00000000400454ca RDI: 0000000000000008 [ 581.820179][T30450] RBP: 00007f0df3dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 581.820195][T30450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 581.820209][T30450] R13: 00007f0df31e6038 R14: 00007f0df31e5fa0 R15: 00007fff99bb5b58 [ 581.820229][T30450] [ 583.142537][T30519] netlink: 'syz.1.14269': attribute type 4 has an invalid length. [ 584.545470][T30654] FAULT_INJECTION: forcing a failure. [ 584.545470][T30654] name failslab, interval 1, probability 0, space 0, times 0 [ 584.558367][T30654] CPU: 1 UID: 0 PID: 30654 Comm: syz.1.14337 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 584.558405][T30654] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 584.558419][T30654] Call Trace: [ 584.558427][T30654] [ 584.558436][T30654] __dump_stack+0x21/0x30 [ 584.558471][T30654] dump_stack_lvl+0x10c/0x190 [ 584.558501][T30654] ? __cfi_dump_stack_lvl+0x10/0x10 [ 584.558530][T30654] ? __kasan_check_write+0x18/0x20 [ 584.558574][T30654] ? proc_fail_nth_write+0x17e/0x210 [ 584.558604][T30654] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 584.558634][T30654] dump_stack+0x19/0x20 [ 584.558661][T30654] should_fail_ex+0x3d9/0x530 [ 584.558684][T30654] should_failslab+0xac/0x100 [ 584.558708][T30654] kmem_cache_alloc_noprof+0x42/0x430 [ 584.558728][T30654] ? getname_flags+0xc6/0x710 [ 584.558752][T30654] getname_flags+0xc6/0x710 [ 584.558772][T30654] ? build_open_flags+0x487/0x600 [ 584.558802][T30654] getname+0x1b/0x30 [ 584.558822][T30654] do_sys_openat2+0xcb/0x1c0 [ 584.558851][T30654] ? fput+0x1a5/0x240 [ 584.558878][T30654] ? do_sys_open+0x100/0x100 [ 584.558908][T30654] ? ksys_write+0x1ef/0x250 [ 584.558929][T30654] ? __cfi_ksys_write+0x10/0x10 [ 584.558952][T30654] __x64_sys_openat+0x13a/0x170 [ 584.558984][T30654] x64_sys_call+0xe69/0x2ee0 [ 584.559017][T30654] do_syscall_64+0x58/0xf0 [ 584.559046][T30654] ? clear_bhb_loop+0x50/0xa0 [ 584.559072][T30654] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 584.559095][T30654] RIP: 0033:0x7f0df2f8f6c9 [ 584.559114][T30654] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 584.559135][T30654] RSP: 002b:00007f0df3dcd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 584.559159][T30654] RAX: ffffffffffffffda RBX: 00007f0df31e5fa0 RCX: 00007f0df2f8f6c9 [ 584.559177][T30654] RDX: 000000000000275a RSI: 0000200000000280 RDI: ffffffffffffff9c [ 584.559193][T30654] RBP: 00007f0df3dcd090 R08: 0000000000000000 R09: 0000000000000000 [ 584.559207][T30654] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 584.559222][T30654] R13: 00007f0df31e6038 R14: 00007f0df31e5fa0 R15: 00007fff99bb5b58 [ 584.559242][T30654] [ 584.940292][T30670] netlink: 'syz.1.14344': attribute type 4 has an invalid length. [ 585.448436][T30716] netlink: 'syz.0.14367': attribute type 4 has an invalid length. [ 586.593807][T30797] 9pnet_fd: Insufficient options for proto=fd [ 589.520981][T30905] FAULT_INJECTION: forcing a failure. [ 589.520981][T30905] name failslab, interval 1, probability 0, space 0, times 0 [ 589.533858][T30905] CPU: 0 UID: 0 PID: 30905 Comm: syz.3.14458 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 589.533894][T30905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 589.533907][T30905] Call Trace: [ 589.533914][T30905] [ 589.533923][T30905] __dump_stack+0x21/0x30 [ 589.533956][T30905] dump_stack_lvl+0x10c/0x190 [ 589.533978][T30905] ? __cfi_dump_stack_lvl+0x10/0x10 [ 589.534000][T30905] ? __kasan_check_write+0x18/0x20 [ 589.534029][T30905] ? proc_fail_nth_write+0x17e/0x210 [ 589.534052][T30905] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 589.534075][T30905] dump_stack+0x19/0x20 [ 589.534095][T30905] should_fail_ex+0x3d9/0x530 [ 589.534114][T30905] should_failslab+0xac/0x100 [ 589.534132][T30905] kmem_cache_alloc_noprof+0x42/0x430 [ 589.534150][T30905] ? getname_flags+0xc6/0x710 [ 589.534167][T30905] getname_flags+0xc6/0x710 [ 589.534182][T30905] ? build_open_flags+0x487/0x600 [ 589.534217][T30905] getname+0x1b/0x30 [ 589.534232][T30905] do_sys_openat2+0xcb/0x1c0 [ 589.534251][T30905] ? fput+0x1a5/0x240 [ 589.534270][T30905] ? do_sys_open+0x100/0x100 [ 589.534290][T30905] ? ksys_write+0x1ef/0x250 [ 589.534304][T30905] ? __cfi_ksys_write+0x10/0x10 [ 589.534319][T30905] __x64_sys_openat+0x13a/0x170 [ 589.534341][T30905] x64_sys_call+0xe69/0x2ee0 [ 589.534364][T30905] do_syscall_64+0x58/0xf0 [ 589.534393][T30905] ? clear_bhb_loop+0x50/0xa0 [ 589.534413][T30905] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 589.534430][T30905] RIP: 0033:0x7fe4a778f6c9 [ 589.534444][T30905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 589.534458][T30905] RSP: 002b:00007fe4a8601038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 589.534477][T30905] RAX: ffffffffffffffda RBX: 00007fe4a79e5fa0 RCX: 00007fe4a778f6c9 [ 589.534489][T30905] RDX: 0000000000028181 RSI: 0000200000000180 RDI: ffffffffffffff9c [ 589.534501][T30905] RBP: 00007fe4a8601090 R08: 0000000000000000 R09: 0000000000000000 [ 589.534512][T30905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 589.534522][T30905] R13: 00007fe4a79e6038 R14: 00007fe4a79e5fa0 R15: 00007ffead6245d8 [ 589.534537][T30905] [ 589.930276][T30923] 9pnet_fd: Insufficient options for proto=fd [ 590.218718][T30944] 9pnet_fd: Insufficient options for proto=fd [ 590.677752][ T5512] bridge_slave_1: left allmulticast mode [ 590.690433][ T5512] bridge_slave_1: left promiscuous mode [ 590.700895][ T5512] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.710560][ T5512] bridge_slave_0: left allmulticast mode [ 590.716449][ T5512] bridge_slave_0: left promiscuous mode [ 590.723149][ T5512] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.824814][T30984] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.840241][T30984] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.851907][T30984] bridge_slave_0: entered allmulticast mode [ 590.858373][T30984] bridge_slave_0: entered promiscuous mode [ 590.865469][ T5512] veth1_macvtap: left promiscuous mode [ 590.872250][ T5512] veth0_vlan: left promiscuous mode [ 590.960228][T30984] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.969178][T30984] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.982168][T30984] bridge_slave_1: entered allmulticast mode [ 590.992293][T30984] bridge_slave_1: entered promiscuous mode [ 591.087301][T30984] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.094397][T30984] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.101726][T30984] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.108828][T30984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.130331][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.137832][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.152212][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.159307][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.168742][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.175872][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.239639][T30984] veth0_vlan: entered promiscuous mode [ 591.253319][T30984] veth1_macvtap: entered promiscuous mode [ 591.789616][T31057] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.801952][T31057] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.809086][T31057] bridge_slave_0: entered allmulticast mode [ 591.818262][T31057] bridge_slave_0: entered promiscuous mode [ 591.826427][T31057] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.833811][T31057] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.841032][T31057] bridge_slave_1: entered allmulticast mode [ 591.847371][T31057] bridge_slave_1: entered promiscuous mode [ 591.906643][T31057] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.913747][T31057] bridge0: port 2(bridge_slave_1) entered forwarding state [ 591.921065][T31057] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.928112][T31057] bridge0: port 1(bridge_slave_0) entered forwarding state [ 591.971825][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.979877][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.992620][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.999712][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 592.008968][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.016086][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 592.055883][T31057] veth0_vlan: entered promiscuous mode [ 592.069791][T31057] veth1_macvtap: entered promiscuous mode [ 592.141944][ T5512] bridge_slave_1: left allmulticast mode [ 592.147749][ T5512] bridge_slave_1: left promiscuous mode [ 592.164022][ T5512] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.179341][ T5512] bridge_slave_0: left allmulticast mode [ 592.191737][ T5512] bridge_slave_0: left promiscuous mode [ 592.197439][ T5512] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.366251][ T5512] veth1_macvtap: left promiscuous mode [ 592.380990][ T5512] veth0_vlan: left promiscuous mode [ 592.909462][T31121] bridge0: port 1(bridge_slave_0) entered blocking state [ 592.916638][T31121] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.924801][T31121] bridge_slave_0: entered allmulticast mode [ 592.931658][T31121] bridge_slave_0: entered promiscuous mode [ 592.942528][T31121] bridge0: port 2(bridge_slave_1) entered blocking state [ 592.949599][T31121] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.957572][T31121] bridge_slave_1: entered allmulticast mode [ 592.964449][T31121] bridge_slave_1: entered promiscuous mode [ 593.022512][ T5512] bridge_slave_1: left allmulticast mode [ 593.028299][ T5512] bridge_slave_1: left promiscuous mode [ 593.034278][ T5512] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.043441][ T5512] bridge_slave_0: left allmulticast mode [ 593.049163][ T5512] bridge_slave_0: left promiscuous mode [ 593.055418][ T5512] bridge0: port 1(bridge_slave_0) entered disabled state [ 593.200916][ T5512] veth1_macvtap: left promiscuous mode [ 593.210965][ T5512] veth0_vlan: left promiscuous mode [ 593.281415][T31121] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.288529][T31121] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.295878][T31121] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.302959][T31121] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.340962][T31170] 9pnet_fd: Insufficient options for proto=fd [ 593.351259][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 593.363984][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.371080][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 593.406081][T31121] veth0_vlan: entered promiscuous mode [ 593.419575][T31121] veth1_macvtap: entered promiscuous mode [ 596.097544][T31330] 9pnet_fd: Insufficient options for proto=fd [ 596.789815][T31398] netlink: 'syz.2.14681': attribute type 4 has an invalid length. [ 598.836570][T31503] FAULT_INJECTION: forcing a failure. [ 598.836570][T31503] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 598.857367][T31503] CPU: 0 UID: 0 PID: 31503 Comm: syz.0.14740 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 598.857408][T31503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 598.857424][T31503] Call Trace: [ 598.857432][T31503] [ 598.857442][T31503] __dump_stack+0x21/0x30 [ 598.857478][T31503] dump_stack_lvl+0x10c/0x190 [ 598.857508][T31503] ? __cfi_dump_stack_lvl+0x10/0x10 [ 598.857542][T31503] dump_stack+0x19/0x20 [ 598.857571][T31503] should_fail_ex+0x3d9/0x530 [ 598.857595][T31503] should_fail+0xf/0x20 [ 598.857617][T31503] should_fail_usercopy+0x1e/0x30 [ 598.857655][T31503] _copy_from_user+0x22/0xb0 [ 598.857684][T31503] lo_ioctl+0x52c/0x1d50 [ 598.857713][T31503] ? __cfi_lo_ioctl+0x10/0x10 [ 598.857739][T31503] ? stack_depot_save_flags+0x38/0x800 [ 598.857764][T31503] ? stack_trace_save+0x9d/0xe0 [ 598.857797][T31503] ? kasan_save_track+0x4f/0x80 [ 598.857820][T31503] ? kasan_save_track+0x3e/0x80 [ 598.857843][T31503] ? kasan_save_alloc_info+0x40/0x50 [ 598.857874][T31503] ? __kasan_slab_alloc+0x73/0x90 [ 598.857898][T31503] ? kmem_cache_alloc_noprof+0x1cb/0x430 [ 598.857919][T31503] ? security_inode_alloc+0x51/0x200 [ 598.857951][T31503] ? inode_init_always_gfp+0x756/0x9e0 [ 598.857975][T31503] ? alloc_inode+0xc5/0x270 [ 598.858010][T31503] ? new_inode+0x25/0x1e0 [ 598.858033][T31503] ? proc_pid_make_inode+0x25/0x140 [ 598.858056][T31503] ? proc_pident_instantiate+0x6d/0x2c0 [ 598.858079][T31503] ? proc_pident_lookup+0x1c7/0x270 [ 598.858103][T31503] ? proc_tid_base_lookup+0x2f/0x40 [ 598.858132][T31503] ? path_openat+0x1301/0x34b0 [ 598.858158][T31503] ? do_filp_open+0x1c6/0x3e0 [ 598.858184][T31503] ? do_sys_openat2+0x12c/0x1c0 [ 598.858212][T31503] ? __x64_sys_openat+0x13a/0x170 [ 598.858241][T31503] ? x64_sys_call+0xe69/0x2ee0 [ 598.858272][T31503] ? do_syscall_64+0x58/0xf0 [ 598.858299][T31503] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 598.858326][T31503] ? avc_has_perm_noaudit+0x268/0x360 [ 598.858358][T31503] ? __asan_memcpy+0x5a/0x80 [ 598.858379][T31503] ? avc_has_perm_noaudit+0x286/0x360 [ 598.858412][T31503] ? avc_has_perm+0x144/0x220 [ 598.858442][T31503] ? __cfi_avc_has_perm+0x10/0x10 [ 598.858473][T31503] ? kasan_save_alloc_info+0x40/0x50 [ 598.858507][T31503] ? selinux_file_open+0x457/0x610 [ 598.858535][T31503] ? __cfi_selinux_file_open+0x10/0x10 [ 598.858566][T31503] ? avc_has_extended_perms+0x7c7/0xdd0 [ 598.858598][T31503] ? __asan_memcpy+0x5a/0x80 [ 598.858619][T31503] ? avc_has_extended_perms+0x921/0xdd0 [ 598.858653][T31503] ? do_vfs_ioctl+0xeda/0x1e30 [ 598.858677][T31503] ? arch_stack_walk+0x10b/0x170 [ 598.858699][T31503] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 598.858726][T31503] ? _parse_integer+0x2e/0x40 [ 598.858762][T31503] ? blkdev_common_ioctl+0x10e4/0x2810 [ 598.858795][T31503] ? blkdev_bszset+0x220/0x220 [ 598.858827][T31503] ? has_cap_mac_admin+0xd0/0xd0 [ 598.858855][T31503] ? proc_fail_nth_write+0x17e/0x210 [ 598.858890][T31503] ? __kasan_check_write+0x18/0x20 [ 598.858922][T31503] ? mutex_unlock+0x8b/0x240 [ 598.858942][T31503] ? __cfi_mutex_unlock+0x10/0x10 [ 598.858960][T31503] ? __fget_files+0x2c5/0x340 [ 598.858982][T31503] ? __cfi_lo_ioctl+0x10/0x10 [ 598.859017][T31503] blkdev_ioctl+0x546/0x680 [ 598.859046][T31503] ? __cfi_blkdev_ioctl+0x10/0x10 [ 598.859075][T31503] ? bpf_lsm_file_ioctl+0xd/0x20 [ 598.859105][T31503] ? security_file_ioctl+0x34/0xd0 [ 598.859130][T31503] ? __cfi_blkdev_ioctl+0x10/0x10 [ 598.859159][T31503] __se_sys_ioctl+0x135/0x1b0 [ 598.859183][T31503] __x64_sys_ioctl+0x7f/0xa0 [ 598.859208][T31503] x64_sys_call+0x1878/0x2ee0 [ 598.859239][T31503] do_syscall_64+0x58/0xf0 [ 598.859267][T31503] ? clear_bhb_loop+0x50/0xa0 [ 598.859290][T31503] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 598.859314][T31503] RIP: 0033:0x7f18eef8f6c9 [ 598.859332][T31503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 598.859353][T31503] RSP: 002b:00007f18efef5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 598.859378][T31503] RAX: ffffffffffffffda RBX: 00007f18ef1e5fa0 RCX: 00007f18eef8f6c9 [ 598.859396][T31503] RDX: 00002000000004c0 RSI: 0000000000004c0a RDI: 0000000000000007 [ 598.859411][T31503] RBP: 00007f18efef5090 R08: 0000000000000000 R09: 0000000000000000 [ 598.859425][T31503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 598.859440][T31503] R13: 00007f18ef1e6038 R14: 00007f18ef1e5fa0 R15: 00007ffeae9cf168 [ 598.859459][T31503] [ 599.527990][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 599.792297][ T36] kauditd_printk_skb: 54 callbacks suppressed [ 599.792317][ T36] audit: type=1400 audit(1763472246.110:279): avc: denied { bind } for pid=31574 comm="syz.3.14775" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 600.186983][ T36] audit: type=1400 audit(1763472246.510:280): avc: denied { create } for pid=31613 comm="syz.3.14794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 600.545804][T31636] 9pnet_fd: Insufficient options for proto=fd [ 601.571745][T30077] Bluetooth: hci0: command 0x1003 tx timeout [ 601.577918][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 602.194113][T31705] FAULT_INJECTION: forcing a failure. [ 602.194113][T31705] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 602.220804][T31705] CPU: 1 UID: 0 PID: 31705 Comm: syz.3.14839 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 602.220840][T31705] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 602.220856][T31705] Call Trace: [ 602.220867][T31705] [ 602.220876][T31705] __dump_stack+0x21/0x30 [ 602.220911][T31705] dump_stack_lvl+0x10c/0x190 [ 602.220940][T31705] ? __cfi_dump_stack_lvl+0x10/0x10 [ 602.220973][T31705] dump_stack+0x19/0x20 [ 602.221002][T31705] should_fail_ex+0x3d9/0x530 [ 602.221027][T31705] should_fail+0xf/0x20 [ 602.221048][T31705] should_fail_usercopy+0x1e/0x30 [ 602.221074][T31705] _copy_from_user+0x22/0xb0 [ 602.221102][T31705] lo_ioctl+0x52c/0x1d50 [ 602.221133][T31705] ? __cfi_lo_ioctl+0x10/0x10 [ 602.221167][T31705] ? stack_depot_save_flags+0x38/0x800 [ 602.221194][T31705] ? stack_trace_save+0x9d/0xe0 [ 602.221229][T31705] ? kasan_save_track+0x4f/0x80 [ 602.221253][T31705] ? kasan_save_track+0x3e/0x80 [ 602.221276][T31705] ? kasan_save_alloc_info+0x40/0x50 [ 602.221308][T31705] ? __kasan_slab_alloc+0x73/0x90 [ 602.221333][T31705] ? kmem_cache_alloc_noprof+0x1cb/0x430 [ 602.221355][T31705] ? security_inode_alloc+0x51/0x200 [ 602.221390][T31705] ? inode_init_always_gfp+0x756/0x9e0 [ 602.221416][T31705] ? alloc_inode+0xc5/0x270 [ 602.221441][T31705] ? new_inode+0x25/0x1e0 [ 602.221466][T31705] ? proc_pid_make_inode+0x25/0x140 [ 602.221490][T31705] ? proc_pident_instantiate+0x6d/0x2c0 [ 602.221515][T31705] ? proc_pident_lookup+0x1c7/0x270 [ 602.221540][T31705] ? proc_tid_base_lookup+0x2f/0x40 [ 602.221570][T31705] ? path_openat+0x1301/0x34b0 [ 602.221597][T31705] ? do_filp_open+0x1c6/0x3e0 [ 602.221624][T31705] ? do_sys_openat2+0x12c/0x1c0 [ 602.221655][T31705] ? __x64_sys_openat+0x13a/0x170 [ 602.221685][T31705] ? x64_sys_call+0xe69/0x2ee0 [ 602.221719][T31705] ? do_syscall_64+0x58/0xf0 [ 602.221748][T31705] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 602.221776][T31705] ? avc_has_perm_noaudit+0x268/0x360 [ 602.221809][T31705] ? __asan_memcpy+0x5a/0x80 [ 602.221831][T31705] ? avc_has_perm_noaudit+0x286/0x360 [ 602.221864][T31705] ? avc_has_perm+0x144/0x220 [ 602.221897][T31705] ? __cfi_avc_has_perm+0x10/0x10 [ 602.221928][T31705] ? kasan_save_alloc_info+0x40/0x50 [ 602.221963][T31705] ? selinux_file_open+0x457/0x610 [ 602.221991][T31705] ? __cfi_selinux_file_open+0x10/0x10 [ 602.222022][T31705] ? avc_has_extended_perms+0x7c7/0xdd0 [ 602.222055][T31705] ? __asan_memcpy+0x5a/0x80 [ 602.222076][T31705] ? avc_has_extended_perms+0x921/0xdd0 [ 602.222111][T31705] ? do_vfs_ioctl+0xeda/0x1e30 [ 602.222141][T31705] ? arch_stack_walk+0x10b/0x170 [ 602.222164][T31705] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 602.222193][T31705] ? _parse_integer+0x2e/0x40 [ 602.222230][T31705] ? blkdev_common_ioctl+0x10e4/0x2810 [ 602.222265][T31705] ? blkdev_bszset+0x220/0x220 [ 602.222296][T31705] ? has_cap_mac_admin+0xd0/0xd0 [ 602.222325][T31705] ? proc_fail_nth_write+0x17e/0x210 [ 602.222360][T31705] ? __kasan_check_write+0x18/0x20 [ 602.222394][T31705] ? mutex_unlock+0x8b/0x240 [ 602.222416][T31705] ? __cfi_mutex_unlock+0x10/0x10 [ 602.222437][T31705] ? __fget_files+0x2c5/0x340 [ 602.222461][T31705] ? __cfi_lo_ioctl+0x10/0x10 [ 602.222487][T31705] blkdev_ioctl+0x546/0x680 [ 602.222520][T31705] ? __cfi_blkdev_ioctl+0x10/0x10 [ 602.222551][T31705] ? bpf_lsm_file_ioctl+0xd/0x20 [ 602.222583][T31705] ? security_file_ioctl+0x34/0xd0 [ 602.222608][T31705] ? __cfi_blkdev_ioctl+0x10/0x10 [ 602.222640][T31705] __se_sys_ioctl+0x135/0x1b0 [ 602.222666][T31705] __x64_sys_ioctl+0x7f/0xa0 [ 602.222691][T31705] x64_sys_call+0x1878/0x2ee0 [ 602.222724][T31705] do_syscall_64+0x58/0xf0 [ 602.222754][T31705] ? clear_bhb_loop+0x50/0xa0 [ 602.222780][T31705] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 602.222804][T31705] RIP: 0033:0x7fc72ef8f6c9 [ 602.222825][T31705] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 602.222844][T31705] RSP: 002b:00007fc72fe33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 602.222870][T31705] RAX: ffffffffffffffda RBX: 00007fc72f1e5fa0 RCX: 00007fc72ef8f6c9 [ 602.222888][T31705] RDX: 00002000000004c0 RSI: 0000000000004c0a RDI: 0000000000000006 [ 602.222904][T31705] RBP: 00007fc72fe33090 R08: 0000000000000000 R09: 0000000000000000 [ 602.222919][T31705] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 602.222935][T31705] R13: 00007fc72f1e6038 R14: 00007fc72f1e5fa0 R15: 00007fff8ccd0918 [ 602.222955][T31705] [ 603.003978][T31717] 9pnet_fd: Insufficient options for proto=fd [ 604.989160][ T36] audit: type=1400 audit(1763472251.310:281): avc: denied { write } for pid=31798 comm="syz.0.14886" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 605.605358][T31847] 9pnet_fd: Insufficient options for proto=fd [ 606.718664][T31945] rust_binder: Read failure Err(EAGAIN) in pid:227 [ 606.772963][T31949] 9pnet_fd: Insufficient options for proto=fd [ 608.875230][T32049] 9pnet_fd: Insufficient options for proto=fd [ 610.411496][T32133] rust_binder: Read failure Err(EAGAIN) in pid:435 [ 610.751852][T32151] rust_binder: Read failure Err(EAGAIN) in pid:291 [ 610.851352][T32159] rust_binder: Read failure Err(EAGAIN) in pid:451 [ 610.861283][T32161] rust_binder: Read failure Err(EAGAIN) in pid:273 [ 611.019045][T32177] rust_binder: Read failure Err(EAGAIN) in pid:277 [ 611.419370][T32231] rust_binder: Read failure Err(EAGAIN) in pid:282 [ 611.821658][T32261] rust_binder: Read failure Err(EAGAIN) in pid:337 [ 612.069807][T32289] 9pnet_fd: Insufficient options for proto=fd [ 612.096938][T32293] rust_binder: Read failure Err(EAGAIN) in pid:347 [ 612.822935][T32327] rust_binder: Read failure Err(EAGAIN) in pid:377 [ 612.999521][T32349] rust_binder: Read failure Err(EAGAIN) in pid:295 [ 613.061413][T32358] loop5: detected capacity change from 0 to 7 [ 613.329800][T32382] FAULT_INJECTION: forcing a failure. [ 613.329800][T32382] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 613.351908][T32382] CPU: 1 UID: 0 PID: 32382 Comm: syz.0.15175 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 613.351948][T32382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 613.351963][T32382] Call Trace: [ 613.351972][T32382] [ 613.351981][T32382] __dump_stack+0x21/0x30 [ 613.352018][T32382] dump_stack_lvl+0x10c/0x190 [ 613.352049][T32382] ? __cfi_dump_stack_lvl+0x10/0x10 [ 613.352083][T32382] dump_stack+0x19/0x20 [ 613.352112][T32382] should_fail_ex+0x3d9/0x530 [ 613.352137][T32382] should_fail+0xf/0x20 [ 613.352158][T32382] should_fail_usercopy+0x1e/0x30 [ 613.352183][T32382] _copy_from_user+0x22/0xb0 [ 613.352213][T32382] lo_ioctl+0x52c/0x1d50 [ 613.352242][T32382] ? __cfi_lo_ioctl+0x10/0x10 [ 613.352269][T32382] ? stack_depot_save_flags+0x38/0x800 [ 613.352294][T32382] ? stack_trace_save+0x9d/0xe0 [ 613.352328][T32382] ? kasan_save_track+0x4f/0x80 [ 613.352352][T32382] ? kasan_save_track+0x3e/0x80 [ 613.352375][T32382] ? kasan_save_alloc_info+0x40/0x50 [ 613.352408][T32382] ? __kasan_slab_alloc+0x73/0x90 [ 613.352433][T32382] ? kmem_cache_alloc_noprof+0x1cb/0x430 [ 613.352456][T32382] ? security_inode_alloc+0x51/0x200 [ 613.352501][T32382] ? inode_init_always_gfp+0x756/0x9e0 [ 613.352527][T32382] ? alloc_inode+0xc5/0x270 [ 613.352552][T32382] ? new_inode+0x25/0x1e0 [ 613.352576][T32382] ? proc_pid_make_inode+0x25/0x140 [ 613.352601][T32382] ? proc_pident_instantiate+0x6d/0x2c0 [ 613.352627][T32382] ? proc_pident_lookup+0x1c7/0x270 [ 613.352652][T32382] ? proc_tid_base_lookup+0x2f/0x40 [ 613.352682][T32382] ? path_openat+0x1301/0x34b0 [ 613.352709][T32382] ? do_filp_open+0x1c6/0x3e0 [ 613.352737][T32382] ? do_sys_openat2+0x12c/0x1c0 [ 613.352778][T32382] ? __x64_sys_openat+0x13a/0x170 [ 613.352808][T32382] ? x64_sys_call+0xe69/0x2ee0 [ 613.352842][T32382] ? do_syscall_64+0x58/0xf0 [ 613.352871][T32382] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 613.352898][T32382] ? avc_has_perm_noaudit+0x268/0x360 [ 613.352930][T32382] ? __asan_memcpy+0x5a/0x80 [ 613.352950][T32382] ? avc_has_perm_noaudit+0x286/0x360 [ 613.352987][T32382] ? avc_has_perm+0x144/0x220 [ 613.353019][T32382] ? __cfi_avc_has_perm+0x10/0x10 [ 613.353048][T32382] ? kasan_save_alloc_info+0x40/0x50 [ 613.353081][T32382] ? selinux_file_open+0x457/0x610 [ 613.353108][T32382] ? __cfi_selinux_file_open+0x10/0x10 [ 613.353140][T32382] ? avc_has_extended_perms+0x7c7/0xdd0 [ 613.353171][T32382] ? __asan_memcpy+0x5a/0x80 [ 613.353191][T32382] ? avc_has_extended_perms+0x921/0xdd0 [ 613.353231][T32382] ? do_vfs_ioctl+0xeda/0x1e30 [ 613.353255][T32382] ? arch_stack_walk+0x10b/0x170 [ 613.353277][T32382] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 613.353305][T32382] ? _parse_integer+0x2e/0x40 [ 613.353340][T32382] ? blkdev_common_ioctl+0x10e4/0x2810 [ 613.353374][T32382] ? blkdev_bszset+0x220/0x220 [ 613.353405][T32382] ? has_cap_mac_admin+0xd0/0xd0 [ 613.353433][T32382] ? proc_fail_nth_write+0x17e/0x210 [ 613.353477][T32382] ? __kasan_check_write+0x18/0x20 [ 613.353510][T32382] ? mutex_unlock+0x8b/0x240 [ 613.353531][T32382] ? __cfi_mutex_unlock+0x10/0x10 [ 613.353552][T32382] ? __fget_files+0x2c5/0x340 [ 613.353577][T32382] ? __cfi_lo_ioctl+0x10/0x10 [ 613.353604][T32382] blkdev_ioctl+0x546/0x680 [ 613.353636][T32382] ? __cfi_blkdev_ioctl+0x10/0x10 [ 613.353668][T32382] ? bpf_lsm_file_ioctl+0xd/0x20 [ 613.353699][T32382] ? security_file_ioctl+0x34/0xd0 [ 613.353733][T32382] ? __cfi_blkdev_ioctl+0x10/0x10 [ 613.353765][T32382] __se_sys_ioctl+0x135/0x1b0 [ 613.353790][T32382] __x64_sys_ioctl+0x7f/0xa0 [ 613.353816][T32382] x64_sys_call+0x1878/0x2ee0 [ 613.353850][T32382] do_syscall_64+0x58/0xf0 [ 613.353879][T32382] ? clear_bhb_loop+0x50/0xa0 [ 613.353904][T32382] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 613.353928][T32382] RIP: 0033:0x7f18eef8f6c9 [ 613.353947][T32382] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 613.353967][T32382] RSP: 002b:00007f18efef5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 613.353992][T32382] RAX: ffffffffffffffda RBX: 00007f18ef1e5fa0 RCX: 00007f18eef8f6c9 [ 613.354010][T32382] RDX: 00002000000004c0 RSI: 0000000000004c0a RDI: 0000000000000006 [ 613.354027][T32382] RBP: 00007f18efef5090 R08: 0000000000000000 R09: 0000000000000000 [ 613.354043][T32382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 613.354058][T32382] R13: 00007f18ef1e6038 R14: 00007f18ef1e5fa0 R15: 00007ffeae9cf168 [ 613.354079][T32382] [ 613.932509][ T36] audit: type=1400 audit(1763472260.220:282): avc: denied { set_context_mgr } for pid=32402 comm="syz.2.15185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 613.954572][ T36] audit: type=1400 audit(1763472260.220:283): avc: denied { map } for pid=32402 comm="syz.2.15185" path="/dev/binderfs/binder0" dev="binder" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 613.978609][ T36] audit: type=1400 audit(1763472260.220:284): avc: denied { call } for pid=32402 comm="syz.2.15185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 613.997670][ T36] audit: type=1400 audit(1763472260.220:285): avc: denied { transfer } for pid=32402 comm="syz.2.15185" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 614.173807][T32419] 9pnet_fd: Insufficient options for proto=fd [ 615.664724][T32455] 9pnet_fd: Insufficient options for proto=fd [ 617.209208][T32483] 9pnet_fd: Insufficient options for proto=fd [ 617.642114][T32491] rust_binder: Read failure Err(EAGAIN) in pid:423 [ 619.103174][T32552] rust_binder: Read failure Err(EAGAIN) in pid:364 [ 619.292976][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 619.404124][T32583] rust_binder: Failed to allocate buffer. len:120, is_oneway:false [ 619.581613][T32610] 9pnet_fd: Insufficient options for proto=fd [ 619.635739][T32618] 9pnet_fd: Insufficient options for proto=fd [ 619.693434][T32630] 9pnet_fd: Insufficient options for proto=fd [ 619.835948][T32654] 9pnet_fd: Insufficient options for proto=fd [ 620.712965][T32720] 9pnet_fd: Insufficient options for proto=fd [ 621.333314][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 622.542357][ T369] 9pnet_fd: Insufficient options for proto=fd [ 622.812578][ T399] 9pnet_fd: Insufficient options for proto=fd [ 623.294346][ T460] rust_binder: Read failure Err(EAGAIN) in pid:476 [ 623.638155][ T477] rust_binder: Read failure Err(EAGAIN) in pid:481 [ 623.954664][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 624.369181][ T523] rust_binder: Read failure Err(EAGAIN) in pid:557 [ 624.658087][ T537] 9pnet_fd: Insufficient options for proto=fd [ 625.971008][T30077] Bluetooth: hci0: command 0x1003 tx timeout [ 625.977073][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 626.742885][ T679] 9pnet_fd: Insufficient options for proto=fd [ 627.549183][ T759] 9pnet_fd: Insufficient options for proto=fd [ 627.643577][ T780] 9pnet_fd: Insufficient options for proto=fd [ 627.755421][ T796] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 627.755521][ T796] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:575 [ 627.909531][ T811] 9pnet_fd: Insufficient options for proto=fd [ 628.581522][ T888] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 628.581563][ T888] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:637 [ 629.870822][ T930] 9pnet_fd: Insufficient options for proto=fd [ 630.145863][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 630.796162][ T997] 9pnet_fd: Insufficient options for proto=fd [ 631.097338][ T1027] rust_binder: Read failure Err(EAGAIN) in pid:642 [ 631.113328][ T1029] rust_binder: Read failure Err(EAGAIN) in pid:644 [ 631.178221][ T1036] 9pnet_fd: Insufficient options for proto=fd [ 631.260805][ T1046] rust_binder: Read failure Err(EAGAIN) in pid:645 [ 631.424168][ T1057] 9pnet_fd: Insufficient options for proto=fd [ 631.524899][ T1065] rust_binder: Read failure Err(EAGAIN) in pid:653 [ 631.665992][ T1085] rust_binder: Read failure Err(EAGAIN) in pid:659 [ 631.727603][ T1097] rust_binder: Read failure Err(EAGAIN) in pid:685 [ 631.848552][ T1111] overlayfs: missing 'workdir' [ 632.038126][ T1149] 9pnet_fd: Insufficient options for proto=fd [ 632.210892][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 632.217099][T30077] Bluetooth: hci0: command 0x1003 tx timeout [ 632.257874][ T1171] 9pnet_fd: Insufficient options for proto=fd [ 632.328500][ T1179] 9pnet_fd: Insufficient options for proto=fd [ 632.487121][ T1193] FAULT_INJECTION: forcing a failure. [ 632.487121][ T1193] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 632.525205][ T1193] CPU: 1 UID: 0 PID: 1193 Comm: syz.1.15808 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 632.525243][ T1193] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 632.525258][ T1193] Call Trace: [ 632.525265][ T1193] [ 632.525274][ T1193] __dump_stack+0x21/0x30 [ 632.525311][ T1193] dump_stack_lvl+0x10c/0x190 [ 632.525342][ T1193] ? __cfi_dump_stack_lvl+0x10/0x10 [ 632.525374][ T1193] ? check_stack_object+0x12c/0x140 [ 632.525399][ T1193] dump_stack+0x19/0x20 [ 632.525429][ T1193] should_fail_ex+0x3d9/0x530 [ 632.525454][ T1193] should_fail+0xf/0x20 [ 632.525475][ T1193] should_fail_usercopy+0x1e/0x30 [ 632.525501][ T1193] _copy_to_user+0x24/0xa0 [ 632.525530][ T1193] simple_read_from_buffer+0xed/0x160 [ 632.525561][ T1193] proc_fail_nth_read+0x19e/0x210 [ 632.525593][ T1193] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 632.525624][ T1193] ? bpf_lsm_file_permission+0xd/0x20 [ 632.525656][ T1193] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 632.525686][ T1193] vfs_read+0x27d/0xc70 [ 632.525708][ T1193] ? __cfi_vfs_read+0x10/0x10 [ 632.525738][ T1193] ? __kasan_check_write+0x18/0x20 [ 632.525773][ T1193] ? mutex_lock+0x92/0x1c0 [ 632.525794][ T1193] ? __cfi_mutex_lock+0x10/0x10 [ 632.525815][ T1193] ? __fget_files+0x2c5/0x340 [ 632.525842][ T1193] ksys_read+0x141/0x250 [ 632.525863][ T1193] ? __cfi_ksys_read+0x10/0x10 [ 632.525884][ T1193] ? __kasan_check_read+0x15/0x20 [ 632.525919][ T1193] __x64_sys_read+0x7f/0x90 [ 632.525940][ T1193] x64_sys_call+0x2638/0x2ee0 [ 632.525975][ T1193] do_syscall_64+0x58/0xf0 [ 632.526005][ T1193] ? clear_bhb_loop+0x50/0xa0 [ 632.526031][ T1193] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 632.526055][ T1193] RIP: 0033:0x7fc441d8e0dc [ 632.526075][ T1193] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 632.526097][ T1193] RSP: 002b:00007fc442be0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 632.526123][ T1193] RAX: ffffffffffffffda RBX: 00007fc441fe5fa0 RCX: 00007fc441d8e0dc [ 632.526142][ T1193] RDX: 000000000000000f RSI: 00007fc442be00a0 RDI: 0000000000000006 [ 632.526158][ T1193] RBP: 00007fc442be0090 R08: 0000000000000000 R09: 0000000000000000 [ 632.526174][ T1193] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 632.526190][ T1193] R13: 00007fc441fe6038 R14: 00007fc441fe5fa0 R15: 00007ffd5580f008 [ 632.526211][ T1193] [ 634.443543][ T1267] FAULT_INJECTION: forcing a failure. [ 634.443543][ T1267] name failslab, interval 1, probability 0, space 0, times 0 [ 634.470822][ T1267] CPU: 0 UID: 0 PID: 1267 Comm: syz.3.15842 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 634.470858][ T1267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 634.470872][ T1267] Call Trace: [ 634.470879][ T1267] [ 634.470887][ T1267] __dump_stack+0x21/0x30 [ 634.470922][ T1267] dump_stack_lvl+0x10c/0x190 [ 634.470958][ T1267] ? __cfi_dump_stack_lvl+0x10/0x10 [ 634.470987][ T1267] ? avc_has_extended_perms+0x921/0xdd0 [ 634.471019][ T1267] dump_stack+0x19/0x20 [ 634.471046][ T1267] should_fail_ex+0x3d9/0x530 [ 634.471068][ T1267] should_failslab+0xac/0x100 [ 634.471093][ T1267] __kmalloc_cache_node_noprof+0x46/0x450 [ 634.471116][ T1267] ? __get_vm_area_node+0x154/0x3a0 [ 634.471166][ T1267] __get_vm_area_node+0x154/0x3a0 [ 634.471196][ T1267] __vmalloc_node_range_noprof+0x33c/0x1420 [ 634.471230][ T1267] ? kvm_dev_ioctl+0x125/0x14d0 [ 634.471262][ T1267] ? number+0xd21/0xf80 [ 634.471291][ T1267] ? pointer+0xdd0/0xdd0 [ 634.471320][ T1267] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 634.471354][ T1267] ? vsnprintf+0x19b8/0x1aa0 [ 634.471384][ T1267] ? kvm_dev_ioctl+0x125/0x14d0 [ 634.471417][ T1267] __vmalloc_noprof+0xfe/0x1d0 [ 634.471449][ T1267] ? kvm_dev_ioctl+0x125/0x14d0 [ 634.471481][ T1267] ? alloc_fd+0x4e7/0x5a0 [ 634.471505][ T1267] ? __cfi___vmalloc_noprof+0x10/0x10 [ 634.471540][ T1267] kvm_dev_ioctl+0x125/0x14d0 [ 634.471574][ T1267] ? __fget_files+0x2c5/0x340 [ 634.471598][ T1267] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 634.471632][ T1267] ? bpf_lsm_file_ioctl+0xd/0x20 [ 634.471663][ T1267] ? security_file_ioctl+0x34/0xd0 [ 634.471688][ T1267] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 634.471718][ T1267] __se_sys_ioctl+0x135/0x1b0 [ 634.471743][ T1267] __x64_sys_ioctl+0x7f/0xa0 [ 634.471767][ T1267] x64_sys_call+0x1878/0x2ee0 [ 634.471801][ T1267] do_syscall_64+0x58/0xf0 [ 634.471828][ T1267] ? clear_bhb_loop+0x50/0xa0 [ 634.471854][ T1267] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 634.471878][ T1267] RIP: 0033:0x7fc72ef8f6c9 [ 634.471897][ T1267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.471916][ T1267] RSP: 002b:00007fc72fe33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.471950][ T1267] RAX: ffffffffffffffda RBX: 00007fc72f1e5fa0 RCX: 00007fc72ef8f6c9 [ 634.471968][ T1267] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 634.471983][ T1267] RBP: 00007fc72fe33090 R08: 0000000000000000 R09: 0000000000000000 [ 634.471999][ T1267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.472013][ T1267] R13: 00007fc72f1e6038 R14: 00007fc72f1e5fa0 R15: 00007fff8ccd0918 [ 634.472033][ T1267] [ 634.473388][ T1267] syz.3.15842: vmalloc error: size 39304, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0 [ 634.756870][ T1267] CPU: 0 UID: 0 PID: 1267 Comm: syz.3.15842 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 634.756903][ T1267] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 634.756918][ T1267] Call Trace: [ 634.756925][ T1267] [ 634.756935][ T1267] __dump_stack+0x21/0x30 [ 634.756971][ T1267] dump_stack_lvl+0x10c/0x190 [ 634.757003][ T1267] ? __cfi_dump_stack_lvl+0x10/0x10 [ 634.757034][ T1267] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 634.757069][ T1267] dump_stack+0x19/0x20 [ 634.757097][ T1267] warn_alloc+0x1bc/0x2a0 [ 634.757126][ T1267] ? __kasan_kmalloc+0x28/0xb0 [ 634.757153][ T1267] ? __cfi_warn_alloc+0x10/0x10 [ 634.757184][ T1267] ? __get_vm_area_node+0x392/0x3a0 [ 634.757217][ T1267] __vmalloc_node_range_noprof+0x361/0x1420 [ 634.757250][ T1267] ? number+0xd21/0xf80 [ 634.757278][ T1267] ? pointer+0xdd0/0xdd0 [ 634.757307][ T1267] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 634.757340][ T1267] ? vsnprintf+0x19b8/0x1aa0 [ 634.757369][ T1267] ? kvm_dev_ioctl+0x125/0x14d0 [ 634.757401][ T1267] __vmalloc_noprof+0xfe/0x1d0 [ 634.757433][ T1267] ? kvm_dev_ioctl+0x125/0x14d0 [ 634.757463][ T1267] ? alloc_fd+0x4e7/0x5a0 [ 634.757485][ T1267] ? __cfi___vmalloc_noprof+0x10/0x10 [ 634.757519][ T1267] kvm_dev_ioctl+0x125/0x14d0 [ 634.757553][ T1267] ? __fget_files+0x2c5/0x340 [ 634.757577][ T1267] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 634.757610][ T1267] ? bpf_lsm_file_ioctl+0xd/0x20 [ 634.757641][ T1267] ? security_file_ioctl+0x34/0xd0 [ 634.757667][ T1267] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 634.757708][ T1267] __se_sys_ioctl+0x135/0x1b0 [ 634.757735][ T1267] __x64_sys_ioctl+0x7f/0xa0 [ 634.757759][ T1267] x64_sys_call+0x1878/0x2ee0 [ 634.757792][ T1267] do_syscall_64+0x58/0xf0 [ 634.757821][ T1267] ? clear_bhb_loop+0x50/0xa0 [ 634.757846][ T1267] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 634.757870][ T1267] RIP: 0033:0x7fc72ef8f6c9 [ 634.757889][ T1267] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 634.757909][ T1267] RSP: 002b:00007fc72fe33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 634.757935][ T1267] RAX: ffffffffffffffda RBX: 00007fc72f1e5fa0 RCX: 00007fc72ef8f6c9 [ 634.757954][ T1267] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000007 [ 634.757969][ T1267] RBP: 00007fc72fe33090 R08: 0000000000000000 R09: 0000000000000000 [ 634.757985][ T1267] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 634.758000][ T1267] R13: 00007fc72f1e6038 R14: 00007fc72f1e5fa0 R15: 00007fff8ccd0918 [ 634.758020][ T1267] [ 634.758202][ T1267] Mem-Info: [ 635.020777][ T1267] active_anon:20589 inactive_anon:7 isolated_anon:0 [ 635.020777][ T1267] active_file:22204 inactive_file:2521 isolated_file:0 [ 635.020777][ T1267] unevictable:0 dirty:170 writeback:0 [ 635.020777][ T1267] slab_reclaimable:9375 slab_unreclaimable:70089 [ 635.020777][ T1267] mapped:34367 shmem:16059 pagetables:719 [ 635.020777][ T1267] sec_pagetables:0 bounce:0 [ 635.020777][ T1267] kernel_misc_reclaimable:0 [ 635.020777][ T1267] free:1505521 free_pcp:7997 free_cma:0 [ 635.066328][ T1267] Node 0 active_anon:84056kB inactive_anon:28kB active_file:88816kB inactive_file:10084kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:100768kB dirty:680kB writeback:0kB shmem:65836kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4864kB pagetables:2876kB sec_pagetables:0kB all_unreclaimable? no [ 635.100558][ T1267] DMA32 free:2952148kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:13788kB local_pcp:2032kB free_cma:0kB [ 635.131427][ T1267] lowmem_reserve[]: 0 3921 3921 [ 635.136908][ T1267] Normal free:3075860kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:60680kB inactive_anon:28kB active_file:88816kB inactive_file:10088kB unevictable:0kB writepending:680kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:34000kB local_pcp:12924kB free_cma:0kB [ 635.168745][ T1267] lowmem_reserve[]: 0 0 0 [ 635.173258][ T1267] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 4*2048kB (M) 717*4096kB (M) = 2952148kB [ 635.189073][ T1267] Normal: 1095*4kB (UME) 548*8kB (UME) 1148*16kB (UME) 863*32kB (UME) 668*64kB (UME) 317*128kB (UME) 97*256kB (UME) 26*512kB (ME) 35*1024kB (UME) 11*2048kB (UME) 696*4096kB (ME) = 3085404kB [ 635.208203][ T1267] 30932 total pagecache pages [ 635.213136][ T1267] 32 pages in swap cache [ 635.217567][ T1267] Free swap = 124308kB [ 635.221846][ T1267] Total swap = 124996kB [ 635.226281][ T1267] 2097051 pages RAM [ 635.230254][ T1267] 0 pages HighMem/MovableOnly [ 635.235026][ T1267] 351537 pages reserved [ 635.239485][ T1267] 0 pages cma reserved [ 635.247046][ T1267] Memory allocations: [ 635.251193][ T1267] 0 B 0 init/main.c:1370 func:do_initcalls [ 635.258423][ T1267] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 635.266559][ T1267] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 635.274375][ T1267] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 635.282363][ T1267] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 635.290378][ T1267] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 635.299044][ T1267] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 635.307200][ T1267] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 635.315199][ T1267] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 635.323283][ T1267] 0 B 0 init/initramfs.c:101 func:find_link [ 635.641716][ T1308] rust_binder: Read failure Err(EAGAIN) in pid:753 [ 636.372142][ T1344] FAULT_INJECTION: forcing a failure. [ 636.372142][ T1344] name failslab, interval 1, probability 0, space 0, times 0 [ 636.410766][ T1344] CPU: 0 UID: 0 PID: 1344 Comm: syz.2.15881 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 636.410803][ T1344] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 636.410819][ T1344] Call Trace: [ 636.410827][ T1344] [ 636.410836][ T1344] __dump_stack+0x21/0x30 [ 636.410876][ T1344] dump_stack_lvl+0x10c/0x190 [ 636.410906][ T1344] ? __cfi_dump_stack_lvl+0x10/0x10 [ 636.410936][ T1344] ? __kasan_check_write+0x18/0x20 [ 636.410970][ T1344] ? proc_fail_nth_write+0x17e/0x210 [ 636.411000][ T1344] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 636.411031][ T1344] dump_stack+0x19/0x20 [ 636.411077][ T1344] should_fail_ex+0x3d9/0x530 [ 636.411104][ T1344] should_failslab+0xac/0x100 [ 636.411130][ T1344] kmem_cache_alloc_noprof+0x42/0x430 [ 636.411152][ T1344] ? getname_flags+0xc6/0x710 [ 636.411177][ T1344] getname_flags+0xc6/0x710 [ 636.411200][ T1344] ? build_open_flags+0x487/0x600 [ 636.411231][ T1344] getname+0x1b/0x30 [ 636.411252][ T1344] do_sys_openat2+0xcb/0x1c0 [ 636.411282][ T1344] ? fput+0x1a5/0x240 [ 636.411309][ T1344] ? do_sys_open+0x100/0x100 [ 636.411338][ T1344] ? ksys_write+0x1ef/0x250 [ 636.411359][ T1344] ? __cfi_ksys_write+0x10/0x10 [ 636.411382][ T1344] __x64_sys_openat+0x13a/0x170 [ 636.411413][ T1344] x64_sys_call+0xe69/0x2ee0 [ 636.411447][ T1344] do_syscall_64+0x58/0xf0 [ 636.411482][ T1344] ? clear_bhb_loop+0x50/0xa0 [ 636.411507][ T1344] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 636.411532][ T1344] RIP: 0033:0x7fc00838f6c9 [ 636.411551][ T1344] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 636.411578][ T1344] RSP: 002b:00007fc009203038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 636.411604][ T1344] RAX: ffffffffffffffda RBX: 00007fc0085e5fa0 RCX: 00007fc00838f6c9 [ 636.411622][ T1344] RDX: 000000000000275a RSI: 0000200000000280 RDI: ffffffffffffff9c [ 636.411639][ T1344] RBP: 00007fc009203090 R08: 0000000000000000 R09: 0000000000000000 [ 636.411654][ T1344] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 636.411669][ T1344] R13: 00007fc0085e6038 R14: 00007fc0085e5fa0 R15: 00007fff047573c8 [ 636.411691][ T1344] [ 636.888756][ T1360] 9pnet_fd: Insufficient options for proto=fd [ 636.901270][ T1362] 9pnet_fd: Insufficient options for proto=fd [ 636.949715][ T1364] incfs: Options parsing error. -22 [ 636.966210][ T1366] FAULT_INJECTION: forcing a failure. [ 636.966210][ T1366] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 636.969866][ T1364] incfs: mount failed -22 [ 636.999785][ T1366] CPU: 1 UID: 0 PID: 1366 Comm: syz.2.15892 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 636.999824][ T1366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 636.999838][ T1366] Call Trace: [ 636.999846][ T1366] [ 636.999864][ T1366] __dump_stack+0x21/0x30 [ 636.999900][ T1366] dump_stack_lvl+0x10c/0x190 [ 636.999931][ T1366] ? __cfi_dump_stack_lvl+0x10/0x10 [ 636.999961][ T1366] ? selinux_file_open+0x457/0x610 [ 636.999990][ T1366] dump_stack+0x19/0x20 [ 637.000019][ T1366] should_fail_ex+0x3d9/0x530 [ 637.000042][ T1366] should_fail_alloc_page+0xeb/0x110 [ 637.000070][ T1366] __alloc_pages_noprof+0x19b/0x7b0 [ 637.000100][ T1366] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 637.000131][ T1366] ? is_bpf_text_address+0x17b/0x1a0 [ 637.000158][ T1366] ? __kernel_text_address+0x11/0x40 [ 637.000187][ T1366] ? unwind_get_return_address+0x51/0x90 [ 637.000213][ T1366] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 637.000247][ T1366] ? arch_stack_walk+0x10b/0x170 [ 637.000268][ T1366] __folio_alloc_noprof+0x14/0x80 [ 637.000298][ T1366] folio_prealloc+0x46/0x240 [ 637.000325][ T1366] do_pte_missing+0x164c/0x4240 [ 637.000352][ T1366] ? _parse_integer+0x2e/0x40 [ 637.000388][ T1366] ? pte_marker_clear+0x1b0/0x1b0 [ 637.000414][ T1366] ? kstrtouint_from_user+0xfb/0x150 [ 637.000436][ T1366] ? __x64_sys_openat+0x13a/0x170 [ 637.000465][ T1366] ? x64_sys_call+0xe69/0x2ee0 [ 637.000497][ T1366] ? selinux_file_permission+0x309/0xb30 [ 637.000524][ T1366] ? __pte_offset_map+0x1b0/0x230 [ 637.000556][ T1366] ? pte_offset_map_rw_nolock+0xba/0x110 [ 637.000600][ T1366] handle_mm_fault+0x1166/0x1b90 [ 637.000628][ T1366] ? __cfi_handle_mm_fault+0x10/0x10 [ 637.000651][ T1366] ? lock_vma_under_rcu+0x49d/0x540 [ 637.000679][ T1366] ? __kasan_check_write+0x18/0x20 [ 637.000711][ T1366] do_user_addr_fault+0x96c/0x1200 [ 637.000764][ T1366] ? __cfi_ksys_write+0x10/0x10 [ 637.000788][ T1366] exc_page_fault+0x59/0xc0 [ 637.000811][ T1366] asm_exc_page_fault+0x2b/0x30 [ 637.000834][ T1366] RIP: 0033:0x7fc008260576 [ 637.000857][ T1366] Code: 00 00 00 00 41 57 31 c0 41 56 49 89 d6 41 55 49 89 f5 48 89 d6 41 54 49 89 fc 48 8d 3d 0c 2f 1b 00 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 ec d9 fe ff 4d 85 f6 0f 84 46 0a 00 [ 637.000876][ T1366] RSP: 002b:00007fc009200f70 EFLAGS: 00010202 [ 637.000897][ T1366] RAX: 0000000000000000 RBX: 00007fc0085e5fa0 RCX: 0000000000000000 [ 637.000912][ T1366] RDX: 0000200000000040 RSI: 0000200000000040 RDI: 00007fc008413479 [ 637.000928][ T1366] RBP: 00007fc009203090 R08: 00007fc00824e2f0 R09: 0000000000000000 [ 637.000942][ T1366] R10: 0000000000000005 R11: 0000200000000040 R12: 0000000000000005 [ 637.000957][ T1366] R13: 00000000000000c9 R14: 0000200000000040 R15: 00007fff047573c8 [ 637.000986][ T1366] [ 637.184300][ T1370] rust_binder: Read failure Err(EAGAIN) in pid:751 [ 637.209943][ T1366] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 637.287736][ T1371] 9pnet_fd: Insufficient options for proto=fd [ 637.491174][ T1402] 9pnet_fd: Insufficient options for proto=fd [ 637.520791][ T45] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 637.670841][ T45] usb 3-1: Using ep0 maxpacket: 8 [ 637.682128][ T45] usb 3-1: unable to get BOS descriptor or descriptor too short [ 637.689848][ T45] usb 3-1: no configurations [ 637.714654][ T45] usb 3-1: can't read configurations, error -22 [ 638.177686][ T1452] 9pnet_fd: Insufficient options for proto=fd [ 638.454767][ T1493] loop5: detected capacity change from 0 to 7 [ 638.631404][ T1505] FAULT_INJECTION: forcing a failure. [ 638.631404][ T1505] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 638.676193][ T1505] CPU: 0 UID: 0 PID: 1505 Comm: syz.1.15959 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 638.676232][ T1505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 638.676246][ T1505] Call Trace: [ 638.676255][ T1505] [ 638.676264][ T1505] __dump_stack+0x21/0x30 [ 638.676299][ T1505] dump_stack_lvl+0x10c/0x190 [ 638.676330][ T1505] ? __cfi_dump_stack_lvl+0x10/0x10 [ 638.676362][ T1505] dump_stack+0x19/0x20 [ 638.676390][ T1505] should_fail_ex+0x3d9/0x530 [ 638.676414][ T1505] should_fail+0xf/0x20 [ 638.676434][ T1505] should_fail_usercopy+0x1e/0x30 [ 638.676458][ T1505] _copy_from_user+0x22/0xb0 [ 638.676487][ T1505] lo_ioctl+0x52c/0x1d50 [ 638.676524][ T1505] ? __cfi_lo_ioctl+0x10/0x10 [ 638.676550][ T1505] ? stack_depot_save_flags+0x38/0x800 [ 638.676575][ T1505] ? stack_trace_save+0x9d/0xe0 [ 638.676608][ T1505] ? kasan_save_track+0x4f/0x80 [ 638.676632][ T1505] ? kasan_save_track+0x3e/0x80 [ 638.676654][ T1505] ? kasan_save_alloc_info+0x40/0x50 [ 638.676685][ T1505] ? __kasan_slab_alloc+0x73/0x90 [ 638.676710][ T1505] ? kmem_cache_alloc_noprof+0x1cb/0x430 [ 638.676732][ T1505] ? security_inode_alloc+0x51/0x200 [ 638.676765][ T1505] ? inode_init_always_gfp+0x756/0x9e0 [ 638.676789][ T1505] ? alloc_inode+0xc5/0x270 [ 638.676813][ T1505] ? new_inode+0x25/0x1e0 [ 638.676838][ T1505] ? proc_pid_make_inode+0x25/0x140 [ 638.676860][ T1505] ? proc_pident_instantiate+0x6d/0x2c0 [ 638.676885][ T1505] ? proc_pident_lookup+0x1c7/0x270 [ 638.676909][ T1505] ? proc_tid_base_lookup+0x2f/0x40 [ 638.676939][ T1505] ? path_openat+0x1301/0x34b0 [ 638.676965][ T1505] ? do_filp_open+0x1c6/0x3e0 [ 638.676991][ T1505] ? do_sys_openat2+0x12c/0x1c0 [ 638.677030][ T1505] ? __x64_sys_openat+0x13a/0x170 [ 638.677058][ T1505] ? x64_sys_call+0xe69/0x2ee0 [ 638.677087][ T1505] ? do_syscall_64+0x58/0xf0 [ 638.677114][ T1505] ? entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 638.677156][ T1505] ? avc_has_perm_noaudit+0x268/0x360 [ 638.677187][ T1505] ? __asan_memcpy+0x5a/0x80 [ 638.677208][ T1505] ? avc_has_perm_noaudit+0x286/0x360 [ 638.677240][ T1505] ? avc_has_perm+0x144/0x220 [ 638.677270][ T1505] ? __cfi_avc_has_perm+0x10/0x10 [ 638.677300][ T1505] ? kasan_save_alloc_info+0x40/0x50 [ 638.677333][ T1505] ? selinux_file_open+0x457/0x610 [ 638.677361][ T1505] ? __cfi_selinux_file_open+0x10/0x10 [ 638.677391][ T1505] ? avc_has_extended_perms+0x7c7/0xdd0 [ 638.677421][ T1505] ? __asan_memcpy+0x5a/0x80 [ 638.677441][ T1505] ? avc_has_extended_perms+0x921/0xdd0 [ 638.677474][ T1505] ? do_vfs_ioctl+0xeda/0x1e30 [ 638.677505][ T1505] ? arch_stack_walk+0x10b/0x170 [ 638.677526][ T1505] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 638.677553][ T1505] ? _parse_integer+0x2e/0x40 [ 638.677589][ T1505] ? blkdev_common_ioctl+0x10e4/0x2810 [ 638.677622][ T1505] ? blkdev_bszset+0x220/0x220 [ 638.677653][ T1505] ? has_cap_mac_admin+0xd0/0xd0 [ 638.677680][ T1505] ? proc_fail_nth_write+0x17e/0x210 [ 638.677716][ T1505] ? __kasan_check_write+0x18/0x20 [ 638.677750][ T1505] ? mutex_unlock+0x8b/0x240 [ 638.677771][ T1505] ? __cfi_mutex_unlock+0x10/0x10 [ 638.677791][ T1505] ? __fget_files+0x2c5/0x340 [ 638.677815][ T1505] ? __cfi_lo_ioctl+0x10/0x10 [ 638.677841][ T1505] blkdev_ioctl+0x546/0x680 [ 638.677871][ T1505] ? __cfi_blkdev_ioctl+0x10/0x10 [ 638.677902][ T1505] ? bpf_lsm_file_ioctl+0xd/0x20 [ 638.677933][ T1505] ? security_file_ioctl+0x34/0xd0 [ 638.677957][ T1505] ? __cfi_blkdev_ioctl+0x10/0x10 [ 638.677988][ T1505] __se_sys_ioctl+0x135/0x1b0 [ 638.678015][ T1505] __x64_sys_ioctl+0x7f/0xa0 [ 638.678039][ T1505] x64_sys_call+0x1878/0x2ee0 [ 638.678071][ T1505] do_syscall_64+0x58/0xf0 [ 638.678099][ T1505] ? clear_bhb_loop+0x50/0xa0 [ 638.678125][ T1505] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 638.678148][ T1505] RIP: 0033:0x7fc441d8f6c9 [ 638.678167][ T1505] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.678187][ T1505] RSP: 002b:00007fc442be0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 638.678212][ T1505] RAX: ffffffffffffffda RBX: 00007fc441fe5fa0 RCX: 00007fc441d8f6c9 [ 638.678230][ T1505] RDX: 00002000000004c0 RSI: 0000000000004c0a RDI: 0000000000000007 [ 638.678245][ T1505] RBP: 00007fc442be0090 R08: 0000000000000000 R09: 0000000000000000 [ 638.678260][ T1505] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 638.678274][ T1505] R13: 00007fc441fe6038 R14: 00007fc441fe5fa0 R15: 00007ffd5580f008 [ 638.678294][ T1505] [ 639.458255][ T36] audit: type=1400 audit(1763472285.780:286): avc: denied { unmount } for pid=31057 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 639.526030][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 639.728914][ T1590] FAULT_INJECTION: forcing a failure. [ 639.728914][ T1590] name failslab, interval 1, probability 0, space 0, times 0 [ 639.744337][ T1590] CPU: 1 UID: 0 PID: 1590 Comm: syz.1.16000 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 639.744374][ T1590] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 639.744390][ T1590] Call Trace: [ 639.744398][ T1590] [ 639.744407][ T1590] __dump_stack+0x21/0x30 [ 639.744443][ T1590] dump_stack_lvl+0x10c/0x190 [ 639.744472][ T1590] ? __cfi_dump_stack_lvl+0x10/0x10 [ 639.744503][ T1590] ? kernel_text_address+0xa9/0xe0 [ 639.744532][ T1590] dump_stack+0x19/0x20 [ 639.744560][ T1590] should_fail_ex+0x3d9/0x530 [ 639.744584][ T1590] should_failslab+0xac/0x100 [ 639.744609][ T1590] __kmalloc_node_noprof+0x6c/0x520 [ 639.744632][ T1590] ? __kvmalloc_node_noprof+0x11d/0x300 [ 639.744667][ T1590] __kvmalloc_node_noprof+0x11d/0x300 [ 639.744708][ T1590] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 639.744744][ T1590] traverse+0xf5/0x720 [ 639.744769][ T1590] ? __cfi_mutex_lock+0x10/0x10 [ 639.744790][ T1590] ? selinux_file_permission+0x309/0xb30 [ 639.744818][ T1590] seq_read_iter+0xe55/0xfe0 [ 639.744844][ T1590] ? __kasan_check_write+0x18/0x20 [ 639.744877][ T1590] ? proc_fail_nth_write+0x17e/0x210 [ 639.744910][ T1590] vfs_read+0x62b/0xc70 [ 639.744930][ T1590] ? __cfi_vfs_read+0x10/0x10 [ 639.744953][ T1590] ksys_pread64+0x170/0x270 [ 639.744974][ T1590] ? __cfi_ksys_pread64+0x10/0x10 [ 639.744997][ T1590] __x64_sys_pread64+0x9f/0xb0 [ 639.745019][ T1590] x64_sys_call+0x2a34/0x2ee0 [ 639.745051][ T1590] do_syscall_64+0x58/0xf0 [ 639.745079][ T1590] ? clear_bhb_loop+0x50/0xa0 [ 639.745104][ T1590] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 639.745127][ T1590] RIP: 0033:0x7fc441d8f6c9 [ 639.745146][ T1590] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 639.745165][ T1590] RSP: 002b:00007fc442be0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 639.745190][ T1590] RAX: ffffffffffffffda RBX: 00007fc441fe5fa0 RCX: 00007fc441d8f6c9 [ 639.745208][ T1590] RDX: 0000000000001000 RSI: 00002000000029c0 RDI: 0000000000000005 [ 639.745223][ T1590] RBP: 00007fc442be0090 R08: 0000000000000000 R09: 0000000000000000 [ 639.745238][ T1590] R10: 0000000000000d36 R11: 0000000000000246 R12: 0000000000000001 [ 639.745252][ T1590] R13: 00007fc441fe6038 R14: 00007fc441fe5fa0 R15: 00007ffd5580f008 [ 639.745272][ T1590] [ 640.039420][ T36] audit: type=1400 audit(1763472286.360:287): avc: denied { watch } for pid=1599 comm="syz.3.16005" path="/410" dev="tmpfs" ino=2508 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 640.182648][ T1604] FAULT_INJECTION: forcing a failure. [ 640.182648][ T1604] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 640.195827][ T1604] CPU: 1 UID: 0 PID: 1604 Comm: syz.1.16007 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 640.195858][ T1604] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 640.195872][ T1604] Call Trace: [ 640.195880][ T1604] [ 640.195889][ T1604] __dump_stack+0x21/0x30 [ 640.195923][ T1604] dump_stack_lvl+0x10c/0x190 [ 640.195952][ T1604] ? __cfi_dump_stack_lvl+0x10/0x10 [ 640.195982][ T1604] ? check_stack_object+0x12c/0x140 [ 640.196004][ T1604] dump_stack+0x19/0x20 [ 640.196031][ T1604] should_fail_ex+0x3d9/0x530 [ 640.196054][ T1604] should_fail+0xf/0x20 [ 640.196074][ T1604] should_fail_usercopy+0x1e/0x30 [ 640.196098][ T1604] _copy_to_user+0x24/0xa0 [ 640.196124][ T1604] simple_read_from_buffer+0xed/0x160 [ 640.196152][ T1604] proc_fail_nth_read+0x19e/0x210 [ 640.196180][ T1604] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 640.196207][ T1604] ? vfs_writev+0xa16/0xcf0 [ 640.196233][ T1604] ? bpf_lsm_file_permission+0xd/0x20 [ 640.196262][ T1604] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 640.196291][ T1604] vfs_read+0x27d/0xc70 [ 640.196311][ T1604] ? __cfi_vfs_read+0x10/0x10 [ 640.196329][ T1604] ? kmem_cache_free+0x1c1/0x510 [ 640.196350][ T1604] ? putname+0x113/0x150 [ 640.196372][ T1604] ? putname+0x113/0x150 [ 640.196392][ T1604] ? __kasan_check_read+0x15/0x20 [ 640.196425][ T1604] ksys_read+0x141/0x250 [ 640.196444][ T1604] ? __cfi_ksys_read+0x10/0x10 [ 640.196464][ T1604] ? __kasan_check_read+0x15/0x20 [ 640.196496][ T1604] __x64_sys_read+0x7f/0x90 [ 640.196516][ T1604] x64_sys_call+0x2638/0x2ee0 [ 640.196548][ T1604] do_syscall_64+0x58/0xf0 [ 640.196575][ T1604] ? clear_bhb_loop+0x50/0xa0 [ 640.196600][ T1604] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 640.196623][ T1604] RIP: 0033:0x7fc441d8e0dc [ 640.196640][ T1604] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 640.196659][ T1604] RSP: 002b:00007fc442be0030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 640.196683][ T1604] RAX: ffffffffffffffda RBX: 00007fc441fe5fa0 RCX: 00007fc441d8e0dc [ 640.196700][ T1604] RDX: 000000000000000f RSI: 00007fc442be00a0 RDI: 0000000000000009 [ 640.196714][ T1604] RBP: 00007fc442be0090 R08: 0000000000000000 R09: 0000000000000000 [ 640.196737][ T1604] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.196751][ T1604] R13: 00007fc441fe6038 R14: 00007fc441fe5fa0 R15: 00007ffd5580f008 [ 640.196771][ T1604] [ 640.486302][ T1612] FAULT_INJECTION: forcing a failure. [ 640.486302][ T1612] name failslab, interval 1, probability 0, space 0, times 0 [ 640.499517][ T1612] CPU: 0 UID: 0 PID: 1612 Comm: syz.1.16011 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 640.499553][ T1612] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 640.499568][ T1612] Call Trace: [ 640.499575][ T1612] [ 640.499584][ T1612] __dump_stack+0x21/0x30 [ 640.499619][ T1612] dump_stack_lvl+0x10c/0x190 [ 640.499651][ T1612] ? __cfi_dump_stack_lvl+0x10/0x10 [ 640.499684][ T1612] ? __kasan_check_write+0x18/0x20 [ 640.499718][ T1612] dump_stack+0x19/0x20 [ 640.499747][ T1612] should_fail_ex+0x3d9/0x530 [ 640.499772][ T1612] should_failslab+0xac/0x100 [ 640.499798][ T1612] kmem_cache_alloc_noprof+0x42/0x430 [ 640.499820][ T1612] ? getname_flags+0xc6/0x710 [ 640.499842][ T1612] ? __cfi_ksys_write+0x10/0x10 [ 640.499863][ T1612] getname_flags+0xc6/0x710 [ 640.499885][ T1612] __x64_sys_mkdirat+0x7e/0xa0 [ 640.499914][ T1612] x64_sys_call+0x2ba8/0x2ee0 [ 640.499948][ T1612] do_syscall_64+0x58/0xf0 [ 640.499977][ T1612] ? clear_bhb_loop+0x50/0xa0 [ 640.500003][ T1612] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 640.500027][ T1612] RIP: 0033:0x7fc441d8f6c9 [ 640.500046][ T1612] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.500064][ T1612] RSP: 002b:00007fc442be0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 640.500088][ T1612] RAX: ffffffffffffffda RBX: 00007fc441fe5fa0 RCX: 00007fc441d8f6c9 [ 640.500106][ T1612] RDX: 00000000000001c0 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 640.500123][ T1612] RBP: 00007fc442be0090 R08: 0000000000000000 R09: 0000000000000000 [ 640.500139][ T1612] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 640.500154][ T1612] R13: 00007fc441fe6038 R14: 00007fc441fe5fa0 R15: 00007ffd5580f008 [ 640.500174][ T1612] [ 640.724560][ T1622] 9pnet_fd: Insufficient options for proto=fd [ 640.821135][ T1644] FAULT_INJECTION: forcing a failure. [ 640.821135][ T1644] name failslab, interval 1, probability 0, space 0, times 0 [ 640.834074][ T1644] CPU: 0 UID: 0 PID: 1644 Comm: syz.1.16027 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 640.834111][ T1644] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 640.834127][ T1644] Call Trace: [ 640.834136][ T1644] [ 640.834145][ T1644] __dump_stack+0x21/0x30 [ 640.834181][ T1644] dump_stack_lvl+0x10c/0x190 [ 640.834211][ T1644] ? __cfi_dump_stack_lvl+0x10/0x10 [ 640.834243][ T1644] ? kernel_text_address+0xa9/0xe0 [ 640.834272][ T1644] dump_stack+0x19/0x20 [ 640.834302][ T1644] should_fail_ex+0x3d9/0x530 [ 640.834325][ T1644] should_failslab+0xac/0x100 [ 640.834352][ T1644] __kmalloc_node_noprof+0x6c/0x520 [ 640.834375][ T1644] ? __kvmalloc_node_noprof+0x11d/0x300 [ 640.834422][ T1644] __kvmalloc_node_noprof+0x11d/0x300 [ 640.834456][ T1644] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 640.834493][ T1644] traverse+0xf5/0x720 [ 640.834519][ T1644] ? __cfi_mutex_lock+0x10/0x10 [ 640.834539][ T1644] ? selinux_file_permission+0x309/0xb30 [ 640.834571][ T1644] seq_read_iter+0xe55/0xfe0 [ 640.834597][ T1644] ? __kasan_check_write+0x18/0x20 [ 640.834631][ T1644] ? proc_fail_nth_write+0x17e/0x210 [ 640.834665][ T1644] vfs_read+0x62b/0xc70 [ 640.834686][ T1644] ? __cfi_vfs_read+0x10/0x10 [ 640.834710][ T1644] ksys_pread64+0x170/0x270 [ 640.834733][ T1644] ? __cfi_ksys_pread64+0x10/0x10 [ 640.834755][ T1644] __x64_sys_pread64+0x9f/0xb0 [ 640.834779][ T1644] x64_sys_call+0x2a34/0x2ee0 [ 640.834812][ T1644] do_syscall_64+0x58/0xf0 [ 640.834842][ T1644] ? clear_bhb_loop+0x50/0xa0 [ 640.834869][ T1644] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 640.834894][ T1644] RIP: 0033:0x7fc441d8f6c9 [ 640.834914][ T1644] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 640.834935][ T1644] RSP: 002b:00007fc442be0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 640.834960][ T1644] RAX: ffffffffffffffda RBX: 00007fc441fe5fa0 RCX: 00007fc441d8f6c9 [ 640.834978][ T1644] RDX: 0000000000001000 RSI: 00002000000029c0 RDI: 0000000000000006 [ 640.834995][ T1644] RBP: 00007fc442be0090 R08: 0000000000000000 R09: 0000000000000000 [ 640.835010][ T1644] R10: 0000000000000d36 R11: 0000000000000246 R12: 0000000000000001 [ 640.835025][ T1644] R13: 00007fc441fe6038 R14: 00007fc441fe5fa0 R15: 00007ffd5580f008 [ 640.835046][ T1644] [ 640.852433][ T1648] 9pnet_fd: Insufficient options for proto=fd [ 641.101272][ T36] audit: type=1400 audit(1763472287.430:288): avc: denied { append } for pid=1651 comm="syz.3.16031" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 641.132962][ T36] audit: type=1400 audit(1763472287.430:289): avc: denied { ioctl } for pid=1651 comm="syz.3.16031" path="/dev/rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 641.158306][ T36] audit: type=1400 audit(1763472287.480:290): avc: denied { write } for pid=1657 comm="syz.2.16033" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 641.185974][ T36] audit: type=1400 audit(1763472287.510:291): avc: denied { getattr } for pid=1657 comm="syz.2.16033" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 641.357679][ T36] audit: type=1400 audit(1763472287.680:292): avc: denied { remount } for pid=1684 comm="syz.2.16046" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 641.357676][ T1685] ======================================================= [ 641.357676][ T1685] WARNING: The mand mount option has been deprecated and [ 641.357676][ T1685] and is ignored by this kernel. Remove the mand [ 641.357676][ T1685] option from the mount to silence this warning. [ 641.357676][ T1685] ======================================================= [ 641.357736][ T1685] binder: Unknown parameter 'c' [ 641.516220][ T1701] FAULT_INJECTION: forcing a failure. [ 641.516220][ T1701] name failslab, interval 1, probability 0, space 0, times 0 [ 641.529129][ T1701] CPU: 1 UID: 0 PID: 1701 Comm: syz.1.16054 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 641.529164][ T1701] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 641.529178][ T1701] Call Trace: [ 641.529186][ T1701] [ 641.529195][ T1701] __dump_stack+0x21/0x30 [ 641.529231][ T1701] dump_stack_lvl+0x10c/0x190 [ 641.529261][ T1701] ? __cfi_dump_stack_lvl+0x10/0x10 [ 641.529293][ T1701] ? vfs_write+0x93e/0xf30 [ 641.529314][ T1701] dump_stack+0x19/0x20 [ 641.529343][ T1701] should_fail_ex+0x3d9/0x530 [ 641.529375][ T1701] should_failslab+0xac/0x100 [ 641.529401][ T1701] __kmalloc_cache_noprof+0x41/0x490 [ 641.529422][ T1701] ? __se_sys_mount+0x15f/0x480 [ 641.529443][ T1701] ? putname+0x113/0x150 [ 641.529465][ T1701] __se_sys_mount+0x15f/0x480 [ 641.529486][ T1701] ? ksys_write+0x1de/0x250 [ 641.529507][ T1701] ? __x64_sys_mount+0xf0/0xf0 [ 641.529529][ T1701] __x64_sys_mount+0xc3/0xf0 [ 641.529549][ T1701] x64_sys_call+0x2021/0x2ee0 [ 641.529581][ T1701] do_syscall_64+0x58/0xf0 [ 641.529610][ T1701] ? clear_bhb_loop+0x50/0xa0 [ 641.529633][ T1701] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 641.529658][ T1701] RIP: 0033:0x7fc441d8f6c9 [ 641.529675][ T1701] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 641.529694][ T1701] RSP: 002b:00007fc442be0038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 641.529719][ T1701] RAX: ffffffffffffffda RBX: 00007fc441fe5fa0 RCX: 00007fc441d8f6c9 [ 641.529737][ T1701] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 641.529752][ T1701] RBP: 00007fc442be0090 R08: 0000200000000200 R09: 0000000000000000 [ 641.529768][ T1701] R10: 0000000002010860 R11: 0000000000000246 R12: 0000000000000001 [ 641.529782][ T1701] R13: 00007fc441fe6038 R14: 00007fc441fe5fa0 R15: 00007ffd5580f008 [ 641.529803][ T1701] [ 641.591153][T30077] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 641.607606][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 641.810879][ T36] audit: type=1400 audit(1763472288.140:293): avc: denied { connect } for pid=1713 comm="syz.0.16059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 642.078248][ T36] audit: type=1400 audit(1763472288.400:294): avc: denied { create } for pid=1731 comm="syz.2.16069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 642.546248][ T1750] 9pnet_fd: Insufficient options for proto=fd [ 642.884398][ T1776] 9pnet_fd: Insufficient options for proto=fd [ 642.953480][ T1784] 9pnet_fd: Insufficient options for proto=fd [ 643.351224][ T36] audit: type=1400 audit(1763472289.670:295): avc: denied { write } for pid=1817 comm="syz.3.16111" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 643.459431][ T1835] 9pnet_fd: Insufficient options for proto=fd [ 643.647441][ T1867] 9pnet_fd: Insufficient options for proto=fd [ 643.661879][ T1865] fuse: Bad value for 'fd' [ 643.829078][ T1889] 9pnet_fd: Insufficient options for proto=fd [ 643.839107][ T1893] 9pnet_fd: Insufficient options for proto=fd [ 643.985873][ T1913] 9pnet_fd: Insufficient options for proto=fd [ 643.993213][ T1915] FAULT_INJECTION: forcing a failure. [ 643.993213][ T1915] name failslab, interval 1, probability 0, space 0, times 0 [ 644.016342][ T1915] CPU: 0 UID: 0 PID: 1915 Comm: syz.3.16157 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 644.016376][ T1915] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 644.016390][ T1915] Call Trace: [ 644.016398][ T1915] [ 644.016406][ T1915] __dump_stack+0x21/0x30 [ 644.016439][ T1915] dump_stack_lvl+0x10c/0x190 [ 644.016467][ T1915] ? __cfi_dump_stack_lvl+0x10/0x10 [ 644.016496][ T1915] dump_stack+0x19/0x20 [ 644.016521][ T1915] should_fail_ex+0x3d9/0x530 [ 644.016544][ T1915] should_failslab+0xac/0x100 [ 644.016585][ T1915] kmem_cache_alloc_lru_noprof+0x44/0x430 [ 644.016607][ T1915] ? sock_alloc_inode+0x48/0x150 [ 644.016632][ T1915] ? __kasan_check_write+0x18/0x20 [ 644.016664][ T1915] sock_alloc_inode+0x48/0x150 [ 644.016688][ T1915] ? __cfi_sock_alloc_inode+0x10/0x10 [ 644.016711][ T1915] alloc_inode+0x7a/0x270 [ 644.016736][ T1915] ? bpf_lsm_socket_create+0xd/0x20 [ 644.016762][ T1915] new_inode_pseudo+0x19/0x40 [ 644.016787][ T1915] __sock_create+0x130/0x810 [ 644.016815][ T1915] __sys_socket+0xe2/0x1c0 [ 644.016840][ T1915] __x64_sys_socket+0x7e/0x90 [ 644.016867][ T1915] x64_sys_call+0x2608/0x2ee0 [ 644.016899][ T1915] do_syscall_64+0x58/0xf0 [ 644.016927][ T1915] ? clear_bhb_loop+0x50/0xa0 [ 644.016952][ T1915] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 644.016975][ T1915] RIP: 0033:0x7fc72ef8f6c9 [ 644.016993][ T1915] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.017013][ T1915] RSP: 002b:00007fc72fe33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 644.017037][ T1915] RAX: ffffffffffffffda RBX: 00007fc72f1e5fa0 RCX: 00007fc72ef8f6c9 [ 644.017054][ T1915] RDX: 0000000000000006 RSI: 0000000000000003 RDI: 0000000000000010 [ 644.017068][ T1915] RBP: 00007fc72fe33090 R08: 0000000000000000 R09: 0000000000000000 [ 644.017084][ T1915] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.017098][ T1915] R13: 00007fc72f1e6038 R14: 00007fc72f1e5fa0 R15: 00007fff8ccd0918 [ 644.017118][ T1915] [ 644.017139][ T1915] socket: no more sockets [ 644.060562][ T1918] 9pnet_fd: Insufficient options for proto=fd [ 644.321786][ T1938] 9pnet_fd: Insufficient options for proto=fd [ 644.517550][ T1965] FAULT_INJECTION: forcing a failure. [ 644.517550][ T1965] name failslab, interval 1, probability 0, space 0, times 0 [ 644.551074][ T1965] CPU: 0 UID: 0 PID: 1965 Comm: syz.3.16181 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 644.551110][ T1965] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 644.551125][ T1965] Call Trace: [ 644.551133][ T1965] [ 644.551143][ T1965] __dump_stack+0x21/0x30 [ 644.551178][ T1965] dump_stack_lvl+0x10c/0x190 [ 644.551208][ T1965] ? __cfi_dump_stack_lvl+0x10/0x10 [ 644.551239][ T1965] ? vfs_write+0x93e/0xf30 [ 644.551275][ T1965] dump_stack+0x19/0x20 [ 644.551303][ T1965] should_fail_ex+0x3d9/0x530 [ 644.551327][ T1965] should_failslab+0xac/0x100 [ 644.551352][ T1965] __kmalloc_cache_noprof+0x41/0x490 [ 644.551374][ T1965] ? __se_sys_mount+0x15f/0x480 [ 644.551395][ T1965] ? putname+0x113/0x150 [ 644.551418][ T1965] __se_sys_mount+0x15f/0x480 [ 644.551438][ T1965] ? ksys_write+0x1de/0x250 [ 644.551459][ T1965] ? __x64_sys_mount+0xf0/0xf0 [ 644.551481][ T1965] __x64_sys_mount+0xc3/0xf0 [ 644.551502][ T1965] x64_sys_call+0x2021/0x2ee0 [ 644.551535][ T1965] do_syscall_64+0x58/0xf0 [ 644.551564][ T1965] ? clear_bhb_loop+0x50/0xa0 [ 644.551589][ T1965] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 644.551613][ T1965] RIP: 0033:0x7fc72ef8f6c9 [ 644.551632][ T1965] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.551651][ T1965] RSP: 002b:00007fc72fe33038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 644.551675][ T1965] RAX: ffffffffffffffda RBX: 00007fc72f1e5fa0 RCX: 00007fc72ef8f6c9 [ 644.551693][ T1965] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 644.551708][ T1965] RBP: 00007fc72fe33090 R08: 0000200000000200 R09: 0000000000000000 [ 644.551724][ T1965] R10: 0000000002010860 R11: 0000000000000246 R12: 0000000000000001 [ 644.551739][ T1965] R13: 00007fc72f1e6038 R14: 00007fc72f1e5fa0 R15: 00007fff8ccd0918 [ 644.551759][ T1965] [ 644.864342][ T1996] 9pnet_fd: Insufficient options for proto=fd [ 644.949937][ T2004] FAULT_INJECTION: forcing a failure. [ 644.949937][ T2004] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 644.965136][ T2004] CPU: 1 UID: 0 PID: 2004 Comm: syz.1.16200 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 644.965174][ T2004] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 644.965189][ T2004] Call Trace: [ 644.965198][ T2004] [ 644.965208][ T2004] __dump_stack+0x21/0x30 [ 644.965243][ T2004] dump_stack_lvl+0x10c/0x190 [ 644.965274][ T2004] ? __cfi_dump_stack_lvl+0x10/0x10 [ 644.965303][ T2004] ? _parse_integer_limit+0x195/0x1e0 [ 644.965341][ T2004] dump_stack+0x19/0x20 [ 644.965370][ T2004] should_fail_ex+0x3d9/0x530 [ 644.965394][ T2004] should_fail_alloc_page+0xeb/0x110 [ 644.965422][ T2004] __alloc_pages_noprof+0x19b/0x7b0 [ 644.965454][ T2004] ? kstrtouint+0x78/0xf0 [ 644.965474][ T2004] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 644.965505][ T2004] ? kstrtouint_from_user+0xfb/0x150 [ 644.965536][ T2004] ? x64_sys_call+0xe69/0x2ee0 [ 644.965570][ T2004] ? avc_policy_seqno+0xd/0x30 [ 644.965601][ T2004] ? selinux_file_permission+0x309/0xb30 [ 644.965630][ T2004] ? __cfi_selinux_file_permission+0x10/0x10 [ 644.965658][ T2004] get_zeroed_page_noprof+0x1f/0x50 [ 644.965689][ T2004] simple_transaction_get+0x5e/0x1e0 [ 644.965719][ T2004] selinux_transaction_write+0xd6/0x180 [ 644.965751][ T2004] ? __cfi_selinux_transaction_write+0x10/0x10 [ 644.965782][ T2004] vfs_write+0x3c0/0xf30 [ 644.965804][ T2004] ? __cfi_vfs_write+0x10/0x10 [ 644.965824][ T2004] ? __kasan_check_write+0x18/0x20 [ 644.965858][ T2004] ? mutex_lock+0x92/0x1c0 [ 644.965879][ T2004] ? __cfi_mutex_lock+0x10/0x10 [ 644.965899][ T2004] ? __fget_files+0x2c5/0x340 [ 644.965926][ T2004] ksys_write+0x141/0x250 [ 644.965946][ T2004] ? __cfi_ksys_write+0x10/0x10 [ 644.965969][ T2004] ? __kasan_check_read+0x15/0x20 [ 644.966003][ T2004] __x64_sys_write+0x7f/0x90 [ 644.966024][ T2004] x64_sys_call+0x271c/0x2ee0 [ 644.966058][ T2004] do_syscall_64+0x58/0xf0 [ 644.966087][ T2004] ? clear_bhb_loop+0x50/0xa0 [ 644.966112][ T2004] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 644.966136][ T2004] RIP: 0033:0x7fc441d8f6c9 [ 644.966155][ T2004] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 644.966175][ T2004] RSP: 002b:00007fc442be0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 644.966200][ T2004] RAX: ffffffffffffffda RBX: 00007fc441fe5fa0 RCX: 00007fc441d8f6c9 [ 644.966218][ T2004] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000008 [ 644.966233][ T2004] RBP: 00007fc442be0090 R08: 0000000000000000 R09: 0000000000000000 [ 644.966248][ T2004] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 644.966263][ T2004] R13: 00007fc441fe6038 R14: 00007fc441fe5fa0 R15: 00007ffd5580f008 [ 644.966285][ T2004] [ 645.064696][ T2010] 9pnet_fd: Insufficient options for proto=fd [ 645.766298][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 646.009025][ T2167] 9pnet_fd: Insufficient options for proto=fd [ 646.177524][ T2181] 9pnet_fd: Insufficient options for proto=fd [ 647.154110][ T2225] FAULT_INJECTION: forcing a failure. [ 647.154110][ T2225] name failslab, interval 1, probability 0, space 0, times 0 [ 647.186189][ T2225] CPU: 0 UID: 0 PID: 2225 Comm: syz.1.16309 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 647.186242][ T2225] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 647.186257][ T2225] Call Trace: [ 647.186265][ T2225] [ 647.186275][ T2225] __dump_stack+0x21/0x30 [ 647.186310][ T2225] dump_stack_lvl+0x10c/0x190 [ 647.186340][ T2225] ? __cfi_dump_stack_lvl+0x10/0x10 [ 647.186376][ T2225] ? __kasan_check_write+0x18/0x20 [ 647.186411][ T2225] ? proc_fail_nth_write+0x17e/0x210 [ 647.186449][ T2225] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 647.186479][ T2225] dump_stack+0x19/0x20 [ 647.186507][ T2225] should_fail_ex+0x3d9/0x530 [ 647.186532][ T2225] should_failslab+0xac/0x100 [ 647.186559][ T2225] kmem_cache_alloc_noprof+0x42/0x430 [ 647.186580][ T2225] ? getname_flags+0xc6/0x710 [ 647.186604][ T2225] getname_flags+0xc6/0x710 [ 647.186626][ T2225] ? build_open_flags+0x487/0x600 [ 647.186657][ T2225] getname+0x1b/0x30 [ 647.186678][ T2225] do_sys_openat2+0xcb/0x1c0 [ 647.186706][ T2225] ? fput+0x1a5/0x240 [ 647.186733][ T2225] ? do_sys_open+0x100/0x100 [ 647.186761][ T2225] ? ksys_write+0x1ef/0x250 [ 647.186782][ T2225] ? __cfi_ksys_write+0x10/0x10 [ 647.186805][ T2225] __x64_sys_openat+0x13a/0x170 [ 647.186836][ T2225] x64_sys_call+0xe69/0x2ee0 [ 647.186869][ T2225] do_syscall_64+0x58/0xf0 [ 647.186898][ T2225] ? clear_bhb_loop+0x50/0xa0 [ 647.186924][ T2225] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 647.186949][ T2225] RIP: 0033:0x7fc441d8f6c9 [ 647.186968][ T2225] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.186988][ T2225] RSP: 002b:00007fc442be0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 647.187013][ T2225] RAX: ffffffffffffffda RBX: 00007fc441fe5fa0 RCX: 00007fc441d8f6c9 [ 647.187031][ T2225] RDX: 0000000000028181 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 647.187047][ T2225] RBP: 00007fc442be0090 R08: 0000000000000000 R09: 0000000000000000 [ 647.187067][ T2225] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.187082][ T2225] R13: 00007fc441fe6038 R14: 00007fc441fe5fa0 R15: 00007ffd5580f008 [ 647.187102][ T2225] [ 647.575342][ T2257] input: syz1 as /devices/virtual/input/input5 [ 647.810754][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 647.810748][T30077] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 647.842378][ T2275] fuse: Bad value for 'fd' [ 647.896670][ T2281] FAULT_INJECTION: forcing a failure. [ 647.896670][ T2281] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.940826][ T2281] CPU: 0 UID: 0 PID: 2281 Comm: syz.3.16335 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 647.940864][ T2281] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 647.940880][ T2281] Call Trace: [ 647.940888][ T2281] [ 647.940897][ T2281] __dump_stack+0x21/0x30 [ 647.940933][ T2281] dump_stack_lvl+0x10c/0x190 [ 647.940964][ T2281] ? __cfi_dump_stack_lvl+0x10/0x10 [ 647.940994][ T2281] ? kernel_text_address+0xa9/0xe0 [ 647.941024][ T2281] dump_stack+0x19/0x20 [ 647.941052][ T2281] should_fail_ex+0x3d9/0x530 [ 647.941076][ T2281] should_fail+0xf/0x20 [ 647.941097][ T2281] should_fail_usercopy+0x1e/0x30 [ 647.941121][ T2281] _copy_from_user+0x22/0xb0 [ 647.941158][ T2281] ___sys_sendmsg+0x159/0x2a0 [ 647.941191][ T2281] ? __sys_sendmsg+0x280/0x280 [ 647.941224][ T2281] ? kstrtouint+0x78/0xf0 [ 647.941251][ T2281] __sys_sendmmsg+0x271/0x470 [ 647.941285][ T2281] ? __cfi___sys_sendmmsg+0x10/0x10 [ 647.941324][ T2281] ? __cfi_ksys_write+0x10/0x10 [ 647.941347][ T2281] __x64_sys_sendmmsg+0xa4/0xc0 [ 647.941380][ T2281] x64_sys_call+0xfec/0x2ee0 [ 647.941413][ T2281] do_syscall_64+0x58/0xf0 [ 647.941450][ T2281] ? clear_bhb_loop+0x50/0xa0 [ 647.941475][ T2281] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 647.941499][ T2281] RIP: 0033:0x7fc72ef8f6c9 [ 647.941518][ T2281] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.941538][ T2281] RSP: 002b:00007fc72fe33038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 647.941564][ T2281] RAX: ffffffffffffffda RBX: 00007fc72f1e5fa0 RCX: 00007fc72ef8f6c9 [ 647.941582][ T2281] RDX: 0000000000000001 RSI: 0000200000003480 RDI: 0000000000000007 [ 647.941602][ T2281] RBP: 00007fc72fe33090 R08: 0000000000000000 R09: 0000000000000000 [ 647.941617][ T2281] R10: 0000000000000014 R11: 0000000000000246 R12: 0000000000000001 [ 647.941650][ T2281] R13: 00007fc72f1e6038 R14: 00007fc72f1e5fa0 R15: 00007fff8ccd0918 [ 647.941671][ T2281] [ 648.171244][ T2285] 9pnet_fd: Insufficient options for proto=fd [ 648.503959][ T2325] 9pnet_fd: Insufficient options for proto=fd [ 648.519179][ T2327] FAULT_INJECTION: forcing a failure. [ 648.519179][ T2327] name failslab, interval 1, probability 0, space 0, times 0 [ 648.536923][ T2327] CPU: 1 UID: 0 PID: 2327 Comm: syz.3.16356 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 648.536962][ T2327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 648.536978][ T2327] Call Trace: [ 648.536986][ T2327] [ 648.536995][ T2327] __dump_stack+0x21/0x30 [ 648.537031][ T2327] dump_stack_lvl+0x10c/0x190 [ 648.537061][ T2327] ? __cfi_dump_stack_lvl+0x10/0x10 [ 648.537094][ T2327] dump_stack+0x19/0x20 [ 648.537123][ T2327] should_fail_ex+0x3d9/0x530 [ 648.537149][ T2327] should_failslab+0xac/0x100 [ 648.537176][ T2327] kmem_cache_alloc_noprof+0x42/0x430 [ 648.537197][ T2327] ? __khugepaged_enter+0x78/0x330 [ 648.537227][ T2327] __khugepaged_enter+0x78/0x330 [ 648.537255][ T2327] khugepaged_enter_vma+0x3ff/0x430 [ 648.537284][ T2327] hugepage_madvise+0xaf/0xd0 [ 648.537312][ T2327] madvise_vma_behavior+0x6b4/0x2d40 [ 648.537348][ T2327] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 648.537389][ T2327] ? is_bpf_text_address+0x17b/0x1a0 [ 648.537415][ T2327] ? kernel_text_address+0xa9/0xe0 [ 648.537445][ T2327] ? __kernel_text_address+0x11/0x40 [ 648.537473][ T2327] ? unwind_get_return_address+0x51/0x90 [ 648.537501][ T2327] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 648.537536][ T2327] ? arch_stack_walk+0x10b/0x170 [ 648.537559][ T2327] ? _parse_integer_limit+0x195/0x1e0 [ 648.537594][ T2327] ? mtree_range_walk+0x573/0x730 [ 648.537618][ T2327] ? mas_prev_slot+0xab4/0xb60 [ 648.537644][ T2327] ? mas_prev+0x5f/0xa0 [ 648.537666][ T2327] ? find_vma_prev+0xfd/0x170 [ 648.537687][ T2327] ? __cfi_find_vma_prev+0x10/0x10 [ 648.537710][ T2327] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 648.537742][ T2327] ? bpf_lsm_file_permission+0xd/0x20 [ 648.537775][ T2327] madvise_walk_vmas+0x3ec/0x700 [ 648.537809][ T2327] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 648.537844][ T2327] ? down_write_killable+0xe9/0x2d0 [ 648.537869][ T2327] ? madvise_set_anon_name+0x610/0x610 [ 648.537901][ T2327] ? __asan_memset+0x39/0x50 [ 648.537921][ T2327] ? blk_start_plug+0x72/0x1c0 [ 648.537945][ T2327] do_madvise+0x5c0/0xb70 [ 648.537975][ T2327] ? __cfi_do_madvise+0x10/0x10 [ 648.538007][ T2327] ? ksys_write+0x1ef/0x250 [ 648.538028][ T2327] ? __cfi_ksys_write+0x10/0x10 [ 648.538051][ T2327] __x64_sys_madvise+0xae/0xc0 [ 648.538084][ T2327] x64_sys_call+0x20c3/0x2ee0 [ 648.538118][ T2327] do_syscall_64+0x58/0xf0 [ 648.538146][ T2327] ? clear_bhb_loop+0x50/0xa0 [ 648.538173][ T2327] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 648.538197][ T2327] RIP: 0033:0x7fc72ef8f6c9 [ 648.538216][ T2327] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 648.538237][ T2327] RSP: 002b:00007fc72fe33038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 648.538263][ T2327] RAX: ffffffffffffffda RBX: 00007fc72f1e5fa0 RCX: 00007fc72ef8f6c9 [ 648.538281][ T2327] RDX: 000000000000000e RSI: 0000000000004000 RDI: 0000200000a93000 [ 648.538296][ T2327] RBP: 00007fc72fe33090 R08: 0000000000000000 R09: 0000000000000000 [ 648.538312][ T2327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 648.538327][ T2327] R13: 00007fc72f1e6038 R14: 00007fc72f1e5fa0 R15: 00007fff8ccd0918 [ 648.538346][ T2327] [ 648.874742][ T2333] rust_binder: Read failure Err(EAGAIN) in pid:1052 [ 649.049161][ T2347] 9pnet_fd: Insufficient options for proto=fd [ 649.085869][ T2350] 9pnet_fd: Insufficient options for proto=fd [ 649.262561][ T2371] 9pnet_fd: Insufficient options for proto=fd [ 649.595733][ T2421] FAULT_INJECTION: forcing a failure. [ 649.595733][ T2421] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 649.609511][ T2421] CPU: 1 UID: 0 PID: 2421 Comm: syz.1.16403 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 649.609547][ T2421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 649.609562][ T2421] Call Trace: [ 649.609571][ T2421] [ 649.609580][ T2421] __dump_stack+0x21/0x30 [ 649.609615][ T2421] dump_stack_lvl+0x10c/0x190 [ 649.609645][ T2421] ? __cfi_dump_stack_lvl+0x10/0x10 [ 649.609676][ T2421] ? kstrtoull+0x13b/0x1e0 [ 649.609696][ T2421] dump_stack+0x19/0x20 [ 649.609724][ T2421] should_fail_ex+0x3d9/0x530 [ 649.609747][ T2421] should_fail+0xf/0x20 [ 649.609768][ T2421] should_fail_usercopy+0x1e/0x30 [ 649.609793][ T2421] _copy_from_user+0x22/0xb0 [ 649.609822][ T2421] ___sys_sendmsg+0x159/0x2a0 [ 649.609863][ T2421] ? __sys_sendmsg+0x280/0x280 [ 649.609896][ T2421] ? proc_fail_nth_write+0x17e/0x210 [ 649.609925][ T2421] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 649.609961][ T2421] __x64_sys_sendmsg+0x1eb/0x2c0 [ 649.609993][ T2421] ? fput+0x1a5/0x240 [ 649.610020][ T2421] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 649.610053][ T2421] ? ksys_write+0x1ef/0x250 [ 649.610077][ T2421] ? __kasan_check_read+0x15/0x20 [ 649.610112][ T2421] x64_sys_call+0x2a4c/0x2ee0 [ 649.610145][ T2421] do_syscall_64+0x58/0xf0 [ 649.610173][ T2421] ? clear_bhb_loop+0x50/0xa0 [ 649.610198][ T2421] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 649.610222][ T2421] RIP: 0033:0x7fc441d8f6c9 [ 649.610240][ T2421] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 649.610261][ T2421] RSP: 002b:00007fc442be0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 649.610285][ T2421] RAX: ffffffffffffffda RBX: 00007fc441fe5fa0 RCX: 00007fc441d8f6c9 [ 649.610302][ T2421] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 649.610326][ T2421] RBP: 00007fc442be0090 R08: 0000000000000000 R09: 0000000000000000 [ 649.610341][ T2421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 649.610355][ T2421] R13: 00007fc441fe6038 R14: 00007fc441fe5fa0 R15: 00007ffd5580f008 [ 649.610376][ T2421] [ 650.290754][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 650.290842][T30077] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 650.830861][ T2559] FAULT_INJECTION: forcing a failure. [ 650.830861][ T2559] name failslab, interval 1, probability 0, space 0, times 0 [ 650.848792][ T2559] CPU: 0 UID: 0 PID: 2559 Comm: syz.1.16472 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 650.848831][ T2559] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 650.848846][ T2559] Call Trace: [ 650.848855][ T2559] [ 650.848864][ T2559] __dump_stack+0x21/0x30 [ 650.848900][ T2559] dump_stack_lvl+0x10c/0x190 [ 650.848930][ T2559] ? __cfi_dump_stack_lvl+0x10/0x10 [ 650.848960][ T2559] ? cred_has_capability+0x281/0x380 [ 650.848989][ T2559] ? selinux_perf_event_alloc+0x110/0x110 [ 650.849017][ T2559] dump_stack+0x19/0x20 [ 650.849046][ T2559] should_fail_ex+0x3d9/0x530 [ 650.849071][ T2559] should_failslab+0xac/0x100 [ 650.849108][ T2559] kmem_cache_alloc_noprof+0x42/0x430 [ 650.849129][ T2559] ? prepare_creds+0x48/0x6b0 [ 650.849152][ T2559] ? bpf_lsm_capable+0xd/0x20 [ 650.849175][ T2559] prepare_creds+0x48/0x6b0 [ 650.849198][ T2559] ? ns_capable_setid+0x94/0xf0 [ 650.849231][ T2559] __sys_setresuid+0x63e/0xda0 [ 650.849260][ T2559] __x64_sys_setresuid+0x7e/0x90 [ 650.849285][ T2559] x64_sys_call+0x2728/0x2ee0 [ 650.849319][ T2559] do_syscall_64+0x58/0xf0 [ 650.849356][ T2559] ? clear_bhb_loop+0x50/0xa0 [ 650.849382][ T2559] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 650.849406][ T2559] RIP: 0033:0x7fc441d8f6c9 [ 650.849424][ T2559] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 650.849444][ T2559] RSP: 002b:00007fc442be0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000075 [ 650.849470][ T2559] RAX: ffffffffffffffda RBX: 00007fc441fe5fa0 RCX: 00007fc441d8f6c9 [ 650.849488][ T2559] RDX: 00000000000041c0 RSI: 00000000000041c0 RDI: 000000000000ee01 [ 650.849503][ T2559] RBP: 00007fc442be0090 R08: 0000000000000000 R09: 0000000000000000 [ 650.849518][ T2559] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 650.849533][ T2559] R13: 00007fc441fe6038 R14: 00007fc441fe5fa0 R15: 00007ffd5580f008 [ 650.849553][ T2559] [ 651.159392][ T2578] 9pnet_fd: Insufficient options for proto=fd [ 651.341029][ T2608] 9pnet_fd: Insufficient options for proto=fd [ 651.592858][ T2625] FAULT_INJECTION: forcing a failure. [ 651.592858][ T2625] name failslab, interval 1, probability 0, space 0, times 0 [ 651.620793][ T2625] CPU: 0 UID: 0 PID: 2625 Comm: syz.0.16504 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 651.620830][ T2625] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 651.620845][ T2625] Call Trace: [ 651.620853][ T2625] [ 651.620863][ T2625] __dump_stack+0x21/0x30 [ 651.620903][ T2625] dump_stack_lvl+0x10c/0x190 [ 651.620934][ T2625] ? __cfi_dump_stack_lvl+0x10/0x10 [ 651.620965][ T2625] ? proc_fail_nth_write+0x17e/0x210 [ 651.620996][ T2625] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 651.621035][ T2625] dump_stack+0x19/0x20 [ 651.621065][ T2625] should_fail_ex+0x3d9/0x530 [ 651.621089][ T2625] should_failslab+0xac/0x100 [ 651.621116][ T2625] kmem_cache_alloc_noprof+0x42/0x430 [ 651.621137][ T2625] ? getname_flags+0xc6/0x710 [ 651.621161][ T2625] getname_flags+0xc6/0x710 [ 651.621181][ T2625] ? __fget_files+0x2c5/0x340 [ 651.621205][ T2625] user_path_at+0x2b/0x60 [ 651.621229][ T2625] __se_sys_mount+0x288/0x480 [ 651.621249][ T2625] ? ksys_write+0x1ef/0x250 [ 651.621269][ T2625] ? __x64_sys_mount+0xf0/0xf0 [ 651.621305][ T2625] __x64_sys_mount+0xc3/0xf0 [ 651.621325][ T2625] x64_sys_call+0x2021/0x2ee0 [ 651.621356][ T2625] do_syscall_64+0x58/0xf0 [ 651.621383][ T2625] ? clear_bhb_loop+0x50/0xa0 [ 651.621408][ T2625] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 651.621432][ T2625] RIP: 0033:0x7f18eef8f6c9 [ 651.621450][ T2625] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.621469][ T2625] RSP: 002b:00007f18efef5038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 651.621492][ T2625] RAX: ffffffffffffffda RBX: 00007f18ef1e5fa0 RCX: 00007f18eef8f6c9 [ 651.621509][ T2625] RDX: 0000000000000000 RSI: 0000200000000080 RDI: 0000000000000000 [ 651.621522][ T2625] RBP: 00007f18efef5090 R08: 0000000000000000 R09: 0000000000000000 [ 651.621536][ T2625] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 651.621549][ T2625] R13: 00007f18ef1e6038 R14: 00007f18ef1e5fa0 R15: 00007ffeae9cf168 [ 651.621567][ T2625] [ 651.641336][ T2628] 9pnet_fd: Insufficient options for proto=fd [ 652.769332][ T2703] 9pnet_fd: Insufficient options for proto=fd [ 652.833449][ T2706] fuse: Bad value for 'fd' [ 652.913729][ T2721] 9pnet_fd: Insufficient options for proto=fd [ 653.000615][ T2727] 9pnet_fd: Insufficient options for proto=fd [ 653.151105][ T2743] 9pnet_fd: Insufficient options for proto=fd [ 653.359122][ T46] Bluetooth: hci0: Frame reassembly failed (-84) [ 654.821461][ T2826] fuse: Bad value for 'fd' [ 655.006318][ T2862] fuse: Bad value for 'fd' [ 655.098004][ T2875] FAULT_INJECTION: forcing a failure. [ 655.098004][ T2875] name failslab, interval 1, probability 0, space 0, times 0 [ 655.111786][ T2875] CPU: 1 UID: 0 PID: 2875 Comm: syz.0.16627 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 655.111823][ T2875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 655.111838][ T2875] Call Trace: [ 655.111854][ T2875] [ 655.111864][ T2875] __dump_stack+0x21/0x30 [ 655.111900][ T2875] dump_stack_lvl+0x10c/0x190 [ 655.111931][ T2875] ? __cfi_dump_stack_lvl+0x10/0x10 [ 655.111965][ T2875] dump_stack+0x19/0x20 [ 655.111994][ T2875] should_fail_ex+0x3d9/0x530 [ 655.112019][ T2875] should_failslab+0xac/0x100 [ 655.112046][ T2875] kmem_cache_alloc_noprof+0x42/0x430 [ 655.112068][ T2875] ? __khugepaged_enter+0x78/0x330 [ 655.112098][ T2875] __khugepaged_enter+0x78/0x330 [ 655.112126][ T2875] khugepaged_enter_vma+0x3ff/0x430 [ 655.112156][ T2875] hugepage_madvise+0xaf/0xd0 [ 655.112184][ T2875] madvise_vma_behavior+0x6b4/0x2d40 [ 655.112219][ T2875] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 655.112254][ T2875] ? is_bpf_text_address+0x17b/0x1a0 [ 655.112280][ T2875] ? kernel_text_address+0xa9/0xe0 [ 655.112310][ T2875] ? __kernel_text_address+0x11/0x40 [ 655.112339][ T2875] ? unwind_get_return_address+0x51/0x90 [ 655.112367][ T2875] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 655.112403][ T2875] ? arch_stack_walk+0x10b/0x170 [ 655.112425][ T2875] ? _parse_integer_limit+0x195/0x1e0 [ 655.112481][ T2875] ? mtree_range_walk+0x573/0x730 [ 655.112505][ T2875] ? mas_prev_slot+0xab4/0xb60 [ 655.112530][ T2875] ? mas_prev+0x5f/0xa0 [ 655.112552][ T2875] ? find_vma_prev+0xfd/0x170 [ 655.112573][ T2875] ? __cfi_find_vma_prev+0x10/0x10 [ 655.112595][ T2875] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 655.112625][ T2875] ? bpf_lsm_file_permission+0xd/0x20 [ 655.112657][ T2875] madvise_walk_vmas+0x3ec/0x700 [ 655.112689][ T2875] ? __cfi_madvise_vma_behavior+0x10/0x10 [ 655.112722][ T2875] ? down_write_killable+0xe9/0x2d0 [ 655.112746][ T2875] ? madvise_set_anon_name+0x610/0x610 [ 655.112778][ T2875] ? __asan_memset+0x39/0x50 [ 655.112798][ T2875] ? blk_start_plug+0x72/0x1c0 [ 655.112821][ T2875] do_madvise+0x5c0/0xb70 [ 655.112859][ T2875] ? __cfi_do_madvise+0x10/0x10 [ 655.112891][ T2875] ? ksys_write+0x1ef/0x250 [ 655.112912][ T2875] ? __cfi_ksys_write+0x10/0x10 [ 655.112935][ T2875] __x64_sys_madvise+0xae/0xc0 [ 655.112967][ T2875] x64_sys_call+0x20c3/0x2ee0 [ 655.113000][ T2875] do_syscall_64+0x58/0xf0 [ 655.113028][ T2875] ? clear_bhb_loop+0x50/0xa0 [ 655.113071][ T2875] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 655.113095][ T2875] RIP: 0033:0x7f18eef8f6c9 [ 655.113114][ T2875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 655.113135][ T2875] RSP: 002b:00007f18efef5038 EFLAGS: 00000246 ORIG_RAX: 000000000000001c [ 655.113160][ T2875] RAX: ffffffffffffffda RBX: 00007f18ef1e5fa0 RCX: 00007f18eef8f6c9 [ 655.113178][ T2875] RDX: 000000000000000e RSI: 0000000000004000 RDI: 0000200000a93000 [ 655.113193][ T2875] RBP: 00007f18efef5090 R08: 0000000000000000 R09: 0000000000000000 [ 655.113209][ T2875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 655.113224][ T2875] R13: 00007f18ef1e6038 R14: 00007f18ef1e5fa0 R15: 00007ffeae9cf168 [ 655.113244][ T2875] [ 655.410755][T30077] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 655.498325][ T2888] fuse: Bad value for 'fd' [ 655.526053][ T2895] 9pnet_fd: Insufficient options for proto=fd [ 655.550660][ T36] kauditd_printk_skb: 1 callbacks suppressed [ 655.550679][ T36] audit: type=1400 audit(1763472301.850:297): avc: denied { create } for pid=2894 comm="syz.1.16637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 655.578395][ T36] audit: type=1400 audit(1763472301.850:298): avc: denied { write } for pid=2894 comm="syz.1.16637" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 655.936366][ T2956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.16666'. [ 655.946145][ T2956] bridge_slave_1: left allmulticast mode [ 655.953117][ T2956] bridge_slave_1: left promiscuous mode [ 655.959373][ T2956] bridge0: port 2(bridge_slave_1) entered disabled state [ 655.979559][ T2956] bridge_slave_0: left allmulticast mode [ 655.986548][ T2956] bridge_slave_0: left promiscuous mode [ 655.992959][ T2956] bridge0: port 1(bridge_slave_0) entered disabled state [ 656.474269][ T3014] fuse: Bad value for 'fd' [ 656.639524][ T3022] 9pnet_fd: Insufficient options for proto=fd [ 656.689730][ T3024] netlink: 4 bytes leftover after parsing attributes in process `syz.1.16700'. [ 656.959170][ T46] bridge_slave_1: left allmulticast mode [ 656.977318][ T46] bridge_slave_1: left promiscuous mode [ 656.997632][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.018488][ T46] bridge_slave_0: left allmulticast mode [ 657.040791][ T46] bridge_slave_0: left promiscuous mode [ 657.046484][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.193793][ T46] veth1_macvtap: left promiscuous mode [ 657.199364][ T46] veth0_vlan: left promiscuous mode [ 657.405730][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.413279][ T3026] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.421164][ T3026] bridge_slave_0: entered allmulticast mode [ 657.427883][ T3026] bridge_slave_0: entered promiscuous mode [ 657.434599][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.443357][ T3026] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.450525][ T3026] bridge_slave_1: entered allmulticast mode [ 657.456982][ T3026] bridge_slave_1: entered promiscuous mode [ 657.569601][ T3026] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.576720][ T3026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.584072][ T3026] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.591154][ T3026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.635313][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 657.644170][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 657.661638][ T5512] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.668728][ T5512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.688589][ T5512] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.695716][ T5512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.758032][ T3026] veth0_vlan: entered promiscuous mode [ 657.771560][ T3091] netlink: 68 bytes leftover after parsing attributes in process `syz.0.16729'. [ 657.777946][ T3026] veth1_macvtap: entered promiscuous mode [ 657.847203][ T3104] FAULT_INJECTION: forcing a failure. [ 657.847203][ T3104] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 657.860931][ T3104] CPU: 0 UID: 0 PID: 3104 Comm: syz.2.16734 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 657.860981][ T3104] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 657.860996][ T3104] Call Trace: [ 657.861021][ T3104] [ 657.861030][ T3104] __dump_stack+0x21/0x30 [ 657.861066][ T3104] dump_stack_lvl+0x10c/0x190 [ 657.861096][ T3104] ? __cfi_dump_stack_lvl+0x10/0x10 [ 657.861127][ T3104] ? kstrtoull+0x13b/0x1e0 [ 657.861147][ T3104] dump_stack+0x19/0x20 [ 657.861175][ T3104] should_fail_ex+0x3d9/0x530 [ 657.861198][ T3104] should_fail+0xf/0x20 [ 657.861219][ T3104] should_fail_usercopy+0x1e/0x30 [ 657.861243][ T3104] _copy_from_user+0x22/0xb0 [ 657.861271][ T3104] ___sys_sendmsg+0x159/0x2a0 [ 657.861305][ T3104] ? __sys_sendmsg+0x280/0x280 [ 657.861337][ T3104] ? proc_fail_nth_write+0x17e/0x210 [ 657.861368][ T3104] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 657.861405][ T3104] __x64_sys_sendmsg+0x1eb/0x2c0 [ 657.861438][ T3104] ? fput+0x1a5/0x240 [ 657.861464][ T3104] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 657.861498][ T3104] ? ksys_write+0x1ef/0x250 [ 657.861520][ T3104] ? __kasan_check_read+0x15/0x20 [ 657.861555][ T3104] x64_sys_call+0x2a4c/0x2ee0 [ 657.861587][ T3104] do_syscall_64+0x58/0xf0 [ 657.861642][ T3104] ? clear_bhb_loop+0x50/0xa0 [ 657.861668][ T3104] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 657.861692][ T3104] RIP: 0033:0x7fc00838f6c9 [ 657.861718][ T3104] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 657.861745][ T3104] RSP: 002b:00007fc009203038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 657.861770][ T3104] RAX: ffffffffffffffda RBX: 00007fc0085e5fa0 RCX: 00007fc00838f6c9 [ 657.861788][ T3104] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 000000000000000a [ 657.861803][ T3104] RBP: 00007fc009203090 R08: 0000000000000000 R09: 0000000000000000 [ 657.861818][ T3104] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 657.861832][ T3104] R13: 00007fc0085e6038 R14: 00007fc0085e5fa0 R15: 00007fff047573c8 [ 657.861852][ T3104] [ 658.159332][ T3118] 9pnet_fd: Insufficient options for proto=fd [ 658.206377][ T3111] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.213561][ T3111] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.220673][ T3111] bridge_slave_0: entered allmulticast mode [ 658.227215][ T3111] bridge_slave_0: entered promiscuous mode [ 658.233895][ T3111] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.241034][ T3111] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.248201][ T3111] bridge_slave_1: entered allmulticast mode [ 658.254612][ T3111] bridge_slave_1: entered promiscuous mode [ 658.262510][ T12] bridge_slave_1: left allmulticast mode [ 658.270759][ T12] bridge_slave_1: left promiscuous mode [ 658.277978][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.288366][ T12] bridge_slave_0: left allmulticast mode [ 658.298577][ T12] bridge_slave_0: left promiscuous mode [ 658.304545][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.347259][ T3148] 9pnet_fd: Insufficient options for proto=fd [ 658.369813][ T3152] 9pnet_fd: Insufficient options for proto=fd [ 658.410785][ T330] usb 1-1: new full-speed USB device number 12 using dummy_hcd [ 658.448415][ T12] veth1_macvtap: left promiscuous mode [ 658.454286][ T12] veth0_vlan: left promiscuous mode [ 658.461075][ T3161] FAULT_INJECTION: forcing a failure. [ 658.461075][ T3161] name failslab, interval 1, probability 0, space 0, times 0 [ 658.473787][ T3161] CPU: 1 UID: 0 PID: 3161 Comm: syz.1.16758 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 658.473822][ T3161] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 658.473838][ T3161] Call Trace: [ 658.473846][ T3161] [ 658.473857][ T3161] __dump_stack+0x21/0x30 [ 658.473893][ T3161] dump_stack_lvl+0x10c/0x190 [ 658.473924][ T3161] ? __cfi_dump_stack_lvl+0x10/0x10 [ 658.473955][ T3161] ? __kasan_check_write+0x18/0x20 [ 658.473998][ T3161] ? proc_fail_nth_write+0x17e/0x210 [ 658.474029][ T3161] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 658.474061][ T3161] dump_stack+0x19/0x20 [ 658.474090][ T3161] should_fail_ex+0x3d9/0x530 [ 658.474114][ T3161] should_failslab+0xac/0x100 [ 658.474140][ T3161] kmem_cache_alloc_noprof+0x42/0x430 [ 658.474162][ T3161] ? getname_flags+0xc6/0x710 [ 658.474186][ T3161] getname_flags+0xc6/0x710 [ 658.474207][ T3161] ? build_open_flags+0x487/0x600 [ 658.474237][ T3161] getname+0x1b/0x30 [ 658.474259][ T3161] do_sys_openat2+0xcb/0x1c0 [ 658.474288][ T3161] ? fput+0x1a5/0x240 [ 658.474314][ T3161] ? do_sys_open+0x100/0x100 [ 658.474343][ T3161] ? ksys_write+0x1ef/0x250 [ 658.474363][ T3161] ? __cfi_ksys_write+0x10/0x10 [ 658.474386][ T3161] __x64_sys_openat+0x13a/0x170 [ 658.474416][ T3161] x64_sys_call+0xe69/0x2ee0 [ 658.474450][ T3161] do_syscall_64+0x58/0xf0 [ 658.474478][ T3161] ? clear_bhb_loop+0x50/0xa0 [ 658.474504][ T3161] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 658.474541][ T3161] RIP: 0033:0x7f839718f6c9 [ 658.474559][ T3161] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 658.474579][ T3161] RSP: 002b:00007f8397f73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 658.474603][ T3161] RAX: ffffffffffffffda RBX: 00007f83973e5fa0 RCX: 00007f839718f6c9 [ 658.474621][ T3161] RDX: 000000000016b042 RSI: 0000200000000500 RDI: ffffffffffffff9c [ 658.474637][ T3161] RBP: 00007f8397f73090 R08: 0000000000000000 R09: 0000000000000000 [ 658.474653][ T3161] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 658.474668][ T3161] R13: 00007f83973e6038 R14: 00007f83973e5fa0 R15: 00007ffccb8cf4c8 [ 658.474688][ T3161] [ 658.700573][ T330] usb 1-1: config 0 has no interfaces? [ 658.706140][ T330] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 658.718321][ T330] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 658.734628][ T330] usb 1-1: config 0 descriptor?? [ 658.766050][ T3111] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.773181][ T3111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.780460][ T3111] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.787521][ T3111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.819783][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 658.820809][ T31] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 658.835132][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 658.845810][ T5512] bridge0: port 1(bridge_slave_0) entered blocking state [ 658.852911][ T5512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 658.863913][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 658.871002][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.901893][ T3111] veth0_vlan: entered promiscuous mode [ 658.915155][ T3111] veth1_macvtap: entered promiscuous mode [ 658.943617][ T330] usb 1-1: USB disconnect, device number 12 [ 658.980782][ T31] usb 3-1: Using ep0 maxpacket: 32 [ 658.992386][ T31] usb 3-1: unable to get BOS descriptor or descriptor too short [ 659.000820][ T31] usb 3-1: config 9 has an invalid interface number: 254 but max is 0 [ 659.009045][ T31] usb 3-1: config 9 has no interface number 0 [ 659.020805][ T31] usb 3-1: config 9 interface 254 altsetting 2 bulk endpoint 0xC has invalid maxpacket 16 [ 659.039644][ T31] usb 3-1: config 9 interface 254 has no altsetting 0 [ 659.047942][ T31] usb 3-1: New USB device found, idVendor=0af0, idProduct=7601, bcdDevice=53.6c [ 659.060761][ T31] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 659.068813][ T31] usb 3-1: Product: syz [ 659.073308][ T31] usb 3-1: Manufacturer: syz [ 659.077937][ T31] usb 3-1: SerialNumber: syz [ 659.084209][ T3157] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 659.301415][ T31] usb 3-1: USB disconnect, device number 19 [ 659.863595][ T3227] 9pnet_fd: Insufficient options for proto=fd [ 660.726259][ T5512] Bluetooth: hci0: Frame reassembly failed (-84) [ 660.930801][ T1456] usb 1-1: new full-speed USB device number 13 using dummy_hcd [ 661.102313][ T1456] usb 1-1: config 0 has no interfaces? [ 661.108067][ T1456] usb 1-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 661.127363][ T1456] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 661.148365][ T1456] usb 1-1: config 0 descriptor?? [ 661.361956][ T1456] usb 1-1: USB disconnect, device number 13 [ 661.993575][ T3312] 9pnet_fd: Insufficient options for proto=fd [ 662.133250][ T3322] netlink: 'syz.0.16834': attribute type 4 has an invalid length. [ 662.141220][ T3322] netlink: 'syz.0.16834': attribute type 5 has an invalid length. [ 662.149055][ T3322] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.16834'. [ 662.520985][ T3332] fuse: Bad value for 'fd' [ 662.770754][T30077] Bluetooth: hci0: command 0x1003 tx timeout [ 662.777307][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 662.962954][ T3360] 9pnet_fd: Insufficient options for proto=fd [ 663.007050][ T3363] FAULT_INJECTION: forcing a failure. [ 663.007050][ T3363] name failslab, interval 1, probability 0, space 0, times 0 [ 663.052800][ T3363] CPU: 1 UID: 0 PID: 3363 Comm: syz.1.16853 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 663.052838][ T3363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 663.052853][ T3363] Call Trace: [ 663.052861][ T3363] [ 663.052870][ T3363] __dump_stack+0x21/0x30 [ 663.052904][ T3363] dump_stack_lvl+0x10c/0x190 [ 663.052932][ T3363] ? __cfi_dump_stack_lvl+0x10/0x10 [ 663.052963][ T3363] ? bpf_lsm_file_permission+0xd/0x20 [ 663.052996][ T3363] dump_stack+0x19/0x20 [ 663.053029][ T3363] should_fail_ex+0x3d9/0x530 [ 663.053071][ T3363] should_failslab+0xac/0x100 [ 663.053098][ T3363] kmem_cache_alloc_noprof+0x42/0x430 [ 663.053120][ T3363] ? __kasan_check_write+0x18/0x20 [ 663.053153][ T3363] ? copy_fs_struct+0x5d/0x2d0 [ 663.053174][ T3363] ? __cfi_mutex_unlock+0x10/0x10 [ 663.053195][ T3363] ? __fget_files+0x2c5/0x340 [ 663.053220][ T3363] copy_fs_struct+0x5d/0x2d0 [ 663.053240][ T3363] ? ksys_unshare+0x381/0x880 [ 663.053270][ T3363] ksys_unshare+0x48f/0x880 [ 663.053300][ T3363] ? __cfi_ksys_unshare+0x10/0x10 [ 663.053329][ T3363] ? __kasan_check_read+0x15/0x20 [ 663.053362][ T3363] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 663.053391][ T3363] __x64_sys_unshare+0x3c/0x50 [ 663.053420][ T3363] x64_sys_call+0x2998/0x2ee0 [ 663.053453][ T3363] do_syscall_64+0x58/0xf0 [ 663.053482][ T3363] ? clear_bhb_loop+0x50/0xa0 [ 663.053508][ T3363] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 663.053532][ T3363] RIP: 0033:0x7f839718f6c9 [ 663.053551][ T3363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 663.053573][ T3363] RSP: 002b:00007f8397f73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 663.053599][ T3363] RAX: ffffffffffffffda RBX: 00007f83973e5fa0 RCX: 00007f839718f6c9 [ 663.053625][ T3363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 663.053640][ T3363] RBP: 00007f8397f73090 R08: 0000000000000000 R09: 0000000000000000 [ 663.053657][ T3363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 663.053672][ T3363] R13: 00007f83973e6038 R14: 00007f83973e5fa0 R15: 00007ffccb8cf4c8 [ 663.053693][ T3363] [ 663.308436][ T3366] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.316414][ T3366] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.325307][ T3366] bridge_slave_0: entered allmulticast mode [ 663.331936][ T3366] bridge_slave_0: entered promiscuous mode [ 663.387292][ T3366] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.403859][ T3366] bridge0: port 2(bridge_slave_1) entered disabled state [ 663.422358][ T3366] bridge_slave_1: entered allmulticast mode [ 663.441777][ T3366] bridge_slave_1: entered promiscuous mode [ 663.460659][ T12] veth1_macvtap: left promiscuous mode [ 663.475195][ T12] veth0_vlan: left promiscuous mode [ 663.853563][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 663.860659][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 663.903066][ T5512] bridge0: port 2(bridge_slave_1) entered blocking state [ 663.910141][ T5512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 663.996137][ T3366] veth0_vlan: entered promiscuous mode [ 664.028695][ T3366] veth1_macvtap: entered promiscuous mode [ 665.893543][ T3493] fuse: Bad value for 'fd' [ 667.243179][ T3562] FAULT_INJECTION: forcing a failure. [ 667.243179][ T3562] name failslab, interval 1, probability 0, space 0, times 0 [ 667.256163][ T3562] CPU: 0 UID: 0 PID: 3562 Comm: syz.2.16945 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 667.256203][ T3562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 667.256218][ T3562] Call Trace: [ 667.256225][ T3562] [ 667.256234][ T3562] __dump_stack+0x21/0x30 [ 667.256269][ T3562] dump_stack_lvl+0x10c/0x190 [ 667.256299][ T3562] ? __cfi_dump_stack_lvl+0x10/0x10 [ 667.256331][ T3562] ? avc_has_perm+0x144/0x220 [ 667.256364][ T3562] dump_stack+0x19/0x20 [ 667.256392][ T3562] should_fail_ex+0x3d9/0x530 [ 667.256413][ T3562] should_failslab+0xac/0x100 [ 667.256441][ T3562] __kmalloc_cache_noprof+0x41/0x490 [ 667.256464][ T3562] ? vhost_task_create+0x101/0x350 [ 667.256488][ T3562] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 667.256515][ T3562] vhost_task_create+0x101/0x350 [ 667.256537][ T3562] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 667.256564][ T3562] ? __cfi_vhost_task_create+0x10/0x10 [ 667.256588][ T3562] ? __cfi_vhost_task_fn+0x10/0x10 [ 667.256610][ T3562] ? __kasan_check_write+0x18/0x20 [ 667.256652][ T3562] ? mutex_lock+0x92/0x1c0 [ 667.256673][ T3562] ? __cfi_mutex_lock+0x10/0x10 [ 667.256694][ T3562] ? kernel_text_address+0xa9/0xe0 [ 667.256724][ T3562] kvm_mmu_post_init_vm+0x156/0x2d0 [ 667.256756][ T3562] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 667.256793][ T3562] ? _parse_integer_limit+0x195/0x1e0 [ 667.256830][ T3562] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 667.256860][ T3562] ? kstrtoull+0x13b/0x1e0 [ 667.256880][ T3562] ? kstrtouint+0x78/0xf0 [ 667.256901][ T3562] ? ioctl_has_perm+0x1aa/0x4d0 [ 667.256927][ T3562] ? __asan_memcpy+0x5a/0x80 [ 667.256948][ T3562] ? ioctl_has_perm+0x3e0/0x4d0 [ 667.256975][ T3562] ? has_cap_mac_admin+0xd0/0xd0 [ 667.257002][ T3562] ? __kasan_check_write+0x18/0x20 [ 667.257036][ T3562] ? mutex_lock_killable+0x92/0x1c0 [ 667.257059][ T3562] ? __cfi_mutex_lock_killable+0x10/0x10 [ 667.257082][ T3562] ? proc_fail_nth_write+0x17e/0x210 [ 667.257115][ T3562] kvm_vcpu_ioctl+0x96f/0xee0 [ 667.257136][ T3562] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 667.257157][ T3562] ? __cfi_vfs_write+0x10/0x10 [ 667.257178][ T3562] ? __kasan_check_write+0x18/0x20 [ 667.257211][ T3562] ? mutex_unlock+0x8b/0x240 [ 667.257232][ T3562] ? __cfi_mutex_unlock+0x10/0x10 [ 667.257252][ T3562] ? __fget_files+0x2c5/0x340 [ 667.257277][ T3562] ? __fget_files+0x2c5/0x340 [ 667.257302][ T3562] ? bpf_lsm_file_ioctl+0xd/0x20 [ 667.257332][ T3562] ? security_file_ioctl+0x34/0xd0 [ 667.257358][ T3562] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 667.257377][ T3562] __se_sys_ioctl+0x135/0x1b0 [ 667.257404][ T3562] __x64_sys_ioctl+0x7f/0xa0 [ 667.257428][ T3562] x64_sys_call+0x1878/0x2ee0 [ 667.257462][ T3562] do_syscall_64+0x58/0xf0 [ 667.257490][ T3562] ? clear_bhb_loop+0x50/0xa0 [ 667.257515][ T3562] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 667.257544][ T3562] RIP: 0033:0x7f83c338f6c9 [ 667.257563][ T3562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.257584][ T3562] RSP: 002b:00007f83c4181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 667.257609][ T3562] RAX: ffffffffffffffda RBX: 00007f83c35e5fa0 RCX: 00007f83c338f6c9 [ 667.257627][ T3562] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 667.257660][ T3562] RBP: 00007f83c4181090 R08: 0000000000000000 R09: 0000000000000000 [ 667.257675][ T3562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.257691][ T3562] R13: 00007f83c35e6038 R14: 00007f83c35e5fa0 R15: 00007ffc4fa445e8 [ 667.257711][ T3562] [ 667.611948][T30077] Bluetooth: hci0: command 0x1003 tx timeout [ 667.618007][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 667.780994][ T3606] FAULT_INJECTION: forcing a failure. [ 667.780994][ T3606] name failslab, interval 1, probability 0, space 0, times 0 [ 667.794396][ T3606] CPU: 0 UID: 0 PID: 3606 Comm: syz.3.16967 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 667.794435][ T3606] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 667.794462][ T3606] Call Trace: [ 667.794470][ T3606] [ 667.794480][ T3606] __dump_stack+0x21/0x30 [ 667.794517][ T3606] dump_stack_lvl+0x10c/0x190 [ 667.794548][ T3606] ? __cfi_dump_stack_lvl+0x10/0x10 [ 667.794580][ T3606] dump_stack+0x19/0x20 [ 667.794609][ T3606] should_fail_ex+0x3d9/0x530 [ 667.794633][ T3606] should_failslab+0xac/0x100 [ 667.794659][ T3606] kmem_cache_alloc_noprof+0x42/0x430 [ 667.794681][ T3606] ? kvm_vm_ioctl_create_vcpu+0x134/0xaa0 [ 667.794714][ T3606] ? kvm_arch_vcpu_precreate+0x12c/0x1f0 [ 667.794746][ T3606] kvm_vm_ioctl_create_vcpu+0x134/0xaa0 [ 667.794778][ T3606] ? _parse_integer+0x2e/0x40 [ 667.794812][ T3606] kvm_vm_ioctl+0x729/0xb80 [ 667.794843][ T3606] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 667.794873][ T3606] ? ioctl_has_perm+0x1aa/0x4d0 [ 667.794900][ T3606] ? __asan_memcpy+0x5a/0x80 [ 667.794921][ T3606] ? ioctl_has_perm+0x3e0/0x4d0 [ 667.794948][ T3606] ? has_cap_mac_admin+0xd0/0xd0 [ 667.794975][ T3606] ? proc_fail_nth_write+0x17e/0x210 [ 667.795005][ T3606] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 667.795036][ T3606] ? selinux_file_ioctl+0x6e0/0x1360 [ 667.795063][ T3606] ? vfs_write+0x93e/0xf30 [ 667.795083][ T3606] ? __cfi_selinux_file_ioctl+0x10/0x10 [ 667.795110][ T3606] ? __cfi_vfs_write+0x10/0x10 [ 667.795131][ T3606] ? __kasan_check_write+0x18/0x20 [ 667.795164][ T3606] ? mutex_unlock+0x8b/0x240 [ 667.795185][ T3606] ? __cfi_mutex_unlock+0x10/0x10 [ 667.795205][ T3606] ? __fget_files+0x2c5/0x340 [ 667.795231][ T3606] ? __fget_files+0x2c5/0x340 [ 667.795255][ T3606] ? bpf_lsm_file_ioctl+0xd/0x20 [ 667.795285][ T3606] ? security_file_ioctl+0x34/0xd0 [ 667.795310][ T3606] ? __cfi_kvm_vm_ioctl+0x10/0x10 [ 667.795339][ T3606] __se_sys_ioctl+0x135/0x1b0 [ 667.795364][ T3606] __x64_sys_ioctl+0x7f/0xa0 [ 667.795389][ T3606] x64_sys_call+0x1878/0x2ee0 [ 667.795421][ T3606] do_syscall_64+0x58/0xf0 [ 667.795456][ T3606] ? clear_bhb_loop+0x50/0xa0 [ 667.795482][ T3606] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 667.795506][ T3606] RIP: 0033:0x7fade478f6c9 [ 667.795525][ T3606] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 667.795545][ T3606] RSP: 002b:00007fade55a9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 667.795570][ T3606] RAX: ffffffffffffffda RBX: 00007fade49e5fa0 RCX: 00007fade478f6c9 [ 667.795587][ T3606] RDX: 0000000000000000 RSI: 000000000000ae41 RDI: 0000000000000007 [ 667.795602][ T3606] RBP: 00007fade55a9090 R08: 0000000000000000 R09: 0000000000000000 [ 667.795617][ T3606] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 667.795632][ T3606] R13: 00007fade49e6038 R14: 00007fade49e5fa0 R15: 00007ffd05cd8e78 [ 667.795652][ T3606] [ 668.175348][ T3629] FAULT_INJECTION: forcing a failure. [ 668.175348][ T3629] name failslab, interval 1, probability 0, space 0, times 0 [ 668.191601][ T3629] CPU: 0 UID: 0 PID: 3629 Comm: syz.1.16979 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 668.191638][ T3629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 668.191654][ T3629] Call Trace: [ 668.191662][ T3629] [ 668.191672][ T3629] __dump_stack+0x21/0x30 [ 668.191710][ T3629] dump_stack_lvl+0x10c/0x190 [ 668.191741][ T3629] ? __cfi_dump_stack_lvl+0x10/0x10 [ 668.191774][ T3629] ? __kasan_check_write+0x18/0x20 [ 668.191809][ T3629] ? mutex_unlock+0x8b/0x240 [ 668.191832][ T3629] dump_stack+0x19/0x20 [ 668.191862][ T3629] should_fail_ex+0x3d9/0x530 [ 668.191888][ T3629] should_failslab+0xac/0x100 [ 668.191915][ T3629] kmem_cache_alloc_noprof+0x42/0x430 [ 668.191938][ T3629] ? getname_flags+0xc6/0x710 [ 668.191963][ T3629] getname_flags+0xc6/0x710 [ 668.191985][ T3629] ? __kasan_check_read+0x15/0x20 [ 668.192021][ T3629] __x64_sys_rmdir+0x3e/0x60 [ 668.192049][ T3629] x64_sys_call+0xaf7/0x2ee0 [ 668.192083][ T3629] do_syscall_64+0x58/0xf0 [ 668.192112][ T3629] ? clear_bhb_loop+0x50/0xa0 [ 668.192138][ T3629] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 668.192162][ T3629] RIP: 0033:0x7f839718f6c9 [ 668.192180][ T3629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 668.192199][ T3629] RSP: 002b:00007f8397f73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 668.192225][ T3629] RAX: ffffffffffffffda RBX: 00007f83973e5fa0 RCX: 00007f839718f6c9 [ 668.192243][ T3629] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 668.192271][ T3629] RBP: 00007f8397f73090 R08: 0000000000000000 R09: 0000000000000000 [ 668.192285][ T3629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 668.192300][ T3629] R13: 00007f83973e6038 R14: 00007f83973e5fa0 R15: 00007ffccb8cf4c8 [ 668.192319][ T3629] [ 668.551173][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state [ 668.568535][ T3650] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.590781][ T3650] bridge_slave_0: entered allmulticast mode [ 668.606036][ T3650] bridge_slave_0: entered promiscuous mode [ 668.625551][ T12] bridge_slave_1: left allmulticast mode [ 668.631328][ T12] bridge_slave_1: left promiscuous mode [ 668.640868][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.658712][ T12] bridge_slave_0: left allmulticast mode [ 668.671957][ T12] bridge_slave_0: left promiscuous mode [ 668.688728][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.778371][ T3687] 9pnet_fd: Insufficient options for proto=fd [ 668.803380][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state [ 668.820367][ T3650] bridge0: port 2(bridge_slave_1) entered disabled state [ 668.832873][ T3650] bridge_slave_1: entered allmulticast mode [ 668.849466][ T3650] bridge_slave_1: entered promiscuous mode [ 668.881966][ T12] veth1_macvtap: left promiscuous mode [ 668.887542][ T12] veth0_vlan: left promiscuous mode [ 669.093377][ T3650] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.100489][ T3650] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.107845][ T3650] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.114925][ T3650] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.171025][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 669.178558][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 669.209314][ T5512] bridge0: port 1(bridge_slave_0) entered blocking state [ 669.216427][ T5512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 669.233434][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 669.240535][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 669.298075][ T3650] veth0_vlan: entered promiscuous mode [ 669.311513][ T3650] veth1_macvtap: entered promiscuous mode [ 669.975646][ T3747] FAULT_INJECTION: forcing a failure. [ 669.975646][ T3747] name failslab, interval 1, probability 0, space 0, times 0 [ 670.001314][ T3747] CPU: 1 UID: 0 PID: 3747 Comm: syz.1.17032 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 670.001361][ T3747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 670.001377][ T3747] Call Trace: [ 670.001385][ T3747] [ 670.001395][ T3747] __dump_stack+0x21/0x30 [ 670.001432][ T3747] dump_stack_lvl+0x10c/0x190 [ 670.001461][ T3747] ? __cfi_dump_stack_lvl+0x10/0x10 [ 670.001493][ T3747] ? avc_has_perm+0x144/0x220 [ 670.001525][ T3747] dump_stack+0x19/0x20 [ 670.001553][ T3747] should_fail_ex+0x3d9/0x530 [ 670.001578][ T3747] should_failslab+0xac/0x100 [ 670.001605][ T3747] __kmalloc_cache_noprof+0x41/0x490 [ 670.001629][ T3747] ? vhost_task_create+0x101/0x350 [ 670.001653][ T3747] ? __cfi_kvm_nx_huge_page_recovery_worker+0x10/0x10 [ 670.001681][ T3747] vhost_task_create+0x101/0x350 [ 670.001703][ T3747] ? __cfi_kvm_nx_huge_page_recovery_worker_kill+0x10/0x10 [ 670.001731][ T3747] ? __cfi_vhost_task_create+0x10/0x10 [ 670.001755][ T3747] ? __cfi_vhost_task_fn+0x10/0x10 [ 670.001777][ T3747] ? __kasan_check_write+0x18/0x20 [ 670.001811][ T3747] ? mutex_lock+0x92/0x1c0 [ 670.001832][ T3747] ? __cfi_mutex_lock+0x10/0x10 [ 670.001853][ T3747] ? kernel_text_address+0xa9/0xe0 [ 670.001882][ T3747] kvm_mmu_post_init_vm+0x156/0x2d0 [ 670.001915][ T3747] kvm_arch_vcpu_ioctl_run+0xd7/0x1aa0 [ 670.001945][ T3747] ? _parse_integer_limit+0x195/0x1e0 [ 670.001983][ T3747] ? __cfi_kvm_arch_vcpu_ioctl_run+0x10/0x10 [ 670.002013][ T3747] ? kstrtoull+0x13b/0x1e0 [ 670.002033][ T3747] ? kstrtouint+0x78/0xf0 [ 670.002053][ T3747] ? ioctl_has_perm+0x1aa/0x4d0 [ 670.002080][ T3747] ? __asan_memcpy+0x5a/0x80 [ 670.002100][ T3747] ? ioctl_has_perm+0x3e0/0x4d0 [ 670.002126][ T3747] ? has_cap_mac_admin+0xd0/0xd0 [ 670.002153][ T3747] ? __kasan_check_write+0x18/0x20 [ 670.002186][ T3747] ? mutex_lock_killable+0x92/0x1c0 [ 670.002208][ T3747] ? __cfi_mutex_lock_killable+0x10/0x10 [ 670.002230][ T3747] ? proc_fail_nth_write+0x17e/0x210 [ 670.002262][ T3747] kvm_vcpu_ioctl+0x96f/0xee0 [ 670.002284][ T3747] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 670.002305][ T3747] ? __cfi_vfs_write+0x10/0x10 [ 670.002325][ T3747] ? __kasan_check_write+0x18/0x20 [ 670.002364][ T3747] ? mutex_unlock+0x8b/0x240 [ 670.002384][ T3747] ? __cfi_mutex_unlock+0x10/0x10 [ 670.002405][ T3747] ? __fget_files+0x2c5/0x340 [ 670.002431][ T3747] ? __fget_files+0x2c5/0x340 [ 670.002456][ T3747] ? bpf_lsm_file_ioctl+0xd/0x20 [ 670.002486][ T3747] ? security_file_ioctl+0x34/0xd0 [ 670.002512][ T3747] ? __cfi_kvm_vcpu_ioctl+0x10/0x10 [ 670.002532][ T3747] __se_sys_ioctl+0x135/0x1b0 [ 670.002557][ T3747] __x64_sys_ioctl+0x7f/0xa0 [ 670.002581][ T3747] x64_sys_call+0x1878/0x2ee0 [ 670.002615][ T3747] do_syscall_64+0x58/0xf0 [ 670.002643][ T3747] ? clear_bhb_loop+0x50/0xa0 [ 670.002668][ T3747] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 670.002692][ T3747] RIP: 0033:0x7f839718f6c9 [ 670.002711][ T3747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 670.002731][ T3747] RSP: 002b:00007f8397f73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 670.002755][ T3747] RAX: ffffffffffffffda RBX: 00007f83973e5fa0 RCX: 00007f839718f6c9 [ 670.002773][ T3747] RDX: 0000000000000000 RSI: 000000000000ae80 RDI: 0000000000000008 [ 670.002789][ T3747] RBP: 00007f8397f73090 R08: 0000000000000000 R09: 0000000000000000 [ 670.002804][ T3747] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 670.002818][ T3747] R13: 00007f83973e6038 R14: 00007f83973e5fa0 R15: 00007ffccb8cf4c8 [ 670.002839][ T3747] [ 671.012384][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 671.471287][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 672.256047][ T3871] 9pnet: Could not find request transport: fd00000000000000000000 [ 673.081256][ T3907] fuse: Bad value for 'fd' [ 673.337385][ T3929] 9pnet_fd: Insufficient options for proto=fd [ 673.491293][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 673.497365][T30077] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 673.601934][ T3947] 9pnet_fd: Insufficient options for proto=fd [ 673.759664][ T36] audit: type=1400 audit(1763472320.080:299): avc: denied { create } for pid=3964 comm="syz.2.17141" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=tcp_socket permissive=1 [ 676.392769][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 677.589888][ T293] Bluetooth: hci1: Frame reassembly failed (-84) [ 677.785499][ T4188] fuse: Bad value for 'fd' [ 678.450750][T30077] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 678.457010][T30076] Bluetooth: hci0: command 0x1003 tx timeout [ 678.613905][T30077] Bluetooth: hci0: sending frame failed (-49) [ 678.620104][T30076] Bluetooth: hci0: Opcode 0x1003 failed: -49 [ 679.260807][ T293] Bluetooth: hci0: Frame reassembly failed (-84) [ 679.650754][T30077] Bluetooth: hci1: command 0x1003 tx timeout [ 679.657016][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 680.739047][ T4330] fuse: Bad value for 'fd' [ 680.922038][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 680.928471][ T12] Bluetooth: hci1: Frame reassembly failed (-84) [ 681.330774][T30077] Bluetooth: hci0: command 0x1003 tx timeout [ 681.336873][T30076] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 681.742726][ T4376] 9pnet_fd: Insufficient options for proto=fd [ 682.159979][ T293] Bluetooth: hci2: Frame reassembly failed (-84) [ 682.940806][ T4393] Bluetooth: hci1: command 0x1003 tx timeout [ 682.940848][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 683.410770][ T4393] Bluetooth: hci0: command 0x1003 tx timeout [ 683.410776][T30076] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 684.210791][T30077] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 685.175838][ T54] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 686.272334][ T4661] kvm: pic: non byte read [ 686.281219][ T4661] kvm: pic: non byte read [ 686.285868][ T4661] kvm: pic: single mode not supported [ 686.285884][ T4661] kvm: pic: level sensitive irq not supported [ 686.310858][ T4661] kvm: pic: non byte read [ 686.331095][ T4661] kvm: pic: single mode not supported [ 686.331167][ T4661] kvm: pic: non byte read [ 686.351110][ T4661] kvm: pic: non byte read [ 686.355827][ T4661] kvm: pic: non byte read [ 686.360473][ T4661] kvm: pic: single mode not supported [ 686.360490][ T4661] kvm: pic: level sensitive irq not supported [ 686.390850][ T4661] kvm: pic: non byte read [ 686.421081][ T4661] kvm: pic: single mode not supported [ 686.421156][ T4661] kvm: pic: non byte read [ 686.441100][ T4661] kvm: pic: non byte read [ 686.790241][ T36] audit: type=1400 audit(1763472333.110:300): avc: denied { nlmsg_write } for pid=4689 comm="syz.1.17502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 687.240372][ T4700] fuse: Bad value for 'fd' [ 687.741774][ T4736] fuse: Bad value for 'fd' [ 688.002061][ T36] audit: type=1400 audit(1763472334.330:301): avc: denied { unmount } for pid=4758 comm="syz.3.17535" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 688.595923][ T36] audit: type=1400 audit(1763472334.920:302): avc: denied { remount } for pid=4793 comm="syz.3.17552" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 688.982299][ T4830] FAULT_INJECTION: forcing a failure. [ 688.982299][ T4830] name failslab, interval 1, probability 0, space 0, times 0 [ 688.999612][ T4830] CPU: 1 UID: 0 PID: 4830 Comm: syz.0.17571 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 688.999649][ T4830] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 688.999664][ T4830] Call Trace: [ 688.999672][ T4830] [ 688.999683][ T4830] __dump_stack+0x21/0x30 [ 688.999720][ T4830] dump_stack_lvl+0x10c/0x190 [ 688.999751][ T4830] ? __cfi_dump_stack_lvl+0x10/0x10 [ 688.999784][ T4830] ? bpf_lsm_file_permission+0xd/0x20 [ 688.999824][ T4830] dump_stack+0x19/0x20 [ 688.999854][ T4830] should_fail_ex+0x3d9/0x530 [ 688.999878][ T4830] should_failslab+0xac/0x100 [ 688.999905][ T4830] kmem_cache_alloc_noprof+0x42/0x430 [ 688.999927][ T4830] ? __kasan_check_write+0x18/0x20 [ 688.999960][ T4830] ? copy_fs_struct+0x5d/0x2d0 [ 688.999981][ T4830] ? __cfi_mutex_unlock+0x10/0x10 [ 689.000002][ T4830] ? __fget_files+0x2c5/0x340 [ 689.000027][ T4830] copy_fs_struct+0x5d/0x2d0 [ 689.000048][ T4830] ? ksys_unshare+0x381/0x880 [ 689.000078][ T4830] ksys_unshare+0x48f/0x880 [ 689.000107][ T4830] ? xfd_validate_state+0x68/0x150 [ 689.000138][ T4830] ? __cfi_ksys_unshare+0x10/0x10 [ 689.000168][ T4830] ? __kasan_check_read+0x15/0x20 [ 689.000201][ T4830] ? fpregs_assert_state_consistent+0xb7/0xe0 [ 689.000231][ T4830] __x64_sys_unshare+0x3c/0x50 [ 689.000260][ T4830] x64_sys_call+0x2998/0x2ee0 [ 689.000294][ T4830] do_syscall_64+0x58/0xf0 [ 689.000324][ T4830] ? clear_bhb_loop+0x50/0xa0 [ 689.000350][ T4830] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 689.000375][ T4830] RIP: 0033:0x7f006418f6c9 [ 689.000394][ T4830] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.000431][ T4830] RSP: 002b:00007f0062bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 689.000456][ T4830] RAX: ffffffffffffffda RBX: 00007f00643e5fa0 RCX: 00007f006418f6c9 [ 689.000474][ T4830] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062020680 [ 689.000490][ T4830] RBP: 00007f0062bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 689.000506][ T4830] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.000521][ T4830] R13: 00007f00643e6038 R14: 00007f00643e5fa0 R15: 00007fffd6841088 [ 689.000542][ T4830] [ 689.371051][ T4854] FAULT_INJECTION: forcing a failure. [ 689.371051][ T4854] name failslab, interval 1, probability 0, space 0, times 0 [ 689.388651][ T4854] CPU: 1 UID: 0 PID: 4854 Comm: syz.2.17580 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 689.388688][ T4854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 689.388703][ T4854] Call Trace: [ 689.388711][ T4854] [ 689.388720][ T4854] __dump_stack+0x21/0x30 [ 689.388755][ T4854] dump_stack_lvl+0x10c/0x190 [ 689.388784][ T4854] ? __cfi_dump_stack_lvl+0x10/0x10 [ 689.388815][ T4854] ? avc_has_extended_perms+0x921/0xdd0 [ 689.388856][ T4854] dump_stack+0x19/0x20 [ 689.388883][ T4854] should_fail_ex+0x3d9/0x530 [ 689.388906][ T4854] should_failslab+0xac/0x100 [ 689.388931][ T4854] __kmalloc_cache_node_noprof+0x46/0x450 [ 689.388955][ T4854] ? __get_vm_area_node+0x154/0x3a0 [ 689.388985][ T4854] __get_vm_area_node+0x154/0x3a0 [ 689.389033][ T4854] __vmalloc_node_range_noprof+0x33c/0x1420 [ 689.389065][ T4854] ? kvm_dev_ioctl+0x125/0x14d0 [ 689.389097][ T4854] ? number+0xd21/0xf80 [ 689.389125][ T4854] ? pointer+0xdd0/0xdd0 [ 689.389153][ T4854] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 689.389185][ T4854] ? vsnprintf+0x19b8/0x1aa0 [ 689.389213][ T4854] ? kvm_dev_ioctl+0x125/0x14d0 [ 689.389246][ T4854] __vmalloc_noprof+0xfe/0x1d0 [ 689.389276][ T4854] ? kvm_dev_ioctl+0x125/0x14d0 [ 689.389308][ T4854] ? alloc_fd+0x4e7/0x5a0 [ 689.389330][ T4854] ? __cfi___vmalloc_noprof+0x10/0x10 [ 689.389363][ T4854] kvm_dev_ioctl+0x125/0x14d0 [ 689.389395][ T4854] ? __fget_files+0x2c5/0x340 [ 689.389419][ T4854] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 689.389450][ T4854] ? bpf_lsm_file_ioctl+0xd/0x20 [ 689.389481][ T4854] ? security_file_ioctl+0x34/0xd0 [ 689.389507][ T4854] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 689.389537][ T4854] __se_sys_ioctl+0x135/0x1b0 [ 689.389563][ T4854] __x64_sys_ioctl+0x7f/0xa0 [ 689.389588][ T4854] x64_sys_call+0x1878/0x2ee0 [ 689.389620][ T4854] do_syscall_64+0x58/0xf0 [ 689.389648][ T4854] ? clear_bhb_loop+0x50/0xa0 [ 689.389673][ T4854] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 689.389697][ T4854] RIP: 0033:0x7f83c338f6c9 [ 689.389715][ T4854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.389736][ T4854] RSP: 002b:00007f83c4181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 689.389761][ T4854] RAX: ffffffffffffffda RBX: 00007f83c35e5fa0 RCX: 00007f83c338f6c9 [ 689.389779][ T4854] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 689.389795][ T4854] RBP: 00007f83c4181090 R08: 0000000000000000 R09: 0000000000000000 [ 689.389810][ T4854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.389831][ T4854] R13: 00007f83c35e6038 R14: 00007f83c35e5fa0 R15: 00007ffc4fa445e8 [ 689.389852][ T4854] [ 689.389862][ T4854] syz.2.17580: vmalloc error: size 39304, vm_struct allocation failed, mode:0x400dc0(GFP_KERNEL_ACCOUNT|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0 [ 689.674351][ T4854] CPU: 1 UID: 0 PID: 4854 Comm: syz.2.17580 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 689.674387][ T4854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 689.674402][ T4854] Call Trace: [ 689.674410][ T4854] [ 689.674418][ T4854] __dump_stack+0x21/0x30 [ 689.674454][ T4854] dump_stack_lvl+0x10c/0x190 [ 689.674482][ T4854] ? __cfi_dump_stack_lvl+0x10/0x10 [ 689.674512][ T4854] ? _raw_spin_unlock_irqrestore+0x4a/0x70 [ 689.674543][ T4854] dump_stack+0x19/0x20 [ 689.674570][ T4854] warn_alloc+0x1bc/0x2a0 [ 689.674598][ T4854] ? __kasan_kmalloc+0x28/0xb0 [ 689.674622][ T4854] ? __cfi_warn_alloc+0x10/0x10 [ 689.674651][ T4854] ? __get_vm_area_node+0x392/0x3a0 [ 689.674682][ T4854] __vmalloc_node_range_noprof+0x361/0x1420 [ 689.674714][ T4854] ? number+0xd21/0xf80 [ 689.674741][ T4854] ? pointer+0xdd0/0xdd0 [ 689.674767][ T4854] ? __cfi___vmalloc_node_range_noprof+0x10/0x10 [ 689.674806][ T4854] ? vsnprintf+0x19b8/0x1aa0 [ 689.674833][ T4854] ? kvm_dev_ioctl+0x125/0x14d0 [ 689.674864][ T4854] __vmalloc_noprof+0xfe/0x1d0 [ 689.674893][ T4854] ? kvm_dev_ioctl+0x125/0x14d0 [ 689.674923][ T4854] ? alloc_fd+0x4e7/0x5a0 [ 689.674945][ T4854] ? __cfi___vmalloc_noprof+0x10/0x10 [ 689.674977][ T4854] kvm_dev_ioctl+0x125/0x14d0 [ 689.675008][ T4854] ? __fget_files+0x2c5/0x340 [ 689.675030][ T4854] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 689.675061][ T4854] ? bpf_lsm_file_ioctl+0xd/0x20 [ 689.675091][ T4854] ? security_file_ioctl+0x34/0xd0 [ 689.675115][ T4854] ? __cfi_kvm_dev_ioctl+0x10/0x10 [ 689.675146][ T4854] __se_sys_ioctl+0x135/0x1b0 [ 689.675170][ T4854] __x64_sys_ioctl+0x7f/0xa0 [ 689.675194][ T4854] x64_sys_call+0x1878/0x2ee0 [ 689.675225][ T4854] do_syscall_64+0x58/0xf0 [ 689.675252][ T4854] ? clear_bhb_loop+0x50/0xa0 [ 689.675277][ T4854] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 689.675300][ T4854] RIP: 0033:0x7f83c338f6c9 [ 689.675318][ T4854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 689.675337][ T4854] RSP: 002b:00007f83c4181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 689.675361][ T4854] RAX: ffffffffffffffda RBX: 00007f83c35e5fa0 RCX: 00007f83c338f6c9 [ 689.675378][ T4854] RDX: 0000000000000000 RSI: 000000000000ae01 RDI: 0000000000000008 [ 689.675393][ T4854] RBP: 00007f83c4181090 R08: 0000000000000000 R09: 0000000000000000 [ 689.675408][ T4854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 689.675422][ T4854] R13: 00007f83c35e6038 R14: 00007f83c35e5fa0 R15: 00007ffc4fa445e8 [ 689.675460][ T4854] [ 689.675470][ T4854] Mem-Info: [ 689.904224][ T4881] fuse: Bad value for 'fd' [ 689.914588][ T4854] active_anon:6600 inactive_anon:7 isolated_anon:0 [ 689.914588][ T4854] active_file:22352 inactive_file:2550 isolated_file:0 [ 689.914588][ T4854] unevictable:0 dirty:234 writeback:0 [ 689.914588][ T4854] slab_reclaimable:9666 slab_unreclaimable:71260 [ 689.914588][ T4854] mapped:26054 shmem:2151 pagetables:669 [ 689.914588][ T4854] sec_pagetables:0 bounce:0 [ 689.914588][ T4854] kernel_misc_reclaimable:0 [ 689.914588][ T4854] free:1509732 free_pcp:16479 free_cma:0 [ 689.997724][ T4854] Node 0 active_anon:33300kB inactive_anon:28kB active_file:89408kB inactive_file:10200kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:111416kB dirty:936kB writeback:0kB shmem:15704kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:4904kB pagetables:2676kB sec_pagetables:0kB all_unreclaimable? no [ 690.030012][ T4854] DMA32 free:2952148kB boost:0kB min:19088kB low:23860kB high:28632kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:3145324kB managed:2965936kB mlocked:0kB bounce:0kB free_pcp:13788kB local_pcp:2032kB free_cma:0kB [ 690.060280][ T4854] lowmem_reserve[]: 0 3921 3921 [ 690.065230][ T4854] Normal free:3128584kB boost:0kB min:25964kB low:32452kB high:38940kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36688kB inactive_anon:28kB active_file:89408kB inactive_file:10208kB unevictable:0kB writepending:936kB present:5242880kB managed:4016120kB mlocked:0kB bounce:0kB free_pcp:1072kB local_pcp:524kB free_cma:0kB [ 690.098373][ T4854] lowmem_reserve[]: 0 0 0 [ 690.102816][ T4854] DMA32: 3*4kB (M) 1*8kB (M) 2*16kB (M) 3*32kB (M) 3*64kB (M) 3*128kB (M) 3*256kB (M) 3*512kB (M) 4*1024kB (UM) 4*2048kB (M) 717*4096kB (M) = 2952148kB [ 690.118499][ T4854] Normal: 704*4kB (UE) 321*8kB (UME) 678*16kB (UME) 938*32kB (UME) 772*64kB (UME) 293*128kB (UME) 151*256kB (UME) 65*512kB (UME) 37*1024kB (UM) 13*2048kB (UME) 696*4096kB (ME) = 3120424kB [ 690.137488][ T4854] 30711 total pagecache pages [ 690.142377][ T4854] 32 pages in swap cache [ 690.146646][ T4854] Free swap = 124308kB [ 690.162525][ T4854] Total swap = 124996kB [ 690.166744][ T4854] 2097051 pages RAM [ 690.170575][ T4854] 0 pages HighMem/MovableOnly [ 690.179707][ T4854] 351537 pages reserved [ 690.184441][ T4854] 0 pages cma reserved [ 690.192469][ T4854] Memory allocations: [ 690.196665][ T4854] 0 B 0 init/main.c:1370 func:do_initcalls [ 690.210827][ T4854] 0 B 0 init/do_mounts.c:186 func:mount_root_generic [ 690.230745][ T4854] 0 B 0 init/do_mounts.c:158 func:do_mount_root [ 690.239660][ T4854] 0 B 0 init/do_mounts.c:352 func:mount_nodev_root [ 690.249248][ T4854] 0 B 0 init/do_mounts_rd.c:241 func:rd_load_image [ 690.257766][ T4854] 0 B 0 init/do_mounts_rd.c:72 func:identify_ramdisk_image [ 690.266832][ T4854] 0 B 0 init/initramfs.c:507 func:unpack_to_rootfs [ 690.275398][ T4854] 0 B 0 init/initramfs.c:508 func:unpack_to_rootfs [ 690.283556][ T4854] 0 B 0 init/initramfs.c:509 func:unpack_to_rootfs [ 690.299070][ T4854] 0 B 0 init/initramfs.c:101 func:find_link [ 690.341640][ T4910] FAULT_INJECTION: forcing a failure. [ 690.341640][ T4910] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 690.370159][ T4910] CPU: 0 UID: 0 PID: 4910 Comm: syz.1.17608 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 690.370198][ T4910] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 690.370213][ T4910] Call Trace: [ 690.370222][ T4910] [ 690.370231][ T4910] __dump_stack+0x21/0x30 [ 690.370268][ T4910] dump_stack_lvl+0x10c/0x190 [ 690.370299][ T4910] ? __cfi_dump_stack_lvl+0x10/0x10 [ 690.370332][ T4910] ? check_stack_object+0x107/0x140 [ 690.370355][ T4910] dump_stack+0x19/0x20 [ 690.370384][ T4910] should_fail_ex+0x3d9/0x530 [ 690.370409][ T4910] should_fail+0xf/0x20 [ 690.370430][ T4910] should_fail_usercopy+0x1e/0x30 [ 690.370456][ T4910] _copy_from_user+0x22/0xb0 [ 690.370486][ T4910] __sys_connect+0x136/0x440 [ 690.370526][ T4910] ? __cfi___sys_connect+0x10/0x10 [ 690.370560][ T4910] ? __kasan_check_read+0x15/0x20 [ 690.370595][ T4910] __x64_sys_connect+0x7e/0x90 [ 690.370625][ T4910] x64_sys_call+0x1c2f/0x2ee0 [ 690.370659][ T4910] do_syscall_64+0x58/0xf0 [ 690.370694][ T4910] ? clear_bhb_loop+0x50/0xa0 [ 690.370721][ T4910] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 690.370745][ T4910] RIP: 0033:0x7f839718f6c9 [ 690.370763][ T4910] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.370785][ T4910] RSP: 002b:00007f8397f73038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 690.370810][ T4910] RAX: ffffffffffffffda RBX: 00007f83973e5fa0 RCX: 00007f839718f6c9 [ 690.370829][ T4910] RDX: 0000000000000010 RSI: 0000200000000040 RDI: 0000000000000007 [ 690.370844][ T4910] RBP: 00007f8397f73090 R08: 0000000000000000 R09: 0000000000000000 [ 690.370859][ T4910] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 690.370871][ T4910] R13: 00007f83973e6038 R14: 00007f83973e5fa0 R15: 00007ffccb8cf4c8 [ 690.370890][ T4910] [ 690.870892][ T4954] FAULT_INJECTION: forcing a failure. [ 690.870892][ T4954] name failslab, interval 1, probability 0, space 0, times 0 [ 690.910775][ T4954] CPU: 0 UID: 0 PID: 4954 Comm: syz.1.17631 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 690.910815][ T4954] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 690.910831][ T4954] Call Trace: [ 690.910839][ T4954] [ 690.910849][ T4954] __dump_stack+0x21/0x30 [ 690.910885][ T4954] dump_stack_lvl+0x10c/0x190 [ 690.910916][ T4954] ? __cfi_dump_stack_lvl+0x10/0x10 [ 690.910949][ T4954] dump_stack+0x19/0x20 [ 690.910977][ T4954] should_fail_ex+0x3d9/0x530 [ 690.911002][ T4954] should_failslab+0xac/0x100 [ 690.911028][ T4954] kmem_cache_alloc_node_noprof+0x45/0x440 [ 690.911051][ T4954] ? dup_task_struct+0xbc/0xc50 [ 690.911079][ T4954] dup_task_struct+0xbc/0xc50 [ 690.911104][ T4954] ? __kasan_check_write+0x18/0x20 [ 690.911138][ T4954] ? _raw_spin_lock_irq+0x8d/0x120 [ 690.911168][ T4954] ? copy_process+0x3220/0x3220 [ 690.911194][ T4954] ? __kasan_check_write+0x18/0x20 [ 690.911228][ T4954] copy_process+0x538/0x3220 [ 690.911259][ T4954] ? __cfi_copy_process+0x10/0x10 [ 690.911285][ T4954] ? proc_fail_nth_write+0x17e/0x210 [ 690.911317][ T4954] kernel_clone+0x23f/0x830 [ 690.911345][ T4954] ? __cfi_kernel_clone+0x10/0x10 [ 690.911375][ T4954] __x64_sys_clone+0x18c/0x1f0 [ 690.911403][ T4954] ? __cfi___x64_sys_clone+0x10/0x10 [ 690.911435][ T4954] ? __kasan_check_read+0x15/0x20 [ 690.911470][ T4954] x64_sys_call+0x2b3c/0x2ee0 [ 690.911522][ T4954] do_syscall_64+0x58/0xf0 [ 690.911549][ T4954] ? clear_bhb_loop+0x50/0xa0 [ 690.911574][ T4954] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 690.911598][ T4954] RIP: 0033:0x7f839718f6c9 [ 690.911616][ T4954] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 690.911637][ T4954] RSP: 002b:00007f8397f72fe8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 690.911661][ T4954] RAX: ffffffffffffffda RBX: 00007f83973e5fa0 RCX: 00007f839718f6c9 [ 690.911685][ T4954] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000a5102000 [ 690.911700][ T4954] RBP: 00007f8397f73090 R08: 0000000000000000 R09: 0000000000000000 [ 690.911714][ T4954] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000001 [ 690.911727][ T4954] R13: 00007f83973e6038 R14: 00007f83973e5fa0 R15: 00007ffccb8cf4c8 [ 690.911747][ T4954] [ 690.993364][ T4959] FAULT_INJECTION: forcing a failure. [ 690.993364][ T4959] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 691.170761][ T4959] CPU: 0 UID: 0 PID: 4959 Comm: syz.0.17627 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 691.170799][ T4959] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 691.170814][ T4959] Call Trace: [ 691.170822][ T4959] [ 691.170832][ T4959] __dump_stack+0x21/0x30 [ 691.170867][ T4959] dump_stack_lvl+0x10c/0x190 [ 691.170897][ T4959] ? __cfi_dump_stack_lvl+0x10/0x10 [ 691.170929][ T4959] dump_stack+0x19/0x20 [ 691.170956][ T4959] should_fail_ex+0x3d9/0x530 [ 691.170979][ T4959] should_fail+0xf/0x20 [ 691.170999][ T4959] should_fail_usercopy+0x1e/0x30 [ 691.171023][ T4959] _copy_from_user+0x22/0xb0 [ 691.171050][ T4959] get_user_ifreq+0x71/0x180 [ 691.171072][ T4959] sock_ioctl+0x6fb/0x7b0 [ 691.171099][ T4959] ? __cfi_sock_ioctl+0x10/0x10 [ 691.171123][ T4959] ? bpf_lsm_file_ioctl+0xd/0x20 [ 691.171152][ T4959] ? security_file_ioctl+0x34/0xd0 [ 691.171177][ T4959] ? __cfi_sock_ioctl+0x10/0x10 [ 691.171199][ T4959] __se_sys_ioctl+0x135/0x1b0 [ 691.171223][ T4959] __x64_sys_ioctl+0x7f/0xa0 [ 691.171246][ T4959] x64_sys_call+0x1878/0x2ee0 [ 691.171277][ T4959] do_syscall_64+0x58/0xf0 [ 691.171306][ T4959] ? clear_bhb_loop+0x50/0xa0 [ 691.171331][ T4959] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 691.171354][ T4959] RIP: 0033:0x7f006418f6c9 [ 691.171373][ T4959] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 691.171394][ T4959] RSP: 002b:00007f0062bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 691.171418][ T4959] RAX: ffffffffffffffda RBX: 00007f00643e5fa0 RCX: 00007f006418f6c9 [ 691.171436][ T4959] RDX: 0000200000000440 RSI: 00000000000089f1 RDI: 0000000000000007 [ 691.171451][ T4959] RBP: 00007f0062bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 691.171466][ T4959] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 691.171480][ T4959] R13: 00007f00643e6038 R14: 00007f00643e5fa0 R15: 00007fffd6841088 [ 691.171500][ T4959] [ 692.903972][ T5132] FAULT_INJECTION: forcing a failure. [ 692.903972][ T5132] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 692.917984][ T5132] CPU: 0 UID: 0 PID: 5132 Comm: syz.0.17716 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 692.918022][ T5132] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 692.918037][ T5132] Call Trace: [ 692.918045][ T5132] [ 692.918054][ T5132] __dump_stack+0x21/0x30 [ 692.918091][ T5132] dump_stack_lvl+0x10c/0x190 [ 692.918121][ T5132] ? __cfi_dump_stack_lvl+0x10/0x10 [ 692.918154][ T5132] ? check_stack_object+0x12c/0x140 [ 692.918177][ T5132] dump_stack+0x19/0x20 [ 692.918206][ T5132] should_fail_ex+0x3d9/0x530 [ 692.918230][ T5132] should_fail+0xf/0x20 [ 692.918253][ T5132] should_fail_usercopy+0x1e/0x30 [ 692.918278][ T5132] _copy_to_user+0x24/0xa0 [ 692.918307][ T5132] simple_read_from_buffer+0xed/0x160 [ 692.918339][ T5132] proc_fail_nth_read+0x19e/0x210 [ 692.918369][ T5132] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 692.918400][ T5132] ? bpf_lsm_file_permission+0xd/0x20 [ 692.918433][ T5132] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 692.918463][ T5132] vfs_read+0x27d/0xc70 [ 692.918486][ T5132] ? __cfi_vfs_read+0x10/0x10 [ 692.918505][ T5132] ? __kasan_slab_free+0x6a/0x80 [ 692.918533][ T5132] ? putname+0x113/0x150 [ 692.918555][ T5132] ? __kasan_check_read+0x15/0x20 [ 692.918588][ T5132] ksys_read+0x141/0x250 [ 692.918609][ T5132] ? __cfi_ksys_read+0x10/0x10 [ 692.918630][ T5132] ? __kasan_check_read+0x15/0x20 [ 692.918664][ T5132] __x64_sys_read+0x7f/0x90 [ 692.918686][ T5132] x64_sys_call+0x2638/0x2ee0 [ 692.918727][ T5132] do_syscall_64+0x58/0xf0 [ 692.918758][ T5132] ? clear_bhb_loop+0x50/0xa0 [ 692.918784][ T5132] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 692.918809][ T5132] RIP: 0033:0x7f006418e0dc [ 692.918829][ T5132] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 692.918850][ T5132] RSP: 002b:00007f0062bf7030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 692.918875][ T5132] RAX: ffffffffffffffda RBX: 00007f00643e5fa0 RCX: 00007f006418e0dc [ 692.918894][ T5132] RDX: 000000000000000f RSI: 00007f0062bf70a0 RDI: 0000000000000009 [ 692.918909][ T5132] RBP: 00007f0062bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 692.918925][ T5132] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 692.918940][ T5132] R13: 00007f00643e6038 R14: 00007f00643e5fa0 R15: 00007fffd6841088 [ 692.918961][ T5132] [ 693.411236][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 694.308156][ T5238] fuse: Bad value for 'fd' [ 694.943828][ T5325] fuse: Bad value for 'fd' [ 695.490750][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 695.496879][T30077] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 697.341761][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 697.762339][ T5507] FAULT_INJECTION: forcing a failure. [ 697.762339][ T5507] name failslab, interval 1, probability 0, space 0, times 0 [ 697.775062][ T5507] CPU: 0 UID: 0 PID: 5507 Comm: syz.0.17898 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 697.775114][ T5507] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 697.775130][ T5507] Call Trace: [ 697.775138][ T5507] [ 697.775149][ T5507] __dump_stack+0x21/0x30 [ 697.775186][ T5507] dump_stack_lvl+0x10c/0x190 [ 697.775217][ T5507] ? __cfi_dump_stack_lvl+0x10/0x10 [ 697.775249][ T5507] ? __kasan_check_write+0x18/0x20 [ 697.775283][ T5507] ? proc_fail_nth_write+0x17e/0x210 [ 697.775314][ T5507] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 697.775346][ T5507] dump_stack+0x19/0x20 [ 697.775375][ T5507] should_fail_ex+0x3d9/0x530 [ 697.775412][ T5507] should_failslab+0xac/0x100 [ 697.775437][ T5507] kmem_cache_alloc_noprof+0x42/0x430 [ 697.775459][ T5507] ? getname_flags+0xc6/0x710 [ 697.775483][ T5507] getname_flags+0xc6/0x710 [ 697.775510][ T5507] ? build_open_flags+0x487/0x600 [ 697.775540][ T5507] getname+0x1b/0x30 [ 697.775560][ T5507] do_sys_openat2+0xcb/0x1c0 [ 697.775589][ T5507] ? fput+0x1a5/0x240 [ 697.775615][ T5507] ? do_sys_open+0x100/0x100 [ 697.775661][ T5507] ? ksys_write+0x1ef/0x250 [ 697.775682][ T5507] ? __cfi_ksys_write+0x10/0x10 [ 697.775705][ T5507] __x64_sys_openat+0x13a/0x170 [ 697.775736][ T5507] x64_sys_call+0xe69/0x2ee0 [ 697.775770][ T5507] do_syscall_64+0x58/0xf0 [ 697.775801][ T5507] ? clear_bhb_loop+0x50/0xa0 [ 697.775827][ T5507] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 697.775851][ T5507] RIP: 0033:0x7f006418f6c9 [ 697.775870][ T5507] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 697.775891][ T5507] RSP: 002b:00007f0062bf7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 697.775917][ T5507] RAX: ffffffffffffffda RBX: 00007f00643e5fa0 RCX: 00007f006418f6c9 [ 697.775935][ T5507] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 697.775953][ T5507] RBP: 00007f0062bf7090 R08: 0000000000000000 R09: 0000000000000000 [ 697.775968][ T5507] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 697.775983][ T5507] R13: 00007f00643e6038 R14: 00007f00643e5fa0 R15: 00007fffd6841088 [ 697.776004][ T5507] [ 698.467251][ T5551] fuse: Bad value for 'fd' [ 698.756479][ T36] audit: type=1400 audit(1763472345.080:303): avc: denied { ioctl } for pid=5591 comm="syz.0.17939" path="socket:[211049]" dev="sockfs" ino=211049 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 699.410738][T30077] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 699.517406][ T5688] FAULT_INJECTION: forcing a failure. [ 699.517406][ T5688] name failslab, interval 1, probability 0, space 0, times 0 [ 699.530352][ T5688] CPU: 0 UID: 0 PID: 5688 Comm: syz.2.17986 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 699.530391][ T5688] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 699.530407][ T5688] Call Trace: [ 699.530415][ T5688] [ 699.530425][ T5688] __dump_stack+0x21/0x30 [ 699.530461][ T5688] dump_stack_lvl+0x10c/0x190 [ 699.530493][ T5688] ? __cfi_dump_stack_lvl+0x10/0x10 [ 699.530523][ T5688] ? __kasan_check_write+0x18/0x20 [ 699.530558][ T5688] ? proc_fail_nth_write+0x17e/0x210 [ 699.530590][ T5688] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 699.530622][ T5688] dump_stack+0x19/0x20 [ 699.530651][ T5688] should_fail_ex+0x3d9/0x530 [ 699.530676][ T5688] should_failslab+0xac/0x100 [ 699.530707][ T5688] kmem_cache_alloc_noprof+0x42/0x430 [ 699.530729][ T5688] ? getname_flags+0xc6/0x710 [ 699.530752][ T5688] getname_flags+0xc6/0x710 [ 699.530775][ T5688] ? build_open_flags+0x487/0x600 [ 699.530807][ T5688] getname+0x1b/0x30 [ 699.530828][ T5688] do_sys_openat2+0xcb/0x1c0 [ 699.530857][ T5688] ? fput+0x1a5/0x240 [ 699.530884][ T5688] ? do_sys_open+0x100/0x100 [ 699.530912][ T5688] ? ksys_write+0x1ef/0x250 [ 699.530935][ T5688] ? __cfi_ksys_write+0x10/0x10 [ 699.530957][ T5688] __x64_sys_openat+0x13a/0x170 [ 699.530988][ T5688] x64_sys_call+0xe69/0x2ee0 [ 699.531022][ T5688] do_syscall_64+0x58/0xf0 [ 699.531051][ T5688] ? clear_bhb_loop+0x50/0xa0 [ 699.531078][ T5688] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 699.531102][ T5688] RIP: 0033:0x7f83c338f6c9 [ 699.531122][ T5688] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 699.531144][ T5688] RSP: 002b:00007f83c4181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 699.531181][ T5688] RAX: ffffffffffffffda RBX: 00007f83c35e5fa0 RCX: 00007f83c338f6c9 [ 699.531200][ T5688] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 699.531218][ T5688] RBP: 00007f83c4181090 R08: 0000000000000000 R09: 0000000000000000 [ 699.531234][ T5688] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 699.531249][ T5688] R13: 00007f83c35e6038 R14: 00007f83c35e5fa0 R15: 00007ffc4fa445e8 [ 699.531269][ T5688] [ 700.381961][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 701.706743][ T5813] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 701.716315][ T5813] overlayfs: missing 'workdir' [ 702.450734][T30077] Bluetooth: hci0: command 0x1003 tx timeout [ 702.456793][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 702.666173][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 702.745960][ T36] audit: type=1400 audit(1763472349.070:304): avc: denied { ioctl } for pid=5885 comm="syz.0.18081" path="socket:[211643]" dev="sockfs" ino=211643 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 704.690771][ T54] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 707.115991][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 709.170745][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 709.176933][T30077] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 714.467046][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 716.540748][T30077] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 716.547089][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 718.406484][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 720.451092][T30077] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 720.457304][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 724.099491][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.106657][ T7177] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.114017][ T7177] bridge_slave_0: entered allmulticast mode [ 724.122123][ T7177] bridge_slave_0: entered promiscuous mode [ 724.128703][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.136040][ T7177] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.143318][ T7177] bridge_slave_1: entered allmulticast mode [ 724.149784][ T7177] bridge_slave_1: entered promiscuous mode [ 724.251149][ T7177] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.258280][ T7177] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.265643][ T7177] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.272722][ T7177] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.332561][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 724.341112][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 724.354574][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 724.361658][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 724.391425][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 724.398507][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 724.453669][ T7177] veth0_vlan: entered promiscuous mode [ 724.477555][ T7177] veth1_macvtap: entered promiscuous mode [ 724.850906][T30077] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 724.857103][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 725.999815][ T293] Bluetooth: hci0: Frame reassembly failed (-84) [ 728.050744][ T54] Bluetooth: hci0: command 0x1003 tx timeout [ 728.050788][T30077] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 738.510061][ T7721] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.517286][ T7721] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.524673][ T7721] bridge_slave_0: entered allmulticast mode [ 738.533004][ T7721] bridge_slave_0: entered promiscuous mode [ 738.539604][ T7721] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.546972][ T7721] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.554234][ T7721] bridge_slave_1: entered allmulticast mode [ 738.560884][ T7721] bridge_slave_1: entered promiscuous mode [ 738.665085][ T7721] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.672207][ T7721] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.679507][ T7721] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.686627][ T7721] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.804722][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 738.812121][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 738.834709][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 738.841836][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 738.868138][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 738.875278][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 738.948141][ T7721] veth0_vlan: entered promiscuous mode [ 738.991168][ T7721] veth1_macvtap: entered promiscuous mode [ 739.274156][ T7752] FAULT_INJECTION: forcing a failure. [ 739.274156][ T7752] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 739.298021][ T7752] CPU: 0 UID: 0 PID: 7752 Comm: syz.3.18977 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 739.298061][ T7752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 739.298077][ T7752] Call Trace: [ 739.298085][ T7752] [ 739.298095][ T7752] __dump_stack+0x21/0x30 [ 739.298130][ T7752] dump_stack_lvl+0x10c/0x190 [ 739.298160][ T7752] ? __cfi_dump_stack_lvl+0x10/0x10 [ 739.298192][ T7752] ? check_stack_object+0x12c/0x140 [ 739.298214][ T7752] dump_stack+0x19/0x20 [ 739.298242][ T7752] should_fail_ex+0x3d9/0x530 [ 739.298267][ T7752] should_fail+0xf/0x20 [ 739.298288][ T7752] should_fail_usercopy+0x1e/0x30 [ 739.298312][ T7752] _copy_to_user+0x24/0xa0 [ 739.298340][ T7752] simple_read_from_buffer+0xed/0x160 [ 739.298369][ T7752] proc_fail_nth_read+0x19e/0x210 [ 739.298399][ T7752] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 739.298428][ T7752] ? vfs_writev+0xa16/0xcf0 [ 739.298453][ T7752] ? bpf_lsm_file_permission+0xd/0x20 [ 739.298484][ T7752] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 739.298532][ T7752] vfs_read+0x27d/0xc70 [ 739.298554][ T7752] ? __cfi_vfs_read+0x10/0x10 [ 739.298573][ T7752] ? __kasan_check_write+0x18/0x20 [ 739.298606][ T7752] ? mutex_lock+0x92/0x1c0 [ 739.298628][ T7752] ? __cfi_mutex_lock+0x10/0x10 [ 739.298655][ T7752] ? __fget_files+0x2c5/0x340 [ 739.298681][ T7752] ksys_read+0x141/0x250 [ 739.298701][ T7752] ? __cfi_ksys_read+0x10/0x10 [ 739.298722][ T7752] ? __kasan_check_read+0x15/0x20 [ 739.298755][ T7752] __x64_sys_read+0x7f/0x90 [ 739.298775][ T7752] x64_sys_call+0x2638/0x2ee0 [ 739.298808][ T7752] do_syscall_64+0x58/0xf0 [ 739.298837][ T7752] ? clear_bhb_loop+0x50/0xa0 [ 739.298863][ T7752] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 739.298887][ T7752] RIP: 0033:0x7f897fd8e0dc [ 739.298907][ T7752] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 739.298928][ T7752] RSP: 002b:00007f8980ba4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 739.298953][ T7752] RAX: ffffffffffffffda RBX: 00007f897ffe5fa0 RCX: 00007f897fd8e0dc [ 739.298971][ T7752] RDX: 000000000000000f RSI: 00007f8980ba40a0 RDI: 0000000000000009 [ 739.298986][ T7752] RBP: 00007f8980ba4090 R08: 0000000000000000 R09: 0000000000000000 [ 739.299002][ T7752] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 739.299017][ T7752] R13: 00007f897ffe6038 R14: 00007f897ffe5fa0 R15: 00007ffcd97c9018 [ 739.299037][ T7752] [ 740.646971][ T7889] FAULT_INJECTION: forcing a failure. [ 740.646971][ T7889] name failslab, interval 1, probability 0, space 0, times 0 [ 740.660927][ T7889] CPU: 0 UID: 0 PID: 7889 Comm: syz.3.19041 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 740.660966][ T7889] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 740.660982][ T7889] Call Trace: [ 740.660990][ T7889] [ 740.660999][ T7889] __dump_stack+0x21/0x30 [ 740.661036][ T7889] dump_stack_lvl+0x10c/0x190 [ 740.661067][ T7889] ? __cfi_dump_stack_lvl+0x10/0x10 [ 740.661099][ T7889] ? __cfi_vfs_write+0x10/0x10 [ 740.661123][ T7889] dump_stack+0x19/0x20 [ 740.661152][ T7889] should_fail_ex+0x3d9/0x530 [ 740.661176][ T7889] should_failslab+0xac/0x100 [ 740.661226][ T7889] kmem_cache_alloc_noprof+0x42/0x430 [ 740.661246][ T7889] ? ksys_write+0x1ef/0x250 [ 740.661264][ T7889] ? getname_flags+0xc6/0x710 [ 740.661341][ T7889] getname_flags+0xc6/0x710 [ 740.661364][ T7889] __x64_sys_mknodat+0x9a/0xc0 [ 740.661409][ T7889] x64_sys_call+0x21b9/0x2ee0 [ 740.661443][ T7889] do_syscall_64+0x58/0xf0 [ 740.661473][ T7889] ? clear_bhb_loop+0x50/0xa0 [ 740.661498][ T7889] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 740.661522][ T7889] RIP: 0033:0x7f897fd8f6c9 [ 740.661541][ T7889] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 740.661561][ T7889] RSP: 002b:00007f8980ba4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000103 [ 740.661598][ T7889] RAX: ffffffffffffffda RBX: 00007f897ffe5fa0 RCX: 00007f897fd8f6c9 [ 740.661616][ T7889] RDX: 0000000000000000 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 740.661633][ T7889] RBP: 00007f8980ba4090 R08: 0000000000000000 R09: 0000000000000000 [ 740.661649][ T7889] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 740.661664][ T7889] R13: 00007f897ffe6038 R14: 00007f897ffe5fa0 R15: 00007ffcd97c9018 [ 740.661684][ T7889] [ 741.085723][ T7925] FAULT_INJECTION: forcing a failure. [ 741.085723][ T7925] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 741.110823][ T7925] CPU: 0 UID: 0 PID: 7925 Comm: syz.2.19057 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 741.110863][ T7925] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 741.110879][ T7925] Call Trace: [ 741.110888][ T7925] [ 741.110898][ T7925] __dump_stack+0x21/0x30 [ 741.110933][ T7925] dump_stack_lvl+0x10c/0x190 [ 741.110965][ T7925] ? __cfi_dump_stack_lvl+0x10/0x10 [ 741.110997][ T7925] ? __kasan_check_write+0x18/0x20 [ 741.111034][ T7925] ? check_stack_object+0x107/0x140 [ 741.111057][ T7925] dump_stack+0x19/0x20 [ 741.111087][ T7925] should_fail_ex+0x3d9/0x530 [ 741.111111][ T7925] should_fail+0xf/0x20 [ 741.111132][ T7925] should_fail_usercopy+0x1e/0x30 [ 741.111156][ T7925] _copy_from_user+0x22/0xb0 [ 741.111185][ T7925] __sys_sendto+0x29e/0x6f0 [ 741.111216][ T7925] ? __cfi___sys_sendto+0x10/0x10 [ 741.111249][ T7925] ? __kasan_check_write+0x18/0x20 [ 741.111285][ T7925] ? __cfi_ksys_write+0x10/0x10 [ 741.111309][ T7925] __x64_sys_sendto+0xe9/0x100 [ 741.111340][ T7925] x64_sys_call+0x2c2c/0x2ee0 [ 741.111373][ T7925] do_syscall_64+0x58/0xf0 [ 741.111403][ T7925] ? clear_bhb_loop+0x50/0xa0 [ 741.111430][ T7925] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 741.111454][ T7925] RIP: 0033:0x7f83c338f6c9 [ 741.111486][ T7925] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 741.111507][ T7925] RSP: 002b:00007f83c4181038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 741.111532][ T7925] RAX: ffffffffffffffda RBX: 00007f83c35e5fa0 RCX: 00007f83c338f6c9 [ 741.111550][ T7925] RDX: 000000000000000e RSI: 0000200000000c00 RDI: 0000000000000007 [ 741.111566][ T7925] RBP: 00007f83c4181090 R08: 0000200000000080 R09: 0000000000000014 [ 741.111583][ T7925] R10: 000000000400c010 R11: 0000000000000246 R12: 0000000000000001 [ 741.111597][ T7925] R13: 00007f83c35e6038 R14: 00007f83c35e5fa0 R15: 00007ffc4fa445e8 [ 741.111618][ T7925] [ 741.463161][ T7950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1793 sclass=netlink_route_socket pid=7950 comm=syz.0.19069 [ 741.476762][ T7950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7950 comm=syz.0.19069 [ 741.490465][ T7950] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=7950 comm=syz.0.19069 [ 741.509786][ T36] audit: type=1400 audit(1763472387.830:305): avc: denied { create } for pid=7949 comm="syz.0.19069" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 742.009356][ T7995] FAULT_INJECTION: forcing a failure. [ 742.009356][ T7995] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 742.022605][ T7995] CPU: 0 UID: 0 PID: 7995 Comm: syz.3.19092 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 742.022644][ T7995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 742.022660][ T7995] Call Trace: [ 742.022669][ T7995] [ 742.022679][ T7995] __dump_stack+0x21/0x30 [ 742.022715][ T7995] dump_stack_lvl+0x10c/0x190 [ 742.022745][ T7995] ? __cfi_dump_stack_lvl+0x10/0x10 [ 742.022786][ T7995] ? check_stack_object+0x12c/0x140 [ 742.022810][ T7995] dump_stack+0x19/0x20 [ 742.022840][ T7995] should_fail_ex+0x3d9/0x530 [ 742.022864][ T7995] should_fail+0xf/0x20 [ 742.022886][ T7995] should_fail_usercopy+0x1e/0x30 [ 742.022911][ T7995] _copy_to_user+0x24/0xa0 [ 742.022940][ T7995] simple_read_from_buffer+0xed/0x160 [ 742.022971][ T7995] proc_fail_nth_read+0x19e/0x210 [ 742.023002][ T7995] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 742.023033][ T7995] ? bpf_lsm_file_permission+0xd/0x20 [ 742.023066][ T7995] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 742.023097][ T7995] vfs_read+0x27d/0xc70 [ 742.023119][ T7995] ? __cfi_vfs_read+0x10/0x10 [ 742.023139][ T7995] ? __kasan_check_write+0x18/0x20 [ 742.023173][ T7995] ? mutex_lock+0x92/0x1c0 [ 742.023194][ T7995] ? __cfi_mutex_lock+0x10/0x10 [ 742.023216][ T7995] ? __fget_files+0x2c5/0x340 [ 742.023242][ T7995] ksys_read+0x141/0x250 [ 742.023263][ T7995] ? __cfi_ksys_read+0x10/0x10 [ 742.023285][ T7995] ? __kasan_check_read+0x15/0x20 [ 742.023319][ T7995] __x64_sys_read+0x7f/0x90 [ 742.023341][ T7995] x64_sys_call+0x2638/0x2ee0 [ 742.023375][ T7995] do_syscall_64+0x58/0xf0 [ 742.023404][ T7995] ? clear_bhb_loop+0x50/0xa0 [ 742.023430][ T7995] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 742.023454][ T7995] RIP: 0033:0x7f897fd8e0dc [ 742.023473][ T7995] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 742.023493][ T7995] RSP: 002b:00007f8980ba4030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 742.023517][ T7995] RAX: ffffffffffffffda RBX: 00007f897ffe5fa0 RCX: 00007f897fd8e0dc [ 742.023536][ T7995] RDX: 000000000000000f RSI: 00007f8980ba40a0 RDI: 000000000000000b [ 742.023552][ T7995] RBP: 00007f8980ba4090 R08: 0000000000000000 R09: 0000000000000000 [ 742.023567][ T7995] R10: 0000000000000004 R11: 0000000000000246 R12: 0000000000000001 [ 742.023582][ T7995] R13: 00007f897ffe6038 R14: 00007f897ffe5fa0 R15: 00007ffcd97c9018 [ 742.023603][ T7995] [ 742.343631][ T8018] FAULT_INJECTION: forcing a failure. [ 742.343631][ T8018] name failslab, interval 1, probability 0, space 0, times 0 [ 742.356350][ T8018] CPU: 0 UID: 0 PID: 8018 Comm: syz.2.19103 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 742.356383][ T8018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 742.356397][ T8018] Call Trace: [ 742.356405][ T8018] [ 742.356413][ T8018] __dump_stack+0x21/0x30 [ 742.356446][ T8018] dump_stack_lvl+0x10c/0x190 [ 742.356472][ T8018] ? __cfi_dump_stack_lvl+0x10/0x10 [ 742.356499][ T8018] ? stack_depot_save_flags+0x38/0x800 [ 742.356561][ T8018] ? stack_trace_save+0x9d/0xe0 [ 742.356591][ T8018] dump_stack+0x19/0x20 [ 742.356616][ T8018] should_fail_ex+0x3d9/0x530 [ 742.356637][ T8018] should_failslab+0xac/0x100 [ 742.356660][ T8018] kmem_cache_alloc_node_noprof+0x45/0x440 [ 742.356681][ T8018] ? __alloc_skb+0x10c/0x370 [ 742.356706][ T8018] __alloc_skb+0x10c/0x370 [ 742.356731][ T8018] tcp_stream_alloc_skb+0x43/0x370 [ 742.356758][ T8018] tcp_sendmsg_locked+0xeb5/0x4b40 [ 742.356788][ T8018] ? __asan_memcpy+0x5a/0x80 [ 742.356809][ T8018] ? _raw_spin_lock_bh+0x90/0x120 [ 742.356839][ T8018] ? __cfi_tcp_sendmsg_locked+0x10/0x10 [ 742.356869][ T8018] ? __cfi_tcp_sendmsg+0x10/0x10 [ 742.356896][ T8018] tcp_sendmsg+0x3e/0xe0 [ 742.356921][ T8018] ? __cfi_tcp_sendmsg+0x10/0x10 [ 742.356949][ T8018] inet_sendmsg+0xb7/0x120 [ 742.356969][ T8018] sock_write_iter+0x3cb/0x4f0 [ 742.356992][ T8018] ? __cfi_sock_write_iter+0x10/0x10 [ 742.357018][ T8018] do_iter_readv_writev+0x628/0x810 [ 742.357041][ T8018] ? vfs_iter_read+0x5f0/0x5f0 [ 742.357062][ T8018] ? bpf_lsm_file_permission+0xd/0x20 [ 742.357091][ T8018] vfs_writev+0x485/0xcf0 [ 742.357116][ T8018] ? do_writev+0x2d0/0x2d0 [ 742.357140][ T8018] ? vfs_write+0x93e/0xf30 [ 742.357164][ T8018] do_writev+0x14d/0x2d0 [ 742.357188][ T8018] ? vfs_readv+0xa50/0xa50 [ 742.357213][ T8018] ? __kasan_check_read+0x15/0x20 [ 742.357245][ T8018] __x64_sys_writev+0x81/0x90 [ 742.357266][ T8018] x64_sys_call+0x1fbb/0x2ee0 [ 742.357298][ T8018] do_syscall_64+0x58/0xf0 [ 742.357324][ T8018] ? clear_bhb_loop+0x50/0xa0 [ 742.357347][ T8018] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 742.357370][ T8018] RIP: 0033:0x7f83c338f6c9 [ 742.357387][ T8018] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 742.357406][ T8018] RSP: 002b:00007f83c4181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 742.357430][ T8018] RAX: ffffffffffffffda RBX: 00007f83c35e5fa0 RCX: 00007f83c338f6c9 [ 742.357447][ T8018] RDX: 0000000000000006 RSI: 0000200000000b80 RDI: 0000000000000008 [ 742.357460][ T8018] RBP: 00007f83c4181090 R08: 0000000000000000 R09: 0000000000000000 [ 742.357475][ T8018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 742.357487][ T8018] R13: 00007f83c35e6038 R14: 00007f83c35e5fa0 R15: 00007ffc4fa445e8 [ 742.357506][ T8018] [ 745.360798][ T36] audit: type=1400 audit(1763472391.680:306): avc: denied { bind } for pid=8192 comm="syz.0.19188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 745.769768][ T8211] FAULT_INJECTION: forcing a failure. [ 745.769768][ T8211] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 745.783202][ T8211] CPU: 0 UID: 0 PID: 8211 Comm: syz.1.19193 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 745.783240][ T8211] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 745.783255][ T8211] Call Trace: [ 745.783264][ T8211] [ 745.783273][ T8211] __dump_stack+0x21/0x30 [ 745.783310][ T8211] dump_stack_lvl+0x10c/0x190 [ 745.783341][ T8211] ? __cfi_dump_stack_lvl+0x10/0x10 [ 745.783373][ T8211] ? selinux_file_open+0x457/0x610 [ 745.783403][ T8211] dump_stack+0x19/0x20 [ 745.783430][ T8211] should_fail_ex+0x3d9/0x530 [ 745.783453][ T8211] should_fail_alloc_page+0xeb/0x110 [ 745.783481][ T8211] __alloc_pages_noprof+0x19b/0x7b0 [ 745.783514][ T8211] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 745.783546][ T8211] ? is_bpf_text_address+0x17b/0x1a0 [ 745.783573][ T8211] ? __kernel_text_address+0x11/0x40 [ 745.783602][ T8211] ? unwind_get_return_address+0x51/0x90 [ 745.783629][ T8211] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 745.783671][ T8211] ? arch_stack_walk+0x10b/0x170 [ 745.783694][ T8211] __folio_alloc_noprof+0x14/0x80 [ 745.783725][ T8211] folio_prealloc+0x46/0x240 [ 745.783753][ T8211] do_pte_missing+0x164c/0x4240 [ 745.783782][ T8211] ? _parse_integer+0x2e/0x40 [ 745.783825][ T8211] ? pte_marker_clear+0x1b0/0x1b0 [ 745.783852][ T8211] ? kstrtouint_from_user+0xfb/0x150 [ 745.783875][ T8211] ? __x64_sys_openat+0x13a/0x170 [ 745.783905][ T8211] ? x64_sys_call+0xe69/0x2ee0 [ 745.783938][ T8211] ? selinux_file_permission+0x309/0xb30 [ 745.783966][ T8211] ? __pte_offset_map+0x1b0/0x230 [ 745.783999][ T8211] ? pte_offset_map_rw_nolock+0xba/0x110 [ 745.784033][ T8211] handle_mm_fault+0x1166/0x1b90 [ 745.784081][ T8211] ? __cfi_handle_mm_fault+0x10/0x10 [ 745.784107][ T8211] ? lock_vma_under_rcu+0x49d/0x540 [ 745.784137][ T8211] ? __kasan_check_write+0x18/0x20 [ 745.784173][ T8211] do_user_addr_fault+0x96c/0x1200 [ 745.784207][ T8211] ? __cfi_ksys_write+0x10/0x10 [ 745.784232][ T8211] exc_page_fault+0x59/0xc0 [ 745.784256][ T8211] asm_exc_page_fault+0x2b/0x30 [ 745.784292][ T8211] RIP: 0033:0x7fdecdc60576 [ 745.784311][ T8211] Code: 00 00 00 00 41 57 31 c0 41 56 49 89 d6 41 55 49 89 f5 48 89 d6 41 54 49 89 fc 48 8d 3d 0c 2f 1b 00 55 53 48 81 ec 88 20 00 00 <48> 89 0c 24 4c 89 44 24 08 e8 ec d9 fe ff 4d 85 f6 0f 84 46 0a 00 [ 745.784332][ T8211] RSP: 002b:00007fdeceb7af70 EFLAGS: 00010202 [ 745.784353][ T8211] RAX: 0000000000000000 RBX: 00007fdecdfe5fa0 RCX: 0000000000000000 [ 745.784369][ T8211] RDX: 00002000000000c0 RSI: 00002000000000c0 RDI: 00007fdecde13479 [ 745.784385][ T8211] RBP: 00007fdeceb7d090 R08: 00007fdecdc4e2f0 R09: 0000000000000000 [ 745.784403][ T8211] R10: 0000000000000002 R11: 00002000000000c0 R12: 0000000000000002 [ 745.784417][ T8211] R13: 0000000000000036 R14: 00002000000000c0 R15: 00007ffc103436c8 [ 745.784436][ T8211] [ 745.784453][ T8211] Huh VM_FAULT_OOM leaked out to the #PF handler. Retrying PF [ 745.930714][ T31] usb 4-1: new full-speed USB device number 13 using dummy_hcd [ 746.170710][ T3162] usb 2-1: new full-speed USB device number 12 using dummy_hcd [ 746.211822][ T31] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 746.222997][ T31] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 746.233952][ T31] usb 4-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 746.245079][ T31] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 746.254213][ T31] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.263410][ T8203] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 746.271881][ T31] usb 4-1: invalid MIDI out EP 0 [ 746.279942][ T31] snd-usb-audio 4-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 746.284884][ T8204] udevd[8204]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 746.331773][ T3162] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 746.345496][ T3162] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 127, setting to 64 [ 746.359170][ T3162] usb 2-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 746.370719][ T3162] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 746.380015][ T3162] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 746.391238][ T8211] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 746.399632][ T3162] usb 2-1: invalid MIDI out EP 0 [ 746.431932][ T3162] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 746.433100][ T8204] udevd[8204]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:27.0/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 746.480341][ T3162] usb 4-1: USB disconnect, device number 13 [ 746.600163][ T9] usb 2-1: USB disconnect, device number 12 [ 747.644994][ T8350] kvm: pic: non byte write [ 748.351449][ T8377] syz.2.19273 uses obsolete (PF_INET,SOCK_PACKET) [ 748.371179][ T36] audit: type=1400 audit(1763472394.700:307): avc: denied { shutdown } for pid=8376 comm="syz.2.19273" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 748.680391][ T8388] kvm: pic: non byte write [ 749.066076][ T8417] kvm: pic: non byte write [ 749.366249][ T8440] kvm: pic: non byte write [ 749.688544][ T36] audit: type=1400 audit(1763472396.010:308): avc: denied { mount } for pid=8466 comm="syz.3.19317" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 749.735718][ T36] audit: type=1400 audit(1763472396.040:309): avc: denied { mounton } for pid=8466 comm="syz.3.19317" path="/102/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 749.774613][ T36] audit: type=1400 audit(1763472396.040:310): avc: denied { remount } for pid=8466 comm="syz.3.19317" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 749.804932][ T36] audit: type=1400 audit(1763472396.050:311): avc: denied { unmount } for pid=7721 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 749.848930][ T36] audit: type=1400 audit(1763472396.170:312): avc: denied { setopt } for pid=8482 comm="syz.2.19324" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 750.005284][ T36] audit: type=1400 audit(1763472396.330:313): avc: denied { create } for pid=8504 comm="syz.2.19335" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 750.302409][ T8521] kvm: pic: non byte write [ 750.623721][ T8533] kvm: pic: non byte write [ 751.347794][ T8591] kvm: pic: non byte write [ 752.985868][ T8639] kvm: pic: non byte write [ 753.089830][ T8648] FAULT_INJECTION: forcing a failure. [ 753.089830][ T8648] name failslab, interval 1, probability 0, space 0, times 0 [ 753.149016][ T8648] CPU: 0 UID: 0 PID: 8648 Comm: syz.2.19394 Not tainted syzkaller #0 0b5ffdee5fcd2f7749818d1ff954e9c21353764e [ 753.149051][ T8648] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 753.149064][ T8648] Call Trace: [ 753.149071][ T8648] [ 753.149080][ T8648] __dump_stack+0x21/0x30 [ 753.149120][ T8648] dump_stack_lvl+0x10c/0x190 [ 753.149147][ T8648] ? __cfi_dump_stack_lvl+0x10/0x10 [ 753.149173][ T8648] ? __kasan_check_write+0x18/0x20 [ 753.149204][ T8648] ? proc_fail_nth_write+0x17e/0x210 [ 753.149231][ T8648] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 753.149258][ T8648] dump_stack+0x19/0x20 [ 753.149283][ T8648] should_fail_ex+0x3d9/0x530 [ 753.149304][ T8648] should_failslab+0xac/0x100 [ 753.149326][ T8648] kmem_cache_alloc_noprof+0x42/0x430 [ 753.149345][ T8648] ? getname_flags+0xc6/0x710 [ 753.149365][ T8648] getname_flags+0xc6/0x710 [ 753.149384][ T8648] ? build_open_flags+0x487/0x600 [ 753.149410][ T8648] getname+0x1b/0x30 [ 753.149427][ T8648] do_sys_openat2+0xcb/0x1c0 [ 753.149452][ T8648] ? fput+0x1a5/0x240 [ 753.149474][ T8648] ? do_sys_open+0x100/0x100 [ 753.149499][ T8648] ? ksys_write+0x1ef/0x250 [ 753.149517][ T8648] ? __cfi_ksys_write+0x10/0x10 [ 753.149536][ T8648] __x64_sys_openat+0x13a/0x170 [ 753.149562][ T8648] x64_sys_call+0xe69/0x2ee0 [ 753.149609][ T8648] do_syscall_64+0x58/0xf0 [ 753.149636][ T8648] ? clear_bhb_loop+0x50/0xa0 [ 753.149660][ T8648] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 753.149681][ T8648] RIP: 0033:0x7f83c338f6c9 [ 753.149700][ T8648] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 753.149719][ T8648] RSP: 002b:00007f83c4181038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 753.149742][ T8648] RAX: ffffffffffffffda RBX: 00007f83c35e5fa0 RCX: 00007f83c338f6c9 [ 753.149758][ T8648] RDX: 000000000000275a RSI: 0000200000000080 RDI: ffffffffffffff9c [ 753.149773][ T8648] RBP: 00007f83c4181090 R08: 0000000000000000 R09: 0000000000000000 [ 753.149787][ T8648] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 753.149799][ T8648] R13: 00007f83c35e6038 R14: 00007f83c35e5fa0 R15: 00007ffc4fa445e8 [ 753.149818][ T8648] [ 755.349101][ T8780] kvm: pic: non byte write [ 755.485163][ T8783] kvm: pic: non byte write [ 756.510628][ T8842] kvm: pic: non byte write [ 756.934963][ T8864] kvm: pic: non byte write [ 757.084189][ T8874] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.091491][ T8874] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.098790][ T8874] bridge_slave_0: entered allmulticast mode [ 757.105318][ T8874] bridge_slave_0: entered promiscuous mode [ 757.114112][ T8874] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.123441][ T8874] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.130546][ T8874] bridge_slave_1: entered allmulticast mode [ 757.138929][ T8874] bridge_slave_1: entered promiscuous mode [ 757.319664][ T8874] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.326779][ T8874] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.334118][ T8874] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.341198][ T8874] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.409858][ T5512] bridge0: port 1(bridge_slave_0) entered disabled state [ 757.418539][ T5512] bridge0: port 2(bridge_slave_1) entered disabled state [ 757.442462][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 757.449535][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 757.492124][ T5512] bridge0: port 2(bridge_slave_1) entered blocking state [ 757.499228][ T5512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 757.565363][ T8874] veth0_vlan: entered promiscuous mode [ 757.588282][ T8874] veth1_macvtap: entered promiscuous mode [ 758.423237][ T8958] kvm: pic: non byte write [ 759.636634][ T9041] kvm: pic: non byte write [ 760.621207][ T9101] kvm: pic: non byte write [ 761.771873][ T9148] kvm: pic: non byte write [ 761.886533][ T9161] kvm: pic: non byte write [ 761.948213][ T9166] kvm: pic: non byte write [ 762.371463][ T36] audit: type=1400 audit(1763472408.700:314): avc: denied { read } for pid=9191 comm="poweroff" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 Stopping sshd: stopped /usr/sbin/sshd (pid 202) OK [ 762.912968][ T9209] kvm: pic: non byte write Stopping crond: stopped /usr/sbin/crond (pid 194) OK Stopping dhcpcd... stopped /sbin/dhcpcd (pid 148) [ 763.150128][ T36] audit: type=1400 audit(1763472409.470:315): avc: denied { search } for pid=9223 comm="dhcpcd-run-hook" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 763.220644][ T36] audit: type=1400 audit(1763472409.470:316): avc: denied { execute } for pid=9225 comm="syz.3.19648" path="/205/blkio.bfq.group_wait_time" dev="tmpfs" ino=1240 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 Stopping network: [ 763.385189][ T9244] kvm: pic: non byte write [ 763.390810][ T36] audit: type=1400 audit(1763472409.710:317): avc: denied { write } for pid=149 comm="dhcpcd" name="dhcpcd" dev="tmpfs" ino=421 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 763.450710][ T36] audit: type=1400 audit(1763472409.710:318): avc: denied { remove_name } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 763.500717][ T36] audit: type=1400 audit(1763472409.710:319): avc: denied { unlink } for pid=149 comm="dhcpcd" name="sock" dev="tmpfs" ino=423 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=sock_file permissive=1 [ 763.563389][ T36] audit: type=1400 audit(1763472409.750:320): avc: denied { unlink } for pid=149 comm="dhcpcd" name="pid" dev="tmpfs" ino=422 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 763.607366][ T36] audit: type=1400 audit(1763472409.800:321): avc: denied { read write } for pid=9250 comm="ip" path="/dev/console" dev="rootfs" ino=1126 scontext=system_u:system_r:ifconfig_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK[ 763.639570][ T36] audit: type=1400 audit(1763472409.810:322): avc: denied { create } for pid=9251 comm="syz.2.19653" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 Stopping iptables: [ 763.703123][ T36] audit: type=1400 audit(1763472410.020:323): avc: denied { read write } for pid=9262 comm="iptables" path="/dev/console" dev="rootfs" ino=1126 scontext=system_u:system_r:iptables_t tcontext=system_u:object_r:root_t tclass=chr_file permissive=1 OK Stopping system message bus: done Stopping klogd: OK Stopping acpid: [ 764.945631][ T9302] kvm: pic: non byte write OK Stopping syslogd: stopped /sbin/syslogd (pid 92) OK umount: can't remount debugfs read-only Connection to 10.128.10.17 closed by remote host. umount: sysfs busy - remounted read-only umount: devtmpfs busy - remounted read-only umount: can't remount /dev/root read-only The system is going down NOW! Sent SIGTERM to all processes Sent SIGKILL to all processes Requesting system poweroff [ 768.213320][ T9319] sd 0:0:1:0: [sda] Synchronizing SCSI cache [ 768.220195][ T9319] ACPI: PM: Preparing to enter system sleep state S5 [ 768.227514][ T9319] kvm: exiting hardware virtualization [ 768.233054][ T9319] reboot: Power down serialport: VM disconnected.