./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor859770116 <...> Warning: Permanently added '10.128.1.100' (ED25519) to the list of known hosts. execve("./syz-executor859770116", ["./syz-executor859770116"], 0x7fff0dddae40 /* 10 vars */) = 0 brk(NULL) = 0x5555635fc000 brk(0x5555635fcd40) = 0x5555635fcd40 arch_prctl(ARCH_SET_FS, 0x5555635fc3c0) = 0 set_tid_address(0x5555635fc690) = 282 set_robust_list(0x5555635fc6a0, 24) = 0 rseq(0x5555635fcce0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor859770116", 4096) = 27 getrandom("\x74\x6c\x16\x18\x9b\xef\x0f\x68", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x5555635fcd40 brk(0x55556361dd40) = 0x55556361dd40 brk(0x55556361e000) = 0x55556361e000 mprotect(0x7fa0d718f000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/proc/self/make-it-fail", O_WRONLY) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_WRONLY) = 3 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555635fc690) = 283 ./strace-static-x86_64: Process 283 attached [pid 283] set_robust_list(0x5555635fc6a0, 24) = 0 [pid 283] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 283] getppid() = 0 [pid 283] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 283] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 283] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 283] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 283] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 283] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 283] unshare(CLONE_NEWNS) = 0 [pid 283] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [ 40.435393][ T24] audit: type=1400 audit(1753435989.610:64): avc: denied { execmem } for pid=282 comm="syz-executor859" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 283] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 283] unshare(CLONE_NEWCGROUP) = 0 [pid 283] unshare(CLONE_NEWUTS) = 0 [pid 283] unshare(CLONE_SYSVSEM) = 0 [pid 283] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 283] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 283] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 283] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 283] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 283] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 283] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 283] getpid() = 1 [pid 283] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1< {parent_tid=[3]}, 88) = 3 [pid 288] set_robust_list(0x7fa0d70c79a0, 24) = 0 [pid 288] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 288] futex(0x7fa0d7195428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 287] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 287] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 288] <... futex resumed>) = 0 [pid 288] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 288] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 288] futex(0x7fa0d7195428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 287] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 287] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 288] <... futex resumed>) = 0 [pid 287] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 288] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 288] recvfrom(4, [{nlmsg_len=548, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=2}, "\x01\x02\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00\x06\x00\x01\x00\x1e\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\xe4\x01\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x03\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 548 [pid 288] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=2}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 288] close(4) = 0 [pid 288] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 288] futex(0x7fa0d7195428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 287] <... futex resumed>) = 0 [pid 287] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000 [pid 288] <... futex resumed>) = 0 [pid 287] <... futex resumed>) = 1 [pid 288] sendmsg(3, {msg_name=NULL, msg_namelen=10240, msg_iov=[{iov_base="\x54\x00\x00\x00\x1e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x40\x00\x01\x80\x2c\x00\x04\x00\x14\x00\x01\x00\x02\x00\x00\x00\xac\x14\x14\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00\x02\x00\x02\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x0d\x00\x01\x00\x75\x64\x70\x3a\x73\x79\x7a\x32\x00\x00\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [ 41.873084][ T283] request_module fs-gadgetfs succeeded, but still no fs? [pid 287] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] <... sendmsg resumed>) = 84 [pid 288] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 288] futex(0x7fa0d7195428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 287] <... futex resumed>) = 0 [pid 287] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 287] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] <... futex resumed>) = 0 [pid 288] socket(AF_TIPC, SOCK_SEQPACKET, 0) = 4 [pid 288] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000 [pid 287] <... futex resumed>) = 0 [pid 287] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 287] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] <... futex resumed>) = 1 [pid 288] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5 [pid 288] write(5, "4", 1) = 1 [ 41.924938][ T288] tipc: Started in network mode [ 41.930616][ T288] tipc: Own node identity ac14140f, cluster identity 4711 [ 41.938525][ T288] tipc: New replicast peer: 255.255.255.255 [ 41.945075][ T288] tipc: Enabled bearer , priority 10 [ 41.955420][ T288] FAULT_INJECTION: forcing a failure. [ 41.955420][ T288] name failslab, interval 1, probability 0, space 0, times 1 [ 41.969350][ T288] CPU: 1 PID: 288 Comm: syz-executor859 Not tainted 5.10.240-syzkaller-00213-gad9a98ef27a4 #0 [ 41.980367][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 41.991569][ T288] Call Trace: [ 41.995226][ T288] __dump_stack+0x21/0x24 [ 41.999639][ T288] dump_stack_lvl+0x169/0x1d8 [ 42.004536][ T288] ? thaw_kernel_threads+0x220/0x220 [ 42.010318][ T288] ? show_regs_print_info+0x18/0x18 [ 42.016133][ T288] dump_stack+0x15/0x1c [ 42.020582][ T288] should_fail+0x3c1/0x510 [ 42.025190][ T288] ? __alloc_skb+0x9e/0x520 [ 42.031072][ T288] __should_failslab+0xa4/0xe0 [ 42.036306][ T288] should_failslab+0x9/0x20 [ 42.041236][ T288] kmem_cache_alloc+0x3d/0x2e0 [ 42.046228][ T288] ? audit_log_start+0x3b7/0x860 [ 42.051347][ T288] __alloc_skb+0x9e/0x520 [ 42.056043][ T288] ? kmem_cache_alloc+0x165/0x2e0 [ 42.062253][ T288] ? audit_log_start+0x3b7/0x860 [ 42.068184][ T288] audit_log_start+0x3df/0x860 [ 42.073079][ T288] ? audit_serial+0x30/0x30 [ 42.078184][ T288] ? debug_smp_processor_id+0x17/0x20 [ 42.083781][ T288] ? slow_avc_audit+0x220/0x220 [ 42.089589][ T288] ? avc_audit_pre_callback+0x2a0/0x2a0 [ 42.096037][ T288] common_lsm_audit+0xd3/0x17f0 [ 42.101066][ T288] ? ipv6_skb_to_auditdata+0xca0/0xca0 [ 42.106569][ T288] ? __kasan_check_write+0x14/0x20 [ 42.112050][ T288] ? avc_alloc_node+0x28f/0x320 [ 42.117171][ T288] ? __kasan_check_write+0x14/0x20 [ 42.122315][ T288] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 42.127821][ T288] ? _raw_spin_lock+0xe0/0xe0 [ 42.132851][ T288] slow_avc_audit+0x1ac/0x220 [ 42.137928][ T288] ? avc_get_hash_stats+0x180/0x180 [ 42.143201][ T288] ? avc_denied+0x132/0x1b0 [ 42.148090][ T288] avc_has_perm+0x1ca/0x360 [ 42.154049][ T288] ? avc_has_perm_noaudit+0x240/0x240 [ 42.160648][ T288] ? __switch_to+0x50f/0xfc0 [ 42.166650][ T288] ? __kasan_check_read+0x11/0x20 [ 42.172188][ T288] selinux_socket_bind+0x246/0xb20 [ 42.178709][ T288] ? native_set_ldt+0x370/0x370 [ 42.183746][ T288] ? selinux_socket_socketpair+0x150/0x150 [ 42.190934][ T288] ? switch_mm_irqs_off+0x763/0x9a0 [ 42.196387][ T288] ? __schedule+0xb4f/0x1310 [ 42.201181][ T288] ? __kasan_check_write+0x14/0x20 [ 42.206389][ T288] ? _raw_spin_lock_irq+0x8f/0xe0 [ 42.212113][ T288] ? __kasan_check_write+0x14/0x20 [ 42.217574][ T288] ? _raw_spin_lock_irq+0x8f/0xe0 [ 42.223220][ T288] ? __fget_files+0x2c4/0x320 [ 42.228249][ T288] ? check_stack_object+0x106/0x140 [ 42.233678][ T288] security_socket_bind+0x72/0xa0 [ 42.239047][ T288] __sys_bind+0x281/0x400 [ 42.243677][ T288] ? __ia32_sys_socketpair+0xb0/0xb0 [ 42.249686][ T288] ? ptrace_notify+0x1c4/0x250 [ 42.255149][ T288] ? fpu__clear_all+0x20/0x20 [ 42.260002][ T288] ? debug_smp_processor_id+0x17/0x20 [ 42.265734][ T288] __x64_sys_bind+0x7a/0x90 [ 42.270560][ T288] do_syscall_64+0x31/0x40 [ 42.275236][ T288] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.282809][ T288] RIP: 0033:0x7fa0d71119a9 [ 42.287676][ T288] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.309784][ T288] RSP: 002b:00007fa0d70c7208 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 42.318405][ T288] RAX: ffffffffffffffda RBX: 00007fa0d7195428 RCX: 00007fa0d71119a9 [pid 288] bind(4, {sa_family=AF_TIPC, sa_data="\x02\x01\x41\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00"}, 16 [pid 287] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 288] <... bind resumed>) = 0 [pid 288] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 288] futex(0x7fa0d7195428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 287] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 287] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] <... futex resumed>) = 0 [pid 288] socket(AF_TIPC, SOCK_SEQPACKET, 0) = 6 [pid 288] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 287] <... futex resumed>) = 0 [pid 288] sendmsg(6, {msg_name={sa_family=AF_TIPC, sa_data="\x02\x00\x41\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"}, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}, MSG_DONTROUTE [pid 287] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 287] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 288] <... sendmsg resumed>) = 0 [pid 288] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 287] <... futex resumed>) = 0 [pid 288] futex(0x7fa0d7195428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 287] close(3) = 0 [pid 287] close(4) = 0 [pid 287] close(5) = 0 [pid 287] close(6) = 0 [pid 287] close(7) = -1 EBADF (Bad file descriptor) [pid 287] close(8) = -1 EBADF (Bad file descriptor) [pid 287] close(9) = -1 EBADF (Bad file descriptor) [pid 287] close(10) = -1 EBADF (Bad file descriptor) [pid 287] close(11) = -1 EBADF (Bad file descriptor) [pid 287] close(12) = -1 EBADF (Bad file descriptor) [pid 287] close(13) = -1 EBADF (Bad file descriptor) [pid 287] close(14) = -1 EBADF (Bad file descriptor) [pid 287] close(15) = -1 EBADF (Bad file descriptor) [pid 287] close(16) = -1 EBADF (Bad file descriptor) [pid 287] close(17) = -1 EBADF (Bad file descriptor) [pid 287] close(18) = -1 EBADF (Bad file descriptor) [pid 287] close(19) = -1 EBADF (Bad file descriptor) [pid 287] close(20) = -1 EBADF (Bad file descriptor) [pid 287] close(21) = -1 EBADF (Bad file descriptor) [pid 287] close(22) = -1 EBADF (Bad file descriptor) [pid 287] close(23) = -1 EBADF (Bad file descriptor) [pid 287] close(24) = -1 EBADF (Bad file descriptor) [pid 287] close(25) = -1 EBADF (Bad file descriptor) [pid 287] close(26) = -1 EBADF (Bad file descriptor) [pid 287] close(27) = -1 EBADF (Bad file descriptor) [pid 287] close(28) = -1 EBADF (Bad file descriptor) [pid 287] close(29) = -1 EBADF (Bad file descriptor) [pid 287] exit_group(0) = ? [pid 288] <... futex resumed>) = ? [pid 288] +++ exited with 0 +++ [pid 287] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 289 attached , child_tidptr=0x5555635fc690) = 4 [pid 289] set_robust_list(0x5555635fc6a0, 24) = 0 [pid 289] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 289] setpgid(0, 0) = 0 [pid 289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 289] write(3, "1000", 4) = 4 [pid 289] close(3) = 0 [pid 289] write(1, "executing program\n", 18executing program ) = 18 [pid 289] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 289] rt_sigaction(SIGRT_1, {sa_handler=0x7fa0d7139130, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa0d712af40}, NULL, 8) = 0 [pid 289] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa0d70a7000 [pid 289] mprotect(0x7fa0d70a8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 289] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 289] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa0d70c7990, parent_tid=0x7fa0d70c7990, exit_signal=0, stack=0x7fa0d70a7000, stack_size=0x20300, tls=0x7fa0d70c76c0}./strace-static-x86_64: Process 290 attached [pid 290] set_robust_list(0x7fa0d70c79a0, 24 [pid 289] <... clone3 resumed> => {parent_tid=[5]}, 88) = 5 [pid 290] <... set_robust_list resumed>) = 0 [pid 289] rt_sigprocmask(SIG_SETMASK, [], [pid 290] rt_sigprocmask(SIG_SETMASK, [], [pid 289] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 290] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 289] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 289] <... futex resumed>) = 0 [pid 289] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... socket resumed>) = 3 [pid 290] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 289] <... futex resumed>) = 0 [pid 289] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 289] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 290] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 290] recvfrom(4, [{nlmsg_len=548, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=4}, "\x01\x02\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00\x06\x00\x01\x00\x1e\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\xe4\x01\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x03\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 548 [pid 290] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 290] close(4) = 0 [ 42.326615][ T288] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 42.335003][ T288] RBP: 00007fa0d7195420 R08: 00007fa0d70c6fa7 R09: 0000000000000034 [ 42.344075][ T288] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa0d71618cc [ 42.352390][ T288] R13: 00007fa0d70c7210 R14: 0000000000000001 R15: 0000200000000080 [pid 290] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 289] <... futex resumed>) = 0 [pid 289] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 289] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] sendmsg(3, {msg_name=NULL, msg_namelen=10240, msg_iov=[{iov_base="\x54\x00\x00\x00\x1e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x40\x00\x01\x80\x2c\x00\x04\x00\x14\x00\x01\x00\x02\x00\x00\x00\xac\x14\x14\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00\x02\x00\x02\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x0d\x00\x01\x00\x75\x64\x70\x3a\x73\x79\x7a\x32\x00\x00\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 84 [pid 290] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 289] <... futex resumed>) = 0 [pid 290] socket(AF_TIPC, SOCK_SEQPACKET, 0 [pid 289] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... socket resumed>) = 4 [pid 289] <... futex resumed>) = 0 [pid 290] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... futex resumed>) = 0 [pid 289] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 290] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 289] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... openat resumed>) = 5 [pid 289] <... futex resumed>) = 0 [pid 290] write(5, "4", 1 [pid 289] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... write resumed>) = 1 [ 42.409154][ T290] tipc: Enabling of bearer rejected, already enabled [ 42.419796][ T290] FAULT_INJECTION: forcing a failure. [ 42.419796][ T290] name failslab, interval 1, probability 0, space 0, times 0 [ 42.433985][ T290] CPU: 1 PID: 290 Comm: syz-executor859 Not tainted 5.10.240-syzkaller-00213-gad9a98ef27a4 #0 [ 42.444882][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 42.455502][ T290] Call Trace: [ 42.458888][ T290] __dump_stack+0x21/0x24 [ 42.463613][ T290] dump_stack_lvl+0x169/0x1d8 [ 42.468447][ T290] ? thaw_kernel_threads+0x220/0x220 [ 42.474649][ T290] ? show_regs_print_info+0x18/0x18 [ 42.481470][ T290] dump_stack+0x15/0x1c [ 42.486895][ T290] should_fail+0x3c1/0x510 [ 42.491616][ T290] ? tipc_nametbl_insert_publ+0x9bb/0x1430 [ 42.498625][ T290] __should_failslab+0xa4/0xe0 [ 42.504545][ T290] should_failslab+0x9/0x20 [ 42.509396][ T290] kmem_cache_alloc_trace+0x3a/0x2e0 [ 42.517158][ T290] ? tipc_dest_list_len+0x60/0x60 [ 42.524674][ T290] tipc_nametbl_insert_publ+0x9bb/0x1430 [ 42.530910][ T290] ? selinux_socket_socketpair+0x150/0x150 [ 42.538500][ T290] ? __kasan_check_write+0x14/0x20 [ 42.544002][ T290] tipc_nametbl_publish+0x222/0x3e0 [ 42.550029][ T290] tipc_sk_publish+0x17a/0x3f0 [ 42.556684][ T290] tipc_bind+0x1e3/0x2f0 [ 42.561615][ T290] __sys_bind+0x2f9/0x400 [ 42.566570][ T290] ? __ia32_sys_socketpair+0xb0/0xb0 [ 42.572751][ T290] ? ptrace_notify+0x1c4/0x250 [ 42.577788][ T290] ? fpu__clear_all+0x20/0x20 [ 42.582593][ T290] ? debug_smp_processor_id+0x17/0x20 [ 42.588328][ T290] __x64_sys_bind+0x7a/0x90 [ 42.592979][ T290] do_syscall_64+0x31/0x40 [ 42.598329][ T290] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.605137][ T290] RIP: 0033:0x7fa0d71119a9 [ 42.609631][ T290] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.630059][ T290] RSP: 002b:00007fa0d70c7208 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 42.639311][ T290] RAX: ffffffffffffffda RBX: 00007fa0d7195428 RCX: 00007fa0d71119a9 [ 42.647414][ T290] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [pid 290] bind(4, {sa_family=AF_TIPC, sa_data="\x02\x01\x41\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00"}, 16 [pid 289] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 289] futex(0x7fa0d719543c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 289] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa0d7086000 [pid 289] mprotect(0x7fa0d7087000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 289] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 289] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa0d70a6990, parent_tid=0x7fa0d70a6990, exit_signal=0, stack=0x7fa0d7086000, stack_size=0x20300, tls=0x7fa0d70a66c0}./strace-static-x86_64: Process 291 attached [pid 290] <... bind resumed>) = -1 EINVAL (Invalid argument) [pid 291] set_robust_list(0x7fa0d70a69a0, 24 [pid 290] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000 [pid 289] <... clone3 resumed> => {parent_tid=[6]}, 88) = 6 [pid 291] <... set_robust_list resumed>) = 0 [pid 290] <... futex resumed>) = 0 [pid 289] rt_sigprocmask(SIG_SETMASK, [], [pid 291] rt_sigprocmask(SIG_SETMASK, [], [pid 290] futex(0x7fa0d7195428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 289] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 291] <... rt_sigprocmask resumed>NULL, 8) = 0 [pid 291] futex(0x7fa0d7195438, FUTEX_WAIT_PRIVATE, 0, NULL [pid 289] futex(0x7fa0d7195438, FUTEX_WAKE_PRIVATE, 1000000 [pid 291] <... futex resumed>) = 0 [pid 289] <... futex resumed>) = 1 [pid 291] socket(AF_TIPC, SOCK_SEQPACKET, 0 [pid 289] futex(0x7fa0d719543c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 291] <... socket resumed>) = 6 [pid 291] futex(0x7fa0d719543c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 289] <... futex resumed>) = 0 [pid 291] futex(0x7fa0d7195438, FUTEX_WAIT_PRIVATE, 0, NULL [pid 289] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000 [pid 290] <... futex resumed>) = 0 [pid 289] <... futex resumed>) = 1 [pid 290] sendmsg(6, {msg_name={sa_family=AF_TIPC, sa_data="\x02\x00\x41\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"}, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}, MSG_DONTROUTE [pid 289] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 290] <... sendmsg resumed>) = -1 EHOSTUNREACH (No route to host) [pid 290] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 289] <... futex resumed>) = 0 [pid 290] futex(0x7fa0d7195428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 289] close(3) = 0 [pid 289] close(4) = 0 [pid 289] close(5) = 0 [pid 289] close(6) = 0 [pid 289] close(7) = -1 EBADF (Bad file descriptor) [pid 289] close(8) = -1 EBADF (Bad file descriptor) [pid 289] close(9) = -1 EBADF (Bad file descriptor) [pid 289] close(10) = -1 EBADF (Bad file descriptor) [pid 289] close(11) = -1 EBADF (Bad file descriptor) [pid 289] close(12) = -1 EBADF (Bad file descriptor) [pid 289] close(13) = -1 EBADF (Bad file descriptor) [pid 289] close(14) = -1 EBADF (Bad file descriptor) [pid 289] close(15) = -1 EBADF (Bad file descriptor) [pid 289] close(16) = -1 EBADF (Bad file descriptor) [pid 289] close(17) = -1 EBADF (Bad file descriptor) [pid 289] close(18) = -1 EBADF (Bad file descriptor) [pid 289] close(19) = -1 EBADF (Bad file descriptor) [pid 289] close(20) = -1 EBADF (Bad file descriptor) [pid 289] close(21) = -1 EBADF (Bad file descriptor) [pid 289] close(22) = -1 EBADF (Bad file descriptor) [pid 289] close(23) = -1 EBADF (Bad file descriptor) [pid 289] close(24) = -1 EBADF (Bad file descriptor) [pid 289] close(25) = -1 EBADF (Bad file descriptor) [pid 289] close(26) = -1 EBADF (Bad file descriptor) [pid 289] close(27) = -1 EBADF (Bad file descriptor) [pid 289] close(28) = -1 EBADF (Bad file descriptor) [pid 289] close(29) = -1 EBADF (Bad file descriptor) [pid 289] exit_group(0 [pid 291] <... futex resumed>) = ? [pid 290] <... futex resumed>) = ? [pid 289] <... exit_group resumed>) = ? [pid 291] +++ exited with 0 +++ [pid 290] +++ exited with 0 +++ [pid 289] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 292 attached , child_tidptr=0x5555635fc690) = 7 [pid 292] set_robust_list(0x5555635fc6a0, 24) = 0 [pid 292] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 292] setpgid(0, 0) = 0 [pid 292] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 292] write(3, "1000", 4) = 4 [pid 292] close(3) = 0 executing program [pid 292] write(1, "executing program\n", 18) = 18 [pid 292] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 292] rt_sigaction(SIGRT_1, {sa_handler=0x7fa0d7139130, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa0d712af40}, NULL, 8) = 0 [pid 292] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa0d70a7000 [pid 292] mprotect(0x7fa0d70a8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 292] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 292] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa0d70c7990, parent_tid=0x7fa0d70c7990, exit_signal=0, stack=0x7fa0d70a7000, stack_size=0x20300, tls=0x7fa0d70c76c0}./strace-static-x86_64: Process 293 attached [pid 293] set_robust_list(0x7fa0d70c79a0, 24) = 0 [pid 292] <... clone3 resumed> => {parent_tid=[8]}, 88) = 8 [pid 293] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 293] futex(0x7fa0d7195428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 292] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 292] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... futex resumed>) = 0 [pid 292] <... futex resumed>) = 1 [pid 293] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 293] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 293] futex(0x7fa0d7195428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 292] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}) = -1 EAGAIN (Resource temporarily unavailable) [pid 292] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000 [pid 293] <... futex resumed>) = 0 [pid 292] <... futex resumed>) = 1 [pid 293] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 292] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] <... socket resumed>) = 4 [pid 293] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 293] recvfrom(4, [{nlmsg_len=548, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=7}, "\x01\x02\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00\x06\x00\x01\x00\x1e\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\xe4\x01\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x03\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 548 [pid 293] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=7}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 293] close(4) = 0 [pid 293] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 292] <... futex resumed>) = 0 [pid 292] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 292] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [ 42.656277][ T290] RBP: 00007fa0d7195420 R08: 00007fa0d70c6fa7 R09: 0000000000000034 [ 42.665143][ T290] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa0d71618cc [ 42.674094][ T290] R13: 00007fa0d70c7210 R14: 0000000000000001 R15: 0000200000000080 [ 42.682434][ T290] tipc: Failed to bind to 65,0,0, no memory [pid 293] sendmsg(3, {msg_name=NULL, msg_namelen=10240, msg_iov=[{iov_base="\x54\x00\x00\x00\x1e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x40\x00\x01\x80\x2c\x00\x04\x00\x14\x00\x01\x00\x02\x00\x00\x00\xac\x14\x14\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00\x02\x00\x02\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x0d\x00\x01\x00\x75\x64\x70\x3a\x73\x79\x7a\x32\x00\x00\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 84 [pid 293] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... futex resumed>) = 0 [pid 292] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 292] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] <... futex resumed>) = 1 [pid 293] socket(AF_TIPC, SOCK_SEQPACKET, 0) = 4 [pid 293] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... futex resumed>) = 0 [pid 292] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 292] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 293] <... futex resumed>) = 1 [pid 293] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5 [pid 293] write(5, "4", 1) = 1 [ 42.726174][ T293] tipc: Enabling of bearer rejected, already enabled [ 42.740711][ T293] FAULT_INJECTION: forcing a failure. [ 42.740711][ T293] name failslab, interval 1, probability 0, space 0, times 0 [ 42.755436][ T293] CPU: 0 PID: 293 Comm: syz-executor859 Not tainted 5.10.240-syzkaller-00213-gad9a98ef27a4 #0 [ 42.767438][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 42.779806][ T293] Call Trace: [ 42.783129][ T293] __dump_stack+0x21/0x24 [ 42.788489][ T293] dump_stack_lvl+0x169/0x1d8 [ 42.793320][ T293] ? thaw_kernel_threads+0x220/0x220 [ 42.798862][ T293] ? show_regs_print_info+0x18/0x18 [ 42.804489][ T293] dump_stack+0x15/0x1c [ 42.809006][ T293] should_fail+0x3c1/0x510 [ 42.813825][ T293] ? tipc_buf_acquire+0x2b/0xe0 [ 42.819461][ T293] __should_failslab+0xa4/0xe0 [ 42.824661][ T293] should_failslab+0x9/0x20 [ 42.829374][ T293] __kmalloc_track_caller+0x5f/0x320 [ 42.834713][ T293] ? kmem_cache_alloc+0x165/0x2e0 [ 42.839777][ T293] ? __alloc_skb+0x9e/0x520 [ 42.844516][ T293] ? tipc_buf_acquire+0x2b/0xe0 [ 42.849555][ T293] __alloc_skb+0xdc/0x520 [ 42.854471][ T293] tipc_buf_acquire+0x2b/0xe0 [ 42.859657][ T293] tipc_named_publish+0x2f9/0x890 [ 42.865470][ T293] tipc_nametbl_publish+0x25c/0x3e0 [ 42.870828][ T293] tipc_sk_publish+0x17a/0x3f0 [ 42.875680][ T293] tipc_bind+0x1e3/0x2f0 [ 42.879966][ T293] __sys_bind+0x2f9/0x400 [ 42.884368][ T293] ? __ia32_sys_socketpair+0xb0/0xb0 [ 42.889715][ T293] ? ptrace_notify+0x1c4/0x250 [ 42.894677][ T293] ? fpu__clear_all+0x20/0x20 [ 42.899434][ T293] ? debug_smp_processor_id+0x17/0x20 [ 42.905147][ T293] __x64_sys_bind+0x7a/0x90 [ 42.909731][ T293] do_syscall_64+0x31/0x40 [ 42.914308][ T293] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.920541][ T293] RIP: 0033:0x7fa0d71119a9 [ 42.925148][ T293] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.945811][ T293] RSP: 002b:00007fa0d70c7208 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 42.954911][ T293] RAX: ffffffffffffffda RBX: 00007fa0d7195428 RCX: 00007fa0d71119a9 [ 42.963054][ T293] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [pid 293] bind(4, {sa_family=AF_TIPC, sa_data="\x02\x01\x41\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00"}, 16 [pid 292] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 292] futex(0x7fa0d719543c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 292] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa0d7086000 [pid 292] mprotect(0x7fa0d7087000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 292] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 292] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa0d70a6990, parent_tid=0x7fa0d70a6990, exit_signal=0, stack=0x7fa0d7086000, stack_size=0x20300, tls=0x7fa0d70a66c0} => {parent_tid=[9]}, 88) = 9 [pid 292] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 292] futex(0x7fa0d7195438, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 292] futex(0x7fa0d719543c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 294 attached [pid 294] set_robust_list(0x7fa0d70a69a0, 24) = 0 [pid 294] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 294] socket(AF_TIPC, SOCK_SEQPACKET, 0) = 6 [pid 294] futex(0x7fa0d719543c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... futex resumed>) = 0 [pid 292] futex(0x7fa0d7195438, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 292] futex(0x7fa0d719543c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 294] <... futex resumed>) = 1 [pid 294] sendmsg(6, {msg_name={sa_family=AF_TIPC, sa_data="\x02\x00\x41\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"}, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}, MSG_DONTROUTE) = 0 [pid 294] futex(0x7fa0d719543c, FUTEX_WAKE_PRIVATE, 1000000 [pid 292] <... futex resumed>) = 0 [pid 294] <... futex resumed>) = 1 [pid 294] futex(0x7fa0d7195438, FUTEX_WAIT_PRIVATE, 0, NULL [pid 293] <... bind resumed>) = 0 [pid 293] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 293] futex(0x7fa0d7195428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 292] close(3) = 0 [pid 292] close(4) = 0 [pid 292] close(5) = 0 [pid 292] close(6) = 0 [pid 292] close(7) = -1 EBADF (Bad file descriptor) [pid 292] close(8) = -1 EBADF (Bad file descriptor) [pid 292] close(9) = -1 EBADF (Bad file descriptor) [pid 292] close(10) = -1 EBADF (Bad file descriptor) [pid 292] close(11) = -1 EBADF (Bad file descriptor) [pid 292] close(12) = -1 EBADF (Bad file descriptor) [pid 292] close(13) = -1 EBADF (Bad file descriptor) [pid 292] close(14) = -1 EBADF (Bad file descriptor) [pid 292] close(15) = -1 EBADF (Bad file descriptor) [pid 292] close(16) = -1 EBADF (Bad file descriptor) [pid 292] close(17) = -1 EBADF (Bad file descriptor) [pid 292] close(18) = -1 EBADF (Bad file descriptor) [pid 292] close(19) = -1 EBADF (Bad file descriptor) [pid 292] close(20) = -1 EBADF (Bad file descriptor) [pid 292] close(21) = -1 EBADF (Bad file descriptor) [pid 292] close(22) = -1 EBADF (Bad file descriptor) [pid 292] close(23) = -1 EBADF (Bad file descriptor) [pid 292] close(24) = -1 EBADF (Bad file descriptor) [pid 292] close(25) = -1 EBADF (Bad file descriptor) [pid 292] close(26) = -1 EBADF (Bad file descriptor) [pid 292] close(27) = -1 EBADF (Bad file descriptor) [pid 292] close(28) = -1 EBADF (Bad file descriptor) [pid 292] close(29) = -1 EBADF (Bad file descriptor) [pid 292] exit_group(0 [pid 294] <... futex resumed>) = ? [pid 292] <... exit_group resumed>) = ? [pid 294] +++ exited with 0 +++ [pid 293] <... futex resumed>) = ? [pid 293] +++ exited with 0 +++ [pid 292] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=7, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 295 attached , child_tidptr=0x5555635fc690) = 10 [pid 295] set_robust_list(0x5555635fc6a0, 24) = 0 [pid 295] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 295] setpgid(0, 0) = 0 [pid 295] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 295] write(3, "1000", 4) = 4 [pid 295] close(3) = 0 [pid 295] write(1, "executing program\n", 18executing program ) = 18 [pid 295] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] rt_sigaction(SIGRT_1, {sa_handler=0x7fa0d7139130, sa_mask=[], sa_flags=SA_RESTORER|SA_ONSTACK|SA_RESTART|SA_SIGINFO, sa_restorer=0x7fa0d712af40}, NULL, 8) = 0 [pid 295] rt_sigprocmask(SIG_UNBLOCK, [RTMIN RT_1], NULL, 8) = 0 [pid 295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa0d70a7000 [pid 295] mprotect(0x7fa0d70a8000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 295] rt_sigprocmask(SIG_BLOCK, ~[], [], 8) = 0 [pid 295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa0d70c7990, parent_tid=0x7fa0d70c7990, exit_signal=0, stack=0x7fa0d70a7000, stack_size=0x20300, tls=0x7fa0d70c76c0}./strace-static-x86_64: Process 296 attached [pid 296] set_robust_list(0x7fa0d70c79a0, 24) = 0 [pid 296] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 296] futex(0x7fa0d7195428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 295] <... clone3 resumed> => {parent_tid=[11]}, 88) = 11 [pid 295] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 295] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... futex resumed>) = 0 [pid 295] <... futex resumed>) = 1 [pid 296] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC [pid 295] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] <... socket resumed>) = 3 [pid 296] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 295] <... futex resumed>) = 0 [pid 295] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 296] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 296] recvfrom(4, [{nlmsg_len=548, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=10}, "\x01\x02\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00\x06\x00\x01\x00\x1e\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\xe4\x01\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x03\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 548 [pid 296] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=10}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 296] close(4) = 0 [pid 296] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 295] <... futex resumed>) = 0 [pid 296] futex(0x7fa0d7195428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 295] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... futex resumed>) = -1 EAGAIN (Resource temporarily unavailable) [pid 295] <... futex resumed>) = 0 [ 42.971634][ T293] RBP: 00007fa0d7195420 R08: 00007fa0d70c6fa7 R09: 0000000000000034 [ 42.980397][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa0d71618cc [ 42.988544][ T293] R13: 00007fa0d70c7210 R14: 0000000000000001 R15: 0000200000000080 [ 42.996886][ T293] tipc: Publication distribution failure [ 43.017324][ T52] tipc: 32-bit node address hash set to f1414ac [pid 296] sendmsg(3, {msg_name=NULL, msg_namelen=10240, msg_iov=[{iov_base="\x54\x00\x00\x00\x1e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x40\x00\x01\x80\x2c\x00\x04\x00\x14\x00\x01\x00\x02\x00\x00\x00\xac\x14\x14\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00\x02\x00\x02\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x0d\x00\x01\x00\x75\x64\x70\x3a\x73\x79\x7a\x32\x00\x00\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0 [pid 295] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] <... sendmsg resumed>) = 84 [pid 296] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... futex resumed>) = 0 [pid 296] <... futex resumed>) = 1 [pid 295] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] socket(AF_TIPC, SOCK_SEQPACKET, 0 [pid 295] <... futex resumed>) = 0 [pid 296] <... socket resumed>) = 4 [pid 295] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000) = 1 [pid 295] <... futex resumed>) = 0 [pid 296] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR [pid 295] futex(0x7fa0d7195428, FUTEX_WAKE_PRIVATE, 1000000 [pid 296] <... openat resumed>) = 5 [pid 295] <... futex resumed>) = 0 [pid 296] write(5, "4", 1 [pid 295] futex(0x7fa0d719542c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 296] <... write resumed>) = 1 [ 43.043578][ T296] tipc: Enabling of bearer rejected, already enabled [ 43.055230][ T296] FAULT_INJECTION: forcing a failure. [ 43.055230][ T296] name failslab, interval 1, probability 0, space 0, times 0 [ 43.068895][ T296] CPU: 0 PID: 296 Comm: syz-executor859 Not tainted 5.10.240-syzkaller-00213-gad9a98ef27a4 #0 [ 43.079900][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 43.091118][ T296] Call Trace: [ 43.094545][ T296] __dump_stack+0x21/0x24 [ 43.099522][ T296] dump_stack_lvl+0x169/0x1d8 [ 43.104692][ T296] ? thaw_kernel_threads+0x220/0x220 [ 43.110461][ T296] ? show_regs_print_info+0x18/0x18 [ 43.116930][ T296] dump_stack+0x15/0x1c [ 43.121391][ T296] should_fail+0x3c1/0x510 [ 43.126083][ T296] ? tipc_nametbl_insert_publ+0x9bb/0x1430 [ 43.132888][ T296] __should_failslab+0xa4/0xe0 [ 43.137956][ T296] should_failslab+0x9/0x20 [ 43.142791][ T296] kmem_cache_alloc_trace+0x3a/0x2e0 [ 43.148174][ T296] ? tipc_dest_list_len+0x60/0x60 [ 43.154086][ T296] tipc_nametbl_insert_publ+0x9bb/0x1430 [ 43.161229][ T296] ? selinux_socket_socketpair+0x150/0x150 [ 43.167238][ T296] ? __kasan_check_write+0x14/0x20 [ 43.172717][ T296] tipc_nametbl_publish+0x222/0x3e0 [ 43.178205][ T296] tipc_sk_publish+0x17a/0x3f0 [ 43.183202][ T296] tipc_bind+0x1e3/0x2f0 [ 43.187495][ T296] __sys_bind+0x2f9/0x400 [ 43.192652][ T296] ? __ia32_sys_socketpair+0xb0/0xb0 [ 43.198227][ T296] ? ptrace_notify+0x1c4/0x250 [ 43.203318][ T296] ? fpu__clear_all+0x20/0x20 [ 43.208203][ T296] ? debug_smp_processor_id+0x17/0x20 [ 43.213655][ T296] __x64_sys_bind+0x7a/0x90 [ 43.218836][ T296] do_syscall_64+0x31/0x40 [ 43.223325][ T296] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.229251][ T296] RIP: 0033:0x7fa0d71119a9 [ 43.233705][ T296] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.255038][ T296] RSP: 002b:00007fa0d70c7208 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 43.264886][ T296] RAX: ffffffffffffffda RBX: 00007fa0d7195428 RCX: 00007fa0d71119a9 [ 43.273624][ T296] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 43.282182][ T296] RBP: 00007fa0d7195420 R08: 00007fa0d70c6fa7 R09: 0000000000000034 [pid 296] bind(4, {sa_family=AF_TIPC, sa_data="\x02\x01\x41\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00"}, 16 [pid 295] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [pid 295] futex(0x7fa0d719543c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] mmap(NULL, 135168, PROT_NONE, MAP_PRIVATE|MAP_ANONYMOUS|MAP_STACK, -1, 0) = 0x7fa0d7086000 [pid 295] mprotect(0x7fa0d7087000, 131072, PROT_READ|PROT_WRITE) = 0 [pid 295] rt_sigprocmask(SIG_BLOCK, ~[], [pid 296] <... bind resumed>) = -1 EINVAL (Invalid argument) [pid 295] <... rt_sigprocmask resumed>[], 8) = 0 [pid 295] clone3({flags=CLONE_VM|CLONE_FS|CLONE_FILES|CLONE_SIGHAND|CLONE_THREAD|CLONE_SYSVSEM|CLONE_SETTLS|CLONE_PARENT_SETTID|CLONE_CHILD_CLEARTID, child_tid=0x7fa0d70a6990, parent_tid=0x7fa0d70a6990, exit_signal=0, stack=0x7fa0d7086000, stack_size=0x20300, tls=0x7fa0d70a66c0} => {parent_tid=[12]}, 88) = 12 [pid 295] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 295] futex(0x7fa0d7195438, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7fa0d719543c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000}./strace-static-x86_64: Process 297 attached [pid 297] set_robust_list(0x7fa0d70a69a0, 24) = 0 [pid 297] rt_sigprocmask(SIG_SETMASK, [], NULL, 8) = 0 [pid 297] socket(AF_TIPC, SOCK_SEQPACKET, 0) = 6 [pid 297] futex(0x7fa0d719543c, FUTEX_WAKE_PRIVATE, 1000000 [pid 295] <... futex resumed>) = 0 [pid 295] futex(0x7fa0d7195438, FUTEX_WAKE_PRIVATE, 1000000) = 0 [pid 295] futex(0x7fa0d719543c, FUTEX_WAIT_PRIVATE, 0, {tv_sec=0, tv_nsec=50000000} [pid 297] <... futex resumed>) = 1 [pid 297] sendmsg(6, {msg_name={sa_family=AF_TIPC, sa_data="\x02\x00\x41\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"}, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}, MSG_DONTROUTE [pid 296] futex(0x7fa0d719542c, FUTEX_WAKE_PRIVATE, 1000000) = 0 [ 43.290626][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa0d71618cc [ 43.299137][ T296] R13: 00007fa0d70c7210 R14: 0000000000000001 R15: 0000200000000080 [ 43.307840][ T296] tipc: Failed to bind to 65,0,0, no memory [ 43.317512][ T297] list_add double add: new=ffff88810a7229b8, prev=ffff88810a7229b8, next=ffff88810a7229b8. [ 43.328418][ T297] ------------[ cut here ]------------ [ 43.333925][ T297] kernel BUG at lib/list_debug.c:35! [ 43.340199][ T297] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 43.346354][ T297] CPU: 1 PID: 297 Comm: syz-executor859 Not tainted 5.10.240-syzkaller-00213-gad9a98ef27a4 #0 [ 43.356992][ T297] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 43.367988][ T297] RIP: 0010:__list_add_valid+0x9f/0xf0 [ 43.373485][ T297] Code: f7 74 12 49 39 df 74 0d b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 40 1c 20 85 4c 89 fe 4c 89 f2 48 89 d9 e8 81 6f 30 02 <0f> 0b 48 c7 c7 40 1a 20 85 e8 73 6f 30 02 0f 0b 48 c7 c7 e0 1a 20 [ 43.393485][ T297] RSP: 0018:ffffc90000bd7370 EFLAGS: 00010246 [ 43.399807][ T297] RAX: 0000000000000058 RBX: ffff88810a7229b8 RCX: e00111ea470fc700 [ 43.408397][ T297] RDX: 0000000000000000 RSI: 0000000000000201 RDI: 0000000000000000 [ 43.416647][ T297] RBP: ffffc90000bd7398 R08: dffffc0000000000 R09: ffffed103ee2a5f8 [ 43.424879][ T297] R10: ffffed103ee2a5f8 R11: 1ffff1103ee2a5f7 R12: ffff88810a7229c0 [ 43.433440][ T297] R13: dffffc0000000000 R14: ffff88810a7229b8 R15: ffff88810a7229b8 [ 43.442111][ T297] FS: 00007fa0d70a66c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 43.451159][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.458146][ T297] CR2: 00007fa0d70a6d58 CR3: 000000010b595000 CR4: 00000000003506a0 [ 43.469079][ T297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.477497][ T297] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.486543][ T297] Call Trace: [ 43.490515][ T297] tipc_nametbl_translate+0xbe4/0xed0 [ 43.495953][ T297] __tipc_sendmsg+0xb99/0x2be0 [ 43.501580][ T297] ? tipc_sk_publish+0x3f0/0x3f0 [ 43.507283][ T297] ? __kasan_check_write+0x14/0x20 [ 43.513517][ T297] ? resched_curr+0x9b/0x1c0 [ 43.518728][ T297] ? check_preempt_wakeup+0x3e4/0xb10 [ 43.525553][ T297] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 43.531739][ T297] ? update_load_avg+0x4dc/0x14f0 [ 43.536942][ T297] ? enqueue_task_fair+0xac3/0x2250 [ 43.542714][ T297] __tipc_sendstream+0x14ec/0x1740 [ 43.548084][ T297] ? avc_has_perm+0x234/0x360 [ 43.552817][ T297] ? avc_has_perm_noaudit+0x240/0x240 [ 43.558445][ T297] ? _raw_spin_lock_irq+0xe0/0xe0 [ 43.564238][ T297] ? __local_bh_enable_ip+0x53/0x80 [ 43.569920][ T297] ? local_bh_enable+0x1f/0x30 [ 43.575261][ T297] ? lock_sock_nested+0x1f5/0x290 [ 43.580357][ T297] ? tsk_advance_rx_queue+0x700/0x700 [ 43.585973][ T297] ? copy_fpregs_to_fpstate+0x14a/0x1b0 [ 43.591745][ T297] tipc_send_packet+0x7c/0xa0 [ 43.596762][ T297] ? tipc_sk_send_ack+0x630/0x630 [ 43.602151][ T297] ____sys_sendmsg+0x5a2/0x8c0 [ 43.607129][ T297] ? __sys_sendmsg_sock+0x40/0x40 [ 43.612209][ T297] ? import_iovec+0x7c/0xb0 [ 43.616890][ T297] ___sys_sendmsg+0x1f0/0x260 [ 43.621700][ T297] ? __switch_to_asm+0x34/0x60 [ 43.627040][ T297] ? __sys_sendmsg+0x250/0x250 [ 43.632053][ T297] ? __fdget+0x1a1/0x230 [ 43.636329][ T297] __x64_sys_sendmsg+0x1e2/0x2a0 [ 43.641442][ T297] ? do_notify_parent+0x7e0/0x7e0 [ 43.646636][ T297] ? ___sys_sendmsg+0x260/0x260 [ 43.651528][ T297] ? syscall_trace_enter+0x4b/0x170 [ 43.656999][ T297] do_syscall_64+0x31/0x40 [ 43.661618][ T297] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.667683][ T297] RIP: 0033:0x7fa0d71119a9 [ 43.672288][ T297] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 71 1d 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.692599][ T297] RSP: 002b:00007fa0d70a6208 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 43.702181][ T297] RAX: ffffffffffffffda RBX: 00007fa0d7195438 RCX: 00007fa0d71119a9 [ 43.710646][ T297] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000006 [ 43.718886][ T297] RBP: 00007fa0d7195430 R08: 0000000000000000 R09: 0000000000000000 [ 43.727756][ T297] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fa0d71618cc [ 43.736512][ T297] R13: 000000000000006e R14: 00007ffe550eb0d0 R15: 0000200000000080 [pid 296] futex(0x7fa0d7195428, FUTEX_WAIT_PRIVATE, 0, NULL [pid 295] <... futex resumed>) = -1 ETIMEDOUT (Connection timed out) [ 43.745875][ T297] Modules linked in: [ 43.749968][ T297] ---[ end trace b095263218e2625f ]--- [ 43.755950][ T297] RIP: 0010:__list_add_valid+0x9f/0xf0 [ 43.761519][ T297] Code: f7 74 12 49 39 df 74 0d b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 40 1c 20 85 4c 89 fe 4c 89 f2 48 89 d9 e8 81 6f 30 02 <0f> 0b 48 c7 c7 40 1a 20 85 e8 73 6f 30 02 0f 0b 48 c7 c7 e0 1a 20 [ 43.783626][ T297] RSP: 0018:ffffc90000bd7370 EFLAGS: 00010246 [ 43.790616][ T297] RAX: 0000000000000058 RBX: ffff88810a7229b8 RCX: e00111ea470fc700 [ 43.799262][ T297] RDX: 0000000000000000 RSI: 0000000000000201 RDI: 0000000000000000 [ 43.808315][ T297] RBP: ffffc90000bd7398 R08: dffffc0000000000 R09: ffffed103ee2a5f8 [ 43.816657][ T297] R10: ffffed103ee2a5f8 R11: 1ffff1103ee2a5f7 R12: ffff88810a7229c0 [ 43.825052][ T297] R13: dffffc0000000000 R14: ffff88810a7229b8 R15: ffff88810a7229b8 [ 43.833166][ T297] FS: 00007fa0d70a66c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 43.842360][ T297] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.849064][ T297] CR2: 00007fa0d70a6d58 CR3: 000000010b595000 CR4: 00000000003506a0 [ 43.857178][ T297] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.865528][ T297] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.873952][ T297] Kernel panic - not syncing: Fatal exception in interrupt [ 43.881679][ T297] Kernel Offset: disabled [ 43.886707][ T297] Rebooting in 86400 seconds..