last executing test programs: 1m44.407116802s ago: executing program 2 (id=93): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r0, 0x0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000100)={0x9c, 0x0, &(0x7f0000002680)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x70, 0x18, &(0x7f00000004c0)={@ptr={0x70742a85, 0x0, &(0x7f0000000280)=""/226, 0xe2, 0x2, 0x4}, @fda={0x66646185, 0xffffffffffffffff, 0x0, 0xe}, @ptr={0x70742a85, 0x0, &(0x7f0000002740)=""/243, 0xf3, 0x0, 0x28}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}, @reply={0x40406301, {0x3, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x60, 0x18, &(0x7f0000000080)={@fda={0x66646185, 0xffffffff7fffffff, 0xfffffffffffffffe, 0x10}, @ptr={0x70742a85, 0x1, &(0x7f0000000580)=""/173, 0xad, 0x0, 0x14}, @flat=@binder={0x73622a85, 0x110a, 0x1}}, &(0x7f0000000000)={0x0, 0x20, 0x48}}}, @dead_binder_done], 0x0, 0x0, 0x0}) 1m44.402772672s ago: executing program 2 (id=94): socketpair$unix(0x1, 0x2, 0x0, 0x0) setresgid(0xffffffffffffffff, 0xee00, 0xffffffffffffffff) r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 1m44.390499772s ago: executing program 2 (id=95): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x101002, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x1}, 0x0) writev(r0, &(0x7f0000000040)=[{&(0x7f00000003c0)="aebca330500b8460c14e799788ca4e13f8c4bac7dd93c235fa66248d5ee954ffdbb407f66330bbb25fd25d4c43ec34fd79d0e8fa5bce6fd8fa2b317885699b97c61d0f3bbbe3dfddfdc9188ab7f920ee2b30a77590e6ec3d82e9ca30ccf734668262a2cf137c42f44873b2c9e3e5ef152fa33a1c0222dd71aaaf4d45f2153130efc69b4e3dd038600218cbb812992490c9c4f614aece5475", 0x98}], 0x1) 1m44.269826544s ago: executing program 2 (id=100): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) keyctl$invalidate(0x15, r0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) socket$netlink(0x10, 0x3, 0x0) fsopen(&(0x7f00000000c0)='f2fs\x00', 0x0) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000040), 0x8940, 0x0) readv(r1, &(0x7f0000000140)=[{&(0x7f0000001400)=""/4096, 0x1000}], 0x1) mount(&(0x7f0000000000)=@sg0, &(0x7f0000000040)='./cgroup\x00', &(0x7f00000000c0)='ext3\x00', 0x200004, 0x0) mount$bind(0x0, &(0x7f00000003c0)='./file0/file0\x00', 0x0, 0x80000, 0x0) unshare(0x22020600) setxattr(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f0000000140)=@random={'security.', 'g@\x00'}, &(0x7f0000000180)='mountinfo\x00', 0xa, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001000034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='mountinfo\x00') read$FUSE(r3, &(0x7f00000005c0)={0x2020}, 0x2020) 1m44.206800546s ago: executing program 2 (id=102): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000040)}}], 0x1, 0x4000000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x50, 0x0, &(0x7f0000000580)="c6547e22bade76f1a03b79e954ee20b943f7fe47218a02ff8ba942478a7b6946e9a6000055002cc15e854564e7d309f20d222f9220c8d9b1b0d196137252587ab1794808000000000000000e647c2e70"}) r2 = socket(0x22, 0x5, 0x9) setsockopt$sock_linger(r2, 0x1, 0x3c, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x141800, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_X86_SET_MSR_FILTER(r4, 0x4188aec6, &(0x7f0000000a40)={0x1, [{0x2, 0x0, 0x106, 0x0}, {0x2, 0x0, 0x2, 0x0}, {0x2, 0x0, 0x7ff, 0x0}, {0x1, 0x0, 0x912b, 0x0}, {0x2, 0x0, 0x3cb3, 0x0}, {0x3, 0x0, 0x3fe, 0x0}, {0x0, 0x0, 0x2, 0x0}, {0x3, 0x0, 0xfffffffe, 0x0}, {0x1, 0x0, 0xb, 0x0}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x0, 0x9, 0x0}, {0x3, 0x0, 0x7, 0x0}, {0x60cf6ba5a5e3603a, 0x0, 0x0, 0x0}, {0x1, 0x0, 0x7ffffffb, 0x0}, {0x1, 0x0, 0x5, 0x0}, {0x1, 0x0, 0x8001, 0x0}]}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000100)={0x2c, 0x1b, '\x00', [@calipso={0x7, 0x30, {0x0, 0xa, 0x8, 0x74, [0x8, 0x8, 0x0, 0x5, 0xe5]}}, @generic={0x2, 0xa4, "3392a5fce8b79c3614510dab52ec0cff0ae038624ed4c094fb1772786adc74e381efb124bd5404c6112ddc5f0ad2f3ba74723737e28057da8fd1699dd95bdf3f185069e280ba7dd92cf03ad03a42506afa7b311d30338596331693eab3fd10f7282e8022f36f094baea68e7bd372398b556ed171034ff0ee8945fde1a3029eeb3ac6620762fcde4561fc6455f1f32faaa1bcf232d1a5146fda168bab51af8f7a6b1ebc28"}]}, 0xe0) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 1m44.175615516s ago: executing program 2 (id=103): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 1m44.095356958s ago: executing program 32 (id=103): socketpair$unix(0x1, 0x2, 0x0, 0x0) r0 = syz_clone(0x22180, 0x0, 0xa42f, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f0000000140)=""/15, 0xf, 0x4) 22.406111875s ago: executing program 3 (id=2283): setresgid(0xee00, 0xee01, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), 0x0, 0x4000}}], 0x1, 0x14040804) r1 = openat$rnullb(0xffffffffffffff9c, &(0x7f0000000000), 0x1331c2, 0x0) sendfile(r1, r1, 0x0, 0x7ffff000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4d0802, 0x68) r3 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x2c2001, 0x28) linkat(r2, &(0x7f0000000080)='./file0\x00', r3, &(0x7f0000000100)='./file0\x00', 0x0) 22.405832025s ago: executing program 3 (id=2285): r0 = open(&(0x7f0000000000)='./cgroup.cpu/cpuset.cpus\x00', 0x1a1342, 0x162) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB='1-6:'], 0x31) r1 = getpid() r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x13, &(0x7f0000000000)=0x5, 0x4) r3 = syz_pidfd_open(r1, 0x0) getpriority(0x0, r1) r4 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_netdev_private(r4, 0x89f1, &(0x7f0000000080)="7fdf624fa37aeec9e4237e0c8c1ad844dd1bb99faaebe85c413d82f5e4b14df2a33c2612695931565563d8b417e1a25bfbffdd24b7c675ec72a0562cdc0dcfdf5531e973dd2d1f55b82f91c9f43d99a4b46e519a2b098a55e6527228f1dc861d1e42b77a0a4b7de31e44de8faece80e6eea9") setns(r3, 0x24020000) umount2(&(0x7f0000000040)='.\x00', 0x2) 22.357132286s ago: executing program 3 (id=2288): r0 = syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000040)={0x6, 0x8, [0xfffffffffffffff7, 0x8, 0xd1, 0x2], &(0x7f0000000000)=[0x0]}) 22.341378316s ago: executing program 3 (id=2292): r0 = inotify_init() inotify_add_watch(r0, &(0x7f0000000440)='.\x00', 0x8) 22.318393787s ago: executing program 3 (id=2293): syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) (fail_nth: 6) 22.261720508s ago: executing program 3 (id=2294): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x6ac103, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r2 = socket(0x10, 0x803, 0x0) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000040), 0x4) sendto(r2, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x20) recvmmsg(r2, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000001fc0)=""/4104, 0x1008}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000740)=""/73, 0x49}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f00000007c0)=""/143, 0x8f}, {&(0x7f0000000100)=""/26, 0x1a}], 0x8}}], 0x1, 0x2, 0x0) setresuid(0xee01, 0x0, 0x0) r3 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, r3, 0x0, 0x8, 0x0) prlimit64(r3, 0x5, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x21) r5 = socket(0x10, 0x803, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x20000004, 0x0, 0x0) recvmmsg(r5, &(0x7f0000009080)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000000040)=""/190, 0xbe}, {&(0x7f0000000580)=""/77, 0x4d}, {&(0x7f0000000600)=""/101, 0x65}, {&(0x7f0000002580)=""/4096, 0x1000}], 0x5}, 0x5e}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x10}], 0x4, 0x2, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000161000/0x18000)=nil, &(0x7f0000005700)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) r6 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) ioctl$UI_DEV_SETUP(r6, 0x405c5503, &(0x7f0000000280)={{0x100a, 0xfffc, 0x0, 0x4}, 'syz0\x00', 0x3a}) ioctl$UI_DEV_CREATE(r6, 0x5501) ioctl$UI_GET_SYSNAME(r6, 0x8040552c, 0xfffffffffffffffc) ioctl$KVM_SET_NESTED_STATE(r4, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80}, "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", "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"}) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r7, 0x0, 0x60, &(0x7f0000001d80)={'filter\x00', 0x111, 0x4, 0x3a0, 0x0, 0x1d0, 0x1d0, 0x2b8, 0x2b8, 0x2b8, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0xe8}, @unspec=@MARK={0x28}}, {{@arp={@empty, @dev={0xac, 0x14, 0x14, 0x19}, 0x0, 0x0, 0x0, 0x0, {@mac}, {@mac, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg1\x00', 'lo\x00', {}, {}, 0x0, 0x158}, 0xc0, 0xe8, 0x0, {0xb000000}}, @unspec=@CLASSIFY={0x28, 'CLASSIFY\x00', 0x2}}, {{@arp={@rand_addr, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0xff]}}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@AUDIT={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000168000/0x18000)=nil, &(0x7f0000000080)=[@text32={0x20, &(0x7f00000001c0)="65660fc736b9230200000f320fc5b0040040000f0f10970fe8fa6466baf80cb82cf59b88ef66bafc0cb000eec4e21d4501c744240000000000c74424021c320000c744240600000000c4e17de69222ad2eec0fc76e04b8200fae8266bac10c66ba004066ef66b8296c", 0x69}], 0x1, 0x0, 0x0, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000700)=ANY=[@ANYBLOB="30010000100007000000000000000000ff020000000000000000000000000001e00000020000000000000000000000004e200000000000000000000002000000", @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ff010000000000000000000000000001000000002b000000fc00000000000000000000000000000000000000000000f0ff00000000000000020000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000700000000000000000000000000000000000400fdffffffe80a000000000000000000000a000200700000000000000014000e00fe8000000000000000000000000000bb24000900b4000008000000000100000000000080b4000000000000000500"], 0x130}}, 0x0) r9 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000900)=ANY=[@ANYBLOB="08bdb55e874013ef00000000000b55cf8b5e2d71fd9a1ce5dd1195479500fcff61f76ebe00000000000000000000001be0000002000000000000000000400000", @ANYRESDEC=0x0, @ANYRES32=0xee00, @ANYRESOCT=r8], 0x104}, 0x1, 0x0, 0x0, 0x40004}, 0x40) ioctl$KVM_RUN(r4, 0xae80, 0x0) keyctl$session_to_parent(0x12) 9.685679542s ago: executing program 0 (id=2330): r0 = getpid() r1 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000480)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x1b96, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x40, 0xb1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x101, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x3ff, 0x7}}}}}]}}]}}, 0x0) syz_usb_control_io(r1, 0x0, 0x0) syz_usb_control_io(r1, &(0x7f0000000340)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='w\a\a\x00'/13], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = syz_pidfd_open(r0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSMAXCID(r4, 0x40047451, &(0x7f0000000200)=0x8) ioctl$PPPIOCSFLAGS1(r4, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r4, &(0x7f00000002c0)=[{&(0x7f0000000380)="00218e02fae5d9d68d3008b4c027225e5ee2ee45db039018", 0x18}], 0x1, 0x7, 0x1) setsockopt$inet6_tcp_int(r3, 0x6, 0x1e, &(0x7f0000000180)=0x400000001, 0xc2) setsockopt$inet6_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f000000bec0)={0x0, 0x0, &(0x7f000000be80)={&(0x7f0000000400)=ANY=[@ANYBLOB="c800000028000100"], 0xc8}, 0x1, 0x0, 0x0, 0x48090}, 0x4) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x4e23, 0xa4e4, @remote, 0x3}, 0x1c) sendmmsg(r3, &(0x7f0000001000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4010) setsockopt$inet6_tcp_TLS_TX(r3, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "6c382ccb69434f02", "a6b3b6be08c3ba02e945de45490efc0ef54528d6726a902093be2838c1ed2264", "d9d1f4c2", "cbde04a76efcf227"}, 0x38) setns(r2, 0x24020000) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000009c0)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setresgid(0xffffffffffffffff, r6, r6) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000c80)=0x0) lstat(&(0x7f0000000080)='./file0/file0\x00', &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$sock_cred(r9, 0x1, 0x11, &(0x7f0000000240)={0x0, 0x0}, &(0x7f0000000280)=0x5) setreuid(r10, 0x0) r11 = getegid() getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000e80)={{{@in6=@private2, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in6}}, &(0x7f00000005c0)=0xe8) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000001040)="010f02a2c28b4f5fb046bf484c1c88348e51e750edcc62d26e054b0369e0ce988c7dba89c5a3fd07e0efbaacb4e35815560f7b71b32fac29bc9a51c383265992c758311d71168dde9524b6d659256bd992c80202ec9f9f48117160439d05e715231af59a7c7bee61188d7be26c2c57f1a8d6ad42f1f0d05f650a80b1bb67c907a4a9a2eace411f9804cf26bf3ed92216b97b1782d2f9f577516cd713d90dd79180dd2053e2640a128d3f5fda0f8b2c4e7edb7ffd2e5fdc763476488fc2e105e3027d72e17951265f01cd2a9824163776a5a7904a0fdf885546af9cc750c4487fdf897abe4f150c09f65754a97bea9c2eb66586839d06ae581f85c1283f3240a5a480b207a7fdbd09b9ffa7b19626618e70937f6ac18e091bba51010f28361674e2eb0b5d54adf321431aa1b46f340c59db36ac51e726213435390255245393eed247907e477e310cbaed28497a762fdd25f415b07fe4c850d70bf449dfe3db66f85015f9ce77640fc01a76a38bd5e9cac6d56554ad8c25620d5fe31330a0d0d0114ac4e066ad1fb6f79b50ab506012cc9a4faddf0dd676704fe680321283d498b5acc8887750e6ecab3ac72510b298e70e1602eecf6ee9a6014fce75a3402cb2f5d51ed0fd69d641008cee4e0eb43ee2113d396422d538441aad58cf20ec9d74465625655825cfa8f75cd4fe245cfa46d7792c095ea896c0b798de880378196af0a33d844f4d1f5bfd37a350241555cdd86f477fb01f81b4fdedab150126a4f7f7273449cb2cffe6910e2c505d9556beafb2ba3122dd62363551ad62e3e95d281b9c40f5b99d2145de32c9adae7ce51103af4e4166dff0cfd295a7596c0d5730ec2897d83bce44789697534065671769b7dfa002c6304ad2150b1edf84596d7548815e2af8ab930651c70c98f788b626e08dbb780f13d6dc50495ed3d2a9f3da25cb6c1ff69bb50c9506bdd9587d5c6760b7afb5281798f75e0c7d642bf7c7bb0203b17e6abecf02337d323aa1fa31d589a21810c1cec93c4c813ea9b6d7bce38cb42708a6416e3c14416c97a9430356ef5dd8f75f4e9d2115cf6fad0bfced7a24f7cd0e6e68bb23001673ed132fc6974570a16be32bc453d145c6653129f9574a4b51c0d1d67e82812786cf2c389d499f88714429538145962ed67d14a614354829710a462fe7588e89fa294d8017138ea11fdefb68f640ca9f5a08dfee228991b6b6f63f24e8a9ce79473e80ce9cc8c36b92586645eafeca98a67b767bdcfa55c33df5b0ba518decb7bf8e1491b348acf4d2455119dfc940541d31ec8a76886e700c02f6401f91c97992d84a018618cf3b7beb04beeb8d17894f9cbd33e454b776b17d2d8c275812d4af093a15c18e9167585f0a9020dc62179162da72cb431f4e837ebde184c0d89c2c8e0ac9a457323a9335df1cb1bd2394747f1a7ddbb803b8e65048453a495bdcf57f60a4e4fb9026e59c7d580ebc72cf8b172e40e2bb6c64409ed5ba6dc5e0bf93d51a700c0b9584af7396091b992fdaf6a7bcc9ace3a0c4edca6af8fc79a16a2cfbd90eecebae7533cfb2dcf09ef16c12fea166ea08b7cb266f2b1bc3f3786df07f1e35bcfaf9d8366716c0d9e596798f486425c594f0f8b55d85662c7c0df7e80311cd3a8bad10f45fd312f087df9a1aa37771bacee4edea8ce3725ebdfb0a02cbaed19b7a37bcb273e2e710f22671d3fee6a13273406613b7ba483782246acab504d59d9c34587977ad775f3c6430b43463a78b0a0fef92500a9e9672a46eaf88ea9098abd0dbc6929194bdd5093670fe38fea3ca229e5989d0952846c4e06eccfd77e53c70b26d0f67e03c9955d94120762860e7ff42a54f5b4d5a423aa4092d115f156b5e8574026c9ef7b9461f694aadd75399bfbd8d56b505452fda9c71a0eac0209c4179bc4d18071a1148101838f8c78811e37b84a2386dfff0b5655a252e68fd307858360a9af06f95383fd221a8178d07464a99073d94435a0c1c49bc81026f641c623ddeb106acc2aae474fcaa260283b51e1a3a8fba6a7e11dac367248f85487004cbe5f5d9b2295d5612e2bad05b2d30eeb3f198cb91df6c6eaf54cc836af6ded2bf7afca547011acbe64130e0cff25f714d2931ff054cf424bec8c516f037ffe234e36ae967d7c7c1a09b126119061cdcdebdd3b125864e9c0fba00be1672059d8a5d48bb2240d0137c2b00e1cb9cb2212f9b9c8e394e6e05e27b3538b6f14f57a1b0df7c2abc59cb07e49fdda235bae10431e3f15fcf5673ad7413512e86d352f26c7267c368c44e1b8c1ec578235428c90492535175ee3e8f79dcdcc31938c81801fa462a72bf407c886610246a94b9f70bc408b54f55cb14ed91b522228cf6be3011592d733503c406852de60f290a2da7d7ad804d2dd7df4e0a9712b1f8e8eecc177f595ceb23d864cd0e983c139673f701b8cc2b964dd5301776cb55066655c9b271b02858fcb6147992175bef943044e0282154f802cff70e6b6c7d0254d0203b2286e4e60ec835397fe4d525e96f1856c9a763e1c98c4e6daedb50c3ce4fc0a4e3a44cf7229af65c333157d9185545a67f3e47ab9ac881009d7efff42b99dd12fbcb9d7e22394523c142c5e0e1a7ac4e76eece2b0954f17538887311807495c5a0c66906c672e572b71c50242ddbc2029bad8748321a19030302e9d6c23731e4ceeca74e305e06a13dc4c25bdd18744f54886517c96e8de87c7c82f008bb63a9bcc1fc6ebe15c2c4e54ee1df194c73355688080fa6a3aec6a6ca2788e55746aef1bfc95e460fd81692a8f52d7c8a263a176f0ec1454907cccb3f10954aa00ee7704e046a696e7e48a47e11a0a06e935df5cbbd45a2b83716e9f734bd2c73e14b8debcc386dff791d10ef219b1c8f5fdba6a197bea976ecc5bec754d9f0cf64f109f204b9f4ab471ec9db0c3f76c0e78b36c210baa776677ac629102a989351eaed81581291dcf962d090de704254cbdc1747c0c23debfe5b14f941a815c51195b64eb590cba567528e3ea450ef3d4747eb271405168072a4882a21eeaf8a237e24db7e9bc55d1bface9fb40b055dd4c01e1d5bac31ac943e572e131afd8df8f07911e2301eae0d6a8ab13664f4399f54098b17701c322913f26b2234d186bedaf9bf4c562b33c2743fc91f4f52e9e9990067ae07eebfecb4d9abe0bd467e856c64892f4f3dceaf17f036d3ca8c5564169dbfa3d07f5600336bc60a075ed07fec8b6800c109a83e65fcf8203eebd34a8fcbda18a318bc091030c2e70a8ae9a6df35028cba970e44fb5dfbdbea4de7d01dbe3488518e25c3bdea1fe272943f72593c5e1b0d71bbeffa912219a55add747a0c42795be189ea65ce4d9232416390ee62fc2ece8a73257e40e91e2b172e1bdb3d19307f1c1913152edf02739fb0e22beb371e36a00ddca5d6e0033a43f431a3bc6c861964465eb879ce94e0a4e370cf8cbc9c7de676d055811d0ff5c2a9dc6fde483cec85102345f3fec2b7d98aff3f1a7292dee202a4e13043904f0f94885a8880077f714436c576289fe28784ceb886a7b6df65f46029789c07bed6bacdd9f5c9a1f9bdcbb62b947326dc85f0ff21d89a2e62e6411be5824da62453d206d5759478a765b76fe5302481059631823c4f94395eb2f0d29cb825ef6495b023bd4f44c3d2039fda0f3a6e91258b5bcf406bc29ef2c00c6e673cfbbf82e1279d6724faa3bdc6a9d2d8f1c6e045183c290166d87be75a5aa7fb54f0e9afc1a13f368ffabbd7447738e44595c30efa7b1f24cd41d2242a6338ddf13a1e7833873c18edfcf2c6ac0887a3cfe70a9ccd95df1f24157e18f55da92f48573fd73470bf88174c7ed969e5d2e44ec3c524bad43e93bd94d80791ec63b284974eb2f420d1ea662f77a85e55a62d0b51313fda3312ad35071bcddd8c3f05652b34a53f5b44ecd6e253e78bfa33b8578cb6044bcfaa47ead8fac0a7cb3541ddcbd81a15254508acef0a4a9410550e51a58178ab12ac0094c1eaa4da272baeaf4f74d3ef80cb82a4fe9c271d9fa5ab4898e336e21a1d88477f9301a1b3b6cb460d381d7af0716c000e931d49c140d92e47031e53601329d025bbac66040ecfd11105cb1963ccf5dc7f7b94a3646bd7bd3cfb7399688174391cb553e6897296df217f10f6ca98dd585593614aee2122fcd4acb3b8a5e07877090a64819c0219c5e88c647a4110eb619e7160a1dfc3777cdb89813ac55e2284451b094c8e6313cd6ceedd52d6af7caced13f520a4029191870aee62d74cbd22856618b63afb7c0d0f8b75340bd6cf19bc207f143b45b8d4f90bd988b02bd1a972603a5e5b50b4d5668178ad283e898f26c47fd0ca11283f9f82b1a51464607a3fceed4d39f18551e1f4910c336d35809c415ce911eca2d74f31fc57be3852295add011c7ec81e474f56b9f0b0f41352e87851cc57df4b3f6de9bd0e7a1149062e71795f64a6c327d56b57f05a3688bd48cd2164d6e93ef352179bfc9c9f1c8a15dd2e84760023fcada09024bc25d0b8fcefb8f2c098ac0471460a6bc50a04a0f748546eb8555e1ebc568eda560d05731ac7d00d5375f3dfa52ea4a1a34377c4dd85ccbb49db1768668b4b2379fbed1c401d60808573a9a8907be85872fa7cbd7f123e595981f4cbb0003e759ef039ba144b13203ddeca6317ab590b142afbe598d416ddbd6a8e1013d040494838431e274cc91f313f9e789b8b3c4decbbfc1d682e556c337d96c08d5277d276ffcb8ff2e82c42f367fcd68321cec51ee0a23c9b6a1ee9281651cd0bf471579caa0e347d4268fc503620abfe54a2889bf7dfeb4ca81f1d0199bc161888ffe25382be3911790589b472f768a84d166a9d5acb4aa8eda8488f85988e6726061bc81e441a263dfbcd2a2248bcdfe383ab41456d4f4cfe906ca98cdfba3c8fc1fadd310a1334159115af9184a521daaaeeee7fde2b2fc72ed41c224705e57048076e981ff6407129302621985364d924b3a4ee340ad19303e9f31b53ca28a171b2f15053d251e15c2c7b7b7ec87863b8e356176743c479cdb02257a3b3ef7c269b1c008b9956f976f6a035e76999950b05a86abd893a31995883440d0b6678de12fc6868ea315d4ffa6fc40f1dcb7cb44e1e342151f60a9e673e70750b62f956da9ceefa5f5d1b7e592ee1ea4bd8e57d21836d538194b7a0c44c050c872c7702cbc7248605afcc79ea2e2ad85c98c92d1447b4fdfd07fec63f7a3ac4d95c39594ad7d2da688b04d6b935315de7bf647ec4541a489ef7275a7a964969981399d3339f549755c79ecae74bf4cc4ca4fa9d3b0c26383984ad74f6bb72b9591178ca0424773d27f9502b04be5b169a1c806de4a78a2234d46ef6a0304a1e45f4f4fde1d974a731f98a86c482a01fc410330c36bdf5f14b1aa5501582d9993a1f063e0ff15c8b820a94862125163749e2941ec9de93c4691f22b4c0d1b89e4df4e5b885019687fea79ab21fcb2ced9e874fd1500d7826e8fc6fb7a87c6390bf1d09f2533f58ee369d092adc4508d48db7bc046a0497d3933473f93cc4bcf1fe1c182ec55ac68c7bce5dd7d204eb7da71269c4ee87c342ee340539ad67c4eb66ae109ca4131343f0e53441baa7771148fb2bff782b7a0f76d2a9edfed087fe69dc30bc1b6f634fc5e06024aab0b6f468ecb5226e2a7e3fe4fee7bbcc81080be4d5a4ddf1beca604ab28a372969b3da61a728e2675ff0c2e514a199bb8957e97ec0239c3602eba44872d03c20c27906fe2877a03f2646c3f42f89f72f51625b5c53d22ee968c8082560abbaffa7077fba15caf42d8fd088ba493869a3436d1b1cb92a9b8c62fd8904da4952dbe1690c022719985c7335a05991ab84a53a1ef6153ff801c2a1614b78c9599c3223fb2c0823d6ed486ba69bb3af6bb94d33e9bcc409de57206a9031298cab699971ab268b93271ed6301750c6ad67b65a1712f6e320f17cc057f0ad744c8300a87177e2b6e2635ebbd835653afa839b7f2a1c83744151059b6725d96c9251031ce0bad3d74e5a523f88c3e4e37d812470afbc3d20dfee81e993b184efb077d1eaf75964a4ad02b924a5bcc7684979c9b2632d8d379b0172b93a3a584eeaea5acfede63ea8e23fe8f0514b899c70cc4ad2692b111997fcab4093bd9b8b92fa7143241dae0056f00d3a10a1018dd2d5a2767160619033dfce19a4ccf7810b753d28fe5a07389d270e421685325d73d0e98325ffaf00f725fa72d11a6799e4186f07455ae207484c2fbfb892ad651d196e1e0cbd354c0e62e5dfa5f728a648358cdf636a329f5828a736b32ff9514c406b3b520ff91b714bac1f6cb815f7605f86818604b07e32f14289397ed8a9e4042b7c0c0236ffbfd5b79e13c76b0243255fe088fea93a3045bc0a323ab80de08b8dc7d8d2b9eff07c1fac06153fb3415453295b2c64508aa3dd08acd6a0b9f5ea2439afe2c013b44aa6cd38e9acad9c8b337129757588629a799e334ab12af8d8e92b57ec4f1bd99e5a5753a0116afc9477fa895d94fecfba6bd5bfd3a19a724ec6f24b300183a433e2cc0471ebb4170aff0b2a4cc108b916472e0a67b20b22a530c77fe7d8c85b395e112ebbcda42db0f1abfd2bfdd878976420b8940f9723dc47c169a1b636da77359887c1b70d11d81915268c784a16038f74af2db272dfb2d9d04c7f87ebc9f3b40a333d33d49a9f1c4da45e12213409a820550d12a7a2e504c1a07d19ef7634b4e3eb84f6a20380364f78390a5ad5ad1d2344af7a1a6dfc7393c945c2b3198766269a646444b94a25fe73ff5e4c170e5350c456dbec1bf7af6a3b52108441066435f95a4aed3cf59296b09198a37613057e029d23a731370a5d8dace9b6d96835e0c30db7437bfbf4cae62ac39e752bdee31b38838eec210527b7c67e73ec50a3ff8744c252124439bd4cb0d4af865e588889ccd9352de1bc6339b7835d092ccf826862b59cf67d741eaebe90ba084329af5cb8573e7177825bd70e4595d423d8f8de5420a191941f6cdf18a10d27e8b14639884e8ae3b34f8a75871dab2ae51d3341a6aebde71cdad72a54b72413d836ca8f669aa7a48423414c545f09462e7c793bbca7f7bf12ed4a1c8385623ca6f36c7598ea14bc729f430dad8519bcbb8cc21a6d56c350f9dcd7fefce41adbc0be1a5594b5b0852485770e6d1acf98c42ec009da4d3c4ba279366fecd0437683909eb3d1042ef168729f99e79158782eb119456d9f67cc9118935b37e719fc9572681b7c1b97ce09c3cd9c9f19b41b95d7e4f85becc5e33f4b60541c170817c95950d527fdb83c377ee8a00dc489f92c2b9171357a75c06052e6d8af40e6f783ca03cc198dad75e0a8cc0afed96a59629b7d4f6d2254d3e9720cb96c0d144f40f997cb7fee92f057876b9de09c454109b4b6b7253c6694e3bf79d6378fd6c17213279af3b2d06318e45abf021c125d71e965865d0bc8579630206d4a2cd7a1ab4f340e4a53cad307d356ebd3b95fd9723e7b2d2da6fcedd587c5cf85f89c1d4b2f3bf0cce0357529ca295685e7ad0e8fcbf1578968504fa1712ad5208e4ed941e483cd1b81f02150631ab389db47772a677b22aa7407af28b8ead8a34267059651f6c9c0880d644024e2d81eea00a162bc0dcc7fc1d4e2f40737ccfaec30c26ee69c3bd34707bd92aa86b364a0590e7bff52ab201539adcfcd2f7a38b03a9dffab2d2e95dcabadcbbddf93c2651a4f2d648e11835c09a969aa8ef6ce9c4f953746b6b6d3fc0e76d8102ad338dff965f33f80db8ed201d72915d31c719022a39a913d83915b69475147f8315a94990291f57b8a5090a84ed837921850bd24568721461ddd9b7c40daf2082fb2e001fa79a32d882eece45ff374b26e8ce0e0478bb878037cb78aaf3c60fd4ded3023813b7f70e19e8ac8524f01f47d0da9fb85455a5a57f2310dd572e3be7e342ad57d55ba1f40741341020e9b809e39ec18ee6b96dc140dbf30794f6cc5985ebdff2291596b641f83d807401722debd38c6c15f7d12a1812f47f9676b16a4e7c984f4f12fef76890f93a936c81a7284a717dd9e19b324af4f06a21f6e66170b9129694e18f19bcefca93cc55e19167bdb62b0c2957f0a2c1b2b126c37472d1082b7e46d1c3f11a298df4ec1396446ea40f6c3be4415a8d8460f385612b5e1e0fb894fcf2b0373fd061bca9a371fa772418c1ccc95c19417fd0588f6a44190f2ba1787f10570b340326f65b3e6ab743cc62f41f3106fad77c1dc3ce65e11930bd221eafc42709e40e24c6d6fb63735ddc3f29695631a64946fede137a9c0f79a20076d6faae0b763ba88a405935009ab0ccb80cd89c96a943fe649d66586535899c58a2ce6c409ba09ad0601143c4a91fadb4a52cd49384455f802d1696da8c66b47558c51d49c0ad17fe96a9141373336a3c6d974fd0bf87931e30d517ca34ecb1f41441a3c5e98b6fe2e5a0a470a597397c0ba45e2b123dc61e961a83738017b7dc56ccf61fecc01fd1f19a304411a414526ca09571359a95571f947edc8e7434f72c211ef35bd12f4de06858cee911a9889fafc599950a9b3e6887acae10d8c90b9805ba745f120a66f33859b102d41504ecea7bb44af4fa84776ddb9e354362b238174ecfd8078990651ba7a83232d76bb7c3ac501f9aa2a9db467e891ca76c6848b10ee6af43cbdc618c9c211b5bf768f8eb5c7be53dffb63960ec202e9ac064424fa12f756799ed9be88d4133338e15142a5ea41c145b9ea66ff62297bb47c17cac3afe8c20da84803c6e67b52c2f08cb0e7a9c6cd17a6f2cc2910766108b4f880f9b5721e3a7b407f8defb68f66ba8ad8212e4a1dc8304d9a20a2a5c85896291925a90134fbe3a1018486f470c73ddc427f71e32e14fa658b3048eb0b9f363655ba80e023ec538c3a14ba7170fe21ee8c76359e84c4b5144d6d9c9880bb84e7a2eb982896f9e67944a29045bd703c524f0065d3611d3313a67ab3ab92e425be6b0db95edd8f9e6981da24a4244bf9ea68961dc4448fb0ef18079b5a7ead7c45e77fadc3081474c4d5d40f5ad2569292194da50567f9c5b46a5a5ab4cbcc466794ff6807f0c245ae494183ffc919eefa5593a889b932b58538cf1cdfe65523dd93b3432a240db228a19d343fec6d4b117ae4284357b0eedff2c4bd819c592f6037919e0c8156bbac851d32bb822d898181496349b1058351a505e0474f55f0e6709d2ae953cbcf3262d76a33a0a3a3e9f6625dee572dfeb50b6e2c4d5fb81dca2d171b7bb5adfd65f7cc677b21ae650fab52c5785954d060ddb6b7083d8f406509c9d4ce5583f30f1e9477f60c177b3e2c849dbb04f7e347217cda92c13a35a922b1fe32d55f3d4cb7aabccdecd80af0c8c2201307330097b06ea30be874bdbcfb58ccdad7386eb774a4f52d75173677424018fd6cbcfbfd3ea0b61ce6631013edc09397260e68f939056a87f51c1b140f50431856980abb8c0325d735f43d6f6f419128025238073fb3533f0c5c119f1859b43dd54fab6790892fffb5b2f2d622684e1c80147706a9b4d5734012e9be15fe4ff2ec7cb952ba481f1c678871ad7b9441bac24fde42da7a19148030a6338c5bdfec2e0db53531c400e6e81cbb6eada54a20fb0075017bf2ea7e0f5045cdb2d7dde9935ba0ca8e0743c984d5a6e50960c4e3b2d59550edcd6d466ff71918863714f29786d18e30c139404fa2419464d586d2b7e899e4cba8704b59ff17782893942d46cfc4c87dff96c76c220e5faa48a343005abf3bab6be0130a09624a3231f6509f8c4cbb24113d75e8f9fed863da69aff75235409fcfe5748c23b560135394f4b459210e73ecb1fc6b1bdb8622c9ae20a7f4028c96b0a74a222edea5068c06d5b7b342510fdb0ed2ed89a2f81fc51cbd514a13803c9fe4025648450c23c86eb61546c8e1600369a13f867a7dbd7e063fb4312a03933e47e8355583c741241efbed78d41711f659ff69a30e3ae6d08603fae13556d36604ec54332e3552d5e8a2d1e9df68c5397386d83fb07c5e50e35f3f4f0825e7c1c2c5f60d57282f6caa76e836273b56ce14bc9c5fde8ab5b12168bd66b834659af5d9e4f28b37f7c1c4ddffb59da453f8f6d00377ca458f440f49db4435bb95e57bb876d132bab26fc0fd98d1bb9df263731da34a6e6b1406ff4cd4929c6b4f9b07498d64382a5c00966da6da9957bc7962a7aec2ccd71112866a54f1a6d8b92fb99dd5760ba34942ddb653a88cb2fa39bc90bee0ebdafdd267dd0e266ab6f5040883e92401e43938c388794d475220f3bccb65665b33ccb65f95c47e3f02e7ca8a5ebd5b9b8ace01975dd8bfedb707b9157cdd73c5f208d34c204e268014ca6536665c7b4326939b0d5b52a649c6e00365b99f460a509ea1f169b648ef891c9aacb399c1fdc67bae43cfdbf8a1c36e07dd2a4e68bbd2bc71266dc5c77801b56fe295ed42936ae6959d5075739beaf96580ddf69f6139dd42e2bfde75b618963d77062148457c1c6d2da3a57b0ec3c3d8aeff8d1db73b1b775373d22d21a86a5fa9e215bd63f5a328f896d3a521cc2c89dc56eccef99c00e2d24d553fbf65002dc4bba7c63af56ba53fcc3918ba24d84ff726c0e4d5b5ebec86dd1113e3381ddb4dc799202b1d0bf423066a5be18ec8337af17de7fc64bfa2e7badaae8de621066749ee1bc76e8761ab14eee68db2ee99c7f67a98e1be537c223e52da4b8467ae0338abbc18cb7e0fa904d490778fefd83724f0fe7362ecaf585fa566268565c505bc01e5522e190d5707af7f2a508c863bec3a133fbb4481eef80106fc3501b5f01380d12ffcf7db6c13e59adf8af80e6f4c38fc7d793a6c989831abc96f50fd52d41124d5b30ec6e4b3a8bedd7b520ac44f45d2c4a4cd00cc6cf2ada1f585869ea40ce446e7a7c5ed3ca9fa6877767f1b4642f34719a6c590b6fd8bd986672162c0497706f05ec4c0d102f2e4135ef6fdc833710bca397bef1b106fd4500953086df7f29e8825acea1eaeccb1d69b91f9f011088c3f240b41f79906c7312acf7c0755b5125964550f8d9574064a6084ae160bbbf2d8810dcbff0695bf46e1a8369c6c863c2b00303376e7de8d46be243fc2199796169de5ecb72a3e476d94f85c2048f1e3ac9aaf38d2acedb8477821906b225d181fe479a21c85ee81121b17e5f947d59e0dbddbdfc7b7efbd03ee1732cd8745c438d043fbba3966afa9ef2f74cbc77c23111548c7eb3e7a71aa72b6b6f21b1c757355ff2f9bfb9847fa16febd5d1143983f5210d0a76594710ffd63b0ec0dc8b70358ce32b30322fb1de659140988d55e2dae441505299976d3ece8ff595faab0e33340839e47b80b7b51d5fc1f1078ed2737661e94961f329729b753968baf2db9ff781fbd4ccf751b3545740eae74fd30681da2149dbad2f3ba062669d54e51123c36a265cd55d90677253f55dc46b05e7dc0da0518c0b99896d8cef680423b2718870e4489cb17ab210bebd8e244b4a20ac1ec56130ccd0fa00ee9da084555a34e816a128139d3da4ee06b7f86e9cc9f80908e910312a070abe20e5f922993f28a", 0x2000, &(0x7f0000003440)={&(0x7f00000004c0)={0x50, 0xfffffffffffffffe, 0x883, {0x7, 0x2b, 0x3, 0x200280, 0x1, 0x9, 0x0, 0x8001, 0x0, 0x0, 0x8, 0x7fff}}, &(0x7f0000000140)={0x18, 0x0, 0x3, {0x5}}, &(0x7f00000001c0)={0x18, 0x0, 0x6, {0x1}}, &(0x7f0000000280)={0x18, 0x0, 0x1}, &(0x7f0000000300)={0x18, 0x0, 0x4, {0xd}}, &(0x7f00000003c0)={0x28, 0x0, 0xed6e, {{0x5, 0xae66, 0x1, r0}}}, &(0x7f0000000540)={0x60, 0xfffffffffffffffe, 0x1, {{0x5, 0x4, 0x1, 0x6, 0x5, 0x3, 0x2, 0x2}}}, &(0x7f0000000440)={0x18, 0x0, 0x9, {0x2}}, &(0x7f00000006c0)=ANY=[@ANYBLOB="150000000000000004000000000000007b28282e00f48c9b8009eb33074bf7f1ebc94bd66a74ee735c1000b4e333f5339e6e6d6dfae412d5efb6e3a4ce6903dad541aa675bfabd3981"], &(0x7f0000000600)={0x20, 0x0, 0x7f, {0x0, 0x5}}, &(0x7f0000000840)={0x78, 0x0, 0x7ff, {0x0, 0x1ff, 0x0, {0x2, 0x6, 0x400000005, 0x8000, 0x3, 0xfff0, 0x800, 0x16, 0x101, 0x2000, 0x0, 0x0, 0x0, 0xf, 0x5}}}, &(0x7f0000000940)={0x90, 0x0, 0xfffffffffffff1f3, {0x2, 0x3, 0x40, 0x7, 0x879e, 0x401, {0x2, 0x1, 0x2, 0x1, 0x0, 0x3, 0x1fa9bd31, 0x8, 0x0, 0x8000, 0x44b1, 0x0, 0x0, 0x8b, 0x1}}}, &(0x7f0000000640)=ANY=[@ANYBLOB="50ff0000000000000900000000000000030000020000000000020000000000000100000005000000000000000000000050aa0f4bfbb628d8497b1fb343734413dc79797b03000000000000000010000000000000"], &(0x7f0000003040)={0x2a0, 0xffffffffffffffda, 0x3, [{{0x4, 0x3, 0x3, 0x0, 0x48000000, 0x8, {0x3, 0x5, 0x1ff, 0x10001, 0x81, 0x8, 0x3, 0xbe, 0x9, 0x4000, 0xb9e, 0x0, 0x0, 0xe, 0x7}}, {0x5, 0x9, 0x9, 0x5, '/dev/ppp\x00'}}, {{0x5, 0x3, 0xb, 0x7c1f, 0x0, 0x5, {0x2, 0x508e, 0x8, 0x2, 0x6, 0x71, 0x200, 0xe, 0x331, 0x1000, 0xffffffff, 0x0, 0x0, 0x5, 0x80000000}}, {0x0, 0x1, 0xc, 0x1, '#\\)!+!+([\xf0\xa1}'}}, {{0x4, 0x2, 0x5, 0x800, 0xa, 0x0, {0x5, 0x8, 0x8c, 0x3, 0x9, 0x3, 0x2, 0xf37, 0x3, 0x1000, 0x7, 0x0, r6, 0x0, 0x1}}, {0x6, 0x6, 0x0, 0x3ff}}, {{0x2, 0x3, 0x4, 0x7, 0x9, 0x4, {0x5, 0x6, 0x2, 0x9, 0x0, 0x7fffffffffffffff, 0xc, 0x9, 0x10, 0x2000, 0xc0000000, r7, r8, 0x82e, 0x2}}, {0x1, 0x40, 0x9, 0xd, '/dev/ppp\x00'}}]}, &(0x7f0000000d80)={0xa0, 0x0, 0x73, {{0x2, 0x2, 0x4, 0x7, 0x2, 0x3, {0x6, 0x100000001, 0xd, 0xffffffffffffffc0, 0x1, 0x0, 0xffffffe9, 0x28, 0x7, 0xc000, 0xfffffffd, r10, r11, 0x0, 0xd}}, {0x0, 0x9}}}, &(0x7f0000000e40)={0x20, 0x0, 0x5, {0xf01, 0x4, 0x20, 0xffffff7f}}, &(0x7f0000003300)={0x130, 0x0, 0x65c, {0x5, 0x1000, 0x0, '\x00', {0x10000, 0x96, 0xfffffffffffffff8, 0xfffffff2, r12, 0xffffffffffffffff, 0xa000, '\x00', 0xf0, 0x8, 0x1, 0x5, {0x3, 0x7}, {0x6, 0x1}, {0xe415, 0x3}, {0x9, 0xff}, 0x9, 0x8da, 0xd908, 0x488000}}}}) syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) 9.677530912s ago: executing program 1 (id=2331): ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r0, 0x40, &(0x7f0000000040)={0x3a, 0x7, 0x100}) newfstatat(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x4000) setresuid(r1, r1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0x4e20, 0xfffe, 0x0, 0x0, 0x2, 0x20, 0x0, 0x0, 0x0, r1}, {0xfffffffffffffffd, 0x80000001, 0x1000, 0x0, 0x3800, 0x0, 0x9, 0x1000000}, {0x0, 0x0, 0x2}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x4d5, 0x6c}, 0xa, @in6=@loopback, 0x4, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) mlockall(0x1) pipe2$9p(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0xffac89241a1d779) r4 = syz_pidfd_open(r0, 0x0) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000200), 0x20, &(0x7f00000003c0)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r4}, 0x2c, {[{@dfltuid={'dfltuid', 0x3d, r1}}, {@version_L}], [{@smackfsdef={'smackfsdef', 0x3d, '/dev/input/event#\x00'}}]}}) mlockall(0x7) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x1002, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201500285d5c2086004040031960154030109021b000100031003090458080119662194090586d7"], &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) syz_open_dev$evdev(&(0x7f0000000340), 0x3f, 0x0) r6 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000480)=ANY=[@ANYBLOB="120100000000000858041a50000000000001090224000100000000090400000103000300092100000001220700090581030000080000e88519fdf318203c606a3d0c71246f4872db1118ad2bcc2a5e67e0d155eb02881f863d92a96a615b53a4ef04989ef31b07986c44344875cb7ab4f3c917fd7f597354f031606d92fe80472f8d0c80584abdb175e5d6cdc9893673c5ad"], 0x0) syz_usb_control_io$hid(r6, 0x0, 0x0) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r7, &(0x7f00000001c0)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) write$bt_hci(r7, 0x0, 0x6) ioctl$FIONCLEX(r3, 0x5450) syz_usb_control_io(r6, &(0x7f0000000240)={0x2c, &(0x7f0000000000)={0x0, 0x10, 0x7, {0x7, 0x3, "5df7b4702a"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) close_range(r5, 0xffffffffffffffff, 0x0) 9.629649793s ago: executing program 4 (id=2332): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000140)=""/10, 0x101000, 0x1800, 0x1800, 0x2}, 0x20) r0 = epoll_create1(0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1, 0x0, 0x4}, 0x20) epoll_ctl$EPOLL_CTL_DEL(r0, 0x2, r1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000c80)='@\x81\\\x00', 0x0) pipe2$9p(&(0x7f0000000000), 0x84000) syz_open_procfs(0x0, 0x0) r3 = ioctl$USERFAULTFD_IOC_NEW(r2, 0xaa00) ioctl$UFFDIO_WRITEPROTECT(r3, 0xc018aa06, &(0x7f0000000080)={{&(0x7f00001d4000/0x4000)=nil, 0x4000}, 0x2}) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r4 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r4, 0xae60) io_submit(0x0, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000540)="a1", 0x1}]) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) userfaultfd(0x801) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, 0xffffffffffffffff, 0x0) r6 = dup(r5) ioctl$KVM_SET_VAPIC_ADDR(r6, 0x4008ae93, &(0x7f00000002c0)=0x10000) 7.960615396s ago: executing program 0 (id=2333): r0 = socket$inet(0x2, 0x800, 0x4) prctl$PR_GET_IO_FLUSHER(0x3a) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r5, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) r6 = fcntl$dupfd(r5, 0x0, r5) sendmsg$IPVS_CMD_GET_CONFIG(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x4000) close(r4) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmmsg$inet(r7, &(0x7f0000002240), 0x3, 0x80d0) keyctl$session_to_parent(0x12) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) r8 = syz_open_procfs(0x0, &(0x7f00000001c0)='pagemap\x00') pread64(r8, &(0x7f0000001240)=""/102400, 0x19000, 0x1000000000) r9 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000480), 0x0, 0x0) sendmmsg$inet6(r5, &(0x7f0000000280), 0x0, 0x4004000) r10 = dup(r9) ioctl$KVM_HAS_DEVICE_ATTR(r10, 0x4018aee3, &(0x7f00000001c0)=@attr_arm64={0x0, 0x0, 0x0, 0x0}) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/163, 0xa3}, {&(0x7f0000000140)=""/113, 0x71}], 0x2) setsockopt$inet6_opts(r2, 0x29, 0x37, &(0x7f0000000100)=ANY=[@ANYBLOB="8403000000000000000100c910fc010000000000000000000000000000000000000008b357c90000"], 0x28) 7.956327025s ago: executing program 1 (id=2334): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="2faea58f", 0x4, 0x8000, 0x0, 0x0) sendto(r0, &(0x7f0000000400)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38", 0x6b, 0x4008044, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000240)}], 0x1) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000080)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 7.956147745s ago: executing program 4 (id=2335): r0 = inotify_init() inotify_add_watch(r0, 0x0, 0x8) 6.133181941s ago: executing program 0 (id=2336): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x1002, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, 0x0, &(0x7f0000000200)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000003, 0x8010, r0, 0x0) 6.132816941s ago: executing program 1 (id=2337): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2002, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_SREGS(r2, 0x4138ae84, &(0x7f00000001c0)={{0x2000, 0xeeee0000, 0x8, 0x9, 0xfb, 0xe4, 0x40, 0x7, 0x0, 0x2e, 0x19}, {0x5000, 0xeeee6001, 0x3, 0x0, 0x40, 0x5, 0x7d, 0x6, 0x5, 0x3, 0x3, 0x3}, {0xeeef0000, 0x5000, 0xe, 0x5, 0x3, 0x7, 0x0, 0x9, 0x1, 0xa7, 0x5, 0x81}, {0xd000, 0x8080000, 0x9, 0x3, 0x4, 0x42, 0xb, 0xff, 0xa, 0x7, 0xe}, {0xeeee0000, 0xd000, 0xb, 0x3, 0x15, 0x7, 0xab, 0x7f, 0x7, 0x83, 0xf7, 0x83}, {0x1000, 0x0, 0xc, 0xa0, 0xb1, 0x8, 0x1, 0xa0, 0x80, 0xf, 0x1, 0x7}, {0x3000, 0x8000000, 0x4, 0x5, 0x7, 0x5, 0x7, 0x3, 0x5, 0x81, 0xff, 0x70}, {0x100000, 0x1000, 0xe, 0x5, 0xf, 0x7, 0x1, 0x34, 0x2, 0xb, 0xb0, 0x9}, {0xeeef0000, 0x30}, {0x6000, 0x7}, 0xa0000021, 0x0, 0x8000000, 0x2024, 0x3, 0xec00, 0x3000, [0x6800000000000000, 0x4, 0x5e, 0xff]}) r3 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) close(r3) ioctl$KVM_X86_GET_MCE_CAP_SUPPORTED(r3, 0x8008ae9d, &(0x7f0000000000)) r4 = socket(0x11, 0x3, 0x1000) ioctl$sock_inet_SIOCADDRT(r4, 0x890b, &(0x7f0000000100)={0x0, {0x2, 0x1, @dev}, {0x2, 0x0, @local}, {0x2, 0x4e20, @broadcast}, 0x8, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x3}) memfd_secret(0x80000) 6.132394301s ago: executing program 4 (id=2338): openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) unshare(0x62040200) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r0, &(0x7f0000001600)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="db9063a5f12b400000a3529de2db", 0xe}, {&(0x7f00000005c0)="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", 0x140}, {&(0x7f0000000900)="9da07a90f186a8ad8f46da2254f734b8eaab5830cb0bb5ffff3cea9cd8761052658095f529ba0600000000000000c109c00951ad9baaf86d0866d2d4019eb6eb35c558c75226ce5fcf486087161fc12d8ee871b97abcf8fae7849b473db4bd489136f4d19b59e99e357d2eaf4bffc41dfad4ff4818b06b09a9f02880e37da877bcbd61132a014ed7be7549ff0cb53c650ba5f9034696f277d5684d5155704bbfca3855a32104b382d9433bcab9e6c1563468213176151cdbbf8822861f24adb9620492557704b8317f548d0220d24e38db883e05ce839612b93d28248b5c20fb3757f570f30d6278aa7db3e9441a5fc47d0f4f23bb2352d633ed894a90c644652d867356a9b9926155be70ad9ae1408ce52ea2c331792026a2dfe79d5fa348f3cbd38fc1bca817b246e577920065310bb9bf28aebfbc139634755e59a064c8c5543fc99468737100dd55c2ff", 0x14c}, {&(0x7f0000000380)="f2003c9f4470d75916", 0x9}, {&(0x7f0000000740)="6b9e35b0dc1cbe029c907ce2f9982f19e8f8a6b1a13bd80ae6915a324910b1cdabf00cbe1da78bc5f541d813224909db55c615b88c668dfc8b1bc1d814520a5441f5b97ab3d2bd001732385892ebf60e3189d7a91e1a1e2232f5f725e1bc1bd694414e718b1ae37e98a389dfd2cce354c8b5da37dda52307ed1351df4853f6f582767ac83352463f8965a93da6310e365623c91c", 0x94}], 0x5}, 0x4091) mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000140)) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) openat$rnullb(0xffffffffffffff9c, 0x0, 0x165342, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r2, 0x4010ae67, &(0x7f0000000640)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) add_key$user(0x0, &(0x7f00000000c0)={'syz', 0x0}, &(0x7f0000000100)="9d", 0x1, 0xffffffffffffffff) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.14981357s ago: executing program 0 (id=2339): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000012300)=ANY=[@ANYBLOB="3400000013000100000100dffddbdf25070000f61600000008000000", @ANYRES32, @ANYBLOB="14000c80"], 0x34}], 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000180)='./file2\x00', 0x6000, 0x0) lstat(&(0x7f0000000080)='./file2\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}) setresuid(r2, 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) 4.14936742s ago: executing program 1 (id=2340): r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f00000001c0)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="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"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000180)) r2 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) r3 = dup(r2) connect$inet6(r3, &(0x7f0000008900)={0x27, 0x4c21, 0x1, @local, 0x7}, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/crypto\x00', 0x0, 0x0) mount(&(0x7f0000000300), &(0x7f0000000080)='.\x00', &(0x7f0000000040)='binder\x00', 0x2200892, 0x0) r5 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) r6 = syz_pidfd_open(r5, 0x0) wait4(0x0, 0x0, 0x80000000, 0x0) pidfd_getfd(r6, 0xffffffffffffffff, 0x0) pread64(0xffffffffffffffff, 0x0, 0x0, 0x4eb) syz_kvm_setup_cpu$x86(r4, r4, &(0x7f000099a000/0x18000)=nil, &(0x7f0000000100)=[@text16={0x10, &(0x7f00000000c0)="0fc79c77552683c63566b98c0a00000f32ba2100ec660f388142063636f30f01280f2099b83c010f00d067dbe20f05", 0x2f}], 0x1, 0xc, &(0x7f0000000140)=[@dstype0={0x6, 0x8}], 0x1) r7 = syz_usb_connect$hid(0x0, 0x36, &(0x7f00000016c0)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001509000000092140000001220f00090581d7"], 0x0) syz_usb_control_io(r7, &(0x7f0000000340)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000000)={0x20, 0x29, 0xf, {0xf, 0x29, 0xe, 0x4, 0xc, 0x5, "c5320120", "f8091004"}}, 0x0}, 0x0) close(0xffffffffffffffff) close_range(r3, r6, 0x0) io_setup(0x197, &(0x7f0000000440)) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0xffffffffffffff20) listen(r8, 0x0) r9 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r9, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r8, 0x0, 0x0, 0x0) 4.14903315s ago: executing program 4 (id=2341): mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x604, &(0x7f00000002c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) 2.143544098s ago: executing program 0 (id=2342): r0 = getpid() prlimit64(r0, 0x6, &(0x7f0000000000)={0xff, 0x3}, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x80, 0x0) r3 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_SET_MSRS(r3, 0xc008ae88, &(0x7f00000005c0)=ANY=[@ANYBLOB="0100000000000000014d564b"]) r4 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) r6 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000100)='tzV\xa95est_dummy_\xa5n', &(0x7f0000000240)='v2\xeaul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = geteuid() getgroups(0x7, &(0x7f00000002c0)=[0xee01, 0xee00, 0xffffffffffffffff, 0xee01, 0xee00, 0xffffffffffffffff, 0xee00]) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) lstat(&(0x7f0000000380)='./file0\x00', &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000180)=@abs={0x0, 0x0, 0x4e20}, 0x6e, &(0x7f0000000240)=[{&(0x7f0000000200)="1bcd0ec422b8d68bf2d15258f59f12c4d6", 0x11}], 0x1, &(0x7f0000000600)=[@cred={{0x1c, 0x1, 0x2, {r0}}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r4, r6, r7, r3]}}, @cred={{0x1c, 0x1, 0x2, {r0, r8, r9}}}, @cred={{0x1c, 0x1, 0x2, {r0, r10, r11}}}, @rights={{0x20, 0x1, 0x1, [r2, r2, r3, r5]}}], 0xb0}, 0x4000081) ioctl$KVM_GET_IRQCHIP(r4, 0xc208ae62, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) r13 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r14 = ioctl$KVM_CREATE_VM(r13, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r14, 0x4020ae46, 0x0) r15 = ioctl$KVM_CREATE_VCPU(r14, 0xae41, 0x10) ioctl$KVM_PRE_FAULT_MEMORY(r15, 0xc040aed5, &(0x7f0000000000)={0x80a0000}) r16 = socket(0x9, 0x2, 0x3) ioctl$SIOCGETSGCNT(r16, 0x89e1, &(0x7f00000000c0)={@loopback, @local}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f00000004c0)={'syztnl0\x00', 0x0, 0x4, 0xff, 0x1, 0x12b, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @private=0xa010100}, 0x8000, 0x40, 0x2, 0x3}}) sendfile(r12, 0xffffffffffffffff, &(0x7f0000000040)=0x8a83, 0x10) r17 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x10) ioctl$KVM_CREATE_DEVICE(r17, 0xc00caee0, &(0x7f0000000100)={0x4, 0xffffffffffffffff, 0x1}) 2.143115809s ago: executing program 1 (id=2343): setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000140)=""/10, 0x101000, 0x1800, 0x1800, 0x2}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) pipe2$9p(&(0x7f0000000000), 0x84000) r1 = syz_open_procfs(0x0, 0x0) mount$9p_fd(0x0, 0x0, 0x0, 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) io_submit(0x0, 0x1, &(0x7f0000001440)=[&(0x7f0000000200)={0x1000000, 0x0, 0x700000000000000, 0x0, 0x0, 0xffffffffffffffff, &(0x7f0000000540)="a1", 0x1}]) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000080)=0x200, 0x4) userfaultfd(0x801) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28012, r4, 0x0) r5 = dup(r3) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000002c0)=0x10000) 2.142765439s ago: executing program 4 (id=2344): r0 = getpid() r1 = syz_pidfd_open(r0, 0x0) setns(r1, 0x24020000) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000040)) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) ioctl$UFFDIO_ZEROPAGE(r2, 0xc020aa04, &(0x7f00000001c0)={{&(0x7f0000ffc000/0x1000)=nil, 0x1000}}) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000500)={0x2, 0x3, 0x0, 0x0, 0x4, 0x0, 0x0, 0x20000, [@sadb_sa={0x2, 0x1, 0x0, 0xfd, 0x0, 0x8, 0x4, 0x4bfffffe}]}, 0x20}}, 0x0) r4 = socket(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r4, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x74, 0x3, 0x8, 0xe06, 0x0, 0x0, {0x0, 0x0, 0x4}, [@CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_SCTP_SHUTDOWN_RECD={0x8, 0x6, 0x1, 0x0, 0x1c2}, @CTA_TIMEOUT_SCTP_HEARTBEAT_SENT={0x8, 0x8, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_SCTP_CLOSED={0x8, 0x1, 0x1, 0x0, 0x7}]}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x88a2}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x11}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}]}, 0x74}}, 0x20040010) sendmsg$nl_generic(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)={0x14, 0x2a, 0xa01, 0xfffffffc, 0x0, {0x1e}}, 0x14}}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x4}, 0x0) read(0xffffffffffffffff, 0x0, 0x0) munmap(&(0x7f00004cf000/0x4000)=nil, 0x4000) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$PPPIOCDISCONN(0xffffffffffffffff, 0x7439) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000580)={0x1fd, 0x0, 0x0, 0x1000, &(0x7f00004d2000/0x1000)=nil}) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000080000024d564b000000eccd"]) ioctl$KVM_SET_LAPIC(r7, 0x4400ae8f, &(0x7f0000000100)={"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"}) ioctl$KVM_RUN(r7, 0xae80, 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x3, 0x0, 0x0) socket(0x10, 0x3, 0x0) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNINFO(r8, 0x800448d3, 0x0) 3.64783ms ago: executing program 0 (id=2345): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, 0x0, 0x0) bind$inet(r0, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, 0x0, 0x0) connect$inet(r0, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) sendto$inet(r0, &(0x7f00000001c0)="2faea58f", 0x4, 0x8000, 0x0, 0x0) sendto(r0, &(0x7f0000000400)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3bf52a6b2cdb77ef9af2a603a3e78adff59fbb22bae1b2443011fd801251bcef8f165533aac58c7556dd51edc5a6865d4e29f0bbd0ed602050000000000002944de604d849a1e3b32905b0d26e9ff34b83f38", 0x6b, 0x4008044, 0x0, 0x0) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) writev(0xffffffffffffffff, &(0x7f00000003c0)=[{&(0x7f0000000240)="390000001300034700ab65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) writev(0xffffffffffffffff, &(0x7f00000001c0)=[{&(0x7f0000000400)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) writev(r2, &(0x7f00000003c0)=[{&(0x7f0000000080)="200000001300034700bb65e1c3e4ffff01000000010000005600000025000000", 0x20}], 0x1) sendto$inet(r0, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 515.69µs ago: executing program 1 (id=2346): socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x8000, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000fd7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, 0x0}], 0x1, 0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0}}, 0x40859) ioctl$KVM_SET_NESTED_STATE(r5, 0x4080aebf, &(0x7f0000003680)={{0x0, 0x0, 0x80, {0x10000, 0x6000}}, "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", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text16={0x10, &(0x7f0000000180)="660f388084000072baf80c66b860b4498c66efbafc0c66b80e00000066ef64f30fc7b000100f850100f30fc7b1030066b9800000c00f326635000400000f30d2bc0a000f23c80f21f86635040040000f23f8b8f4008ee0", 0x57}], 0x1, 0x48, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000100)={0x50, 0x0, 0x0, {0x7, 0x1f, 0x0, 0x8000}}, 0x50) mount(0x0, 0x0, 0x0, 0x1200051, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x1) ioctl$KVM_GET_MSRS_cpu(r6, 0xc008ae88, &(0x7f0000000000)={0x1, 0x0, [{0x4000009a, 0x0, 0x6}]}) fcntl$lock(r0, 0x6, 0x0) 0s ago: executing program 4 (id=2347): syz_io_uring_setup(0x111, &(0x7f0000000340)={0x0, 0x0, 0x2, 0x4}, 0x0, 0x0) pselect6(0x40, &(0x7f0000000000)={0x5, 0x231c, 0x7, 0x8, 0x80000001, 0x9, 0x100000001, 0x2}, &(0x7f0000000040)={0x8, 0x763b, 0x1, 0x1, 0x7, 0x9, 0x1b5, 0x4}, &(0x7f0000000080)={0x3, 0x6, 0x81, 0x2, 0x47, 0x2, 0x3, 0xffffffff}, &(0x7f00000000c0), &(0x7f0000000140)={&(0x7f0000000100)={[0x3]}, 0x8}) pipe(&(0x7f0000000180)={0xffffffffffffffff}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000400)='./binderfs/binder1\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, &(0x7f0000000140)={0x73622a85, 0x1381, 0x3}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) write(r3, &(0x7f0000000240)="94", 0x1) r8 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000100)='sessionid\x00') read$FUSE(r8, 0x0, 0x0) close(r6) tee(r2, r7, 0x8f5, 0x0) write$binfmt_script(r7, 0x0, 0xd9) write$binfmt_script(r6, &(0x7f0000000580)={'#! ', './file0', [{0x20, 'test_dummy_encryption'}, {}, {0x20, '\x00'}, {0x20, './binderfs/binder1\x00'}, {0x20, 'ext3\x00'}, {}, {0x20, ':\v'}, {0x20, '$'}, {0x20, '+'}], 0xa, "763c80c4cc676b36146fbfe6e39a3a2aecba0e17b3c570bebf54aa74d0dbe847bdaf7369813ec4e56397bbc73d155a34d977ce9b2486adb5521b60d5afe1390e93014171a2a9e08373e96e76552f28aed0868af10423be88da11bae45cb45e35412f5406bda09a6f6995a7de4a4b09fd1671d3fc62602d55854a36d454c3f67e8acb87be6994edc287674d6e8609c9ad284f9ae9d0d0482fc2acad03b0c733b6842ff91324a229dcb6e45b8670cec1257242ef5c517f520d36"}, 0xff) write(r4, 0x0, 0x0) r9 = fsopen(&(0x7f0000000080)='ext3\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x1, &(0x7f0000000100)='test_dummy_encryption', &(0x7f0000000240)='v2\xeaul\x00\x00\x00\x00\x00loc\x8d\x8b#\xe0\xb9\xbd\"\xeb.\xc7]\xa67\x97 \xc9\xfc|\x85o7Z\xdc}U\x8c\xdd\n\xaa?4\xafq\x1d\xf6(\xe6\x9em_\x1a\xbfDi\x15\x81\xd47\x8e\x86\xa2u~FC\x9c\xe3\x98\x87\x98\xf7\xa2\xb5\x12\x8cv\xe4_\x91\xa8G!mm\f\xcf\xfb[\xd5Qf\x15\xfe\xc80\xad\xaa\xe9', 0x0) mmap$binder(&(0x7f00000a0000)=nil, 0x2000, 0x1, 0x11, r1, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000100)={0x4c, 0x0, &(0x7f0000000500)=[@transaction_sg={0x40486311, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x68, 0x18, &(0x7f0000000440)={@ptr={0x70742a85, 0x0, 0x0, 0x0, 0x2, 0x4}, @fda={0x66646185, 0x1, 0x0, 0xe}, @fda={0x66646185, 0x6, 0x0, 0x24}}, &(0x7f00000001c0)={0x0, 0x28, 0x48}}, 0x1000}], 0x0, 0x0, 0x0}) statx(r0, &(0x7f00000001c0)='./file0\x00', 0x400, 0x7ff, &(0x7f0000000200)) kernel console output (not intermixed with test programs): cess permissive=1 [ 14.351908][ T36] audit: type=1400 audit(1757006187.580:63): avc: denied { siginh } for pid=231 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.61' (ED25519) to the list of known hosts. [ 21.883413][ T36] audit: type=1400 audit(1757006195.120:64): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2022 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 21.884853][ T281] cgroup: Unknown subsys name 'net' [ 21.906134][ T36] audit: type=1400 audit(1757006195.120:65): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.933412][ T36] audit: type=1400 audit(1757006195.150:66): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 21.933661][ T281] cgroup: Unknown subsys name 'devices' [ 22.113648][ T281] cgroup: Unknown subsys name 'hugetlb' [ 22.119268][ T281] cgroup: Unknown subsys name 'rlimit' [ 22.295235][ T36] audit: type=1400 audit(1757006195.530:67): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.318445][ T36] audit: type=1400 audit(1757006195.530:68): avc: denied { mounton } for pid=281 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 22.343325][ T36] audit: type=1400 audit(1757006195.530:69): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 22.348821][ T283] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.375251][ T36] audit: type=1400 audit(1757006195.610:70): avc: denied { relabelto } for pid=283 comm="mkswap" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.397257][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 22.400776][ T36] audit: type=1400 audit(1757006195.610:71): avc: denied { write } for pid=283 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.434961][ T36] audit: type=1400 audit(1757006195.630:72): avc: denied { read } for pid=281 comm="syz-executor" name="swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 22.460515][ T36] audit: type=1400 audit(1757006195.630:73): avc: denied { open } for pid=281 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2025 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 23.678334][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.685607][ T291] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.692747][ T291] bridge_slave_0: entered allmulticast mode [ 23.699012][ T291] bridge_slave_0: entered promiscuous mode [ 23.705629][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.712700][ T291] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.719761][ T291] bridge_slave_1: entered allmulticast mode [ 23.726152][ T291] bridge_slave_1: entered promiscuous mode [ 23.788976][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.796076][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.803222][ T288] bridge_slave_0: entered allmulticast mode [ 23.809491][ T288] bridge_slave_0: entered promiscuous mode [ 23.819426][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.826513][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.833608][ T289] bridge_slave_0: entered allmulticast mode [ 23.839810][ T289] bridge_slave_0: entered promiscuous mode [ 23.846065][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.853137][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.860196][ T288] bridge_slave_1: entered allmulticast mode [ 23.866577][ T288] bridge_slave_1: entered promiscuous mode [ 23.875992][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.883156][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.890235][ T290] bridge_slave_0: entered allmulticast mode [ 23.896543][ T290] bridge_slave_0: entered promiscuous mode [ 23.902678][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.909726][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.916844][ T289] bridge_slave_1: entered allmulticast mode [ 23.923114][ T289] bridge_slave_1: entered promiscuous mode [ 23.935428][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.942495][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.949567][ T290] bridge_slave_1: entered allmulticast mode [ 23.955897][ T290] bridge_slave_1: entered promiscuous mode [ 24.118423][ T291] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.125605][ T291] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.132930][ T291] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.139966][ T291] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.159353][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.166437][ T290] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.173746][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.180775][ T290] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.195097][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.202176][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.209448][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.216494][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.234368][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.241445][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.248712][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.255767][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.282478][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.289771][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.297225][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.305001][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.312376][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.319569][ T46] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.326905][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.334232][ T46] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.352279][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.359345][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.367028][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.374092][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.404041][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.411114][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.418867][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.425947][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.438954][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.446049][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.453875][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.460905][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.487759][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.494848][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.525065][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.532157][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.549223][ T291] veth0_vlan: entered promiscuous mode [ 24.555109][ T288] veth0_vlan: entered promiscuous mode [ 24.575990][ T290] veth0_vlan: entered promiscuous mode [ 24.584411][ T289] veth0_vlan: entered promiscuous mode [ 24.599148][ T289] veth1_macvtap: entered promiscuous mode [ 24.613697][ T291] veth1_macvtap: entered promiscuous mode [ 24.620309][ T288] veth1_macvtap: entered promiscuous mode [ 24.633725][ T290] veth1_macvtap: entered promiscuous mode [ 24.689415][ T291] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 24.745292][ T336] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 24.822398][ T348] x_tables: duplicate entry at hook 2 [ 24.838048][ T348] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 24.951071][ T352] rust_binder: Write failure EFAULT in pid:6 [ 25.074804][ T362] rust_binder: Error while translating object. [ 25.080905][ T362] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.087441][ T362] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:10 [ 25.098500][ T362] rust_binder: BINDER_SET_CONTEXT_MGR already set [ 25.303174][ T384] rust_binder: Error while translating object. [ 25.309691][ T384] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 25.316109][ T384] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:21 [ 25.391328][ T65] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 25.484008][ T392] netlink: 680 bytes leftover after parsing attributes in process `syz.1.19'. [ 25.551310][ T65] usb 3-1: Using ep0 maxpacket: 32 [ 25.559383][ T65] usb 3-1: unable to get BOS descriptor or descriptor too short [ 25.567848][ T65] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 25.579673][ T65] usb 3-1: New USB device found, idVendor=17ef, idProduct=7000, bcdDevice=a1.ec [ 25.588956][ T65] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 25.590248][ T398] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 25.597184][ T65] usb 3-1: Product: syz [ 25.610864][ T65] usb 3-1: Manufacturer: syz [ 25.615538][ T65] usb 3-1: SerialNumber: syz [ 25.621213][ T65] usb 3-1: config 0 descriptor?? [ 25.750979][ T409] kvm: vcpu 2: requested 128 ns lapic timer period limited to 200000 ns [ 25.761412][ T415] kernel profiling enabled (shift: 5) [ 25.762089][ T409] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=1812281087 (231971979136 ns) > initial count (200000 ns). Using initial count to start timer. [ 26.107168][ T370] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 26.127749][ T370] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 26.143024][ T370] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:16 [ 26.143623][ T330] usb 3-1: USB disconnect, device number 2 [ 26.170155][ T427] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28'. [ 26.180590][ T427] bridge0: port 3(erspan0) entered blocking state [ 26.187567][ T427] bridge0: port 3(erspan0) entered disabled state [ 26.194851][ T427] erspan0: entered allmulticast mode [ 26.200809][ T427] erspan0: entered promiscuous mode [ 26.206949][ T427] bridge0: port 3(erspan0) entered blocking state [ 26.213470][ T427] bridge0: port 3(erspan0) entered forwarding state [ 26.329527][ T429] tipc: Started in network mode [ 26.334604][ T429] tipc: Node identity 56fba1a01ac2, cluster identity 4711 [ 26.342445][ T429] tipc: Enabled bearer , priority 0 [ 26.350112][ T428] tipc: Resetting bearer [ 26.364539][ T428] tipc: Disabling bearer [ 26.488560][ T432] kvm: emulating exchange as write [ 26.697082][ T447] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 26.757551][ T458] tipc: Enabling of bearer rejected, failed to enable media [ 26.791017][ T460] rust_binder: Write failure EFAULT in pid:18 [ 26.901925][ T36] kauditd_printk_skb: 93 callbacks suppressed [ 26.901943][ T36] audit: type=1400 audit(1757006200.140:167): avc: denied { create } for pid=465 comm="syz.3.42" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 26.961165][ T36] audit: type=1400 audit(1757006200.140:168): avc: denied { unlink } for pid=465 comm="syz.3.42" name="#1" dev="tmpfs" ino=57 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 27.021063][ T36] audit: type=1400 audit(1757006200.140:169): avc: denied { mount } for pid=465 comm="syz.3.42" name="/" dev="overlay" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 27.046277][ T36] audit: type=1400 audit(1757006200.230:170): avc: denied { create } for pid=477 comm="syz.1.46" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 27.113759][ T36] audit: type=1400 audit(1757006200.350:171): avc: denied { create } for pid=494 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.117284][ T497] netlink: 'syz.3.51': attribute type 2 has an invalid length. [ 27.161365][ T36] audit: type=1400 audit(1757006200.350:172): avc: denied { listen } for pid=494 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.183204][ T504] rust_binder: Error while translating object. [ 27.183254][ T504] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.189479][ T504] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:63 [ 27.190306][ T497] 9pnet_fd: Insufficient options for proto=fd [ 27.214311][ T36] audit: type=1400 audit(1757006200.350:173): avc: denied { bind } for pid=494 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.247663][ T510] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 27.267518][ T36] audit: type=1400 audit(1757006200.350:174): avc: denied { read write } for pid=495 comm="syz.3.51" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 27.296774][ T515] rust_binder: inc_ref_done called when no active inc_refs [ 27.296879][ T515] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:33 [ 27.304800][ T36] audit: type=1400 audit(1757006200.350:175): avc: denied { open } for pid=495 comm="syz.3.51" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 27.338989][ T517] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 27.339026][ T517] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:55 [ 27.358613][ T518] rust_binder: 35: no such ref 4294967292 [ 27.373582][ T36] audit: type=1400 audit(1757006200.370:176): avc: denied { connect } for pid=494 comm="syz.0.50" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.391311][ T518] rust_binder: BC_CLEAR_DEATH_NOTIFICATION invalid ref 1 [ 27.402887][ T522] fuse: Unknown parameter 'roo' [ 27.411838][ T518] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:35 [ 27.586908][ T534] netlink: 'syz.1.63': attribute type 4 has an invalid length. [ 27.605536][ T534] netlink: 'syz.1.63': attribute type 4 has an invalid length. [ 27.627148][ T536] EXT4-fs (rnullb0): VFS: Can't find ext4 filesystem [ 27.647007][ T538] binder: Bad value for 'stats' [ 27.679327][ T542] rust_binder: Failed copying remainder into alloc: EFAULT [ 27.679345][ T542] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 27.686763][ T542] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 27.695087][ T542] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:77 [ 28.022075][ T551] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOMEM } [ 28.031204][ T551] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOMEM } my_pid:86 [ 28.053475][ T557] rust_binder: Error while translating object. [ 28.062856][ T557] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.069135][ T557] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:89 [ 28.167372][ T561] rust_binder: Error while translating object. [ 28.176551][ T561] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 28.182786][ T561] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:93 [ 28.648305][ T600] tipc: Started in network mode [ 28.662412][ T600] tipc: Node identity 7628512ff012, cluster identity 4711 [ 28.669728][ T600] tipc: Enabled bearer , priority 0 [ 28.677774][ T599] tipc: Disabling bearer [ 28.720450][ T602] binder: Unknown parameter 'j nöàm3õc:¼!¯ö²ºiÚ^_/óÿ^Dúžé˜V5‡ïïv;bî4“U+pÃÄå_í³"Ùm²éFß²? í¦Äné4ÍtÀ¶•gMc„zXõój‚äÞÏû‘Gâw ÝòZ)ÑÁx×Uô™EÃ¥öÀžÔPþXåÊwš Vh6 &ß½Çkgy [ 28.720450][ T602] ÏÁÍ©0þÌÈD†žÓy"¦' [ 28.758000][ T604] netlink: 'syz.3.88': attribute type 4 has an invalid length. [ 28.766703][ T604] netlink: 'syz.3.88': attribute type 4 has an invalid length. [ 28.838871][ T617] rust_binder: Write failure EFAULT in pid:85 [ 28.898340][ T630] tipc: Started in network mode [ 28.909448][ T630] tipc: Node identity 4e39a5cec4f5, cluster identity 4711 [ 28.916787][ T630] tipc: Enabled bearer , priority 0 [ 28.934463][ T629] tipc: Disabling bearer [ 28.976633][ T640] ======================================================= [ 28.976633][ T640] WARNING: The mand mount option has been deprecated and [ 28.976633][ T640] and is ignored by this kernel. Remove the mand [ 28.976633][ T640] option from the mount to silence this warning. [ 28.976633][ T640] ======================================================= [ 28.995307][ T643] /dev/sg0: Can't lookup blockdev [ 29.016779][ T640] binder: Unknown parameter 'dont_hash' [ 29.020694][ T643] netlink: 'syz.2.100': attribute type 4 has an invalid length. [ 29.109894][ T329] bridge_slave_1: left allmulticast mode [ 29.126349][ T329] bridge_slave_1: left promiscuous mode [ 29.141379][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.153750][ T329] bridge_slave_0: left allmulticast mode [ 29.159434][ T329] bridge_slave_0: left promiscuous mode [ 29.165300][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.251327][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 29.307722][ T329] tipc: Left network mode [ 29.322634][ T329] veth1_macvtap: left promiscuous mode [ 29.333252][ T329] veth0_vlan: left promiscuous mode [ 29.361036][ T660] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 29.361068][ T660] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:67 [ 29.417304][ T655] tipc: Started in network mode [ 29.431453][ T655] tipc: Node identity 9256462ed37b, cluster identity 4711 [ 29.438609][ T655] tipc: Enabled bearer , priority 0 [ 29.457127][ T654] tipc: Disabling bearer [ 29.496696][ T658] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.503918][ T658] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.510999][ T658] bridge_slave_0: entered allmulticast mode [ 29.517421][ T658] bridge_slave_0: entered promiscuous mode [ 29.524635][ T658] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.531805][ T658] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.541311][ T658] bridge_slave_1: entered allmulticast mode [ 29.548573][ T658] bridge_slave_1: entered promiscuous mode [ 29.690872][ T46] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.691656][ T691] netlink: 28 bytes leftover after parsing attributes in process `syz.0.115'. [ 29.697997][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.739310][ T46] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.746435][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.760910][ T658] veth0_vlan: entered promiscuous mode [ 29.778926][ T658] veth1_macvtap: entered promiscuous mode [ 29.832048][ T701] binder: Bad value for 'stats' [ 29.884881][ T704] tipc: Enabled bearer , priority 0 [ 29.903241][ T702] tipc: Disabling bearer [ 30.015185][ T708] netlink: 'syz.4.121': attribute type 4 has an invalid length. [ 30.032683][ T708] netlink: 'syz.4.121': attribute type 4 has an invalid length. [ 30.062728][ T719] rust_binder: Failed copying into alloc: EFAULT [ 30.062753][ T719] rust_binder: Failure in apply_sg: BR_FAILED_REPLY { source: EFAULT } [ 30.083270][ T719] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EFAULT } [ 30.096800][ T719] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EFAULT } my_pid:90 [ 30.217464][ T732] tipc: Started in network mode [ 30.238955][ T732] tipc: Node identity 7a2b37ea1351, cluster identity 4711 [ 30.247454][ T732] tipc: Enabled bearer , priority 0 [ 30.256832][ T734] rust_binder: Failed to allocate buffer. len:1176, is_oneway:false [ 30.256902][ T731] tipc: Disabling bearer [ 30.290498][ T736] process 'syz.0.132' launched './file2' with NULL argv: empty string added [ 30.371602][ T738] capability: warning: `syz.0.133' uses deprecated v2 capabilities in a way that may be insecure [ 30.659906][ T765] tipc: Enabled bearer , priority 0 [ 30.667384][ T764] tipc: Disabling bearer [ 30.756319][ T775] netlink: 104 bytes leftover after parsing attributes in process `syz.4.146'. [ 30.811360][ T31] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 30.962453][ T31] usb 1-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 30.974326][ T31] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 30.985650][ T31] usb 1-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 31.003518][ T31] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 31.014055][ T31] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 31.023227][ T786] rust_binder: Write failure EFAULT in pid:119 [ 31.025938][ T751] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 31.281668][ T31] aiptek 1-1:17.0: Aiptek using 400 ms programming speed [ 31.301705][ T31] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:17.0/input/input4 [ 31.331165][ T31] usb 1-1: USB disconnect, device number 2 [ 31.335136][ T805] rust_binder: Error while translating object. [ 31.337099][ C1] aiptek 1-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 31.339005][ T805] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 31.371695][ T805] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:134 [ 31.867608][ T832] fuse: Unknown parameter 'permit_directio' [ 31.916469][ T36] kauditd_printk_skb: 104 callbacks suppressed [ 31.916488][ T36] audit: type=1400 audit(1757006205.150:281): avc: denied { load_policy } for pid=837 comm="syz.4.168" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 31.942878][ T838] SELinux: failed to load policy [ 31.956656][ T838] netlink: 80 bytes leftover after parsing attributes in process `syz.4.168'. [ 31.981283][ T36] audit: type=1400 audit(1757006205.160:282): avc: denied { create } for pid=835 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 32.001646][ T36] audit: type=1400 audit(1757006205.160:283): avc: denied { getopt } for pid=835 comm="syz.0.167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 32.025905][ T847] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:123 [ 32.026067][ T36] audit: type=1400 audit(1757006205.190:284): avc: denied { ioctl } for pid=834 comm="syz.1.166" path="socket:[8449]" dev="sockfs" ino=8449 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 32.061174][ T36] audit: type=1400 audit(1757006205.240:285): avc: denied { ioctl } for pid=834 comm="syz.1.166" path="socket:[8456]" dev="sockfs" ino=8456 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 32.085722][ T36] audit: type=1400 audit(1757006205.240:286): avc: denied { execute } for pid=834 comm="syz.1.166" path="/dev/ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 32.156936][ T852] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 32.166673][ T852] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 32.226246][ T861] rust_binder: Error while translating object. [ 32.226313][ T861] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: ENOENT } [ 32.241149][ T861] rust_binder: Transaction failed: BR_FAILED_REPLY { source: ENOENT } my_pid:139 [ 32.271129][ T36] audit: type=1400 audit(1757006205.500:287): avc: denied { connect } for pid=864 comm="syz.1.176" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 32.296690][ T865] rust_binder: 143: no such ref 3 [ 32.305703][ T865] rust_binder: Write failure EFAULT in pid:143 [ 32.321324][ T330] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 32.391299][ T688] usb 1-1: new full-speed USB device number 3 using dummy_hcd [ 32.414150][ T874] SELinux: security_context_str_to_sid (sytem_uÝGй) failed with errno=-22 [ 32.491293][ T330] usb 5-1: Using ep0 maxpacket: 32 [ 32.497579][ T330] usb 5-1: config 0 has an invalid interface number: 151 but max is 0 [ 32.505837][ T330] usb 5-1: config 0 has no interface number 0 [ 32.511971][ T330] usb 5-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0x12, changing to 0x2 [ 32.523569][ T688] usb 1-1: device descriptor read/64, error -71 [ 32.529859][ T330] usb 5-1: config 0 interface 151 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 5 [ 32.541154][ T330] usb 5-1: New USB device found, idVendor=0499, idProduct=6bb7, bcdDevice=68.2f [ 32.550359][ T330] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 32.558390][ T330] usb 5-1: Product: syz [ 32.562584][ T330] usb 5-1: Manufacturer: syz [ 32.567172][ T330] usb 5-1: SerialNumber: syz [ 32.572465][ T330] usb 5-1: config 0 descriptor?? [ 32.577733][ T838] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 32.761374][ T688] usb 1-1: device descriptor read/64, error -71 [ 32.789689][ T330] usb 5-1: invalid MIDI in EP 0 [ 32.797478][ T330] snd-usb-audio 5-1:0.151: probe with driver snd-usb-audio failed with error -22 [ 32.808369][ T330] usb 5-1: USB disconnect, device number 2 [ 32.830766][ T331] udevd[331]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.151/sound/card0/controlC0/../uevent} for writing: No such file or directory [ 32.901830][ T879] rust_binder: Error while translating object. [ 32.901858][ T879] rust_binder: Failure in copy_transaction_data: BR_FAILED_REPLY { source: EINVAL } [ 32.908083][ T879] rust_binder: Transaction failed: BR_FAILED_REPLY { source: EINVAL } my_pid:153 [ 33.001322][ T688] usb 1-1: new full-speed USB device number 4 using dummy_hcd [ 33.141437][ T688] usb 1-1: device descriptor read/64, error -71 [ 33.334777][ T890] netlink: 8 bytes leftover after parsing attributes in process `syz.4.184'. [ 33.381325][ T688] usb 1-1: device descriptor read/64, error -71 [ 33.491499][ T688] usb usb1-port1: attempt power cycle [ 33.600705][ T912] rust_binder: BC_FREEZE_NOTIFICATION_DONE 0000000000000001 not found [ 33.608998][ T912] rust_binder: Write failure EINVAL in pid:153 [ 33.841319][ T688] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 33.872522][ T688] usb 1-1: device descriptor read/8, error -71 [ 34.002435][ T688] usb 1-1: device descriptor read/8, error -71 [ 34.061311][ T330] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 34.212548][ T330] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 34.224159][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 34.235095][ T330] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 34.244926][ T330] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 34.257828][ T688] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 34.265392][ T330] usb 2-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 34.274521][ T330] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 34.283133][ T330] usb 2-1: config 0 descriptor?? [ 34.292224][ T688] usb 1-1: device descriptor read/8, error -71 [ 34.422332][ T688] usb 1-1: device descriptor read/8, error -71 [ 34.488594][ T36] audit: type=1404 audit(1757006207.720:288): enforcing=1 old_enforcing=0 auid=4294967295 ses=4294967295 enabled=1 old-enabled=1 lsm=selinux res=1 [ 34.500837][ T330] usbhid 2-1:0.0: can't add hid device: -71 [ 34.503686][ T36] audit: type=1400 audit(1757006207.730:289): avc: denied { ioctl } for pid=915 comm="syz.1.192" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 34.511438][ T330] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 34.535121][ T36] audit: type=1400 audit(1757006207.730:290): avc: denied { ioctl } for pid=915 comm="syz.1.192" path="/dev/raw-gadget" dev="devtmpfs" ino=190 ioctlcmd=0x5502 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 34.541995][ T688] usb usb1-port1: unable to enumerate USB device [ 34.575946][ T330] usb 2-1: USB disconnect, device number 3 [ 34.626247][ T931] netlink: 12 bytes leftover after parsing attributes in process `syz.3.197'. [ 34.636665][ T931] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.645520][ T931] bridge_slave_0 (unregistering): left allmulticast mode [ 34.652636][ T931] bridge_slave_0 (unregistering): left promiscuous mode [ 34.659673][ T931] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.521764][ T979] netlink: 'syz.3.213': attribute type 4 has an invalid length. [ 35.529500][ T979] netlink: 3581 bytes leftover after parsing attributes in process `syz.3.213'. [ 35.618444][ T984] netlink: 'syz.0.215': attribute type 33 has an invalid length. [ 35.626235][ T984] netlink: 4 bytes leftover after parsing attributes in process `syz.0.215'. [ 36.430463][ T1028] capability: warning: `syz.4.230' uses 32-bit capabilities (legacy support in use) [ 36.928278][ T36] kauditd_printk_skb: 331 callbacks suppressed [ 36.928294][ T36] audit: type=1400 audit(1757006210.160:622): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 36.958502][ T36] audit: type=1400 audit(1757006210.170:623): avc: denied { read } for pid=1091 comm="syz.1.255" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 36.981505][ T36] audit: type=1400 audit(1757006210.170:624): avc: denied { read } for pid=1091 comm="syz.1.255" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 37.004029][ T36] audit: type=1400 audit(1757006210.170:625): avc: denied { read } for pid=1091 comm="syz.1.255" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 37.026579][ T36] audit: type=1400 audit(1757006210.220:626): avc: denied { read } for pid=1091 comm="syz.1.255" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 37.049655][ T36] audit: type=1400 audit(1757006210.220:627): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 37.073874][ T36] audit: type=1400 audit(1757006210.280:628): avc: denied { read write } for pid=1096 comm="syz.1.256" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 37.098056][ T36] audit: type=1400 audit(1757006210.280:629): avc: denied { read } for pid=1096 comm="syz.1.256" dev="nsfs" ino=4026532302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 37.119230][ T36] audit: type=1400 audit(1757006210.280:630): avc: denied { read write } for pid=1096 comm="syz.1.256" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 37.142365][ T36] audit: type=1400 audit(1757006210.280:631): avc: denied { create } for pid=1096 comm="syz.1.256" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=0 [ 37.380789][ T1106] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=64 sclass=netlink_route_socket pid=1106 comm=syz.3.259 [ 37.858109][ T1176] netlink: 'syz.4.285': attribute type 4 has an invalid length. [ 37.869119][ T1176] netlink: 'syz.4.285': attribute type 4 has an invalid length. [ 38.430440][ T1232] batadv_slave_0: mtu less than device minimum [ 38.439175][ T1232] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1232 comm=syz.3.308 [ 38.567288][ T1242] FAULT_INJECTION: forcing a failure. [ 38.567288][ T1242] name failslab, interval 1, probability 0, space 0, times 1 [ 38.580062][ T1242] CPU: 1 UID: 0 PID: 1242 Comm: syz.0.313 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 38.580103][ T1242] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 38.580124][ T1242] Call Trace: [ 38.580134][ T1242] [ 38.580145][ T1242] __dump_stack+0x21/0x30 [ 38.580180][ T1242] dump_stack_lvl+0x10c/0x190 [ 38.580210][ T1242] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.580239][ T1242] dump_stack+0x19/0x20 [ 38.580258][ T1242] should_fail_ex+0x3d9/0x530 [ 38.580283][ T1242] should_failslab+0xac/0x100 [ 38.580300][ T1242] kmem_cache_alloc_noprof+0x42/0x3a0 [ 38.580323][ T1242] ? getname_flags+0xc6/0x710 [ 38.580338][ T1242] getname_flags+0xc6/0x710 [ 38.580352][ T1242] ? __fget_files+0x2c5/0x340 [ 38.580369][ T1242] user_path_at+0x2b/0x60 [ 38.580386][ T1242] __se_sys_mount+0x288/0x480 [ 38.580400][ T1242] ? ksys_write+0x1ef/0x250 [ 38.580414][ T1242] ? __x64_sys_mount+0xf0/0xf0 [ 38.580429][ T1242] __x64_sys_mount+0xc3/0xf0 [ 38.580443][ T1242] x64_sys_call+0x2021/0x2ee0 [ 38.580466][ T1242] do_syscall_64+0x58/0xf0 [ 38.580489][ T1242] ? clear_bhb_loop+0x50/0xa0 [ 38.580507][ T1242] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.580525][ T1242] RIP: 0033:0x7f04a518ebe9 [ 38.580543][ T1242] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.580556][ T1242] RSP: 002b:00007f04a5f60038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 38.580576][ T1242] RAX: ffffffffffffffda RBX: 00007f04a53c5fa0 RCX: 00007f04a518ebe9 [ 38.580587][ T1242] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 38.580597][ T1242] RBP: 00007f04a5f60090 R08: 0000000000000000 R09: 0000000000000000 [ 38.580607][ T1242] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000001 [ 38.580616][ T1242] R13: 00007f04a53c6038 R14: 00007f04a53c5fa0 R15: 00007ffd0867f748 [ 38.580630][ T1242] [ 38.879749][ T1266] FAULT_INJECTION: forcing a failure. [ 38.879749][ T1266] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 38.892900][ T1266] CPU: 1 UID: 0 PID: 1266 Comm: syz.4.323 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 38.892930][ T1266] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 38.892943][ T1266] Call Trace: [ 38.892950][ T1266] [ 38.892959][ T1266] __dump_stack+0x21/0x30 [ 38.892992][ T1266] dump_stack_lvl+0x10c/0x190 [ 38.893019][ T1266] ? __cfi_dump_stack_lvl+0x10/0x10 [ 38.893048][ T1266] dump_stack+0x19/0x20 [ 38.893075][ T1266] should_fail_ex+0x3d9/0x530 [ 38.893108][ T1266] should_fail+0xf/0x20 [ 38.893137][ T1266] should_fail_usercopy+0x1e/0x30 [ 38.893157][ T1266] strncpy_from_user+0x28/0x270 [ 38.893189][ T1266] ? getname_flags+0xc6/0x710 [ 38.893210][ T1266] getname_flags+0x102/0x710 [ 38.893230][ T1266] ? __fget_files+0x2c5/0x340 [ 38.893253][ T1266] user_path_at+0x2b/0x60 [ 38.893277][ T1266] __se_sys_mount+0x288/0x480 [ 38.893296][ T1266] ? ksys_write+0x1ef/0x250 [ 38.893315][ T1266] ? __x64_sys_mount+0xf0/0xf0 [ 38.893336][ T1266] __x64_sys_mount+0xc3/0xf0 [ 38.893355][ T1266] x64_sys_call+0x2021/0x2ee0 [ 38.893385][ T1266] do_syscall_64+0x58/0xf0 [ 38.893415][ T1266] ? clear_bhb_loop+0x50/0xa0 [ 38.893441][ T1266] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 38.893473][ T1266] RIP: 0033:0x7f3c3ef8ebe9 [ 38.893490][ T1266] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 38.893507][ T1266] RSP: 002b:00007f3c3fe4b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 38.893529][ T1266] RAX: ffffffffffffffda RBX: 00007f3c3f1c5fa0 RCX: 00007f3c3ef8ebe9 [ 38.893544][ T1266] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000000 [ 38.893557][ T1266] RBP: 00007f3c3fe4b090 R08: 0000000000000000 R09: 0000000000000000 [ 38.893570][ T1266] R10: 0000000000400000 R11: 0000000000000246 R12: 0000000000000001 [ 38.893583][ T1266] R13: 00007f3c3f1c6038 R14: 00007f3c3f1c5fa0 R15: 00007ffefffa46c8 [ 38.893601][ T1266] [ 39.125507][ T1298] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 39.138666][ T1298] SELinux: security_context_str_to_sid (--^$-) failed with errno=-22 [ 39.982364][ T1391] batadv_slave_0: mtu less than device minimum [ 39.992332][ T1391] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=1391 comm=syz.4.370 [ 40.160361][ T1419] netlink: 'syz.1.379': attribute type 4 has an invalid length. [ 40.169461][ T1419] netlink: 'syz.1.379': attribute type 4 has an invalid length. [ 40.987913][ T1509] netlink: 4 bytes leftover after parsing attributes in process `syz.0.415'. [ 40.998763][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.005740][ T13] Bluetooth: hci0: Frame reassembly failed (-84) [ 41.821411][ T1538] netlink: 'syz.4.427': attribute type 10 has an invalid length. [ 41.829197][ T1538] netlink: 17 bytes leftover after parsing attributes in process `syz.4.427'. [ 41.865019][ T1540] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=1540 comm=syz.4.428 [ 42.204580][ T36] kauditd_printk_skb: 824 callbacks suppressed [ 42.204607][ T36] audit: type=1400 audit(1757010567.430:1456): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 42.235393][ T36] audit: type=1400 audit(1757010567.430:1457): avc: denied { read } for pid=1543 comm="syz.1.430" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 42.258504][ T36] audit: type=1400 audit(1757010567.430:1458): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 42.283606][ T36] audit: type=1400 audit(1757010567.430:1459): avc: denied { read append } for pid=1546 comm="syz.1.431" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 42.307766][ T36] audit: type=1400 audit(1757010567.430:1460): avc: denied { write } for pid=1546 comm="syz.1.431" name="route" dev="proc" ino=4026532330 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 42.332192][ T36] audit: type=1400 audit(1757010567.430:1461): avc: denied { create } for pid=1546 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 42.352980][ T36] audit: type=1400 audit(1757010567.430:1462): avc: denied { create } for pid=1546 comm="syz.1.431" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 42.374554][ T36] audit: type=1400 audit(1757010567.490:1463): avc: denied { read write } for pid=1546 comm="syz.1.431" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 42.407991][ T36] audit: type=1400 audit(1757010567.490:1464): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 42.454692][ T36] audit: type=1400 audit(1757010567.490:1465): avc: denied { read write } for pid=1548 comm="syz.1.432" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 42.764754][ T1590] netlink: 'syz.4.449': attribute type 27 has an invalid length. [ 42.782091][ T1590] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.789374][ T1590] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.011306][ T509] Bluetooth: hci0: command 0x1003 tx timeout [ 43.017400][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 44.681225][ T1697] FAULT_INJECTION: forcing a failure. [ 44.681225][ T1697] name failslab, interval 1, probability 0, space 0, times 0 [ 44.694113][ T1697] CPU: 0 UID: 0 PID: 1697 Comm: syz.1.487 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 44.694146][ T1697] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 44.694160][ T1697] Call Trace: [ 44.694166][ T1697] [ 44.694175][ T1697] __dump_stack+0x21/0x30 [ 44.694209][ T1697] dump_stack_lvl+0x10c/0x190 [ 44.694239][ T1697] ? __cfi_dump_stack_lvl+0x10/0x10 [ 44.694270][ T1697] ? pointer+0xdd0/0xdd0 [ 44.694301][ T1697] dump_stack+0x19/0x20 [ 44.694329][ T1697] should_fail_ex+0x3d9/0x530 [ 44.694364][ T1697] should_failslab+0xac/0x100 [ 44.694389][ T1697] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 44.694425][ T1697] ? sidtab_sid2str_get+0x139/0x370 [ 44.694451][ T1697] kmemdup_noprof+0x31/0x80 [ 44.694483][ T1697] sidtab_sid2str_get+0x139/0x370 [ 44.694508][ T1697] security_sid_to_context_core+0x30d/0x5d0 [ 44.694531][ T1697] security_sid_to_context+0x2e/0x50 [ 44.694552][ T1697] avc_audit_post_callback+0x107/0x780 [ 44.694584][ T1697] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 44.694619][ T1697] ? audit_log_untrustedstring+0xea/0x100 [ 44.694648][ T1697] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 44.694679][ T1697] common_lsm_audit+0x147d/0x1860 [ 44.694708][ T1697] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 44.694750][ T1697] ? selinux_file_open+0x457/0x610 [ 44.694777][ T1697] ? __cfi_common_lsm_audit+0x10/0x10 [ 44.694806][ T1697] ? __cfi_selinux_file_open+0x10/0x10 [ 44.694836][ T1697] slow_avc_audit+0x18d/0x1f0 [ 44.694866][ T1697] ? __cfi_slow_avc_audit+0x10/0x10 [ 44.694897][ T1697] ? avc_denied+0xae/0x180 [ 44.694927][ T1697] ? avc_has_perm_noaudit+0x2b9/0x360 [ 44.694958][ T1697] avc_has_perm+0x1cd/0x220 [ 44.694989][ T1697] ? __cfi_avc_has_perm+0x10/0x10 [ 44.695021][ T1697] ? _parse_integer+0x2e/0x40 [ 44.695053][ T1697] file_map_prot_check+0x568/0x8d0 [ 44.695080][ T1697] ? ioctl_has_perm+0x4d0/0x4d0 [ 44.695118][ T1697] ? mtree_range_walk+0x573/0x730 [ 44.695144][ T1697] selinux_file_mprotect+0x77a/0x8a0 [ 44.695170][ T1697] ? __cfi_selinux_file_mprotect+0x10/0x10 [ 44.695199][ T1697] security_file_mprotect+0x58/0xd0 [ 44.695223][ T1697] do_mprotect_pkey+0x998/0xea0 [ 44.695251][ T1697] ? prot_none_test+0x30/0x30 [ 44.695275][ T1697] ? mutex_unlock+0x8b/0x240 [ 44.695300][ T1697] ? fput+0x1a5/0x240 [ 44.695327][ T1697] ? __cfi_ksys_write+0x10/0x10 [ 44.695347][ T1697] ? __kasan_check_read+0x15/0x20 [ 44.695379][ T1697] __x64_sys_mprotect+0x84/0xa0 [ 44.695404][ T1697] x64_sys_call+0x2590/0x2ee0 [ 44.695436][ T1697] do_syscall_64+0x58/0xf0 [ 44.695467][ T1697] ? clear_bhb_loop+0x50/0xa0 [ 44.695493][ T1697] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 44.695518][ T1697] RIP: 0033:0x7fb84a18ebe9 [ 44.695536][ T1697] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 44.695554][ T1697] RSP: 002b:00007fb84b048038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 44.695577][ T1697] RAX: ffffffffffffffda RBX: 00007fb84a3c5fa0 RCX: 00007fb84a18ebe9 [ 44.695594][ T1697] RDX: 0000000000000005 RSI: 0000000000800000 RDI: 0000200000000000 [ 44.695610][ T1697] RBP: 00007fb84b048090 R08: 0000000000000000 R09: 0000000000000000 [ 44.695623][ T1697] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.695636][ T1697] R13: 00007fb84a3c6038 R14: 00007fb84a3c5fa0 R15: 00007fffe4151168 [ 44.695654][ T1697] [ 45.235769][ T1723] FAULT_INJECTION: forcing a failure. [ 45.235769][ T1723] name failslab, interval 1, probability 0, space 0, times 0 [ 45.261455][ T1723] CPU: 1 UID: 0 PID: 1723 Comm: syz.3.497 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 45.261486][ T1723] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 45.261497][ T1723] Call Trace: [ 45.261503][ T1723] [ 45.261510][ T1723] __dump_stack+0x21/0x30 [ 45.261540][ T1723] dump_stack_lvl+0x10c/0x190 [ 45.261564][ T1723] ? __cfi_dump_stack_lvl+0x10/0x10 [ 45.261588][ T1723] ? skb_put+0x112/0x1f0 [ 45.261615][ T1723] dump_stack+0x19/0x20 [ 45.261638][ T1723] should_fail_ex+0x3d9/0x530 [ 45.261666][ T1723] should_failslab+0xac/0x100 [ 45.261686][ T1723] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 45.261715][ T1723] ? sidtab_sid2str_get+0x139/0x370 [ 45.261736][ T1723] kmemdup_noprof+0x31/0x80 [ 45.261761][ T1723] sidtab_sid2str_get+0x139/0x370 [ 45.261781][ T1723] security_sid_to_context_core+0x30d/0x5d0 [ 45.261799][ T1723] security_sid_to_context+0x2e/0x50 [ 45.261815][ T1723] avc_audit_post_callback+0x198/0x780 [ 45.261842][ T1723] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 45.261868][ T1723] ? audit_log_untrustedstring+0xea/0x100 [ 45.261891][ T1723] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 45.261916][ T1723] common_lsm_audit+0x147d/0x1860 [ 45.261940][ T1723] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 45.261965][ T1723] ? selinux_file_open+0x457/0x610 [ 45.261993][ T1723] ? __cfi_common_lsm_audit+0x10/0x10 [ 45.262016][ T1723] ? __cfi_selinux_file_open+0x10/0x10 [ 45.262039][ T1723] slow_avc_audit+0x18d/0x1f0 [ 45.262063][ T1723] ? __cfi_slow_avc_audit+0x10/0x10 [ 45.262086][ T1723] ? avc_denied+0xae/0x180 [ 45.262110][ T1723] ? avc_has_perm_noaudit+0x2b9/0x360 [ 45.262135][ T1723] avc_has_perm+0x1cd/0x220 [ 45.262160][ T1723] ? __cfi_avc_has_perm+0x10/0x10 [ 45.262184][ T1723] ? _parse_integer+0x2e/0x40 [ 45.262210][ T1723] file_map_prot_check+0x568/0x8d0 [ 45.262232][ T1723] ? ioctl_has_perm+0x4d0/0x4d0 [ 45.262252][ T1723] ? mtree_range_walk+0x573/0x730 [ 45.262274][ T1723] selinux_file_mprotect+0x77a/0x8a0 [ 45.262295][ T1723] ? __cfi_selinux_file_mprotect+0x10/0x10 [ 45.262318][ T1723] security_file_mprotect+0x58/0xd0 [ 45.262338][ T1723] do_mprotect_pkey+0x998/0xea0 [ 45.262361][ T1723] ? prot_none_test+0x30/0x30 [ 45.262381][ T1723] ? mutex_unlock+0x8b/0x240 [ 45.262402][ T1723] ? fput+0x1a5/0x240 [ 45.262424][ T1723] ? __cfi_ksys_write+0x10/0x10 [ 45.262440][ T1723] ? __kasan_check_read+0x15/0x20 [ 45.262466][ T1723] __x64_sys_mprotect+0x84/0xa0 [ 45.262486][ T1723] x64_sys_call+0x2590/0x2ee0 [ 45.262513][ T1723] do_syscall_64+0x58/0xf0 [ 45.262538][ T1723] ? clear_bhb_loop+0x50/0xa0 [ 45.262559][ T1723] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 45.262579][ T1723] RIP: 0033:0x7ff0ebd8ebe9 [ 45.262594][ T1723] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 45.262609][ T1723] RSP: 002b:00007ff0ecc0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 45.262628][ T1723] RAX: ffffffffffffffda RBX: 00007ff0ebfc5fa0 RCX: 00007ff0ebd8ebe9 [ 45.262641][ T1723] RDX: 0000000000000005 RSI: 0000000000800000 RDI: 0000200000000000 [ 45.262652][ T1723] RBP: 00007ff0ecc0a090 R08: 0000000000000000 R09: 0000000000000000 [ 45.262663][ T1723] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 45.262673][ T1723] R13: 00007ff0ebfc6038 R14: 00007ff0ebfc5fa0 R15: 00007fff79ad9918 [ 45.262688][ T1723] [ 46.318206][ T1750] FAULT_INJECTION: forcing a failure. [ 46.318206][ T1750] name failslab, interval 1, probability 0, space 0, times 0 [ 46.331421][ T1750] CPU: 0 UID: 0 PID: 1750 Comm: syz.4.507 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 46.331453][ T1750] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.331467][ T1750] Call Trace: [ 46.331475][ T1750] [ 46.331484][ T1750] __dump_stack+0x21/0x30 [ 46.331518][ T1750] dump_stack_lvl+0x10c/0x190 [ 46.331548][ T1750] ? __cfi_dump_stack_lvl+0x10/0x10 [ 46.331579][ T1750] ? pointer+0xdd0/0xdd0 [ 46.331609][ T1750] dump_stack+0x19/0x20 [ 46.331637][ T1750] should_fail_ex+0x3d9/0x530 [ 46.331670][ T1750] should_failslab+0xac/0x100 [ 46.331694][ T1750] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 46.331729][ T1750] ? sidtab_sid2str_get+0x139/0x370 [ 46.331754][ T1750] kmemdup_noprof+0x31/0x80 [ 46.331784][ T1750] sidtab_sid2str_get+0x139/0x370 [ 46.331808][ T1750] security_sid_to_context_core+0x30d/0x5d0 [ 46.331831][ T1750] security_sid_to_context+0x2e/0x50 [ 46.331859][ T1750] avc_audit_post_callback+0x107/0x780 [ 46.331890][ T1750] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 46.331921][ T1750] ? audit_log_untrustedstring+0xea/0x100 [ 46.331949][ T1750] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 46.331980][ T1750] common_lsm_audit+0x147d/0x1860 [ 46.332010][ T1750] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 46.332040][ T1750] ? selinux_file_open+0x457/0x610 [ 46.332065][ T1750] ? __cfi_common_lsm_audit+0x10/0x10 [ 46.332093][ T1750] ? __cfi_selinux_file_open+0x10/0x10 [ 46.332121][ T1750] slow_avc_audit+0x18d/0x1f0 [ 46.332151][ T1750] ? __cfi_slow_avc_audit+0x10/0x10 [ 46.332180][ T1750] ? avc_denied+0xae/0x180 [ 46.332210][ T1750] ? avc_has_perm_noaudit+0x2b9/0x360 [ 46.332241][ T1750] avc_has_perm+0x1cd/0x220 [ 46.332271][ T1750] ? __cfi_avc_has_perm+0x10/0x10 [ 46.332302][ T1750] ? _parse_integer+0x2e/0x40 [ 46.332332][ T1750] file_map_prot_check+0x568/0x8d0 [ 46.332359][ T1750] ? ioctl_has_perm+0x4d0/0x4d0 [ 46.332384][ T1750] ? mtree_range_walk+0x573/0x730 [ 46.332410][ T1750] selinux_file_mprotect+0x77a/0x8a0 [ 46.332436][ T1750] ? __cfi_selinux_file_mprotect+0x10/0x10 [ 46.332463][ T1750] security_file_mprotect+0x58/0xd0 [ 46.332487][ T1750] do_mprotect_pkey+0x998/0xea0 [ 46.332516][ T1750] ? prot_none_test+0x30/0x30 [ 46.332541][ T1750] ? mutex_unlock+0x8b/0x240 [ 46.332565][ T1750] ? fput+0x1a5/0x240 [ 46.332592][ T1750] ? __cfi_ksys_write+0x10/0x10 [ 46.332613][ T1750] ? __kasan_check_read+0x15/0x20 [ 46.332644][ T1750] __x64_sys_mprotect+0x84/0xa0 [ 46.332668][ T1750] x64_sys_call+0x2590/0x2ee0 [ 46.332700][ T1750] do_syscall_64+0x58/0xf0 [ 46.332732][ T1750] ? clear_bhb_loop+0x50/0xa0 [ 46.332758][ T1750] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 46.332784][ T1750] RIP: 0033:0x7f3c3ef8ebe9 [ 46.332801][ T1750] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 46.332819][ T1750] RSP: 002b:00007f3c3fe4b038 EFLAGS: 00000246 ORIG_RAX: 000000000000000a [ 46.332843][ T1750] RAX: ffffffffffffffda RBX: 00007f3c3f1c5fa0 RCX: 00007f3c3ef8ebe9 [ 46.332866][ T1750] RDX: 0000000000000005 RSI: 0000000000800000 RDI: 0000200000000000 [ 46.332881][ T1750] RBP: 00007f3c3fe4b090 R08: 0000000000000000 R09: 0000000000000000 [ 46.332894][ T1750] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 46.332907][ T1750] R13: 00007f3c3f1c6038 R14: 00007f3c3f1c5fa0 R15: 00007ffefffa46c8 [ 46.332926][ T1750] [ 47.062746][ T1776] veth0_vlan: entered allmulticast mode [ 47.442191][ T36] kauditd_printk_skb: 351 callbacks suppressed [ 47.442208][ T36] audit: type=1326 audit(1757010572.670:1815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=1689 comm="syz.0.484" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f04a5185ba7 code=0x7fc00000 [ 47.471870][ T36] audit: type=1400 audit(1757010572.680:1816): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 47.496092][ T36] audit: type=1400 audit(1757010572.680:1817): avc: denied { mounton } for pid=1779 comm="syz.0.520" path="/107/file1/file0" dev="tmpfs" ino=598 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 47.519260][ T36] audit: type=1400 audit(1757010572.690:1818): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 47.543818][ T36] audit: type=1400 audit(1757010572.700:1819): avc: denied { read } for pid=1781 comm="syz.0.521" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 47.569997][ T36] audit: type=1400 audit(1757010572.700:1820): avc: denied { remount } for pid=1781 comm="syz.0.521" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=0 [ 47.590289][ T36] audit: type=1400 audit(1757010572.700:1821): avc: denied { read write } for pid=1781 comm="syz.0.521" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 47.613511][ T36] audit: type=1400 audit(1757010572.710:1822): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 47.638034][ T36] audit: type=1400 audit(1757010572.720:1823): avc: denied { create } for pid=1785 comm="syz.0.522" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 47.659159][ T36] audit: type=1400 audit(1757010572.720:1824): avc: denied { read } for pid=1785 comm="syz.0.522" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 48.609670][ T1905] netlink: 'syz.1.564': attribute type 46 has an invalid length. [ 48.949314][ T1950] Zero length message leads to an empty skb [ 49.238729][ T1980] netlink: 8 bytes leftover after parsing attributes in process `syz.3.590'. [ 50.244115][ T2067] netlink: 'syz.3.624': attribute type 12 has an invalid length. [ 50.660037][ T2113] FAULT_INJECTION: forcing a failure. [ 50.660037][ T2113] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 50.673156][ T2113] CPU: 0 UID: 0 PID: 2113 Comm: syz.0.642 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 50.673184][ T2113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.673193][ T2113] Call Trace: [ 50.673199][ T2113] [ 50.673205][ T2113] __dump_stack+0x21/0x30 [ 50.673230][ T2113] dump_stack_lvl+0x10c/0x190 [ 50.673249][ T2113] ? __cfi_dump_stack_lvl+0x10/0x10 [ 50.673271][ T2113] ? kstrtoull+0x13b/0x1e0 [ 50.673292][ T2113] dump_stack+0x19/0x20 [ 50.673310][ T2113] should_fail_ex+0x3d9/0x530 [ 50.673332][ T2113] should_fail+0xf/0x20 [ 50.673352][ T2113] should_fail_usercopy+0x1e/0x30 [ 50.673366][ T2113] _copy_from_user+0x22/0xb0 [ 50.673382][ T2113] ___sys_sendmsg+0x159/0x2a0 [ 50.673398][ T2113] ? __sys_sendmsg+0x280/0x280 [ 50.673413][ T2113] ? proc_fail_nth_write+0x17e/0x210 [ 50.673432][ T2113] ? __cfi_proc_fail_nth_write+0x10/0x10 [ 50.673456][ T2113] __x64_sys_sendmsg+0x1eb/0x2c0 [ 50.673470][ T2113] ? fput+0x1a5/0x240 [ 50.673488][ T2113] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 50.673510][ T2113] ? ksys_write+0x1ef/0x250 [ 50.673525][ T2113] ? __kasan_check_read+0x15/0x20 [ 50.673547][ T2113] x64_sys_call+0x2a4c/0x2ee0 [ 50.673569][ T2113] do_syscall_64+0x58/0xf0 [ 50.673590][ T2113] ? clear_bhb_loop+0x50/0xa0 [ 50.673625][ T2113] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 50.673647][ T2113] RIP: 0033:0x7f04a518ebe9 [ 50.673663][ T2113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 50.673679][ T2113] RSP: 002b:00007f04a5f60038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 50.673699][ T2113] RAX: ffffffffffffffda RBX: 00007f04a53c5fa0 RCX: 00007f04a518ebe9 [ 50.673709][ T2113] RDX: 0000000000000000 RSI: 0000200000010240 RDI: 0000000000000003 [ 50.673718][ T2113] RBP: 00007f04a5f60090 R08: 0000000000000000 R09: 0000000000000000 [ 50.673726][ T2113] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 50.673735][ T2113] R13: 00007f04a53c6038 R14: 00007f04a53c5fa0 R15: 00007ffd0867f748 [ 50.673747][ T2113] [ 50.839278][ T2120] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=2120 comm=syz.1.645 [ 52.259758][ T2257] netlink: 5 bytes leftover after parsing attributes in process `syz.0.701'. [ 52.268635][ T2257] 0ªö»ôM: renamed from gretap0 (while UP) [ 52.275186][ T2257] 0ªö»ôM: entered allmulticast mode [ 52.280640][ T2257] A link change request failed with some changes committed already. Interface 30ªö»ôM may have been left with an inconsistent configuration, please check. [ 52.456284][ T36] kauditd_printk_skb: 736 callbacks suppressed [ 52.456302][ T36] audit: type=1400 audit(1757010577.680:2561): avc: denied { create } for pid=2277 comm="syz.0.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=0 [ 52.483618][ T36] audit: type=1400 audit(1757010577.720:2562): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 52.507752][ T36] audit: type=1400 audit(1757010577.720:2563): avc: denied { read write } for pid=2280 comm="syz.0.711" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 52.531339][ T36] audit: type=1400 audit(1757010577.720:2564): avc: denied { read } for pid=2280 comm="syz.0.711" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 52.554197][ T36] audit: type=1400 audit(1757010577.760:2565): avc: denied { read write } for pid=2260 comm="syz.1.703" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 52.577721][ T36] audit: type=1400 audit(1757010577.760:2566): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 52.602041][ T36] audit: type=1400 audit(1757010577.780:2567): avc: denied { mounton } for pid=2284 comm="syz.1.712" path="/proc/429/task" dev="proc" ino=12196 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=0 [ 52.624820][ T36] audit: type=1400 audit(1757010577.790:2568): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 52.649106][ T36] audit: type=1400 audit(1757010577.800:2569): avc: denied { create } for pid=2287 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 52.669697][ T36] audit: type=1400 audit(1757010577.800:2570): avc: denied { create } for pid=2287 comm="syz.1.713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 53.710430][ T2422] netlink: 1363 bytes leftover after parsing attributes in process `syz.3.767'. [ 53.838744][ T2439] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=2439 comm=syz.0.772 [ 53.928425][ T2457] netlink: 'syz.0.780': attribute type 27 has an invalid length. [ 53.938553][ T2457] 0ªö»ôM: left allmulticast mode [ 53.945299][ T2457] bridge0: port 3(erspan0) entered disabled state [ 53.956605][ T2457] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.963841][ T2457] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.047121][ T2466] netlink: 'syz.0.784': attribute type 10 has an invalid length. [ 55.335895][ T2554] 2N: renamed from vcan0 [ 56.285118][ T2614] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1025 sclass=netlink_route_socket pid=2614 comm=syz.1.844 [ 56.500173][ T2621] netlink: 'syz.0.847': attribute type 16 has an invalid length. [ 56.508160][ T2621] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.847'. [ 56.586382][ T2631] netlink: 'syz.4.851': attribute type 4 has an invalid length. [ 56.618365][ T2636] GUP no longer grows the stack in syz.4.853 (2636): 200000005000-200000008000 (200000004000) [ 56.628777][ T2636] CPU: 1 UID: 0 PID: 2636 Comm: syz.4.853 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 56.628827][ T2636] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 56.628838][ T2636] Call Trace: [ 56.628845][ T2636] [ 56.628851][ T2636] __dump_stack+0x21/0x30 [ 56.628877][ T2636] dump_stack_lvl+0x10c/0x190 [ 56.628898][ T2636] ? __cfi_dump_stack_lvl+0x10/0x10 [ 56.628919][ T2636] ? futex_lock_pi_atomic+0xdd/0xc70 [ 56.628939][ T2636] dump_stack+0x19/0x20 [ 56.628959][ T2636] fixup_user_fault+0x63d/0x6d0 [ 56.628986][ T2636] fault_in_user_writeable+0x76/0xe0 [ 56.629002][ T2636] futex_lock_pi+0x258/0xa10 [ 56.629020][ T2636] ? futex_unqueue+0x136/0x160 [ 56.629036][ T2636] ? __cfi_futex_lock_pi+0x10/0x10 [ 56.629055][ T2636] ? __cfi_futex_wake_mark+0x10/0x10 [ 56.629089][ T2636] ? futex_setup_timer+0xb4/0xd0 [ 56.629103][ T2636] ? __cfi_futex_wake_mark+0x10/0x10 [ 56.629125][ T2636] do_futex+0x25c/0x500 [ 56.629140][ T2636] ? __cfi_do_futex+0x10/0x10 [ 56.629156][ T2636] __se_sys_futex+0x28f/0x300 [ 56.629173][ T2636] ? __x64_sys_futex+0x110/0x110 [ 56.629188][ T2636] ? __kasan_check_write+0x18/0x20 [ 56.629212][ T2636] ? __kasan_check_write+0x18/0x20 [ 56.629235][ T2636] __x64_sys_futex+0xe9/0x110 [ 56.629251][ T2636] x64_sys_call+0x227f/0x2ee0 [ 56.629275][ T2636] do_syscall_64+0x58/0xf0 [ 56.629298][ T2636] ? clear_bhb_loop+0x50/0xa0 [ 56.629317][ T2636] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 56.629335][ T2636] RIP: 0033:0x7f3c3ef8ebe9 [ 56.629348][ T2636] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.629360][ T2636] RSP: 002b:00007f3c3fe4b038 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 56.629377][ T2636] RAX: ffffffffffffffda RBX: 00007f3c3f1c5fa0 RCX: 00007f3c3ef8ebe9 [ 56.629388][ T2636] RDX: 00000000fffffffd RSI: 000000000000008d RDI: 0000200000004000 [ 56.629399][ T2636] RBP: 00007f3c3f011e19 R08: 0000000000000000 R09: 0000000000000000 [ 56.629408][ T2636] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 56.629417][ T2636] R13: 00007f3c3f1c6038 R14: 00007f3c3f1c5fa0 R15: 00007ffefffa46c8 [ 56.629430][ T2636] [ 57.028190][ T2658] syz.3.862(2658): Attempt to set a LOCK_MAND lock via flock(2). This support has been removed and the request ignored. [ 57.052021][ T2664] mmap: syz.3.863 (2664) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 57.263451][ T2675] netlink: 'syz.3.868': attribute type 28 has an invalid length. [ 57.282603][ T2677] FAULT_INJECTION: forcing a failure. [ 57.282603][ T2677] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 57.295722][ T2677] CPU: 0 UID: 0 PID: 2677 Comm: syz.3.869 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 57.295747][ T2677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 57.295757][ T2677] Call Trace: [ 57.295762][ T2677] [ 57.295768][ T2677] __dump_stack+0x21/0x30 [ 57.295793][ T2677] dump_stack_lvl+0x10c/0x190 [ 57.295813][ T2677] ? __cfi_dump_stack_lvl+0x10/0x10 [ 57.295833][ T2677] ? check_stack_object+0x12c/0x140 [ 57.295848][ T2677] dump_stack+0x19/0x20 [ 57.295867][ T2677] should_fail_ex+0x3d9/0x530 [ 57.295891][ T2677] should_fail+0xf/0x20 [ 57.295912][ T2677] should_fail_usercopy+0x1e/0x30 [ 57.295927][ T2677] _copy_to_user+0x24/0xa0 [ 57.295953][ T2677] simple_read_from_buffer+0xed/0x160 [ 57.296007][ T2677] proc_fail_nth_read+0x19e/0x210 [ 57.296028][ T2677] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 57.296048][ T2677] ? bpf_lsm_file_permission+0xd/0x20 [ 57.296070][ T2677] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 57.296095][ T2677] vfs_read+0x27b/0xb60 [ 57.296114][ T2677] ? __cfi_vfs_read+0x10/0x10 [ 57.296133][ T2677] ? __kasan_check_write+0x18/0x20 [ 57.296162][ T2677] ? mutex_lock+0x92/0x1c0 [ 57.296178][ T2677] ? __cfi_mutex_lock+0x10/0x10 [ 57.296193][ T2677] ? __fget_files+0x2c5/0x340 [ 57.296210][ T2677] ksys_read+0x141/0x250 [ 57.296224][ T2677] ? __cfi_ksys_read+0x10/0x10 [ 57.296236][ T2677] ? fdget+0x189/0x1f0 [ 57.296252][ T2677] ? __kasan_check_read+0x15/0x20 [ 57.296273][ T2677] __x64_sys_read+0x7f/0x90 [ 57.296287][ T2677] x64_sys_call+0x2638/0x2ee0 [ 57.296309][ T2677] do_syscall_64+0x58/0xf0 [ 57.296330][ T2677] ? clear_bhb_loop+0x50/0xa0 [ 57.296348][ T2677] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 57.296365][ T2677] RIP: 0033:0x7ff0ebd8d5fc [ 57.296377][ T2677] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 57.296390][ T2677] RSP: 002b:00007ff0ecc0a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 57.296406][ T2677] RAX: ffffffffffffffda RBX: 00007ff0ebfc5fa0 RCX: 00007ff0ebd8d5fc [ 57.296417][ T2677] RDX: 000000000000000f RSI: 00007ff0ecc0a0a0 RDI: 0000000000000003 [ 57.296427][ T2677] RBP: 00007ff0ecc0a090 R08: 0000000000000000 R09: 0000000000000000 [ 57.296437][ T2677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 57.296446][ T2677] R13: 00007ff0ebfc6038 R14: 00007ff0ebfc5fa0 R15: 00007fff79ad9918 [ 57.296459][ T2677] [ 57.554532][ T36] kauditd_printk_skb: 698 callbacks suppressed [ 57.554552][ T36] audit: type=1400 audit(1757010582.770:3269): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 57.584853][ T36] audit: type=1400 audit(1757010582.770:3270): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 57.608921][ T36] audit: type=1400 audit(1757010582.780:3271): avc: denied { read write } for pid=2681 comm="syz.0.871" name="binder0" dev="binder" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 57.632086][ T36] audit: type=1400 audit(1757010582.780:3272): avc: denied { create } for pid=2681 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 57.652507][ T36] audit: type=1400 audit(1757010582.780:3273): avc: denied { create } for pid=2681 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 57.673921][ T36] audit: type=1400 audit(1757010582.780:3274): avc: denied { write } for pid=2681 comm="syz.0.871" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 57.697398][ T36] audit: type=1400 audit(1757010582.780:3275): avc: denied { read write } for pid=2681 comm="syz.0.871" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 57.721131][ T36] audit: type=1400 audit(1757010582.780:3276): avc: denied { create } for pid=2681 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 57.740492][ T36] audit: type=1400 audit(1757010582.780:3277): avc: denied { read } for pid=2681 comm="syz.0.871" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 57.763064][ T36] audit: type=1400 audit(1757010582.780:3278): avc: denied { create } for pid=2681 comm="syz.0.871" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=0 [ 58.449966][ T2733] IPv6: NLM_F_CREATE should be specified when creating new route [ 58.689388][ T2743] 2N: renamed from vcan0 (while UP) [ 58.803730][ T2767] netlink: 124 bytes leftover after parsing attributes in process `syz.4.905'. [ 60.275184][ T2982] syz.4.986 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 60.277983][ T2984] netlink: 108 bytes leftover after parsing attributes in process `syz.1.987'. [ 60.403814][ T329] Bluetooth: hci1: Frame reassembly failed (-84) [ 60.410250][ T2991] Bluetooth: hci1: Frame reassembly failed (-84) [ 61.811307][ T2992] Bluetooth: hci0: command 0x1003 tx timeout [ 61.817372][ T53] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 61.861951][ T3033] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1006'. [ 62.132980][ T3069] netlink: 'syz.4.1018': attribute type 4 has an invalid length. [ 62.451294][ T53] Bluetooth: hci1: command 0x1003 tx timeout [ 62.451302][ T509] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 62.922006][ T36] kauditd_printk_skb: 844 callbacks suppressed [ 62.922026][ T36] audit: type=1400 audit(1757010588.150:4123): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 62.960178][ T36] audit: type=1400 audit(1757010588.190:4124): avc: denied { read write } for pid=3105 comm="syz.0.1030" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 63.010045][ T36] audit: type=1400 audit(1757010588.190:4125): avc: denied { read } for pid=3105 comm="syz.0.1030" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 63.038748][ T36] audit: type=1400 audit(1757010588.190:4126): avc: denied { read write } for pid=3105 comm="syz.0.1030" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 63.064687][ T36] audit: type=1400 audit(1757010588.190:4127): avc: denied { read } for pid=3105 comm="syz.0.1030" name="rtc0" dev="devtmpfs" ino=195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=0 [ 63.099949][ T36] audit: type=1400 audit(1757010588.220:4128): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.134526][ T36] audit: type=1400 audit(1757010588.220:4129): avc: denied { read } for pid=3109 comm="syz.0.1031" name="ashmem" dev="devtmpfs" ino=201 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 63.159225][ T36] audit: type=1400 audit(1757010588.220:4130): avc: denied { create } for pid=3109 comm="syz.0.1031" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 63.179671][ T36] audit: type=1400 audit(1757010588.220:4131): avc: denied { read write } for pid=658 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.204898][ T36] audit: type=1400 audit(1757010588.230:4132): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 63.252186][ T3125] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1039'. [ 64.113791][ T3196] netlink: 'syz.0.1062': attribute type 20 has an invalid length. [ 66.471878][ T3224] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=3224 comm=syz.4.1070 [ 66.682035][ T3261] 2N: renamed from vcan0 (while UP) [ 67.627078][ T3354] x_tables: duplicate underflow at hook 4 [ 67.946068][ T36] kauditd_printk_skb: 406 callbacks suppressed [ 67.946084][ T36] audit: type=1400 audit(1757010593.170:4539): avc: denied { create } for pid=3402 comm="syz.4.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 67.973036][ T36] audit: type=1400 audit(1757010593.170:4540): avc: denied { create } for pid=3402 comm="syz.4.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 67.993804][ T36] audit: type=1400 audit(1757010593.170:4541): avc: denied { read } for pid=3402 comm="syz.4.1133" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 68.016593][ T36] audit: type=1400 audit(1757010593.170:4542): avc: denied { read } for pid=3402 comm="syz.4.1133" name="binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 68.039369][ T36] audit: type=1400 audit(1757010593.170:4543): avc: denied { read write } for pid=3402 comm="syz.4.1133" name="event0" dev="devtmpfs" ino=192 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=0 [ 68.063083][ T36] audit: type=1400 audit(1757010593.170:4544): avc: denied { read write } for pid=3402 comm="syz.4.1133" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 68.147053][ T36] audit: type=1400 audit(1757010593.370:4545): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.185180][ T3405] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3405 comm=syz.3.1134 [ 68.191134][ T36] audit: type=1400 audit(1757010593.380:4546): avc: denied { read write } for pid=3404 comm="syz.3.1134" name="vhost-vsock" dev="devtmpfs" ino=200 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=0 [ 68.212421][ T3405] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=3405 comm=syz.3.1134 [ 68.224584][ T36] audit: type=1400 audit(1757010593.390:4547): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 68.251940][ T3405] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2576 sclass=netlink_tcpdiag_socket pid=3405 comm=syz.3.1134 [ 68.272704][ T36] audit: type=1400 audit(1757010593.390:4548): avc: denied { create } for pid=3404 comm="syz.3.1134" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=0 [ 68.365431][ T3425] syz.1.1142 (3425): attempted to duplicate a private mapping with mremap. This is not supported. [ 68.650734][ T3462] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1156'. [ 69.005031][ T3489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1166'. [ 69.034020][ T3493] netlink: 'syz.0.1168': attribute type 4 has an invalid length. [ 69.042615][ T3493] netlink: 'syz.0.1168': attribute type 4 has an invalid length. [ 71.343890][ T3667] FAULT_INJECTION: forcing a failure. [ 71.343890][ T3667] name failslab, interval 1, probability 0, space 0, times 0 [ 71.356598][ T3667] CPU: 1 UID: 0 PID: 3667 Comm: syz.4.1233 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 71.356632][ T3667] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.356647][ T3667] Call Trace: [ 71.356654][ T3667] [ 71.356661][ T3667] __dump_stack+0x21/0x30 [ 71.356686][ T3667] dump_stack_lvl+0x10c/0x190 [ 71.356707][ T3667] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.356729][ T3667] dump_stack+0x19/0x20 [ 71.356748][ T3667] should_fail_ex+0x3d9/0x530 [ 71.356774][ T3667] should_failslab+0xac/0x100 [ 71.356792][ T3667] kmem_cache_alloc_lru_noprof+0x45/0x3a0 [ 71.356816][ T3667] ? alloc_inode+0xa9/0x270 [ 71.356834][ T3667] alloc_inode+0xa9/0x270 [ 71.356851][ T3667] new_inode_pseudo+0x19/0x40 [ 71.356869][ T3667] path_from_stashed+0x207/0x870 [ 71.356892][ T3667] ? __cfi_path_from_stashed+0x10/0x10 [ 71.356913][ T3667] ? __kasan_check_write+0x18/0x20 [ 71.356937][ T3667] open_namespace+0x92/0x180 [ 71.356954][ T3667] ? __cfi_open_namespace+0x10/0x10 [ 71.356972][ T3667] pidfd_ioctl+0x584/0x6b0 [ 71.356995][ T3667] ? __cfi_pidfd_ioctl+0x10/0x10 [ 71.357018][ T3667] __se_sys_ioctl+0x135/0x1b0 [ 71.357035][ T3667] __x64_sys_ioctl+0x7f/0xa0 [ 71.357051][ T3667] x64_sys_call+0x1878/0x2ee0 [ 71.357080][ T3667] do_syscall_64+0x58/0xf0 [ 71.357110][ T3667] ? clear_bhb_loop+0x50/0xa0 [ 71.357138][ T3667] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.357157][ T3667] RIP: 0033:0x7f3c3ef8ebe9 [ 71.357171][ T3667] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.357183][ T3667] RSP: 002b:00007f3c3fe4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.357200][ T3667] RAX: ffffffffffffffda RBX: 00007f3c3f1c5fa0 RCX: 00007f3c3ef8ebe9 [ 71.357211][ T3667] RDX: 0000000000000000 RSI: 000000000000ff0a RDI: 0000000000000003 [ 71.357221][ T3667] RBP: 00007f3c3fe4b090 R08: 0000000000000000 R09: 0000000000000000 [ 71.357230][ T3667] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.357240][ T3667] R13: 00007f3c3f1c6038 R14: 00007f3c3f1c5fa0 R15: 00007ffefffa46c8 [ 71.357253][ T3667] [ 71.878428][ T3707] FAULT_INJECTION: forcing a failure. [ 71.878428][ T3707] name failslab, interval 1, probability 0, space 0, times 0 [ 71.891326][ T3707] CPU: 0 UID: 0 PID: 3707 Comm: syz.0.1246 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 71.891374][ T3707] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 71.891389][ T3707] Call Trace: [ 71.891394][ T3707] [ 71.891401][ T3707] __dump_stack+0x21/0x30 [ 71.891426][ T3707] dump_stack_lvl+0x10c/0x190 [ 71.891446][ T3707] ? __cfi_dump_stack_lvl+0x10/0x10 [ 71.891469][ T3707] dump_stack+0x19/0x20 [ 71.891488][ T3707] should_fail_ex+0x3d9/0x530 [ 71.891511][ T3707] should_failslab+0xac/0x100 [ 71.891528][ T3707] kmem_cache_alloc_noprof+0x42/0x3a0 [ 71.891550][ T3707] ? security_inode_alloc+0x51/0x200 [ 71.891574][ T3707] security_inode_alloc+0x51/0x200 [ 71.891596][ T3707] inode_init_always_gfp+0x756/0x9e0 [ 71.891614][ T3707] alloc_inode+0xc5/0x270 [ 71.891631][ T3707] new_inode_pseudo+0x19/0x40 [ 71.891648][ T3707] path_from_stashed+0x207/0x870 [ 71.891670][ T3707] ? __cfi_path_from_stashed+0x10/0x10 [ 71.891691][ T3707] ? __kasan_check_write+0x18/0x20 [ 71.891725][ T3707] open_namespace+0x92/0x180 [ 71.891741][ T3707] ? __cfi_open_namespace+0x10/0x10 [ 71.891758][ T3707] pidfd_ioctl+0x584/0x6b0 [ 71.891780][ T3707] ? __cfi_pidfd_ioctl+0x10/0x10 [ 71.891802][ T3707] __se_sys_ioctl+0x135/0x1b0 [ 71.891819][ T3707] __x64_sys_ioctl+0x7f/0xa0 [ 71.891835][ T3707] x64_sys_call+0x1878/0x2ee0 [ 71.891857][ T3707] do_syscall_64+0x58/0xf0 [ 71.891878][ T3707] ? clear_bhb_loop+0x50/0xa0 [ 71.891897][ T3707] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 71.891914][ T3707] RIP: 0033:0x7f04a518ebe9 [ 71.891926][ T3707] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 71.891940][ T3707] RSP: 002b:00007f04a5f60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 71.891956][ T3707] RAX: ffffffffffffffda RBX: 00007f04a53c5fa0 RCX: 00007f04a518ebe9 [ 71.891967][ T3707] RDX: 0000000000000000 RSI: 000000000000ff0a RDI: 0000000000000003 [ 71.891977][ T3707] RBP: 00007f04a5f60090 R08: 0000000000000000 R09: 0000000000000000 [ 71.891986][ T3707] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 71.891995][ T3707] R13: 00007f04a53c6038 R14: 00007f04a53c5fa0 R15: 00007ffd0867f748 [ 71.892009][ T3707] [ 72.538503][ T3744] netlink: 'syz.4.1262': attribute type 29 has an invalid length. [ 72.543291][ T3746] FAULT_INJECTION: forcing a failure. [ 72.543291][ T3746] name failslab, interval 1, probability 0, space 0, times 0 [ 72.546686][ T3744] netlink: 64138 bytes leftover after parsing attributes in process `syz.4.1262'. [ 72.561256][ T3746] CPU: 1 UID: 0 PID: 3746 Comm: syz.3.1263 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 72.561291][ T3746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 72.561307][ T3746] Call Trace: [ 72.561316][ T3746] [ 72.561325][ T3746] __dump_stack+0x21/0x30 [ 72.561397][ T3746] dump_stack_lvl+0x10c/0x190 [ 72.561428][ T3746] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.561462][ T3746] dump_stack+0x19/0x20 [ 72.561491][ T3746] should_fail_ex+0x3d9/0x530 [ 72.561527][ T3746] should_failslab+0xac/0x100 [ 72.561554][ T3746] kmem_cache_alloc_noprof+0x42/0x3a0 [ 72.561588][ T3746] ? alloc_empty_file+0xbf/0x280 [ 72.561617][ T3746] alloc_empty_file+0xbf/0x280 [ 72.561646][ T3746] dentry_open+0x4b/0xb0 [ 72.561674][ T3746] open_namespace+0xf1/0x180 [ 72.561707][ T3746] ? __cfi_open_namespace+0x10/0x10 [ 72.561734][ T3746] pidfd_ioctl+0x584/0x6b0 [ 72.561769][ T3746] ? __cfi_pidfd_ioctl+0x10/0x10 [ 72.561803][ T3746] __se_sys_ioctl+0x135/0x1b0 [ 72.561830][ T3746] __x64_sys_ioctl+0x7f/0xa0 [ 72.561855][ T3746] x64_sys_call+0x1878/0x2ee0 [ 72.561892][ T3746] do_syscall_64+0x58/0xf0 [ 72.561926][ T3746] ? clear_bhb_loop+0x50/0xa0 [ 72.561956][ T3746] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.561984][ T3746] RIP: 0033:0x7ff0ebd8ebe9 [ 72.562004][ T3746] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.562024][ T3746] RSP: 002b:00007ff0ecc0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.562050][ T3746] RAX: ffffffffffffffda RBX: 00007ff0ebfc5fa0 RCX: 00007ff0ebd8ebe9 [ 72.562069][ T3746] RDX: 0000000000000000 RSI: 000000000000ff0a RDI: 0000000000000003 [ 72.562084][ T3746] RBP: 00007ff0ecc0a090 R08: 0000000000000000 R09: 0000000000000000 [ 72.562100][ T3746] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.562115][ T3746] R13: 00007ff0ebfc6038 R14: 00007ff0ebfc5fa0 R15: 00007fff79ad9918 [ 72.562135][ T3746] [ 72.786161][ T3773] FAULT_INJECTION: forcing a failure. [ 72.786161][ T3773] name failslab, interval 1, probability 0, space 0, times 0 [ 72.805832][ T3773] CPU: 1 UID: 0 PID: 3773 Comm: syz.0.1272 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 72.805866][ T3773] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 72.805880][ T3773] Call Trace: [ 72.805886][ T3773] [ 72.805894][ T3773] __dump_stack+0x21/0x30 [ 72.805925][ T3773] dump_stack_lvl+0x10c/0x190 [ 72.805954][ T3773] ? __cfi_dump_stack_lvl+0x10/0x10 [ 72.806000][ T3773] dump_stack+0x19/0x20 [ 72.806027][ T3773] should_fail_ex+0x3d9/0x530 [ 72.806059][ T3773] should_failslab+0xac/0x100 [ 72.806083][ T3773] kmem_cache_alloc_noprof+0x42/0x3a0 [ 72.806115][ T3773] ? security_file_alloc+0x49/0x200 [ 72.806140][ T3773] security_file_alloc+0x49/0x200 [ 72.806163][ T3773] init_file+0x9e/0x210 [ 72.806188][ T3773] alloc_empty_file+0xd9/0x280 [ 72.806215][ T3773] dentry_open+0x4b/0xb0 [ 72.806240][ T3773] open_namespace+0xf1/0x180 [ 72.806264][ T3773] ? __cfi_open_namespace+0x10/0x10 [ 72.806289][ T3773] pidfd_ioctl+0x584/0x6b0 [ 72.806321][ T3773] ? __cfi_pidfd_ioctl+0x10/0x10 [ 72.806353][ T3773] __se_sys_ioctl+0x135/0x1b0 [ 72.806378][ T3773] __x64_sys_ioctl+0x7f/0xa0 [ 72.806401][ T3773] x64_sys_call+0x1878/0x2ee0 [ 72.806432][ T3773] do_syscall_64+0x58/0xf0 [ 72.806461][ T3773] ? clear_bhb_loop+0x50/0xa0 [ 72.806485][ T3773] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 72.806509][ T3773] RIP: 0033:0x7f04a518ebe9 [ 72.806526][ T3773] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.806544][ T3773] RSP: 002b:00007f04a5f60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 72.806567][ T3773] RAX: ffffffffffffffda RBX: 00007f04a53c5fa0 RCX: 00007f04a518ebe9 [ 72.806582][ T3773] RDX: 0000000000000000 RSI: 000000000000ff0a RDI: 0000000000000003 [ 72.806596][ T3773] RBP: 00007f04a5f60090 R08: 0000000000000000 R09: 0000000000000000 [ 72.806609][ T3773] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.806622][ T3773] R13: 00007f04a53c6038 R14: 00007f04a53c5fa0 R15: 00007ffd0867f748 [ 72.806640][ T3773] [ 72.977188][ T36] kauditd_printk_skb: 587 callbacks suppressed [ 72.977210][ T36] audit: type=1400 audit(1757010598.200:5136): avc: denied { read write } for pid=3808 comm="syz.4.1283" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 73.066120][ T36] audit: type=1400 audit(1757010598.240:5137): avc: denied { read } for pid=3808 comm="syz.4.1283" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 73.088654][ T3813] audit: audit_lost=2 audit_rate_limit=0 audit_backlog_limit=64 [ 73.090523][ T36] audit: type=1400 audit(1757010598.240:5138): avc: denied { create } for pid=3808 comm="syz.4.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 73.103614][ T3813] audit: out of memory in audit_log_start [ 73.118428][ T36] audit: type=1400 audit(1757010598.240:5139): avc: denied { create } for pid=3808 comm="syz.4.1283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 73.144004][ T36] audit: type=1400 audit(1757010598.270:5140): avc: denied { read write } for pid=658 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 73.168136][ T36] audit: type=1400 audit(1757010598.280:5141): avc: denied { read write } for pid=3810 comm="syz.4.1284" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 73.191499][ T36] audit: type=1400 audit(1757010598.280:5142): avc: denied { mounton } for pid=3810 comm="syz.4.1284" path="/343/bus" dev="tmpfs" ino=1897 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 73.218314][ T36] audit: type=1400 audit(1757010598.280:5143): avc: denied { read write } for pid=3810 comm="syz.4.1284" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 73.277959][ T3832] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1292'. [ 73.297864][ T3836] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=3836 comm=syz.4.1295 [ 73.920305][ T3928] FAULT_INJECTION: forcing a failure. [ 73.920305][ T3928] name failslab, interval 1, probability 0, space 0, times 0 [ 73.938885][ T3928] CPU: 0 UID: 0 PID: 3928 Comm: syz.4.1330 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 73.938921][ T3928] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 73.938934][ T3928] Call Trace: [ 73.938941][ T3928] [ 73.938949][ T3928] __dump_stack+0x21/0x30 [ 73.938983][ T3928] dump_stack_lvl+0x10c/0x190 [ 73.939010][ T3928] ? __cfi_dump_stack_lvl+0x10/0x10 [ 73.939038][ T3928] ? pointer+0xdd0/0xdd0 [ 73.939065][ T3928] dump_stack+0x19/0x20 [ 73.939092][ T3928] should_fail_ex+0x3d9/0x530 [ 73.939124][ T3928] should_failslab+0xac/0x100 [ 73.939147][ T3928] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 73.939179][ T3928] ? sidtab_sid2str_get+0x139/0x370 [ 73.939203][ T3928] kmemdup_noprof+0x31/0x80 [ 73.939231][ T3928] sidtab_sid2str_get+0x139/0x370 [ 73.939253][ T3928] security_sid_to_context_core+0x30d/0x5d0 [ 73.939275][ T3928] security_sid_to_context+0x2e/0x50 [ 73.939294][ T3928] avc_audit_post_callback+0x107/0x780 [ 73.939323][ T3928] ? audit_log_format+0xdb/0x140 [ 73.939349][ T3928] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 73.939376][ T3928] ? __cfi_audit_log_format+0x10/0x10 [ 73.939401][ T3928] ? audit_log_untrustedstring+0xea/0x100 [ 73.939427][ T3928] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 73.939455][ T3928] common_lsm_audit+0x147d/0x1860 [ 73.939483][ T3928] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 73.939518][ T3928] ? is_bpf_text_address+0x17b/0x1a0 [ 73.939541][ T3928] ? __cfi_common_lsm_audit+0x10/0x10 [ 73.939568][ T3928] ? kernel_text_address+0xa9/0xe0 [ 73.939594][ T3928] ? __kernel_text_address+0x11/0x40 [ 73.939620][ T3928] ? unwind_get_return_address+0x51/0x90 [ 73.939645][ T3928] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 73.939678][ T3928] slow_avc_audit+0x18d/0x1f0 [ 73.939706][ T3928] ? __cfi_slow_avc_audit+0x10/0x10 [ 73.939734][ T3928] ? stack_depot_save_flags+0x38/0x800 [ 73.939755][ T3928] ? avc_denied+0xae/0x180 [ 73.939783][ T3928] ? avc_has_perm_noaudit+0x2b9/0x360 [ 73.939813][ T3928] avc_has_perm+0x1cd/0x220 [ 73.939840][ T3928] ? __cfi_avc_has_perm+0x10/0x10 [ 73.939870][ T3928] selinux_file_open+0x457/0x610 [ 73.939895][ T3928] ? __cfi_selinux_file_open+0x10/0x10 [ 73.939922][ T3928] security_file_open+0x44/0xd0 [ 73.939945][ T3928] do_dentry_open+0x4bd/0x1510 [ 73.939971][ T3928] ? __kasan_slab_alloc+0x73/0x90 [ 73.939994][ T3928] ? vfs_open+0x7c/0x230 [ 73.940021][ T3928] vfs_open+0x86/0x230 [ 73.940045][ T3928] ? __cfi_vfs_open+0x10/0x10 [ 73.940071][ T3928] ? alloc_empty_file+0x120/0x280 [ 73.940097][ T3928] dentry_open+0x68/0xb0 [ 73.940121][ T3928] open_namespace+0xf1/0x180 [ 73.940144][ T3928] ? __cfi_open_namespace+0x10/0x10 [ 73.940168][ T3928] pidfd_ioctl+0x584/0x6b0 [ 73.940198][ T3928] ? __cfi_pidfd_ioctl+0x10/0x10 [ 73.940228][ T3928] __se_sys_ioctl+0x135/0x1b0 [ 73.940251][ T3928] __x64_sys_ioctl+0x7f/0xa0 [ 73.940273][ T3928] x64_sys_call+0x1878/0x2ee0 [ 73.940303][ T3928] do_syscall_64+0x58/0xf0 [ 73.940331][ T3928] ? clear_bhb_loop+0x50/0xa0 [ 73.940355][ T3928] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 73.940379][ T3928] RIP: 0033:0x7f3c3ef8ebe9 [ 73.940396][ T3928] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 73.940414][ T3928] RSP: 002b:00007f3c3fe4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 73.940436][ T3928] RAX: ffffffffffffffda RBX: 00007f3c3f1c5fa0 RCX: 00007f3c3ef8ebe9 [ 73.940452][ T3928] RDX: 0000000000000000 RSI: 000000000000ff0a RDI: 0000000000000003 [ 73.940465][ T3928] RBP: 00007f3c3fe4b090 R08: 0000000000000000 R09: 0000000000000000 [ 73.940478][ T3928] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 73.940491][ T3928] R13: 00007f3c3f1c6038 R14: 00007f3c3f1c5fa0 R15: 00007ffefffa46c8 [ 73.940521][ T3928] [ 74.450090][ T3970] FAULT_INJECTION: forcing a failure. [ 74.450090][ T3970] name failslab, interval 1, probability 0, space 0, times 0 [ 74.463036][ T3970] CPU: 1 UID: 0 PID: 3970 Comm: syz.0.1342 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 74.463069][ T3970] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.463082][ T3970] Call Trace: [ 74.463089][ T3970] [ 74.463098][ T3970] __dump_stack+0x21/0x30 [ 74.463131][ T3970] dump_stack_lvl+0x10c/0x190 [ 74.463154][ T3970] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.463175][ T3970] ? skb_put+0x112/0x1f0 [ 74.463197][ T3970] dump_stack+0x19/0x20 [ 74.463215][ T3970] should_fail_ex+0x3d9/0x530 [ 74.463240][ T3970] should_failslab+0xac/0x100 [ 74.463257][ T3970] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 74.463281][ T3970] ? sidtab_sid2str_get+0x139/0x370 [ 74.463299][ T3970] kmemdup_noprof+0x31/0x80 [ 74.463320][ T3970] sidtab_sid2str_get+0x139/0x370 [ 74.463336][ T3970] security_sid_to_context_core+0x30d/0x5d0 [ 74.463352][ T3970] security_sid_to_context+0x2e/0x50 [ 74.463366][ T3970] avc_audit_post_callback+0x198/0x780 [ 74.463388][ T3970] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 74.463409][ T3970] ? __cfi_audit_log_format+0x10/0x10 [ 74.463429][ T3970] ? audit_log_untrustedstring+0xea/0x100 [ 74.463455][ T3970] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 74.463491][ T3970] common_lsm_audit+0x147d/0x1860 [ 74.463517][ T3970] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 74.463538][ T3970] ? is_bpf_text_address+0x17b/0x1a0 [ 74.463555][ T3970] ? __cfi_common_lsm_audit+0x10/0x10 [ 74.463574][ T3970] ? kernel_text_address+0xa9/0xe0 [ 74.463593][ T3970] ? __kernel_text_address+0x11/0x40 [ 74.463611][ T3970] ? unwind_get_return_address+0x51/0x90 [ 74.463629][ T3970] ? __cfi_stack_trace_consume_entry+0x10/0x10 [ 74.463653][ T3970] slow_avc_audit+0x18d/0x1f0 [ 74.463673][ T3970] ? __cfi_slow_avc_audit+0x10/0x10 [ 74.463693][ T3970] ? stack_depot_save_flags+0x38/0x800 [ 74.463707][ T3970] ? avc_denied+0xae/0x180 [ 74.463727][ T3970] ? avc_has_perm_noaudit+0x2b9/0x360 [ 74.463749][ T3970] avc_has_perm+0x1cd/0x220 [ 74.463769][ T3970] ? __cfi_avc_has_perm+0x10/0x10 [ 74.463791][ T3970] selinux_file_open+0x457/0x610 [ 74.463809][ T3970] ? __cfi_selinux_file_open+0x10/0x10 [ 74.463829][ T3970] security_file_open+0x44/0xd0 [ 74.463846][ T3970] do_dentry_open+0x4bd/0x1510 [ 74.463865][ T3970] ? __kasan_slab_alloc+0x73/0x90 [ 74.463882][ T3970] ? vfs_open+0x7c/0x230 [ 74.463901][ T3970] vfs_open+0x86/0x230 [ 74.463918][ T3970] ? __cfi_vfs_open+0x10/0x10 [ 74.463937][ T3970] ? alloc_empty_file+0x120/0x280 [ 74.463955][ T3970] dentry_open+0x68/0xb0 [ 74.463973][ T3970] open_namespace+0xf1/0x180 [ 74.463989][ T3970] ? __cfi_open_namespace+0x10/0x10 [ 74.464006][ T3970] pidfd_ioctl+0x584/0x6b0 [ 74.464028][ T3970] ? __cfi_pidfd_ioctl+0x10/0x10 [ 74.464049][ T3970] __se_sys_ioctl+0x135/0x1b0 [ 74.464066][ T3970] __x64_sys_ioctl+0x7f/0xa0 [ 74.464082][ T3970] x64_sys_call+0x1878/0x2ee0 [ 74.464104][ T3970] do_syscall_64+0x58/0xf0 [ 74.464125][ T3970] ? clear_bhb_loop+0x50/0xa0 [ 74.464143][ T3970] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.464160][ T3970] RIP: 0033:0x7f04a518ebe9 [ 74.464174][ T3970] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.464186][ T3970] RSP: 002b:00007f04a5f60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 74.464203][ T3970] RAX: ffffffffffffffda RBX: 00007f04a53c5fa0 RCX: 00007f04a518ebe9 [ 74.464219][ T3970] RDX: 0000000000000000 RSI: 000000000000ff0a RDI: 0000000000000003 [ 74.464233][ T3970] RBP: 00007f04a5f60090 R08: 0000000000000000 R09: 0000000000000000 [ 74.464247][ T3970] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 74.464258][ T3970] R13: 00007f04a53c6038 R14: 00007f04a53c5fa0 R15: 00007ffd0867f748 [ 74.464276][ T3970] [ 74.884583][ T3976] FAULT_INJECTION: forcing a failure. [ 74.884583][ T3976] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 74.897926][ T3976] CPU: 0 UID: 0 PID: 3976 Comm: syz.4.1345 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 74.897956][ T3976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 74.897969][ T3976] Call Trace: [ 74.897976][ T3976] [ 74.897983][ T3976] __dump_stack+0x21/0x30 [ 74.898014][ T3976] dump_stack_lvl+0x10c/0x190 [ 74.898040][ T3976] ? __cfi_dump_stack_lvl+0x10/0x10 [ 74.898066][ T3976] ? do_syscall_64+0x58/0xf0 [ 74.898095][ T3976] dump_stack+0x19/0x20 [ 74.898119][ T3976] should_fail_ex+0x3d9/0x530 [ 74.898148][ T3976] should_fail+0xf/0x20 [ 74.898175][ T3976] should_fail_usercopy+0x1e/0x30 [ 74.898203][ T3976] _copy_from_iter+0x1a3/0x14b0 [ 74.898226][ T3976] ? __cfi__copy_from_iter+0x10/0x10 [ 74.898245][ T3976] ? __check_object_size+0x50a/0x810 [ 74.898264][ T3976] ? __cfi___check_object_size+0x10/0x10 [ 74.898283][ T3976] ? __kasan_check_write+0x18/0x20 [ 74.898309][ T3976] ? __build_skb_around+0x2a4/0x5a0 [ 74.898336][ T3976] skb_copy_datagram_from_iter+0x100/0x700 [ 74.898354][ T3976] ? __cfi_mutex_lock+0x10/0x10 [ 74.898376][ T3976] tun_get_user+0x1616/0x3450 [ 74.898393][ T3976] ? __cfi_selinux_file_open+0x10/0x10 [ 74.898419][ T3976] ? ptr_ring_consume+0x430/0x430 [ 74.898447][ T3976] ? is_bpf_text_address+0x17b/0x1a0 [ 74.898469][ T3976] ? kernel_text_address+0xa9/0xe0 [ 74.898493][ T3976] ? __kasan_check_write+0x18/0x20 [ 74.898520][ T3976] ? ref_tracker_alloc+0x308/0x540 [ 74.898539][ T3976] ? arch_stack_walk+0x10b/0x170 [ 74.898557][ T3976] ? __cfi_ref_tracker_alloc+0x10/0x10 [ 74.898578][ T3976] ? _parse_integer+0x2e/0x40 [ 74.898604][ T3976] ? kstrtoull+0x13b/0x1e0 [ 74.898629][ T3976] tun_chr_write_iter+0x1fc/0x310 [ 74.898658][ T3976] do_iter_readv_writev+0x4f2/0x6a0 [ 74.898678][ T3976] ? vfs_iter_read+0x5f0/0x5f0 [ 74.898698][ T3976] ? bpf_lsm_file_permission+0xd/0x20 [ 74.898726][ T3976] vfs_writev+0x485/0xcf0 [ 74.898750][ T3976] ? do_writev+0x2d0/0x2d0 [ 74.898771][ T3976] ? vfs_write+0x8ba/0xe80 [ 74.898793][ T3976] do_writev+0x14d/0x2d0 [ 74.898821][ T3976] ? vfs_readv+0xa50/0xa50 [ 74.898843][ T3976] ? __kasan_check_read+0x15/0x20 [ 74.898870][ T3976] __x64_sys_writev+0x81/0x90 [ 74.898890][ T3976] x64_sys_call+0x1fbb/0x2ee0 [ 74.898919][ T3976] do_syscall_64+0x58/0xf0 [ 74.898946][ T3976] ? clear_bhb_loop+0x50/0xa0 [ 74.898969][ T3976] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 74.898991][ T3976] RIP: 0033:0x7f3c3ef8ebe9 [ 74.899008][ T3976] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 74.899026][ T3976] RSP: 002b:00007f3c3fe4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 74.899048][ T3976] RAX: ffffffffffffffda RBX: 00007f3c3f1c5fa0 RCX: 00007f3c3ef8ebe9 [ 74.899063][ T3976] RDX: 0000000000000001 RSI: 0000200000000040 RDI: 0000000000000003 [ 74.899075][ T3976] RBP: 00007f3c3fe4b090 R08: 0000000000000000 R09: 0000000000000000 [ 74.899088][ T3976] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 74.899099][ T3976] R13: 00007f3c3f1c6038 R14: 00007f3c3f1c5fa0 R15: 00007ffefffa46c8 [ 74.899116][ T3976] [ 75.272970][ T3999] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 75.385422][ T4023] FAULT_INJECTION: forcing a failure. [ 75.385422][ T4023] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 75.404325][ T4023] CPU: 0 UID: 0 PID: 4023 Comm: syz.4.1359 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 75.404357][ T4023] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 75.404370][ T4023] Call Trace: [ 75.404378][ T4023] [ 75.404387][ T4023] __dump_stack+0x21/0x30 [ 75.404421][ T4023] dump_stack_lvl+0x10c/0x190 [ 75.404447][ T4023] ? __cfi_dump_stack_lvl+0x10/0x10 [ 75.404474][ T4023] ? check_stack_object+0x12c/0x140 [ 75.404493][ T4023] dump_stack+0x19/0x20 [ 75.404518][ T4023] should_fail_ex+0x3d9/0x530 [ 75.404549][ T4023] should_fail+0xf/0x20 [ 75.404578][ T4023] should_fail_usercopy+0x1e/0x30 [ 75.404598][ T4023] _copy_to_user+0x24/0xa0 [ 75.404621][ T4023] simple_read_from_buffer+0xed/0x160 [ 75.404648][ T4023] proc_fail_nth_read+0x19e/0x210 [ 75.404676][ T4023] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 75.404701][ T4023] ? vfs_writev+0xa16/0xcf0 [ 75.404725][ T4023] ? bpf_lsm_file_permission+0xd/0x20 [ 75.404753][ T4023] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 75.404780][ T4023] vfs_read+0x27b/0xb60 [ 75.404799][ T4023] ? __cfi_vfs_read+0x10/0x10 [ 75.404817][ T4023] ? __kasan_check_write+0x18/0x20 [ 75.404847][ T4023] ? mutex_lock+0x92/0x1c0 [ 75.404869][ T4023] ? __cfi_mutex_lock+0x10/0x10 [ 75.404890][ T4023] ? __fget_files+0x2c5/0x340 [ 75.404914][ T4023] ksys_read+0x141/0x250 [ 75.404932][ T4023] ? __cfi_ksys_read+0x10/0x10 [ 75.404951][ T4023] ? __kasan_check_read+0x15/0x20 [ 75.404980][ T4023] __x64_sys_read+0x7f/0x90 [ 75.404999][ T4023] x64_sys_call+0x2638/0x2ee0 [ 75.405028][ T4023] do_syscall_64+0x58/0xf0 [ 75.405056][ T4023] ? clear_bhb_loop+0x50/0xa0 [ 75.405081][ T4023] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 75.405104][ T4023] RIP: 0033:0x7f3c3ef8d5fc [ 75.405121][ T4023] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 75.405147][ T4023] RSP: 002b:00007f3c3fe4b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 75.405170][ T4023] RAX: ffffffffffffffda RBX: 00007f3c3f1c5fa0 RCX: 00007f3c3ef8d5fc [ 75.405184][ T4023] RDX: 000000000000000f RSI: 00007f3c3fe4b0a0 RDI: 0000000000000005 [ 75.405197][ T4023] RBP: 00007f3c3fe4b090 R08: 0000000000000000 R09: 0000000000000000 [ 75.405210][ T4023] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 75.405221][ T4023] R13: 00007f3c3f1c6038 R14: 00007f3c3f1c5fa0 R15: 00007ffefffa46c8 [ 75.405238][ T4023] [ 76.146137][ T4133] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1395'. [ 76.238939][ T4163] sock: sock_set_timeout: `syz.0.1405' (pid 4163) tries to set negative timeout [ 76.262882][ T4163] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1405'. [ 77.084149][ T12] Bluetooth: hci0: Frame reassembly failed (-84) [ 77.084293][ T4235] x_tables: duplicate entry at hook 1 [ 77.996904][ T36] kauditd_printk_skb: 726 callbacks suppressed [ 77.996923][ T36] audit: type=1400 audit(1757010604.217:5866): avc: denied { read write } for pid=658 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 79.109380][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 79.109378][ T509] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 79.128336][ T36] audit: type=1400 audit(1757010605.338:5867): avc: denied { read write } for pid=291 comm="syz-executor" name="loop3" dev="devtmpfs" ino=52 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 84.624159][ T36] audit: type=1400 audit(1757010610.798:5868): avc: denied { create } for pid=4285 comm="syz.1.1453" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 84.649728][ T36] audit: type=1400 audit(1757010610.798:5869): avc: denied { read } for pid=4286 comm="syz.0.1452" name="binder1" dev="binder" ino=14 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 84.674998][ T36] audit: type=1400 audit(1757010610.798:5870): avc: denied { relabelfrom } for pid=4286 comm="syz.0.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=0 [ 84.695289][ T36] audit: type=1400 audit(1757010610.798:5871): avc: denied { relabelfrom } for pid=4286 comm="syz.0.1452" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=0 [ 84.732883][ T36] audit: type=1400 audit(1757010610.818:5872): avc: denied { read } for pid=4291 comm="syz.3.1455" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 84.766728][ T36] audit: type=1400 audit(1757010610.818:5873): avc: denied { read write } for pid=4292 comm="syz.4.1454" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 84.791799][ T36] audit: type=1400 audit(1757010610.818:5874): avc: denied { read write } for pid=4285 comm="syz.1.1453" name="binder1" dev="binder" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 84.815775][ T36] audit: type=1400 audit(1757010610.818:5875): avc: denied { read write } for pid=4292 comm="syz.4.1454" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 84.840153][ T36] audit: type=1400 audit(1757010610.818:5876): avc: denied { read } for pid=4291 comm="syz.3.1455" name="binder0" dev="binder" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 84.863060][ T36] audit: type=1400 audit(1757010610.818:5877): avc: denied { create } for pid=4292 comm="syz.4.1454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 85.460493][ T4360] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4360 comm=syz.3.1479 [ 85.683604][ T4371] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1484'. [ 85.939297][ T4399] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4399 comm=syz.1.1494 [ 86.151834][ T4440] netlink: 'syz.0.1506': attribute type 4 has an invalid length. [ 86.161733][ T4440] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1506'. [ 86.220331][ T4443] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=4443 comm=syz.4.1509 [ 86.258063][ T4449] netlink: 'syz.4.1511': attribute type 11 has an invalid length. [ 87.190182][ T4550] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1551'. [ 87.466630][ T4570] tc_dump_action: action bad kind [ 88.602606][ T4646] syz.4.1588 (4646): /proc/4645/oom_adj is deprecated, please use /proc/4645/oom_score_adj instead. [ 88.859912][ T4665] FAULT_INJECTION: forcing a failure. [ 88.859912][ T4665] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 88.896757][ T4665] CPU: 1 UID: 0 PID: 4665 Comm: syz.3.1596 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 88.896795][ T4665] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 88.896810][ T4665] Call Trace: [ 88.896818][ T4665] [ 88.896829][ T4665] __dump_stack+0x21/0x30 [ 88.896865][ T4665] dump_stack_lvl+0x10c/0x190 [ 88.896896][ T4665] ? __cfi_dump_stack_lvl+0x10/0x10 [ 88.896929][ T4665] ? check_stack_object+0x12c/0x140 [ 88.896956][ T4665] dump_stack+0x19/0x20 [ 88.896986][ T4665] should_fail_ex+0x3d9/0x530 [ 88.897033][ T4665] should_fail+0xf/0x20 [ 88.897066][ T4665] should_fail_usercopy+0x1e/0x30 [ 88.897091][ T4665] _copy_to_user+0x24/0xa0 [ 88.897117][ T4665] simple_read_from_buffer+0xed/0x160 [ 88.897156][ T4665] proc_fail_nth_read+0x19e/0x210 [ 88.897185][ T4665] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 88.897212][ T4665] ? bpf_lsm_file_permission+0xd/0x20 [ 88.897242][ T4665] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 88.897269][ T4665] vfs_read+0x27b/0xb60 [ 88.897289][ T4665] ? __cfi_vfs_read+0x10/0x10 [ 88.897310][ T4665] ? __kasan_check_write+0x18/0x20 [ 88.897342][ T4665] ? mutex_lock+0x92/0x1c0 [ 88.897367][ T4665] ? __cfi_mutex_lock+0x10/0x10 [ 88.897390][ T4665] ? __fget_files+0x2c5/0x340 [ 88.897418][ T4665] ksys_read+0x141/0x250 [ 88.897438][ T4665] ? __cfi_ksys_read+0x10/0x10 [ 88.897458][ T4665] ? fdget+0x189/0x1f0 [ 88.897481][ T4665] ? __kasan_check_read+0x15/0x20 [ 88.897523][ T4665] __x64_sys_read+0x7f/0x90 [ 88.897544][ T4665] x64_sys_call+0x2638/0x2ee0 [ 88.897571][ T4665] do_syscall_64+0x58/0xf0 [ 88.897601][ T4665] ? clear_bhb_loop+0x50/0xa0 [ 88.897629][ T4665] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 88.897655][ T4665] RIP: 0033:0x7ff0ebd8d5fc [ 88.897673][ T4665] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 88.897694][ T4665] RSP: 002b:00007ff0ecc0a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 88.897718][ T4665] RAX: ffffffffffffffda RBX: 00007ff0ebfc5fa0 RCX: 00007ff0ebd8d5fc [ 88.897735][ T4665] RDX: 000000000000000f RSI: 00007ff0ecc0a0a0 RDI: 0000000000000006 [ 88.897748][ T4665] RBP: 00007ff0ecc0a090 R08: 0000000000000000 R09: 0000000000000000 [ 88.897763][ T4665] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.897776][ T4665] R13: 00007ff0ebfc6038 R14: 00007ff0ebfc5fa0 R15: 00007fff79ad9918 [ 88.897794][ T4665] [ 89.892491][ T36] kauditd_printk_skb: 1003 callbacks suppressed [ 89.892508][ T36] audit: type=1400 audit(1757010615.938:6809): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 89.922936][ T36] audit: type=1400 audit(1757010615.938:6810): avc: denied { create } for pid=4740 comm="syz.0.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 89.943690][ T36] audit: type=1400 audit(1757010615.967:6811): avc: denied { create } for pid=4740 comm="syz.0.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 89.964522][ T36] audit: type=1400 audit(1757010615.967:6812): avc: denied { create } for pid=4740 comm="syz.0.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 89.985094][ T36] audit: type=1400 audit(1757010615.967:6813): avc: denied { create } for pid=4740 comm="syz.0.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=0 [ 90.005807][ T36] audit: type=1400 audit(1757010615.967:6814): avc: denied { create } for pid=4740 comm="syz.0.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 90.026256][ T36] audit: type=1400 audit(1757010615.967:6815): avc: denied { create } for pid=4740 comm="syz.0.1626" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=0 [ 90.045690][ T36] audit: type=1400 audit(1757010615.985:6816): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 90.069744][ T36] audit: type=1400 audit(1757010616.069:6817): avc: denied { watch } for pid=4742 comm="syz.0.1627" path="/dev/net/tun" dev="devtmpfs" ino=85 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tun_tap_device_t tclass=chr_file permissive=0 [ 90.094274][ T36] audit: type=1400 audit(1757010616.107:6818): avc: denied { create } for pid=4742 comm="syz.0.1627" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 90.590456][ T4782] netlink: 'syz.3.1643': attribute type 25 has an invalid length. [ 91.090390][ T4814] veth0_vlan: entered allmulticast mode [ 91.999970][ T4845] FAULT_INJECTION: forcing a failure. [ 91.999970][ T4845] name failslab, interval 1, probability 0, space 0, times 0 [ 92.020363][ T4845] CPU: 0 UID: 0 PID: 4845 Comm: syz.4.1671 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 92.020397][ T4845] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 92.020411][ T4845] Call Trace: [ 92.020417][ T4845] [ 92.020425][ T4845] __dump_stack+0x21/0x30 [ 92.020460][ T4845] dump_stack_lvl+0x10c/0x190 [ 92.020486][ T4845] ? __cfi_dump_stack_lvl+0x10/0x10 [ 92.020515][ T4845] dump_stack+0x19/0x20 [ 92.020540][ T4845] should_fail_ex+0x3d9/0x530 [ 92.020572][ T4845] should_failslab+0xac/0x100 [ 92.020595][ T4845] kmem_cache_alloc_lru_noprof+0x45/0x3a0 [ 92.020643][ T4845] ? alloc_inode+0xa9/0x270 [ 92.020667][ T4845] alloc_inode+0xa9/0x270 [ 92.020692][ T4845] new_inode_pseudo+0x19/0x40 [ 92.020718][ T4845] alloc_anon_inode+0x22/0x350 [ 92.020746][ T4845] ? anon_inode_make_secure_inode+0x6e/0x150 [ 92.020777][ T4845] anon_inode_make_secure_inode+0x76/0x150 [ 92.020816][ T4845] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 92.020847][ T4845] __se_sys_memfd_secret+0xde/0x330 [ 92.020878][ T4845] __x64_sys_memfd_secret+0x3c/0x60 [ 92.020906][ T4845] x64_sys_call+0x1ec5/0x2ee0 [ 92.020938][ T4845] do_syscall_64+0x58/0xf0 [ 92.020968][ T4845] ? clear_bhb_loop+0x50/0xa0 [ 92.020995][ T4845] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 92.021020][ T4845] RIP: 0033:0x7f3c3ef8ebe9 [ 92.021038][ T4845] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 92.021057][ T4845] RSP: 002b:00007f3c3fe4b038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 92.021080][ T4845] RAX: ffffffffffffffda RBX: 00007f3c3f1c5fa0 RCX: 00007f3c3ef8ebe9 [ 92.021094][ T4845] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 92.021107][ T4845] RBP: 00007f3c3fe4b090 R08: 0000000000000000 R09: 0000000000000000 [ 92.021120][ T4845] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 92.021133][ T4845] R13: 00007f3c3f1c6038 R14: 00007f3c3f1c5fa0 R15: 00007ffefffa46c8 [ 92.021151][ T4845] [ 93.356782][ T4991] FAULT_INJECTION: forcing a failure. [ 93.356782][ T4991] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 93.371709][ T4991] CPU: 1 UID: 0 PID: 4991 Comm: syz.0.1735 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 93.371743][ T4991] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 93.371756][ T4991] Call Trace: [ 93.371762][ T4991] [ 93.371771][ T4991] __dump_stack+0x21/0x30 [ 93.371803][ T4991] dump_stack_lvl+0x10c/0x190 [ 93.371831][ T4991] ? __cfi_dump_stack_lvl+0x10/0x10 [ 93.371860][ T4991] ? check_stack_object+0x12c/0x140 [ 93.371900][ T4991] dump_stack+0x19/0x20 [ 93.371927][ T4991] should_fail_ex+0x3d9/0x530 [ 93.371969][ T4991] should_fail+0xf/0x20 [ 93.371997][ T4991] should_fail_usercopy+0x1e/0x30 [ 93.372018][ T4991] _copy_to_user+0x24/0xa0 [ 93.372054][ T4991] simple_read_from_buffer+0xed/0x160 [ 93.372082][ T4991] proc_fail_nth_read+0x19e/0x210 [ 93.372109][ T4991] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 93.372137][ T4991] ? bpf_lsm_file_permission+0xd/0x20 [ 93.372184][ T4991] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 93.372211][ T4991] vfs_read+0x27b/0xb60 [ 93.372231][ T4991] ? __cfi_vfs_read+0x10/0x10 [ 93.372249][ T4991] ? __kasan_check_write+0x18/0x20 [ 93.372279][ T4991] ? mutex_lock+0x92/0x1c0 [ 93.372301][ T4991] ? __cfi_mutex_lock+0x10/0x10 [ 93.372323][ T4991] ? __fget_files+0x2c5/0x340 [ 93.372359][ T4991] ksys_read+0x141/0x250 [ 93.372378][ T4991] ? __cfi_ksys_read+0x10/0x10 [ 93.372398][ T4991] ? __kasan_check_read+0x15/0x20 [ 93.372428][ T4991] __x64_sys_read+0x7f/0x90 [ 93.372447][ T4991] x64_sys_call+0x2638/0x2ee0 [ 93.372479][ T4991] do_syscall_64+0x58/0xf0 [ 93.372508][ T4991] ? clear_bhb_loop+0x50/0xa0 [ 93.372533][ T4991] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 93.372556][ T4991] RIP: 0033:0x7f04a518d5fc [ 93.372572][ T4991] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 93.372590][ T4991] RSP: 002b:00007f04a5f60030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 93.372612][ T4991] RAX: ffffffffffffffda RBX: 00007f04a53c5fa0 RCX: 00007f04a518d5fc [ 93.372628][ T4991] RDX: 000000000000000f RSI: 00007f04a5f600a0 RDI: 0000000000000003 [ 93.372642][ T4991] RBP: 00007f04a5f60090 R08: 0000000000000000 R09: 0000000000000000 [ 93.372654][ T4991] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 93.372667][ T4991] R13: 00007f04a53c6038 R14: 00007f04a53c5fa0 R15: 00007ffd0867f748 [ 93.372684][ T4991] [ 94.074045][ T5020] netlink: 'syz.4.1747': attribute type 4 has an invalid length. [ 94.101129][ T5020] netlink: 'syz.4.1747': attribute type 4 has an invalid length. [ 94.112366][ T5020] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65535 sclass=netlink_route_socket pid=5020 comm=syz.4.1747 [ 94.150017][ T5029] FAULT_INJECTION: forcing a failure. [ 94.150017][ T5029] name failslab, interval 1, probability 0, space 0, times 0 [ 94.162879][ T5029] CPU: 0 UID: 0 PID: 5029 Comm: syz.1.1749 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 94.162912][ T5029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.162925][ T5029] Call Trace: [ 94.162932][ T5029] [ 94.162941][ T5029] __dump_stack+0x21/0x30 [ 94.162973][ T5029] dump_stack_lvl+0x10c/0x190 [ 94.163001][ T5029] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.163033][ T5029] dump_stack+0x19/0x20 [ 94.163059][ T5029] should_fail_ex+0x3d9/0x530 [ 94.163091][ T5029] should_failslab+0xac/0x100 [ 94.163114][ T5029] kmem_cache_alloc_noprof+0x42/0x3a0 [ 94.163145][ T5029] ? security_inode_alloc+0x51/0x200 [ 94.163176][ T5029] security_inode_alloc+0x51/0x200 [ 94.163206][ T5029] inode_init_always_gfp+0x756/0x9e0 [ 94.163249][ T5029] alloc_inode+0xc5/0x270 [ 94.163275][ T5029] new_inode_pseudo+0x19/0x40 [ 94.163301][ T5029] alloc_anon_inode+0x22/0x350 [ 94.163328][ T5029] ? anon_inode_make_secure_inode+0x6e/0x150 [ 94.163360][ T5029] anon_inode_make_secure_inode+0x76/0x150 [ 94.163387][ T5029] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 94.163418][ T5029] __se_sys_memfd_secret+0xde/0x330 [ 94.163450][ T5029] __x64_sys_memfd_secret+0x3c/0x60 [ 94.163478][ T5029] x64_sys_call+0x1ec5/0x2ee0 [ 94.163510][ T5029] do_syscall_64+0x58/0xf0 [ 94.163542][ T5029] ? clear_bhb_loop+0x50/0xa0 [ 94.163567][ T5029] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.163607][ T5029] RIP: 0033:0x7fb84a18ebe9 [ 94.163625][ T5029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.163644][ T5029] RSP: 002b:00007fb84b048038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 94.163681][ T5029] RAX: ffffffffffffffda RBX: 00007fb84a3c5fa0 RCX: 00007fb84a18ebe9 [ 94.163697][ T5029] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 94.163710][ T5029] RBP: 00007fb84b048090 R08: 0000000000000000 R09: 0000000000000000 [ 94.163723][ T5029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.163736][ T5029] R13: 00007fb84a3c6038 R14: 00007fb84a3c5fa0 R15: 00007fffe4151168 [ 94.163754][ T5029] [ 94.543477][ T329] Bluetooth: hci0: Frame reassembly failed (-84) [ 94.760315][ T5119] FAULT_INJECTION: forcing a failure. [ 94.760315][ T5119] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 94.774290][ T5119] CPU: 0 UID: 0 PID: 5119 Comm: syz.3.1793 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 94.774325][ T5119] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 94.774338][ T5119] Call Trace: [ 94.774344][ T5119] [ 94.774352][ T5119] __dump_stack+0x21/0x30 [ 94.774383][ T5119] dump_stack_lvl+0x10c/0x190 [ 94.774433][ T5119] ? __cfi_dump_stack_lvl+0x10/0x10 [ 94.774460][ T5119] ? vfs_write+0x8ba/0xe80 [ 94.774478][ T5119] dump_stack+0x19/0x20 [ 94.774502][ T5119] should_fail_ex+0x3d9/0x530 [ 94.774539][ T5119] should_fail+0xf/0x20 [ 94.774565][ T5119] should_fail_usercopy+0x1e/0x30 [ 94.774583][ T5119] _copy_from_user+0x22/0xb0 [ 94.774606][ T5119] __se_sys_prlimit64+0x12a/0x7c0 [ 94.774636][ T5119] ? __x64_sys_prlimit64+0xc0/0xc0 [ 94.774663][ T5119] ? ksys_write+0x1ef/0x250 [ 94.774681][ T5119] ? __cfi_ksys_write+0x10/0x10 [ 94.774700][ T5119] __x64_sys_prlimit64+0x9f/0xc0 [ 94.774728][ T5119] x64_sys_call+0x1f31/0x2ee0 [ 94.774757][ T5119] do_syscall_64+0x58/0xf0 [ 94.774782][ T5119] ? clear_bhb_loop+0x50/0xa0 [ 94.774806][ T5119] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 94.774827][ T5119] RIP: 0033:0x7ff0ebd8ebe9 [ 94.774842][ T5119] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 94.774863][ T5119] RSP: 002b:00007ff0ecc0a038 EFLAGS: 00000246 ORIG_RAX: 000000000000012e [ 94.774884][ T5119] RAX: ffffffffffffffda RBX: 00007ff0ebfc5fa0 RCX: 00007ff0ebd8ebe9 [ 94.774898][ T5119] RDX: 0000200000000000 RSI: 0000000000000006 RDI: 0000000000000494 [ 94.774911][ T5119] RBP: 00007ff0ecc0a090 R08: 0000000000000000 R09: 0000000000000000 [ 94.774923][ T5119] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 94.774933][ T5119] R13: 00007ff0ebfc6038 R14: 00007ff0ebfc5fa0 R15: 00007fff79ad9918 [ 94.774949][ T5119] [ 95.246721][ T36] kauditd_printk_skb: 621 callbacks suppressed [ 95.246740][ T36] audit: type=1400 audit(1757010620.932:7436): avc: denied { create } for pid=5175 comm="syz.3.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 95.278309][ T36] audit: type=1400 audit(1757010620.941:7437): avc: denied { create } for pid=5175 comm="syz.3.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 95.300431][ T36] audit: type=1400 audit(1757010620.941:7438): avc: denied { create } for pid=5175 comm="syz.3.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 95.321068][ T36] audit: type=1400 audit(1757010620.941:7439): avc: denied { create } for pid=5175 comm="syz.3.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 95.341729][ T36] audit: type=1400 audit(1757010620.941:7440): avc: denied { create } for pid=5175 comm="syz.3.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 95.362444][ T36] audit: type=1400 audit(1757010620.941:7441): avc: denied { create } for pid=5175 comm="syz.3.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 95.383012][ T36] audit: type=1400 audit(1757010620.941:7442): avc: denied { create } for pid=5175 comm="syz.3.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 95.403502][ T36] audit: type=1400 audit(1757010620.941:7443): avc: denied { create } for pid=5175 comm="syz.3.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 95.423997][ T36] audit: type=1400 audit(1757010620.941:7444): avc: denied { create } for pid=5175 comm="syz.3.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 95.444501][ T36] audit: type=1400 audit(1757010620.941:7445): avc: denied { create } for pid=5175 comm="syz.3.1820" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 96.042271][ T5226] FAULT_INJECTION: forcing a failure. [ 96.042271][ T5226] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.055633][ T5226] CPU: 1 UID: 0 PID: 5226 Comm: syz.1.1839 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 96.055666][ T5226] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.055680][ T5226] Call Trace: [ 96.055688][ T5226] [ 96.055696][ T5226] __dump_stack+0x21/0x30 [ 96.055730][ T5226] dump_stack_lvl+0x10c/0x190 [ 96.055757][ T5226] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.055785][ T5226] ? check_stack_object+0x12c/0x140 [ 96.055806][ T5226] dump_stack+0x19/0x20 [ 96.055832][ T5226] should_fail_ex+0x3d9/0x530 [ 96.055862][ T5226] should_fail+0xf/0x20 [ 96.055891][ T5226] should_fail_usercopy+0x1e/0x30 [ 96.055911][ T5226] _copy_to_user+0x24/0xa0 [ 96.055934][ T5226] simple_read_from_buffer+0xed/0x160 [ 96.055966][ T5226] proc_fail_nth_read+0x19e/0x210 [ 96.056012][ T5226] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 96.056039][ T5226] ? bpf_lsm_file_permission+0xd/0x20 [ 96.056067][ T5226] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 96.056094][ T5226] vfs_read+0x27b/0xb60 [ 96.056113][ T5226] ? __cfi_vfs_read+0x10/0x10 [ 96.056131][ T5226] ? __kasan_check_write+0x18/0x20 [ 96.056161][ T5226] ? mutex_lock+0x92/0x1c0 [ 96.056184][ T5226] ? __cfi_mutex_lock+0x10/0x10 [ 96.056206][ T5226] ? __fget_files+0x2c5/0x340 [ 96.056231][ T5226] ksys_read+0x141/0x250 [ 96.056250][ T5226] ? __cfi_ksys_read+0x10/0x10 [ 96.056268][ T5226] ? __kasan_check_read+0x15/0x20 [ 96.056298][ T5226] __x64_sys_read+0x7f/0x90 [ 96.056317][ T5226] x64_sys_call+0x2638/0x2ee0 [ 96.056346][ T5226] do_syscall_64+0x58/0xf0 [ 96.056376][ T5226] ? clear_bhb_loop+0x50/0xa0 [ 96.056401][ T5226] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.056425][ T5226] RIP: 0033:0x7fb84a18d5fc [ 96.056443][ T5226] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 96.056473][ T5226] RSP: 002b:00007fb84b048030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.056498][ T5226] RAX: ffffffffffffffda RBX: 00007fb84a3c5fa0 RCX: 00007fb84a18d5fc [ 96.056514][ T5226] RDX: 000000000000000f RSI: 00007fb84b0480a0 RDI: 0000000000000003 [ 96.056528][ T5226] RBP: 00007fb84b048090 R08: 0000000000000000 R09: 0000000000000000 [ 96.056542][ T5226] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.056555][ T5226] R13: 00007fb84a3c6038 R14: 00007fb84a3c5fa0 R15: 00007fffe4151168 [ 96.056573][ T5226] [ 96.333770][ T5243] FAULT_INJECTION: forcing a failure. [ 96.333770][ T5243] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 96.346915][ T5243] CPU: 0 UID: 0 PID: 5243 Comm: syz.1.1848 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 96.346949][ T5243] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 96.346963][ T5243] Call Trace: [ 96.346971][ T5243] [ 96.346980][ T5243] __dump_stack+0x21/0x30 [ 96.347012][ T5243] dump_stack_lvl+0x10c/0x190 [ 96.347037][ T5243] ? __cfi_dump_stack_lvl+0x10/0x10 [ 96.347059][ T5243] ? check_stack_object+0x12c/0x140 [ 96.347075][ T5243] dump_stack+0x19/0x20 [ 96.347094][ T5243] should_fail_ex+0x3d9/0x530 [ 96.347119][ T5243] should_fail+0xf/0x20 [ 96.347153][ T5243] should_fail_usercopy+0x1e/0x30 [ 96.347168][ T5243] _copy_to_user+0x24/0xa0 [ 96.347185][ T5243] simple_read_from_buffer+0xed/0x160 [ 96.347218][ T5243] proc_fail_nth_read+0x19e/0x210 [ 96.347237][ T5243] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 96.347255][ T5243] ? bpf_lsm_file_permission+0xd/0x20 [ 96.347275][ T5243] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 96.347294][ T5243] vfs_read+0x27b/0xb60 [ 96.347307][ T5243] ? __cfi_vfs_read+0x10/0x10 [ 96.347318][ T5243] ? __kasan_check_write+0x18/0x20 [ 96.347339][ T5243] ? mutex_lock+0x92/0x1c0 [ 96.347353][ T5243] ? __cfi_mutex_lock+0x10/0x10 [ 96.347367][ T5243] ? __fget_files+0x2c5/0x340 [ 96.347385][ T5243] ksys_read+0x141/0x250 [ 96.347397][ T5243] ? __cfi_ksys_read+0x10/0x10 [ 96.347409][ T5243] ? fdget+0x189/0x1f0 [ 96.347423][ T5243] ? __secure_computing+0xef/0x2b0 [ 96.347445][ T5243] __x64_sys_read+0x7f/0x90 [ 96.347458][ T5243] x64_sys_call+0x2638/0x2ee0 [ 96.347478][ T5243] do_syscall_64+0x58/0xf0 [ 96.347498][ T5243] ? clear_bhb_loop+0x50/0xa0 [ 96.347516][ T5243] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 96.347532][ T5243] RIP: 0033:0x7fb84a18d5fc [ 96.347544][ T5243] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 96.347556][ T5243] RSP: 002b:00007fb84b048030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 96.347571][ T5243] RAX: ffffffffffffffda RBX: 00007fb84a3c5fa0 RCX: 00007fb84a18d5fc [ 96.347582][ T5243] RDX: 000000000000000f RSI: 00007fb84b0480a0 RDI: 0000000000000005 [ 96.347592][ T5243] RBP: 00007fb84b048090 R08: 0000000000000000 R09: 0000000000000000 [ 96.347601][ T5243] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 96.347610][ T5243] R13: 00007fb84a3c6038 R14: 00007fb84a3c5fa0 R15: 00007fffe4151168 [ 96.347622][ T5243] [ 96.765327][ T53] Bluetooth: hci0: command 0x1003 tx timeout [ 96.765355][ T509] Bluetooth: hci0: Opcode 0x1003 failed: -110 [ 97.376807][ T5370] netlink: 'syz.3.1905': attribute type 4 has an invalid length. [ 97.473633][ T5382] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1911'. [ 97.485522][ T5382] netlink: 31 bytes leftover after parsing attributes in process `syz.1.1911'. [ 98.208566][ T5447] FAULT_INJECTION: forcing a failure. [ 98.208566][ T5447] name failslab, interval 1, probability 0, space 0, times 0 [ 98.221336][ T5447] CPU: 1 UID: 0 PID: 5447 Comm: syz.1.1940 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 98.221365][ T5447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 98.221375][ T5447] Call Trace: [ 98.221380][ T5447] [ 98.221386][ T5447] __dump_stack+0x21/0x30 [ 98.221409][ T5447] dump_stack_lvl+0x10c/0x190 [ 98.221429][ T5447] ? __cfi_dump_stack_lvl+0x10/0x10 [ 98.221449][ T5447] ? pointer+0xdd0/0xdd0 [ 98.221467][ T5447] dump_stack+0x19/0x20 [ 98.221485][ T5447] should_fail_ex+0x3d9/0x530 [ 98.221509][ T5447] should_failslab+0xac/0x100 [ 98.221525][ T5447] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 98.221548][ T5447] ? sidtab_sid2str_get+0x139/0x370 [ 98.221564][ T5447] kmemdup_noprof+0x31/0x80 [ 98.221584][ T5447] sidtab_sid2str_get+0x139/0x370 [ 98.221600][ T5447] security_sid_to_context_core+0x30d/0x5d0 [ 98.221614][ T5447] security_sid_to_context+0x2e/0x50 [ 98.221627][ T5447] avc_audit_post_callback+0x107/0x780 [ 98.221647][ T5447] ? audit_log_format+0xdb/0x140 [ 98.221665][ T5447] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 98.221684][ T5447] ? __cfi_audit_log_format+0x10/0x10 [ 98.221702][ T5447] ? audit_log_untrustedstring+0xea/0x100 [ 98.221720][ T5447] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 98.221758][ T5447] common_lsm_audit+0x147d/0x1860 [ 98.221777][ T5447] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 98.221798][ T5447] ? __asan_memset+0x39/0x50 [ 98.221820][ T5447] ? __cfi_common_lsm_audit+0x10/0x10 [ 98.221839][ T5447] ? security_compute_sid+0x1908/0x1a80 [ 98.221854][ T5447] ? d_walk+0x4c5/0x4f0 [ 98.221876][ T5447] slow_avc_audit+0x18d/0x1f0 [ 98.221907][ T5447] ? __cfi_slow_avc_audit+0x10/0x10 [ 98.221926][ T5447] ? avc_denied+0xae/0x180 [ 98.221945][ T5447] ? avc_has_perm_noaudit+0x2b9/0x360 [ 98.221965][ T5447] avc_has_perm+0x1cd/0x220 [ 98.221983][ T5447] ? __cfi_avc_has_perm+0x10/0x10 [ 98.222003][ T5447] ? security_transition_sid+0x79/0xa0 [ 98.222017][ T5447] selinux_inode_init_security_anon+0x2e2/0x4f0 [ 98.222032][ T5447] ? inode_set_ctime_current+0x1ab/0x2e0 [ 98.222050][ T5447] ? __cfi_selinux_inode_init_security_anon+0x10/0x10 [ 98.222066][ T5447] ? alloc_inode+0xdb/0x270 [ 98.222082][ T5447] security_inode_init_security_anon+0x58/0xd0 [ 98.222096][ T5447] anon_inode_make_secure_inode+0xcd/0x150 [ 98.222114][ T5447] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 98.222134][ T5447] __se_sys_memfd_secret+0xde/0x330 [ 98.222154][ T5447] __x64_sys_memfd_secret+0x3c/0x60 [ 98.222172][ T5447] x64_sys_call+0x1ec5/0x2ee0 [ 98.222193][ T5447] do_syscall_64+0x58/0xf0 [ 98.222212][ T5447] ? clear_bhb_loop+0x50/0xa0 [ 98.222229][ T5447] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 98.222251][ T5447] RIP: 0033:0x7fb84a18ebe9 [ 98.222263][ T5447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 98.222274][ T5447] RSP: 002b:00007fb84b048038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 98.222290][ T5447] RAX: ffffffffffffffda RBX: 00007fb84a3c5fa0 RCX: 00007fb84a18ebe9 [ 98.222305][ T5447] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 98.222316][ T5447] RBP: 00007fb84b048090 R08: 0000000000000000 R09: 0000000000000000 [ 98.222328][ T5447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 98.222339][ T5447] R13: 00007fb84a3c6038 R14: 00007fb84a3c5fa0 R15: 00007fffe4151168 [ 98.222356][ T5447] [ 98.825435][ T5479] tap0: tun_chr_ioctl cmd 1074025675 [ 98.830826][ T5479] tap0: persist enabled [ 98.836311][ T5479] tap0: tun_chr_ioctl cmd 1074025675 [ 98.841671][ T5479] tap0: persist disabled [ 98.846927][ T5479] tap0: tun_chr_ioctl cmd 1074025675 [ 98.852322][ T5479] tap0: persist disabled [ 98.938517][ T5498] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1964'. [ 99.252300][ T5535] FAULT_INJECTION: forcing a failure. [ 99.252300][ T5535] name failslab, interval 1, probability 0, space 0, times 0 [ 99.265054][ T5535] CPU: 0 UID: 0 PID: 5535 Comm: syz.1.1978 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 99.265086][ T5535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.265100][ T5535] Call Trace: [ 99.265107][ T5535] [ 99.265115][ T5535] __dump_stack+0x21/0x30 [ 99.265147][ T5535] dump_stack_lvl+0x10c/0x190 [ 99.265173][ T5535] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.265200][ T5535] ? skb_put+0x112/0x1f0 [ 99.265238][ T5535] dump_stack+0x19/0x20 [ 99.265264][ T5535] should_fail_ex+0x3d9/0x530 [ 99.265295][ T5535] should_failslab+0xac/0x100 [ 99.265317][ T5535] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 99.265349][ T5535] ? sidtab_sid2str_get+0x139/0x370 [ 99.265372][ T5535] kmemdup_noprof+0x31/0x80 [ 99.265400][ T5535] sidtab_sid2str_get+0x139/0x370 [ 99.265421][ T5535] security_sid_to_context_core+0x30d/0x5d0 [ 99.265440][ T5535] security_sid_to_context+0x2e/0x50 [ 99.265459][ T5535] avc_audit_post_callback+0x198/0x780 [ 99.265488][ T5535] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 99.265515][ T5535] ? __cfi_audit_log_format+0x10/0x10 [ 99.265541][ T5535] ? audit_log_untrustedstring+0xea/0x100 [ 99.265566][ T5535] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 99.265595][ T5535] common_lsm_audit+0x147d/0x1860 [ 99.265621][ T5535] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 99.265649][ T5535] ? __asan_memset+0x39/0x50 [ 99.265677][ T5535] ? __cfi_common_lsm_audit+0x10/0x10 [ 99.265703][ T5535] ? security_compute_sid+0x1908/0x1a80 [ 99.265723][ T5535] ? d_walk+0x4c5/0x4f0 [ 99.265753][ T5535] slow_avc_audit+0x18d/0x1f0 [ 99.265779][ T5535] ? __cfi_slow_avc_audit+0x10/0x10 [ 99.265806][ T5535] ? avc_denied+0xae/0x180 [ 99.265832][ T5535] ? avc_has_perm_noaudit+0x2b9/0x360 [ 99.265861][ T5535] avc_has_perm+0x1cd/0x220 [ 99.265890][ T5535] ? __cfi_avc_has_perm+0x10/0x10 [ 99.265919][ T5535] ? security_transition_sid+0x79/0xa0 [ 99.265939][ T5535] selinux_inode_init_security_anon+0x2e2/0x4f0 [ 99.265963][ T5535] ? inode_set_ctime_current+0x1ab/0x2e0 [ 99.266010][ T5535] ? __cfi_selinux_inode_init_security_anon+0x10/0x10 [ 99.266033][ T5535] ? alloc_inode+0xdb/0x270 [ 99.266058][ T5535] security_inode_init_security_anon+0x58/0xd0 [ 99.266079][ T5535] anon_inode_make_secure_inode+0xcd/0x150 [ 99.266106][ T5535] ? __cfi_anon_inode_make_secure_inode+0x10/0x10 [ 99.266135][ T5535] __se_sys_memfd_secret+0xde/0x330 [ 99.266163][ T5535] __x64_sys_memfd_secret+0x3c/0x60 [ 99.266191][ T5535] x64_sys_call+0x1ec5/0x2ee0 [ 99.266228][ T5535] do_syscall_64+0x58/0xf0 [ 99.266257][ T5535] ? clear_bhb_loop+0x50/0xa0 [ 99.266282][ T5535] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.266306][ T5535] RIP: 0033:0x7fb84a18ebe9 [ 99.266324][ T5535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.266341][ T5535] RSP: 002b:00007fb84b048038 EFLAGS: 00000246 ORIG_RAX: 00000000000001bf [ 99.266365][ T5535] RAX: ffffffffffffffda RBX: 00007fb84a3c5fa0 RCX: 00007fb84a18ebe9 [ 99.266381][ T5535] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000080000 [ 99.266395][ T5535] RBP: 00007fb84b048090 R08: 0000000000000000 R09: 0000000000000000 [ 99.266409][ T5535] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.266421][ T5535] R13: 00007fb84a3c6038 R14: 00007fb84a3c5fa0 R15: 00007fffe4151168 [ 99.266440][ T5535] [ 99.771157][ T5570] FAULT_INJECTION: forcing a failure. [ 99.771157][ T5570] name failslab, interval 1, probability 0, space 0, times 0 [ 99.785934][ T5570] CPU: 1 UID: 0 PID: 5570 Comm: syz.1.1994 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 99.785977][ T5570] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 99.785990][ T5570] Call Trace: [ 99.785997][ T5570] [ 99.786006][ T5570] __dump_stack+0x21/0x30 [ 99.786040][ T5570] dump_stack_lvl+0x10c/0x190 [ 99.786068][ T5570] ? __cfi_dump_stack_lvl+0x10/0x10 [ 99.786098][ T5570] ? pointer+0xdd0/0xdd0 [ 99.786137][ T5570] dump_stack+0x19/0x20 [ 99.786165][ T5570] should_fail_ex+0x3d9/0x530 [ 99.786200][ T5570] should_failslab+0xac/0x100 [ 99.786222][ T5570] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 99.786255][ T5570] ? sidtab_sid2str_get+0x139/0x370 [ 99.786280][ T5570] kmemdup_noprof+0x31/0x80 [ 99.786311][ T5570] sidtab_sid2str_get+0x139/0x370 [ 99.786335][ T5570] security_sid_to_context_core+0x30d/0x5d0 [ 99.786356][ T5570] security_sid_to_context+0x2e/0x50 [ 99.786381][ T5570] avc_audit_post_callback+0x107/0x780 [ 99.786411][ T5570] ? audit_log_format+0xdb/0x140 [ 99.786437][ T5570] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 99.786468][ T5570] ? __cfi_audit_log_format+0x10/0x10 [ 99.786494][ T5570] ? audit_log_untrustedstring+0xea/0x100 [ 99.786521][ T5570] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 99.786550][ T5570] common_lsm_audit+0x147d/0x1860 [ 99.786579][ T5570] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 99.786608][ T5570] ? __cfi_common_lsm_audit+0x10/0x10 [ 99.786637][ T5570] ? _parse_integer+0x2e/0x40 [ 99.786666][ T5570] ? kstrtoull+0x13b/0x1e0 [ 99.786695][ T5570] slow_avc_audit+0x18d/0x1f0 [ 99.786724][ T5570] ? __cfi_slow_avc_audit+0x10/0x10 [ 99.786754][ T5570] ? avc_denied+0xae/0x180 [ 99.786783][ T5570] ? avc_has_perm_noaudit+0x2b9/0x360 [ 99.786814][ T5570] avc_has_perm+0x1cd/0x220 [ 99.786843][ T5570] ? __cfi_avc_has_perm+0x10/0x10 [ 99.786871][ T5570] ? bpf_lsm_file_permission+0xd/0x20 [ 99.786901][ T5570] ? vfs_write+0x8ba/0xe80 [ 99.786921][ T5570] selinux_file_fcntl+0xaa3/0x1050 [ 99.786946][ T5570] ? __cfi_selinux_file_fcntl+0x10/0x10 [ 99.786971][ T5570] ? __cfi_mutex_unlock+0x10/0x10 [ 99.786992][ T5570] ? __fget_files+0x2c5/0x340 [ 99.787017][ T5570] security_file_fcntl+0x58/0xd0 [ 99.787041][ T5570] __se_sys_fcntl+0xa4/0x180 [ 99.787061][ T5570] __x64_sys_fcntl+0x7f/0xa0 [ 99.787081][ T5570] x64_sys_call+0x1cb3/0x2ee0 [ 99.787111][ T5570] do_syscall_64+0x58/0xf0 [ 99.787149][ T5570] ? clear_bhb_loop+0x50/0xa0 [ 99.787175][ T5570] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 99.787198][ T5570] RIP: 0033:0x7fb84a18ebe9 [ 99.787216][ T5570] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 99.787235][ T5570] RSP: 002b:00007fb84b048038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 99.787258][ T5570] RAX: ffffffffffffffda RBX: 00007fb84a3c5fa0 RCX: 00007fb84a18ebe9 [ 99.787274][ T5570] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 99.787287][ T5570] RBP: 00007fb84b048090 R08: 0000000000000000 R09: 0000000000000000 [ 99.787300][ T5570] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 99.787312][ T5570] R13: 00007fb84a3c6038 R14: 00007fb84a3c5fa0 R15: 00007fffe4151168 [ 99.787330][ T5570] [ 100.198031][ T5580] x_tables: duplicate underflow at hook 4 [ 100.361945][ T5599] FAULT_INJECTION: forcing a failure. [ 100.361945][ T5599] name failslab, interval 1, probability 0, space 0, times 0 [ 100.374713][ T5599] CPU: 1 UID: 0 PID: 5599 Comm: syz.0.2006 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 100.374745][ T5599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.374758][ T5599] Call Trace: [ 100.374765][ T5599] [ 100.374773][ T5599] __dump_stack+0x21/0x30 [ 100.374804][ T5599] dump_stack_lvl+0x10c/0x190 [ 100.374830][ T5599] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.374858][ T5599] ? cred_has_capability+0x281/0x380 [ 100.374883][ T5599] dump_stack+0x19/0x20 [ 100.374907][ T5599] should_fail_ex+0x3d9/0x530 [ 100.374938][ T5599] should_failslab+0xac/0x100 [ 100.374960][ T5599] kmem_cache_alloc_noprof+0x42/0x3a0 [ 100.374990][ T5599] ? getname_flags+0xc6/0x710 [ 100.375011][ T5599] getname_flags+0xc6/0x710 [ 100.375030][ T5599] ? security_capable+0xcf/0xf0 [ 100.375059][ T5599] user_path_at+0x2b/0x60 [ 100.375082][ T5599] __se_sys_move_mount+0x1c9/0xb20 [ 100.375105][ T5599] ? __x64_sys_move_mount+0xf0/0xf0 [ 100.375125][ T5599] ? __cfi_ksys_write+0x10/0x10 [ 100.375147][ T5599] __x64_sys_move_mount+0xc3/0xf0 [ 100.375168][ T5599] x64_sys_call+0x2342/0x2ee0 [ 100.375198][ T5599] do_syscall_64+0x58/0xf0 [ 100.375227][ T5599] ? clear_bhb_loop+0x50/0xa0 [ 100.375251][ T5599] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.375274][ T5599] RIP: 0033:0x7f04a518ebe9 [ 100.375292][ T5599] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 100.375310][ T5599] RSP: 002b:00007f04a5f60038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 100.375334][ T5599] RAX: ffffffffffffffda RBX: 00007f04a53c5fa0 RCX: 00007f04a518ebe9 [ 100.375349][ T5599] RDX: ffffffffffffff9c RSI: 00002000000001c0 RDI: 0000000000000003 [ 100.375373][ T5599] RBP: 00007f04a5f60090 R08: 0000000000000103 R09: 0000000000000000 [ 100.375387][ T5599] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 100.375400][ T5599] R13: 00007f04a53c6038 R14: 00007f04a53c5fa0 R15: 00007ffd0867f748 [ 100.375418][ T5599] [ 100.610980][ T36] kauditd_printk_skb: 568 callbacks suppressed [ 100.610999][ T36] audit: type=1400 audit(1757010625.954:8006): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.641486][ T36] audit: type=1400 audit(1757010625.963:8007): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.665582][ T36] audit: type=1400 audit(1757010625.963:8008): avc: denied { read write } for pid=5613 comm="syz.0.2013" name="rnullb0" dev="devtmpfs" ino=31 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=0 [ 100.690634][ T36] audit: type=1400 audit(1757010625.963:8009): avc: denied { create } for pid=5613 comm="syz.0.2013" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=0 [ 100.711431][ T36] audit: type=1400 audit(1757010625.991:8010): avc: denied { read write } for pid=5613 comm="syz.0.2013" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 100.734751][ T36] audit: type=1400 audit(1757010625.991:8011): avc: denied { mounton } for pid=5613 comm="syz.0.2013" path="/470/file0" dev="tmpfs" ino=2561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 100.757438][ T36] audit: type=1400 audit(1757010625.991:8012): avc: denied { read write } for pid=5613 comm="syz.0.2013" name="fuse" dev="devtmpfs" ino=23 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=0 [ 100.780881][ T36] audit: type=1400 audit(1757010625.991:8013): avc: denied { mounton } for pid=5613 comm="syz.0.2013" path="/470/file0" dev="tmpfs" ino=2561 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 100.803837][ T36] audit: type=1400 audit(1757010625.991:8014): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 100.828020][ T36] audit: type=1400 audit(1757010625.991:8015): avc: denied { mounton } for pid=5616 comm="syz.0.2014" path="/471/file1/file0" dev="tmpfs" ino=2569 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 100.860795][ T5633] FAULT_INJECTION: forcing a failure. [ 100.860795][ T5633] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 100.874032][ T5633] CPU: 0 UID: 0 PID: 5633 Comm: syz.0.2022 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 100.874063][ T5633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 100.874112][ T5633] Call Trace: [ 100.874119][ T5633] [ 100.874128][ T5633] __dump_stack+0x21/0x30 [ 100.874160][ T5633] dump_stack_lvl+0x10c/0x190 [ 100.874187][ T5633] ? __cfi_dump_stack_lvl+0x10/0x10 [ 100.874216][ T5633] ? check_stack_object+0x12c/0x140 [ 100.874238][ T5633] dump_stack+0x19/0x20 [ 100.874265][ T5633] should_fail_ex+0x3d9/0x530 [ 100.874297][ T5633] should_fail+0xf/0x20 [ 100.874327][ T5633] should_fail_usercopy+0x1e/0x30 [ 100.874348][ T5633] _copy_to_user+0x24/0xa0 [ 100.874372][ T5633] simple_read_from_buffer+0xed/0x160 [ 100.874401][ T5633] proc_fail_nth_read+0x19e/0x210 [ 100.874429][ T5633] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 100.874458][ T5633] ? bpf_lsm_file_permission+0xd/0x20 [ 100.874487][ T5633] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 100.874516][ T5633] vfs_read+0x27b/0xb60 [ 100.874534][ T5633] ? mapping_shrinkable+0x140/0x140 [ 100.874564][ T5633] ? __cfi__raw_spin_lock+0x10/0x10 [ 100.874594][ T5633] ? __cfi_vfs_read+0x10/0x10 [ 100.874612][ T5633] ? __kasan_check_write+0x18/0x20 [ 100.874644][ T5633] ? mutex_lock+0x92/0x1c0 [ 100.874666][ T5633] ? __cfi_mutex_lock+0x10/0x10 [ 100.874687][ T5633] ? __fget_files+0x2c5/0x340 [ 100.874712][ T5633] ksys_read+0x141/0x250 [ 100.874731][ T5633] ? __cfi_ksys_read+0x10/0x10 [ 100.874749][ T5633] ? _raw_spin_unlock+0x45/0x60 [ 100.874779][ T5633] ? __kasan_check_read+0x15/0x20 [ 100.874809][ T5633] __x64_sys_read+0x7f/0x90 [ 100.874829][ T5633] x64_sys_call+0x2638/0x2ee0 [ 100.874860][ T5633] do_syscall_64+0x58/0xf0 [ 100.874890][ T5633] ? clear_bhb_loop+0x50/0xa0 [ 100.874915][ T5633] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 100.874940][ T5633] RIP: 0033:0x7f04a518d5fc [ 100.874957][ T5633] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 100.874974][ T5633] RSP: 002b:00007f04a5f60030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 100.874996][ T5633] RAX: ffffffffffffffda RBX: 00007f04a53c5fa0 RCX: 00007f04a518d5fc [ 100.875012][ T5633] RDX: 000000000000000f RSI: 00007f04a5f600a0 RDI: 0000000000000003 [ 100.875025][ T5633] RBP: 00007f04a5f60090 R08: 0000000000000000 R09: 0000000000000000 [ 100.875039][ T5633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 100.875051][ T5633] R13: 00007f04a53c6038 R14: 00007f04a53c5fa0 R15: 00007ffd0867f748 [ 100.875076][ T5633] [ 101.464096][ T5639] tc_dump_action: action bad kind [ 101.517952][ T5677] FAULT_INJECTION: forcing a failure. [ 101.517952][ T5677] name failslab, interval 1, probability 0, space 0, times 0 [ 101.530726][ T5677] CPU: 1 UID: 0 PID: 5677 Comm: syz.1.2041 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 101.530756][ T5677] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 101.530770][ T5677] Call Trace: [ 101.530777][ T5677] [ 101.530785][ T5677] __dump_stack+0x21/0x30 [ 101.530816][ T5677] dump_stack_lvl+0x10c/0x190 [ 101.530844][ T5677] ? __cfi_dump_stack_lvl+0x10/0x10 [ 101.530873][ T5677] ? skb_put+0x112/0x1f0 [ 101.530903][ T5677] dump_stack+0x19/0x20 [ 101.530929][ T5677] should_fail_ex+0x3d9/0x530 [ 101.530962][ T5677] should_failslab+0xac/0x100 [ 101.530985][ T5677] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 101.531026][ T5677] ? sidtab_sid2str_get+0x139/0x370 [ 101.531049][ T5677] kmemdup_noprof+0x31/0x80 [ 101.531078][ T5677] sidtab_sid2str_get+0x139/0x370 [ 101.531101][ T5677] security_sid_to_context_core+0x30d/0x5d0 [ 101.531123][ T5677] security_sid_to_context+0x2e/0x50 [ 101.531142][ T5677] avc_audit_post_callback+0x198/0x780 [ 101.531170][ T5677] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 101.531198][ T5677] ? __cfi_audit_log_format+0x10/0x10 [ 101.531226][ T5677] ? audit_log_untrustedstring+0xea/0x100 [ 101.531252][ T5677] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 101.531281][ T5677] common_lsm_audit+0x147d/0x1860 [ 101.531308][ T5677] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 101.531337][ T5677] ? __cfi_common_lsm_audit+0x10/0x10 [ 101.531367][ T5677] ? _parse_integer+0x2e/0x40 [ 101.531396][ T5677] ? kstrtoull+0x13b/0x1e0 [ 101.531425][ T5677] slow_avc_audit+0x18d/0x1f0 [ 101.531454][ T5677] ? __cfi_slow_avc_audit+0x10/0x10 [ 101.531484][ T5677] ? avc_denied+0xae/0x180 [ 101.531512][ T5677] ? avc_has_perm_noaudit+0x2b9/0x360 [ 101.531542][ T5677] avc_has_perm+0x1cd/0x220 [ 101.531570][ T5677] ? __cfi_avc_has_perm+0x10/0x10 [ 101.531597][ T5677] ? bpf_lsm_file_permission+0xd/0x20 [ 101.531627][ T5677] ? vfs_write+0x8ba/0xe80 [ 101.531646][ T5677] selinux_file_fcntl+0xaa3/0x1050 [ 101.531672][ T5677] ? __cfi_selinux_file_fcntl+0x10/0x10 [ 101.531697][ T5677] ? __cfi_mutex_unlock+0x10/0x10 [ 101.531719][ T5677] ? __fget_files+0x2c5/0x340 [ 101.531745][ T5677] security_file_fcntl+0x58/0xd0 [ 101.531769][ T5677] __se_sys_fcntl+0xa4/0x180 [ 101.531791][ T5677] __x64_sys_fcntl+0x7f/0xa0 [ 101.531811][ T5677] x64_sys_call+0x1cb3/0x2ee0 [ 101.531840][ T5677] do_syscall_64+0x58/0xf0 [ 101.531867][ T5677] ? clear_bhb_loop+0x50/0xa0 [ 101.531891][ T5677] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 101.531914][ T5677] RIP: 0033:0x7fb84a18ebe9 [ 101.531929][ T5677] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.531947][ T5677] RSP: 002b:00007fb84b048038 EFLAGS: 00000246 ORIG_RAX: 0000000000000048 [ 101.531968][ T5677] RAX: ffffffffffffffda RBX: 00007fb84a3c5fa0 RCX: 00007fb84a18ebe9 [ 101.531984][ T5677] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000004 [ 101.531996][ T5677] RBP: 00007fb84b048090 R08: 0000000000000000 R09: 0000000000000000 [ 101.532009][ T5677] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 101.532030][ T5677] R13: 00007fb84a3c6038 R14: 00007fb84a3c5fa0 R15: 00007fffe4151168 [ 101.532048][ T5677] [ 101.593331][ T5682] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=5682 comm=syz.0.2043 [ 102.386971][ T5766] FAULT_INJECTION: forcing a failure. [ 102.386971][ T5766] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 102.400285][ T5766] CPU: 1 UID: 0 PID: 5766 Comm: syz.3.2081 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 102.400318][ T5766] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.400330][ T5766] Call Trace: [ 102.400337][ T5766] [ 102.400346][ T5766] __dump_stack+0x21/0x30 [ 102.400378][ T5766] dump_stack_lvl+0x10c/0x190 [ 102.400406][ T5766] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.400433][ T5766] ? check_stack_object+0x12c/0x140 [ 102.400453][ T5766] dump_stack+0x19/0x20 [ 102.400478][ T5766] should_fail_ex+0x3d9/0x530 [ 102.400508][ T5766] should_fail+0xf/0x20 [ 102.400530][ T5766] should_fail_usercopy+0x1e/0x30 [ 102.400545][ T5766] _copy_to_user+0x24/0xa0 [ 102.400563][ T5766] simple_read_from_buffer+0xed/0x160 [ 102.400584][ T5766] proc_fail_nth_read+0x19e/0x210 [ 102.400605][ T5766] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 102.400629][ T5766] ? avc_has_perm+0x1f2/0x220 [ 102.400658][ T5766] ? bpf_lsm_file_permission+0xd/0x20 [ 102.400688][ T5766] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 102.400714][ T5766] vfs_read+0x27b/0xb60 [ 102.400734][ T5766] ? __cfi_vfs_read+0x10/0x10 [ 102.400753][ T5766] ? __kasan_check_write+0x18/0x20 [ 102.400777][ T5766] ? mutex_lock+0x92/0x1c0 [ 102.400800][ T5766] ? __cfi_mutex_lock+0x10/0x10 [ 102.400822][ T5766] ? __fget_files+0x2c5/0x340 [ 102.400846][ T5766] ksys_read+0x141/0x250 [ 102.400865][ T5766] ? __cfi_ksys_read+0x10/0x10 [ 102.400882][ T5766] ? __kasan_check_write+0x18/0x20 [ 102.400910][ T5766] ? fput+0x1a5/0x240 [ 102.400934][ T5766] ? __kasan_check_read+0x15/0x20 [ 102.400963][ T5766] __x64_sys_read+0x7f/0x90 [ 102.400983][ T5766] x64_sys_call+0x2638/0x2ee0 [ 102.401012][ T5766] do_syscall_64+0x58/0xf0 [ 102.401039][ T5766] ? clear_bhb_loop+0x50/0xa0 [ 102.401065][ T5766] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.401088][ T5766] RIP: 0033:0x7ff0ebd8d5fc [ 102.401106][ T5766] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 102.401123][ T5766] RSP: 002b:00007ff0ecc0a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 102.401146][ T5766] RAX: ffffffffffffffda RBX: 00007ff0ebfc5fa0 RCX: 00007ff0ebd8d5fc [ 102.401163][ T5766] RDX: 000000000000000f RSI: 00007ff0ecc0a0a0 RDI: 0000000000000005 [ 102.401173][ T5766] RBP: 00007ff0ecc0a090 R08: 0000000000000000 R09: 0000000000000000 [ 102.401182][ T5766] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.401192][ T5766] R13: 00007ff0ebfc6038 R14: 00007ff0ebfc5fa0 R15: 00007fff79ad9918 [ 102.401220][ T5766] [ 102.811639][ T5777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'. [ 102.821023][ T5777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'. [ 102.830178][ T5777] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2086'. [ 102.857917][ T5782] FAULT_INJECTION: forcing a failure. [ 102.857917][ T5782] name failslab, interval 1, probability 0, space 0, times 0 [ 102.870622][ T5782] CPU: 0 UID: 0 PID: 5782 Comm: syz.3.2087 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 102.870656][ T5782] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 102.870670][ T5782] Call Trace: [ 102.870678][ T5782] [ 102.870686][ T5782] __dump_stack+0x21/0x30 [ 102.870722][ T5782] dump_stack_lvl+0x10c/0x190 [ 102.870745][ T5782] ? __cfi_dump_stack_lvl+0x10/0x10 [ 102.870767][ T5782] dump_stack+0x19/0x20 [ 102.870786][ T5782] should_fail_ex+0x3d9/0x530 [ 102.870819][ T5782] should_failslab+0xac/0x100 [ 102.870843][ T5782] kmem_cache_alloc_noprof+0x42/0x3a0 [ 102.870875][ T5782] ? getname_flags+0xc6/0x710 [ 102.870892][ T5782] getname_flags+0xc6/0x710 [ 102.870914][ T5782] user_path_at+0x2b/0x60 [ 102.870931][ T5782] __se_sys_move_mount+0x21f/0xb20 [ 102.870948][ T5782] ? __x64_sys_move_mount+0xf0/0xf0 [ 102.870975][ T5782] ? __cfi_ksys_write+0x10/0x10 [ 102.870990][ T5782] __x64_sys_move_mount+0xc3/0xf0 [ 102.871004][ T5782] x64_sys_call+0x2342/0x2ee0 [ 102.871027][ T5782] do_syscall_64+0x58/0xf0 [ 102.871048][ T5782] ? clear_bhb_loop+0x50/0xa0 [ 102.871066][ T5782] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 102.871084][ T5782] RIP: 0033:0x7ff0ebd8ebe9 [ 102.871096][ T5782] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 102.871109][ T5782] RSP: 002b:00007ff0ecc0a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 102.871126][ T5782] RAX: ffffffffffffffda RBX: 00007ff0ebfc5fa0 RCX: 00007ff0ebd8ebe9 [ 102.871138][ T5782] RDX: ffffffffffffff9c RSI: 00002000000001c0 RDI: 0000000000000003 [ 102.871149][ T5782] RBP: 00007ff0ecc0a090 R08: 0000000000000103 R09: 0000000000000000 [ 102.871160][ T5782] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 102.871170][ T5782] R13: 00007ff0ebfc6038 R14: 00007ff0ebfc5fa0 R15: 00007fff79ad9918 [ 102.871183][ T5782] [ 103.074472][ T5786] x_tables: duplicate entry at hook 1 [ 103.126144][ T5791] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2091'. [ 103.569445][ T5820] FAULT_INJECTION: forcing a failure. [ 103.569445][ T5820] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 103.582624][ T5820] CPU: 0 UID: 0 PID: 5820 Comm: syz.0.2103 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 103.582656][ T5820] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.582667][ T5820] Call Trace: [ 103.582673][ T5820] [ 103.582679][ T5820] __dump_stack+0x21/0x30 [ 103.582704][ T5820] dump_stack_lvl+0x10c/0x190 [ 103.582725][ T5820] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.582747][ T5820] dump_stack+0x19/0x20 [ 103.582765][ T5820] should_fail_ex+0x3d9/0x530 [ 103.582789][ T5820] should_fail+0xf/0x20 [ 103.582812][ T5820] should_fail_usercopy+0x1e/0x30 [ 103.582835][ T5820] _copy_from_user+0x22/0xb0 [ 103.582867][ T5820] __se_sys_io_uring_setup+0x139/0x260 [ 103.582890][ T5820] ? __x64_sys_io_uring_setup+0x80/0x80 [ 103.582910][ T5820] ? __kasan_check_read+0x15/0x20 [ 103.582932][ T5820] __x64_sys_io_uring_setup+0x5f/0x80 [ 103.582950][ T5820] x64_sys_call+0x22c0/0x2ee0 [ 103.582973][ T5820] do_syscall_64+0x58/0xf0 [ 103.582995][ T5820] ? clear_bhb_loop+0x50/0xa0 [ 103.583013][ T5820] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.583030][ T5820] RIP: 0033:0x7f04a518ebe9 [ 103.583043][ T5820] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.583056][ T5820] RSP: 002b:00007f04a5f5ffc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 103.583073][ T5820] RAX: ffffffffffffffda RBX: 00007f04a53c5fa0 RCX: 00007f04a518ebe9 [ 103.583084][ T5820] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111 [ 103.583094][ T5820] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 103.583105][ T5820] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 103.583115][ T5820] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000 [ 103.583126][ T5820] [ 103.818211][ T5842] FAULT_INJECTION: forcing a failure. [ 103.818211][ T5842] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 103.831521][ T5842] CPU: 1 UID: 0 PID: 5842 Comm: syz.0.2113 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 103.831553][ T5842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 103.831565][ T5842] Call Trace: [ 103.831571][ T5842] [ 103.831581][ T5842] __dump_stack+0x21/0x30 [ 103.831611][ T5842] dump_stack_lvl+0x10c/0x190 [ 103.831634][ T5842] ? __cfi_dump_stack_lvl+0x10/0x10 [ 103.831657][ T5842] ? _parse_integer_limit+0x195/0x1e0 [ 103.831683][ T5842] dump_stack+0x19/0x20 [ 103.831704][ T5842] should_fail_ex+0x3d9/0x530 [ 103.831730][ T5842] should_fail_alloc_page+0xeb/0x110 [ 103.831749][ T5842] __alloc_pages_noprof+0x19b/0x7b0 [ 103.831771][ T5842] ? kstrtouint+0x78/0xf0 [ 103.831811][ T5842] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 103.831835][ T5842] ? kstrtouint_from_user+0xfb/0x150 [ 103.831861][ T5842] ? x64_sys_call+0xe69/0x2ee0 [ 103.831886][ T5842] ? avc_policy_seqno+0xd/0x30 [ 103.831910][ T5842] ? selinux_file_permission+0x309/0xb30 [ 103.831932][ T5842] ? __cfi_selinux_file_permission+0x10/0x10 [ 103.831953][ T5842] get_zeroed_page_noprof+0x1f/0x50 [ 103.831975][ T5842] simple_transaction_get+0x5e/0x1e0 [ 103.831998][ T5842] selinux_transaction_write+0xd6/0x180 [ 103.832022][ T5842] ? __cfi_selinux_transaction_write+0x10/0x10 [ 103.832045][ T5842] vfs_write+0x3c0/0xe80 [ 103.832061][ T5842] ? __cfi_vfs_write+0x10/0x10 [ 103.832077][ T5842] ? __kasan_check_write+0x18/0x20 [ 103.832111][ T5842] ? mutex_lock+0x92/0x1c0 [ 103.832129][ T5842] ? __cfi_mutex_lock+0x10/0x10 [ 103.832146][ T5842] ? __fget_files+0x2c5/0x340 [ 103.832167][ T5842] ksys_write+0x141/0x250 [ 103.832182][ T5842] ? __cfi_ksys_write+0x10/0x10 [ 103.832198][ T5842] ? __kasan_check_read+0x15/0x20 [ 103.832223][ T5842] __x64_sys_write+0x7f/0x90 [ 103.832238][ T5842] x64_sys_call+0x271c/0x2ee0 [ 103.832263][ T5842] do_syscall_64+0x58/0xf0 [ 103.832288][ T5842] ? clear_bhb_loop+0x50/0xa0 [ 103.832310][ T5842] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 103.832330][ T5842] RIP: 0033:0x7f04a518ebe9 [ 103.832344][ T5842] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.832360][ T5842] RSP: 002b:00007f04a5f60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 103.832379][ T5842] RAX: ffffffffffffffda RBX: 00007f04a53c5fa0 RCX: 00007f04a518ebe9 [ 103.832393][ T5842] RDX: 000000000000000d RSI: 0000200000008dc0 RDI: 0000000000000004 [ 103.832405][ T5842] RBP: 00007f04a5f60090 R08: 0000000000000000 R09: 0000000000000000 [ 103.832416][ T5842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 103.832427][ T5842] R13: 00007f04a53c6038 R14: 00007f04a53c5fa0 R15: 00007ffd0867f748 [ 103.832443][ T5842] [ 103.862956][ T5844] futex_wake_op: syz.1.2114 tries to shift op by -1; fix this program [ 104.130431][ T5863] FAULT_INJECTION: forcing a failure. [ 104.130431][ T5863] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.143643][ T5863] CPU: 1 UID: 0 PID: 5863 Comm: syz.3.2121 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 104.143676][ T5863] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.143689][ T5863] Call Trace: [ 104.143695][ T5863] [ 104.143703][ T5863] __dump_stack+0x21/0x30 [ 104.143735][ T5863] dump_stack_lvl+0x10c/0x190 [ 104.143761][ T5863] ? __cfi_dump_stack_lvl+0x10/0x10 [ 104.143790][ T5863] dump_stack+0x19/0x20 [ 104.143815][ T5863] should_fail_ex+0x3d9/0x530 [ 104.143845][ T5863] should_fail+0xf/0x20 [ 104.143874][ T5863] should_fail_usercopy+0x1e/0x30 [ 104.143894][ T5863] strncpy_from_user+0x28/0x270 [ 104.143930][ T5863] ? getname_flags+0xc6/0x710 [ 104.143951][ T5863] getname_flags+0x102/0x710 [ 104.143971][ T5863] user_path_at+0x2b/0x60 [ 104.143994][ T5863] __se_sys_move_mount+0x21f/0xb20 [ 104.144016][ T5863] ? __x64_sys_move_mount+0xf0/0xf0 [ 104.144053][ T5863] ? __cfi_ksys_write+0x10/0x10 [ 104.144075][ T5863] __x64_sys_move_mount+0xc3/0xf0 [ 104.144113][ T5863] x64_sys_call+0x2342/0x2ee0 [ 104.144143][ T5863] do_syscall_64+0x58/0xf0 [ 104.144172][ T5863] ? clear_bhb_loop+0x50/0xa0 [ 104.144197][ T5863] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 104.144220][ T5863] RIP: 0033:0x7ff0ebd8ebe9 [ 104.144237][ T5863] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.144254][ T5863] RSP: 002b:00007ff0ecc0a038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 104.144277][ T5863] RAX: ffffffffffffffda RBX: 00007ff0ebfc5fa0 RCX: 00007ff0ebd8ebe9 [ 104.144292][ T5863] RDX: ffffffffffffff9c RSI: 00002000000001c0 RDI: 0000000000000003 [ 104.144316][ T5863] RBP: 00007ff0ecc0a090 R08: 0000000000000103 R09: 0000000000000000 [ 104.144329][ T5863] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 104.144342][ T5863] R13: 00007ff0ebfc6038 R14: 00007ff0ebfc5fa0 R15: 00007fff79ad9918 [ 104.144359][ T5863] [ 104.379524][ T5877] FAULT_INJECTION: forcing a failure. [ 104.379524][ T5877] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 104.392680][ T5877] CPU: 0 UID: 0 PID: 5877 Comm: syz.3.2128 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 104.392710][ T5877] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 104.392721][ T5877] Call Trace: [ 104.392727][ T5877] [ 104.392735][ T5877] __dump_stack+0x21/0x30 [ 104.392762][ T5877] dump_stack_lvl+0x10c/0x190 [ 104.392782][ T5877] ? __cfi_dump_stack_lvl+0x10/0x10 [ 104.392803][ T5877] ? proc_fail_nth_write+0x17e/0x210 [ 104.392824][ T5877] ? check_stack_object+0x107/0x140 [ 104.392838][ T5877] dump_stack+0x19/0x20 [ 104.392858][ T5877] should_fail_ex+0x3d9/0x530 [ 104.392881][ T5877] should_fail+0xf/0x20 [ 104.392902][ T5877] should_fail_usercopy+0x1e/0x30 [ 104.392917][ T5877] _copy_from_user+0x22/0xb0 [ 104.392935][ T5877] __tun_chr_ioctl+0x1f2/0x1f10 [ 104.392949][ T5877] ? __kasan_check_write+0x18/0x20 [ 104.392971][ T5877] ? tun_flow_create+0x410/0x410 [ 104.392990][ T5877] ? __fget_files+0x2c5/0x340 [ 104.393008][ T5877] ? __fget_files+0x2c5/0x340 [ 104.393024][ T5877] tun_chr_ioctl+0x2e/0x40 [ 104.393046][ T5877] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 104.393068][ T5877] __se_sys_ioctl+0x135/0x1b0 [ 104.393085][ T5877] __x64_sys_ioctl+0x7f/0xa0 [ 104.393101][ T5877] x64_sys_call+0x1878/0x2ee0 [ 104.393123][ T5877] do_syscall_64+0x58/0xf0 [ 104.393144][ T5877] ? clear_bhb_loop+0x50/0xa0 [ 104.393162][ T5877] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 104.393179][ T5877] RIP: 0033:0x7ff0ebd8ebe9 [ 104.393192][ T5877] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.393205][ T5877] RSP: 002b:00007ff0ecc0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 104.393221][ T5877] RAX: ffffffffffffffda RBX: 00007ff0ebfc5fa0 RCX: 00007ff0ebd8ebe9 [ 104.393233][ T5877] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000004 [ 104.393243][ T5877] RBP: 00007ff0ecc0a090 R08: 0000000000000000 R09: 0000000000000000 [ 104.393253][ T5877] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 104.393263][ T5877] R13: 00007ff0ebfc6038 R14: 00007ff0ebfc5fa0 R15: 00007fff79ad9918 [ 104.393276][ T5877] [ 104.696474][ T5883] netlink: 'syz.3.2130': attribute type 13 has an invalid length. [ 105.081599][ T5903] FAULT_INJECTION: forcing a failure. [ 105.081599][ T5903] name failslab, interval 1, probability 0, space 0, times 0 [ 105.094562][ T5903] CPU: 1 UID: 0 PID: 5903 Comm: syz.1.2138 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 105.094595][ T5903] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 105.094608][ T5903] Call Trace: [ 105.094614][ T5903] [ 105.094622][ T5903] __dump_stack+0x21/0x30 [ 105.094655][ T5903] dump_stack_lvl+0x10c/0x190 [ 105.094681][ T5903] ? __cfi_dump_stack_lvl+0x10/0x10 [ 105.094709][ T5903] dump_stack+0x19/0x20 [ 105.094735][ T5903] should_fail_ex+0x3d9/0x530 [ 105.094767][ T5903] should_failslab+0xac/0x100 [ 105.094789][ T5903] __kmalloc_cache_noprof+0x41/0x3c0 [ 105.094821][ T5903] ? io_ring_ctx_alloc+0x61/0x1e10 [ 105.094847][ T5903] io_ring_ctx_alloc+0x61/0x1e10 [ 105.094874][ T5903] ? __cfi_vfs_write+0x10/0x10 [ 105.094893][ T5903] io_uring_create+0x2e0/0x13d0 [ 105.094920][ T5903] __se_sys_io_uring_setup+0x24b/0x260 [ 105.094943][ T5903] ? __x64_sys_io_uring_setup+0x80/0x80 [ 105.094967][ T5903] ? __kasan_check_read+0x15/0x20 [ 105.095008][ T5903] __x64_sys_io_uring_setup+0x5f/0x80 [ 105.095031][ T5903] x64_sys_call+0x22c0/0x2ee0 [ 105.095060][ T5903] do_syscall_64+0x58/0xf0 [ 105.095089][ T5903] ? clear_bhb_loop+0x50/0xa0 [ 105.095114][ T5903] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 105.095137][ T5903] RIP: 0033:0x7fb84a18ebe9 [ 105.095155][ T5903] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.095172][ T5903] RSP: 002b:00007fb84b047fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 105.095195][ T5903] RAX: ffffffffffffffda RBX: 00007fb84a3c5fa0 RCX: 00007fb84a18ebe9 [ 105.095211][ T5903] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111 [ 105.095224][ T5903] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 105.095238][ T5903] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 105.095251][ T5903] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000 [ 105.095267][ T5903] [ 106.172553][ T36] kauditd_printk_skb: 425 callbacks suppressed [ 106.172570][ T36] audit: type=1400 audit(1757010631.153:8441): avc: denied { read write } for pid=658 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 106.203164][ T36] audit: type=1400 audit(1757010631.162:8442): avc: denied { read } for pid=5926 comm="syz.4.2148" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 106.228636][ T36] audit: type=1326 audit(1757010631.209:8443): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ebd8ebe9 code=0x7fc00000 [ 106.246583][ T658] audit: audit_backlog=65 > audit_backlog_limit=64 [ 106.252392][ T36] audit: type=1326 audit(1757010631.218:8444): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ff0ebd8ebe9 code=0x7fc00000 [ 106.260522][ T658] audit: audit_lost=40 audit_rate_limit=0 audit_backlog_limit=64 [ 106.282320][ T36] audit: type=1326 audit(1757010631.218:8445): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ebd8ebe9 code=0x7fc00000 [ 106.303406][ T658] audit: backlog limit exceeded [ 106.323653][ T36] audit: type=1326 audit(1757010631.218:8446): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=5910 comm="syz.3.2142" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ff0ebd8ebe9 code=0x7fc00000 [ 106.332625][ T288] audit: audit_backlog=65 > audit_backlog_limit=64 [ 106.370992][ T5930] FAULT_INJECTION: forcing a failure. [ 106.370992][ T5930] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 106.398897][ T5930] CPU: 0 UID: 0 PID: 5930 Comm: syz.4.2149 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 106.398931][ T5930] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.398944][ T5930] Call Trace: [ 106.398951][ T5930] [ 106.398960][ T5930] __dump_stack+0x21/0x30 [ 106.398994][ T5930] dump_stack_lvl+0x10c/0x190 [ 106.399022][ T5930] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.399049][ T5930] ? __cfi___alloc_pages_noprof+0x10/0x10 [ 106.399088][ T5930] ? kstrtouint_from_user+0xfb/0x150 [ 106.399118][ T5930] ? x64_sys_call+0xe69/0x2ee0 [ 106.399168][ T5930] dump_stack+0x19/0x20 [ 106.399194][ T5930] should_fail_ex+0x3d9/0x530 [ 106.399227][ T5930] should_fail+0xf/0x20 [ 106.399256][ T5930] should_fail_usercopy+0x1e/0x30 [ 106.399276][ T5930] _copy_from_user+0x22/0xb0 [ 106.399299][ T5930] simple_transaction_get+0x126/0x1e0 [ 106.399326][ T5930] selinux_transaction_write+0xd6/0x180 [ 106.399353][ T5930] ? __cfi_selinux_transaction_write+0x10/0x10 [ 106.399381][ T5930] vfs_write+0x3c0/0xe80 [ 106.399401][ T5930] ? __cfi_vfs_write+0x10/0x10 [ 106.399419][ T5930] ? __kasan_check_write+0x18/0x20 [ 106.399449][ T5930] ? mutex_lock+0x92/0x1c0 [ 106.399471][ T5930] ? __cfi_mutex_lock+0x10/0x10 [ 106.399493][ T5930] ? __fget_files+0x2c5/0x340 [ 106.399530][ T5930] ksys_write+0x141/0x250 [ 106.399548][ T5930] ? __cfi_ksys_write+0x10/0x10 [ 106.399566][ T5930] ? __kasan_check_read+0x15/0x20 [ 106.399597][ T5930] __x64_sys_write+0x7f/0x90 [ 106.399615][ T5930] x64_sys_call+0x271c/0x2ee0 [ 106.399644][ T5930] do_syscall_64+0x58/0xf0 [ 106.399677][ T5930] ? clear_bhb_loop+0x50/0xa0 [ 106.399701][ T5930] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.399724][ T5930] RIP: 0033:0x7f3c3ef8ebe9 [ 106.399741][ T5930] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.399758][ T5930] RSP: 002b:00007f3c3fe4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 106.399781][ T5930] RAX: ffffffffffffffda RBX: 00007f3c3f1c5fa0 RCX: 00007f3c3ef8ebe9 [ 106.399796][ T5930] RDX: 000000000000000d RSI: 0000200000008dc0 RDI: 0000000000000004 [ 106.399809][ T5930] RBP: 00007f3c3fe4b090 R08: 0000000000000000 R09: 0000000000000000 [ 106.399828][ T5930] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 106.399840][ T5930] R13: 00007f3c3f1c6038 R14: 00007f3c3f1c5fa0 R15: 00007ffefffa46c8 [ 106.399858][ T5930] [ 106.950005][ T5988] FAULT_INJECTION: forcing a failure. [ 106.950005][ T5988] name failslab, interval 1, probability 0, space 0, times 0 [ 106.963709][ T5988] CPU: 1 UID: 0 PID: 5988 Comm: syz.3.2173 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 106.963746][ T5988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 106.963760][ T5988] Call Trace: [ 106.963768][ T5988] [ 106.963778][ T5988] __dump_stack+0x21/0x30 [ 106.963811][ T5988] dump_stack_lvl+0x10c/0x190 [ 106.963840][ T5988] ? __cfi_dump_stack_lvl+0x10/0x10 [ 106.963871][ T5988] dump_stack+0x19/0x20 [ 106.963898][ T5988] should_fail_ex+0x3d9/0x530 [ 106.963931][ T5988] should_failslab+0xac/0x100 [ 106.963955][ T5988] __kmalloc_noprof+0x69/0x450 [ 106.963987][ T5988] ? io_alloc_hash_table+0x52/0x160 [ 106.964017][ T5988] io_alloc_hash_table+0x52/0x160 [ 106.964045][ T5988] io_ring_ctx_alloc+0xda/0x1e10 [ 106.964074][ T5988] ? __cfi_vfs_write+0x10/0x10 [ 106.964094][ T5988] io_uring_create+0x2e0/0x13d0 [ 106.964123][ T5988] __se_sys_io_uring_setup+0x24b/0x260 [ 106.964149][ T5988] ? __x64_sys_io_uring_setup+0x80/0x80 [ 106.964177][ T5988] ? __kasan_check_read+0x15/0x20 [ 106.964210][ T5988] __x64_sys_io_uring_setup+0x5f/0x80 [ 106.964234][ T5988] x64_sys_call+0x22c0/0x2ee0 [ 106.964266][ T5988] do_syscall_64+0x58/0xf0 [ 106.964296][ T5988] ? clear_bhb_loop+0x50/0xa0 [ 106.964323][ T5988] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 106.964347][ T5988] RIP: 0033:0x7ff0ebd8ebe9 [ 106.964365][ T5988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.964384][ T5988] RSP: 002b:00007ff0ecc09fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 106.964408][ T5988] RAX: ffffffffffffffda RBX: 00007ff0ebfc5fa0 RCX: 00007ff0ebd8ebe9 [ 106.964426][ T5988] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111 [ 106.964441][ T5988] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 106.964456][ T5988] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 106.964469][ T5988] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000 [ 106.964486][ T5988] [ 107.724032][ T6030] FAULT_INJECTION: forcing a failure. [ 107.724032][ T6030] name failslab, interval 1, probability 0, space 0, times 0 [ 107.736850][ T6030] CPU: 0 UID: 0 PID: 6030 Comm: syz.0.2190 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 107.736884][ T6030] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 107.736898][ T6030] Call Trace: [ 107.736905][ T6030] [ 107.736913][ T6030] __dump_stack+0x21/0x30 [ 107.736945][ T6030] dump_stack_lvl+0x10c/0x190 [ 107.736974][ T6030] ? __cfi_dump_stack_lvl+0x10/0x10 [ 107.737003][ T6030] ? avc_has_perm_noaudit+0x286/0x360 [ 107.737038][ T6030] dump_stack+0x19/0x20 [ 107.737065][ T6030] should_fail_ex+0x3d9/0x530 [ 107.737098][ T6030] should_failslab+0xac/0x100 [ 107.737121][ T6030] __kmalloc_noprof+0x69/0x450 [ 107.737152][ T6030] ? sel_write_user+0x202/0x5c0 [ 107.737180][ T6030] sel_write_user+0x202/0x5c0 [ 107.737219][ T6030] ? __kasan_check_read+0x15/0x20 [ 107.737248][ T6030] ? __check_object_size+0x50a/0x810 [ 107.737266][ T6030] ? __cfi_sel_write_user+0x10/0x10 [ 107.737295][ T6030] ? simple_transaction_get+0x133/0x1e0 [ 107.737322][ T6030] selinux_transaction_write+0x12c/0x180 [ 107.737349][ T6030] ? __cfi_selinux_transaction_write+0x10/0x10 [ 107.737377][ T6030] vfs_write+0x3c0/0xe80 [ 107.737397][ T6030] ? __cfi_vfs_write+0x10/0x10 [ 107.737415][ T6030] ? __kasan_check_write+0x18/0x20 [ 107.737443][ T6030] ? mutex_lock+0x92/0x1c0 [ 107.737465][ T6030] ? __cfi_mutex_lock+0x10/0x10 [ 107.737486][ T6030] ? __fget_files+0x2c5/0x340 [ 107.737519][ T6030] ksys_write+0x141/0x250 [ 107.737540][ T6030] ? __cfi_ksys_write+0x10/0x10 [ 107.737560][ T6030] ? __kasan_check_read+0x15/0x20 [ 107.737587][ T6030] __x64_sys_write+0x7f/0x90 [ 107.737606][ T6030] x64_sys_call+0x271c/0x2ee0 [ 107.737637][ T6030] do_syscall_64+0x58/0xf0 [ 107.737666][ T6030] ? clear_bhb_loop+0x50/0xa0 [ 107.737691][ T6030] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 107.737716][ T6030] RIP: 0033:0x7f04a518ebe9 [ 107.737733][ T6030] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.737752][ T6030] RSP: 002b:00007f04a5f60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 107.737774][ T6030] RAX: ffffffffffffffda RBX: 00007f04a53c5fa0 RCX: 00007f04a518ebe9 [ 107.737790][ T6030] RDX: 000000000000000d RSI: 0000200000008dc0 RDI: 0000000000000004 [ 107.737803][ T6030] RBP: 00007f04a5f60090 R08: 0000000000000000 R09: 0000000000000000 [ 107.737816][ T6030] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.737829][ T6030] R13: 00007f04a53c6038 R14: 00007f04a53c5fa0 R15: 00007ffd0867f748 [ 107.737846][ T6030] [ 108.325475][ T6079] FAULT_INJECTION: forcing a failure. [ 108.325475][ T6079] name failslab, interval 1, probability 0, space 0, times 0 [ 108.347930][ T6079] CPU: 0 UID: 0 PID: 6079 Comm: syz.3.2208 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 108.347962][ T6079] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.347975][ T6079] Call Trace: [ 108.347982][ T6079] [ 108.347991][ T6079] __dump_stack+0x21/0x30 [ 108.348025][ T6079] dump_stack_lvl+0x10c/0x190 [ 108.348053][ T6079] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.348081][ T6079] dump_stack+0x19/0x20 [ 108.348108][ T6079] should_fail_ex+0x3d9/0x530 [ 108.348141][ T6079] should_failslab+0xac/0x100 [ 108.348165][ T6079] __kmalloc_noprof+0x69/0x450 [ 108.348197][ T6079] ? io_alloc_hash_table+0x52/0x160 [ 108.348227][ T6079] io_alloc_hash_table+0x52/0x160 [ 108.348256][ T6079] io_ring_ctx_alloc+0x111/0x1e10 [ 108.348287][ T6079] ? __cfi_vfs_write+0x10/0x10 [ 108.348307][ T6079] io_uring_create+0x2e0/0x13d0 [ 108.348338][ T6079] __se_sys_io_uring_setup+0x24b/0x260 [ 108.348365][ T6079] ? __x64_sys_io_uring_setup+0x80/0x80 [ 108.348393][ T6079] ? __kasan_check_read+0x15/0x20 [ 108.348424][ T6079] __x64_sys_io_uring_setup+0x5f/0x80 [ 108.348458][ T6079] x64_sys_call+0x22c0/0x2ee0 [ 108.348488][ T6079] do_syscall_64+0x58/0xf0 [ 108.348519][ T6079] ? clear_bhb_loop+0x50/0xa0 [ 108.348545][ T6079] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.348569][ T6079] RIP: 0033:0x7ff0ebd8ebe9 [ 108.348587][ T6079] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.348604][ T6079] RSP: 002b:00007ff0ecc09fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 108.348627][ T6079] RAX: ffffffffffffffda RBX: 00007ff0ebfc5fa0 RCX: 00007ff0ebd8ebe9 [ 108.348643][ T6079] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111 [ 108.348656][ T6079] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 108.348668][ T6079] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 108.348680][ T6079] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000 [ 108.348695][ T6079] [ 108.563801][ T6092] netlink: 'syz.1.2215': attribute type 33 has an invalid length. [ 108.579752][ T6092] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2215'. [ 108.728924][ T6128] FAULT_INJECTION: forcing a failure. [ 108.728924][ T6128] name failslab, interval 1, probability 0, space 0, times 0 [ 108.741656][ T6128] CPU: 0 UID: 0 PID: 6128 Comm: syz.1.2227 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 108.741688][ T6128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.741701][ T6128] Call Trace: [ 108.741708][ T6128] [ 108.741717][ T6128] __dump_stack+0x21/0x30 [ 108.741748][ T6128] dump_stack_lvl+0x10c/0x190 [ 108.741775][ T6128] ? __cfi_dump_stack_lvl+0x10/0x10 [ 108.741801][ T6128] dump_stack+0x19/0x20 [ 108.741825][ T6128] should_fail_ex+0x3d9/0x530 [ 108.741855][ T6128] should_failslab+0xac/0x100 [ 108.741878][ T6128] __kmalloc_noprof+0x69/0x450 [ 108.741908][ T6128] ? sel_write_user+0x228/0x5c0 [ 108.741934][ T6128] sel_write_user+0x228/0x5c0 [ 108.741959][ T6128] ? __kasan_check_read+0x15/0x20 [ 108.741986][ T6128] ? __check_object_size+0x50a/0x810 [ 108.742005][ T6128] ? __cfi_sel_write_user+0x10/0x10 [ 108.742032][ T6128] ? simple_transaction_get+0x133/0x1e0 [ 108.742058][ T6128] selinux_transaction_write+0x12c/0x180 [ 108.742090][ T6128] ? __cfi_selinux_transaction_write+0x10/0x10 [ 108.742116][ T6128] vfs_write+0x3c0/0xe80 [ 108.742135][ T6128] ? __cfi_vfs_write+0x10/0x10 [ 108.742152][ T6128] ? __kasan_check_write+0x18/0x20 [ 108.742178][ T6128] ? mutex_lock+0x92/0x1c0 [ 108.742200][ T6128] ? __cfi_mutex_lock+0x10/0x10 [ 108.742220][ T6128] ? __fget_files+0x2c5/0x340 [ 108.742245][ T6128] ksys_write+0x141/0x250 [ 108.742263][ T6128] ? __cfi_ksys_write+0x10/0x10 [ 108.742284][ T6128] ? __kasan_check_read+0x15/0x20 [ 108.742312][ T6128] __x64_sys_write+0x7f/0x90 [ 108.742331][ T6128] x64_sys_call+0x271c/0x2ee0 [ 108.742360][ T6128] do_syscall_64+0x58/0xf0 [ 108.742396][ T6128] ? clear_bhb_loop+0x50/0xa0 [ 108.742417][ T6128] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 108.742437][ T6128] RIP: 0033:0x7fb84a18ebe9 [ 108.742452][ T6128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 108.742468][ T6128] RSP: 002b:00007fb84b048038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 108.742487][ T6128] RAX: ffffffffffffffda RBX: 00007fb84a3c5fa0 RCX: 00007fb84a18ebe9 [ 108.742501][ T6128] RDX: 000000000000000d RSI: 0000200000008dc0 RDI: 0000000000000004 [ 108.742512][ T6128] RBP: 00007fb84b048090 R08: 0000000000000000 R09: 0000000000000000 [ 108.742523][ T6128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.742534][ T6128] R13: 00007fb84a3c6038 R14: 00007fb84a3c5fa0 R15: 00007fffe4151168 [ 108.742550][ T6128] [ 109.277323][ T6205] FAULT_INJECTION: forcing a failure. [ 109.277323][ T6205] name failslab, interval 1, probability 0, space 0, times 0 [ 109.299561][ T6205] CPU: 1 UID: 0 PID: 6205 Comm: syz.1.2251 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 109.299596][ T6205] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 109.299610][ T6205] Call Trace: [ 109.299617][ T6205] [ 109.299625][ T6205] __dump_stack+0x21/0x30 [ 109.299675][ T6205] dump_stack_lvl+0x10c/0x190 [ 109.299700][ T6205] ? __cfi_dump_stack_lvl+0x10/0x10 [ 109.299727][ T6205] dump_stack+0x19/0x20 [ 109.299751][ T6205] should_fail_ex+0x3d9/0x530 [ 109.299781][ T6205] should_failslab+0xac/0x100 [ 109.299803][ T6205] __kmalloc_cache_noprof+0x41/0x3c0 [ 109.299831][ T6205] ? percpu_ref_init+0xde/0x4e0 [ 109.299849][ T6205] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 109.299876][ T6205] percpu_ref_init+0xde/0x4e0 [ 109.299894][ T6205] io_ring_ctx_alloc+0x144/0x1e10 [ 109.299920][ T6205] ? __cfi_vfs_write+0x10/0x10 [ 109.299938][ T6205] io_uring_create+0x2e0/0x13d0 [ 109.299965][ T6205] __se_sys_io_uring_setup+0x24b/0x260 [ 109.299989][ T6205] ? __x64_sys_io_uring_setup+0x80/0x80 [ 109.300014][ T6205] ? __kasan_check_read+0x15/0x20 [ 109.300042][ T6205] __x64_sys_io_uring_setup+0x5f/0x80 [ 109.300065][ T6205] x64_sys_call+0x22c0/0x2ee0 [ 109.300092][ T6205] do_syscall_64+0x58/0xf0 [ 109.300119][ T6205] ? clear_bhb_loop+0x50/0xa0 [ 109.300143][ T6205] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 109.300165][ T6205] RIP: 0033:0x7fb84a18ebe9 [ 109.300180][ T6205] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.300197][ T6205] RSP: 002b:00007fb84b047fc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 109.300219][ T6205] RAX: ffffffffffffffda RBX: 00007fb84a3c5fa0 RCX: 00007fb84a18ebe9 [ 109.300234][ T6205] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111 [ 109.300246][ T6205] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 109.300259][ T6205] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 109.300271][ T6205] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000 [ 109.300286][ T6205] [ 109.498660][ T6212] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 109.539091][ T6213] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2253'. [ 110.138967][ T6245] binfmt_misc: register: failed to install interpreter file ./cgroup.cpu/cpuset.cpus [ 110.189733][ T6262] FAULT_INJECTION: forcing a failure. [ 110.189733][ T6262] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 110.202930][ T6262] CPU: 0 UID: 0 PID: 6262 Comm: syz.3.2273 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 110.202961][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.202975][ T6262] Call Trace: [ 110.202982][ T6262] [ 110.202990][ T6262] __dump_stack+0x21/0x30 [ 110.203023][ T6262] dump_stack_lvl+0x10c/0x190 [ 110.203050][ T6262] ? __cfi_dump_stack_lvl+0x10/0x10 [ 110.203077][ T6262] ? check_stack_object+0x12c/0x140 [ 110.203098][ T6262] dump_stack+0x19/0x20 [ 110.203123][ T6262] should_fail_ex+0x3d9/0x530 [ 110.203154][ T6262] should_fail+0xf/0x20 [ 110.203182][ T6262] should_fail_usercopy+0x1e/0x30 [ 110.203202][ T6262] _copy_to_user+0x24/0xa0 [ 110.203236][ T6262] simple_read_from_buffer+0xed/0x160 [ 110.203270][ T6262] proc_fail_nth_read+0x19e/0x210 [ 110.203297][ T6262] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 110.203323][ T6262] ? bpf_lsm_file_permission+0xd/0x20 [ 110.203350][ T6262] ? __cfi_proc_fail_nth_read+0x10/0x10 [ 110.203375][ T6262] vfs_read+0x27b/0xb60 [ 110.203393][ T6262] ? __cfi_vfs_read+0x10/0x10 [ 110.203410][ T6262] ? __kasan_check_write+0x18/0x20 [ 110.203438][ T6262] ? mutex_lock+0x92/0x1c0 [ 110.203458][ T6262] ? __cfi_mutex_lock+0x10/0x10 [ 110.203479][ T6262] ? __fget_files+0x2c5/0x340 [ 110.203502][ T6262] ksys_read+0x141/0x250 [ 110.203520][ T6262] ? __cfi_ksys_read+0x10/0x10 [ 110.203538][ T6262] ? __kasan_check_read+0x15/0x20 [ 110.203566][ T6262] __x64_sys_read+0x7f/0x90 [ 110.203584][ T6262] x64_sys_call+0x2638/0x2ee0 [ 110.203612][ T6262] do_syscall_64+0x58/0xf0 [ 110.203640][ T6262] ? clear_bhb_loop+0x50/0xa0 [ 110.203663][ T6262] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 110.203686][ T6262] RIP: 0033:0x7ff0ebd8d5fc [ 110.203702][ T6262] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 110.203720][ T6262] RSP: 002b:00007ff0ecc0a030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 110.203742][ T6262] RAX: ffffffffffffffda RBX: 00007ff0ebfc5fa0 RCX: 00007ff0ebd8d5fc [ 110.203756][ T6262] RDX: 000000000000000f RSI: 00007ff0ecc0a0a0 RDI: 0000000000000005 [ 110.203769][ T6262] RBP: 00007ff0ecc0a090 R08: 0000000000000000 R09: 0000000000000000 [ 110.203782][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.203811][ T6262] R13: 00007ff0ebfc6038 R14: 00007ff0ebfc5fa0 R15: 00007fff79ad9918 [ 110.203830][ T6262] [ 110.464652][ T6273] FAULT_INJECTION: forcing a failure. [ 110.464652][ T6273] name failslab, interval 1, probability 0, space 0, times 0 [ 110.477578][ T6273] CPU: 0 UID: 0 PID: 6273 Comm: syz.0.2277 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 110.477610][ T6273] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 110.477624][ T6273] Call Trace: [ 110.477630][ T6273] [ 110.477638][ T6273] __dump_stack+0x21/0x30 [ 110.477672][ T6273] dump_stack_lvl+0x10c/0x190 [ 110.477700][ T6273] ? __cfi_dump_stack_lvl+0x10/0x10 [ 110.477730][ T6273] ? pointer+0xdd0/0xdd0 [ 110.477757][ T6273] dump_stack+0x19/0x20 [ 110.477782][ T6273] should_fail_ex+0x3d9/0x530 [ 110.477816][ T6273] should_failslab+0xac/0x100 [ 110.477838][ T6273] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 110.477870][ T6273] ? sidtab_sid2str_get+0x139/0x370 [ 110.477894][ T6273] kmemdup_noprof+0x31/0x80 [ 110.477924][ T6273] sidtab_sid2str_get+0x139/0x370 [ 110.477948][ T6273] security_sid_to_context_core+0x30d/0x5d0 [ 110.477970][ T6273] security_sid_to_context+0x2e/0x50 [ 110.477989][ T6273] avc_audit_post_callback+0x107/0x780 [ 110.478020][ T6273] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 110.478051][ T6273] ? audit_log_untrustedstring+0xea/0x100 [ 110.478077][ T6273] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 110.478107][ T6273] common_lsm_audit+0x147d/0x1860 [ 110.478135][ T6273] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 110.478165][ T6273] ? __cfi_common_lsm_audit+0x10/0x10 [ 110.478195][ T6273] ? do_vfs_ioctl+0xeda/0x1e30 [ 110.478218][ T6273] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 110.478253][ T6273] slow_avc_audit+0x18d/0x1f0 [ 110.478282][ T6273] ? _parse_integer+0x2e/0x40 [ 110.478310][ T6273] ? __cfi_slow_avc_audit+0x10/0x10 [ 110.478340][ T6273] ? avc_denied+0xae/0x180 [ 110.478368][ T6273] ? avc_has_perm_noaudit+0x2b9/0x360 [ 110.478399][ T6273] avc_has_perm+0x1cd/0x220 [ 110.478441][ T6273] ? __cfi_avc_has_perm+0x10/0x10 [ 110.478469][ T6273] ? proc_fail_nth_write+0x17e/0x210 [ 110.478498][ T6273] selinux_tun_dev_open+0xc2/0x190 [ 110.478520][ T6273] security_tun_dev_open+0x44/0xb0 [ 110.478542][ T6273] tun_set_iff+0x40b/0xee0 [ 110.478562][ T6273] __tun_chr_ioctl+0x810/0x1f10 [ 110.478581][ T6273] ? __kasan_check_write+0x18/0x20 [ 110.478622][ T6273] ? tun_flow_create+0x410/0x410 [ 110.478640][ T6273] ? __fget_files+0x2c5/0x340 [ 110.478661][ T6273] ? __fget_files+0x2c5/0x340 [ 110.478683][ T6273] tun_chr_ioctl+0x2e/0x40 [ 110.478709][ T6273] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 110.478738][ T6273] __se_sys_ioctl+0x135/0x1b0 [ 110.478758][ T6273] __x64_sys_ioctl+0x7f/0xa0 [ 110.478779][ T6273] x64_sys_call+0x1878/0x2ee0 [ 110.478806][ T6273] do_syscall_64+0x58/0xf0 [ 110.478832][ T6273] ? clear_bhb_loop+0x50/0xa0 [ 110.478854][ T6273] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 110.478876][ T6273] RIP: 0033:0x7f04a518ebe9 [ 110.478892][ T6273] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 110.478909][ T6273] RSP: 002b:00007f04a5f60038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 110.478931][ T6273] RAX: ffffffffffffffda RBX: 00007f04a53c5fa0 RCX: 00007f04a518ebe9 [ 110.478946][ T6273] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000004 [ 110.478961][ T6273] RBP: 00007f04a5f60090 R08: 0000000000000000 R09: 0000000000000000 [ 110.478974][ T6273] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 110.478986][ T6273] R13: 00007f04a53c6038 R14: 00007f04a53c5fa0 R15: 00007ffd0867f748 [ 110.479004][ T6273] [ 110.878184][ T6293] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2287'. [ 110.998845][ T6316] syz.1.2296 uses obsolete (PF_INET,SOCK_PACKET) [ 111.036653][ T6320] x_tables: unsorted underflow at hook 4 [ 111.641827][ T36] kauditd_printk_skb: 762 callbacks suppressed [ 111.641847][ T36] audit: type=1400 audit(1757010636.277:9193): avc: denied { execmem } for pid=6330 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 111.733626][ T36] audit: type=1400 audit(1757010636.352:9194): avc: denied { read write } for pid=658 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.827131][ T36] audit: type=1400 audit(1757010636.446:9195): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 111.965678][ T36] audit: type=1400 audit(1757010636.577:9196): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 112.187326][ T36] audit: type=1400 audit(1757010636.782:9197): avc: denied { execmem } for pid=6331 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 112.208710][ T36] audit: type=1400 audit(1757010636.782:9198): avc: denied { read } for pid=6333 comm="syz.4.2303" name="binder1" dev="binder" ino=17 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 112.231542][ T36] audit: type=1400 audit(1757010636.782:9199): avc: denied { write } for pid=6332 comm="syz.1.2302" name="ip6_tables_targets" dev="proc" ino=4026532428 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=0 [ 112.255561][ T36] audit: type=1400 audit(1757010636.792:9200): avc: denied { create } for pid=6332 comm="syz.1.2302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 112.276056][ T36] audit: type=1400 audit(1757010636.792:9201): avc: denied { create } for pid=6332 comm="syz.1.2302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 112.296510][ T36] audit: type=1400 audit(1757010636.792:9202): avc: denied { create } for pid=6332 comm="syz.1.2302" anonclass=[secretmem] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 115.489791][ T6367] FAULT_INJECTION: forcing a failure. [ 115.489791][ T6367] name failslab, interval 1, probability 0, space 0, times 0 [ 115.502699][ T6367] CPU: 0 UID: 0 PID: 6367 Comm: syz.1.2313 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 115.502731][ T6367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 115.502744][ T6367] Call Trace: [ 115.502751][ T6367] [ 115.502759][ T6367] __dump_stack+0x21/0x30 [ 115.502791][ T6367] dump_stack_lvl+0x10c/0x190 [ 115.502817][ T6367] ? __cfi_dump_stack_lvl+0x10/0x10 [ 115.502844][ T6367] ? pointer+0xdd0/0xdd0 [ 115.502871][ T6367] dump_stack+0x19/0x20 [ 115.502907][ T6367] should_fail_ex+0x3d9/0x530 [ 115.502939][ T6367] should_failslab+0xac/0x100 [ 115.502959][ T6367] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 115.502990][ T6367] ? sidtab_sid2str_get+0x139/0x370 [ 115.503013][ T6367] kmemdup_noprof+0x31/0x80 [ 115.503041][ T6367] sidtab_sid2str_get+0x139/0x370 [ 115.503064][ T6367] security_sid_to_context_core+0x30d/0x5d0 [ 115.503085][ T6367] security_sid_to_context+0x2e/0x50 [ 115.503103][ T6367] avc_audit_post_callback+0x107/0x780 [ 115.503131][ T6367] ? audit_log_format+0xdb/0x140 [ 115.503157][ T6367] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 115.503185][ T6367] ? __cfi_audit_log_format+0x10/0x10 [ 115.503212][ T6367] ? audit_log_untrustedstring+0xea/0x100 [ 115.503239][ T6367] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 115.503267][ T6367] common_lsm_audit+0x147d/0x1860 [ 115.503294][ T6367] ? arch_stack_walk+0x10b/0x170 [ 115.503314][ T6367] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 115.503344][ T6367] ? __cfi_common_lsm_audit+0x10/0x10 [ 115.503373][ T6367] ? stack_depot_save_flags+0x38/0x800 [ 115.503396][ T6367] slow_avc_audit+0x18d/0x1f0 [ 115.503422][ T6367] ? kasan_save_track+0x3e/0x80 [ 115.503442][ T6367] ? kasan_save_free_info+0x4a/0x60 [ 115.503469][ T6367] ? __cfi_slow_avc_audit+0x10/0x10 [ 115.503496][ T6367] ? __x64_sys_move_mount+0xc3/0xf0 [ 115.503516][ T6367] ? avc_denied+0xae/0x180 [ 115.503543][ T6367] ? avc_has_perm_noaudit+0x2b9/0x360 [ 115.503572][ T6367] avc_has_perm+0x1cd/0x220 [ 115.503600][ T6367] ? __cfi_avc_has_perm+0x10/0x10 [ 115.503629][ T6367] ? __asan_memcpy+0x5a/0x80 [ 115.503658][ T6367] selinux_move_mount+0x2b1/0x3c0 [ 115.503678][ T6367] ? __cfi_selinux_move_mount+0x10/0x10 [ 115.503699][ T6367] ? putname+0x113/0x150 [ 115.503719][ T6367] ? putname+0x113/0x150 [ 115.503738][ T6367] security_move_mount+0x4e/0xc0 [ 115.503769][ T6367] __se_sys_move_mount+0x239/0xb20 [ 115.503790][ T6367] ? __x64_sys_move_mount+0xf0/0xf0 [ 115.503810][ T6367] ? __cfi_ksys_write+0x10/0x10 [ 115.503831][ T6367] __x64_sys_move_mount+0xc3/0xf0 [ 115.503852][ T6367] x64_sys_call+0x2342/0x2ee0 [ 115.503905][ T6367] do_syscall_64+0x58/0xf0 [ 115.503931][ T6367] ? clear_bhb_loop+0x50/0xa0 [ 115.503956][ T6367] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 115.503979][ T6367] RIP: 0033:0x7fb84a18ebe9 [ 115.503995][ T6367] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 115.504013][ T6367] RSP: 002b:00007fb84b048038 EFLAGS: 00000246 ORIG_RAX: 00000000000001ad [ 115.504035][ T6367] RAX: ffffffffffffffda RBX: 00007fb84a3c5fa0 RCX: 00007fb84a18ebe9 [ 115.504050][ T6367] RDX: ffffffffffffff9c RSI: 00002000000001c0 RDI: 0000000000000003 [ 115.504063][ T6367] RBP: 00007fb84b048090 R08: 0000000000000103 R09: 0000000000000000 [ 115.504075][ T6367] R10: 0000200000000140 R11: 0000000000000246 R12: 0000000000000001 [ 115.504087][ T6367] R13: 00007fb84a3c6038 R14: 00007fb84a3c5fa0 R15: 00007fffe4151168 [ 115.504104][ T6367] [ 117.120428][ T36] kauditd_printk_skb: 43 callbacks suppressed [ 117.120446][ T36] audit: type=1400 audit(1757010641.392:9246): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 117.753806][ T36] audit: type=1400 audit(1757010641.982:9247): avc: denied { execmem } for pid=6376 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 117.777371][ T36] audit: type=1400 audit(1757010641.982:9248): avc: denied { read write } for pid=6379 comm="syz.1.2319" name="binder0" dev="binder" ino=10 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=0 [ 117.786487][ T6384] FAULT_INJECTION: forcing a failure. [ 117.786487][ T6384] name failslab, interval 1, probability 0, space 0, times 0 [ 117.800931][ T36] audit: type=1400 audit(1757010641.982:9249): avc: denied { read } for pid=6378 comm="syz.0.2318" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 117.816413][ T6384] CPU: 0 UID: 0 PID: 6384 Comm: syz.4.2320 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 117.816450][ T6384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 117.816466][ T6384] Call Trace: [ 117.816474][ T6384] [ 117.816484][ T6384] __dump_stack+0x21/0x30 [ 117.816523][ T6384] dump_stack_lvl+0x10c/0x190 [ 117.816556][ T6384] ? __cfi_dump_stack_lvl+0x10/0x10 [ 117.816588][ T6384] ? skb_put+0x112/0x1f0 [ 117.816623][ T6384] dump_stack+0x19/0x20 [ 117.816654][ T6384] should_fail_ex+0x3d9/0x530 [ 117.816690][ T6384] should_failslab+0xac/0x100 [ 117.816717][ T6384] __kmalloc_node_track_caller_noprof+0x68/0x440 [ 117.816758][ T6384] ? sidtab_sid2str_get+0x139/0x370 [ 117.816785][ T6384] kmemdup_noprof+0x31/0x80 [ 117.816817][ T6384] sidtab_sid2str_get+0x139/0x370 [ 117.816844][ T6384] security_sid_to_context_core+0x30d/0x5d0 [ 117.816870][ T6384] security_sid_to_context+0x2e/0x50 [ 117.816893][ T6384] avc_audit_post_callback+0x198/0x780 [ 117.816937][ T6384] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 117.816972][ T6384] ? audit_log_untrustedstring+0xea/0x100 [ 117.817004][ T6384] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 117.817038][ T6384] common_lsm_audit+0x147d/0x1860 [ 117.817069][ T6384] ? __cfi_avc_audit_post_callback+0x10/0x10 [ 117.817103][ T6384] ? __cfi_common_lsm_audit+0x10/0x10 [ 117.817149][ T6384] ? do_vfs_ioctl+0xeda/0x1e30 [ 117.817175][ T6384] ? __ia32_compat_sys_ioctl+0x850/0x850 [ 117.817215][ T6384] slow_avc_audit+0x18d/0x1f0 [ 117.817244][ T6384] ? _parse_integer+0x2e/0x40 [ 117.817273][ T6384] ? __cfi_slow_avc_audit+0x10/0x10 [ 117.817303][ T6384] ? avc_denied+0xae/0x180 [ 117.817331][ T6384] ? avc_has_perm_noaudit+0x2b9/0x360 [ 117.817362][ T6384] avc_has_perm+0x1cd/0x220 [ 117.817392][ T6384] ? __cfi_avc_has_perm+0x10/0x10 [ 117.817422][ T6384] ? proc_fail_nth_write+0x17e/0x210 [ 117.817451][ T6384] selinux_tun_dev_open+0xc2/0x190 [ 117.817474][ T6384] security_tun_dev_open+0x44/0xb0 [ 117.817497][ T6384] tun_set_iff+0x40b/0xee0 [ 117.817519][ T6384] __tun_chr_ioctl+0x810/0x1f10 [ 117.817557][ T6384] ? __kasan_check_write+0x18/0x20 [ 117.817590][ T6384] ? tun_flow_create+0x410/0x410 [ 117.817610][ T6384] ? __fget_files+0x2c5/0x340 [ 117.817636][ T6384] ? __fget_files+0x2c5/0x340 [ 117.817662][ T6384] tun_chr_ioctl+0x2e/0x40 [ 117.817696][ T6384] ? __cfi_tun_chr_ioctl+0x10/0x10 [ 117.817730][ T6384] __se_sys_ioctl+0x135/0x1b0 [ 117.817756][ T6384] __x64_sys_ioctl+0x7f/0xa0 [ 117.817781][ T6384] x64_sys_call+0x1878/0x2ee0 [ 117.817817][ T6384] do_syscall_64+0x58/0xf0 [ 117.817851][ T6384] ? clear_bhb_loop+0x50/0xa0 [ 117.817881][ T6384] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 117.817915][ T6384] RIP: 0033:0x7f3c3ef8ebe9 [ 117.817936][ T6384] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 117.817956][ T6384] RSP: 002b:00007f3c3fe4b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 117.817981][ T6384] RAX: ffffffffffffffda RBX: 00007f3c3f1c5fa0 RCX: 00007f3c3ef8ebe9 [ 117.817999][ T6384] RDX: 0000200000000080 RSI: 00000000400454ca RDI: 0000000000000004 [ 117.818016][ T6384] RBP: 00007f3c3fe4b090 R08: 0000000000000000 R09: 0000000000000000 [ 117.818032][ T6384] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 117.818047][ T6384] R13: 00007f3c3f1c6038 R14: 00007f3c3f1c5fa0 R15: 00007ffefffa46c8 [ 117.818067][ T6384] [ 118.170446][ T36] audit: type=1400 audit(1757010641.982:9250): avc: denied { create } for pid=6378 comm="syz.0.2318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=0 [ 118.190220][ T36] audit: type=1400 audit(1757010641.982:9251): avc: denied { create } for pid=6379 comm="syz.1.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 118.210739][ T36] audit: type=1400 audit(1757010641.982:9252): avc: denied { create } for pid=6379 comm="syz.1.2319" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=0 [ 118.231331][ T36] audit: type=1400 audit(1757010642.047:9254): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 118.255406][ T36] audit: type=1400 audit(1757010642.010:9253): avc: denied { relabelfrom } for pid=6377 comm="syz.4.2320" scontext=root:sysadm_r:sysadm_t tsid=135 tclass=tun_socket permissive=0 [ 118.319449][ T36] audit: type=1400 audit(1757010642.515:9255): avc: denied { read write } for pid=658 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 121.985122][ T6412] FAULT_INJECTION: forcing a failure. [ 121.985122][ T6412] name failslab, interval 1, probability 0, space 0, times 0 [ 122.006571][ T6412] CPU: 1 UID: 0 PID: 6412 Comm: syz.4.2329 Not tainted syzkaller #0 73b2ef142dafea13a051d13948dec704a9c677a1 [ 122.006611][ T6412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 122.006624][ T6412] Call Trace: [ 122.006631][ T6412] [ 122.006640][ T6412] __dump_stack+0x21/0x30 [ 122.006672][ T6412] dump_stack_lvl+0x10c/0x190 [ 122.006699][ T6412] ? __cfi_dump_stack_lvl+0x10/0x10 [ 122.006730][ T6412] dump_stack+0x19/0x20 [ 122.006756][ T6412] should_fail_ex+0x3d9/0x530 [ 122.006789][ T6412] should_failslab+0xac/0x100 [ 122.006811][ T6412] __kmalloc_node_noprof+0x6c/0x450 [ 122.006843][ T6412] ? __kvmalloc_node_noprof+0x11d/0x300 [ 122.006874][ T6412] __kvmalloc_node_noprof+0x11d/0x300 [ 122.006906][ T6412] ? __cfi___kvmalloc_node_noprof+0x10/0x10 [ 122.006936][ T6412] ? tokenize_frame_descr+0x30/0xc0 [ 122.006968][ T6412] ? __cfi_io_ring_ctx_ref_free+0x10/0x10 [ 122.006997][ T6412] io_ring_ctx_alloc+0x3a7/0x1e10 [ 122.007028][ T6412] ? __cfi_vfs_write+0x10/0x10 [ 122.007048][ T6412] io_uring_create+0x2e0/0x13d0 [ 122.007076][ T6412] __se_sys_io_uring_setup+0x24b/0x260 [ 122.007102][ T6412] ? __x64_sys_io_uring_setup+0x80/0x80 [ 122.007131][ T6412] ? __kasan_check_read+0x15/0x20 [ 122.007172][ T6412] __x64_sys_io_uring_setup+0x5f/0x80 [ 122.007208][ T6412] x64_sys_call+0x22c0/0x2ee0 [ 122.007254][ T6412] do_syscall_64+0x58/0xf0 [ 122.007285][ T6412] ? clear_bhb_loop+0x50/0xa0 [ 122.007311][ T6412] entry_SYSCALL_64_after_hwframe+0x76/0x7e [ 122.007347][ T6412] RIP: 0033:0x7f3c3ef8ebe9 [ 122.007369][ T6412] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 122.007388][ T6412] RSP: 002b:00007f3c3fe4afc8 EFLAGS: 00000202 ORIG_RAX: 00000000000001a9 [ 122.007414][ T6412] RAX: ffffffffffffffda RBX: 00007f3c3f1c5fa0 RCX: 00007f3c3ef8ebe9 [ 122.007434][ T6412] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000111 [ 122.007449][ T6412] RBP: 0000200000000340 R08: 0000000000000000 R09: 0000000000000000 [ 122.007463][ T6412] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000001 [ 122.007477][ T6412] R13: 0000000000000000 R14: 0000000000000111 R15: 0000000000000000 [ 122.007494][ T6412] [ 123.595649][ T36] kauditd_printk_skb: 43 callbacks suppressed [ 123.595723][ T36] audit: type=1400 audit(1757010647.443:9299): avc: denied { read write } for pid=6414 comm="syz.0.2330" name="raw-gadget" dev="devtmpfs" ino=190 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=0 [ 123.625719][ T36] audit: type=1400 audit(1757010647.443:9300): avc: denied { read write } for pid=6414 comm="syz.0.2330" name="ppp" dev="devtmpfs" ino=86 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=0 [ 123.648921][ T36] audit: type=1400 audit(1757010647.443:9301): avc: denied { execmem } for pid=6413 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 123.668383][ T36] audit: type=1400 audit(1757010647.443:9302): avc: denied { create } for pid=6414 comm="syz.0.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=0 [ 123.688608][ T36] audit: type=1400 audit(1757010647.443:9303): avc: denied { create } for pid=6414 comm="syz.0.2330" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=0 [ 123.708208][ T36] audit: type=1400 audit(1757010647.461:9304): avc: denied { read write } for pid=6417 comm="syz.4.2332" name="kvm" dev="devtmpfs" ino=13 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=0 [ 123.731383][ T36] audit: type=1400 audit(1757010647.461:9305): avc: denied { create } for pid=6417 comm="syz.4.2332" anonclass=[userfaultfd] scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=anon_inode permissive=0 [ 123.752912][ T36] audit: type=1400 audit(1757010647.471:9306): avc: denied { read write } for pid=658 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 124.148852][ T36] audit: type=1400 audit(1757010647.966:9307): avc: denied { read write } for pid=288 comm="syz-executor" name="loop1" dev="devtmpfs" ino=50 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 124.172911][ T36] audit: type=1400 audit(1757010647.985:9308): avc: denied { read write } for pid=290 comm="syz-executor" name="loop0" dev="devtmpfs" ino=49 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 129.086087][ T36] kauditd_printk_skb: 21 callbacks suppressed [ 129.086107][ T36] audit: type=1400 audit(1757010652.586:9330): avc: denied { execmem } for pid=6436 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 129.089105][ T6439] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2339'. [ 129.121590][ T36] audit: type=1400 audit(1757010652.623:9331): avc: denied { read } for pid=6438 comm="syz.1.2340" dev="nsfs" ino=4026532302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 129.143312][ T36] audit: type=1400 audit(1757010652.623:9332): avc: denied { mounton } for pid=6440 comm="syz.4.2341" path="/597/file1/file0" dev="tmpfs" ino=3275 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 129.166578][ T36] audit: type=1400 audit(1757010652.623:9333): avc: denied { mounton } for pid=6440 comm="syz.4.2341" path="/597/bus" dev="tmpfs" ino=3273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 129.189059][ T36] audit: type=1400 audit(1757010652.623:9334): avc: denied { read write } for pid=658 comm="syz-executor" name="loop4" dev="devtmpfs" ino=53 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=0 [ 129.213178][ T36] audit: type=1400 audit(1757010652.623:9335): avc: denied { create } for pid=6437 comm="syz.0.2339" name="file2" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=0 [ 129.233959][ T36] audit: type=1400 audit(1757010652.633:9336): avc: denied { relabelfrom } for pid=6437 comm="syz.0.2339" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=0 [ 129.253919][ T36] audit: type=1400 audit(1757010652.633:9337): avc: denied { read } for pid=6438 comm="syz.1.2340" dev="nsfs" ino=4026532302 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=0 [ 129.275170][ T36] audit: type=1400 audit(1757010652.633:9338): avc: denied { execmem } for pid=6438 comm="syz.1.2340" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=0 [ 129.294547][ T36] audit: type=1400 audit(1757010652.633:9339): avc: denied { mounton } for pid=6438 comm="syz.1.2340" path="/570" dev="tmpfs" ino=3109 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=0 [ 133.628767][ T329] bridge_slave_1: left allmulticast mode [ 133.634465][ T329] bridge_slave_1: left promiscuous mode [ 133.648280][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.655929][ T329] bridge_slave_0: left allmulticast mode [ 133.663039][ T329] bridge_slave_0: left promiscuous mode [ 133.668800][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.831353][ T329] tipc: Left network mode [ 134.056137][ T329] bridge_slave_1: left allmulticast mode [ 134.061804][ T329] bridge_slave_1: left promiscuous mode [ 134.067468][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.074934][ T329] bridge_slave_0: left allmulticast mode [ 134.080691][ T329] bridge_slave_0: left promiscuous mode [ 134.086310][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.093993][ T329] erspan0: left allmulticast mode [ 134.099108][ T329] erspan0: left promiscuous mode [ 134.104118][ T329] bridge0: port 3(erspan0) entered disabled state [ 134.110944][ T329] bridge_slave_1: left allmulticast mode [ 134.116579][ T329] bridge_slave_1: left promiscuous mode [ 134.122237][ T329] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.129629][ T329] bridge_slave_0: left allmulticast mode [ 134.135266][ T329] bridge_slave_0: left promiscuous mode [ 134.140926][ T329] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.291906][ T329] tipc: Left network mode [ 134.296366][ T329] tipc: Left network mode [ 134.301763][ T329] veth1_macvtap: left promiscuous mode