last executing test programs: 10.933789713s ago: executing program 2 (id=357): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) 8.517696144s ago: executing program 4 (id=399): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000002000000000000210d0000aaa8fa017242ba9380d440fe000000000000290000003e000000", 0xfe60) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000300)='tracefs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./tracing/uprobe_events\x00', 0x1201, 0x44) clock_gettime(0x0, &(0x7f0000000000)={0x0, 0x0}) clock_gettime(0x0, &(0x7f0000000100)={0x0, 0x0}) write$evdev(r1, &(0x7f0000000040)=[{{0x0, 0x2710}, 0x14, 0xc, 0xdd10}, {{r2, r3/1000+60000}, 0x3, 0xa, 0x1}, {{r4, r5/1000+10000}, 0x14, 0x2008, 0x1}, {{0x77359400}, 0x5, 0xe19, 0x4}], 0x60) 8.468990835s ago: executing program 4 (id=401): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @desc3}, &(0x7f00000005c0)={0x0, "97c6e5c022b54c6e01b65660c23e2072121e3abaa079b86c68786694adfc6023d285b4dddea6bb5e36126e910840b462b36660c2e2aa14245c328b69992477ec", 0x400013}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='cgroup2\x00', r4) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x3a) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") 8.390900397s ago: executing program 2 (id=403): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, &(0x7f0000000070)='sysfs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(&(0x7f0000001000)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, 0x0) symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000002100)='usbip-vudc.0', 0xc) 8.354490468s ago: executing program 2 (id=404): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0xc0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='tracefs\x00', 0x1214040, 0x0) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) mount_setattr(r0, &(0x7f0000001d80)='.\x00', 0x9100, &(0x7f0000000080)={0x81, 0x7a, 0x40000, {r0}}, 0x20) 8.096226654s ago: executing program 1 (id=405): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000140)='ramfs\x00', 0x10, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0/file0\x00', 0x3108000, 0x0, 0x8, 0x0, 0x0) mount$bind(&(0x7f0000000200)='./file0/file0\x00', &(0x7f0000000000)='./file0/file0\x00', 0x0, 0xa1c08, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f00000002c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000240)='./file0/file0\x00', 0x101) 8.049173146s ago: executing program 2 (id=406): ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x40000000, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 8.043295886s ago: executing program 1 (id=407): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0x4, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000071180a000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @cgroup_sock_addr=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r1, 0x6, 0x0, 0x0, 0x0) r2 = fsmount(r1, 0x0, 0x0) r3 = openat$cgroup(r2, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000540)={r0, r3, 0xb, 0x0, @void}, 0x10) bind$inet(0xffffffffffffffff, 0x0, 0x0) mount$9p_tcp(&(0x7f0000000000), &(0x7f0000000680)='.\x00', &(0x7f00000006c0), 0x8010, &(0x7f0000000080)=ANY=[@ANYBLOB='trans=tcp']) 7.934720558s ago: executing program 2 (id=408): r0 = userfaultfd(0x80001) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x400}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000000000/0x400000)=nil, 0x400000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0xc8) syz_genetlink_get_family_id$nl80211(&(0x7f0000001080), 0xffffffffffffffff) 7.933163708s ago: executing program 1 (id=418): bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x3a) timer_create(0x0, 0x0, 0x0) 6.68054505s ago: executing program 4 (id=410): mount(0x0, &(0x7f0000003c40)='.\x00', &(0x7f0000000000)='efivarfs\x00', 0x0, &(0x7f0000000180)='gid=1\x00nk]e\xe5\xcd\xeb\x12\xcdx\xa6\xfb\xc7\f5\xaf\xea)\xfc\x80\x81X\xbb\xd33\xdf\bbx\x10\xa3\xc8n\xa4\'') r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') read$FUSE(r0, &(0x7f0000004200)={0x2020}, 0x2020) 6.680378621s ago: executing program 3 (id=411): mkdirat(0xffffffffffffff9c, &(0x7f0000000050)='./sys\x00', 0x1ed) mount(0x0, 0x0, 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./sys/bus/platform/devices/pcspkr/driver_override\x00', 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config\x00', 0x1ed) mount(0x0, &(0x7f0000000500)='./config\x00', &(0x7f0000000600)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000700)='./config/usb_gadget/g1\x00', 0x1ed) r0 = openat(0xffffffffffffff9c, 0x0, 0x1, 0x0) close(r0) mkdirat(0xffffffffffffff9c, &(0x7f0000000c00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0x1ed) mkdirat(0xffffffffffffff9c, 0x0, 0x1ed) symlinkat(&(0x7f0000000e00)='./config/usb_gadget/g1/functions/uvc.usb0/control/header/h\x00', 0xffffffffffffff9c, &(0x7f0000000f00)='./config/usb_gadget/g1/functions/uvc.usb0/control/class/fs/h\x00') symlinkat(0x0, 0xffffffffffffff9c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001200)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0x1ed) mkdirat(0xffffffffffffff9c, &(0x7f0000001400)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/uncompressed/u/360p\x00', 0x1ed) symlinkat(&(0x7f0000001700)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001800)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/fs/h\x00') symlinkat(&(0x7f0000001900)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001a00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/hs/h\x00') symlinkat(&(0x7f0000001b00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h\x00', 0xffffffffffffff9c, &(0x7f0000001c00)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/class/ss/h\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000001d00)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ed) symlinkat(&(0x7f0000001e00)='./config/usb_gadget/g1/functions/uvc.usb0\x00', 0xffffffffffffff9c, &(0x7f0000001f00)='./config/usb_gadget/g1/configs/c.1/uvc.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000002000)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000002100)='usbip-vudc.0', 0xc) 6.680197721s ago: executing program 3 (id=412): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffff97ffffe, 0x4031, 0xffffffffffffffff, 0x0) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x715}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000080)={&(0x7f00006c6000/0x400000)=nil, &(0x7f000018b000/0x3000)=nil, 0x400000, 0x0, 0x6040000}) mlock2(&(0x7f00002b3000/0x2000)=nil, 0x2000, 0x0) munlockall() 6.67999437s ago: executing program 3 (id=413): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) 6.676056211s ago: executing program 1 (id=414): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./proc\x00', &(0x7f0000000040)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./proc/sys/net/ipv6/conf/default/disable_ipv6\x00', 0x4003, 0x10c) setreuid(0x0, 0x0) newfstatat(0xffffffffffffff9c, &(0x7f00000002c0)='./proc/sys/net/ipv6/conf/default/disable_ipv6\x00', 0x0, 0x1000) mount$bpf(0x0, &(0x7f0000000240)='./proc/sys/net/ipv6/conf/default/disable_ipv6\x00', 0x0, 0x0, 0x0) 6.644696631s ago: executing program 4 (id=415): r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000000100), &(0x7f0000000080)='./file0\x00', 0x0, &(0x7f0000000600)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}, 0x0, 0x0, 0x0) listxattr(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 6.608963172s ago: executing program 1 (id=416): mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2, 0x4) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x2000010, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f000000c3c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x9, 0x1100, 0x40, 0x0, 0x6, 0x0, 0x0, 0x0, 0x40}}, 0x50) syz_fuse_handle_req(r0, &(0x7f00000021c0)="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", 0x2000, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r2 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./file0\x00', 0x12002, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x6b35e9d94325c671, 0xffffffffffffffff, 0x0) write$FUSE_DIRENT(r2, &(0x7f0000000140)={0x48, 0x0, r1, [{0xfffffffffffffff7, 0x80000000, 0x0, 0x101}, {0x3, 0x5, 0x2, 0x6, '[-'}]}, 0x48) write$P9_RRENAME(r2, 0x0, 0x0) dup3(r2, r0, 0x80000) 6.409727508s ago: executing program 0 (id=420): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r0, 0x16, 0x0, @void}, 0x10) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) 6.389273298s ago: executing program 0 (id=421): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) flock(r1, 0x2) utimensat(0xffffffffffffffff, &(0x7f0000000100)='./file0\x00', 0x0, 0x100) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) r2 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000100), 0x400, 0x0) fcntl$lock(r2, 0x25, &(0x7f0000000080)={0x0, 0x1, 0xffffffffffffffff, 0x7}) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0x42795000) r3 = syz_create_resource$binfmt(&(0x7f0000000000)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r3, 0x41, 0x1ff) close_range(r0, 0xffffffffffffffff, 0x0) 6.367732578s ago: executing program 0 (id=422): openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x42, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x9, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x5}, 0x50) r1 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r1, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000580)={r0, &(0x7f0000000480), &(0x7f0000000540)=@tcp=r1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000080), &(0x7f0000000180)=@tcp=r1}, 0x20) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x4, 0x0, 0x7fff0006}]}) close_range(r2, 0xffffffffffffffff, 0x0) 6.30427939s ago: executing program 0 (id=423): openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000200)={0x0, 0x0}, 0x6) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=r0, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r1, 0x20, &(0x7f0000000280)={&(0x7f0000000080)=""/238, 0xffffffffffffff80, 0x0, 0x0}}, 0x1e) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff9000/0x1000)=nil, &(0x7f000012d000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00005a4000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58}, 0x10) r2 = io_uring_setup(0x2bb4, &(0x7f0000000040)={0x0, 0xcce3, 0x1f480, 0x20, 0x39d}) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x17, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sysctl, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) io_uring_enter(r2, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) 6.30409649s ago: executing program 0 (id=424): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @desc3}, &(0x7f00000005c0)={0x0, "97c6e5c022b54c6e01b65660c23e2072121e3abaa079b86c68786694adfc6023d285b4dddea6bb5e36126e910840b462b36660c2e2aa14245c328b69992477ec", 0x400013}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='cgroup2\x00', r4) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x3a) timer_create(0x0, 0x0, 0x0) timer_settime(0x0, 0x1, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x2000c10, &(0x7f0000000400), 0xff, 0x23f, &(0x7f0000000540)="$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") 5.767948684s ago: executing program 1 (id=425): bind$inet6(0xffffffffffffffff, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='cgroup2\x00', 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x3a) timer_create(0x0, 0x0, 0x0) 5.766904654s ago: executing program 4 (id=426): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r1, &(0x7f0000c00000/0x400000)=nil) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4008ae90, &(0x7f0000000000)={0x1, 0x0, [{0x40000001, 0x4, 0x2, 0x31237648, 0x6, 0x2, 0x80}]}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000200)={[0x7, 0x7ffffffffffffffc, 0x100010003, 0x10000, 0x8, 0x4, 0x7, 0x10, 0x1, 0x8000000000000000, 0x7, 0x0, 0x6, 0x5, 0x6], 0x0, 0x110900}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) 5.703897385s ago: executing program 3 (id=427): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000008300), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000000080)={0x50, 0x0, 0x0, {0x7, 0x29, 0x8, 0x12510421, 0x0, 0xc, 0x1, 0x56, 0x0, 0x0, 0x2, 0x40000000}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$OBJ_GET_PROG(0x7, &(0x7f0000000200)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18) setxattr$system_posix_acl(&(0x7f0000000140)='./file0\x00', &(0x7f0000002b80)='system.posix_acl_access\x00', &(0x7f0000002cc0)=ANY=[@ANYBLOB="02"], 0x4, 0x3) 5.538342719s ago: executing program 4 (id=428): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xbb6, @loopback, 0x5}, 0x28) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = add_key$fscrypt_v1(&(0x7f0000000540), &(0x7f0000000580)={'fscrypt:', @desc3}, &(0x7f00000005c0)={0x0, "97c6e5c022b54c6e01b65660c23e2072121e3abaa079b86c68786694adfc6023d285b4dddea6bb5e36126e910840b462b36660c2e2aa14245c328b69992477ec", 0x400013}, 0x48, 0xfffffffffffffffe) request_key(&(0x7f0000000480)='asymmetric\x00', &(0x7f00000004c0)={'syz', 0x0}, &(0x7f0000000500)='cgroup2\x00', r3) connect$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x9, @loopback, 0x106}, 0x1c) mkdirat(0xffffffffffffff9c, 0x0, 0x3a) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) timer_settime(r4, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) setxattr$system_posix_acl(&(0x7f0000002a00)='.\x00', &(0x7f0000002a40)='system.posix_acl_default\x00', &(0x7f0000002b40), 0x24, 0x0) creat(&(0x7f0000000000)='./file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file2\x00', 0x143042, 0x80) setsockopt$inet6_buf(r0, 0x29, 0x39, 0x0, 0x0) 614.27µs ago: executing program 0 (id=429): mount(0x0, 0x0, &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_mount_image$msdos(&(0x7f00000002c0), &(0x7f0000000040)='./bus\x00', 0x2000844, &(0x7f0000000100)=ANY=[@ANYBLOB="646f74732c6e6f646f74732c6e6f646f74732c6e6f636173652c616c6c6f775f7574696d653d30303030303030000400000000000030303037373737372c6e6f646f74732c6e6f646f74732c73686f77657865632c6572726f72733d72656d6f756e742d726f2c64656275672c6769643d", @ANYRESHEX=0x0, @ANYBLOB=',dots,time_offset=0x00000000000000a8,sys_immutable,check=normal,dots,\x00'], 0x1, 0x23d, &(0x7f0000000a40)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file1/file3\x00', 0x11e) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./file0\x00', 0x80000c, 0x0, 0x0, 0x0, 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file3\x00', 0xffffffffffffff9c, &(0x7f0000000300)='./file0\x00', 0x0) 467.93µs ago: executing program 3 (id=430): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)={0x30, r1, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_OURS={0x4}, @ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000800}, 0x0) 338.66µs ago: executing program 2 (id=431): r0 = openat$kvm(0xffffffffffffff9c, 0x0, 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x800, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000180)="420fc7bc4898580000640f01c50f01c566baf80cb864c95782ef66bafc0cec67670f1b0166b8fb008ec046d9c3c442b90a2c81c442812852fcc744240012000000c74424020b000000ff1c24", 0x4c}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(r3, 0x4090ae82, &(0x7f0000000240)={[0x5836, 0x8, 0x7, 0x4000000000000e51, 0xfffffffffffffffe, 0x5479, 0x1035, 0x200000000006, 0x40000000, 0x32a, 0xfffffffffffffffe, 0xffffffff, 0xbf4, 0xfff, 0x8000000000005, 0x800000068], 0x2000, 0x80cd4}) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 3 (id=432): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(&(0x7f0000000100)=@filename='none\x00', &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, &(0x7f0000000400)='\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/task-filter\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/probability\x00', 0x1, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./debug/failslab/times\x00', 0x1, 0x0) write(r0, &(0x7f0000000100)='N\x00', 0x1) write(r2, &(0x7f0000000100)='10\x00', 0x2) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) write(r1, &(0x7f0000000100)='100\x00', 0x3) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x605, 0x1, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x3e8}}}}]}, 0x134}}, 0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f00000008c0), 0x8, 0x0) mount$9p_fd(0x0, &(0x7f0000000000)='.\x00', &(0x7f0000000040), 0x120c002, &(0x7f00000029c0)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r6, @ANYBLOB=',wfdno=', @ANYRESHEX=r6]) syz_mount_image$fuse(0x0, 0x0, 0x122206c, 0x0, 0x1, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000140)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaa4ca6d5f69c936f80aabb86dd60c6dd0000283afffe8000000000000000000000000000bbff0200000000000000000000000000018900907800fe000000000000000000003903669faeb9808aed37d12ec7a4a494"], 0x0) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r6, 0x8982, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.28' (ED25519) to the list of known hosts. [ 20.481999][ T28] audit: type=1400 audit(1786034898.271:64): avc: denied { mounton } for pid=279 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.483128][ T279] cgroup: Unknown subsys name 'net' [ 20.504658][ T28] audit: type=1400 audit(1786034898.271:65): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.531907][ T28] audit: type=1400 audit(1786034898.291:66): avc: denied { unmount } for pid=279 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.532038][ T279] cgroup: Unknown subsys name 'devices' [ 20.662800][ T279] cgroup: Unknown subsys name 'hugetlb' [ 20.668408][ T279] cgroup: Unknown subsys name 'rlimit' [ 20.800161][ T28] audit: type=1400 audit(1786034898.581:67): avc: denied { setattr } for pid=279 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.823386][ T28] audit: type=1400 audit(1786034898.581:68): avc: denied { mounton } for pid=279 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.831483][ T281] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 20.848317][ T28] audit: type=1400 audit(1786034898.581:69): avc: denied { mount } for pid=279 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 20.879820][ T28] audit: type=1400 audit(1786034898.641:70): avc: denied { relabelto } for pid=281 comm="mkswap" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.905298][ T28] audit: type=1400 audit(1786034898.641:71): avc: denied { write } for pid=281 comm="mkswap" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.949647][ T28] audit: type=1400 audit(1786034898.731:72): avc: denied { read } for pid=279 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.975221][ T28] audit: type=1400 audit(1786034898.731:73): avc: denied { open } for pid=279 comm="syz-executor" path="/root/swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 20.975281][ T279] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 21.718154][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.725591][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.732985][ T287] device bridge_slave_0 entered promiscuous mode [ 21.740777][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.747929][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.755317][ T287] device bridge_slave_1 entered promiscuous mode [ 21.769431][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.776535][ T288] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.783901][ T288] device bridge_slave_0 entered promiscuous mode [ 21.805451][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.812521][ T288] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.819788][ T288] device bridge_slave_1 entered promiscuous mode [ 21.899822][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.906989][ T289] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.914385][ T289] device bridge_slave_0 entered promiscuous mode [ 21.942611][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.949651][ T289] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.957193][ T289] device bridge_slave_1 entered promiscuous mode [ 22.020694][ T290] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.027825][ T290] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.035160][ T290] device bridge_slave_0 entered promiscuous mode [ 22.041985][ T290] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.049007][ T290] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.056451][ T290] device bridge_slave_1 entered promiscuous mode [ 22.076406][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.083554][ T293] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.091018][ T293] device bridge_slave_0 entered promiscuous mode [ 22.101084][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.108115][ T293] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.115520][ T293] device bridge_slave_1 entered promiscuous mode [ 22.153716][ T288] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.160769][ T288] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.168078][ T288] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.175150][ T288] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.198331][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.205403][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.212750][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.219767][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.298106][ T289] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.305174][ T289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.312448][ T289] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.319465][ T289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.336281][ T293] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.343326][ T293] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.350542][ T293] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.357575][ T293] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.372348][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.379565][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.386826][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.394252][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.401865][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.408984][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.416490][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.423625][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.431331][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.438693][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.464725][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.472421][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.480520][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.487553][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.494996][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.503656][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.510750][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.518110][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.542642][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.550777][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.557899][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.565530][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.573892][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.580968][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.588574][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 22.596037][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.603495][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.612842][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.621039][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.628065][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.651944][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.660419][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.668178][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.675981][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.684304][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.691349][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.699439][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.707611][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.714632][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.722010][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.729875][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.750698][ T289] device veth0_vlan entered promiscuous mode [ 22.761588][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 22.769702][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.778062][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 22.786385][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.794491][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.802911][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.811367][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.819189][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.827172][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 22.835440][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.843829][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.850861][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.858345][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.866736][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.874872][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.881902][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.889260][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.896976][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.904483][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 22.920386][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 22.928758][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.936978][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.944014][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.951959][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 22.960242][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.968771][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 22.976686][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.984755][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.992320][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.003022][ T288] device veth0_vlan entered promiscuous mode [ 23.009250][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.017320][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.025475][ T287] device veth0_vlan entered promiscuous mode [ 23.034184][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.041823][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.050630][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.058796][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.068159][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 23.076345][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 23.085017][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.093297][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.108477][ T289] device veth1_macvtap entered promiscuous mode [ 23.121837][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.129742][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.137926][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.145946][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 23.154233][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 23.162340][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.170432][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.182122][ T288] device veth1_macvtap entered promiscuous mode [ 23.192782][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.200472][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.208846][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.217890][ T287] device veth1_macvtap entered promiscuous mode [ 23.233646][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 23.241356][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.249515][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.258013][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.266782][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.275407][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.284015][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.292347][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.300662][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.309353][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.317749][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.326310][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 23.334774][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 23.346019][ T293] device veth0_vlan entered promiscuous mode [ 23.359605][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.367576][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.375917][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.384417][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.393177][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.401575][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.409829][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.417530][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.437692][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 23.445115][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 23.453847][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.462222][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 23.470041][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 23.479635][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 23.487217][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 23.495254][ T293] device veth1_macvtap entered promiscuous mode [ 23.502399][ T290] device veth0_vlan entered promiscuous mode [ 23.516447][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.524887][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.533310][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.541614][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.569445][ T290] device veth1_macvtap entered promiscuous mode [ 23.591638][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 23.599506][ T316] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 23.611220][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 23.635228][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 23.677633][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 23.694525][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 23.775579][ T333] kvm [332]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc2) = 0x9d00 [ 23.784113][ T333] kvm [332]: vcpu0, guest rIP: 0x9114 Unhandled WRMSR(0xc1) = 0x9d00 [ 23.867472][ T344] kvm [343]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0xc1) = 0xe50000000000 [ 23.876488][ T344] kvm [343]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0xc2) = 0xe50000000000 [ 23.889030][ T344] kvm [343]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x11e) = 0xe500be702111 [ 23.902070][ T344] kvm [343]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x186) = 0xe50000000000 [ 23.911221][ T344] kvm [343]: vcpu6, guest rIP: 0x9139 Unhandled WRMSR(0x187) = 0xe50000000000 [ 23.955712][ T352] kvm: apic: phys broadcast and lowest prio [ 24.228658][ T369] netlink: 8 bytes leftover after parsing attributes in process `syz.2.20'. [ 24.951664][ T420] kvm [419]: vcpu0, guest rIP: 0x9112 Unhandled WRMSR(0xc2) = 0x5407 [ 24.981688][ T420] kvm [419]: vcpu0, guest rIP: 0x9112 Unhandled WRMSR(0xc1) = 0x5b07 [ 25.006128][ T420] kvm [419]: vcpu0, guest rIP: 0x9112 Unhandled WRMSR(0xc2) = 0x5407 [ 25.372100][ T446] kvm [444]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1 [ 25.395361][ T446] kvm [444]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 25.404437][ T446] kvm [444]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 25.414048][ T446] kvm [444]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 25.422889][ T446] kvm [444]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 25.432264][ T446] kvm [444]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 25.441569][ T446] kvm [444]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 25.450304][ T446] kvm [444]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 25.459282][ T446] kvm [444]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 25.468107][ T446] kvm [444]: vcpu0, guest rIP: 0x9148 Unhandled WRMSR(0x1d9) = 0x1 [ 25.580308][ T28] kauditd_printk_skb: 41 callbacks suppressed [ 25.580323][ T28] audit: type=1400 audit(1786034903.361:115): avc: denied { create } for pid=455 comm="syz.4.51" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 25.826639][ T28] audit: type=1326 audit(1786034903.611:116): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=464 comm="syz.4.54" exe="/root/ci2-android-6-1/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f987cf9e0d9 code=0x0 [ 25.896168][ T28] audit: type=1400 audit(1786034903.681:117): avc: denied { write } for pid=472 comm="syz.1.57" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 26.105920][ T448] syz.0.47 (448) used greatest stack depth: 21096 bytes left [ 26.145583][ T28] audit: type=1400 audit(1786034903.931:118): avc: denied { create } for pid=478 comm="syz.1.59" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 26.465906][ T28] audit: type=1400 audit(1786034904.251:119): avc: denied { write } for pid=492 comm="syz.0.64" name="random" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 26.672096][ T497] capability: warning: `syz.4.65' uses deprecated v2 capabilities in a way that may be insecure [ 26.895380][ T28] audit: type=1400 audit(1786034904.681:120): avc: denied { create } for pid=514 comm="syz.0.73" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 27.013208][ T28] audit: type=1400 audit(1786034904.791:121): avc: denied { map_read map_write } for pid=520 comm="syz.4.75" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 27.288023][ T28] audit: type=1400 audit(1786034904.801:122): avc: denied { perfmon } for pid=520 comm="syz.4.75" capability=38 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 27.328247][ T28] audit: type=1400 audit(1786034904.801:123): avc: denied { ioctl } for pid=520 comm="syz.4.75" path="socket:[18821]" dev="sockfs" ino=18821 ioctlcmd=0x8936 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 27.359630][ T28] audit: type=1400 audit(1786034904.801:124): avc: denied { read write } for pid=520 comm="syz.4.75" name="mtrr" dev="proc" ino=4026532003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mtrr_device_t tclass=file permissive=1 [ 28.320724][ T620] UDC core: g1: couldn't find an available UDC or it's busy [ 28.881775][ T643] kvm_pr_unimpl_wrmsr: 14 callbacks suppressed [ 28.881793][ T643] kvm [640]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc1) = 0xfffffc00 [ 28.896608][ T643] kvm [640]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0xc2) = 0xfffffc00 [ 28.907495][ T643] kvm [640]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x11e) = 0xfffffc00 [ 28.919147][ T643] kvm [640]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x186) = 0xfffffc00 [ 28.928065][ T643] kvm [640]: vcpu2, guest rIP: 0x9135 Unhandled WRMSR(0x187) = 0xfffffc00 [ 28.975257][ T650] UDC core: g1: couldn't find an available UDC or it's busy [ 29.157511][ T674] zero sized request [ 29.348644][ T686] UDC core: g1: couldn't find an available UDC or it's busy [ 29.959178][ T707] mtrr: base(0x20000000) is not aligned on a size(0x0000) boundary [ 30.526896][ T722] UDC core: g1: couldn't find an available UDC or it's busy [ 30.587029][ T732] mtrr: base(0x20000000) is not aligned on a size(0x0000) boundary [ 30.637157][ T734] kvm_pr_unimpl_wrmsr: 959 callbacks suppressed [ 30.637180][ T734] kvm [733]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1 [ 30.709116][ T748] Zero length message leads to an empty skb [ 30.715581][ T748] 9pnet_fd: p9_fd_create_tcp (748): problem binding to privport [ 30.725320][ T28] kauditd_printk_skb: 16 callbacks suppressed [ 30.725333][ T28] audit: type=1400 audit(1786034908.491:141): avc: denied { write } for pid=736 comm="syz.1.155" name="001" dev="devtmpfs" ino=185 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 30.993042][ T767] mtrr: base(0x20000000) is not aligned on a size(0x0000) boundary [ 31.254178][ T789] loop3: detected capacity change from 0 to 128 [ 31.532006][ T789] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 31.563414][ T789] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 31.564038][ T28] audit: type=1400 audit(1786034909.351:142): avc: denied { mount } for pid=776 comm="syz.3.171" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 31.644918][ T803] mtrr: base(0x20000000) is not aligned on a size(0x0000) boundary [ 31.781942][ T816] 9pnet_fd: p9_fd_create_tcp (816): problem binding to privport [ 31.977764][ T832] mtrr: base(0x20000000) is not aligned on a size(0x0000) boundary [ 32.101644][ T28] audit: type=1400 audit(1786034909.891:143): avc: denied { create } for pid=840 comm="syz.1.196" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 32.216400][ T846] 9pnet_fd: p9_fd_create_tcp (846): problem binding to privport [ 32.531769][ T28] audit: type=1400 audit(1786034910.321:144): avc: denied { write } for pid=856 comm="syz.4.203" path="socket:[22155]" dev="sockfs" ino=22155 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 32.977247][ T868] mtrr: base(0x20000000) is not aligned on a size(0x0000) boundary [ 33.178080][ T288] EXT4-fs (loop3): unmounting filesystem. [ 33.205228][ T877] 9pnet_fd: p9_fd_create_tcp (877): problem binding to privport [ 34.631575][ T916] loop1: detected capacity change from 0 to 128 [ 34.698580][ T916] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 34.707587][ T916] ext4 filesystem being mounted at /38/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 34.814099][ T28] audit: type=1400 audit(1786034912.601:145): avc: denied { read } for pid=920 comm="syz.4.224" dev="nsfs" ino=4026532670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 34.835515][ T28] audit: type=1400 audit(1786034912.601:146): avc: denied { open } for pid=920 comm="syz.4.224" path="net:[4026532670]" dev="nsfs" ino=4026532670 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 35.339172][ T287] EXT4-fs (loop1): unmounting filesystem. [ 36.210883][ T967] UDC core: g1: couldn't find an available UDC or it's busy [ 36.533079][ T989] loop4: detected capacity change from 0 to 128 [ 36.568332][ T989] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 36.577686][ T989] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 36.691935][ T28] audit: type=1400 audit(1786034914.481:147): avc: denied { write } for pid=984 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 36.721248][ T28] audit: type=1400 audit(1786034914.481:148): avc: denied { read } for pid=984 comm="syz.1.247" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 37.309156][ T1003] UDC core: g1: couldn't find an available UDC or it's busy [ 37.626616][ T290] EXT4-fs (loop4): unmounting filesystem. [ 37.665373][ T1011] ======================================================= [ 37.665373][ T1011] WARNING: The mand mount option has been deprecated and [ 37.665373][ T1011] and is ignored by this kernel. Remove the mand [ 37.665373][ T1011] option from the mount to silence this warning. [ 37.665373][ T1011] ======================================================= [ 37.765190][ T28] audit: type=1400 audit(1786034915.551:149): avc: denied { mounton } for pid=1010 comm="syz.4.254" path="/63/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 37.796963][ T1014] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 37.824771][ T1011] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 37.931643][ T1027] netlink: 12 bytes leftover after parsing attributes in process `syz.2.261'. [ 37.934511][ T1025] UDC core: g1: couldn't find an available UDC or it's busy [ 37.962558][ T1029] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 38.047768][ T1032] UDC core: g1: couldn't find an available UDC or it's busy [ 38.750878][ T1049] UDC core: g1: couldn't find an available UDC or it's busy [ 38.792111][ T28] audit: type=1400 audit(1786034916.581:150): avc: denied { prog_run } for pid=1054 comm="syz.0.271" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 38.811210][ T1056] Illegal XDP return value 4294967274 on prog (id 1) dev syz_tun, expect packet loss! [ 38.833677][ T28] audit: type=1400 audit(1786034916.611:151): avc: denied { ioctl } for pid=1057 comm="syz.3.273" path="socket:[23718]" dev="sockfs" ino=23718 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 38.840133][ T1061] UDC core: g1: couldn't find an available UDC or it's busy [ 38.875445][ T1063] UDC core: g1: couldn't find an available UDC or it's busy [ 38.990843][ T28] audit: type=1400 audit(1786034916.771:152): avc: denied { setopt } for pid=1070 comm="syz.2.278" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.046136][ T1068] kvm [1067]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0x1 [ 39.054098][ T28] audit: type=1400 audit(1786034916.821:153): avc: denied { connect } for pid=1070 comm="syz.2.278" lport=60 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 39.099496][ T28] audit: type=1400 audit(1786034916.821:154): avc: denied { write } for pid=1070 comm="syz.2.278" laddr=fe80::ac14:140d lport=60 faddr=ff01::1 fport=20131 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 40.198582][ T1095] syz.3.284[1095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.198653][ T1095] syz.3.284[1095] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 40.270118][ T28] audit: type=1400 audit(1786034918.051:155): avc: denied { read write } for pid=1098 comm="syz.3.286" name="fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 40.321608][ T28] audit: type=1400 audit(1786034918.051:156): avc: denied { open } for pid=1098 comm="syz.3.286" path="/dev/fuse" dev="devtmpfs" ino=93 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 40.386182][ T1103] UDC core: g1: couldn't find an available UDC or it's busy [ 40.444017][ T1105] UDC core: g1: couldn't find an available UDC or it's busy [ 40.620496][ T1118] device-mapper: ioctl: Invalid ioctl structure: uuid `ˆ$, name , dev 100 [ 40.671723][ T1128] UDC core: g1: couldn't find an available UDC or it's busy [ 40.790979][ T1135] UDC core: g1: couldn't find an available UDC or it's busy [ 41.531262][ T1167] UDC core: g1: couldn't find an available UDC or it's busy [ 42.710885][ T28] kauditd_printk_skb: 12 callbacks suppressed [ 42.710905][ T28] audit: type=1400 audit(1786034920.491:169): avc: denied { setopt } for pid=1191 comm="syz.1.318" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 42.884456][ T1198] UDC core: g1: couldn't find an available UDC or it's busy [ 42.916125][ T1201] UDC core: g1: couldn't find an available UDC or it's busy [ 43.254889][ T1218] UDC core: g1: couldn't find an available UDC or it's busy [ 44.491011][ T1232] UDC core: g1: couldn't find an available UDC or it's busy [ 44.556244][ T1238] UDC core: g1: couldn't find an available UDC or it's busy [ 44.599831][ T28] audit: type=1400 audit(1786034922.381:170): avc: denied { mounton } for pid=1239 comm="syz.2.337" path="/78/file0" dev="tmpfs" ino=453 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 44.952300][ T1266] UDC core: g1: couldn't find an available UDC or it's busy [ 44.972432][ T1268] UDC core: g1: couldn't find an available UDC or it's busy [ 45.940884][ T1298] UDC core: g1: couldn't find an available UDC or it's busy [ 45.964401][ T1300] UDC core: g1: couldn't find an available UDC or it's busy [ 46.077967][ T1314] overlayfs: overlapping lowerdir path [ 46.099378][ T28] audit: type=1400 audit(1786034923.881:171): avc: denied { mount } for pid=1319 comm="syz.3.369" name="/" dev="ramfs" ino=24972 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 46.136289][ T1320] loop3: detected capacity change from 0 to 8192 [ 46.276314][ T28] audit: type=1400 audit(1786034924.061:172): avc: denied { mount } for pid=1327 comm="syz.1.372" name="/" dev="configfs" ino=14076 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 46.277690][ T1328] UDC core: g1: couldn't find an available UDC or it's busy [ 46.361922][ T28] audit: type=1400 audit(1786034924.151:173): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 46.391468][ T28] audit: type=1400 audit(1786034924.171:174): avc: denied { map } for pid=1335 comm="syz.1.375" path="socket:[25003]" dev="sockfs" ino=25003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.423012][ T1334] UDC core: g1: couldn't find an available UDC or it's busy [ 46.440137][ T28] audit: type=1400 audit(1786034924.171:175): avc: denied { read write } for pid=1335 comm="syz.1.375" path="socket:[25003]" dev="sockfs" ino=25003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.482992][ T28] audit: type=1400 audit(1786034924.171:176): avc: denied { accept } for pid=1335 comm="syz.1.375" path="socket:[25003]" dev="sockfs" ino=25003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 46.489072][ T1345] netlink: 32 bytes leftover after parsing attributes in process `syz.0.379'. [ 46.510503][ T28] audit: type=1400 audit(1786034924.201:177): avc: denied { create } for pid=1333 comm="syz.3.373" name="h" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=lnk_file permissive=1 [ 46.638697][ T1352] overlayfs: overlapping lowerdir path [ 46.645084][ T1352] overlayfs: overlapping lowerdir path [ 46.748091][ T28] audit: type=1400 audit(1786034924.531:178): avc: denied { unlink } for pid=1354 comm="syz.1.382" name="#3" dev="tmpfs" ino=437 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 47.096329][ T1362] loop0: detected capacity change from 0 to 128 [ 47.932584][ T1362] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 47.941514][ T1362] ext4 filesystem being mounted at /82/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 47.975678][ T1366] loop3: detected capacity change from 0 to 256 [ 47.992807][ T1368] UDC core: g1: couldn't find an available UDC or it's busy [ 48.016120][ T28] kauditd_printk_skb: 2 callbacks suppressed [ 48.016132][ T28] audit: type=1400 audit(1786034925.801:181): avc: denied { mount } for pid=1365 comm="syz.3.385" name="/" dev="loop3" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 48.098887][ T289] EXT4-fs (loop0): unmounting filesystem. [ 48.104781][ T28] audit: type=1400 audit(1786034925.881:182): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dosfs_t tclass=filesystem permissive=1 [ 48.132875][ T1374] UDC core: g1: couldn't find an available UDC or it's busy [ 48.243433][ T1383] netlink: 12 bytes leftover after parsing attributes in process `syz.4.393'. [ 48.267135][ T28] audit: type=1400 audit(1786034926.021:183): avc: denied { mount } for pid=1380 comm="syz.3.392" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 48.286420][ T1385] device syzkaller0 entered promiscuous mode [ 48.291393][ T28] audit: type=1400 audit(1786034926.021:184): avc: denied { search } for pid=1380 comm="syz.3.392" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 48.371325][ T28] audit: type=1400 audit(1786034926.021:185): avc: denied { read } for pid=1380 comm="syz.3.392" name="trace" dev="tracefs" ino=12986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 48.405322][ T28] audit: type=1400 audit(1786034926.021:186): avc: denied { open } for pid=1380 comm="syz.3.392" path="/59/trace/trace" dev="tracefs" ino=12986 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 48.438682][ T1396] Line length is too long: Should be less than 4094 [ 48.457433][ T28] audit: type=1400 audit(1786034926.111:187): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 48.478034][ T28] audit: type=1400 audit(1786034926.131:188): avc: denied { ioctl } for pid=1387 comm="syz.3.395" path="/dev/fuse" dev="devtmpfs" ino=93 ioctlcmd=0xe501 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 48.518662][ T28] audit: type=1400 audit(1786034926.221:189): avc: denied { write } for pid=1394 comm="syz.4.399" name="uprobe_events" dev="tracefs" ino=1046 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=file permissive=1 [ 48.576665][ T1406] UDC core: g1: couldn't find an available UDC or it's busy [ 48.583773][ T1403] device-mapper: ioctl: Invalid ioctl structure: name t, dev fc00 [ 48.874584][ T28] audit: type=1400 audit(1786034926.661:190): avc: denied { mounton } for pid=1411 comm="syz.1.405" path="/80/file0/file0" dev="ramfs" ino=25174 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 48.925843][ T1418] 9pnet_fd: p9_fd_create_tcp (1418): problem connecting socket to 127.0.0.1 [ 49.027018][ T1422] loop4: detected capacity change from 0 to 128 [ 49.182669][ T1422] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 49.192399][ T1422] ext4 filesystem being mounted at /94/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 49.672727][ T290] EXT4-fs (loop4): unmounting filesystem. [ 49.785922][ T1431] UDC core: g1: couldn't find an available UDC or it's busy [ 50.806091][ T1465] loop0: detected capacity change from 0 to 128 [ 50.814263][ T1465] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 50.823260][ T1465] ext4 filesystem being mounted at /90/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 51.924552][ T289] EXT4-fs (loop0): unmounting filesystem. [ 52.172277][ T1487] FAULT_INJECTION: forcing a failure. [ 52.172277][ T1487] name failslab, interval 1, probability 100, space 0, times 10 [ 52.185315][ T1479] FAULT_INJECTION: forcing a failure. [ 52.185315][ T1479] name failslab, interval 1, probability 100, space 0, times 10 [ 52.199227][ T1474] FAULT_INJECTION: forcing a failure. [ 52.199227][ T1474] name failslab, interval 1, probability 100, space 0, times 10 [ 52.212097][ T1474] CPU: 0 PID: 1474 Comm: syz.1.425 Not tainted syzkaller #0 [ 52.219369][ T1474] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.229415][ T1474] Call Trace: [ 52.232676][ T1474] [ 52.235587][ T1474] __dump_stack+0x21/0x24 [ 52.239913][ T1474] dump_stack_lvl+0x110/0x170 [ 52.244568][ T1474] ? __cfi_dump_stack_lvl+0x8/0x8 [ 52.249576][ T1474] dump_stack+0x15/0x24 [ 52.253713][ T1474] should_fail_ex+0x3bf/0x510 [ 52.258373][ T1474] ? __sigqueue_alloc+0x13f/0x210 [ 52.263380][ T1474] __should_failslab+0xac/0xf0 [ 52.268129][ T1474] should_failslab+0x9/0x20 [ 52.272610][ T1474] kmem_cache_alloc+0x3b/0x320 [ 52.277357][ T1474] __sigqueue_alloc+0x13f/0x210 [ 52.282192][ T1474] __send_signal_locked+0x19d/0xb70 [ 52.287370][ T1474] ? __task_pid_nr_ns+0x1e2/0x280 [ 52.292374][ T1474] do_notify_parent+0x6b1/0x820 [ 52.297210][ T1474] ? __cfi_do_notify_parent+0x10/0x10 [ 52.302565][ T1474] release_task+0xe36/0x1200 [ 52.307140][ T1474] do_exit+0x1a1d/0x2850 [ 52.311363][ T1474] ? __cfi_do_exit+0x10/0x10 [ 52.315937][ T1474] ? __kasan_check_write+0x14/0x20 [ 52.321027][ T1474] ? _raw_spin_lock_irq+0x95/0xf0 [ 52.326054][ T1474] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 52.331577][ T1474] do_group_exit+0x21b/0x2e0 [ 52.336150][ T1474] ? __kasan_check_write+0x14/0x20 [ 52.341240][ T1474] ? recalc_sigpending+0x168/0x1c0 [ 52.346332][ T1474] get_signal+0x167c/0x1700 [ 52.350821][ T1474] ? __cfi_get_signal+0x10/0x10 [ 52.355654][ T1474] ? fput+0x15b/0x1a0 [ 52.359617][ T1474] arch_do_signal_or_restart+0xd1/0x11c0 [ 52.365232][ T1474] ? __sys_recvmmsg+0x290/0x290 [ 52.370068][ T1474] ? _raw_spin_lock_irq+0x95/0xf0 [ 52.370801][ C1] FAULT_INJECTION: forcing a failure. [ 52.370801][ C1] name failslab, interval 1, probability 100, space 0, times 10 [ 52.375077][ T1474] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 52.393849][ T1474] ? __set_current_blocked+0x208/0x230 [ 52.399300][ T1474] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 52.405440][ T1474] ? __fget_files+0x2d1/0x330 [ 52.410107][ T1474] ? __x64_sys_recvmmsg+0x195/0x250 [ 52.415298][ T1474] ? __kasan_check_write+0x14/0x20 [ 52.420394][ T1474] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 52.425931][ T1474] exit_to_user_mode_loop+0x7a/0xb0 [ 52.431113][ T1474] exit_to_user_mode_prepare+0x87/0xd0 [ 52.436559][ T1474] syscall_exit_to_user_mode+0x1a/0x30 [ 52.442004][ T1474] do_syscall_64+0x58/0xa0 [ 52.446410][ T1474] ? clear_bhb_loop+0x30/0x80 [ 52.451073][ T1474] ? clear_bhb_loop+0x30/0x80 [ 52.455735][ T1474] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 52.461617][ T1474] RIP: 0033:0x7fb87239e0d9 [ 52.466029][ T1474] Code: Unable to access opcode bytes at 0x7fb87239e0af. [ 52.473029][ T1474] RSP: 002b:00007fb870df7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 52.481435][ T1474] RAX: 000000000003fffd RBX: 00007fb872626090 RCX: 00007fb87239e0d9 [ 52.489395][ T1474] RDX: 0000000004000087 RSI: 00002000000000c0 RDI: 0000000000000003 [ 52.497350][ T1474] RBP: 00007fb872435024 R08: 0000000000000000 R09: 0000000000000000 [ 52.505308][ T1474] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 52.513274][ T1474] R13: 00007fb872626128 R14: 00007fb872626090 R15: 00007ffeecb89588 [ 52.521239][ T1474] [ 52.524243][ C1] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0 [ 52.524280][ C0] FAULT_INJECTION: forcing a failure. [ 52.524280][ C0] name failslab, interval 1, probability 100, space 0, times 9 [ 52.531690][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.531700][ C1] Call Trace: [ 52.531706][ C1] [ 52.560557][ C1] __dump_stack+0x21/0x24 [ 52.564884][ C1] dump_stack_lvl+0x110/0x170 [ 52.569557][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 52.574573][ C1] ? reweight_entity+0x73/0x5c0 [ 52.579419][ C1] ? hrtimer_active+0x1ea/0x200 [ 52.584281][ C1] dump_stack+0x15/0x24 [ 52.588425][ C1] should_fail_ex+0x3bf/0x510 [ 52.593088][ C1] __should_failslab+0xac/0xf0 [ 52.597849][ C1] should_failslab+0x9/0x20 [ 52.602338][ C1] kmem_cache_alloc_node+0x42/0x330 [ 52.607531][ C1] ? __alloc_skb+0xe8/0x4a0 [ 52.612023][ C1] __alloc_skb+0xe8/0x4a0 [ 52.616338][ C1] wg_packet_send_keepalive+0x62/0x1c0 [ 52.621789][ C1] ? wg_expired_send_persistent_keepalive+0x44/0x80 [ 52.628373][ C1] wg_expired_send_persistent_keepalive+0x53/0x80 [ 52.634780][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 52.641882][ C1] call_timer_fn+0x46/0x2a0 [ 52.646379][ C1] ? __cfi_wg_expired_send_persistent_keepalive+0x10/0x10 [ 52.653481][ C1] __run_timers+0x646/0x9b0 [ 52.657980][ C1] ? calc_index+0x200/0x200 [ 52.662501][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 52.667694][ C1] run_timer_softirq+0x6a/0xf0 [ 52.672446][ C1] handle_softirqs+0x1d7/0x600 [ 52.677201][ C1] __irq_exit_rcu+0x52/0xf0 [ 52.681699][ C1] irq_exit_rcu+0x9/0x10 [ 52.685932][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 52.691560][ C1] [ 52.694476][ C1] [ 52.697399][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 52.703372][ C1] RIP: 0010:queued_read_lock_slowpath+0x112/0x350 [ 52.709865][ C1] Code: 00 00 49 89 df 49 c1 ef 03 43 0f b6 04 27 84 c0 74 35 89 d9 80 e1 07 80 c1 03 38 c1 7c 29 48 89 df e8 62 c9 b5 fc eb 1f f3 90 <43> 0f b6 04 27 84 c0 74 14 89 d9 80 e1 07 80 c1 03 38 c1 7c 08 48 [ 52.729453][ C1] RSP: 0018:ffffc9000bb37b00 EFLAGS: 00000286 [ 52.735506][ C1] RAX: 00000000000002ff RBX: ffffffff8700a040 RCX: ffffffff85012733 [ 52.743466][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8700a040 [ 52.751423][ C1] RBP: ffffc9000bb37b90 R08: ffffffff8700a043 R09: 1ffffffff0e01408 [ 52.759380][ C1] R10: dffffc0000000000 R11: fffffbfff0e01409 R12: dffffc0000000000 [ 52.767336][ C1] R13: 1ffff92001766f60 R14: ffffffff8700a044 R15: 1ffffffff0e01408 [ 52.775303][ C1] ? queued_read_lock_slowpath+0xe3/0x350 [ 52.781020][ C1] ? __cfi_queued_read_lock_slowpath+0x10/0x10 [ 52.787169][ C1] _raw_read_lock+0x3a/0x40 [ 52.791661][ C1] do_wait+0x1f9/0x9c0 [ 52.795726][ C1] kernel_wait4+0x1d1/0x2b0 [ 52.800224][ C1] ? __cfi_kernel_wait4+0x10/0x10 [ 52.805246][ C1] ? __cfi_child_wait_callback+0x10/0x10 [ 52.810873][ C1] __x64_sys_wait4+0x163/0x230 [ 52.815623][ C1] ? __cfi___x64_sys_wait4+0x10/0x10 [ 52.820900][ C1] ? __kasan_check_write+0x14/0x20 [ 52.826001][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 52.831624][ C1] ? switch_fpu_return+0xe/0x10 [ 52.836464][ C1] x64_sys_call+0x927/0x9a0 [ 52.840957][ C1] do_syscall_64+0x4c/0xa0 [ 52.845372][ C1] ? clear_bhb_loop+0x30/0x80 [ 52.850044][ C1] ? clear_bhb_loop+0x30/0x80 [ 52.854762][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 52.860649][ C1] RIP: 0033:0x7fb872359257 [ 52.865049][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 52.884637][ C1] RSP: 002b:00007ffeecb898a0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 52.893037][ C1] RAX: ffffffffffffffda RBX: 0000555563663500 RCX: 00007fb872359257 [ 52.900997][ C1] RDX: 0000000040000001 RSI: 00007ffeecb8992c RDI: ffffffffffffffff [ 52.908954][ C1] RBP: 00007ffeecb8992c R08: 0000000000000000 R09: 0000000000000000 [ 52.916914][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 52.924869][ C1] R13: 00000000000927c0 R14: 000000000000cb5e R15: 00007ffeecb89980 [ 52.932829][ C1] [ 52.935832][ C0] CPU: 0 PID: 1474 Comm: syz.1.425 Not tainted syzkaller #0 [ 52.935898][ C1] FAULT_INJECTION: forcing a failure. [ 52.935898][ C1] name failslab, interval 1, probability 100, space 0, times 8 [ 52.943107][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 52.943117][ C0] Call Trace: [ 52.943122][ C0] [ 52.943128][ C0] __dump_stack+0x21/0x24 [ 52.976257][ C0] dump_stack_lvl+0x110/0x170 [ 52.980929][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 52.985943][ C0] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 52.991395][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 52.997279][ C0] dump_stack+0x15/0x24 [ 53.001424][ C0] should_fail_ex+0x3bf/0x510 [ 53.006088][ C0] __should_failslab+0xac/0xf0 [ 53.010841][ C0] should_failslab+0x9/0x20 [ 53.015329][ C0] kmem_cache_alloc_node+0x42/0x330 [ 53.020523][ C0] ? __alloc_skb+0xe8/0x4a0 [ 53.025014][ C0] __alloc_skb+0xe8/0x4a0 [ 53.029328][ C0] ndisc_send_rs+0x31d/0x870 [ 53.033904][ C0] ? ipv6_get_lladdr+0x1be/0x200 [ 53.038836][ C0] addrconf_rs_timer+0x35a/0x600 [ 53.043855][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 53.049327][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 53.054787][ C0] call_timer_fn+0x46/0x2a0 [ 53.059291][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 53.064754][ C0] __run_timers+0x646/0x9b0 [ 53.069261][ C0] ? calc_index+0x200/0x200 [ 53.073764][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 53.078969][ C0] run_timer_softirq+0x6a/0xf0 [ 53.083733][ C0] handle_softirqs+0x1d7/0x600 [ 53.088491][ C0] __irq_exit_rcu+0x52/0xf0 [ 53.092988][ C0] irq_exit_rcu+0x9/0x10 [ 53.097219][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 53.102851][ C0] [ 53.105768][ C0] [ 53.108684][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 53.114659][ C0] RIP: 0010:_raw_write_unlock_irq+0x27/0x60 [ 53.120566][ C0] Code: 2c 51 2b 55 48 89 e5 53 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 23 c6 07 00 fb bf 01 00 00 00 04 8a 4b fc 65 8b 05 55 61 01 7b 85 c0 74 03 5b 5d c3 e8 25 70 [ 53.140341][ C0] RSP: 0000:ffffc90000c178f8 EFLAGS: 00000246 [ 53.146408][ C0] RAX: 0000000000000000 RBX: ffff888134500000 RCX: dffffc0000000000 [ 53.154369][ C0] RDX: dffffc0000000000 RSI: 0000000000000806 RDI: 0000000000000001 [ 53.162324][ C0] RBP: ffffc90000c17900 R08: ffff88810dcca898 R09: 0000000000000004 [ 53.170280][ C0] R10: dffffc0000000000 R11: fffff52000182e98 R12: 0000000000000020 [ 53.178239][ C0] R13: 1ffff110268d50b0 R14: ffff8881346a8000 R15: ffff8881346a8584 [ 53.186217][ C0] release_task+0x113f/0x1200 [ 53.190913][ C0] do_exit+0x1a1d/0x2850 [ 53.195196][ C0] ? __cfi_do_exit+0x10/0x10 [ 53.199802][ C0] ? __kasan_check_write+0x14/0x20 [ 53.204917][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 53.210034][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 53.215578][ C0] do_group_exit+0x21b/0x2e0 [ 53.220164][ C0] ? __kasan_check_write+0x14/0x20 [ 53.225265][ C0] ? recalc_sigpending+0x168/0x1c0 [ 53.230370][ C0] get_signal+0x167c/0x1700 [ 53.234871][ C0] ? __cfi_get_signal+0x10/0x10 [ 53.239716][ C0] ? fput+0x15b/0x1a0 [ 53.243702][ C0] arch_do_signal_or_restart+0xd1/0x11c0 [ 53.249324][ C0] ? __sys_recvmmsg+0x290/0x290 [ 53.254165][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 53.259189][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 53.265076][ C0] ? __set_current_blocked+0x208/0x230 [ 53.270531][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 53.276688][ C0] ? __fget_files+0x2d1/0x330 [ 53.281357][ C0] ? __x64_sys_recvmmsg+0x195/0x250 [ 53.286556][ C0] ? __kasan_check_write+0x14/0x20 [ 53.291657][ C0] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 53.297195][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 53.302380][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 53.307831][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 53.313276][ C0] do_syscall_64+0x58/0xa0 [ 53.317698][ C0] ? clear_bhb_loop+0x30/0x80 [ 53.322376][ C0] ? clear_bhb_loop+0x30/0x80 [ 53.327047][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.332941][ C0] RIP: 0033:0x7fb87239e0d9 [ 53.337349][ C0] Code: Unable to access opcode bytes at 0x7fb87239e0af. [ 53.344360][ C0] RSP: 002b:00007fb870df7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 53.352761][ C0] RAX: 000000000003fffd RBX: 00007fb872626090 RCX: 00007fb87239e0d9 [ 53.360721][ C0] RDX: 0000000004000087 RSI: 00002000000000c0 RDI: 0000000000000003 [ 53.368677][ C0] RBP: 00007fb872435024 R08: 0000000000000000 R09: 0000000000000000 [ 53.376639][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 53.384595][ C0] R13: 00007fb872626128 R14: 00007fb872626090 R15: 00007ffeecb89588 [ 53.392565][ C0] [ 53.395570][ C1] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0 [ 53.395606][ C0] FAULT_INJECTION: forcing a failure. [ 53.395606][ C0] name failslab, interval 1, probability 100, space 0, times 7 [ 53.403019][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.403028][ C1] Call Trace: [ 53.403035][ C1] [ 53.431855][ C1] __dump_stack+0x21/0x24 [ 53.436179][ C1] dump_stack_lvl+0x110/0x170 [ 53.440846][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 53.445859][ C1] ? probe_sched_wakeup+0x71/0x90 [ 53.450878][ C1] ? ttwu_do_wakeup+0x468/0x490 [ 53.455725][ C1] dump_stack+0x15/0x24 [ 53.459869][ C1] should_fail_ex+0x3bf/0x510 [ 53.464533][ C1] __should_failslab+0xac/0xf0 [ 53.469290][ C1] should_failslab+0x9/0x20 [ 53.473779][ C1] kmem_cache_alloc_node+0x42/0x330 [ 53.478968][ C1] ? __alloc_skb+0xe8/0x4a0 [ 53.483458][ C1] __alloc_skb+0xe8/0x4a0 [ 53.487776][ C1] ndisc_send_rs+0x31d/0x870 [ 53.492352][ C1] ? ipv6_get_lladdr+0x1be/0x200 [ 53.497281][ C1] addrconf_rs_timer+0x35a/0x600 [ 53.502293][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 53.507743][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 53.512758][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 53.518294][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 53.523743][ C1] call_timer_fn+0x46/0x2a0 [ 53.528239][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 53.533700][ C1] __run_timers+0x646/0x9b0 [ 53.538196][ C1] ? calc_index+0x200/0x200 [ 53.542688][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 53.547883][ C1] run_timer_softirq+0x6a/0xf0 [ 53.552637][ C1] handle_softirqs+0x1d7/0x600 [ 53.557392][ C1] __irq_exit_rcu+0x52/0xf0 [ 53.561880][ C1] irq_exit_rcu+0x9/0x10 [ 53.566113][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 53.571751][ C1] [ 53.574670][ C1] [ 53.577584][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 53.583558][ C1] RIP: 0010:queued_read_lock_slowpath+0x112/0x350 [ 53.589980][ C1] Code: 00 00 49 89 df 49 c1 ef 03 43 0f b6 04 27 84 c0 74 35 89 d9 80 e1 07 80 c1 03 38 c1 7c 29 48 89 df e8 62 c9 b5 fc eb 1f f3 90 <43> 0f b6 04 27 84 c0 74 14 89 d9 80 e1 07 80 c1 03 38 c1 7c 08 48 [ 53.609569][ C1] RSP: 0018:ffffc9000bb37b00 EFLAGS: 00000286 [ 53.615637][ C1] RAX: 00000000000002ff RBX: ffffffff8700a040 RCX: ffffffff85012733 [ 53.623595][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8700a040 [ 53.631560][ C1] RBP: ffffc9000bb37b90 R08: ffffffff8700a043 R09: 1ffffffff0e01408 [ 53.639520][ C1] R10: dffffc0000000000 R11: fffffbfff0e01409 R12: dffffc0000000000 [ 53.647480][ C1] R13: 1ffff92001766f60 R14: ffffffff8700a044 R15: 1ffffffff0e01408 [ 53.655438][ C1] ? queued_read_lock_slowpath+0xe3/0x350 [ 53.661159][ C1] ? __cfi_queued_read_lock_slowpath+0x10/0x10 [ 53.667307][ C1] _raw_read_lock+0x3a/0x40 [ 53.671802][ C1] do_wait+0x1f9/0x9c0 [ 53.675868][ C1] kernel_wait4+0x1d1/0x2b0 [ 53.680362][ C1] ? __cfi_kernel_wait4+0x10/0x10 [ 53.685380][ C1] ? __cfi_child_wait_callback+0x10/0x10 [ 53.691013][ C1] __x64_sys_wait4+0x163/0x230 [ 53.695763][ C1] ? __cfi___x64_sys_wait4+0x10/0x10 [ 53.701038][ C1] ? __kasan_check_write+0x14/0x20 [ 53.706140][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 53.711763][ C1] ? switch_fpu_return+0xe/0x10 [ 53.716603][ C1] x64_sys_call+0x927/0x9a0 [ 53.721099][ C1] do_syscall_64+0x4c/0xa0 [ 53.725504][ C1] ? clear_bhb_loop+0x30/0x80 [ 53.730163][ C1] ? clear_bhb_loop+0x30/0x80 [ 53.734822][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 53.740709][ C1] RIP: 0033:0x7fb872359257 [ 53.745115][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 53.764704][ C1] RSP: 002b:00007ffeecb898a0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 53.773104][ C1] RAX: ffffffffffffffda RBX: 0000555563663500 RCX: 00007fb872359257 [ 53.781062][ C1] RDX: 0000000040000001 RSI: 00007ffeecb8992c RDI: ffffffffffffffff [ 53.789033][ C1] RBP: 00007ffeecb8992c R08: 0000000000000000 R09: 0000000000000000 [ 53.797174][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 53.805144][ C1] R13: 00000000000927c0 R14: 000000000000cb5e R15: 00007ffeecb89980 [ 53.813115][ C1] [ 53.816122][ C0] CPU: 0 PID: 1474 Comm: syz.1.425 Not tainted syzkaller #0 [ 53.816166][ C1] FAULT_INJECTION: forcing a failure. [ 53.816166][ C1] name failslab, interval 1, probability 100, space 0, times 6 [ 53.823401][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 53.823411][ C0] Call Trace: [ 53.823417][ C0] [ 53.823424][ C0] __dump_stack+0x21/0x24 [ 53.856749][ C0] dump_stack_lvl+0x110/0x170 [ 53.861423][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 53.866441][ C0] ? calc_wheel_index+0x1b5/0x8d0 [ 53.871462][ C0] ? timer_update_keys+0xb0/0xb0 [ 53.876405][ C0] dump_stack+0x15/0x24 [ 53.880566][ C0] should_fail_ex+0x3bf/0x510 [ 53.885234][ C0] __should_failslab+0xac/0xf0 [ 53.889990][ C0] should_failslab+0x9/0x20 [ 53.894482][ C0] kmem_cache_alloc_node+0x42/0x330 [ 53.899673][ C0] ? __alloc_skb+0xe8/0x4a0 [ 53.904165][ C0] __alloc_skb+0xe8/0x4a0 [ 53.908483][ C0] ndisc_send_rs+0x31d/0x870 [ 53.913061][ C0] ? ipv6_get_lladdr+0x1be/0x200 [ 53.918081][ C0] addrconf_rs_timer+0x35a/0x600 [ 53.923009][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 53.928457][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 53.933476][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 53.939014][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 53.944465][ C0] call_timer_fn+0x46/0x2a0 [ 53.948960][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 53.954414][ C0] __run_timers+0x646/0x9b0 [ 53.958926][ C0] ? calc_index+0x200/0x200 [ 53.963422][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 53.968616][ C0] run_timer_softirq+0x6a/0xf0 [ 53.973377][ C0] handle_softirqs+0x1d7/0x600 [ 53.978305][ C0] __irq_exit_rcu+0x52/0xf0 [ 53.982797][ C0] irq_exit_rcu+0x9/0x10 [ 53.987032][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 53.992678][ C0] [ 53.995595][ C0] [ 53.998509][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 54.004572][ C0] RIP: 0010:_raw_write_unlock_irq+0x27/0x60 [ 54.010807][ C0] Code: 2c 51 2b 55 48 89 e5 53 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 23 c6 07 00 fb bf 01 00 00 00 04 8a 4b fc 65 8b 05 55 61 01 7b 85 c0 74 03 5b 5d c3 e8 25 70 [ 54.030579][ C0] RSP: 0000:ffffc90000c178f8 EFLAGS: 00000246 [ 54.036638][ C0] RAX: 0000000000000000 RBX: ffff888134500000 RCX: dffffc0000000000 [ 54.044601][ C0] RDX: dffffc0000000000 RSI: 0000000000000806 RDI: 0000000000000001 [ 54.052559][ C0] RBP: ffffc90000c17900 R08: ffff88810dcca898 R09: 0000000000000004 [ 54.060516][ C0] R10: dffffc0000000000 R11: fffff52000182e98 R12: 0000000000000020 [ 54.068482][ C0] R13: 1ffff110268d50b0 R14: ffff8881346a8000 R15: ffff8881346a8584 [ 54.076534][ C0] release_task+0x113f/0x1200 [ 54.081215][ C0] do_exit+0x1a1d/0x2850 [ 54.085464][ C0] ? __cfi_do_exit+0x10/0x10 [ 54.090072][ C0] ? __kasan_check_write+0x14/0x20 [ 54.095193][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 54.100223][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 54.105767][ C0] do_group_exit+0x21b/0x2e0 [ 54.110375][ C0] ? __kasan_check_write+0x14/0x20 [ 54.115480][ C0] ? recalc_sigpending+0x168/0x1c0 [ 54.120586][ C0] get_signal+0x167c/0x1700 [ 54.125094][ C0] ? __cfi_get_signal+0x10/0x10 [ 54.129941][ C0] ? fput+0x15b/0x1a0 [ 54.133918][ C0] arch_do_signal_or_restart+0xd1/0x11c0 [ 54.139546][ C0] ? __sys_recvmmsg+0x290/0x290 [ 54.144492][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 54.149517][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 54.155405][ C0] ? __set_current_blocked+0x208/0x230 [ 54.160864][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 54.167016][ C0] ? __fget_files+0x2d1/0x330 [ 54.171689][ C0] ? __x64_sys_recvmmsg+0x195/0x250 [ 54.176885][ C0] ? __kasan_check_write+0x14/0x20 [ 54.182007][ C0] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 54.187552][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 54.192745][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 54.198207][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 54.203673][ C0] do_syscall_64+0x58/0xa0 [ 54.208086][ C0] ? clear_bhb_loop+0x30/0x80 [ 54.212753][ C0] ? clear_bhb_loop+0x30/0x80 [ 54.217420][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.223313][ C0] RIP: 0033:0x7fb87239e0d9 [ 54.227737][ C0] Code: Unable to access opcode bytes at 0x7fb87239e0af. [ 54.234914][ C0] RSP: 002b:00007fb870df7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 54.243489][ C0] RAX: 000000000003fffd RBX: 00007fb872626090 RCX: 00007fb87239e0d9 [ 54.251468][ C0] RDX: 0000000004000087 RSI: 00002000000000c0 RDI: 0000000000000003 [ 54.259431][ C0] RBP: 00007fb872435024 R08: 0000000000000000 R09: 0000000000000000 [ 54.267388][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 54.275372][ C0] R13: 00007fb872626128 R14: 00007fb872626090 R15: 00007ffeecb89588 [ 54.283425][ C0] [ 54.286433][ C1] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0 [ 54.286472][ C0] FAULT_INJECTION: forcing a failure. [ 54.286472][ C0] name failslab, interval 1, probability 100, space 0, times 5 [ 54.293979][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.293989][ C1] Call Trace: [ 54.293996][ C1] [ 54.322835][ C1] __dump_stack+0x21/0x24 [ 54.327164][ C1] dump_stack_lvl+0x110/0x170 [ 54.331831][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 54.336849][ C1] ? calc_wheel_index+0x1b5/0x8d0 [ 54.341868][ C1] ? timer_update_keys+0xb0/0xb0 [ 54.346798][ C1] dump_stack+0x15/0x24 [ 54.350949][ C1] should_fail_ex+0x3bf/0x510 [ 54.355616][ C1] __should_failslab+0xac/0xf0 [ 54.360375][ C1] should_failslab+0x9/0x20 [ 54.364866][ C1] kmem_cache_alloc_node+0x42/0x330 [ 54.370059][ C1] ? __alloc_skb+0xe8/0x4a0 [ 54.374552][ C1] __alloc_skb+0xe8/0x4a0 [ 54.378871][ C1] ndisc_send_rs+0x31d/0x870 [ 54.383445][ C1] ? ipv6_get_lladdr+0x1be/0x200 [ 54.388378][ C1] addrconf_rs_timer+0x35a/0x600 [ 54.393311][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 54.398762][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 54.403788][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 54.409349][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 54.414799][ C1] call_timer_fn+0x46/0x2a0 [ 54.419320][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 54.424772][ C1] __run_timers+0x646/0x9b0 [ 54.429272][ C1] ? calc_index+0x200/0x200 [ 54.433777][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 54.438976][ C1] run_timer_softirq+0x6a/0xf0 [ 54.443739][ C1] handle_softirqs+0x1d7/0x600 [ 54.448495][ C1] __irq_exit_rcu+0x52/0xf0 [ 54.452993][ C1] irq_exit_rcu+0x9/0x10 [ 54.457222][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 54.462940][ C1] [ 54.465858][ C1] [ 54.468775][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 54.474755][ C1] RIP: 0010:queued_read_lock_slowpath+0x112/0x350 [ 54.481164][ C1] Code: 00 00 49 89 df 49 c1 ef 03 43 0f b6 04 27 84 c0 74 35 89 d9 80 e1 07 80 c1 03 38 c1 7c 29 48 89 df e8 62 c9 b5 fc eb 1f f3 90 <43> 0f b6 04 27 84 c0 74 14 89 d9 80 e1 07 80 c1 03 38 c1 7c 08 48 [ 54.500839][ C1] RSP: 0018:ffffc9000bb37b00 EFLAGS: 00000286 [ 54.506980][ C1] RAX: 00000000000002ff RBX: ffffffff8700a040 RCX: ffffffff85012733 [ 54.514941][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8700a040 [ 54.522904][ C1] RBP: ffffc9000bb37b90 R08: ffffffff8700a043 R09: 1ffffffff0e01408 [ 54.530863][ C1] R10: dffffc0000000000 R11: fffffbfff0e01409 R12: dffffc0000000000 [ 54.538826][ C1] R13: 1ffff92001766f60 R14: ffffffff8700a044 R15: 1ffffffff0e01408 [ 54.546784][ C1] ? queued_read_lock_slowpath+0xe3/0x350 [ 54.552509][ C1] ? __cfi_queued_read_lock_slowpath+0x10/0x10 [ 54.558678][ C1] _raw_read_lock+0x3a/0x40 [ 54.563186][ C1] do_wait+0x1f9/0x9c0 [ 54.567259][ C1] kernel_wait4+0x1d1/0x2b0 [ 54.571762][ C1] ? __cfi_kernel_wait4+0x10/0x10 [ 54.576787][ C1] ? __cfi_child_wait_callback+0x10/0x10 [ 54.582410][ C1] __x64_sys_wait4+0x163/0x230 [ 54.587163][ C1] ? __cfi___x64_sys_wait4+0x10/0x10 [ 54.592434][ C1] ? __kasan_check_write+0x14/0x20 [ 54.597532][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 54.603157][ C1] ? switch_fpu_return+0xe/0x10 [ 54.607994][ C1] x64_sys_call+0x927/0x9a0 [ 54.612491][ C1] do_syscall_64+0x4c/0xa0 [ 54.616899][ C1] ? clear_bhb_loop+0x30/0x80 [ 54.621562][ C1] ? clear_bhb_loop+0x30/0x80 [ 54.626224][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.632108][ C1] RIP: 0033:0x7fb872359257 [ 54.636506][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 54.656094][ C1] RSP: 002b:00007ffeecb898a0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 54.664492][ C1] RAX: ffffffffffffffda RBX: 0000555563663500 RCX: 00007fb872359257 [ 54.672449][ C1] RDX: 0000000040000001 RSI: 00007ffeecb8992c RDI: ffffffffffffffff [ 54.680405][ C1] RBP: 00007ffeecb8992c R08: 0000000000000000 R09: 0000000000000000 [ 54.688364][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 54.696318][ C1] R13: 00000000000927c0 R14: 000000000000cb5e R15: 00007ffeecb89980 [ 54.704278][ C1] [ 54.707282][ C0] CPU: 0 PID: 1474 Comm: syz.1.425 Not tainted syzkaller #0 [ 54.707328][ C1] FAULT_INJECTION: forcing a failure. [ 54.707328][ C1] name failslab, interval 1, probability 100, space 0, times 4 [ 54.714563][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 54.714573][ C0] Call Trace: [ 54.714579][ C0] [ 54.714585][ C0] __dump_stack+0x21/0x24 [ 54.747735][ C0] dump_stack_lvl+0x110/0x170 [ 54.752405][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 54.757416][ C0] ? calc_wheel_index+0x1b5/0x8d0 [ 54.762436][ C0] ? timer_update_keys+0xb0/0xb0 [ 54.767366][ C0] dump_stack+0x15/0x24 [ 54.771512][ C0] should_fail_ex+0x3bf/0x510 [ 54.776176][ C0] __should_failslab+0xac/0xf0 [ 54.780931][ C0] should_failslab+0x9/0x20 [ 54.785425][ C0] kmem_cache_alloc_node+0x42/0x330 [ 54.790617][ C0] ? __alloc_skb+0xe8/0x4a0 [ 54.795111][ C0] __alloc_skb+0xe8/0x4a0 [ 54.799426][ C0] ndisc_send_rs+0x31d/0x870 [ 54.804003][ C0] ? ipv6_get_lladdr+0x1be/0x200 [ 54.808934][ C0] addrconf_rs_timer+0x35a/0x600 [ 54.813858][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 54.819311][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 54.824326][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 54.829860][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 54.835308][ C0] call_timer_fn+0x46/0x2a0 [ 54.839802][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 54.845265][ C0] __run_timers+0x646/0x9b0 [ 54.849768][ C0] ? calc_index+0x200/0x200 [ 54.854354][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 54.859558][ C0] run_timer_softirq+0x6a/0xf0 [ 54.864311][ C0] handle_softirqs+0x1d7/0x600 [ 54.869065][ C0] __irq_exit_rcu+0x52/0xf0 [ 54.873553][ C0] irq_exit_rcu+0x9/0x10 [ 54.877782][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 54.883413][ C0] [ 54.886331][ C0] [ 54.889248][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 54.895225][ C0] RIP: 0010:_raw_write_unlock_irq+0x27/0x60 [ 54.901110][ C0] Code: 2c 51 2b 55 48 89 e5 53 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 23 c6 07 00 fb bf 01 00 00 00 04 8a 4b fc 65 8b 05 55 61 01 7b 85 c0 74 03 5b 5d c3 e8 25 70 [ 54.920701][ C0] RSP: 0000:ffffc90000c178f8 EFLAGS: 00000246 [ 54.926752][ C0] RAX: 0000000000000000 RBX: ffff888134500000 RCX: dffffc0000000000 [ 54.934708][ C0] RDX: dffffc0000000000 RSI: 0000000000000806 RDI: 0000000000000001 [ 54.942665][ C0] RBP: ffffc90000c17900 R08: ffff88810dcca898 R09: 0000000000000004 [ 54.950625][ C0] R10: dffffc0000000000 R11: fffff52000182e98 R12: 0000000000000020 [ 54.958583][ C0] R13: 1ffff110268d50b0 R14: ffff8881346a8000 R15: ffff8881346a8584 [ 54.966544][ C0] release_task+0x113f/0x1200 [ 54.971222][ C0] do_exit+0x1a1d/0x2850 [ 54.975462][ C0] ? __cfi_do_exit+0x10/0x10 [ 54.980053][ C0] ? __kasan_check_write+0x14/0x20 [ 54.985154][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 54.990174][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 54.995710][ C0] do_group_exit+0x21b/0x2e0 [ 55.000294][ C0] ? __kasan_check_write+0x14/0x20 [ 55.005390][ C0] ? recalc_sigpending+0x168/0x1c0 [ 55.010497][ C0] get_signal+0x167c/0x1700 [ 55.015001][ C0] ? __cfi_get_signal+0x10/0x10 [ 55.019845][ C0] ? fput+0x15b/0x1a0 [ 55.023822][ C0] arch_do_signal_or_restart+0xd1/0x11c0 [ 55.029452][ C0] ? __sys_recvmmsg+0x290/0x290 [ 55.034292][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 55.039316][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 55.045207][ C0] ? __set_current_blocked+0x208/0x230 [ 55.050660][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 55.056803][ C0] ? __fget_files+0x2d1/0x330 [ 55.061467][ C0] ? __x64_sys_recvmmsg+0x195/0x250 [ 55.066658][ C0] ? __kasan_check_write+0x14/0x20 [ 55.071758][ C0] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 55.077298][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 55.082483][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 55.087936][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 55.093380][ C0] do_syscall_64+0x58/0xa0 [ 55.097784][ C0] ? clear_bhb_loop+0x30/0x80 [ 55.102446][ C0] ? clear_bhb_loop+0x30/0x80 [ 55.107219][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 55.113124][ C0] RIP: 0033:0x7fb87239e0d9 [ 55.117532][ C0] Code: Unable to access opcode bytes at 0x7fb87239e0af. [ 55.124535][ C0] RSP: 002b:00007fb870df7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 55.132945][ C0] RAX: 000000000003fffd RBX: 00007fb872626090 RCX: 00007fb87239e0d9 [ 55.140906][ C0] RDX: 0000000004000087 RSI: 00002000000000c0 RDI: 0000000000000003 [ 55.148871][ C0] RBP: 00007fb872435024 R08: 0000000000000000 R09: 0000000000000000 [ 55.156834][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 55.164893][ C0] R13: 00007fb872626128 R14: 00007fb872626090 R15: 00007ffeecb89588 [ 55.172863][ C0] [ 55.175878][ C1] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0 [ 55.175921][ C0] FAULT_INJECTION: forcing a failure. [ 55.175921][ C0] name failslab, interval 1, probability 100, space 0, times 3 [ 55.183347][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.183358][ C1] Call Trace: [ 55.183364][ C1] [ 55.212194][ C1] __dump_stack+0x21/0x24 [ 55.216520][ C1] dump_stack_lvl+0x110/0x170 [ 55.221186][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 55.226197][ C1] ? calc_wheel_index+0x1b5/0x8d0 [ 55.231214][ C1] ? timer_update_keys+0xb0/0xb0 [ 55.236149][ C1] dump_stack+0x15/0x24 [ 55.240301][ C1] should_fail_ex+0x3bf/0x510 [ 55.244963][ C1] __should_failslab+0xac/0xf0 [ 55.249720][ C1] should_failslab+0x9/0x20 [ 55.254211][ C1] kmem_cache_alloc_node+0x42/0x330 [ 55.259410][ C1] ? __alloc_skb+0xe8/0x4a0 [ 55.263908][ C1] __alloc_skb+0xe8/0x4a0 [ 55.268224][ C1] ndisc_send_rs+0x31d/0x870 [ 55.272825][ C1] ? ipv6_get_lladdr+0x1be/0x200 [ 55.277759][ C1] addrconf_rs_timer+0x35a/0x600 [ 55.282695][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 55.288146][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 55.293159][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 55.298695][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 55.304142][ C1] call_timer_fn+0x46/0x2a0 [ 55.308639][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 55.314087][ C1] __run_timers+0x646/0x9b0 [ 55.318584][ C1] ? calc_index+0x200/0x200 [ 55.323078][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 55.328274][ C1] run_timer_softirq+0x6a/0xf0 [ 55.333029][ C1] handle_softirqs+0x1d7/0x600 [ 55.337782][ C1] __irq_exit_rcu+0x52/0xf0 [ 55.342282][ C1] irq_exit_rcu+0x9/0x10 [ 55.346510][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 55.352140][ C1] [ 55.355054][ C1] [ 55.357968][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 55.363958][ C1] RIP: 0010:queued_read_lock_slowpath+0x112/0x350 [ 55.370367][ C1] Code: 00 00 49 89 df 49 c1 ef 03 43 0f b6 04 27 84 c0 74 35 89 d9 80 e1 07 80 c1 03 38 c1 7c 29 48 89 df e8 62 c9 b5 fc eb 1f f3 90 <43> 0f b6 04 27 84 c0 74 14 89 d9 80 e1 07 80 c1 03 38 c1 7c 08 48 [ 55.389956][ C1] RSP: 0018:ffffc9000bb37b00 EFLAGS: 00000286 [ 55.396017][ C1] RAX: 00000000000002ff RBX: ffffffff8700a040 RCX: ffffffff85012733 [ 55.403975][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8700a040 [ 55.411935][ C1] RBP: ffffc9000bb37b90 R08: ffffffff8700a043 R09: 1ffffffff0e01408 [ 55.419890][ C1] R10: dffffc0000000000 R11: fffffbfff0e01409 R12: dffffc0000000000 [ 55.427847][ C1] R13: 1ffff92001766f60 R14: ffffffff8700a044 R15: 1ffffffff0e01408 [ 55.435811][ C1] ? queued_read_lock_slowpath+0xe3/0x350 [ 55.441528][ C1] ? __cfi_queued_read_lock_slowpath+0x10/0x10 [ 55.447674][ C1] _raw_read_lock+0x3a/0x40 [ 55.452169][ C1] do_wait+0x1f9/0x9c0 [ 55.456239][ C1] kernel_wait4+0x1d1/0x2b0 [ 55.460734][ C1] ? __cfi_kernel_wait4+0x10/0x10 [ 55.465751][ C1] ? __cfi_child_wait_callback+0x10/0x10 [ 55.471372][ C1] __x64_sys_wait4+0x163/0x230 [ 55.476123][ C1] ? __cfi___x64_sys_wait4+0x10/0x10 [ 55.481394][ C1] ? __kasan_check_write+0x14/0x20 [ 55.486492][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 55.492112][ C1] ? switch_fpu_return+0xe/0x10 [ 55.496964][ C1] x64_sys_call+0x927/0x9a0 [ 55.501464][ C1] do_syscall_64+0x4c/0xa0 [ 55.505870][ C1] ? clear_bhb_loop+0x30/0x80 [ 55.510533][ C1] ? clear_bhb_loop+0x30/0x80 [ 55.515195][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 55.521084][ C1] RIP: 0033:0x7fb872359257 [ 55.525497][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 55.545088][ C1] RSP: 002b:00007ffeecb898a0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 55.553598][ C1] RAX: ffffffffffffffda RBX: 0000555563663500 RCX: 00007fb872359257 [ 55.561571][ C1] RDX: 0000000040000001 RSI: 00007ffeecb8992c RDI: ffffffffffffffff [ 55.569528][ C1] RBP: 00007ffeecb8992c R08: 0000000000000000 R09: 0000000000000000 [ 55.577490][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 55.585448][ C1] R13: 00000000000927c0 R14: 000000000000cb5e R15: 00007ffeecb89980 [ 55.593409][ C1] [ 55.596415][ C0] CPU: 0 PID: 1474 Comm: syz.1.425 Not tainted syzkaller #0 [ 55.596449][ C1] FAULT_INJECTION: forcing a failure. [ 55.596449][ C1] name failslab, interval 1, probability 100, space 0, times 2 [ 55.603693][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 55.603704][ C0] Call Trace: [ 55.603710][ C0] [ 55.632556][ C0] __dump_stack+0x21/0x24 [ 55.636880][ C0] dump_stack_lvl+0x110/0x170 [ 55.641545][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 55.646557][ C0] ? calc_wheel_index+0x1b5/0x8d0 [ 55.651576][ C0] ? timer_update_keys+0xb0/0xb0 [ 55.656506][ C0] dump_stack+0x15/0x24 [ 55.660648][ C0] should_fail_ex+0x3bf/0x510 [ 55.665310][ C0] __should_failslab+0xac/0xf0 [ 55.670065][ C0] should_failslab+0x9/0x20 [ 55.674555][ C0] kmem_cache_alloc_node+0x42/0x330 [ 55.679750][ C0] ? __alloc_skb+0xe8/0x4a0 [ 55.684242][ C0] __alloc_skb+0xe8/0x4a0 [ 55.688558][ C0] ndisc_send_rs+0x31d/0x870 [ 55.693141][ C0] ? ipv6_get_lladdr+0x1be/0x200 [ 55.698077][ C0] addrconf_rs_timer+0x35a/0x600 [ 55.703004][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 55.708452][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 55.713469][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 55.719004][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 55.724460][ C0] call_timer_fn+0x46/0x2a0 [ 55.728955][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 55.734403][ C0] __run_timers+0x646/0x9b0 [ 55.738902][ C0] ? calc_index+0x200/0x200 [ 55.743399][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 55.748596][ C0] run_timer_softirq+0x6a/0xf0 [ 55.753351][ C0] handle_softirqs+0x1d7/0x600 [ 55.758105][ C0] __irq_exit_rcu+0x52/0xf0 [ 55.762594][ C0] irq_exit_rcu+0x9/0x10 [ 55.766827][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 55.772454][ C0] [ 55.775372][ C0] [ 55.778286][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 55.784259][ C0] RIP: 0010:_raw_write_unlock_irq+0x27/0x60 [ 55.790148][ C0] Code: 2c 51 2b 55 48 89 e5 53 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 23 c6 07 00 fb bf 01 00 00 00 04 8a 4b fc 65 8b 05 55 61 01 7b 85 c0 74 03 5b 5d c3 e8 25 70 [ 55.809736][ C0] RSP: 0000:ffffc90000c178f8 EFLAGS: 00000246 [ 55.815788][ C0] RAX: 0000000000000000 RBX: ffff888134500000 RCX: dffffc0000000000 [ 55.823744][ C0] RDX: dffffc0000000000 RSI: 0000000000000806 RDI: 0000000000000001 [ 55.831706][ C0] RBP: ffffc90000c17900 R08: ffff88810dcca898 R09: 0000000000000004 [ 55.839706][ C0] R10: dffffc0000000000 R11: fffff52000182e98 R12: 0000000000000020 [ 55.847665][ C0] R13: 1ffff110268d50b0 R14: ffff8881346a8000 R15: ffff8881346a8584 [ 55.855630][ C0] release_task+0x113f/0x1200 [ 55.860316][ C0] do_exit+0x1a1d/0x2850 [ 55.864555][ C0] ? __cfi_do_exit+0x10/0x10 [ 55.869147][ C0] ? __kasan_check_write+0x14/0x20 [ 55.874266][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 55.879282][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 55.884820][ C0] do_group_exit+0x21b/0x2e0 [ 55.889406][ C0] ? __kasan_check_write+0x14/0x20 [ 55.894508][ C0] ? recalc_sigpending+0x168/0x1c0 [ 55.899611][ C0] get_signal+0x167c/0x1700 [ 55.904638][ C0] ? __cfi_get_signal+0x10/0x10 [ 55.909486][ C0] ? fput+0x15b/0x1a0 [ 55.913466][ C0] arch_do_signal_or_restart+0xd1/0x11c0 [ 55.919091][ C0] ? __sys_recvmmsg+0x290/0x290 [ 55.923931][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 55.928960][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 55.934940][ C0] ? __set_current_blocked+0x208/0x230 [ 55.940396][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 55.946545][ C0] ? __fget_files+0x2d1/0x330 [ 55.951213][ C0] ? __x64_sys_recvmmsg+0x195/0x250 [ 55.956492][ C0] ? __kasan_check_write+0x14/0x20 [ 55.961591][ C0] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 55.967128][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 55.972406][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 55.977854][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 55.983320][ C0] do_syscall_64+0x58/0xa0 [ 55.987735][ C0] ? clear_bhb_loop+0x30/0x80 [ 55.992400][ C0] ? clear_bhb_loop+0x30/0x80 [ 55.997070][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.002956][ C0] RIP: 0033:0x7fb87239e0d9 [ 56.007356][ C0] Code: Unable to access opcode bytes at 0x7fb87239e0af. [ 56.014354][ C0] RSP: 002b:00007fb870df7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 56.022755][ C0] RAX: 000000000003fffd RBX: 00007fb872626090 RCX: 00007fb87239e0d9 [ 56.030798][ C0] RDX: 0000000004000087 RSI: 00002000000000c0 RDI: 0000000000000003 [ 56.038785][ C0] RBP: 00007fb872435024 R08: 0000000000000000 R09: 0000000000000000 [ 56.046739][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 56.054697][ C0] R13: 00007fb872626128 R14: 00007fb872626090 R15: 00007ffeecb89588 [ 56.062660][ C0] [ 56.065673][ C1] CPU: 1 PID: 287 Comm: syz-executor Not tainted syzkaller #0 [ 56.065711][ C0] FAULT_INJECTION: forcing a failure. [ 56.065711][ C0] name failslab, interval 1, probability 100, space 0, times 1 [ 56.073133][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.073148][ C1] Call Trace: [ 56.073154][ C1] [ 56.073161][ C1] __dump_stack+0x21/0x24 [ 56.106377][ C1] dump_stack_lvl+0x110/0x170 [ 56.111047][ C1] ? __cfi_dump_stack_lvl+0x8/0x8 [ 56.116060][ C1] ? calc_wheel_index+0x1b5/0x8d0 [ 56.121079][ C1] ? timer_update_keys+0xb0/0xb0 [ 56.126008][ C1] dump_stack+0x15/0x24 [ 56.130152][ C1] should_fail_ex+0x3bf/0x510 [ 56.134824][ C1] __should_failslab+0xac/0xf0 [ 56.139587][ C1] should_failslab+0x9/0x20 [ 56.144076][ C1] kmem_cache_alloc_node+0x42/0x330 [ 56.149268][ C1] ? __alloc_skb+0xe8/0x4a0 [ 56.153758][ C1] __alloc_skb+0xe8/0x4a0 [ 56.158074][ C1] ndisc_send_rs+0x31d/0x870 [ 56.162647][ C1] ? ipv6_get_lladdr+0x1be/0x200 [ 56.167583][ C1] addrconf_rs_timer+0x35a/0x600 [ 56.172507][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 56.177955][ C1] ? _raw_spin_lock_irq+0x95/0xf0 [ 56.182974][ C1] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 56.188512][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 56.193962][ C1] call_timer_fn+0x46/0x2a0 [ 56.198459][ C1] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 56.203906][ C1] __run_timers+0x646/0x9b0 [ 56.208411][ C1] ? calc_index+0x200/0x200 [ 56.212906][ C1] ? kvm_sched_clock_read+0x18/0x40 [ 56.218099][ C1] run_timer_softirq+0x6a/0xf0 [ 56.222853][ C1] handle_softirqs+0x1d7/0x600 [ 56.227610][ C1] __irq_exit_rcu+0x52/0xf0 [ 56.232102][ C1] irq_exit_rcu+0x9/0x10 [ 56.236331][ C1] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 56.241964][ C1] [ 56.244881][ C1] [ 56.247794][ C1] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 56.253770][ C1] RIP: 0010:queued_read_lock_slowpath+0x112/0x350 [ 56.260180][ C1] Code: 00 00 49 89 df 49 c1 ef 03 43 0f b6 04 27 84 c0 74 35 89 d9 80 e1 07 80 c1 03 38 c1 7c 29 48 89 df e8 62 c9 b5 fc eb 1f f3 90 <43> 0f b6 04 27 84 c0 74 14 89 d9 80 e1 07 80 c1 03 38 c1 7c 08 48 [ 56.279776][ C1] RSP: 0018:ffffc9000bb37b00 EFLAGS: 00000286 [ 56.285845][ C1] RAX: 00000000000002ff RBX: ffffffff8700a040 RCX: ffffffff85012733 [ 56.293805][ C1] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffffff8700a040 [ 56.301769][ C1] RBP: ffffc9000bb37b90 R08: ffffffff8700a043 R09: 1ffffffff0e01408 [ 56.309733][ C1] R10: dffffc0000000000 R11: fffffbfff0e01409 R12: dffffc0000000000 [ 56.317691][ C1] R13: 1ffff92001766f60 R14: ffffffff8700a044 R15: 1ffffffff0e01408 [ 56.325664][ C1] ? queued_read_lock_slowpath+0xe3/0x350 [ 56.331381][ C1] ? __cfi_queued_read_lock_slowpath+0x10/0x10 [ 56.337535][ C1] _raw_read_lock+0x3a/0x40 [ 56.342025][ C1] do_wait+0x1f9/0x9c0 [ 56.346095][ C1] kernel_wait4+0x1d1/0x2b0 [ 56.350594][ C1] ? __cfi_kernel_wait4+0x10/0x10 [ 56.356222][ C1] ? __cfi_child_wait_callback+0x10/0x10 [ 56.361842][ C1] __x64_sys_wait4+0x163/0x230 [ 56.366590][ C1] ? __cfi___x64_sys_wait4+0x10/0x10 [ 56.371861][ C1] ? __kasan_check_write+0x14/0x20 [ 56.376959][ C1] ? fpregs_restore_userregs+0x128/0x260 [ 56.382581][ C1] ? switch_fpu_return+0xe/0x10 [ 56.387423][ C1] x64_sys_call+0x927/0x9a0 [ 56.391911][ C1] do_syscall_64+0x4c/0xa0 [ 56.396313][ C1] ? clear_bhb_loop+0x30/0x80 [ 56.400971][ C1] ? clear_bhb_loop+0x30/0x80 [ 56.405629][ C1] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.411515][ C1] RIP: 0033:0x7fb872359257 [ 56.415910][ C1] Code: 48 89 fa 4c 89 df e8 a8 56 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 56.435508][ C1] RSP: 002b:00007ffeecb898a0 EFLAGS: 00000202 ORIG_RAX: 000000000000003d [ 56.443917][ C1] RAX: ffffffffffffffda RBX: 0000555563663500 RCX: 00007fb872359257 [ 56.451876][ C1] RDX: 0000000040000001 RSI: 00007ffeecb8992c RDI: ffffffffffffffff [ 56.459832][ C1] RBP: 00007ffeecb8992c R08: 0000000000000000 R09: 0000000000000000 [ 56.467790][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000001388 [ 56.475750][ C1] R13: 00000000000927c0 R14: 000000000000cb5e R15: 00007ffeecb89980 [ 56.483768][ C1] [ 56.486772][ C0] CPU: 0 PID: 1474 Comm: syz.1.425 Not tainted syzkaller #0 [ 56.494047][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.504092][ C0] Call Trace: [ 56.507364][ C0] [ 56.510194][ C0] __dump_stack+0x21/0x24 [ 56.514524][ C0] dump_stack_lvl+0x110/0x170 [ 56.519190][ C0] ? __cfi_dump_stack_lvl+0x8/0x8 [ 56.524203][ C0] ? calc_wheel_index+0x1b5/0x8d0 [ 56.529237][ C0] ? timer_update_keys+0xb0/0xb0 [ 56.534162][ C0] dump_stack+0x15/0x24 [ 56.538300][ C0] should_fail_ex+0x3bf/0x510 [ 56.542958][ C0] __should_failslab+0xac/0xf0 [ 56.547728][ C0] should_failslab+0x9/0x20 [ 56.552216][ C0] kmem_cache_alloc_node+0x42/0x330 [ 56.557400][ C0] ? __alloc_skb+0xe8/0x4a0 [ 56.561884][ C0] __alloc_skb+0xe8/0x4a0 [ 56.566194][ C0] ndisc_send_rs+0x31d/0x870 [ 56.570769][ C0] ? ipv6_get_lladdr+0x1be/0x200 [ 56.575699][ C0] addrconf_rs_timer+0x35a/0x600 [ 56.580619][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 56.586058][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 56.591068][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 56.596597][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 56.602037][ C0] call_timer_fn+0x46/0x2a0 [ 56.606529][ C0] ? __cfi_addrconf_rs_timer+0x10/0x10 [ 56.611971][ C0] __run_timers+0x646/0x9b0 [ 56.616460][ C0] ? calc_index+0x200/0x200 [ 56.620953][ C0] ? kvm_sched_clock_read+0x18/0x40 [ 56.626142][ C0] run_timer_softirq+0x6a/0xf0 [ 56.630892][ C0] handle_softirqs+0x1d7/0x600 [ 56.635640][ C0] __irq_exit_rcu+0x52/0xf0 [ 56.640123][ C0] irq_exit_rcu+0x9/0x10 [ 56.644348][ C0] sysvec_apic_timer_interrupt+0xa9/0xc0 [ 56.649969][ C0] [ 56.652881][ C0] [ 56.655791][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 56.661759][ C0] RIP: 0010:_raw_write_unlock_irq+0x27/0x60 [ 56.667637][ C0] Code: 2c 51 2b 55 48 89 e5 53 48 89 f8 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df 0f b6 04 08 84 c0 75 23 c6 07 00 fb bf 01 00 00 00 04 8a 4b fc 65 8b 05 55 61 01 7b 85 c0 74 03 5b 5d c3 e8 25 70 [ 56.687225][ C0] RSP: 0000:ffffc90000c178f8 EFLAGS: 00000246 [ 56.693357][ C0] RAX: 0000000000000000 RBX: ffff888134500000 RCX: dffffc0000000000 [ 56.701310][ C0] RDX: dffffc0000000000 RSI: 0000000000000806 RDI: 0000000000000001 [ 56.709261][ C0] RBP: ffffc90000c17900 R08: ffff88810dcca898 R09: 0000000000000004 [ 56.717216][ C0] R10: dffffc0000000000 R11: fffff52000182e98 R12: 0000000000000020 [ 56.725170][ C0] R13: 1ffff110268d50b0 R14: ffff8881346a8000 R15: ffff8881346a8584 [ 56.733135][ C0] release_task+0x113f/0x1200 [ 56.737802][ C0] do_exit+0x1a1d/0x2850 [ 56.742045][ C0] ? __cfi_do_exit+0x10/0x10 [ 56.746623][ C0] ? __kasan_check_write+0x14/0x20 [ 56.751718][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 56.756727][ C0] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 56.762255][ C0] do_group_exit+0x21b/0x2e0 [ 56.766829][ C0] ? __kasan_check_write+0x14/0x20 [ 56.772005][ C0] ? recalc_sigpending+0x168/0x1c0 [ 56.777105][ C0] get_signal+0x167c/0x1700 [ 56.781610][ C0] ? __cfi_get_signal+0x10/0x10 [ 56.786445][ C0] ? fput+0x15b/0x1a0 [ 56.790416][ C0] arch_do_signal_or_restart+0xd1/0x11c0 [ 56.796033][ C0] ? __sys_recvmmsg+0x290/0x290 [ 56.800875][ C0] ? _raw_spin_lock_irq+0x95/0xf0 [ 56.805886][ C0] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 56.811763][ C0] ? __set_current_blocked+0x208/0x230 [ 56.817207][ C0] ? __cfi_arch_do_signal_or_restart+0x10/0x10 [ 56.823345][ C0] ? __fget_files+0x2d1/0x330 [ 56.828012][ C0] ? __x64_sys_recvmmsg+0x195/0x250 [ 56.833196][ C0] ? __kasan_check_write+0x14/0x20 [ 56.838291][ C0] ? __cfi___x64_sys_recvmmsg+0x10/0x10 [ 56.843829][ C0] exit_to_user_mode_loop+0x7a/0xb0 [ 56.849010][ C0] exit_to_user_mode_prepare+0x87/0xd0 [ 56.854451][ C0] syscall_exit_to_user_mode+0x1a/0x30 [ 56.859891][ C0] do_syscall_64+0x58/0xa0 [ 56.864307][ C0] ? clear_bhb_loop+0x30/0x80 [ 56.868965][ C0] ? clear_bhb_loop+0x30/0x80 [ 56.873620][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.879503][ C0] RIP: 0033:0x7fb87239e0d9 [ 56.883907][ C0] Code: Unable to access opcode bytes at 0x7fb87239e0af. [ 56.890900][ C0] RSP: 002b:00007fb870df7028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 56.899298][ C0] RAX: 000000000003fffd RBX: 00007fb872626090 RCX: 00007fb87239e0d9 [ 56.907259][ C0] RDX: 0000000004000087 RSI: 00002000000000c0 RDI: 0000000000000003 [ 56.915215][ C0] RBP: 00007fb872435024 R08: 0000000000000000 R09: 0000000000000000 [ 56.923164][ C0] R10: 0000000000000002 R11: 0000000000000246 R12: 0000000000000000 [ 56.931120][ C0] R13: 00007fb872626128 R14: 00007fb872626090 R15: 00007ffeecb89588 [ 56.939077][ C0] [ 56.947590][ T1487] CPU: 0 PID: 1487 Comm: syz.3.432 Not tainted syzkaller #0 [ 56.954899][ T1487] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 56.964952][ T1487] Call Trace: [ 56.968230][ T1487] [ 56.971166][ T1487] __dump_stack+0x21/0x24 [ 56.975493][ T1487] dump_stack_lvl+0x110/0x170 [ 56.980150][ T1487] ? __cfi_dump_stack_lvl+0x8/0x8 [ 56.985180][ T1487] ? release_sock+0x169/0x1c0 [ 56.989843][ T1487] dump_stack+0x15/0x24 [ 56.993985][ T1487] should_fail_ex+0x3bf/0x510 [ 56.998655][ T1487] __should_failslab+0xac/0xf0 [ 57.003435][ T1487] should_failslab+0x9/0x20 [ 57.007922][ T1487] kmem_cache_alloc_node+0x42/0x330 [ 57.013110][ T1487] ? __alloc_skb+0xe8/0x4a0 [ 57.017596][ T1487] __alloc_skb+0xe8/0x4a0 [ 57.021908][ T1487] netlink_sendmsg+0x635/0xbd0 [ 57.026670][ T1487] ? __cfi_netlink_sendmsg+0x10/0x10 [ 57.031960][ T1487] ? security_socket_sendmsg+0x93/0xb0 [ 57.037417][ T1487] ? __cfi_netlink_sendmsg+0x10/0x10 [ 57.042720][ T1487] ____sys_sendmsg+0x5fb/0x9c0 [ 57.047479][ T1487] ? __sys_sendmsg_sock+0x40/0x40 [ 57.052496][ T1487] ? import_iovec+0x7c/0xb0 [ 57.056988][ T1487] ___sys_sendmsg+0x2a2/0x360 [ 57.061694][ T1487] ? __sys_sendmsg+0x290/0x290 [ 57.066448][ T1487] ? vfs_write+0xa51/0xd00 [ 57.070851][ T1487] ? __fdget+0x19c/0x220 [ 57.075087][ T1487] __x64_sys_sendmsg+0x20d/0x2e0 [ 57.080450][ T1487] ? __cfi___x64_sys_sendmsg+0x10/0x10 [ 57.085899][ T1487] ? __kasan_check_write+0x14/0x20 [ 57.090995][ T1487] ? fpregs_restore_userregs+0x128/0x260 [ 57.096618][ T1487] ? switch_fpu_return+0xe/0x10 [ 57.101453][ T1487] x64_sys_call+0x171/0x9a0 [ 57.106033][ T1487] do_syscall_64+0x4c/0xa0 [ 57.110439][ T1487] ? clear_bhb_loop+0x30/0x80 [ 57.115102][ T1487] ? clear_bhb_loop+0x30/0x80 [ 57.119787][ T1487] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.125757][ T1487] RIP: 0033:0x7f1157f9e0d9 [ 57.130156][ T1487] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 57.150808][ T1487] RSP: 002b:00007f1158e33028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 57.159215][ T1487] RAX: ffffffffffffffda RBX: 00007f1158225fa0 RCX: 00007f1157f9e0d9 [ 57.167172][ T1487] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000007 [ 57.175141][ T1487] RBP: 00007f1158035024 R08: 0000000000000000 R09: 0000000000000000 [ 57.183097][ T1487] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 57.191060][ T1487] R13: 00007f1158226038 R14: 00007f1158225fa0 R15: 00007fff266512a8 [ 57.199021][ T1487] [ 57.202828][ T1479] CPU: 0 PID: 1479 Comm: syz.2.431 Not tainted syzkaller #0 [ 57.210224][ T1479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.220366][ T1479] Call Trace: [ 57.223693][ T1479] [ 57.226641][ T1479] __dump_stack+0x21/0x24 [ 57.230981][ T1479] dump_stack_lvl+0x110/0x170 [ 57.235711][ T1479] ? __cfi_dump_stack_lvl+0x8/0x8 [ 57.240749][ T1479] dump_stack+0x15/0x24 [ 57.244909][ T1479] should_fail_ex+0x3bf/0x510 [ 57.249611][ T1479] ? mas_alloc_nodes+0x2d8/0x850 [ 57.254595][ T1479] __should_failslab+0xac/0xf0 [ 57.259409][ T1479] should_failslab+0x9/0x20 [ 57.263932][ T1479] kmem_cache_alloc+0x3b/0x320 [ 57.268796][ T1479] mas_alloc_nodes+0x2d8/0x850 [ 57.273567][ T1479] mas_preallocate+0xe3d/0x1430 [ 57.278710][ T1479] ? __cfi_mas_preallocate+0x10/0x10 [ 57.284100][ T1479] ? rwsem_write_trylock+0x136/0x300 [ 57.289509][ T1479] vma_expand+0x437/0xad0 [ 57.293854][ T1479] mmap_region+0xf04/0x2130 [ 57.298360][ T1479] ? should_fail+0xb/0x10 [ 57.302689][ T1479] ? __cfi_mmap_region+0x10/0x10 [ 57.307632][ T1479] ? cap_mmap_addr+0x165/0x2e0 [ 57.312394][ T1479] ? futex_wake+0x5b7/0x8e0 [ 57.316904][ T1479] ? get_unmapped_area+0x30c/0x370 [ 57.322027][ T1479] do_mmap+0x858/0xdd0 [ 57.326103][ T1479] ? __cfi_do_mmap+0x10/0x10 [ 57.330701][ T1479] ? do_futex+0x2bf/0x430 [ 57.335026][ T1479] ? _copy_from_user+0x8f/0xc0 [ 57.339793][ T1479] vm_mmap_pgoff+0x206/0x3f0 [ 57.344385][ T1479] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 57.349497][ T1479] ? __x64_sys_futex+0x100/0x100 [ 57.354432][ T1479] ? xfd_validate_state+0x70/0x150 [ 57.359545][ T1479] ksys_mmap_pgoff+0xf6/0x1d0 [ 57.364228][ T1479] __x64_sys_mmap+0xfa/0x110 [ 57.368817][ T1479] x64_sys_call+0x8fd/0x9a0 [ 57.373322][ T1479] do_syscall_64+0x4c/0xa0 [ 57.377831][ T1479] ? clear_bhb_loop+0x30/0x80 [ 57.382502][ T1479] ? clear_bhb_loop+0x30/0x80 [ 57.387171][ T1479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.393065][ T1479] RIP: 0033:0x7f57d679de42 [ 57.397476][ T1479] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 57.417526][ T1479] RSP: 002b:00007ffcaa046cb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 57.425970][ T1479] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f57d679de42 [ 57.433944][ T1479] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 57.441913][ T1479] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 57.449885][ T1479] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffcaa046e20 [ 57.457853][ T1479] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 57.465841][ T1479] [ 57.469341][ T1479] ------------[ cut here ]------------ [ 57.474833][ T1479] kernel BUG at mm/mmap.c:2854! [ 57.479950][ T1479] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 57.486016][ T1479] CPU: 0 PID: 1479 Comm: syz.2.431 Not tainted syzkaller #0 [ 57.493296][ T1479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 57.503434][ T1479] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 57.509702][ T1479] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 69 46 09 00 e9 d2 f9 ff ff e8 ef ba c3 ff 0f 0b e8 e8 ba c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 57.529329][ T1479] RSP: 0018:ffffc90001097a40 EFLAGS: 00010293 [ 57.531527][ T28] kauditd_printk_skb: 3 callbacks suppressed [ 57.531539][ T28] audit: type=1400 audit(1786034935.321:194): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 57.535401][ T1479] RAX: ffffffff81adab58 RBX: 00007f57d7592000 RCX: ffff88811d463cc0 [ 57.535417][ T1479] RDX: 0000000000000000 RSI: 00007f57d7591fff RDI: 00007f57d7592000 [ 57.535428][ T1479] RBP: ffffc90001097c30 R08: ffff88811d463cc0 R09: 0000000000000003 [ 57.535437][ T1479] R10: 0000000000000003 R11: 0000000000000000 R12: 00007f57d7591fff [ 57.535446][ T1479] R13: 00007f57d7592000 R14: dffffc0000000000 R15: 00007f57d7571000 [ 57.535478][ T1479] FS: 000055557ffd4500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 57.535494][ T1479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 57.573543][ T1493] loop0: detected capacity change from 0 to 512 [ 57.579108][ T1479] CR2: 0000200001000000 CR3: 000000012f0ca000 CR4: 00000000003526b0 [ 57.632667][ T1479] Call Trace: [ 57.635946][ T1479] [ 57.638873][ T1479] ? should_fail+0xb/0x10 [ 57.643202][ T1479] ? __cfi_mmap_region+0x10/0x10 [ 57.648146][ T1479] ? cap_mmap_addr+0x165/0x2e0 [ 57.652915][ T1479] ? futex_wake+0x5b7/0x8e0 [ 57.657416][ T1479] ? get_unmapped_area+0x30c/0x370 [ 57.662526][ T1479] do_mmap+0x858/0xdd0 [ 57.666594][ T1479] ? __cfi_do_mmap+0x10/0x10 [ 57.671201][ T1479] ? do_futex+0x2bf/0x430 [ 57.675527][ T1479] ? _copy_from_user+0x8f/0xc0 [ 57.680385][ T1479] vm_mmap_pgoff+0x206/0x3f0 [ 57.681122][ T1493] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 57.684971][ T1479] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 57.684994][ T1479] ? __x64_sys_futex+0x100/0x100 [ 57.704004][ T1479] ? xfd_validate_state+0x70/0x150 [ 57.709120][ T1479] ksys_mmap_pgoff+0xf6/0x1d0 [ 57.713806][ T1479] __x64_sys_mmap+0xfa/0x110 [ 57.718399][ T1479] x64_sys_call+0x8fd/0x9a0 [ 57.722911][ T1479] do_syscall_64+0x4c/0xa0 [ 57.727333][ T1479] ? clear_bhb_loop+0x30/0x80 [ 57.732014][ T1479] ? clear_bhb_loop+0x30/0x80 [ 57.736691][ T1479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 57.742592][ T1479] RIP: 0033:0x7f57d679de42 [ 57.747003][ T1479] Code: 4f 01 00 0f 1f 44 00 00 41 f7 c1 ff 0f 00 00 75 27 55 89 cd 53 48 89 fb 48 85 ff 74 3b 41 89 ea 48 89 df b8 09 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 6e 5b 5d c3 0f 1f 00 48 c7 c0 e8 ff ff ff 64 [ 57.766615][ T1479] RSP: 002b:00007ffcaa046cb8 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 57.775129][ T1479] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f57d679de42 [ 57.783112][ T1479] RDX: 0000000000000000 RSI: 0000000000021000 RDI: 0000000000000000 [ 57.791083][ T1479] RBP: 0000000000020022 R08: 00000000ffffffff R09: 0000000000000000 [ 57.799055][ T1479] R10: 0000000000020022 R11: 0000000000000246 R12: 00007ffcaa046e20 [ 57.807024][ T1479] R13: ffffffffffffffc0 R14: 0000000000001000 R15: 0000000000000000 [ 57.814999][ T1479] [ 57.818011][ T1479] Modules linked in: [ 57.822348][ T43] FAT-fs (loop0): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 57.823171][ T1479] ---[ end trace 0000000000000000 ]--- [ 57.836892][ T1479] RIP: 0010:mmap_region+0x1fe8/0x2130 [ 57.842355][ T1479] Code: 50 80 e1 07 80 c1 03 38 c1 0f 8c e1 f9 ff ff 48 8b 7c 24 50 e8 69 46 09 00 e9 d2 f9 ff ff e8 ef ba c3 ff 0f 0b e8 e8 ba c3 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 66 e7 ff ff 48 89 df e8 [ 57.868055][ T1498] loop0: detected capacity change from 0 to 512 [ 57.874625][ T28] audit: type=1400 audit(1786034935.651:195): avc: denied { create } for pid=1495 comm="syz.3.434" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 57.897276][ T28] audit: type=1400 audit(1786034935.651:196): avc: denied { mounton } for pid=1495 comm="syz.3.434" path="/70/file0" dev="tmpfs" ino=411 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 57.920282][ T1479] RSP: 0018:ffffc90001097a40 EFLAGS: 00010293 [ 57.928349][ T1479] RAX: ffffffff81adab58 RBX: 00007f57d7592000 RCX: ffff88811d463cc0 [ 57.937272][ T1479] RDX: 0000000000000000 RSI: 00007f57d7591fff RDI: 00007f57d7592000 [ 57.945355][ T1479] RBP: ffffc90001097c30 R08: ffff88811d463cc0 R09: 0000000000000003 [ 57.958254][ T28] audit: type=1400 audit(1786034935.741:197): avc: denied { setattr } for pid=1495 comm="syz.3.434" name="/" dev="fuse" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 57.958513][ T1479] R10: 0000000000000003 R11: 0000000000000000 R12: 00007f57d7591fff [ 57.988175][ T1479] R13: 00007f57d7592000 R14: dffffc0000000000 R15: 00007f57d7571000 [ 57.996288][ T1479] FS: 000055557ffd4500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000 [ 58.005421][ T1479] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 58.012040][ T1479] CR2: 00007f1158e11ff8 CR3: 000000012f0ca000 CR4: 00000000003526b0 [ 58.020199][ T1479] Kernel panic - not syncing: Fatal exception [ 58.026510][ T1479] Kernel Offset: disabled [ 58.030821][ T1479] Rebooting in 86400 seconds..