./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor3980329871 <...> Warning: Permanently added '10.128.0.239' (ED25519) to the list of known hosts. execve("./syz-executor3980329871", ["./syz-executor3980329871"], 0x7fffbb544050 /* 10 vars */) = 0 brk(NULL) = 0x555582a6f000 brk(0x555582a6fd00) = 0x555582a6fd00 arch_prctl(ARCH_SET_FS, 0x555582a6f380) = 0 set_tid_address(0x555582a6f650) = 282 set_robust_list(0x555582a6f660, 24) = 0 rseq(0x555582a6fca0, 0x20, 0, 0x53053053) = -1 ENOSYS (Function not implemented) prlimit64(0, RLIMIT_STACK, NULL, {rlim_cur=8192*1024, rlim_max=RLIM64_INFINITY}) = 0 readlink("/proc/self/exe", "/root/syz-executor3980329871", 4096) = 28 getrandom("\x80\x99\x92\x11\x51\xa8\x3a\x0b", 8, GRND_NONBLOCK) = 8 brk(NULL) = 0x555582a6fd00 brk(0x555582a90d00) = 0x555582a90d00 brk(0x555582a91000) = 0x555582a91000 mprotect(0x7fa6610f8000, 16384, PROT_READ) = 0 mmap(0x1ffffffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffffffff000 mmap(0x200000000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200000000000 mmap(0x200001000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x200001000000 openat(AT_FDCWD, "/proc/self/make-it-fail", O_WRONLY) = 3 close(3) = 0 openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_WRONLY) = 3 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3 write(3, "N", 1) = 1 close(3) = 0 openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3 write(3, "0", 1) = 1 close(3) = 0 chmod("/dev/raw-gadget", 0666) = 0 mkdir("./syzkaller.eKmjsF", 0700) = 0 chmod("./syzkaller.eKmjsF", 0777) = 0 chdir("./syzkaller.eKmjsF") = 0 unshare(CLONE_NEWPID) = 0 clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555582a6f650) = 283 ./strace-static-x86_64: Process 283 attached [pid 283] set_robust_list(0x555582a6f660, 24) = 0 [ 29.742967][ T24] audit: type=1400 audit(1753442040.000:64): avc: denied { execmem } for pid=282 comm="syz-executor398" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [pid 283] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 283] getppid() = 0 [pid 283] prlimit64(0, RLIMIT_AS, {rlim_cur=204800*1024, rlim_max=204800*1024}, NULL) = 0 [pid 283] prlimit64(0, RLIMIT_MEMLOCK, {rlim_cur=32768*1024, rlim_max=32768*1024}, NULL) = 0 [pid 283] prlimit64(0, RLIMIT_FSIZE, {rlim_cur=139264*1024, rlim_max=139264*1024}, NULL) = 0 [pid 283] prlimit64(0, RLIMIT_STACK, {rlim_cur=1024*1024, rlim_max=1024*1024}, NULL) = 0 [pid 283] prlimit64(0, RLIMIT_CORE, {rlim_cur=131072*1024, rlim_max=131072*1024}, NULL) = 0 [pid 283] prlimit64(0, RLIMIT_NOFILE, {rlim_cur=256, rlim_max=256}, NULL) = 0 [pid 283] unshare(CLONE_NEWNS) = 0 [pid 283] mount(NULL, "/", NULL, MS_REC|MS_PRIVATE, NULL) = 0 [pid 283] unshare(CLONE_NEWIPC) = -1 EINVAL (Invalid argument) [pid 283] unshare(CLONE_NEWCGROUP) = 0 [pid 283] unshare(CLONE_NEWUTS) = 0 [pid 283] unshare(CLONE_SYSVSEM) = 0 [pid 283] openat(AT_FDCWD, "/proc/sys/kernel/shmmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 283] openat(AT_FDCWD, "/proc/sys/kernel/shmall", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 283] openat(AT_FDCWD, "/proc/sys/kernel/shmmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 283] openat(AT_FDCWD, "/proc/sys/kernel/msgmax", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 283] openat(AT_FDCWD, "/proc/sys/kernel/msgmni", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 283] openat(AT_FDCWD, "/proc/sys/kernel/msgmnb", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 283] openat(AT_FDCWD, "/proc/sys/kernel/sem", O_WRONLY|O_CLOEXEC) = -1 ENOENT (No such file or directory) [pid 283] getpid() = 1 [pid 283] capget({version=_LINUX_CAPABILITY_VERSION_3, pid=1}, {effective=1<, priority 10 [ 30.707675][ T287] FAULT_INJECTION: forcing a failure. [ 30.707675][ T287] name failslab, interval 1, probability 0, space 0, times 1 [ 30.720471][ T287] CPU: 0 PID: 287 Comm: syz-executor398 Not tainted 5.10.240-syzkaller-00213-gad9a98ef27a4 #0 [ 30.730712][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 30.740959][ T287] Call Trace: [ 30.744275][ T287] __dump_stack+0x21/0x24 [ 30.748589][ T287] dump_stack_lvl+0x169/0x1d8 [ 30.753254][ T287] ? thaw_kernel_threads+0x220/0x220 [ 30.758530][ T287] ? show_regs_print_info+0x18/0x18 [ 30.763716][ T287] dump_stack+0x15/0x1c [ 30.767875][ T287] should_fail+0x3c1/0x510 [ 30.772304][ T287] ? __alloc_skb+0x9e/0x520 [ 30.776811][ T287] __should_failslab+0xa4/0xe0 [ 30.781580][ T287] should_failslab+0x9/0x20 [ 30.786073][ T287] kmem_cache_alloc+0x3d/0x2e0 [ 30.790829][ T287] ? audit_log_start+0x3b7/0x860 [ 30.795754][ T287] __alloc_skb+0x9e/0x520 [ 30.800070][ T287] ? kmem_cache_alloc+0x165/0x2e0 [ 30.805089][ T287] ? audit_log_start+0x3b7/0x860 [ 30.810012][ T287] audit_log_start+0x3df/0x860 [ 30.814764][ T287] ? audit_serial+0x30/0x30 [ 30.819257][ T287] ? debug_smp_processor_id+0x17/0x20 [ 30.824623][ T287] ? slow_avc_audit+0x220/0x220 [ 30.829462][ T287] ? avc_audit_pre_callback+0x2a0/0x2a0 [ 30.835009][ T287] common_lsm_audit+0xd3/0x17f0 [ 30.839857][ T287] ? ipv6_skb_to_auditdata+0xca0/0xca0 [ 30.845304][ T287] ? __kasan_check_write+0x14/0x20 [ 30.850401][ T287] ? avc_alloc_node+0x28f/0x320 [ 30.855240][ T287] ? __kasan_check_write+0x14/0x20 [ 30.860333][ T287] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 30.865779][ T287] ? _raw_spin_lock+0xe0/0xe0 [ 30.870444][ T287] slow_avc_audit+0x1ac/0x220 [ 30.875109][ T287] ? avc_get_hash_stats+0x180/0x180 [ 30.880292][ T287] ? avc_denied+0x132/0x1b0 [ 30.884812][ T287] avc_has_perm+0x1ca/0x360 [ 30.889304][ T287] ? avc_has_perm_noaudit+0x240/0x240 [ 30.894676][ T287] ? __switch_to+0x50f/0xfc0 [ 30.899257][ T287] ? __kasan_check_read+0x11/0x20 [ 30.904265][ T287] selinux_socket_bind+0x246/0xb20 [ 30.909373][ T287] ? native_set_ldt+0x370/0x370 [ 30.914239][ T287] ? selinux_socket_socketpair+0x150/0x150 [ 30.920039][ T287] ? switch_mm_irqs_off+0x763/0x9a0 [ 30.925228][ T287] ? __schedule+0xb4f/0x1310 [ 30.929807][ T287] ? __kasan_check_write+0x14/0x20 [ 30.934925][ T287] ? _raw_spin_lock_irq+0x8f/0xe0 [ 30.939947][ T287] ? __kasan_check_write+0x14/0x20 [ 30.945054][ T287] ? _raw_spin_lock_irq+0x8f/0xe0 [ 30.950078][ T287] ? _raw_spin_lock_irqsave+0x110/0x110 [ 30.955653][ T287] ? _raw_spin_unlock_irq+0x4e/0x70 [ 30.960841][ T287] ? cgroup_leave_frozen+0x166/0x2b0 [ 30.966121][ T287] ? check_stack_object+0x106/0x140 [ 30.971315][ T287] security_socket_bind+0x72/0xa0 [ 30.976328][ T287] __sys_bind+0x281/0x400 [ 30.980646][ T287] ? __ia32_sys_socketpair+0xb0/0xb0 [ 30.985940][ T287] ? ptrace_notify+0x1c4/0x250 [ 30.990694][ T287] ? fpu__clear_all+0x20/0x20 [ 30.995357][ T287] ? debug_smp_processor_id+0x17/0x20 [ 31.000718][ T287] __x64_sys_bind+0x7a/0x90 [ 31.005212][ T287] do_syscall_64+0x31/0x40 [ 31.009627][ T287] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.015508][ T287] RIP: 0033:0x7fa661085599 [ 31.019924][ T287] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 1c 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 31.039531][ T287] RSP: 002b:00007ffeff2763a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000031 [pid 287] bind(4, {sa_family=AF_TIPC, sa_data="\x02\x01\x41\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00"}, 16) = 0 [pid 287] socket(AF_TIPC, SOCK_SEQPACKET, 0) = 6 [pid 287] sendmsg(6, {msg_name={sa_family=AF_TIPC, sa_data="\x02\x00\x41\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"}, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}, MSG_DONTROUTE) = 0 [pid 287] close(3) = 0 [pid 287] close(4) = 0 [pid 287] close(5) = 0 [pid 287] close(6) = 0 [pid 287] close(7) = -1 EBADF (Bad file descriptor) [pid 287] close(8) = -1 EBADF (Bad file descriptor) [pid 287] close(9) = -1 EBADF (Bad file descriptor) [pid 287] close(10) = -1 EBADF (Bad file descriptor) [pid 287] close(11) = -1 EBADF (Bad file descriptor) [pid 287] close(12) = -1 EBADF (Bad file descriptor) [pid 287] close(13) = -1 EBADF (Bad file descriptor) [pid 287] close(14) = -1 EBADF (Bad file descriptor) [pid 287] close(15) = -1 EBADF (Bad file descriptor) [pid 287] close(16) = -1 EBADF (Bad file descriptor) [pid 287] close(17) = -1 EBADF (Bad file descriptor) [pid 287] close(18) = -1 EBADF (Bad file descriptor) [pid 287] close(19) = -1 EBADF (Bad file descriptor) [pid 287] close(20) = -1 EBADF (Bad file descriptor) [pid 287] close(21) = -1 EBADF (Bad file descriptor) [pid 287] close(22) = -1 EBADF (Bad file descriptor) [pid 287] close(23) = -1 EBADF (Bad file descriptor) [pid 287] close(24) = -1 EBADF (Bad file descriptor) [pid 287] close(25) = -1 EBADF (Bad file descriptor) [pid 287] close(26) = -1 EBADF (Bad file descriptor) [pid 287] close(27) = -1 EBADF (Bad file descriptor) [pid 287] close(28) = -1 EBADF (Bad file descriptor) [pid 287] close(29) = -1 EBADF (Bad file descriptor) [pid 287] exit_group(0) = ? [pid 287] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=2, si_uid=0, si_status=0, si_utime=0, si_stime=5} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./0", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./0", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x555582a706f0 /* 3 entries */, 32768) = 80 [pid 283] umount2("./0/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./0/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./0/binderfs") = 0 [pid 283] getdents64(3, 0x555582a706f0 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./0") = 0 [pid 283] mkdir("./1", 0777) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555582a6f650) = 3 ./strace-static-x86_64: Process 288 attached [pid 288] set_robust_list(0x555582a6f660, 24) = 0 [pid 288] chdir("./1") = 0 [pid 288] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 288] setpgid(0, 0) = 0 [pid 288] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 288] write(3, "1000", 4) = 4 [pid 288] close(3) = 0 [pid 288] symlink("/dev/binderfs", "./binderfs") = 0 [pid 288] write(1, "executing program\n", 18executing program ) = 18 [pid 288] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 288] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 288] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 288] recvfrom(4, [{nlmsg_len=548, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=3}, "\x01\x02\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00\x06\x00\x01\x00\x1e\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\xe4\x01\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x03\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 548 [pid 288] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=3}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 288] close(4) = 0 [ 31.047948][ T287] RAX: ffffffffffffffda RBX: 00007ffeff2763d0 RCX: 00007fa661085599 [ 31.055921][ T287] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 31.063884][ T287] RBP: 0000000000000001 R08: 00007ffeff276147 R09: 00007fa6610cc20f [ 31.071854][ T287] R10: 0000000000000001 R11: 0000000000000206 R12: 00007fa6610cc496 [ 31.079838][ T287] R13: 0000000000000001 R14: 00007ffeff2763f0 R15: 0000000000000000 [pid 288] sendmsg(3, {msg_name=NULL, msg_namelen=10240, msg_iov=[{iov_base="\x54\x00\x00\x00\x1e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x40\x00\x01\x80\x2c\x00\x04\x00\x14\x00\x01\x00\x02\x00\x00\x00\xac\x14\x14\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00\x02\x00\x02\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x0d\x00\x01\x00\x75\x64\x70\x3a\x73\x79\x7a\x32\x00\x00\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 84 [pid 288] socket(AF_TIPC, SOCK_SEQPACKET, 0) = 4 [pid 288] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5 [pid 288] write(5, "4", 1) = 1 [ 31.106929][ T288] tipc: Enabling of bearer rejected, already enabled [ 31.116929][ T288] FAULT_INJECTION: forcing a failure. [ 31.116929][ T288] name failslab, interval 1, probability 0, space 0, times 0 [ 31.129564][ T288] CPU: 1 PID: 288 Comm: syz-executor398 Not tainted 5.10.240-syzkaller-00213-gad9a98ef27a4 #0 [ 31.139795][ T288] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 31.149844][ T288] Call Trace: [ 31.153133][ T288] __dump_stack+0x21/0x24 [ 31.157450][ T288] dump_stack_lvl+0x169/0x1d8 [ 31.162137][ T288] ? thaw_kernel_threads+0x220/0x220 [ 31.167420][ T288] ? show_regs_print_info+0x18/0x18 [ 31.172613][ T288] dump_stack+0x15/0x1c [ 31.176764][ T288] should_fail+0x3c1/0x510 [ 31.181193][ T288] ? tipc_nametbl_insert_publ+0x9bb/0x1430 [ 31.187005][ T288] __should_failslab+0xa4/0xe0 [ 31.191849][ T288] should_failslab+0x9/0x20 [ 31.196341][ T288] kmem_cache_alloc_trace+0x3a/0x2e0 [ 31.201622][ T288] ? tipc_dest_list_len+0x60/0x60 [ 31.206645][ T288] tipc_nametbl_insert_publ+0x9bb/0x1430 [ 31.212266][ T288] ? selinux_socket_socketpair+0x150/0x150 [ 31.218059][ T288] ? __kasan_check_write+0x14/0x20 [ 31.223159][ T288] tipc_nametbl_publish+0x222/0x3e0 [ 31.228346][ T288] tipc_sk_publish+0x17a/0x3f0 [ 31.233098][ T288] tipc_bind+0x1e3/0x2f0 [ 31.237327][ T288] __sys_bind+0x2f9/0x400 [ 31.241640][ T288] ? __ia32_sys_socketpair+0xb0/0xb0 [ 31.246913][ T288] ? ptrace_notify+0x1c4/0x250 [ 31.251677][ T288] ? fpu__clear_all+0x20/0x20 [ 31.256345][ T288] ? debug_smp_processor_id+0x17/0x20 [ 31.261703][ T288] __x64_sys_bind+0x7a/0x90 [ 31.266195][ T288] do_syscall_64+0x31/0x40 [ 31.270596][ T288] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.276471][ T288] RIP: 0033:0x7fa661085599 [ 31.280883][ T288] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 1c 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [pid 288] bind(4, {sa_family=AF_TIPC, sa_data="\x02\x01\x41\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00"}, 16) = -1 EINVAL (Invalid argument) [pid 288] socket(AF_TIPC, SOCK_SEQPACKET, 0) = 6 [pid 288] sendmsg(6, {msg_name={sa_family=AF_TIPC, sa_data="\x02\x00\x41\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"}, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}, MSG_DONTROUTE) = -1 EHOSTUNREACH (No route to host) [pid 288] close(3) = 0 [pid 288] close(4) = 0 [pid 288] close(5) = 0 [pid 288] close(6) = 0 [pid 288] close(7) = -1 EBADF (Bad file descriptor) [pid 288] close(8) = -1 EBADF (Bad file descriptor) [pid 288] close(9) = -1 EBADF (Bad file descriptor) [pid 288] close(10) = -1 EBADF (Bad file descriptor) [pid 288] close(11) = -1 EBADF (Bad file descriptor) [pid 288] close(12) = -1 EBADF (Bad file descriptor) [pid 288] close(13) = -1 EBADF (Bad file descriptor) [pid 288] close(14) = -1 EBADF (Bad file descriptor) [pid 288] close(15) = -1 EBADF (Bad file descriptor) [pid 288] close(16) = -1 EBADF (Bad file descriptor) [pid 288] close(17) = -1 EBADF (Bad file descriptor) [pid 288] close(18) = -1 EBADF (Bad file descriptor) [pid 288] close(19) = -1 EBADF (Bad file descriptor) [pid 288] close(20) = -1 EBADF (Bad file descriptor) [pid 288] close(21) = -1 EBADF (Bad file descriptor) [pid 288] close(22) = -1 EBADF (Bad file descriptor) [pid 288] close(23) = -1 EBADF (Bad file descriptor) [pid 288] close(24) = -1 EBADF (Bad file descriptor) [pid 288] close(25) = -1 EBADF (Bad file descriptor) [pid 288] close(26) = -1 EBADF (Bad file descriptor) [pid 288] close(27) = -1 EBADF (Bad file descriptor) [pid 288] close(28) = -1 EBADF (Bad file descriptor) [pid 288] close(29) = -1 EBADF (Bad file descriptor) [pid 288] exit_group(0) = ? [pid 288] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=3, si_uid=0, si_status=0, si_utime=0, si_stime=2} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./1", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./1", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x555582a706f0 /* 3 entries */, 32768) = 80 [pid 283] umount2("./1/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./1/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./1/binderfs") = 0 [pid 283] getdents64(3, 0x555582a706f0 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./1") = 0 [pid 283] mkdir("./2", 0777) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x555582a6f650) = 4 ./strace-static-x86_64: Process 289 attached [pid 289] set_robust_list(0x555582a6f660, 24) = 0 [pid 289] chdir("./2") = 0 [pid 289] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 289] setpgid(0, 0) = 0 [pid 289] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 289] write(3, "1000", 4) = 4 [pid 289] close(3) = 0 [pid 289] symlink("/dev/binderfs", "./binderfs") = 0 [pid 289] write(1, "executing program\n", 18executing program ) = 18 [pid 289] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 289] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 289] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 289] recvfrom(4, [{nlmsg_len=548, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=4}, "\x01\x02\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00\x06\x00\x01\x00\x1e\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\xe4\x01\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x03\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 548 [pid 289] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=4}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 289] close(4) = 0 [ 31.300485][ T288] RSP: 002b:00007ffeff2763a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000031 [ 31.308892][ T288] RAX: ffffffffffffffda RBX: 00007ffeff2763d0 RCX: 00007fa661085599 [ 31.316873][ T288] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 31.324850][ T288] RBP: 0000000000000001 R08: 00007ffeff276147 R09: 00007fa6610cc20f [ 31.332825][ T288] R10: 0000000000000001 R11: 0000000000000206 R12: 00007ffeff2763cc [ 31.340790][ T288] R13: 00007ffeff276410 R14: 00007ffeff2763f0 R15: 0000000000000001 [ 31.348790][ T288] tipc: Failed to bind to 65,0,0, no memory [pid 289] sendmsg(3, {msg_name=NULL, msg_namelen=10240, msg_iov=[{iov_base="\x54\x00\x00\x00\x1e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x40\x00\x01\x80\x2c\x00\x04\x00\x14\x00\x01\x00\x02\x00\x00\x00\xac\x14\x14\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00\x02\x00\x02\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x0d\x00\x01\x00\x75\x64\x70\x3a\x73\x79\x7a\x32\x00\x00\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 84 [pid 289] socket(AF_TIPC, SOCK_SEQPACKET, 0) = 4 [pid 289] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5 [pid 289] write(5, "4", 1) = 1 [ 31.377586][ T289] tipc: Enabling of bearer rejected, already enabled [ 31.386865][ T289] FAULT_INJECTION: forcing a failure. [ 31.386865][ T289] name failslab, interval 1, probability 0, space 0, times 0 [ 31.399507][ T289] CPU: 0 PID: 289 Comm: syz-executor398 Not tainted 5.10.240-syzkaller-00213-gad9a98ef27a4 #0 [ 31.409750][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 31.419800][ T289] Call Trace: [ 31.423081][ T289] __dump_stack+0x21/0x24 [ 31.427399][ T289] dump_stack_lvl+0x169/0x1d8 [ 31.432066][ T289] ? thaw_kernel_threads+0x220/0x220 [ 31.437336][ T289] ? show_regs_print_info+0x18/0x18 [ 31.442520][ T289] dump_stack+0x15/0x1c [ 31.446668][ T289] should_fail+0x3c1/0x510 [ 31.451082][ T289] ? tipc_buf_acquire+0x2b/0xe0 [ 31.455921][ T289] __should_failslab+0xa4/0xe0 [ 31.460676][ T289] should_failslab+0x9/0x20 [ 31.465168][ T289] __kmalloc_track_caller+0x5f/0x320 [ 31.470441][ T289] ? kmem_cache_alloc+0x165/0x2e0 [ 31.475449][ T289] ? __alloc_skb+0x9e/0x520 [ 31.479941][ T289] ? tipc_buf_acquire+0x2b/0xe0 [ 31.484778][ T289] __alloc_skb+0xdc/0x520 [ 31.489099][ T289] tipc_buf_acquire+0x2b/0xe0 [ 31.493764][ T289] tipc_named_publish+0x2f9/0x890 [ 31.498773][ T289] tipc_nametbl_publish+0x25c/0x3e0 [ 31.503959][ T289] tipc_sk_publish+0x17a/0x3f0 [ 31.508708][ T289] tipc_bind+0x1e3/0x2f0 [ 31.512937][ T289] __sys_bind+0x2f9/0x400 [ 31.517250][ T289] ? __ia32_sys_socketpair+0xb0/0xb0 [ 31.522519][ T289] ? ptrace_notify+0x1c4/0x250 [ 31.527276][ T289] ? fpu__clear_all+0x20/0x20 [ 31.531938][ T289] ? debug_smp_processor_id+0x17/0x20 [ 31.537298][ T289] __x64_sys_bind+0x7a/0x90 [ 31.541786][ T289] do_syscall_64+0x31/0x40 [ 31.546193][ T289] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.552072][ T289] RIP: 0033:0x7fa661085599 [ 31.556477][ T289] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 1c 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 31.576068][ T289] RSP: 002b:00007ffeff2763a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000031 [ 31.584467][ T289] RAX: ffffffffffffffda RBX: 00007ffeff2763d0 RCX: 00007fa661085599 [ 31.592427][ T289] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 31.600385][ T289] RBP: 0000000000000001 R08: 00007ffeff276147 R09: 00007fa6610cc20f [ 31.608349][ T289] R10: 0000000000000001 R11: 0000000000000206 R12: 00007ffeff2763cc [ 31.616317][ T289] R13: 00007ffeff276410 R14: 00007ffeff2763f0 R15: 0000000000000002 [pid 289] bind(4, {sa_family=AF_TIPC, sa_data="\x02\x01\x41\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00"}, 16) = 0 [pid 289] socket(AF_TIPC, SOCK_SEQPACKET, 0) = 6 [pid 289] sendmsg(6, {msg_name={sa_family=AF_TIPC, sa_data="\x02\x00\x41\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00"}, msg_namelen=16, msg_iov=NULL, msg_iovlen=0, msg_controllen=0, msg_flags=0}, MSG_DONTROUTE) = 0 [pid 289] close(3) = 0 [pid 289] close(4) = 0 [pid 289] close(5) = 0 [pid 289] close(6) = 0 [pid 289] close(7) = -1 EBADF (Bad file descriptor) [pid 289] close(8) = -1 EBADF (Bad file descriptor) [pid 289] close(9) = -1 EBADF (Bad file descriptor) [pid 289] close(10) = -1 EBADF (Bad file descriptor) [pid 289] close(11) = -1 EBADF (Bad file descriptor) [pid 289] close(12) = -1 EBADF (Bad file descriptor) [pid 289] close(13) = -1 EBADF (Bad file descriptor) [pid 289] close(14) = -1 EBADF (Bad file descriptor) [pid 289] close(15) = -1 EBADF (Bad file descriptor) [pid 289] close(16) = -1 EBADF (Bad file descriptor) [pid 289] close(17) = -1 EBADF (Bad file descriptor) [pid 289] close(18) = -1 EBADF (Bad file descriptor) [pid 289] close(19) = -1 EBADF (Bad file descriptor) [pid 289] close(20) = -1 EBADF (Bad file descriptor) [pid 289] close(21) = -1 EBADF (Bad file descriptor) [pid 289] close(22) = -1 EBADF (Bad file descriptor) [pid 289] close(23) = -1 EBADF (Bad file descriptor) [pid 289] close(24) = -1 EBADF (Bad file descriptor) [pid 289] close(25) = -1 EBADF (Bad file descriptor) [pid 289] close(26) = -1 EBADF (Bad file descriptor) [pid 289] close(27) = -1 EBADF (Bad file descriptor) [pid 289] close(28) = -1 EBADF (Bad file descriptor) [pid 289] close(29) = -1 EBADF (Bad file descriptor) [pid 289] exit_group(0) = ? [pid 289] +++ exited with 0 +++ [pid 283] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=4, si_uid=0, si_status=0, si_utime=0, si_stime=3} --- [pid 283] restart_syscall(<... resuming interrupted clone ...>) = 0 [pid 283] umount2("./2", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] openat(AT_FDCWD, "./2", O_RDONLY|O_NONBLOCK|O_CLOEXEC|O_DIRECTORY) = 3 [pid 283] newfstatat(3, "", {st_mode=S_IFDIR|0700, st_size=60, ...}, AT_EMPTY_PATH) = 0 [pid 283] getdents64(3, 0x555582a706f0 /* 3 entries */, 32768) = 80 [pid 283] umount2("./2/binderfs", MNT_FORCE|UMOUNT_NOFOLLOW) = -1 EINVAL (Invalid argument) [pid 283] newfstatat(AT_FDCWD, "./2/binderfs", {st_mode=S_IFLNK|0777, st_size=13, ...}, AT_SYMLINK_NOFOLLOW) = 0 [pid 283] unlink("./2/binderfs") = 0 [pid 283] getdents64(3, 0x555582a706f0 /* 0 entries */, 32768) = 0 [pid 283] close(3) = 0 [pid 283] rmdir("./2") = 0 [pid 283] mkdir("./3", 0777) = 0 [pid 283] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 290 attached [pid 290] set_robust_list(0x555582a6f660, 24 [pid 283] <... clone resumed>, child_tidptr=0x555582a6f650) = 5 [pid 290] <... set_robust_list resumed>) = 0 [pid 290] chdir("./3") = 0 [pid 290] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0 [pid 290] setpgid(0, 0) = 0 [pid 290] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3 [pid 290] write(3, "1000", 4) = 4 [pid 290] close(3) = 0 [pid 290] symlink("/dev/binderfs", "./binderfs") = 0 [pid 290] write(1, "executing program\n", 18executing program ) = 18 [pid 290] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 3 [pid 290] socket(AF_NETLINK, SOCK_RAW, NETLINK_GENERIC) = 4 [pid 290] sendto(4, [{nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}, "\x03\x00\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00"], 32, 0, {sa_family=AF_NETLINK, nl_pid=0, nl_groups=00000000}, 12) = 32 [pid 290] recvfrom(4, [{nlmsg_len=548, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=0, nlmsg_seq=0, nlmsg_pid=5}, "\x01\x02\x00\x00\x0b\x00\x02\x00\x54\x49\x50\x43\x76\x32\x00\x00\x06\x00\x01\x00\x1e\x00\x00\x00\x08\x00\x03\x00\x01\x00\x00\x00\x08\x00\x04\x00\x00\x00\x00\x00\x08\x00\x05\x00\x0a\x00\x00\x00\xe4\x01\x06\x00\x14\x00\x01\x00\x08\x00\x01\x00\x02\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x02\x00\x08\x00\x01\x00\x03\x00\x00\x00\x08\x00\x02\x00\x0a\x00\x00\x00\x14\x00\x03\x00\x08\x00\x01\x00"...], 4096, 0, NULL, NULL) = 548 [pid 290] recvfrom(4, [{nlmsg_len=36, nlmsg_type=NLMSG_ERROR, nlmsg_flags=NLM_F_CAPPED, nlmsg_seq=0, nlmsg_pid=5}, {error=0, msg={nlmsg_len=32, nlmsg_type=0x10 /* NLMSG_??? */, nlmsg_flags=NLM_F_REQUEST|NLM_F_ACK, nlmsg_seq=0, nlmsg_pid=0}}], 4096, 0, NULL, NULL) = 36 [pid 290] close(4) = 0 [ 31.624333][ T289] tipc: Publication distribution failure [pid 290] sendmsg(3, {msg_name=NULL, msg_namelen=10240, msg_iov=[{iov_base="\x54\x00\x00\x00\x1e\x00\x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00\x40\x00\x01\x80\x2c\x00\x04\x00\x14\x00\x01\x00\x02\x00\x00\x00\xac\x14\x14\x0f\x00\x00\x00\x00\x00\x00\x00\x00\x14\x00\x02\x00\x02\x00\x00\x00\xff\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x0d\x00\x01\x00\x75\x64\x70\x3a\x73\x79\x7a\x32\x00\x00\x00\x00", iov_len=84}], msg_iovlen=1, msg_controllen=0, msg_flags=0}, 0) = 84 [pid 290] socket(AF_TIPC, SOCK_SEQPACKET, 0) = 4 [pid 290] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 5 [pid 290] write(5, "4", 1) = 1 [ 31.663262][ T290] tipc: Enabling of bearer rejected, already enabled [ 31.671910][ T290] FAULT_INJECTION: forcing a failure. [ 31.671910][ T290] name failslab, interval 1, probability 0, space 0, times 0 [ 31.684552][ T290] CPU: 0 PID: 290 Comm: syz-executor398 Not tainted 5.10.240-syzkaller-00213-gad9a98ef27a4 #0 [ 31.694799][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 31.704848][ T290] Call Trace: [ 31.708134][ T290] __dump_stack+0x21/0x24 [ 31.712451][ T290] dump_stack_lvl+0x169/0x1d8 [ 31.717115][ T290] ? thaw_kernel_threads+0x220/0x220 [ 31.722385][ T290] ? show_regs_print_info+0x18/0x18 [ 31.727568][ T290] dump_stack+0x15/0x1c [ 31.731710][ T290] should_fail+0x3c1/0x510 [ 31.736114][ T290] ? tipc_nametbl_insert_publ+0x9bb/0x1430 [ 31.741917][ T290] __should_failslab+0xa4/0xe0 [ 31.746673][ T290] should_failslab+0x9/0x20 [ 31.751164][ T290] kmem_cache_alloc_trace+0x3a/0x2e0 [ 31.756443][ T290] ? tipc_dest_list_len+0x60/0x60 [ 31.761465][ T290] tipc_nametbl_insert_publ+0x9bb/0x1430 [ 31.767090][ T290] ? selinux_socket_socketpair+0x150/0x150 [ 31.772885][ T290] ? __kasan_check_write+0x14/0x20 [ 31.777986][ T290] tipc_nametbl_publish+0x222/0x3e0 [ 31.783172][ T290] tipc_sk_publish+0x17a/0x3f0 [ 31.787945][ T290] tipc_bind+0x1e3/0x2f0 [ 31.792173][ T290] __sys_bind+0x2f9/0x400 [ 31.796490][ T290] ? __ia32_sys_socketpair+0xb0/0xb0 [ 31.801763][ T290] ? ptrace_notify+0x1c4/0x250 [ 31.806515][ T290] ? fpu__clear_all+0x20/0x20 [ 31.811181][ T290] ? debug_smp_processor_id+0x17/0x20 [ 31.816538][ T290] __x64_sys_bind+0x7a/0x90 [ 31.821033][ T290] do_syscall_64+0x31/0x40 [ 31.825437][ T290] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.831335][ T290] RIP: 0033:0x7fa661085599 [ 31.835312][ T25] tipc: 32-bit node address hash set to f1414ac [ 31.835747][ T290] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 1c 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 31.861566][ T290] RSP: 002b:00007ffeff2763a8 EFLAGS: 00000206 ORIG_RAX: 0000000000000031 [ 31.869970][ T290] RAX: ffffffffffffffda RBX: 00007ffeff2763d0 RCX: 00007fa661085599 [ 31.877927][ T290] RDX: 0000000000000010 RSI: 0000200000000000 RDI: 0000000000000004 [ 31.885893][ T290] RBP: 0000000000000001 R08: 00007ffeff276147 R09: 00007fa6610cc20f [ 31.893877][ T290] R10: 0000000000000001 R11: 0000000000000206 R12: 00007ffeff2763cc [ 31.901836][ T290] R13: 00007ffeff276410 R14: 00007ffeff2763f0 R15: 0000000000000003 [pid 290] bind(4, {sa_family=AF_TIPC, sa_data="\x02\x01\x41\x00\x00\x00\x00\x00\x00\x00\x03\x00\x00\x00"}, 16) = -1 EINVAL (Invalid argument) [pid 290] socket(AF_TIPC, SOCK_SEQPACKET, 0) = 6 [ 31.909820][ T290] tipc: Failed to bind to 65,0,0, no memory [ 31.916669][ T290] list_add double add: new=ffff88810d1fe6b8, prev=ffff88810d1fe6b8, next=ffff88810d1fe6b8. [ 31.926835][ T290] ------------[ cut here ]------------ [ 31.932298][ T290] kernel BUG at lib/list_debug.c:35! [ 31.937634][ T290] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 31.943704][ T290] CPU: 0 PID: 290 Comm: syz-executor398 Not tainted 5.10.240-syzkaller-00213-gad9a98ef27a4 #0 [ 31.953922][ T290] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 31.963975][ T290] RIP: 0010:__list_add_valid+0x9f/0xf0 [ 31.969420][ T290] Code: f7 74 12 49 39 df 74 0d b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 40 1c 20 85 4c 89 fe 4c 89 f2 48 89 d9 e8 81 6f 30 02 <0f> 0b 48 c7 c7 40 1a 20 85 e8 73 6f 30 02 0f 0b 48 c7 c7 e0 1a 20 [ 31.989016][ T290] RSP: 0018:ffffc90000c07370 EFLAGS: 00010246 [ 31.995070][ T290] RAX: 0000000000000058 RBX: ffff88810d1fe6b8 RCX: 54786b0df9ef0900 [ 32.003026][ T290] RDX: 0000000000000000 RSI: 0000000000000201 RDI: 0000000000000000 [ 32.010993][ T290] RBP: ffffc90000c07398 R08: dffffc0000000000 R09: ffffed103ee0a5f8 [ 32.018962][ T290] R10: ffffed103ee0a5f8 R11: 1ffff1103ee0a5f7 R12: ffff88810d1fe6c0 [ 32.026933][ T290] R13: dffffc0000000000 R14: ffff88810d1fe6b8 R15: ffff88810d1fe6b8 [ 32.034908][ T290] FS: 0000555582a6f380(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.043822][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.050390][ T290] CR2: 00007fa6610e0c04 CR3: 000000010d37c000 CR4: 00000000003506b0 [ 32.058351][ T290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.066314][ T290] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.074269][ T290] Call Trace: [ 32.077552][ T290] tipc_nametbl_translate+0xbe4/0xed0 [ 32.082912][ T290] __tipc_sendmsg+0xb99/0x2be0 [ 32.087670][ T290] ? update_rq_clock+0x21d/0x660 [ 32.092596][ T290] ? tipc_sk_publish+0x3f0/0x3f0 [ 32.097522][ T290] ? task_rq_lock+0x2d0/0x2d0 [ 32.102186][ T290] ? _raw_spin_unlock+0x4d/0x70 [ 32.107022][ T290] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 32.112639][ T290] ? update_load_avg+0x4dc/0x14f0 [ 32.117650][ T290] ? enqueue_task_fair+0xac3/0x2250 [ 32.122837][ T290] __tipc_sendstream+0x14ec/0x1740 [ 32.127937][ T290] ? avc_has_perm+0x234/0x360 [ 32.132600][ T290] ? resched_curr+0x9b/0x1c0 [ 32.137192][ T290] ? avc_has_perm_noaudit+0x240/0x240 [ 32.142566][ T290] ? sched_clock+0x20/0x40 [ 32.146967][ T290] ? _raw_spin_lock_irq+0xe0/0xe0 [ 32.152007][ T290] ? __local_bh_enable_ip+0x53/0x80 [ 32.157201][ T290] ? local_bh_enable+0x1f/0x30 [ 32.161949][ T290] ? lock_sock_nested+0x1f5/0x290 [ 32.166963][ T290] ? tsk_advance_rx_queue+0x700/0x700 [ 32.172331][ T290] ? copy_fpregs_to_fpstate+0x14a/0x1b0 [ 32.177865][ T290] tipc_send_packet+0x7c/0xa0 [ 32.182532][ T290] ? tipc_sk_send_ack+0x630/0x630 [ 32.187546][ T290] ____sys_sendmsg+0x5a2/0x8c0 [ 32.192300][ T290] ? __sys_sendmsg_sock+0x40/0x40 [ 32.197314][ T290] ? import_iovec+0x7c/0xb0 [ 32.201811][ T290] ___sys_sendmsg+0x1f0/0x260 [ 32.206481][ T290] ? __switch_to_asm+0x34/0x60 [ 32.211236][ T290] ? __sys_sendmsg+0x250/0x250 [ 32.216088][ T290] ? __kasan_check_read+0x11/0x20 [ 32.221107][ T290] ? __fdget+0x15b/0x230 [ 32.225344][ T290] __x64_sys_sendmsg+0x1e2/0x2a0 [ 32.230278][ T290] ? do_notify_parent+0x7e0/0x7e0 [ 32.235297][ T290] ? ___sys_sendmsg+0x260/0x260 [ 32.240141][ T290] ? syscall_trace_enter+0x4b/0x170 [ 32.245338][ T290] do_syscall_64+0x31/0x40 [ 32.249752][ T290] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.255652][ T290] RIP: 0033:0x7fa661085599 [ 32.260059][ T290] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 1c 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 32.279660][ T290] RSP: 002b:00007ffeff2763a8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 32.288069][ T290] RAX: ffffffffffffffda RBX: 0000000000000003 RCX: 00007fa661085599 [ 32.296034][ T290] RDX: 0000000000000004 RSI: 0000200000000240 RDI: 0000000000000006 [ 32.303996][ T290] RBP: 0000000000000001 R08: 00007fa6610cc20f R09: 00007fa6610cc20f [ 32.311960][ T290] R10: 00007fa6610cc20f R11: 0000000000000246 R12: 00007ffeff2763cc [ 32.319939][ T290] R13: 00007ffeff276410 R14: 00007ffeff2763f0 R15: 0000000000000003 [ 32.327910][ T290] Modules linked in: [ 32.331860][ T290] ---[ end trace 1adad1181ec9984f ]--- [ 32.337357][ T290] RIP: 0010:__list_add_valid+0x9f/0xf0 [ 32.342820][ T290] Code: f7 74 12 49 39 df 74 0d b0 01 5b 41 5c 41 5d 41 5e 41 5f 5d c3 48 c7 c7 40 1c 20 85 4c 89 fe 4c 89 f2 48 89 d9 e8 81 6f 30 02 <0f> 0b 48 c7 c7 40 1a 20 85 e8 73 6f 30 02 0f 0b 48 c7 c7 e0 1a 20 [ 32.362459][ T290] RSP: 0018:ffffc90000c07370 EFLAGS: 00010246 [ 32.368546][ T290] RAX: 0000000000000058 RBX: ffff88810d1fe6b8 RCX: 54786b0df9ef0900 [ 32.376534][ T290] RDX: 0000000000000000 RSI: 0000000000000201 RDI: 0000000000000000 [ 32.384521][ T290] RBP: ffffc90000c07398 R08: dffffc0000000000 R09: ffffed103ee0a5f8 [ 32.392562][ T290] R10: ffffed103ee0a5f8 R11: 1ffff1103ee0a5f7 R12: ffff88810d1fe6c0 [ 32.400563][ T290] R13: dffffc0000000000 R14: ffff88810d1fe6b8 R15: ffff88810d1fe6b8 [ 32.408562][ T290] FS: 0000555582a6f380(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 32.417505][ T290] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 32.424078][ T290] CR2: 00007fa6610e0c04 CR3: 000000010d37c000 CR4: 00000000003506b0 [ 32.432066][ T290] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 32.440142][ T290] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 32.448126][ T290] Kernel panic - not syncing: Fatal exception in interrupt [ 32.455635][ T290] Kernel Offset: disabled [ 32.459959][ T290] Rebooting in 86400 seconds..