[ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... Starting Load/Save RF Kill Switch Status... [ OK ] Started Update UTMP about System Runlevel Changes. [ OK ] Started Load/Save RF Kill Switch Status. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.176' (ECDSA) to the list of known hosts. syzkaller login: [ 61.764453][ T8471] FAULT_INJECTION: forcing a failure. [ 61.764453][ T8471] name failslab, interval 1, probability 0, space 0, times 1 [ 61.777778][ T8471] CPU: 0 PID: 8471 Comm: syz-executor389 Not tainted 5.10.0-rc7-syzkaller #0 [ 61.787380][ T8471] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 61.797410][ T8471] Call Trace: [ 61.800977][ T8471] dump_stack+0x107/0x163 [ 61.805503][ T8471] should_fail.cold+0x5/0xa [ 61.810083][ T8471] ? tomoyo_realpath_from_path+0xc3/0x620 [ 61.815782][ T8471] ? tomoyo_realpath_from_path+0xc3/0x620 [ 61.821490][ T8471] should_failslab+0x5/0x10 [ 61.825970][ T8471] __kmalloc+0x72/0x3e0 [ 61.830103][ T8471] tomoyo_realpath_from_path+0xc3/0x620 [ 61.835631][ T8471] tomoyo_check_open_permission+0x272/0x380 [ 61.841676][ T8471] ? tomoyo_path_number_perm+0x590/0x590 [ 61.847309][ T8471] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 61.853265][ T8471] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 61.859427][ T8471] ? path_get+0x5d/0x80 [ 61.863583][ T8471] ? lock_downgrade+0x6d0/0x6d0 [ 61.868407][ T8471] ? do_raw_spin_lock+0x120/0x2b0 [ 61.873518][ T8471] tomoyo_file_open+0xa3/0xd0 [ 61.878174][ T8471] security_file_open+0x52/0x4f0 [ 61.883090][ T8471] ? __mnt_want_write+0x1bc/0x2a0 [ 61.888090][ T8471] do_dentry_open+0x358/0x11b0 [ 61.892835][ T8471] ? may_open+0x1e4/0x400 [ 61.897166][ T8471] path_openat+0x1b9a/0x2730 [ 61.901733][ T8471] ? path_lookupat+0x830/0x830 [ 61.906487][ T8471] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 61.912444][ T8471] do_filp_open+0x17e/0x3c0 [ 61.916927][ T8471] ? may_open_dev+0xf0/0xf0 [ 61.921408][ T8471] ? do_raw_spin_lock+0x120/0x2b0 [ 61.926581][ T8471] ? rwlock_bug.part.0+0x90/0x90 [ 61.931527][ T8471] ? _raw_spin_unlock+0x24/0x40 [ 61.936650][ T8471] ? __alloc_fd+0x28d/0x600 [ 61.941221][ T8471] do_sys_openat2+0x16d/0x420 [ 61.946043][ T8471] ? build_open_flags+0x650/0x650 [ 61.951143][ T8471] ? blkcg_maybe_throttle_current+0x64d/0xd80 [ 61.957274][ T8471] __x64_sys_open+0x119/0x1c0 [ 61.962012][ T8471] ? do_sys_open+0x140/0x140 [ 61.966676][ T8471] ? syscall_enter_from_user_mode+0x1d/0x50 [ 61.972549][ T8471] do_syscall_64+0x2d/0x70 [ 61.976944][ T8471] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 61.983002][ T8471] RIP: 0033:0x4011b0 [ 61.986892][ T8471] Code: 01 f0 ff ff 0f 83 c0 0b 00 00 c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 83 3d 1d 25 2d 00 00 75 14 b8 02 00 00 00 0f 05 <48> 3d 01 f0 ff ff 0f 83 94 0b 00 00 c3 48 83 ec 08 e8 fa 00 00 00 [ 62.006495][ T8471] RSP: 002b:00007ffed6545828 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 executing program [ 62.014910][ T8471] RAX: ffffffffffffffda RBX: 00007ffed6545851 RCX: 00000000004011b0 [ 62.022859][ T8471] RDX: 00007ffed6545856 RSI: 0000000000080001 RDI: 00000000004a2678 [ 62.030809][ T8471] RBP: 00007ffed6545850 R08: 0000000000000000 R09: 0000000000000001 [ 62.039020][ T8471] R10: 0000000000000032 R11: 0000000000000246 R12: 00000000004a2678 [ 62.046969][ T8471] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 62.055896][ T8471] ERROR: Out of memory at tomoyo_realpath_from_path. [ 62.073591][ T8472] FAULT_INJECTION: forcing a failure. [ 62.073591][ T8472] name failslab, interval 1, probability 0, space 0, times 0 [ 62.086763][ T8472] CPU: 1 PID: 8472 Comm: syz-executor389 Not tainted 5.10.0-rc7-syzkaller #0 [ 62.095957][ T8472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.105987][ T8472] Call Trace: [ 62.109258][ T8472] dump_stack+0x107/0x163 [ 62.113565][ T8472] should_fail.cold+0x5/0xa [ 62.118045][ T8472] ? security_file_alloc+0x34/0x170 [ 62.123217][ T8472] should_failslab+0x5/0x10 [ 62.127695][ T8472] kmem_cache_alloc+0x5b/0x440 [ 62.132433][ T8472] security_file_alloc+0x34/0x170 [ 62.137432][ T8472] __alloc_file+0xd8/0x350 [ 62.142059][ T8472] alloc_empty_file+0x6d/0x170 [ 62.146892][ T8472] alloc_file+0x5e/0x5a0 [ 62.151112][ T8472] alloc_file_pseudo+0x165/0x250 [ 62.156100][ T8472] ? alloc_file+0x5a0/0x5a0 [ 62.160755][ T8472] ? _raw_spin_unlock+0x24/0x40 [ 62.165587][ T8472] ? __alloc_fd+0x28d/0x600 [ 62.170081][ T8472] anon_inode_getfile+0xc8/0x1f0 [ 62.175027][ T8472] io_uring_setup+0x27a1/0x3770 [ 62.179849][ T8472] ? lock_downgrade+0x6d0/0x6d0 [ 62.184764][ T8472] ? io_link_timeout_fn+0x5c0/0x5c0 [ 62.189935][ T8472] ? io_sq_thread+0x1570/0x1570 [ 62.194759][ T8472] ? io_uring_poll+0x2a0/0x2a0 [ 62.199570][ T8472] ? syscall_enter_from_user_mode+0x1d/0x50 [ 62.205442][ T8472] do_syscall_64+0x2d/0x70 [ 62.209831][ T8472] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 62.215695][ T8472] RIP: 0033:0x441309 [ 62.219566][ T8472] Code: e8 5c ae 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b 0a fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 62.239238][ T8472] RSP: 002b:00007ffed6545d38 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 62.247630][ T8472] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441309 [ 62.255580][ T8472] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000003ad1 [ 62.263834][ T8472] RBP: 00000000004a2798 R08: 0000000000000002 R09: 00000000004002c8 executing program [ 62.271870][ T8472] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004021d0 [ 62.279881][ T8472] R13: 0000000000402260 R14: 0000000000000000 R15: 0000000000000000 [ 62.299672][ T8476] FAULT_INJECTION: forcing a failure. [ 62.299672][ T8476] name failslab, interval 1, probability 0, space 0, times 0 [ 62.313937][ T8476] CPU: 0 PID: 8476 Comm: syz-executor389 Not tainted 5.10.0-rc7-syzkaller #0 [ 62.322703][ T8476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.332994][ T8476] Call Trace: [ 62.336274][ T8476] dump_stack+0x107/0x163 [ 62.340906][ T8476] should_fail.cold+0x5/0xa [ 62.345557][ T8476] ? io_uring_alloc_task_context+0x43/0x2a0 [ 62.351426][ T8476] ? io_uring_alloc_task_context+0x43/0x2a0 [ 62.357294][ T8476] should_failslab+0x5/0x10 [ 62.361775][ T8476] kmem_cache_alloc_trace+0x55/0x360 [ 62.367231][ T8476] io_uring_alloc_task_context+0x43/0x2a0 [ 62.372948][ T8476] io_uring_add_task_file+0x1a8/0x230 [ 62.378389][ T8476] io_uring_setup+0x2815/0x3770 [ 62.383216][ T8476] ? lock_downgrade+0x6d0/0x6d0 [ 62.388057][ T8476] ? io_link_timeout_fn+0x5c0/0x5c0 [ 62.393244][ T8476] ? io_sq_thread+0x1570/0x1570 [ 62.398085][ T8476] ? io_uring_poll+0x2a0/0x2a0 [ 62.402849][ T8476] ? syscall_enter_from_user_mode+0x1d/0x50 [ 62.408735][ T8476] do_syscall_64+0x2d/0x70 [ 62.413136][ T8476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 62.419108][ T8476] RIP: 0033:0x441309 [ 62.423102][ T8476] Code: e8 5c ae 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b 0a fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 62.443044][ T8476] RSP: 002b:00007ffed6545d38 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 62.451526][ T8476] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 0000000000441309 [ 62.459537][ T8476] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000003ad1 [ 62.467571][ T8476] RBP: 000000000000f2ae R08: 0000000000000002 R09: 00000000004002c8 [ 62.475520][ T8476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004021d0 [ 62.483491][ T8476] R13: 0000000000402260 R14: 0000000000000000 R15: 0000000000000000 [ 62.491875][ T8476] ------------[ cut here ]------------ [ 62.497479][ T8476] percpu_ref_kill_and_confirm called more than once on io_ring_ctx_ref_free! [ 62.497828][ T8476] WARNING: CPU: 0 PID: 8476 at lib/percpu-refcount.c:382 percpu_ref_kill_and_confirm+0x126/0x180 [ 62.517065][ T8476] Modules linked in: [ 62.520942][ T8476] CPU: 0 PID: 8476 Comm: syz-executor389 Not tainted 5.10.0-rc7-syzkaller #0 [ 62.529757][ T8476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.540254][ T8476] RIP: 0010:percpu_ref_kill_and_confirm+0x126/0x180 [ 62.547014][ T8476] Code: 5d 08 48 8d 7b 08 48 89 fa 48 c1 ea 03 80 3c 02 00 75 5d 48 8b 53 08 48 c7 c6 00 4b 9d 89 48 c7 c7 60 4a 9d 89 e8 c6 97 f6 04 <0f> 0b 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 [ 62.566741][ T8476] RSP: 0018:ffffc9000b94fe10 EFLAGS: 00010086 [ 62.572789][ T8476] RAX: 0000000000000000 RBX: ffff888011da4580 RCX: 0000000000000000 [ 62.580785][ T8476] RDX: ffff88801fe84ec0 RSI: ffffffff8158c835 RDI: fffff52001729fb4 [ 62.588734][ T8476] RBP: ffff88801539f000 R08: 0000000000000001 R09: ffff8880b9e2011b [ 62.596870][ T8476] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 [ 62.604906][ T8476] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802de28758 [ 62.612859][ T8476] FS: 00000000014ab880(0000) GS:ffff8880b9e00000(0000) knlGS:0000000000000000 [ 62.621768][ T8476] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 62.628349][ T8476] CR2: 00007f2a7046b000 CR3: 0000000023368000 CR4: 0000000000350ef0 [ 62.636296][ T8476] Call Trace: [ 62.639589][ T8476] io_ring_ctx_wait_and_kill+0x2b/0x450 [ 62.645114][ T8476] io_uring_release+0x3e/0x50 [ 62.649771][ T8476] __fput+0x285/0x920 [ 62.653730][ T8476] ? io_ring_ctx_wait_and_kill+0x450/0x450 [ 62.659516][ T8476] task_work_run+0xdd/0x190 [ 62.664001][ T8476] exit_to_user_mode_prepare+0x17e/0x1a0 [ 62.669612][ T8476] syscall_exit_to_user_mode+0x38/0x260 [ 62.675224][ T8476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 62.681092][ T8476] RIP: 0033:0x441309 [ 62.684964][ T8476] Code: e8 5c ae 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b 0a fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 62.704909][ T8476] RSP: 002b:00007ffed6545d38 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 62.713298][ T8476] RAX: fffffffffffffff4 RBX: 0000000000000000 RCX: 0000000000441309 [ 62.721248][ T8476] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000003ad1 [ 62.729194][ T8476] RBP: 000000000000f2ae R08: 0000000000000002 R09: 00000000004002c8 [ 62.737142][ T8476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004021d0 [ 62.745090][ T8476] R13: 0000000000402260 R14: 0000000000000000 R15: 0000000000000000 [ 62.753045][ T8476] Kernel panic - not syncing: panic_on_warn set ... [ 62.759610][ T8476] CPU: 0 PID: 8476 Comm: syz-executor389 Not tainted 5.10.0-rc7-syzkaller #0 [ 62.768355][ T8476] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 62.778663][ T8476] Call Trace: [ 62.782042][ T8476] dump_stack+0x107/0x163 [ 62.786354][ T8476] panic+0x306/0x73d [ 62.790667][ T8476] ? __warn_printk+0xf3/0xf3 [ 62.795508][ T8476] ? __warn.cold+0x1a/0x44 [ 62.800219][ T8476] ? __warn+0xf1/0x210 [ 62.804267][ T8476] ? percpu_ref_kill_and_confirm+0x126/0x180 [ 62.810220][ T8476] __warn.cold+0x35/0x44 [ 62.814444][ T8476] ? percpu_ref_kill_and_confirm+0x126/0x180 [ 62.820429][ T8476] report_bug+0x1bd/0x210 [ 62.824739][ T8476] handle_bug+0x3c/0x60 [ 62.828870][ T8476] exc_invalid_op+0x14/0x40 [ 62.833357][ T8476] asm_exc_invalid_op+0x12/0x20 [ 62.838191][ T8476] RIP: 0010:percpu_ref_kill_and_confirm+0x126/0x180 [ 62.844752][ T8476] Code: 5d 08 48 8d 7b 08 48 89 fa 48 c1 ea 03 80 3c 02 00 75 5d 48 8b 53 08 48 c7 c6 00 4b 9d 89 48 c7 c7 60 4a 9d 89 e8 c6 97 f6 04 <0f> 0b 48 b8 00 00 00 00 00 fc ff df 48 89 ea 48 c1 ea 03 80 3c 02 [ 62.864624][ T8476] RSP: 0018:ffffc9000b94fe10 EFLAGS: 00010086 [ 62.870669][ T8476] RAX: 0000000000000000 RBX: ffff888011da4580 RCX: 0000000000000000 [ 62.878617][ T8476] RDX: ffff88801fe84ec0 RSI: ffffffff8158c835 RDI: fffff52001729fb4 [ 62.886563][ T8476] RBP: ffff88801539f000 R08: 0000000000000001 R09: ffff8880b9e2011b [ 62.895203][ T8476] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000293 [ 62.903239][ T8476] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88802de28758 [ 62.911471][ T8476] ? vprintk_func+0x95/0x1e0 [ 62.916044][ T8476] io_ring_ctx_wait_and_kill+0x2b/0x450 [ 62.921565][ T8476] io_uring_release+0x3e/0x50 [ 62.926217][ T8476] __fput+0x285/0x920 [ 62.930178][ T8476] ? io_ring_ctx_wait_and_kill+0x450/0x450 [ 62.936046][ T8476] task_work_run+0xdd/0x190 [ 62.940532][ T8476] exit_to_user_mode_prepare+0x17e/0x1a0 [ 62.946229][ T8476] syscall_exit_to_user_mode+0x38/0x260 [ 62.951761][ T8476] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 62.957635][ T8476] RIP: 0033:0x441309 [ 62.961522][ T8476] Code: e8 5c ae 02 00 48 83 c4 18 c3 0f 1f 80 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 3b 0a fc ff c3 66 2e 0f 1f 84 00 00 00 00 [ 62.981098][ T8476] RSP: 002b:00007ffed6545d38 EFLAGS: 00000246 ORIG_RAX: 00000000000001a9 [ 62.989484][ T8476] RAX: fffffffffffffff4 RBX: 0000000000000000 RCX: 0000000000441309 [ 62.997515][ T8476] RDX: 0000000000000002 RSI: 00000000200000c0 RDI: 0000000000003ad1 [ 63.005468][ T8476] RBP: 000000000000f2ae R08: 0000000000000002 R09: 00000000004002c8 [ 63.013499][ T8476] R10: 0000000000000000 R11: 0000000000000246 R12: 00000000004021d0 [ 63.021545][ T8476] R13: 0000000000402260 R14: 0000000000000000 R15: 0000000000000000 [ 63.033279][ T8476] Kernel Offset: disabled [ 63.037650][ T8476] Rebooting in 86400 seconds..