Warning: Permanently added '10.128.0.22' (ED25519) to the list of known hosts. executing program [ 20.917527][ T30] audit: type=1400 audit(1696567299.199:66): avc: denied { execmem } for pid=286 comm="syz-executor126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 20.920369][ T30] audit: type=1400 audit(1696567299.199:67): avc: denied { integrity } for pid=286 comm="syz-executor126" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 20.923737][ T30] audit: type=1400 audit(1696567299.209:68): avc: denied { mounton } for pid=287 comm="syz-executor126" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 20.927558][ T30] audit: type=1400 audit(1696567299.209:69): avc: denied { mount } for pid=287 comm="syz-executor126" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 20.930793][ T30] audit: type=1400 audit(1696567299.209:70): avc: denied { mounton } for pid=287 comm="syz-executor126" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 20.935491][ T30] audit: type=1400 audit(1696567299.219:71): avc: denied { mounton } for pid=287 comm="syz-executor126" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 20.938208][ T289] FAULT_INJECTION: forcing a failure. [ 20.938208][ T289] name failslab, interval 1, probability 0, space 0, times 1 [ 20.943148][ T30] audit: type=1400 audit(1696567299.219:72): avc: denied { mount } for pid=287 comm="syz-executor126" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 20.955506][ T289] CPU: 1 PID: 289 Comm: syz-executor126 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 20.987686][ T289] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 20.997581][ T289] Call Trace: [ 21.000701][ T289] [ 21.003479][ T289] dump_stack_lvl+0x151/0x1b7 [ 21.007990][ T289] ? io_uring_drop_tctx_refs+0x190/0x190 [ 21.013459][ T289] dump_stack+0x15/0x17 [ 21.017446][ T289] should_fail+0x3c6/0x510 [ 21.021702][ T289] __should_failslab+0xa4/0xe0 [ 21.026298][ T289] ? anon_vma_clone+0x9a/0x500 [ 21.030901][ T289] should_failslab+0x9/0x20 [ 21.035238][ T289] slab_pre_alloc_hook+0x37/0xd0 [ 21.040102][ T289] ? anon_vma_clone+0x9a/0x500 [ 21.044701][ T289] kmem_cache_alloc+0x44/0x200 [ 21.049304][ T289] anon_vma_clone+0x9a/0x500 [ 21.053728][ T289] anon_vma_fork+0x91/0x4e0 [ 21.058071][ T289] ? anon_vma_name+0x43/0x70 [ 21.062506][ T289] ? vm_area_dup+0x17a/0x230 [ 21.066922][ T289] copy_mm+0xa3a/0x13e0 [ 21.070927][ T289] ? copy_signal+0x610/0x610 [ 21.075338][ T289] ? __init_rwsem+0xd6/0x1c0 [ 21.079766][ T289] ? copy_signal+0x4e3/0x610 [ 21.084199][ T289] copy_process+0x12bc/0x3260 [ 21.088713][ T289] ? proc_fail_nth_write+0x20b/0x290 [ 21.093841][ T289] ? fsnotify_perm+0x6a/0x5d0 [ 21.098339][ T289] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 21.103288][ T289] ? vfs_write+0x9ec/0x1110 [ 21.107629][ T289] kernel_clone+0x21e/0x9e0 [ 21.111978][ T289] ? file_end_write+0x1c0/0x1c0 [ 21.116663][ T289] ? create_io_thread+0x1e0/0x1e0 [ 21.121517][ T289] ? mutex_unlock+0xb2/0x260 [ 21.126981][ T289] ? __mutex_lock_slowpath+0x10/0x10 [ 21.132103][ T289] __x64_sys_clone+0x23f/0x290 [ 21.136700][ T289] ? __do_sys_vfork+0x130/0x130 [ 21.141392][ T289] ? ksys_write+0x260/0x2c0 [ 21.145728][ T289] ? debug_smp_processor_id+0x17/0x20 [ 21.150939][ T289] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 21.156925][ T289] ? exit_to_user_mode_prepare+0x39/0xa0 [ 21.162415][ T289] do_syscall_64+0x3d/0xb0 [ 21.166650][ T289] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 21.172380][ T289] RIP: 0033:0x7f344f2d38b9 [ 21.176629][ T289] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 21.196186][ T289] RSP: 002b:00007f344f294208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 21.204572][ T289] RAX: ffffffffffffffda RBX: 00007f344f35d3c8 RCX: 00007f344f2d38b9 [ 21.212393][ T289] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 21.220196][ T289] RBP: 00007f344f35d3c0 R08: 0000000000000000 R09: 0000000000003536 [ 21.228180][ T289] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f344f35d3cc [ 21.235991][ T289] R13: 00007f344f294210 R14: 0000000000000002 R15: 00007f344f32a01d [ 21.243807][ T289] executing program [ 21.248911][ T30] audit: type=1400 audit(1696567299.539:73): avc: denied { sys_admin } for pid=288 comm="syz-executor126" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 21.263233][ T291] syz-executor126[291]: segfault at 28 ip 00007f344f2d3846 sp 00007f344f2941e0 error 4 in syz-executor1265841520[7f344f29e000+8c000] [ 21.272731][ T293] FAULT_INJECTION: forcing a failure. [ 21.272731][ T293] name failslab, interval 1, probability 0, space 0, times 0 [ 21.283737][ T291] Code: 8b 04 24 48 8b 54 24 18 64 48 2b 14 25 28 00 00 00 75 05 48 83 c4 28 c3 e8 17 19 00 00 0f 1f 80 00 00 00 00 48 83 ec 28 31 f6 <64> 48 8b 04 25 28 00 00 00 48 89 44 24 18 31 c0 89 f8 48 69 c0 83 [ 21.300101][ T293] CPU: 1 PID: 293 Comm: syz-executor126 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 21.331527][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 21.341646][ T293] Call Trace: [ 21.344712][ T293] [ 21.347571][ T293] dump_stack_lvl+0x151/0x1b7 [ 21.352176][ T293] ? io_uring_drop_tctx_refs+0x190/0x190 [ 21.357634][ T293] dump_stack+0x15/0x17 [ 21.361629][ T293] should_fail+0x3c6/0x510 [ 21.365877][ T293] __should_failslab+0xa4/0xe0 [ 21.370479][ T293] ? anon_vma_fork+0xf7/0x4e0 [ 21.375114][ T293] should_failslab+0x9/0x20 [ 21.379422][ T293] slab_pre_alloc_hook+0x37/0xd0 [ 21.384193][ T293] ? anon_vma_fork+0xf7/0x4e0 [ 21.388705][ T293] kmem_cache_alloc+0x44/0x200 [ 21.393304][ T293] anon_vma_fork+0xf7/0x4e0 [ 21.397769][ T293] ? anon_vma_name+0x43/0x70 [ 21.402187][ T293] ? vm_area_dup+0x17a/0x230 [ 21.406612][ T293] copy_mm+0xa3a/0x13e0 [ 21.410637][ T293] ? copy_signal+0x610/0x610 [ 21.415036][ T293] ? __init_rwsem+0xd6/0x1c0 [ 21.419464][ T293] ? copy_signal+0x4e3/0x610 [ 21.423886][ T293] copy_process+0x12bc/0x3260 [ 21.428419][ T293] ? proc_fail_nth_write+0x20b/0x290 [ 21.433621][ T293] ? fsnotify_perm+0x6a/0x5d0 [ 21.438127][ T293] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 21.443072][ T293] ? vfs_write+0x9ec/0x1110 [ 21.447411][ T293] kernel_clone+0x21e/0x9e0 [ 21.451749][ T293] ? file_end_write+0x1c0/0x1c0 [ 21.456439][ T293] ? create_io_thread+0x1e0/0x1e0 [ 21.461438][ T293] ? mutex_unlock+0xb2/0x260 [ 21.466029][ T293] ? __mutex_lock_slowpath+0x10/0x10 [ 21.471138][ T293] __x64_sys_clone+0x23f/0x290 [ 21.475737][ T293] ? __do_sys_vfork+0x130/0x130 [ 21.480403][ T293] ? ksys_write+0x260/0x2c0 [ 21.484744][ T293] ? debug_smp_processor_id+0x17/0x20 [ 21.489952][ T293] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 21.495866][ T293] ? exit_to_user_mode_prepare+0x39/0xa0 [ 21.501324][ T293] do_syscall_64+0x3d/0xb0 [ 21.505694][ T293] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 21.511416][ T293] RIP: 0033:0x7f344f2d38b9 [ 21.515665][ T293] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 21.535110][ T293] RSP: 002b:00007f344f294208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 21.543354][ T293] RAX: ffffffffffffffda RBX: 00007f344f35d3c8 RCX: 00007f344f2d38b9 [ 21.551162][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 21.558972][ T293] RBP: 00007f344f35d3c0 R08: 0000000000000000 R09: 0000000000003536 [ 21.566793][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f344f35d3cc [ 21.574597][ T293] R13: 00007f344f294210 R14: 0000000000000002 R15: 00007f344f32a01d [ 21.582424][ T293] [ 21.586791][ T293] ------------[ cut here ]------------ [ 21.592183][ T293] refcount_t: underflow; use-after-free. [ 21.599689][ T293] WARNING: CPU: 0 PID: 293 at lib/refcount.c:28 refcount_warn_saturate+0x158/0x1a0 [ 21.609213][ T293] Modules linked in: [ 21.612965][ T293] CPU: 0 PID: 293 Comm: syz-executor126 Not tainted 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 21.623106][ T293] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 21.632908][ T293] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 21.638955][ T293] Code: 04 01 48 c7 c7 a0 af 82 85 e8 a4 98 dd fe 0f 0b eb 8b e8 1b 1b 0c ff c6 05 1f 6e 9f 04 01 48 c7 c7 00 b0 82 85 e8 88 98 dd fe <0f> 0b e9 6c ff ff ff e8 fc 1a 0c ff c6 05 01 6e 9f 04 01 48 c7 c7 [ 21.658352][ T293] RSP: 0018:ffffc90000967968 EFLAGS: 00010246 [ 21.664210][ T293] RAX: c5c8df7179be7100 RBX: 0000000000000003 RCX: ffff88811df7a780 [ 21.672415][ T293] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 21.680569][ T293] RBP: ffffc90000967978 R08: ffffffff81573f65 R09: ffffed103ee065e8 [ 21.688479][ T293] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1102387ee5e [ 21.696343][ T293] R13: ffff88811c3f72f0 R14: 0000000000000003 R15: ffff88811c908871 [ 21.704392][ T293] FS: 00007f344f2946c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 21.713501][ T293] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.720045][ T293] CR2: 000055b28af65098 CR3: 000000011c80b000 CR4: 00000000003506b0 [ 21.727972][ T293] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.735916][ T293] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.743721][ T293] Call Trace: [ 21.746814][ T293] [ 21.749614][ T293] ? show_regs+0x58/0x60 [ 21.753659][ T293] ? __warn+0x160/0x2f0 [ 21.757638][ T293] ? refcount_warn_saturate+0x158/0x1a0 [ 21.763060][ T293] ? report_bug+0x3d9/0x5b0 [ 21.767372][ T293] ? refcount_warn_saturate+0x158/0x1a0 [ 21.772790][ T293] ? handle_bug+0x41/0x70 [ 21.776912][ T293] ? exc_invalid_op+0x1b/0x50 [ 21.781477][ T293] ? asm_exc_invalid_op+0x1b/0x20 [ 21.786286][ T293] ? __wake_up_klogd+0xd5/0x110 [ 21.795871][ T293] ? refcount_warn_saturate+0x158/0x1a0 [ 21.801260][ T293] ? refcount_warn_saturate+0x158/0x1a0 [ 21.806608][ T293] vm_area_free_no_check+0x123/0x130 [ 21.811751][ T293] copy_mm+0xefb/0x13e0 [ 21.815715][ T293] ? copy_signal+0x610/0x610 [ 21.820173][ T293] ? __init_rwsem+0xd6/0x1c0 [ 21.824577][ T293] ? copy_signal+0x4e3/0x610 [ 21.829049][ T293] copy_process+0x12bc/0x3260 [ 21.833506][ T293] ? proc_fail_nth_write+0x20b/0x290 [ 21.838674][ T293] ? fsnotify_perm+0x6a/0x5d0 [ 21.843145][ T293] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 21.848172][ T293] ? vfs_write+0x9ec/0x1110 [ 21.852547][ T293] kernel_clone+0x21e/0x9e0 [ 21.857104][ T293] ? file_end_write+0x1c0/0x1c0 [ 21.861835][ T293] ? create_io_thread+0x1e0/0x1e0 [ 21.866663][ T293] ? mutex_unlock+0xb2/0x260 [ 21.871107][ T293] ? __mutex_lock_slowpath+0x10/0x10 [ 21.876192][ T293] __x64_sys_clone+0x23f/0x290 [ 21.881034][ T293] ? __do_sys_vfork+0x130/0x130 [ 21.885700][ T293] ? ksys_write+0x260/0x2c0 [ 21.890080][ T293] ? debug_smp_processor_id+0x17/0x20 [ 21.895261][ T293] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 21.901182][ T293] ? exit_to_user_mode_prepare+0x39/0xa0 [ 21.906640][ T293] do_syscall_64+0x3d/0xb0 [ 21.911155][ T293] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 21.916832][ T293] RIP: 0033:0x7f344f2d38b9 [ 21.921199][ T293] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 21.943663][ T293] RSP: 002b:00007f344f294208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 21.952212][ T293] RAX: ffffffffffffffda RBX: 00007f344f35d3c8 RCX: 00007f344f2d38b9 [ 21.959960][ T293] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 executing program [ 21.967756][ T293] RBP: 00007f344f35d3c0 R08: 0000000000000000 R09: 0000000000003536 [ 21.975733][ T293] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f344f35d3cc [ 21.983669][ T293] R13: 00007f344f294210 R14: 0000000000000002 R15: 00007f344f32a01d [ 21.991892][ T293] [ 21.994680][ T293] ---[ end trace 4897f50c53ba2217 ]--- [ 22.004099][ T296] FAULT_INJECTION: forcing a failure. [ 22.004099][ T296] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 22.017348][ T296] CPU: 0 PID: 296 Comm: syz-executor126 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 22.028802][ T296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 22.038697][ T296] Call Trace: [ 22.041845][ T296] [ 22.044595][ T296] dump_stack_lvl+0x151/0x1b7 [ 22.049109][ T296] ? io_uring_drop_tctx_refs+0x190/0x190 [ 22.054582][ T296] dump_stack+0x15/0x17 [ 22.058673][ T296] should_fail+0x3c6/0x510 [ 22.062950][ T296] should_fail_alloc_page+0x5a/0x80 [ 22.067965][ T296] prepare_alloc_pages+0x15c/0x700 [ 22.072905][ T296] ? __alloc_pages_bulk+0xe60/0xe60 [ 22.078020][ T296] __alloc_pages+0x138/0x5e0 [ 22.082458][ T296] ? stack_trace_save+0x1c0/0x1c0 [ 22.087308][ T296] ? prep_new_page+0x110/0x110 [ 22.091911][ T296] get_zeroed_page+0x19/0x40 [ 22.096360][ T296] __pud_alloc+0x8b/0x260 [ 22.100559][ T296] ? stack_trace_snprint+0xf0/0xf0 [ 22.105446][ T296] ? do_handle_mm_fault+0x2330/0x2330 [ 22.110746][ T296] ? __stack_depot_save+0x34/0x470 [ 22.115731][ T296] copy_page_range+0x2bcf/0x2f90 [ 22.120463][ T296] ? __kasan_slab_alloc+0xb1/0xe0 [ 22.125323][ T296] ? slab_post_alloc_hook+0x53/0x2c0 [ 22.130454][ T296] ? copy_mm+0xa3a/0x13e0 [ 22.134611][ T296] ? copy_process+0x12bc/0x3260 [ 22.139295][ T296] ? kernel_clone+0x21e/0x9e0 [ 22.143816][ T296] ? __x64_sys_clone+0x23f/0x290 [ 22.148699][ T296] ? do_syscall_64+0x3d/0xb0 [ 22.153101][ T296] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 22.159535][ T296] ? pfn_valid+0x1e0/0x1e0 [ 22.163949][ T296] ? rwsem_write_trylock+0x15b/0x290 [ 22.169070][ T296] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 22.175400][ T296] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 22.180969][ T296] ? __rb_insert_augmented+0x5de/0x610 [ 22.186687][ T296] copy_mm+0xc7e/0x13e0 [ 22.190680][ T296] ? copy_signal+0x610/0x610 [ 22.195276][ T296] ? __init_rwsem+0xd6/0x1c0 [ 22.199790][ T296] ? copy_signal+0x4e3/0x610 [ 22.204216][ T296] copy_process+0x12bc/0x3260 [ 22.208732][ T296] ? proc_fail_nth_write+0x20b/0x290 [ 22.213854][ T296] ? fsnotify_perm+0x6a/0x5d0 [ 22.218366][ T296] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 22.223311][ T296] ? vfs_write+0x9ec/0x1110 [ 22.227653][ T296] kernel_clone+0x21e/0x9e0 [ 22.231993][ T296] ? file_end_write+0x1c0/0x1c0 [ 22.236681][ T296] ? create_io_thread+0x1e0/0x1e0 [ 22.241679][ T296] ? mutex_unlock+0xb2/0x260 [ 22.246069][ T296] ? __mutex_lock_slowpath+0x10/0x10 [ 22.251182][ T296] __x64_sys_clone+0x23f/0x290 [ 22.255787][ T296] ? __do_sys_vfork+0x130/0x130 [ 22.260466][ T296] ? ksys_write+0x260/0x2c0 [ 22.264811][ T296] ? debug_smp_processor_id+0x17/0x20 [ 22.270020][ T296] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 22.275923][ T296] ? exit_to_user_mode_prepare+0x39/0xa0 [ 22.281394][ T296] do_syscall_64+0x3d/0xb0 [ 22.285637][ T296] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 22.291370][ T296] RIP: 0033:0x7f344f2d38b9 [ 22.295617][ T296] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 22.315061][ T296] RSP: 002b:00007f344f294208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 executing program [ 22.323309][ T296] RAX: ffffffffffffffda RBX: 00007f344f35d3c8 RCX: 00007f344f2d38b9 [ 22.331125][ T296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 22.338933][ T296] RBP: 00007f344f35d3c0 R08: 0000000000000000 R09: 0000000000003536 [ 22.346742][ T296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f344f35d3cc [ 22.354554][ T296] R13: 00007f344f294210 R14: 0000000000000002 R15: 00007f344f32a01d [ 22.362367][ T296] [ 22.369636][ T298] FAULT_INJECTION: forcing a failure. [ 22.369636][ T298] name failslab, interval 1, probability 0, space 0, times 0 [ 22.382123][ T298] CPU: 1 PID: 298 Comm: syz-executor126 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 22.394017][ T298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 22.403912][ T298] Call Trace: [ 22.407032][ T298] [ 22.409844][ T298] dump_stack_lvl+0x151/0x1b7 [ 22.414330][ T298] ? io_uring_drop_tctx_refs+0x190/0x190 [ 22.419802][ T298] ? avc_denied+0x1b0/0x1b0 [ 22.424137][ T298] dump_stack+0x15/0x17 [ 22.429500][ T298] should_fail+0x3c6/0x510 [ 22.434012][ T298] __should_failslab+0xa4/0xe0 [ 22.438687][ T298] ? vm_area_dup+0x26/0x230 [ 22.443195][ T298] should_failslab+0x9/0x20 [ 22.447536][ T298] slab_pre_alloc_hook+0x37/0xd0 [ 22.452309][ T298] ? vm_area_dup+0x26/0x230 [ 22.456648][ T298] kmem_cache_alloc+0x44/0x200 [ 22.461257][ T298] vm_area_dup+0x26/0x230 [ 22.465413][ T298] copy_mm+0x9a1/0x13e0 [ 22.469585][ T298] ? copy_signal+0x610/0x610 [ 22.474141][ T298] ? __init_rwsem+0xd6/0x1c0 [ 22.478564][ T298] ? copy_signal+0x4e3/0x610 [ 22.482987][ T298] copy_process+0x12bc/0x3260 [ 22.487499][ T298] ? proc_fail_nth_write+0x20b/0x290 [ 22.492627][ T298] ? fsnotify_perm+0x6a/0x5d0 [ 22.497134][ T298] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 22.502083][ T298] ? vfs_write+0x9ec/0x1110 [ 22.506518][ T298] kernel_clone+0x21e/0x9e0 [ 22.510883][ T298] ? file_end_write+0x1c0/0x1c0 [ 22.515541][ T298] ? create_io_thread+0x1e0/0x1e0 [ 22.520394][ T298] ? mutex_unlock+0xb2/0x260 [ 22.524820][ T298] ? __mutex_lock_slowpath+0x10/0x10 [ 22.529942][ T298] __x64_sys_clone+0x23f/0x290 [ 22.534543][ T298] ? __do_sys_vfork+0x130/0x130 [ 22.539230][ T298] ? ksys_write+0x260/0x2c0 [ 22.543568][ T298] ? debug_smp_processor_id+0x17/0x20 [ 22.548778][ T298] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 22.554680][ T298] ? exit_to_user_mode_prepare+0x39/0xa0 [ 22.560147][ T298] do_syscall_64+0x3d/0xb0 [ 22.564402][ T298] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 22.570126][ T298] RIP: 0033:0x7f344f2d38b9 [ 22.574380][ T298] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 22.593827][ T298] RSP: 002b:00007f344f294208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 22.602069][ T298] RAX: ffffffffffffffda RBX: 00007f344f35d3c8 RCX: 00007f344f2d38b9 [ 22.609880][ T298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 executing program [ 22.617693][ T298] RBP: 00007f344f35d3c0 R08: 0000000000000000 R09: 0000000000003536 [ 22.625680][ T298] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f344f35d3cc [ 22.633486][ T298] R13: 00007f344f294210 R14: 0000000000000002 R15: 00007f344f32a01d [ 22.641662][ T298] [ 22.649686][ T300] FAULT_INJECTION: forcing a failure. [ 22.649686][ T300] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 22.662930][ T300] CPU: 0 PID: 300 Comm: syz-executor126 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 22.674301][ T300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 22.684188][ T300] Call Trace: [ 22.687314][ T300] [ 22.690088][ T300] dump_stack_lvl+0x151/0x1b7 [ 22.694605][ T300] ? io_uring_drop_tctx_refs+0x190/0x190 [ 22.700069][ T300] ? kmem_cache_alloc+0x134/0x200 [ 22.704931][ T300] dump_stack+0x15/0x17 [ 22.708924][ T300] should_fail+0x3c6/0x510 [ 22.713184][ T300] should_fail_alloc_page+0x5a/0x80 [ 22.718206][ T300] prepare_alloc_pages+0x15c/0x700 [ 22.723159][ T300] ? __alloc_pages_bulk+0xe60/0xe60 [ 22.728207][ T300] __alloc_pages+0x138/0x5e0 [ 22.732629][ T300] ? prep_new_page+0x110/0x110 [ 22.737304][ T300] ? __alloc_pages+0x206/0x5e0 [ 22.741907][ T300] ? stack_trace_save+0x1c0/0x1c0 [ 22.746827][ T300] ? __kasan_check_write+0x14/0x20 [ 22.751713][ T300] ? _raw_spin_lock+0xa4/0x1b0 [ 22.756312][ T300] __pmd_alloc+0xb1/0x550 [ 22.760563][ T300] ? __pud_alloc+0x260/0x260 [ 22.765076][ T300] ? __pud_alloc+0x213/0x260 [ 22.769520][ T300] ? do_handle_mm_fault+0x2330/0x2330 [ 22.774710][ T300] ? __stack_depot_save+0x34/0x470 [ 22.779655][ T300] ? anon_vma_clone+0x9a/0x500 [ 22.784259][ T300] copy_page_range+0x2b3d/0x2f90 [ 22.789036][ T300] ? __kasan_slab_alloc+0xb1/0xe0 [ 22.793906][ T300] ? slab_post_alloc_hook+0x53/0x2c0 [ 22.799022][ T300] ? copy_mm+0xa3a/0x13e0 [ 22.803201][ T300] ? copy_process+0x12bc/0x3260 [ 22.807864][ T300] ? kernel_clone+0x21e/0x9e0 [ 22.812379][ T300] ? do_syscall_64+0x3d/0xb0 [ 22.816806][ T300] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 22.822725][ T300] ? pfn_valid+0x1e0/0x1e0 [ 22.826961][ T300] ? rwsem_write_trylock+0x15b/0x290 [ 22.832080][ T300] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 22.838332][ T300] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 22.843885][ T300] ? __rb_insert_augmented+0x5de/0x610 [ 22.849180][ T300] copy_mm+0xc7e/0x13e0 [ 22.853173][ T300] ? copy_signal+0x610/0x610 [ 22.857598][ T300] ? __init_rwsem+0xd6/0x1c0 [ 22.862024][ T300] ? copy_signal+0x4e3/0x610 [ 22.866448][ T300] copy_process+0x12bc/0x3260 [ 22.870968][ T300] ? proc_fail_nth_write+0x20b/0x290 [ 22.876084][ T300] ? fsnotify_perm+0x6a/0x5d0 [ 22.880599][ T300] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 22.885546][ T300] ? vfs_write+0x9ec/0x1110 [ 22.889896][ T300] kernel_clone+0x21e/0x9e0 [ 22.894234][ T300] ? file_end_write+0x1c0/0x1c0 [ 22.898912][ T300] ? create_io_thread+0x1e0/0x1e0 [ 22.903770][ T300] ? mutex_unlock+0xb2/0x260 [ 22.908199][ T300] ? __mutex_lock_slowpath+0x10/0x10 [ 22.913318][ T300] __x64_sys_clone+0x23f/0x290 [ 22.917919][ T300] ? __do_sys_vfork+0x130/0x130 [ 22.922605][ T300] ? ksys_write+0x260/0x2c0 [ 22.926967][ T300] ? debug_smp_processor_id+0x17/0x20 [ 22.932152][ T300] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 22.938056][ T300] ? exit_to_user_mode_prepare+0x39/0xa0 [ 22.943524][ T300] do_syscall_64+0x3d/0xb0 [ 22.947780][ T300] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 22.953503][ T300] RIP: 0033:0x7f344f2d38b9 [ 22.957757][ T300] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 22.977198][ T300] RSP: 002b:00007f344f294208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 22.985470][ T300] RAX: ffffffffffffffda RBX: 00007f344f35d3c8 RCX: 00007f344f2d38b9 [ 22.993973][ T300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 23.001758][ T300] RBP: 00007f344f35d3c0 R08: 0000000000000000 R09: 0000000000003536 [ 23.009570][ T300] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f344f35d3cc [ 23.017383][ T300] R13: 00007f344f294210 R14: 0000000000000002 R15: 00007f344f32a01d executing program [ 23.025200][ T300] [ 23.033291][ T303] FAULT_INJECTION: forcing a failure. [ 23.033291][ T303] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 23.046373][ T303] CPU: 0 PID: 303 Comm: syz-executor126 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 23.057749][ T303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 23.067640][ T303] Call Trace: [ 23.070764][ T303] [ 23.075278][ T303] dump_stack_lvl+0x151/0x1b7 [ 23.079789][ T303] ? io_uring_drop_tctx_refs+0x190/0x190 [ 23.087648][ T303] dump_stack+0x15/0x17 [ 23.091593][ T303] should_fail+0x3c6/0x510 [ 23.095849][ T303] should_fail_alloc_page+0x5a/0x80 [ 23.101046][ T303] prepare_alloc_pages+0x15c/0x700 [ 23.106316][ T303] ? __alloc_pages_bulk+0xe60/0xe60 [ 23.111674][ T303] __alloc_pages+0x138/0x5e0 [ 23.116106][ T303] ? prep_new_page+0x110/0x110 [ 23.120688][ T303] ? __alloc_pages+0x206/0x5e0 [ 23.125296][ T303] ? prep_new_page+0x110/0x110 [ 23.129889][ T303] ? __kasan_check_write+0x14/0x20 [ 23.134848][ T303] ? _raw_spin_lock+0xa4/0x1b0 [ 23.139442][ T303] pte_alloc_one+0x73/0x1b0 [ 23.143777][ T303] ? pfn_modify_allowed+0x2f0/0x2f0 [ 23.148811][ T303] ? __pmd_alloc+0x48d/0x550 [ 23.153235][ T303] __pte_alloc+0x86/0x350 [ 23.157401][ T303] ? __pud_alloc+0x260/0x260 [ 23.161835][ T303] ? __pud_alloc+0x213/0x260 [ 23.166254][ T303] ? free_pgtables+0x280/0x280 [ 23.170875][ T303] ? do_handle_mm_fault+0x2330/0x2330 [ 23.176237][ T303] ? __stack_depot_save+0x34/0x470 [ 23.181269][ T303] ? anon_vma_clone+0x9a/0x500 [ 23.185870][ T303] copy_page_range+0x28a8/0x2f90 [ 23.191353][ T303] ? __kasan_slab_alloc+0xb1/0xe0 [ 23.196370][ T303] ? slab_post_alloc_hook+0x53/0x2c0 [ 23.202017][ T303] ? kernel_clone+0x21e/0x9e0 [ 23.206619][ T303] ? do_syscall_64+0x3d/0xb0 [ 23.211048][ T303] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 23.216956][ T303] ? pfn_valid+0x1e0/0x1e0 [ 23.221209][ T303] ? rwsem_write_trylock+0x15b/0x290 [ 23.226325][ T303] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 23.232834][ T303] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 23.238389][ T303] ? __rb_insert_augmented+0x5de/0x610 [ 23.243682][ T303] copy_mm+0xc7e/0x13e0 [ 23.247674][ T303] ? copy_signal+0x610/0x610 [ 23.252101][ T303] ? __init_rwsem+0xd6/0x1c0 [ 23.256546][ T303] ? copy_signal+0x4e3/0x610 [ 23.260952][ T303] copy_process+0x12bc/0x3260 [ 23.265492][ T303] ? proc_fail_nth_write+0x20b/0x290 [ 23.270586][ T303] ? fsnotify_perm+0x6a/0x5d0 [ 23.275097][ T303] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 23.280046][ T303] ? vfs_write+0x9ec/0x1110 [ 23.284411][ T303] kernel_clone+0x21e/0x9e0 [ 23.288725][ T303] ? file_end_write+0x1c0/0x1c0 [ 23.293414][ T303] ? create_io_thread+0x1e0/0x1e0 [ 23.298271][ T303] ? mutex_unlock+0xb2/0x260 [ 23.302784][ T303] ? __mutex_lock_slowpath+0x10/0x10 [ 23.307904][ T303] __x64_sys_clone+0x23f/0x290 [ 23.312505][ T303] ? __do_sys_vfork+0x130/0x130 [ 23.317191][ T303] ? ksys_write+0x260/0x2c0 [ 23.321536][ T303] ? debug_smp_processor_id+0x17/0x20 [ 23.327350][ T303] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 23.333448][ T303] ? exit_to_user_mode_prepare+0x39/0xa0 [ 23.338904][ T303] do_syscall_64+0x3d/0xb0 [ 23.343232][ T303] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 23.348963][ T303] RIP: 0033:0x7f344f2d38b9 [ 23.353815][ T303] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 executing program [ 23.374445][ T303] RSP: 002b:00007f344f294208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 23.382659][ T303] RAX: ffffffffffffffda RBX: 00007f344f35d3c8 RCX: 00007f344f2d38b9 [ 23.390472][ T303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 23.398290][ T303] RBP: 00007f344f35d3c0 R08: 0000000000000000 R09: 0000000000003536 [ 23.406092][ T303] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f344f35d3cc [ 23.413903][ T303] R13: 00007f344f294210 R14: 0000000000000002 R15: 00007f344f32a01d [ 23.421816][ T303] [ 23.427980][ T305] FAULT_INJECTION: forcing a failure. [ 23.427980][ T305] name failslab, interval 1, probability 0, space 0, times 0 [ 23.442744][ T305] CPU: 0 PID: 305 Comm: syz-executor126 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 23.454202][ T305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 23.464102][ T305] Call Trace: [ 23.467218][ T305] [ 23.469996][ T305] dump_stack_lvl+0x151/0x1b7 [ 23.474706][ T305] ? io_uring_drop_tctx_refs+0x190/0x190 [ 23.480489][ T305] dump_stack+0x15/0x17 [ 23.489099][ T305] should_fail+0x3c6/0x510 [ 23.493350][ T305] __should_failslab+0xa4/0xe0 [ 23.497962][ T305] ? anon_vma_fork+0x1df/0x4e0 [ 23.502638][ T305] should_failslab+0x9/0x20 [ 23.506985][ T305] slab_pre_alloc_hook+0x37/0xd0 [ 23.511753][ T305] ? anon_vma_fork+0x1df/0x4e0 [ 23.516351][ T305] kmem_cache_alloc+0x44/0x200 [ 23.520952][ T305] anon_vma_fork+0x1df/0x4e0 [ 23.525377][ T305] copy_mm+0xa3a/0x13e0 [ 23.529370][ T305] ? copy_signal+0x610/0x610 [ 23.533809][ T305] ? __init_rwsem+0xd6/0x1c0 [ 23.538222][ T305] ? copy_signal+0x4e3/0x610 [ 23.542656][ T305] copy_process+0x12bc/0x3260 [ 23.547164][ T305] ? proc_fail_nth_write+0x20b/0x290 [ 23.552286][ T305] ? fsnotify_perm+0x6a/0x5d0 [ 23.556796][ T305] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 23.561743][ T305] ? vfs_write+0x9ec/0x1110 [ 23.566085][ T305] kernel_clone+0x21e/0x9e0 [ 23.570421][ T305] ? file_end_write+0x1c0/0x1c0 [ 23.575109][ T305] ? create_io_thread+0x1e0/0x1e0 [ 23.579971][ T305] ? mutex_unlock+0xb2/0x260 [ 23.584397][ T305] ? __mutex_lock_slowpath+0x10/0x10 [ 23.589520][ T305] __x64_sys_clone+0x23f/0x290 [ 23.594129][ T305] ? __do_sys_vfork+0x130/0x130 [ 23.598906][ T305] ? ksys_write+0x260/0x2c0 [ 23.603319][ T305] ? debug_smp_processor_id+0x17/0x20 [ 23.608525][ T305] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 23.614425][ T305] ? exit_to_user_mode_prepare+0x39/0xa0 [ 23.619896][ T305] do_syscall_64+0x3d/0xb0 [ 23.624149][ T305] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 23.629877][ T305] RIP: 0033:0x7f344f2d38b9 [ 23.634130][ T305] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 23.653573][ T305] RSP: 002b:00007f344f294208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 23.661815][ T305] RAX: ffffffffffffffda RBX: 00007f344f35d3c8 RCX: 00007f344f2d38b9 [ 23.669625][ T305] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 executing program [ 23.677438][ T305] RBP: 00007f344f35d3c0 R08: 0000000000000000 R09: 0000000000003536 [ 23.685249][ T305] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f344f35d3cc [ 23.693073][ T305] R13: 00007f344f294210 R14: 0000000000000002 R15: 00007f344f32a01d [ 23.700886][ T305] [ 23.709984][ T309] FAULT_INJECTION: forcing a failure. [ 23.709984][ T309] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 23.723534][ T309] CPU: 1 PID: 309 Comm: syz-executor126 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 23.734974][ T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 23.744867][ T309] Call Trace: [ 23.747990][ T309] [ 23.750769][ T309] dump_stack_lvl+0x151/0x1b7 [ 23.755282][ T309] ? io_uring_drop_tctx_refs+0x190/0x190 [ 23.760750][ T309] ? kmem_cache_alloc+0x134/0x200 [ 23.765610][ T309] dump_stack+0x15/0x17 [ 23.769692][ T309] should_fail+0x3c6/0x510 [ 23.773943][ T309] should_fail_alloc_page+0x5a/0x80 [ 23.778977][ T309] prepare_alloc_pages+0x15c/0x700 [ 23.784010][ T309] ? __alloc_pages_bulk+0xe60/0xe60 [ 23.789566][ T309] __alloc_pages+0x138/0x5e0 [ 23.793998][ T309] ? prep_new_page+0x110/0x110 [ 23.798595][ T309] ? __alloc_pages+0x206/0x5e0 [ 23.803192][ T309] ? stack_trace_save+0x1c0/0x1c0 [ 23.808072][ T309] ? __kasan_check_write+0x14/0x20 [ 23.813007][ T309] ? _raw_spin_lock+0xa4/0x1b0 [ 23.817600][ T309] __pmd_alloc+0xb1/0x550 [ 23.821769][ T309] ? __pud_alloc+0x260/0x260 [ 23.826190][ T309] ? __pud_alloc+0x213/0x260 [ 23.830705][ T309] ? do_handle_mm_fault+0x2330/0x2330 [ 23.836018][ T309] ? __stack_depot_save+0x34/0x470 [ 23.840943][ T309] ? anon_vma_clone+0x9a/0x500 [ 23.845561][ T309] copy_page_range+0x2b3d/0x2f90 [ 23.850408][ T309] ? __kasan_slab_alloc+0xb1/0xe0 [ 23.855266][ T309] ? slab_post_alloc_hook+0x53/0x2c0 [ 23.860395][ T309] ? copy_mm+0xa3a/0x13e0 [ 23.864559][ T309] ? copy_process+0x12bc/0x3260 [ 23.869241][ T309] ? kernel_clone+0x21e/0x9e0 [ 23.873761][ T309] ? do_syscall_64+0x3d/0xb0 [ 23.878178][ T309] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 23.884087][ T309] ? pfn_valid+0x1e0/0x1e0 [ 23.888347][ T309] ? rwsem_write_trylock+0x15b/0x290 [ 23.893461][ T309] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 23.899722][ T309] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 23.905259][ T309] ? __rb_insert_augmented+0x5de/0x610 [ 23.910556][ T309] copy_mm+0xc7e/0x13e0 [ 23.914554][ T309] ? copy_signal+0x610/0x610 [ 23.918976][ T309] ? __init_rwsem+0xd6/0x1c0 [ 23.923405][ T309] ? copy_signal+0x4e3/0x610 [ 23.927826][ T309] copy_process+0x12bc/0x3260 [ 23.932359][ T309] ? proc_fail_nth_write+0x20b/0x290 [ 23.937459][ T309] ? fsnotify_perm+0x6a/0x5d0 [ 23.941973][ T309] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 23.946919][ T309] ? vfs_write+0x9ec/0x1110 [ 23.952130][ T309] kernel_clone+0x21e/0x9e0 [ 23.956467][ T309] ? file_end_write+0x1c0/0x1c0 [ 23.961153][ T309] ? create_io_thread+0x1e0/0x1e0 [ 23.966012][ T309] ? mutex_unlock+0xb2/0x260 [ 23.970440][ T309] ? __mutex_lock_slowpath+0x10/0x10 [ 23.975561][ T309] __x64_sys_clone+0x23f/0x290 [ 23.980162][ T309] ? __do_sys_vfork+0x130/0x130 [ 23.984846][ T309] ? ksys_write+0x260/0x2c0 [ 23.989273][ T309] ? debug_smp_processor_id+0x17/0x20 [ 23.994482][ T309] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 24.000385][ T309] ? exit_to_user_mode_prepare+0x39/0xa0 [ 24.005851][ T309] do_syscall_64+0x3d/0xb0 [ 24.010104][ T309] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.015833][ T309] RIP: 0033:0x7f344f2d38b9 [ 24.020088][ T309] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 24.039616][ T309] RSP: 002b:00007f344f294208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 24.047863][ T309] RAX: ffffffffffffffda RBX: 00007f344f35d3c8 RCX: 00007f344f2d38b9 [ 24.055672][ T309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 24.063481][ T309] RBP: 00007f344f35d3c0 R08: 0000000000000000 R09: 0000000000003536 [ 24.071295][ T309] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f344f35d3cc executing program [ 24.079104][ T309] R13: 00007f344f294210 R14: 0000000000000002 R15: 00007f344f32a01d [ 24.086918][ T309] [ 24.094572][ T312] FAULT_INJECTION: forcing a failure. [ 24.094572][ T312] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 24.107665][ T312] CPU: 1 PID: 312 Comm: syz-executor126 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 24.119026][ T312] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 24.128924][ T312] Call Trace: [ 24.132042][ T312] [ 24.134873][ T312] dump_stack_lvl+0x151/0x1b7 [ 24.139338][ T312] ? io_uring_drop_tctx_refs+0x190/0x190 [ 24.144830][ T312] dump_stack+0x15/0x17 [ 24.148795][ T312] should_fail+0x3c6/0x510 [ 24.153204][ T312] should_fail_alloc_page+0x5a/0x80 [ 24.158232][ T312] prepare_alloc_pages+0x15c/0x700 [ 24.163181][ T312] ? __alloc_pages_bulk+0xe60/0xe60 [ 24.168211][ T312] __alloc_pages+0x138/0x5e0 [ 24.172646][ T312] ? prep_new_page+0x110/0x110 [ 24.177275][ T312] ? __alloc_pages+0x206/0x5e0 [ 24.181846][ T312] ? prep_new_page+0x110/0x110 [ 24.186438][ T312] ? __kasan_check_write+0x14/0x20 [ 24.191490][ T312] ? _raw_spin_lock+0xa4/0x1b0 [ 24.196179][ T312] pte_alloc_one+0x73/0x1b0 [ 24.200517][ T312] ? pfn_modify_allowed+0x2f0/0x2f0 [ 24.205546][ T312] ? __pmd_alloc+0x48d/0x550 [ 24.209975][ T312] __pte_alloc+0x86/0x350 [ 24.214138][ T312] ? __pud_alloc+0x260/0x260 [ 24.218564][ T312] ? __pud_alloc+0x213/0x260 [ 24.223079][ T312] ? free_pgtables+0x280/0x280 [ 24.227677][ T312] ? do_handle_mm_fault+0x2330/0x2330 [ 24.232886][ T312] ? __stack_depot_save+0x34/0x470 [ 24.237834][ T312] ? anon_vma_clone+0x9a/0x500 [ 24.242432][ T312] copy_page_range+0x28a8/0x2f90 [ 24.247208][ T312] ? __kasan_slab_alloc+0xb1/0xe0 [ 24.252069][ T312] ? slab_post_alloc_hook+0x53/0x2c0 [ 24.257199][ T312] ? kernel_clone+0x21e/0x9e0 [ 24.261702][ T312] ? do_syscall_64+0x3d/0xb0 [ 24.266126][ T312] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.272035][ T312] ? pfn_valid+0x1e0/0x1e0 [ 24.276290][ T312] ? rwsem_write_trylock+0x15b/0x290 [ 24.281411][ T312] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 24.287738][ T312] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 24.293382][ T312] ? __rb_insert_augmented+0x5de/0x610 [ 24.298859][ T312] copy_mm+0xc7e/0x13e0 [ 24.302847][ T312] ? copy_signal+0x610/0x610 [ 24.307275][ T312] ? __init_rwsem+0xd6/0x1c0 [ 24.311703][ T312] ? copy_signal+0x4e3/0x610 [ 24.316120][ T312] copy_process+0x12bc/0x3260 [ 24.320646][ T312] ? proc_fail_nth_write+0x20b/0x290 [ 24.325758][ T312] ? fsnotify_perm+0x6a/0x5d0 [ 24.330265][ T312] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 24.336951][ T312] ? vfs_write+0x9ec/0x1110 [ 24.341294][ T312] kernel_clone+0x21e/0x9e0 [ 24.345631][ T312] ? file_end_write+0x1c0/0x1c0 [ 24.350315][ T312] ? create_io_thread+0x1e0/0x1e0 [ 24.355175][ T312] ? mutex_unlock+0xb2/0x260 [ 24.359629][ T312] ? __mutex_lock_slowpath+0x10/0x10 [ 24.364754][ T312] __x64_sys_clone+0x23f/0x290 [ 24.369325][ T312] ? __do_sys_vfork+0x130/0x130 [ 24.374013][ T312] ? ksys_write+0x260/0x2c0 [ 24.378349][ T312] ? debug_smp_processor_id+0x17/0x20 [ 24.383557][ T312] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 24.389461][ T312] ? exit_to_user_mode_prepare+0x39/0xa0 [ 24.395556][ T312] do_syscall_64+0x3d/0xb0 [ 24.399817][ T312] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.405516][ T312] RIP: 0033:0x7f344f2d38b9 [ 24.409768][ T312] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 executing program [ 24.429211][ T312] RSP: 002b:00007f344f294208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 24.437455][ T312] RAX: ffffffffffffffda RBX: 00007f344f35d3c8 RCX: 00007f344f2d38b9 [ 24.445267][ T312] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 24.453077][ T312] RBP: 00007f344f35d3c0 R08: 0000000000000000 R09: 0000000000003536 [ 24.460891][ T312] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f344f35d3cc [ 24.469141][ T312] R13: 00007f344f294210 R14: 0000000000000002 R15: 00007f344f32a01d [ 24.476950][ T312] [ 24.483355][ T314] FAULT_INJECTION: forcing a failure. [ 24.483355][ T314] name failslab, interval 1, probability 0, space 0, times 0 [ 24.495853][ T314] CPU: 1 PID: 314 Comm: syz-executor126 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 24.507206][ T314] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 24.517101][ T314] Call Trace: [ 24.520223][ T314] [ 24.523001][ T314] dump_stack_lvl+0x151/0x1b7 [ 24.527514][ T314] ? io_uring_drop_tctx_refs+0x190/0x190 [ 24.532985][ T314] ? avc_denied+0x1b0/0x1b0 [ 24.538449][ T314] dump_stack+0x15/0x17 [ 24.542448][ T314] should_fail+0x3c6/0x510 [ 24.546696][ T314] __should_failslab+0xa4/0xe0 [ 24.551301][ T314] ? vm_area_dup+0x26/0x230 [ 24.555636][ T314] should_failslab+0x9/0x20 [ 24.559975][ T314] slab_pre_alloc_hook+0x37/0xd0 [ 24.564748][ T314] ? vm_area_dup+0x26/0x230 [ 24.569087][ T314] kmem_cache_alloc+0x44/0x200 [ 24.573717][ T314] vm_area_dup+0x26/0x230 [ 24.577853][ T314] copy_mm+0x9a1/0x13e0 [ 24.581851][ T314] ? copy_signal+0x610/0x610 [ 24.586272][ T314] ? __init_rwsem+0xd6/0x1c0 [ 24.590700][ T314] ? copy_signal+0x4e3/0x610 [ 24.595268][ T314] copy_process+0x12bc/0x3260 [ 24.599793][ T314] ? proc_fail_nth_write+0x20b/0x290 [ 24.604900][ T314] ? fsnotify_perm+0x6a/0x5d0 [ 24.609420][ T314] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 24.614366][ T314] ? vfs_write+0x9ec/0x1110 [ 24.618703][ T314] kernel_clone+0x21e/0x9e0 [ 24.623042][ T314] ? file_end_write+0x1c0/0x1c0 [ 24.628158][ T314] ? create_io_thread+0x1e0/0x1e0 [ 24.633017][ T314] ? mutex_unlock+0xb2/0x260 [ 24.637457][ T314] ? __mutex_lock_slowpath+0x10/0x10 [ 24.642571][ T314] __x64_sys_clone+0x23f/0x290 [ 24.647167][ T314] ? __do_sys_vfork+0x130/0x130 [ 24.651853][ T314] ? ksys_write+0x260/0x2c0 [ 24.656206][ T314] ? debug_smp_processor_id+0x17/0x20 [ 24.661401][ T314] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 24.667303][ T314] ? exit_to_user_mode_prepare+0x39/0xa0 [ 24.672770][ T314] do_syscall_64+0x3d/0xb0 [ 24.677025][ T314] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.682753][ T314] RIP: 0033:0x7f344f2d38b9 [ 24.687007][ T314] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 24.706569][ T314] RSP: 002b:00007f344f294208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 24.714798][ T314] RAX: ffffffffffffffda RBX: 00007f344f35d3c8 RCX: 00007f344f2d38b9 [ 24.722612][ T314] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 executing program [ 24.730520][ T314] RBP: 00007f344f35d3c0 R08: 0000000000000000 R09: 0000000000003536 [ 24.738630][ T314] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f344f35d3cc [ 24.746442][ T314] R13: 00007f344f294210 R14: 0000000000000002 R15: 00007f344f32a01d [ 24.754251][ T314] [ 24.761539][ T316] FAULT_INJECTION: forcing a failure. [ 24.761539][ T316] name failslab, interval 1, probability 0, space 0, times 0 [ 24.774060][ T316] CPU: 1 PID: 316 Comm: syz-executor126 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 24.785491][ T316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 24.796516][ T316] Call Trace: [ 24.799638][ T316] [ 24.802418][ T316] dump_stack_lvl+0x151/0x1b7 [ 24.806951][ T316] ? io_uring_drop_tctx_refs+0x190/0x190 [ 24.812402][ T316] dump_stack+0x15/0x17 [ 24.816392][ T316] should_fail+0x3c6/0x510 [ 24.820642][ T316] __should_failslab+0xa4/0xe0 [ 24.825243][ T316] ? anon_vma_fork+0x1df/0x4e0 [ 24.829848][ T316] should_failslab+0x9/0x20 [ 24.834181][ T316] slab_pre_alloc_hook+0x37/0xd0 [ 24.838956][ T316] ? anon_vma_fork+0x1df/0x4e0 [ 24.843554][ T316] kmem_cache_alloc+0x44/0x200 [ 24.852845][ T316] anon_vma_fork+0x1df/0x4e0 [ 24.857271][ T316] copy_mm+0xa3a/0x13e0 [ 24.861263][ T316] ? copy_signal+0x610/0x610 [ 24.865686][ T316] ? __init_rwsem+0xd6/0x1c0 [ 24.870113][ T316] ? copy_signal+0x4e3/0x610 [ 24.874540][ T316] copy_process+0x12bc/0x3260 [ 24.879056][ T316] ? proc_fail_nth_write+0x20b/0x290 [ 24.884172][ T316] ? fsnotify_perm+0x6a/0x5d0 [ 24.888687][ T316] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 24.893634][ T316] ? vfs_write+0x9ec/0x1110 [ 24.897973][ T316] kernel_clone+0x21e/0x9e0 [ 24.902759][ T316] ? file_end_write+0x1c0/0x1c0 [ 24.907478][ T316] ? create_io_thread+0x1e0/0x1e0 [ 24.912302][ T316] ? mutex_unlock+0xb2/0x260 [ 24.916727][ T316] ? __mutex_lock_slowpath+0x10/0x10 [ 24.921850][ T316] __x64_sys_clone+0x23f/0x290 [ 24.926626][ T316] ? __do_sys_vfork+0x130/0x130 [ 24.931309][ T316] ? ksys_write+0x260/0x2c0 [ 24.935651][ T316] ? debug_smp_processor_id+0x17/0x20 [ 24.940864][ T316] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 24.946759][ T316] ? exit_to_user_mode_prepare+0x39/0xa0 [ 24.952231][ T316] do_syscall_64+0x3d/0xb0 [ 24.956483][ T316] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 24.962208][ T316] RIP: 0033:0x7f344f2d38b9 [ 24.966464][ T316] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 executing program [ 24.985902][ T316] RSP: 002b:00007f344f294208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 24.994153][ T316] RAX: ffffffffffffffda RBX: 00007f344f35d3c8 RCX: 00007f344f2d38b9 [ 25.001959][ T316] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 25.009769][ T316] RBP: 00007f344f35d3c0 R08: 0000000000000000 R09: 0000000000003536 [ 25.017760][ T316] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f344f35d3cc [ 25.025565][ T316] R13: 00007f344f294210 R14: 0000000000000002 R15: 00007f344f32a01d [ 25.033382][ T316] [ 25.039656][ T318] FAULT_INJECTION: forcing a failure. [ 25.039656][ T318] name failslab, interval 1, probability 0, space 0, times 0 [ 25.052132][ T318] CPU: 1 PID: 318 Comm: syz-executor126 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 25.063510][ T318] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 25.073401][ T318] Call Trace: [ 25.076531][ T318] [ 25.079302][ T318] dump_stack_lvl+0x151/0x1b7 [ 25.083816][ T318] ? io_uring_drop_tctx_refs+0x190/0x190 [ 25.089375][ T318] dump_stack+0x15/0x17 [ 25.093359][ T318] should_fail+0x3c6/0x510 [ 25.097612][ T318] __should_failslab+0xa4/0xe0 [ 25.102212][ T318] ? anon_vma_fork+0x1df/0x4e0 [ 25.106811][ T318] should_failslab+0x9/0x20 [ 25.111154][ T318] slab_pre_alloc_hook+0x37/0xd0 [ 25.115926][ T318] ? anon_vma_fork+0x1df/0x4e0 [ 25.120527][ T318] kmem_cache_alloc+0x44/0x200 [ 25.125298][ T318] anon_vma_fork+0x1df/0x4e0 [ 25.129817][ T318] copy_mm+0xa3a/0x13e0 [ 25.133806][ T318] ? copy_signal+0x610/0x610 [ 25.138227][ T318] ? __init_rwsem+0xd6/0x1c0 [ 25.142657][ T318] ? copy_signal+0x4e3/0x610 [ 25.147084][ T318] copy_process+0x12bc/0x3260 [ 25.151634][ T318] ? proc_fail_nth_write+0x20b/0x290 [ 25.156722][ T318] ? fsnotify_perm+0x6a/0x5d0 [ 25.161230][ T318] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 25.166177][ T318] ? vfs_write+0x9ec/0x1110 [ 25.170517][ T318] kernel_clone+0x21e/0x9e0 [ 25.174857][ T318] ? file_end_write+0x1c0/0x1c0 [ 25.179558][ T318] ? create_io_thread+0x1e0/0x1e0 [ 25.184404][ T318] ? mutex_unlock+0xb2/0x260 [ 25.188830][ T318] ? __mutex_lock_slowpath+0x10/0x10 [ 25.195600][ T318] __x64_sys_clone+0x23f/0x290 [ 25.200214][ T318] ? __do_sys_vfork+0x130/0x130 [ 25.204888][ T318] ? ksys_write+0x260/0x2c0 [ 25.209236][ T318] ? debug_smp_processor_id+0x17/0x20 [ 25.214459][ T318] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 25.220341][ T318] ? exit_to_user_mode_prepare+0x39/0xa0 [ 25.225814][ T318] do_syscall_64+0x3d/0xb0 [ 25.230084][ T318] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.235923][ T318] RIP: 0033:0x7f344f2d38b9 [ 25.240169][ T318] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 25.259785][ T318] RSP: 002b:00007f344f294208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 25.268025][ T318] RAX: ffffffffffffffda RBX: 00007f344f35d3c8 RCX: 00007f344f2d38b9 [ 25.275837][ T318] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 executing program [ 25.283664][ T318] RBP: 00007f344f35d3c0 R08: 0000000000000000 R09: 0000000000003536 [ 25.291462][ T318] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f344f35d3cc [ 25.299279][ T318] R13: 00007f344f294210 R14: 0000000000000002 R15: 00007f344f32a01d [ 25.307446][ T318] [ 25.313621][ T321] FAULT_INJECTION: forcing a failure. [ 25.313621][ T321] name failslab, interval 1, probability 0, space 0, times 0 [ 25.326326][ T321] CPU: 1 PID: 321 Comm: syz-executor126 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 25.339490][ T321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 25.351382][ T321] Call Trace: [ 25.354503][ T321] [ 25.357281][ T321] dump_stack_lvl+0x151/0x1b7 [ 25.361792][ T321] ? io_uring_drop_tctx_refs+0x190/0x190 [ 25.367275][ T321] dump_stack+0x15/0x17 [ 25.371687][ T321] should_fail+0x3c6/0x510 [ 25.375950][ T321] __should_failslab+0xa4/0xe0 [ 25.380540][ T321] ? anon_vma_fork+0x1df/0x4e0 [ 25.385149][ T321] should_failslab+0x9/0x20 [ 25.389590][ T321] slab_pre_alloc_hook+0x37/0xd0 [ 25.394363][ T321] ? anon_vma_fork+0x1df/0x4e0 [ 25.398964][ T321] kmem_cache_alloc+0x44/0x200 [ 25.403566][ T321] anon_vma_fork+0x1df/0x4e0 [ 25.407991][ T321] copy_mm+0xa3a/0x13e0 [ 25.411984][ T321] ? copy_signal+0x610/0x610 [ 25.416409][ T321] ? __init_rwsem+0xd6/0x1c0 [ 25.420838][ T321] ? copy_signal+0x4e3/0x610 [ 25.425261][ T321] copy_process+0x12bc/0x3260 [ 25.429786][ T321] ? proc_fail_nth_write+0x20b/0x290 [ 25.434900][ T321] ? fsnotify_perm+0x6a/0x5d0 [ 25.439410][ T321] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 25.444357][ T321] ? vfs_write+0x9ec/0x1110 [ 25.448696][ T321] kernel_clone+0x21e/0x9e0 [ 25.453036][ T321] ? file_end_write+0x1c0/0x1c0 [ 25.462584][ T321] ? create_io_thread+0x1e0/0x1e0 [ 25.467811][ T321] ? mutex_unlock+0xb2/0x260 [ 25.472183][ T321] ? __mutex_lock_slowpath+0x10/0x10 [ 25.477298][ T321] __x64_sys_clone+0x23f/0x290 [ 25.481902][ T321] ? __do_sys_vfork+0x130/0x130 [ 25.491383][ T321] ? ksys_write+0x260/0x2c0 [ 25.495699][ T321] ? debug_smp_processor_id+0x17/0x20 [ 25.500905][ T321] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 25.506807][ T321] ? exit_to_user_mode_prepare+0x39/0xa0 [ 25.512284][ T321] do_syscall_64+0x3d/0xb0 [ 25.516529][ T321] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.522259][ T321] RIP: 0033:0x7f344f2d38b9 [ 25.526508][ T321] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 25.545956][ T321] RSP: 002b:00007f344f294208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 25.554206][ T321] RAX: ffffffffffffffda RBX: 00007f344f35d3c8 RCX: 00007f344f2d38b9 [ 25.562010][ T321] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 25.569819][ T321] RBP: 00007f344f35d3c0 R08: 0000000000000000 R09: 0000000000003536 [ 25.577631][ T321] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f344f35d3cc executing program [ 25.585461][ T321] R13: 00007f344f294210 R14: 0000000000000002 R15: 00007f344f32a01d [ 25.593279][ T321] [ 25.599684][ T323] FAULT_INJECTION: forcing a failure. [ 25.599684][ T323] name failslab, interval 1, probability 0, space 0, times 0 [ 25.612198][ T323] CPU: 1 PID: 323 Comm: syz-executor126 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 25.623560][ T323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 25.633446][ T323] Call Trace: [ 25.636571][ T323] [ 25.639350][ T323] dump_stack_lvl+0x151/0x1b7 [ 25.644036][ T323] ? io_uring_drop_tctx_refs+0x190/0x190 [ 25.649505][ T323] dump_stack+0x15/0x17 [ 25.653495][ T323] should_fail+0x3c6/0x510 [ 25.657748][ T323] __should_failslab+0xa4/0xe0 [ 25.662350][ T323] ? anon_vma_fork+0xf7/0x4e0 [ 25.666863][ T323] should_failslab+0x9/0x20 [ 25.671208][ T323] slab_pre_alloc_hook+0x37/0xd0 [ 25.675974][ T323] ? anon_vma_fork+0xf7/0x4e0 [ 25.680487][ T323] kmem_cache_alloc+0x44/0x200 [ 25.685096][ T323] anon_vma_fork+0xf7/0x4e0 [ 25.689428][ T323] ? anon_vma_name+0x43/0x70 [ 25.693855][ T323] ? vm_area_dup+0x17a/0x230 [ 25.698280][ T323] copy_mm+0xa3a/0x13e0 [ 25.702297][ T323] ? copy_signal+0x610/0x610 [ 25.706700][ T323] ? __init_rwsem+0xd6/0x1c0 [ 25.711127][ T323] ? copy_signal+0x4e3/0x610 [ 25.715558][ T323] copy_process+0x12bc/0x3260 [ 25.720068][ T323] ? proc_fail_nth_write+0x20b/0x290 [ 25.725192][ T323] ? fsnotify_perm+0x6a/0x5d0 [ 25.729702][ T323] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 25.734736][ T323] ? vfs_write+0x9ec/0x1110 [ 25.739077][ T323] kernel_clone+0x21e/0x9e0 [ 25.743414][ T323] ? file_end_write+0x1c0/0x1c0 [ 25.748101][ T323] ? create_io_thread+0x1e0/0x1e0 [ 25.752959][ T323] ? mutex_unlock+0xb2/0x260 [ 25.757387][ T323] ? __mutex_lock_slowpath+0x10/0x10 [ 25.763117][ T323] __x64_sys_clone+0x23f/0x290 [ 25.767716][ T323] ? __do_sys_vfork+0x130/0x130 [ 25.772401][ T323] ? ksys_write+0x260/0x2c0 [ 25.776741][ T323] ? debug_smp_processor_id+0x17/0x20 [ 25.781949][ T323] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 25.787852][ T323] ? exit_to_user_mode_prepare+0x39/0xa0 [ 25.793344][ T323] do_syscall_64+0x3d/0xb0 [ 25.797572][ T323] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 25.803300][ T323] RIP: 0033:0x7f344f2d38b9 [ 25.807551][ T323] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 25.827083][ T323] RSP: 002b:00007f344f294208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 25.836110][ T323] RAX: ffffffffffffffda RBX: 00007f344f35d3c8 RCX: 00007f344f2d38b9 [ 25.843921][ T323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 25.851732][ T323] RBP: 00007f344f35d3c0 R08: 0000000000000000 R09: 0000000000003536 [ 25.859647][ T323] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f344f35d3cc [ 25.867454][ T323] R13: 00007f344f294210 R14: 0000000000000002 R15: 00007f344f32a01d [ 25.875277][ T323] [ 25.878391][ T323] ================================================================== [ 25.886356][ T323] BUG: KASAN: double-free or invalid-free in kfree+0xc8/0x220 [ 25.893644][ T323] [ 25.895812][ T323] CPU: 1 PID: 323 Comm: syz-executor126 Tainted: G W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 25.907274][ T323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 25.917168][ T323] Call Trace: [ 25.920289][ T323] [ 25.923065][ T323] dump_stack_lvl+0x151/0x1b7 [ 25.927666][ T323] ? io_uring_drop_tctx_refs+0x190/0x190 [ 25.933183][ T323] ? __wake_up_klogd+0xd5/0x110 [ 25.937820][ T323] ? panic+0x751/0x751 [ 25.941724][ T323] ? kfree+0xc8/0x220 [ 25.945565][ T323] print_address_description+0x87/0x3b0 [ 25.950936][ T323] ? kfree+0xc8/0x220 [ 25.954745][ T323] ? kfree+0xc8/0x220 [ 25.958564][ T323] kasan_report_invalid_free+0x6b/0xa0 [ 25.963860][ T323] ____kasan_slab_free+0x13e/0x160 [ 25.968805][ T323] __kasan_slab_free+0x11/0x20 [ 25.973406][ T323] slab_free_freelist_hook+0xbd/0x190 [ 25.978613][ T323] ? anon_vma_name_free+0x15/0x20 [ 25.983474][ T323] kfree+0xc8/0x220 [ 25.987121][ T323] anon_vma_name_free+0x15/0x20 [ 25.991805][ T323] vm_area_free_no_check+0xa6/0x130 [ 25.996840][ T323] copy_mm+0xefb/0x13e0 [ 26.000834][ T323] ? copy_signal+0x610/0x610 [ 26.005345][ T323] ? __init_rwsem+0xd6/0x1c0 [ 26.009775][ T323] ? copy_signal+0x4e3/0x610 [ 26.014271][ T323] copy_process+0x12bc/0x3260 [ 26.018711][ T323] ? proc_fail_nth_write+0x20b/0x290 [ 26.023831][ T323] ? fsnotify_perm+0x6a/0x5d0 [ 26.028349][ T323] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 26.033290][ T323] ? vfs_write+0x9ec/0x1110 [ 26.037632][ T323] kernel_clone+0x21e/0x9e0 [ 26.041975][ T323] ? file_end_write+0x1c0/0x1c0 [ 26.046748][ T323] ? create_io_thread+0x1e0/0x1e0 [ 26.051606][ T323] ? mutex_unlock+0xb2/0x260 [ 26.056321][ T323] ? __mutex_lock_slowpath+0x10/0x10 [ 26.061442][ T323] __x64_sys_clone+0x23f/0x290 [ 26.066041][ T323] ? __do_sys_vfork+0x130/0x130 [ 26.070729][ T323] ? ksys_write+0x260/0x2c0 [ 26.075328][ T323] ? debug_smp_processor_id+0x17/0x20 [ 26.080736][ T323] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 26.086721][ T323] ? exit_to_user_mode_prepare+0x39/0xa0 [ 26.092284][ T323] do_syscall_64+0x3d/0xb0 [ 26.096531][ T323] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.102267][ T323] RIP: 0033:0x7f344f2d38b9 [ 26.106512][ T323] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 26.125952][ T323] RSP: 002b:00007f344f294208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 26.134199][ T323] RAX: ffffffffffffffda RBX: 00007f344f35d3c8 RCX: 00007f344f2d38b9 [ 26.142008][ T323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 26.149914][ T323] RBP: 00007f344f35d3c0 R08: 0000000000000000 R09: 0000000000003536 [ 26.158070][ T323] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f344f35d3cc [ 26.165884][ T323] R13: 00007f344f294210 R14: 0000000000000002 R15: 00007f344f32a01d [ 26.173701][ T323] [ 26.176560][ T323] [ 26.178731][ T323] Allocated by task 286: [ 26.182808][ T323] __kasan_slab_alloc+0xb1/0xe0 [ 26.187503][ T323] slab_post_alloc_hook+0x53/0x2c0 [ 26.192552][ T323] kmem_cache_alloc+0xf5/0x200 [ 26.197282][ T323] vm_area_dup+0x26/0x230 [ 26.201655][ T323] copy_mm+0x9a1/0x13e0 [ 26.205660][ T323] copy_process+0x12bc/0x3260 [ 26.210162][ T323] kernel_clone+0x21e/0x9e0 [ 26.214493][ T323] __x64_sys_clone+0x23f/0x290 [ 26.219092][ T323] do_syscall_64+0x3d/0xb0 [ 26.223353][ T323] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.229073][ T323] [ 26.231251][ T323] The buggy address belongs to the object at ffff88811c8dc128 [ 26.231251][ T323] which belongs to the cache vm_area_struct of size 232 [ 26.246256][ T323] The buggy address is located 88 bytes inside of [ 26.246256][ T323] 232-byte region [ffff88811c8dc128, ffff88811c8dc210) [ 26.259273][ T323] The buggy address belongs to the page: [ 26.264786][ T323] page:ffffea0004723700 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c8dc [ 26.274807][ T323] flags: 0x4000000000000200(slab|zone=1) [ 26.280455][ T323] raw: 4000000000000200 0000000000000000 dead000000000122 ffff8881001bd980 [ 26.288961][ T323] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 26.297371][ T323] page dumped because: kasan: bad access detected [ 26.304140][ T323] page_owner tracks the page as allocated [ 26.309694][ T323] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 286, ts 20917680052, free_ts 14068592366 [ 26.325492][ T323] post_alloc_hook+0x1a3/0x1b0 [ 26.330090][ T323] prep_new_page+0x1b/0x110 [ 26.334429][ T323] get_page_from_freelist+0x3550/0x35d0 [ 26.339812][ T323] __alloc_pages+0x206/0x5e0 [ 26.344240][ T323] new_slab+0x9a/0x4e0 [ 26.348178][ T323] ___slab_alloc+0x39e/0x830 [ 26.352573][ T323] __slab_alloc+0x4a/0x90 [ 26.356752][ T323] kmem_cache_alloc+0x134/0x200 [ 26.361432][ T323] vm_area_alloc+0x24/0x130 [ 26.365762][ T323] mmap_region+0xb5d/0x1b60 [ 26.370102][ T323] do_mmap+0x776/0xe50 [ 26.374007][ T323] vm_mmap_pgoff+0x1dd/0x450 [ 26.378432][ T323] ksys_mmap_pgoff+0xed/0x1e0 [ 26.382952][ T323] __x64_sys_mmap+0x103/0x120 [ 26.387469][ T323] do_syscall_64+0x3d/0xb0 [ 26.391721][ T323] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.397444][ T323] page last free stack trace: [ 26.401954][ T323] free_unref_page_prepare+0x7c8/0x7d0 [ 26.407249][ T323] free_unref_page+0xe6/0x730 [ 26.416710][ T323] __put_page+0xb0/0xe0 [ 26.420702][ T323] anon_pipe_buf_release+0x187/0x200 [ 26.425822][ T323] pipe_read+0x5a6/0x1040 [ 26.429989][ T323] vfs_read+0xa7e/0xd40 [ 26.433981][ T323] ksys_read+0x199/0x2c0 [ 26.438068][ T323] __x64_sys_read+0x7b/0x90 [ 26.442400][ T323] do_syscall_64+0x3d/0xb0 [ 26.446654][ T323] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.452392][ T323] [ 26.454551][ T323] Memory state around the buggy address: [ 26.460028][ T323] ffff88811c8dc080: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 26.468010][ T323] ffff88811c8dc100: fc fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 [ 26.475909][ T323] >ffff88811c8dc180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 26.483809][ T323] ^ [ 26.487712][ T323] ffff88811c8dc200: 00 00 fc fc fc fc fc fc fc fc 00 00 00 00 00 00 [ 26.495621][ T323] ffff88811c8dc280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 26.503620][ T323] ================================================================== [ 26.511514][ T323] Disabling lock debugging due to kernel taint [ 26.520173][ T287] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 26.532062][ T287] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 26.540306][ T287] CPU: 0 PID: 287 Comm: syz-executor126 Tainted: G B W 5.15.131-syzkaller-00653-gea586874d2f9 #0 [ 26.551767][ T287] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 26.561750][ T287] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 26.567566][ T287] Code: 00 74 08 4c 89 ef e8 7e b8 2b ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 50 b8 2b ff 48 89 d8 48 8b 1b 4c [ 26.587003][ T287] RSP: 0018:ffffc900009478f8 EFLAGS: 00010202 [ 26.592902][ T287] RAX: 0000000000000000 RBX: 0000000000000008 RCX: dffffc0000000000 [ 26.600752][ T287] RDX: ffffffff81a4c130 RSI: ffff88810fa6b7e0 RDI: ffff88811c3c3ac0 [ 26.608523][ T287] RBP: ffffc90000947960 R08: dffffc0000000000 R09: ffff88811c3c3ac8 [ 26.616342][ T287] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 26.624240][ T287] R13: ffff88811c8dc180 R14: 0000000000000001 R15: ffff88811c3c3ac0 [ 26.632049][ T287] FS: 00005555563833c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 26.641686][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.648103][ T287] CR2: 00007f344f329fb8 CR3: 000000011c8a3000 CR4: 00000000003506b0 [ 26.656300][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 26.664103][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 26.671915][ T287] Call Trace: [ 26.675047][ T287] [ 26.677818][ T287] ? __die_body+0x62/0xb0 [ 26.682079][ T287] ? die_addr+0x9f/0xd0 [ 26.686849][ T287] ? exc_general_protection+0x311/0x4b0 [ 26.692313][ T287] ? asm_exc_general_protection+0x27/0x30 [ 26.697868][ T287] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 26.704125][ T287] ? __rb_insert_augmented+0x91/0x610 [ 26.709672][ T287] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 26.715886][ T287] vma_interval_tree_insert_after+0x2be/0x2d0 [ 26.721791][ T287] copy_mm+0xba2/0x13e0 [ 26.725777][ T287] ? copy_signal+0x610/0x610 [ 26.730205][ T287] ? __init_rwsem+0xd6/0x1c0 [ 26.734636][ T287] ? copy_signal+0x4e3/0x610 [ 26.739055][ T287] copy_process+0x12bc/0x3260 [ 26.743568][ T287] ? remove_wait_queue+0x12e/0x140 [ 26.748599][ T287] ? do_wait+0x863/0xa10 [ 26.752681][ T287] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 26.757636][ T287] ? kernel_wait4+0x309/0x3d0 [ 26.762139][ T287] kernel_clone+0x21e/0x9e0 [ 26.766598][ T287] ? create_io_thread+0x1e0/0x1e0 [ 26.771447][ T287] __x64_sys_clone+0x23f/0x290 [ 26.776208][ T287] ? __do_sys_vfork+0x130/0x130 [ 26.780971][ T287] ? switch_fpu_return+0x1ed/0x3d0 [ 26.785931][ T287] ? __kasan_check_read+0x11/0x20 [ 26.790791][ T287] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 26.796371][ T287] do_syscall_64+0x3d/0xb0 [ 26.800622][ T287] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 26.806522][ T287] RIP: 0033:0x7f344f2d17c3 [ 26.810775][ T287] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 26.830307][ T287] RSP: 002b:00007fff906cfb88 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 26.838664][ T287] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f344f2d17c3 [ 26.846668][ T287] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 26.854553][ T287] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007fff907490b0 [ 26.862373][ T287] R10: 0000555556383690 R11: 0000000000000246 R12: 0000000000000001 [ 26.870180][ T287] R13: 00000000000063ec R14: 00007fff906cfcac R15: 00007fff906cfcf0 [ 26.877997][ T287] [ 26.880937][ T287] Modules linked in: [ 26.884849][ T287] ---[ end trace 4897f50c53ba2218 ]--- [ 26.890165][ T287] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 26.895933][ T287] Code: 00 74 08 4c 89 ef e8 7e b8 2b ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 50 b8 2b ff 48 89 d8 48 8b 1b 4c [ 26.915580][ T287] RSP: 0018:ffffc900009478f8 EFLAGS: 00010202 [ 26.932313][ T287] RAX: 0000000000000000 RBX: 0000000000000008 RCX: dffffc0000000000 [ 26.940316][ T287] RDX: ffffffff81a4c130 RSI: ffff88810fa6b7e0 RDI: ffff88811c3c3ac0 [ 26.948113][ T287] RBP: ffffc90000947960 R08: dffffc0000000000 R09: ffff88811c3c3ac8 [ 26.956100][ T287] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 26.963846][ T287] R13: ffff88811c8dc180 R14: 0000000000000001 R15: ffff88811c3c3ac0 [ 26.971722][ T287] FS: 00005555563833c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 26.980550][ T287] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 26.986927][ T287] CR2: 00007f344f329fb8 CR3: 000000011c8a3000 CR4: 00000000003506b0 [ 26.994824][ T287] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 27.003156][ T287] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 27.011010][ T287] Kernel panic - not syncing: Fatal exception [ 27.017008][ T287] Kernel Offset: disabled [ 27.021142][ T287] Rebooting in 86400 seconds..