Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. [ 30.897765][ T30] audit: type=1400 audit(1697522450.473:66): avc: denied { execmem } for pid=297 comm="syz-executor834" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 30.917400][ T30] audit: type=1400 audit(1697522450.493:67): avc: denied { integrity } for pid=297 comm="syz-executor834" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 executing program [ 30.940463][ T30] audit: type=1400 audit(1697522450.513:68): avc: denied { mounton } for pid=298 comm="syz-executor834" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 30.959052][ T300] FAULT_INJECTION: forcing a failure. [ 30.959052][ T300] name failslab, interval 1, probability 0, space 0, times 1 [ 30.964460][ T30] audit: type=1400 audit(1697522450.513:69): avc: denied { mount } for pid=298 comm="syz-executor834" name="/" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=filesystem permissive=1 [ 30.976631][ T300] CPU: 0 PID: 300 Comm: syz-executor834 Not tainted 5.15.132-syzkaller-01173-g754f8cc9b7de #0 [ 30.999016][ T30] audit: type=1400 audit(1697522450.513:70): avc: denied { mounton } for pid=298 comm="syz-executor834" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 31.008835][ T300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 31.008846][ T300] Call Trace: [ 31.008850][ T300] [ 31.008856][ T300] dump_stack_lvl+0x151/0x1b7 [ 31.030425][ T30] audit: type=1400 audit(1697522450.523:71): avc: denied { mounton } for pid=298 comm="syz-executor834" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 31.039996][ T300] ? io_uring_drop_tctx_refs+0x190/0x190 [ 31.040021][ T300] dump_stack+0x15/0x17 [ 31.043370][ T30] audit: type=1400 audit(1697522450.523:72): avc: denied { mount } for pid=298 comm="syz-executor834" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 31.045894][ T300] should_fail+0x3c6/0x510 [ 31.109093][ T300] __should_failslab+0xa4/0xe0 [ 31.113682][ T300] ? anon_vma_clone+0x9a/0x500 [ 31.118277][ T300] should_failslab+0x9/0x20 [ 31.122618][ T300] slab_pre_alloc_hook+0x37/0xd0 [ 31.127391][ T300] ? anon_vma_clone+0x9a/0x500 [ 31.131990][ T300] kmem_cache_alloc+0x44/0x200 [ 31.136590][ T300] anon_vma_clone+0x9a/0x500 [ 31.141019][ T300] anon_vma_fork+0x91/0x4e0 [ 31.145357][ T300] ? anon_vma_name+0x43/0x70 [ 31.149783][ T300] ? vm_area_dup+0x17a/0x230 [ 31.154211][ T300] copy_mm+0xa3a/0x13e0 [ 31.158203][ T300] ? copy_signal+0x610/0x610 [ 31.162628][ T300] ? __init_rwsem+0xd6/0x1c0 [ 31.167055][ T300] ? copy_signal+0x4e3/0x610 [ 31.171482][ T300] copy_process+0x12bc/0x3260 [ 31.175994][ T300] ? proc_fail_nth_write+0x20b/0x290 [ 31.181152][ T300] ? fsnotify_perm+0x6a/0x5d0 [ 31.185630][ T300] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 31.190577][ T300] ? vfs_write+0x9ec/0x1110 [ 31.194915][ T300] kernel_clone+0x21e/0x9e0 [ 31.199253][ T300] ? file_end_write+0x1c0/0x1c0 [ 31.203939][ T300] ? create_io_thread+0x1e0/0x1e0 [ 31.208803][ T300] ? mutex_unlock+0xb2/0x260 [ 31.213238][ T300] ? __mutex_lock_slowpath+0x10/0x10 [ 31.218351][ T300] __x64_sys_clone+0x23f/0x290 [ 31.222952][ T300] ? __do_sys_vfork+0x130/0x130 [ 31.227633][ T300] ? ksys_write+0x260/0x2c0 [ 31.231975][ T300] ? debug_smp_processor_id+0x17/0x20 [ 31.237182][ T300] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 31.243086][ T300] ? exit_to_user_mode_prepare+0x39/0xa0 [ 31.248553][ T300] do_syscall_64+0x3d/0xb0 [ 31.252804][ T300] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.258534][ T300] RIP: 0033:0x7f4c00f148b9 [ 31.262787][ T300] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 31.282227][ T300] RSP: 002b:00007f4c00ed5208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 31.290472][ T300] RAX: ffffffffffffffda RBX: 00007f4c00f9e3c8 RCX: 00007f4c00f148b9 [ 31.299422][ T300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 [ 31.307226][ T300] RBP: 00007f4c00f9e3c0 R08: 0000000000000000 R09: 0000000000003835 [ 31.315132][ T300] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c00f9e3cc [ 31.322938][ T300] R13: 00007f4c00ed5210 R14: 0000000000000002 R15: 00007f4c00f6b01d [ 31.330751][ T300] executing program [ 31.335737][ T30] audit: type=1400 audit(1697522450.913:73): avc: denied { sys_admin } for pid=299 comm="syz-executor834" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 31.353200][ T303] FAULT_INJECTION: forcing a failure. [ 31.353200][ T303] name failslab, interval 1, probability 0, space 0, times 0 [ 31.369093][ T303] CPU: 0 PID: 303 Comm: syz-executor834 Not tainted 5.15.132-syzkaller-01173-g754f8cc9b7de #0 [ 31.379117][ T303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 31.389013][ T303] Call Trace: [ 31.392137][ T303] [ 31.394914][ T303] dump_stack_lvl+0x151/0x1b7 [ 31.399427][ T303] ? io_uring_drop_tctx_refs+0x190/0x190 [ 31.404895][ T303] dump_stack+0x15/0x17 [ 31.408885][ T303] should_fail+0x3c6/0x510 [ 31.413139][ T303] __should_failslab+0xa4/0xe0 [ 31.417741][ T303] ? anon_vma_fork+0xf7/0x4e0 [ 31.422253][ T303] should_failslab+0x9/0x20 [ 31.426590][ T303] slab_pre_alloc_hook+0x37/0xd0 [ 31.431371][ T303] ? anon_vma_fork+0xf7/0x4e0 [ 31.435882][ T303] kmem_cache_alloc+0x44/0x200 [ 31.440482][ T303] anon_vma_fork+0xf7/0x4e0 [ 31.444833][ T303] ? anon_vma_name+0x43/0x70 [ 31.449250][ T303] ? vm_area_dup+0x17a/0x230 [ 31.453679][ T303] copy_mm+0xa3a/0x13e0 [ 31.457752][ T303] ? copy_signal+0x610/0x610 [ 31.462184][ T303] ? __init_rwsem+0xd6/0x1c0 [ 31.466609][ T303] ? copy_signal+0x4e3/0x610 [ 31.471047][ T303] copy_process+0x12bc/0x3260 [ 31.475545][ T303] ? proc_fail_nth_write+0x20b/0x290 [ 31.480663][ T303] ? fsnotify_perm+0x6a/0x5d0 [ 31.485177][ T303] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 31.490124][ T303] ? vfs_write+0x9ec/0x1110 [ 31.494468][ T303] kernel_clone+0x21e/0x9e0 [ 31.498811][ T303] ? file_end_write+0x1c0/0x1c0 [ 31.503489][ T303] ? create_io_thread+0x1e0/0x1e0 [ 31.508449][ T303] ? mutex_unlock+0xb2/0x260 [ 31.512877][ T303] ? __mutex_lock_slowpath+0x10/0x10 [ 31.517994][ T303] __x64_sys_clone+0x23f/0x290 [ 31.522595][ T303] ? __do_sys_vfork+0x130/0x130 [ 31.527281][ T303] ? ksys_write+0x260/0x2c0 [ 31.531621][ T303] ? debug_smp_processor_id+0x17/0x20 [ 31.536827][ T303] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 31.542729][ T303] ? exit_to_user_mode_prepare+0x39/0xa0 [ 31.548195][ T303] do_syscall_64+0x3d/0xb0 [ 31.552449][ T303] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.558176][ T303] RIP: 0033:0x7f4c00f148b9 [ 31.562433][ T303] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 31.581872][ T303] RSP: 002b:00007f4c00ed5208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 31.590117][ T303] RAX: ffffffffffffffda RBX: 00007f4c00f9e3c8 RCX: 00007f4c00f148b9 [ 31.597929][ T303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 [ 31.605840][ T303] RBP: 00007f4c00f9e3c0 R08: 0000000000000000 R09: 0000000000003835 [ 31.613657][ T303] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c00f9e3cc [ 31.621460][ T303] R13: 00007f4c00ed5210 R14: 0000000000000002 R15: 00007f4c00f6b01d [ 31.629275][ T303] [ 31.632964][ T303] ------------[ cut here ]------------ [ 31.638352][ T303] refcount_t: underflow; use-after-free. [ 31.644020][ T303] WARNING: CPU: 1 PID: 303 at lib/refcount.c:28 refcount_warn_saturate+0x158/0x1a0 [ 31.653214][ T303] Modules linked in: [ 31.656860][ T303] CPU: 0 PID: 303 Comm: syz-executor834 Not tainted 5.15.132-syzkaller-01173-g754f8cc9b7de #0 [ 31.666990][ T303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 31.676827][ T303] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 31.682785][ T303] Code: 04 01 48 c7 c7 20 b1 82 85 e8 74 8f dd fe 0f 0b eb 8b e8 eb 11 0c ff c6 05 2f 68 9f 04 01 48 c7 c7 80 b1 82 85 e8 58 8f dd fe <0f> 0b e9 6c ff ff ff e8 cc 11 0c ff c6 05 11 68 9f 04 01 48 c7 c7 [ 31.702293][ T303] RSP: 0018:ffffc900009e7968 EFLAGS: 00010246 [ 31.708581][ T303] RAX: 3d7caca51666a500 RBX: 0000000000000003 RCX: ffff88811db913c0 [ 31.716382][ T303] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 31.724315][ T303] RBP: ffffc900009e7978 R08: ffffffff81573de5 R09: ffffed103ee24e93 [ 31.732111][ T303] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11023bafef2 [ 31.740055][ T303] R13: ffff88811dd7f790 R14: 0000000000000003 R15: ffff88811d3cabe9 [ 31.747865][ T303] FS: 00007f4c00ed56c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 31.756606][ T303] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 31.763065][ T303] CR2: 0000555555e42370 CR3: 000000011dd6c000 CR4: 00000000003506b0 [ 31.770862][ T303] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 31.778685][ T303] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 31.786468][ T303] Call Trace: [ 31.789631][ T303] [ 31.792376][ T303] ? show_regs+0x58/0x60 [ 31.796437][ T303] ? __warn+0x160/0x2f0 [ 31.800469][ T303] ? refcount_warn_saturate+0x158/0x1a0 [ 31.805817][ T303] ? report_bug+0x3d9/0x5b0 [ 31.810195][ T303] ? refcount_warn_saturate+0x158/0x1a0 [ 31.815533][ T303] ? handle_bug+0x41/0x70 [ 31.819729][ T303] ? exc_invalid_op+0x1b/0x50 [ 31.824214][ T303] ? asm_exc_invalid_op+0x1b/0x20 [ 31.829113][ T303] ? __wake_up_klogd+0xd5/0x110 [ 31.833759][ T303] ? refcount_warn_saturate+0x158/0x1a0 [ 31.839190][ T303] ? refcount_warn_saturate+0x158/0x1a0 [ 31.844525][ T303] vm_area_free_no_check+0x123/0x130 [ 31.849669][ T303] copy_mm+0xefb/0x13e0 [ 31.853655][ T303] ? copy_signal+0x610/0x610 [ 31.858116][ T303] ? __init_rwsem+0xd6/0x1c0 [ 31.862488][ T303] ? copy_signal+0x4e3/0x610 [ 31.866940][ T303] copy_process+0x12bc/0x3260 [ 31.871441][ T303] ? proc_fail_nth_write+0x20b/0x290 [ 31.876546][ T303] ? fsnotify_perm+0x6a/0x5d0 [ 31.881108][ T303] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 31.886012][ T303] ? vfs_write+0x9ec/0x1110 [ 31.890378][ T303] kernel_clone+0x21e/0x9e0 [ 31.894697][ T303] ? file_end_write+0x1c0/0x1c0 [ 31.899450][ T303] ? create_io_thread+0x1e0/0x1e0 [ 31.904250][ T303] ? mutex_unlock+0xb2/0x260 [ 31.908686][ T303] ? __mutex_lock_slowpath+0x10/0x10 [ 31.913786][ T303] __x64_sys_clone+0x23f/0x290 [ 31.918427][ T303] ? __do_sys_vfork+0x130/0x130 [ 31.923067][ T303] ? ksys_write+0x260/0x2c0 [ 31.927450][ T303] ? debug_smp_processor_id+0x17/0x20 [ 31.932624][ T303] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 31.938542][ T303] ? exit_to_user_mode_prepare+0x39/0xa0 [ 31.943985][ T303] do_syscall_64+0x3d/0xb0 [ 31.948278][ T303] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 31.953966][ T303] RIP: 0033:0x7f4c00f148b9 [ 31.958242][ T303] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 31.977690][ T303] RSP: 002b:00007f4c00ed5208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 31.985906][ T303] RAX: ffffffffffffffda RBX: 00007f4c00f9e3c8 RCX: 00007f4c00f148b9 [ 31.993759][ T303] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 executing program [ 32.001563][ T303] RBP: 00007f4c00f9e3c0 R08: 0000000000000000 R09: 0000000000003835 [ 32.009367][ T303] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c00f9e3cc [ 32.017207][ T303] R13: 00007f4c00ed5210 R14: 0000000000000002 R15: 00007f4c00f6b01d [ 32.024978][ T303] [ 32.027845][ T303] ---[ end trace 956985bad659dee2 ]--- [ 32.036621][ T306] FAULT_INJECTION: forcing a failure. [ 32.036621][ T306] name failslab, interval 1, probability 0, space 0, times 0 [ 32.049090][ T306] CPU: 1 PID: 306 Comm: syz-executor834 Tainted: G W 5.15.132-syzkaller-01173-g754f8cc9b7de #0 [ 32.060463][ T306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 32.070359][ T306] Call Trace: [ 32.073569][ T306] [ 32.076355][ T306] dump_stack_lvl+0x151/0x1b7 [ 32.080859][ T306] ? io_uring_drop_tctx_refs+0x190/0x190 [ 32.086415][ T306] dump_stack+0x15/0x17 [ 32.090410][ T306] should_fail+0x3c6/0x510 [ 32.094659][ T306] __should_failslab+0xa4/0xe0 [ 32.099344][ T306] ? anon_vma_fork+0xf7/0x4e0 [ 32.103864][ T306] should_failslab+0x9/0x20 [ 32.108199][ T306] slab_pre_alloc_hook+0x37/0xd0 [ 32.112985][ T306] ? anon_vma_fork+0xf7/0x4e0 [ 32.117483][ T306] kmem_cache_alloc+0x44/0x200 [ 32.122086][ T306] anon_vma_fork+0xf7/0x4e0 [ 32.126426][ T306] ? anon_vma_name+0x4c/0x70 [ 32.130850][ T306] ? vm_area_dup+0x17a/0x230 [ 32.135275][ T306] copy_mm+0xa3a/0x13e0 [ 32.139269][ T306] ? copy_signal+0x610/0x610 [ 32.144564][ T306] ? __init_rwsem+0xd6/0x1c0 [ 32.149080][ T306] ? copy_signal+0x4e3/0x610 [ 32.153504][ T306] copy_process+0x12bc/0x3260 [ 32.158016][ T306] ? proc_fail_nth_write+0x20b/0x290 [ 32.163136][ T306] ? fsnotify_perm+0x6a/0x5d0 [ 32.167649][ T306] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 32.173827][ T306] ? vfs_write+0x9ec/0x1110 [ 32.178166][ T306] kernel_clone+0x21e/0x9e0 [ 32.182498][ T306] ? file_end_write+0x1c0/0x1c0 [ 32.187209][ T306] ? create_io_thread+0x1e0/0x1e0 [ 32.192044][ T306] ? mutex_unlock+0xb2/0x260 [ 32.196472][ T306] ? __mutex_lock_slowpath+0x10/0x10 [ 32.201595][ T306] __x64_sys_clone+0x23f/0x290 [ 32.206191][ T306] ? __do_sys_vfork+0x130/0x130 [ 32.210879][ T306] ? ksys_write+0x260/0x2c0 [ 32.215217][ T306] ? debug_smp_processor_id+0x17/0x20 [ 32.220426][ T306] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 32.226334][ T306] ? exit_to_user_mode_prepare+0x39/0xa0 [ 32.231801][ T306] do_syscall_64+0x3d/0xb0 [ 32.236047][ T306] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.241778][ T306] RIP: 0033:0x7f4c00f148b9 [ 32.246031][ T306] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 32.265471][ T306] RSP: 002b:00007f4c00ed5208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 32.273718][ T306] RAX: ffffffffffffffda RBX: 00007f4c00f9e3c8 RCX: 00007f4c00f148b9 [ 32.281525][ T306] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 [ 32.289339][ T306] RBP: 00007f4c00f9e3c0 R08: 0000000000000000 R09: 0000000000003835 executing program [ 32.297150][ T306] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c00f9e3cc [ 32.304960][ T306] R13: 00007f4c00ed5210 R14: 0000000000000002 R15: 00007f4c00f6b01d [ 32.312774][ T306] [ 32.318477][ T308] FAULT_INJECTION: forcing a failure. [ 32.318477][ T308] name failslab, interval 1, probability 0, space 0, times 0 [ 32.331116][ T308] CPU: 0 PID: 308 Comm: syz-executor834 Tainted: G W 5.15.132-syzkaller-01173-g754f8cc9b7de #0 [ 32.342560][ T308] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 32.352546][ T308] Call Trace: [ 32.355660][ T308] [ 32.358440][ T308] dump_stack_lvl+0x151/0x1b7 [ 32.362961][ T308] ? io_uring_drop_tctx_refs+0x190/0x190 [ 32.368423][ T308] ? avc_denied+0x1b0/0x1b0 [ 32.372759][ T308] dump_stack+0x15/0x17 [ 32.376753][ T308] should_fail+0x3c6/0x510 [ 32.381006][ T308] __should_failslab+0xa4/0xe0 [ 32.385605][ T308] ? vm_area_dup+0x26/0x230 [ 32.389945][ T308] should_failslab+0x9/0x20 [ 32.394284][ T308] slab_pre_alloc_hook+0x37/0xd0 [ 32.399057][ T308] ? vm_area_dup+0x26/0x230 [ 32.403394][ T308] kmem_cache_alloc+0x44/0x200 [ 32.407996][ T308] vm_area_dup+0x26/0x230 [ 32.412160][ T308] copy_mm+0x9a1/0x13e0 [ 32.416156][ T308] ? copy_signal+0x610/0x610 [ 32.420580][ T308] ? __init_rwsem+0xd6/0x1c0 [ 32.425006][ T308] ? copy_signal+0x4e3/0x610 [ 32.429434][ T308] copy_process+0x12bc/0x3260 [ 32.433946][ T308] ? proc_fail_nth_write+0x20b/0x290 [ 32.439072][ T308] ? fsnotify_perm+0x6a/0x5d0 [ 32.443580][ T308] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 32.448529][ T308] ? vfs_write+0x9ec/0x1110 [ 32.452868][ T308] kernel_clone+0x21e/0x9e0 [ 32.457210][ T308] ? file_end_write+0x1c0/0x1c0 [ 32.461894][ T308] ? create_io_thread+0x1e0/0x1e0 [ 32.466767][ T308] ? mutex_unlock+0xb2/0x260 [ 32.471180][ T308] ? __mutex_lock_slowpath+0x10/0x10 [ 32.476322][ T308] __x64_sys_clone+0x23f/0x290 [ 32.480901][ T308] ? __do_sys_vfork+0x130/0x130 [ 32.485587][ T308] ? ksys_write+0x260/0x2c0 [ 32.489928][ T308] ? debug_smp_processor_id+0x17/0x20 [ 32.495134][ T308] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 32.501039][ T308] ? exit_to_user_mode_prepare+0x39/0xa0 [ 32.506503][ T308] do_syscall_64+0x3d/0xb0 [ 32.510762][ T308] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.516484][ T308] RIP: 0033:0x7f4c00f148b9 [ 32.520748][ T308] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 32.540181][ T308] RSP: 002b:00007f4c00ed5208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 executing program [ 32.548424][ T308] RAX: ffffffffffffffda RBX: 00007f4c00f9e3c8 RCX: 00007f4c00f148b9 [ 32.556245][ T308] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 [ 32.564656][ T308] RBP: 00007f4c00f9e3c0 R08: 0000000000000000 R09: 0000000000003835 [ 32.572464][ T308] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c00f9e3cc [ 32.580282][ T308] R13: 00007f4c00ed5210 R14: 0000000000000002 R15: 00007f4c00f6b01d [ 32.588091][ T308] [ 32.594562][ T310] FAULT_INJECTION: forcing a failure. [ 32.594562][ T310] name failslab, interval 1, probability 0, space 0, times 0 [ 32.607151][ T310] CPU: 1 PID: 310 Comm: syz-executor834 Tainted: G W 5.15.132-syzkaller-01173-g754f8cc9b7de #0 [ 32.618590][ T310] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 32.628481][ T310] Call Trace: [ 32.631614][ T310] [ 32.634383][ T310] dump_stack_lvl+0x151/0x1b7 [ 32.638897][ T310] ? io_uring_drop_tctx_refs+0x190/0x190 [ 32.644363][ T310] dump_stack+0x15/0x17 [ 32.648355][ T310] should_fail+0x3c6/0x510 [ 32.652612][ T310] __should_failslab+0xa4/0xe0 [ 32.657216][ T310] ? anon_vma_fork+0xf7/0x4e0 [ 32.661720][ T310] should_failslab+0x9/0x20 [ 32.666062][ T310] slab_pre_alloc_hook+0x37/0xd0 [ 32.670836][ T310] ? anon_vma_fork+0xf7/0x4e0 [ 32.675352][ T310] kmem_cache_alloc+0x44/0x200 [ 32.679947][ T310] anon_vma_fork+0xf7/0x4e0 [ 32.684289][ T310] ? anon_vma_name+0x43/0x70 [ 32.688714][ T310] ? vm_area_dup+0x17a/0x230 [ 32.693140][ T310] copy_mm+0xa3a/0x13e0 [ 32.697135][ T310] ? copy_signal+0x610/0x610 [ 32.701559][ T310] ? __init_rwsem+0xd6/0x1c0 [ 32.705988][ T310] ? copy_signal+0x4e3/0x610 [ 32.710412][ T310] copy_process+0x12bc/0x3260 [ 32.714925][ T310] ? proc_fail_nth_write+0x20b/0x290 [ 32.720046][ T310] ? fsnotify_perm+0x6a/0x5d0 [ 32.724566][ T310] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 32.729506][ T310] ? vfs_write+0x9ec/0x1110 [ 32.733844][ T310] kernel_clone+0x21e/0x9e0 [ 32.738185][ T310] ? file_end_write+0x1c0/0x1c0 [ 32.743029][ T310] ? create_io_thread+0x1e0/0x1e0 [ 32.747887][ T310] ? mutex_unlock+0xb2/0x260 [ 32.752312][ T310] ? __mutex_lock_slowpath+0x10/0x10 [ 32.757432][ T310] __x64_sys_clone+0x23f/0x290 [ 32.762035][ T310] ? __do_sys_vfork+0x130/0x130 [ 32.766720][ T310] ? ksys_write+0x260/0x2c0 [ 32.771063][ T310] ? debug_smp_processor_id+0x17/0x20 [ 32.776265][ T310] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 32.782183][ T310] ? exit_to_user_mode_prepare+0x39/0xa0 [ 32.787635][ T310] do_syscall_64+0x3d/0xb0 [ 32.791904][ T310] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 32.797615][ T310] RIP: 0033:0x7f4c00f148b9 [ 32.801870][ T310] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 32.821310][ T310] RSP: 002b:00007f4c00ed5208 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 32.829555][ T310] RAX: ffffffffffffffda RBX: 00007f4c00f9e3c8 RCX: 00007f4c00f148b9 [ 32.837365][ T310] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 [ 32.845178][ T310] RBP: 00007f4c00f9e3c0 R08: 0000000000000000 R09: 0000000000003835 [ 32.852989][ T310] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4c00f9e3cc [ 32.860894][ T310] R13: 00007f4c00ed5210 R14: 0000000000000002 R15: 00007f4c00f6b01d [ 32.868707][ T310] [ 32.874167][ T298] BUG: unable to handle page fault for address: ffffed1800000009 [ 32.881771][ T298] #PF: supervisor read access in kernel mode [ 32.887585][ T298] #PF: error_code(0x0000) - not-present page [ 32.893401][ T298] PGD 23fff2067 P4D 23fff2067 PUD 0 [ 32.898521][ T298] Oops: 0000 [#1] PREEMPT SMP KASAN [ 32.903556][ T298] CPU: 1 PID: 298 Comm: syz-executor834 Tainted: G W 5.15.132-syzkaller-01173-g754f8cc9b7de #0 [ 32.915011][ T298] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/06/2023 [ 32.924907][ T298] RIP: 0010:__rb_insert_augmented+0x36b/0x610 [ 32.930808][ T298] Code: 49 89 5d 00 48 83 e3 fc 43 80 3c 26 00 74 08 4c 89 ff e8 08 ae 2b ff 4d 89 2f 48 85 db 74 2a 4c 8d 73 10 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 46 ad 2b ff 48 8d 43 08 4c 39 7b [ 32.950253][ T298] RSP: 0018:ffffc900009878f8 EFLAGS: 00010a06 [ 32.956154][ T298] RAX: 1ffff11800000009 RBX: ffff88c000000038 RCX: ffff888117e293c0 [ 32.963970][ T298] RDX: 0000000000000000 RSI: ffff88811d279ac0 RDI: ffff88811d91f410 [ 32.971777][ T298] RBP: ffffc90000987960 R08: dffffc0000000000 R09: ffff88811d279ac8 [ 32.979583][ T298] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 32.987399][ T298] R13: ffff88811d279ac0 R14: ffff88c000000048 R15: ffff88811d3cabe8 [ 32.995206][ T298] FS: 0000555555e423c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.003975][ T298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.010396][ T298] CR2: ffffed1800000009 CR3: 000000011d91e000 CR4: 00000000003506a0 [ 33.018213][ T298] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.026020][ T298] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.033829][ T298] Call Trace: [ 33.036961][ T298] [ 33.039732][ T298] ? __die_body+0x62/0xb0 [ 33.043898][ T298] ? __die+0x7e/0x90 [ 33.047628][ T298] ? page_fault_oops+0x7f9/0xa90 [ 33.052401][ T298] ? __rb_insert_augmented+0x36b/0x610 [ 33.057698][ T298] ? kernelmode_fixup_or_oops+0x270/0x270 [ 33.063251][ T298] ? is_prefetch+0x47a/0x6d0 [ 33.067678][ T298] ? search_bpf_extables+0x26d/0x2c0 [ 33.072797][ T298] ? __rb_insert_augmented+0x36b/0x610 [ 33.078091][ T298] ? __rb_insert_augmented+0x36b/0x610 [ 33.083390][ T298] ? __rb_insert_augmented+0x36b/0x610 [ 33.088819][ T298] ? fixup_exception+0xbb/0x13c0 [ 33.093652][ T298] ? stack_trace_save+0x113/0x1c0 [ 33.098514][ T298] ? kernelmode_fixup_or_oops+0x21b/0x270 [ 33.104069][ T298] ? __bad_area_nosemaphore+0xcf/0x490 [ 33.109365][ T298] ? __kasan_slab_alloc+0xc3/0xe0 [ 33.114230][ T298] ? bad_area_nosemaphore+0x2d/0x40 [ 33.119258][ T298] ? do_kern_addr_fault+0x69/0x80 [ 33.124117][ T298] ? exc_page_fault+0x4eb/0x830 [ 33.128807][ T298] ? asm_exc_page_fault+0x27/0x30 [ 33.133667][ T298] ? __rb_insert_augmented+0x36b/0x610 [ 33.138959][ T298] ? __rb_insert_augmented+0x28f/0x610 [ 33.144253][ T298] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 33.150504][ T298] vma_interval_tree_insert_after+0x2be/0x2d0 [ 33.156404][ T298] copy_mm+0xba2/0x13e0 [ 33.160402][ T298] ? copy_signal+0x610/0x610 [ 33.164824][ T298] ? __init_rwsem+0xd6/0x1c0 [ 33.169249][ T298] ? copy_signal+0x4e3/0x610 [ 33.173674][ T298] copy_process+0x12bc/0x3260 [ 33.178189][ T298] ? remove_wait_queue+0x12e/0x140 [ 33.183136][ T298] ? do_wait+0x863/0xa10 [ 33.187216][ T298] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 33.192161][ T298] ? kernel_wait4+0x309/0x3d0 [ 33.196675][ T298] kernel_clone+0x21e/0x9e0 [ 33.201018][ T298] ? create_io_thread+0x1e0/0x1e0 [ 33.205876][ T298] __x64_sys_clone+0x23f/0x290 [ 33.210475][ T298] ? __do_sys_vfork+0x130/0x130 [ 33.215161][ T298] ? switch_fpu_return+0x1ed/0x3d0 [ 33.220108][ T298] ? __kasan_check_read+0x11/0x20 [ 33.224972][ T298] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 33.230438][ T298] do_syscall_64+0x3d/0xb0 [ 33.234689][ T298] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.240418][ T298] RIP: 0033:0x7f4c00f127c3 [ 33.244678][ T298] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 33.264112][ T298] RSP: 002b:00007ffc95a5ba38 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 33.272357][ T298] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4c00f127c3 [ 33.280172][ T298] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 33.288002][ T298] RBP: 0000000000000000 R08: 0000000000000000 R09: 00007ffc95a630b0 [ 33.295793][ T298] R10: 0000555555e42690 R11: 0000000000000246 R12: 0000000000000001 [ 33.303601][ T298] R13: 0000000000007f40 R14: 00007ffc95a5bb5c R15: 00007ffc95a5bba0 [ 33.311417][ T298] [ 33.314275][ T298] Modules linked in: [ 33.318012][ T298] CR2: ffffed1800000009 [ 33.322006][ T298] ---[ end trace 956985bad659dee3 ]--- [ 33.327295][ T298] RIP: 0010:__rb_insert_augmented+0x36b/0x610 [ 33.333199][ T298] Code: 49 89 5d 00 48 83 e3 fc 43 80 3c 26 00 74 08 4c 89 ff e8 08 ae 2b ff 4d 89 2f 48 85 db 74 2a 4c 8d 73 10 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 46 ad 2b ff 48 8d 43 08 4c 39 7b [ 33.352643][ T298] RSP: 0018:ffffc900009878f8 EFLAGS: 00010a06 [ 33.358539][ T298] RAX: 1ffff11800000009 RBX: ffff88c000000038 RCX: ffff888117e293c0 [ 33.366352][ T298] RDX: 0000000000000000 RSI: ffff88811d279ac0 RDI: ffff88811d91f410 [ 33.374165][ T298] RBP: ffffc90000987960 R08: dffffc0000000000 R09: ffff88811d279ac8 [ 33.381974][ T298] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 33.389786][ T298] R13: ffff88811d279ac0 R14: ffff88c000000048 R15: ffff88811d3cabe8 [ 33.397685][ T298] FS: 0000555555e423c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 33.406450][ T298] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 33.412873][ T298] CR2: ffffed1800000009 CR3: 000000011d91e000 CR4: 00000000003506a0 [ 33.420860][ T298] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 33.428670][ T298] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 33.436482][ T298] Kernel panic - not syncing: Fatal exception [ 33.442641][ T298] Kernel Offset: disabled [ 33.446776][ T298] Rebooting in 86400 seconds..