[ 3.589579][ T99] udevd[99]: starting version 3.2.11 [ 3.657189][ T100] udevd[100]: starting eudev-3.2.11 [ 4.392669][ T125] iptables-restor (125) used greatest stack depth: 23264 bytes left [ 7.236785][ T103] udevd (103) used greatest stack depth: 22608 bytes left [ 12.040104][ T30] kauditd_printk_skb: 50 callbacks suppressed [ 12.040113][ T30] audit: type=1400 audit(1687468387.507:61): avc: denied { transition } for pid=224 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.044997][ T30] audit: type=1400 audit(1687468387.517:62): avc: denied { noatsecure } for pid=224 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.049555][ T30] audit: type=1400 audit(1687468387.517:63): avc: denied { write } for pid=224 comm="sh" path="pipe:[12364]" dev="pipefs" ino=12364 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 12.056167][ T30] audit: type=1400 audit(1687468387.517:64): avc: denied { rlimitinh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 12.059173][ T30] audit: type=1400 audit(1687468387.517:65): avc: denied { siginh } for pid=224 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.186' (ECDSA) to the list of known hosts. executing program executing program [ 19.419861][ T30] audit: type=1400 audit(1687468394.887:66): avc: denied { execmem } for pid=285 comm="syz-executor188" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 19.422872][ T30] audit: type=1400 audit(1687468394.897:67): avc: denied { integrity } for pid=285 comm="syz-executor188" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 19.427400][ T295] FAULT_INJECTION: forcing a failure. [ 19.427400][ T295] name failslab, interval 1, probability 0, space 0, times 1 [ 19.430040][ T295] CPU: 0 PID: 295 Comm: syz-executor188 Not tainted 5.15.110-syzkaller-00538-g565c3abfa129 #0 [ 19.431620][ T295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 19.432978][ T295] Call Trace: [ 19.433432][ T295] [ 19.433859][ T295] dump_stack_lvl+0x151/0x1b7 [ 19.434563][ T295] ? io_uring_drop_tctx_refs+0x190/0x190 [ 19.435316][ T295] dump_stack+0x15/0x17 [ 19.435890][ T295] should_fail+0x3c6/0x510 [ 19.436511][ T295] __should_failslab+0xa4/0xe0 [ 19.437190][ T295] ? anon_vma_clone+0x9a/0x500 [ 19.437827][ T295] should_failslab+0x9/0x20 [ 19.438393][ T295] slab_pre_alloc_hook+0x37/0xd0 [ 19.439073][ T295] ? anon_vma_clone+0x9a/0x500 [ 19.439763][ T295] kmem_cache_alloc+0x44/0x200 [ 19.440462][ T295] anon_vma_clone+0x9a/0x500 [ 19.444847][ T295] anon_vma_fork+0x91/0x4e0 [ 19.449180][ T295] ? anon_vma_name+0x43/0x70 [ 19.453611][ T295] ? vm_area_dup+0x17a/0x230 [ 19.458033][ T295] dup_mm+0x8c5/0x12c0 [ 19.461939][ T295] ? copy_init_mm+0x20/0x20 [ 19.466280][ T295] copy_mm+0x107/0x1b0 [ 19.470186][ T295] copy_process+0x12bc/0x3260 [ 19.474701][ T295] ? proc_fail_nth_write+0x20b/0x290 [ 19.479816][ T295] ? fsnotify_perm+0x6a/0x5d0 [ 19.484350][ T295] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 19.489276][ T295] ? vfs_write+0x9ec/0x1110 [ 19.493619][ T295] kernel_clone+0x21e/0x9e0 [ 19.497967][ T295] ? file_end_write+0x1c0/0x1c0 [ 19.502642][ T295] ? create_io_thread+0x1e0/0x1e0 [ 19.507502][ T295] ? mutex_unlock+0xb2/0x1b0 [ 19.511931][ T295] ? __mutex_lock_slowpath+0x10/0x10 [ 19.517049][ T295] __x64_sys_clone+0x23f/0x290 [ 19.521652][ T295] ? __do_sys_vfork+0x130/0x130 [ 19.526339][ T295] ? ksys_write+0x260/0x2c0 [ 19.530692][ T295] ? debug_smp_processor_id+0x17/0x20 [ 19.535885][ T295] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 19.541786][ T295] ? exit_to_user_mode_prepare+0x39/0xa0 [ 19.547255][ T295] do_syscall_64+0x3d/0xb0 [ 19.551506][ T295] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 19.557236][ T295] RIP: 0033:0x7f6bfbfe9bf9 [ 19.561488][ T295] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 19.580928][ T295] RSP: 002b:00007f6bfbf9b2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 19.590213][ T295] RAX: ffffffffffffffda RBX: 00007f6bfc0724a8 RCX: 00007f6bfbfe9bf9 [ 19.598024][ T295] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 [ 19.605836][ T295] RBP: 00007f6bfc0724a0 R08: 0000000000000000 R09: 0000000000003636 executing program executing program executing program executing program [ 19.613645][ T295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 19.621459][ T295] R13: 00007f6bfbf9b300 R14: 00007f6bfbf9b400 R15: 0000000000022000 [ 19.629274][ T295] [ 19.634257][ T30] audit: type=1400 audit(1687468395.107:68): avc: denied { sys_admin } for pid=293 comm="syz-executor188" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 19.653144][ T300] FAULT_INJECTION: forcing a failure. [ 19.653144][ T300] name failslab, interval 1, probability 0, space 0, times 0 [ 19.667688][ T300] CPU: 0 PID: 300 Comm: syz-executor188 Not tainted 5.15.110-syzkaller-00538-g565c3abfa129 #0 [ 19.677633][ T300] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 19.687528][ T300] Call Trace: [ 19.690650][ T300] [ 19.693434][ T300] dump_stack_lvl+0x151/0x1b7 [ 19.697941][ T300] ? io_uring_drop_tctx_refs+0x190/0x190 [ 19.703410][ T300] dump_stack+0x15/0x17 [ 19.707402][ T300] should_fail+0x3c6/0x510 [ 19.711656][ T300] __should_failslab+0xa4/0xe0 [ 19.716254][ T300] ? anon_vma_clone+0x9a/0x500 [ 19.720853][ T300] should_failslab+0x9/0x20 [ 19.725202][ T300] slab_pre_alloc_hook+0x37/0xd0 [ 19.729968][ T300] ? anon_vma_clone+0x9a/0x500 [ 19.734568][ T300] kmem_cache_alloc+0x44/0x200 [ 19.739166][ T300] anon_vma_clone+0x9a/0x500 [ 19.743597][ T300] anon_vma_fork+0x91/0x4e0 [ 19.747934][ T300] ? anon_vma_name+0x43/0x70 [ 19.752362][ T300] ? vm_area_dup+0x17a/0x230 [ 19.756790][ T300] dup_mm+0x8c5/0x12c0 [ 19.760694][ T300] ? copy_init_mm+0x20/0x20 [ 19.765031][ T300] copy_mm+0x107/0x1b0 [ 19.768936][ T300] copy_process+0x12bc/0x3260 [ 19.773452][ T300] ? proc_fail_nth_write+0x20b/0x290 [ 19.778574][ T300] ? fsnotify_perm+0x6a/0x5d0 [ 19.783084][ T300] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 19.788029][ T300] ? vfs_write+0x9ec/0x1110 [ 19.792369][ T300] kernel_clone+0x21e/0x9e0 [ 19.796710][ T300] ? file_end_write+0x1c0/0x1c0 [ 19.801396][ T300] ? create_io_thread+0x1e0/0x1e0 [ 19.806257][ T300] ? mutex_unlock+0xb2/0x1b0 [ 19.810681][ T300] ? __mutex_lock_slowpath+0x10/0x10 [ 19.815808][ T300] __x64_sys_clone+0x23f/0x290 [ 19.820407][ T300] ? __do_sys_vfork+0x130/0x130 [ 19.825088][ T300] ? ksys_write+0x260/0x2c0 [ 19.829441][ T300] ? debug_smp_processor_id+0x17/0x20 [ 19.834638][ T300] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 19.840539][ T300] ? exit_to_user_mode_prepare+0x39/0xa0 [ 19.846007][ T300] do_syscall_64+0x3d/0xb0 [ 19.850261][ T300] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 19.855991][ T300] RIP: 0033:0x7f6bfbfe9bf9 [ 19.860241][ T300] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 19.879681][ T300] RSP: 002b:00007f6bfbf9b2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 19.887926][ T300] RAX: ffffffffffffffda RBX: 00007f6bfc0724a8 RCX: 00007f6bfbfe9bf9 [ 19.895828][ T300] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 [ 19.903635][ T300] RBP: 00007f6bfc0724a0 R08: 0000000000000000 R09: 0000000000003636 [ 19.911448][ T300] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 executing program [ 19.919257][ T300] R13: 00007f6bfbf9b300 R14: 00007f6bfbf9b400 R15: 0000000000022000 [ 19.927072][ T300] [ 19.930942][ T294] FAULT_INJECTION: forcing a failure. [ 19.930942][ T294] name failslab, interval 1, probability 0, space 0, times 0 [ 19.943471][ T301] FAULT_INJECTION: forcing a failure. [ 19.943471][ T301] name failslab, interval 1, probability 0, space 0, times 0 [ 19.946990][ T294] CPU: 0 PID: 294 Comm: syz-executor188 Not tainted 5.15.110-syzkaller-00538-g565c3abfa129 #0 [ 19.955987][ T302] FAULT_INJECTION: forcing a failure. [ 19.955987][ T302] name failslab, interval 1, probability 0, space 0, times 0 [ 19.966010][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 19.966020][ T294] Call Trace: [ 19.966025][ T294] [ 19.966031][ T294] dump_stack_lvl+0x151/0x1b7 [ 19.979379][ T304] FAULT_INJECTION: forcing a failure. [ 19.979379][ T304] name failslab, interval 1, probability 0, space 0, times 0 [ 19.988923][ T294] ? io_uring_drop_tctx_refs+0x190/0x190 [ 19.988943][ T294] ? rwsem_wake+0x12e/0x220 [ 20.021563][ T294] dump_stack+0x15/0x17 [ 20.025549][ T294] should_fail+0x3c6/0x510 [ 20.029806][ T294] __should_failslab+0xa4/0xe0 [ 20.034403][ T294] ? anon_vma_fork+0xf7/0x4e0 [ 20.038916][ T294] should_failslab+0x9/0x20 [ 20.043259][ T294] slab_pre_alloc_hook+0x37/0xd0 [ 20.048030][ T294] ? anon_vma_fork+0xf7/0x4e0 [ 20.052542][ T294] kmem_cache_alloc+0x44/0x200 [ 20.057142][ T294] anon_vma_fork+0xf7/0x4e0 [ 20.061483][ T294] ? anon_vma_name+0x43/0x70 [ 20.065907][ T294] ? vm_area_dup+0x17a/0x230 [ 20.070334][ T294] dup_mm+0x8c5/0x12c0 [ 20.074242][ T294] ? copy_init_mm+0x20/0x20 [ 20.078581][ T294] copy_mm+0x107/0x1b0 [ 20.082483][ T294] copy_process+0x12bc/0x3260 [ 20.087131][ T294] ? proc_fail_nth_write+0x20b/0x290 [ 20.092250][ T294] ? fsnotify_perm+0x6a/0x5d0 [ 20.096757][ T294] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 20.101704][ T294] ? vfs_write+0x9ec/0x1110 [ 20.106048][ T294] kernel_clone+0x21e/0x9e0 [ 20.110385][ T294] ? file_end_write+0x1c0/0x1c0 [ 20.115072][ T294] ? create_io_thread+0x1e0/0x1e0 [ 20.119929][ T294] ? mutex_unlock+0xb2/0x1b0 [ 20.124361][ T294] ? __mutex_lock_slowpath+0x10/0x10 [ 20.129565][ T294] __x64_sys_clone+0x23f/0x290 [ 20.134250][ T294] ? __do_sys_vfork+0x130/0x130 [ 20.139023][ T294] ? ksys_write+0x260/0x2c0 [ 20.143361][ T294] ? debug_smp_processor_id+0x17/0x20 [ 20.148575][ T294] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 20.154474][ T294] ? exit_to_user_mode_prepare+0x39/0xa0 [ 20.159943][ T294] do_syscall_64+0x3d/0xb0 [ 20.164193][ T294] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 20.169921][ T294] RIP: 0033:0x7f6bfbfe9bf9 [ 20.174181][ T294] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 20.194133][ T294] RSP: 002b:00007f6bfbf9b2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 20.202380][ T294] RAX: ffffffffffffffda RBX: 00007f6bfc0724a8 RCX: 00007f6bfbfe9bf9 [ 20.210191][ T294] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 executing program [ 20.218003][ T294] RBP: 00007f6bfc0724a0 R08: 0000000000000000 R09: 0000000000003636 [ 20.225815][ T294] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 20.233624][ T294] R13: 00007f6bfbf9b300 R14: 00007f6bfbf9b400 R15: 0000000000022000 [ 20.241436][ T294] [ 20.244306][ T302] CPU: 1 PID: 302 Comm: syz-executor188 Not tainted 5.15.110-syzkaller-00538-g565c3abfa129 #0 [ 20.254372][ T302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 20.264264][ T302] Call Trace: [ 20.267387][ T302] [ 20.270166][ T302] dump_stack_lvl+0x151/0x1b7 [ 20.274677][ T302] ? io_uring_drop_tctx_refs+0x190/0x190 [ 20.280145][ T302] dump_stack+0x15/0x17 [ 20.284136][ T302] should_fail+0x3c6/0x510 [ 20.288389][ T302] __should_failslab+0xa4/0xe0 [ 20.292989][ T302] ? anon_vma_fork+0x1df/0x4e0 [ 20.297589][ T302] should_failslab+0x9/0x20 [ 20.301934][ T302] slab_pre_alloc_hook+0x37/0xd0 [ 20.306705][ T302] ? anon_vma_fork+0x1df/0x4e0 [ 20.311302][ T302] kmem_cache_alloc+0x44/0x200 [ 20.315900][ T302] anon_vma_fork+0x1df/0x4e0 [ 20.320331][ T302] dup_mm+0x8c5/0x12c0 [ 20.324235][ T302] ? copy_init_mm+0x20/0x20 [ 20.328573][ T302] copy_mm+0x107/0x1b0 [ 20.332482][ T302] copy_process+0x12bc/0x3260 [ 20.336995][ T302] ? proc_fail_nth_write+0x20b/0x290 [ 20.342113][ T302] ? fsnotify_perm+0x6a/0x5d0 [ 20.346627][ T302] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 20.351572][ T302] ? vfs_write+0x9ec/0x1110 [ 20.355912][ T302] kernel_clone+0x21e/0x9e0 [ 20.360252][ T302] ? file_end_write+0x1c0/0x1c0 [ 20.364941][ T302] ? create_io_thread+0x1e0/0x1e0 [ 20.369797][ T302] ? mutex_unlock+0xb2/0x1b0 [ 20.374232][ T302] ? __mutex_lock_slowpath+0x10/0x10 [ 20.379350][ T302] __x64_sys_clone+0x23f/0x290 [ 20.383947][ T302] ? __do_sys_vfork+0x130/0x130 [ 20.388638][ T302] ? ksys_write+0x260/0x2c0 [ 20.392976][ T302] ? debug_smp_processor_id+0x17/0x20 [ 20.398192][ T302] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 20.404088][ T302] ? exit_to_user_mode_prepare+0x39/0xa0 [ 20.409555][ T302] do_syscall_64+0x3d/0xb0 [ 20.413813][ T302] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 20.419535][ T302] RIP: 0033:0x7f6bfbfe9bf9 [ 20.423788][ T302] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 20.443224][ T302] RSP: 002b:00007f6bfbf9b2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 20.451470][ T302] RAX: ffffffffffffffda RBX: 00007f6bfc0724a8 RCX: 00007f6bfbfe9bf9 [ 20.459282][ T302] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 [ 20.467093][ T302] RBP: 00007f6bfc0724a0 R08: 0000000000000000 R09: 0000000000003636 [ 20.475688][ T302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 20.483495][ T302] R13: 00007f6bfbf9b300 R14: 00007f6bfbf9b400 R15: 0000000000022000 [ 20.491309][ T302] [ 20.494294][ T304] CPU: 0 PID: 304 Comm: syz-executor188 Not tainted 5.15.110-syzkaller-00538-g565c3abfa129 #0 [ 20.504342][ T304] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 20.514231][ T304] Call Trace: [ 20.517356][ T304] [ 20.520133][ T304] dump_stack_lvl+0x151/0x1b7 [ 20.524646][ T304] ? io_uring_drop_tctx_refs+0x190/0x190 [ 20.530114][ T304] dump_stack+0x15/0x17 [ 20.534107][ T304] should_fail+0x3c6/0x510 [ 20.538367][ T304] __should_failslab+0xa4/0xe0 [ 20.542964][ T304] ? anon_vma_clone+0x9a/0x500 [ 20.547561][ T304] should_failslab+0x9/0x20 [ 20.551903][ T304] slab_pre_alloc_hook+0x37/0xd0 [ 20.556681][ T304] ? anon_vma_clone+0x9a/0x500 [ 20.561277][ T304] kmem_cache_alloc+0x44/0x200 [ 20.565874][ T304] anon_vma_clone+0x9a/0x500 [ 20.570299][ T304] anon_vma_fork+0x91/0x4e0 [ 20.574638][ T304] ? anon_vma_name+0x43/0x70 [ 20.579063][ T304] ? vm_area_dup+0x17a/0x230 [ 20.583488][ T304] dup_mm+0x8c5/0x12c0 [ 20.587396][ T304] ? copy_init_mm+0x20/0x20 [ 20.591737][ T304] copy_mm+0x107/0x1b0 [ 20.596944][ T304] copy_process+0x12bc/0x3260 [ 20.601456][ T304] ? proc_fail_nth_write+0x20b/0x290 [ 20.606576][ T304] ? fsnotify_perm+0x6a/0x5d0 [ 20.611088][ T304] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 20.616037][ T304] ? vfs_write+0x9ec/0x1110 [ 20.620376][ T304] kernel_clone+0x21e/0x9e0 [ 20.624714][ T304] ? file_end_write+0x1c0/0x1c0 [ 20.629401][ T304] ? create_io_thread+0x1e0/0x1e0 [ 20.634262][ T304] ? mutex_unlock+0xb2/0x1b0 [ 20.638687][ T304] ? __mutex_lock_slowpath+0x10/0x10 [ 20.643810][ T304] __x64_sys_clone+0x23f/0x290 [ 20.648410][ T304] ? __do_sys_vfork+0x130/0x130 [ 20.653094][ T304] ? ksys_write+0x260/0x2c0 [ 20.657436][ T304] ? debug_smp_processor_id+0x17/0x20 [ 20.662641][ T304] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 20.668544][ T304] ? exit_to_user_mode_prepare+0x39/0xa0 [ 20.674013][ T304] do_syscall_64+0x3d/0xb0 [ 20.678265][ T304] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 20.683992][ T304] RIP: 0033:0x7f6bfbfe9bf9 [ 20.688246][ T304] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 20.707687][ T304] RSP: 002b:00007f6bfbf9b2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 20.715934][ T304] RAX: ffffffffffffffda RBX: 00007f6bfc0724a8 RCX: 00007f6bfbfe9bf9 [ 20.723741][ T304] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 [ 20.731554][ T304] RBP: 00007f6bfc0724a0 R08: 0000000000000000 R09: 0000000000003636 [ 20.739365][ T304] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 20.747180][ T304] R13: 00007f6bfbf9b300 R14: 00007f6bfbf9b400 R15: 0000000000022000 [ 20.754990][ T304] [ 20.757853][ T301] CPU: 1 PID: 301 Comm: syz-executor188 Not tainted 5.15.110-syzkaller-00538-g565c3abfa129 #0 [ 20.767920][ T301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 20.777815][ T301] Call Trace: [ 20.780938][ T301] [ 20.783714][ T301] dump_stack_lvl+0x151/0x1b7 [ 20.788226][ T301] ? io_uring_drop_tctx_refs+0x190/0x190 [ 20.793695][ T301] ? avc_denied+0x1b0/0x1b0 [ 20.798034][ T301] dump_stack+0x15/0x17 [ 20.802025][ T301] should_fail+0x3c6/0x510 [ 20.806281][ T301] __should_failslab+0xa4/0xe0 [ 20.810881][ T301] ? vm_area_dup+0x26/0x230 [ 20.815220][ T301] should_failslab+0x9/0x20 [ 20.819558][ T301] slab_pre_alloc_hook+0x37/0xd0 [ 20.824332][ T301] ? vm_area_dup+0x26/0x230 [ 20.828673][ T301] kmem_cache_alloc+0x44/0x200 [ 20.833273][ T301] vm_area_dup+0x26/0x230 [ 20.837437][ T301] dup_mm+0x81b/0x12c0 [ 20.841346][ T301] ? copy_init_mm+0x20/0x20 [ 20.845687][ T301] copy_mm+0x107/0x1b0 [ 20.849590][ T301] copy_process+0x12bc/0x3260 [ 20.854111][ T301] ? proc_fail_nth_write+0x20b/0x290 [ 20.859223][ T301] ? fsnotify_perm+0x6a/0x5d0 [ 20.863739][ T301] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 20.868686][ T301] ? vfs_write+0x9ec/0x1110 [ 20.873024][ T301] kernel_clone+0x21e/0x9e0 [ 20.877363][ T301] ? file_end_write+0x1c0/0x1c0 [ 20.882047][ T301] ? create_io_thread+0x1e0/0x1e0 [ 20.886907][ T301] ? mutex_unlock+0xb2/0x1b0 [ 20.891335][ T301] ? __mutex_lock_slowpath+0x10/0x10 [ 20.896455][ T301] __x64_sys_clone+0x23f/0x290 [ 20.901056][ T301] ? __do_sys_vfork+0x130/0x130 [ 20.906524][ T301] ? ksys_write+0x260/0x2c0 [ 20.910866][ T301] ? debug_smp_processor_id+0x17/0x20 [ 20.916071][ T301] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 20.921971][ T301] ? exit_to_user_mode_prepare+0x39/0xa0 [ 20.927438][ T301] do_syscall_64+0x3d/0xb0 [ 20.931692][ T301] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 20.937422][ T301] RIP: 0033:0x7f6bfbfe9bf9 [ 20.941672][ T301] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 20.961115][ T301] RSP: 002b:00007f6bfbf9b2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 20.969359][ T301] RAX: ffffffffffffffda RBX: 00007f6bfc0724a8 RCX: 00007f6bfbfe9bf9 [ 20.977168][ T301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 [ 20.984980][ T301] RBP: 00007f6bfc0724a0 R08: 0000000000000000 R09: 0000000000003636 [ 20.992793][ T301] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 21.000602][ T301] R13: 00007f6bfbf9b300 R14: 00007f6bfbf9b400 R15: 0000000000022000 [ 21.008416][ T301] [ 21.012961][ T309] FAULT_INJECTION: forcing a failure. [ 21.012961][ T309] name failslab, interval 1, probability 0, space 0, times 0 [ 21.027822][ T294] ------------[ cut here ]------------ [ 21.028286][ T309] CPU: 1 PID: 309 Comm: syz-executor188 Not tainted 5.15.110-syzkaller-00538-g565c3abfa129 #0 [ 21.034565][ T294] refcount_t: underflow; use-after-free. [ 21.043177][ T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 21.043189][ T309] Call Trace: [ 21.043194][ T309] [ 21.043200][ T309] dump_stack_lvl+0x151/0x1b7 [ 21.043221][ T309] ? io_uring_drop_tctx_refs+0x190/0x190 [ 21.043236][ T309] ? rwsem_wake+0x12e/0x220 [ 21.049317][ T294] WARNING: CPU: 0 PID: 294 at lib/refcount.c:28 refcount_warn_saturate+0x158/0x1a0 [ 21.058528][ T309] dump_stack+0x15/0x17 [ 21.058547][ T309] should_fail+0x3c6/0x510 [ 21.058563][ T309] __should_failslab+0xa4/0xe0 [ 21.058579][ T309] ? anon_vma_fork+0xf7/0x4e0 [ 21.058594][ T309] should_failslab+0x9/0x20 [ 21.062113][ T294] Modules linked in: [ 21.064426][ T309] slab_pre_alloc_hook+0x37/0xd0 [ 21.064446][ T309] ? anon_vma_fork+0xf7/0x4e0 [ 21.068994][ T294] executing program [ 21.074407][ T309] kmem_cache_alloc+0x44/0x200 [ 21.074426][ T309] anon_vma_fork+0xf7/0x4e0 [ 21.074440][ T309] ? anon_vma_name+0x43/0x70 [ 21.078803][ T294] CPU: 0 PID: 294 Comm: syz-executor188 Not tainted 5.15.110-syzkaller-00538-g565c3abfa129 #0 [ 21.087860][ T309] ? vm_area_dup+0x17a/0x230 [ 21.087879][ T309] dup_mm+0x8c5/0x12c0 [ 21.087896][ T309] ? copy_init_mm+0x20/0x20 [ 21.091916][ T294] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 21.096114][ T309] copy_mm+0x107/0x1b0 executing program executing program [ 21.096134][ T309] copy_process+0x12bc/0x3260 [ 21.100767][ T294] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 21.105223][ T309] ? proc_fail_nth_write+0x20b/0x290 [ 21.105243][ T309] ? fsnotify_perm+0x6a/0x5d0 [ 21.110124][ T294] Code: 04 01 48 c7 c7 a0 9b 82 85 e8 14 91 dd fe 0f 0b eb 8b e8 9b 01 0c ff c6 05 29 b2 9e 04 01 48 c7 c7 00 9c 82 85 e8 f8 90 dd fe <0f> 0b e9 6c ff ff ff e8 7c 01 0c ff c6 05 0b b2 9e 04 01 48 c7 c7 [ 21.113814][ T309] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 21.113833][ T309] ? vfs_write+0x9ec/0x1110 [ 21.113849][ T309] kernel_clone+0x21e/0x9e0 [ 21.113863][ T309] ? file_end_write+0x1c0/0x1c0 [ 21.119227][ T294] RSP: 0018:ffffc90000a27948 EFLAGS: 00010246 [ 21.123104][ T309] ? create_io_thread+0x1e0/0x1e0 [ 21.123124][ T309] ? mutex_unlock+0xb2/0x1b0 [ 21.123138][ T309] ? __mutex_lock_slowpath+0x10/0x10 [ 21.125698][ T294] [ 21.129870][ T309] __x64_sys_clone+0x23f/0x290 [ 21.129893][ T309] ? __do_sys_vfork+0x130/0x130 [ 21.135142][ T294] RAX: 83761148952e9c00 RBX: 0000000000000003 RCX: ffff88811da58000 [ 21.138636][ T309] ? ksys_write+0x260/0x2c0 [ 21.138660][ T309] ? debug_smp_processor_id+0x17/0x20 [ 21.148811][ T294] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 21.153127][ T309] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 21.153149][ T309] ? exit_to_user_mode_prepare+0x39/0xa0 [ 21.157173][ T294] RBP: ffffc90000a27958 R08: ffffffff81573b85 R09: 0000000000000003 [ 21.161459][ T309] do_syscall_64+0x3d/0xb0 [ 21.161477][ T309] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 21.171594][ T294] R10: fffff52000144e84 R11: dffffc0000000001 R12: 1ffff11023b9bf61 [ 21.175436][ T309] RIP: 0033:0x7f6bfbfe9bf9 [ 21.175453][ T309] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 21.175466][ T309] RSP: 002b:00007f6bfbf9b2f8 EFLAGS: 00000246 [ 21.179994][ T294] R13: ffff88811dcdfb08 R14: 0000000000000003 R15: ffff88811b278e39 [ 21.185937][ T309] ORIG_RAX: 0000000000000038 [ 21.185950][ T309] RAX: ffffffffffffffda RBX: 00007f6bfc0724a8 RCX: 00007f6bfbfe9bf9 [ 21.185962][ T309] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 [ 21.185971][ T309] RBP: 00007f6bfc0724a0 R08: 0000000000000000 R09: 0000000000003636 [ 21.185982][ T309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 21.185992][ T309] R13: 00007f6bfbf9b300 R14: 00007f6bfbf9b400 R15: 0000000000022000 [ 21.186006][ T309] [ 21.191182][ T294] FS: 00007f6bfbf9b700(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 21.198392][ T315] BUG: unable to handle page fault for address: ffffed180000000e [ 21.216639][ T294] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.220060][ T315] #PF: supervisor read access in kernel mode [ 21.220071][ T315] #PF: error_code(0x0000) - not-present page [ 21.220080][ T315] PGD 23fff2067 P4D 23fff2067 PUD 0 [ 21.224486][ T294] CR2: 00007ffc991b47c0 CR3: 000000011b19e000 CR4: 00000000003506b0 [ 21.228747][ T315] [ 21.228753][ T315] Oops: 0000 [#1] PREEMPT SMP KASAN [ 21.228768][ T315] CPU: 1 PID: 315 Comm: syz-executor188 Not tainted 5.15.110-syzkaller-00538-g565c3abfa129 #0 [ 21.233494][ T294] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.239329][ T315] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 21.239340][ T315] RIP: 0010:__rb_insert_augmented+0x63/0x610 [ 21.244254][ T294] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.248615][ T315] Code: 13 2b ff 4d 8b 2f 4d 85 ed 75 18 e9 a7 05 00 00 4c 8b 2b 49 89 df 49 83 e5 fc 4c 89 2b 0f 84 91 05 00 00 4c 89 eb 48 c1 eb 03 <42> 80 3c 23 00 74 08 4c 89 ef e8 5e 13 2b ff 49 8b 45 00 a8 01 0f [ 21.248630][ T315] RSP: 0018:ffffc90000a478d8 EFLAGS: 00010a02 [ 21.253798][ T294] Call Trace: [ 21.255904][ T315] RAX: 1ffff11023649d0e RBX: 1ffff1180000000e RCX: dffffc0000000000 [ 21.255918][ T315] RDX: ffffffff81a45440 RSI: ffff8881091ac968 RDI: ffff88811dcdd180 [ 21.255930][ T315] RBP: ffffc90000a47940 R08: dffffc0000000000 R09: ffff88811dcdd188 [ 21.260590][ T294] [ 21.265198][ T315] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 21.265212][ T315] R13: ffff88c000000070 R14: ffff88811b24e871 R15: ffff88811b24e870 [ 21.265224][ T315] FS: 00007f6bfbf9b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 21.273341][ T294] vm_area_free_no_check+0x123/0x130 [ 21.277601][ T315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.277614][ T315] CR2: ffffed180000000e CR3: 000000011b342000 CR4: 00000000003506a0 [ 21.277630][ T315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.282870][ T294] dup_mm+0xd73/0x12c0 [ 21.290632][ T315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.290644][ T315] Call Trace: [ 21.290650][ T315] [ 21.290660][ T315] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 21.296580][ T294] ? copy_init_mm+0x20/0x20 [ 21.301993][ T315] vma_interval_tree_insert_after+0x2be/0x2d0 [ 21.302013][ T315] dup_mm+0xa11/0x12c0 [ 21.302031][ T315] ? copy_init_mm+0x20/0x20 [ 21.309856][ T294] copy_mm+0x107/0x1b0 [ 21.314057][ T315] copy_mm+0x107/0x1b0 [ 21.314075][ T315] copy_process+0x12bc/0x3260 [ 21.314093][ T315] ? proc_fail_nth_write+0x20b/0x290 [ 21.319832][ T294] copy_process+0x12bc/0x3260 [ 21.327592][ T315] ? fsnotify_perm+0x6a/0x5d0 [ 21.327611][ T315] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 21.331925][ T294] ? proc_fail_nth_write+0x20b/0x290 [ 21.351289][ T315] ? vfs_write+0x9ec/0x1110 [ 21.351309][ T315] kernel_clone+0x21e/0x9e0 [ 21.351326][ T315] ? file_end_write+0x1c0/0x1c0 [ 21.357240][ T294] ? fsnotify_perm+0x6a/0x5d0 [ 21.365002][ T315] ? create_io_thread+0x1e0/0x1e0 [ 21.365020][ T315] ? mutex_unlock+0xb2/0x1b0 [ 21.365035][ T315] ? __mutex_lock_slowpath+0x10/0x10 [ 21.365050][ T315] __x64_sys_clone+0x23f/0x290 [ 21.369560][ T294] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 21.377327][ T315] ? __do_sys_vfork+0x130/0x130 [ 21.377344][ T315] ? ksys_write+0x260/0x2c0 [ 21.377362][ T315] ? debug_smp_processor_id+0x17/0x20 [ 21.385207][ T294] ? vfs_write+0x9ec/0x1110 [ 21.392950][ T315] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 21.392970][ T315] ? exit_to_user_mode_prepare+0x39/0xa0 [ 21.392986][ T315] do_syscall_64+0x3d/0xb0 [ 21.401012][ T294] kernel_clone+0x21e/0x9e0 [ 21.408570][ T315] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 21.408591][ T315] RIP: 0033:0x7f6bfbfe9bf9 [ 21.411502][ T294] ? file_end_write+0x1c0/0x1c0 [ 21.420201][ T315] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 11 15 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 21.420216][ T315] RSP: 002b:00007f6bfbf9b2f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 21.427816][ T294] ? create_io_thread+0x1e0/0x1e0 [ 21.434173][ T315] RAX: ffffffffffffffda RBX: 00007f6bfc0724a8 RCX: 00007f6bfbfe9bf9 [ 21.434187][ T315] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 [ 21.434197][ T315] RBP: 00007f6bfc0724a0 R08: 0000000000000000 R09: 0000000000003636 [ 21.434207][ T315] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 21.434216][ T315] R13: 00007f6bfbf9b300 R14: 00007f6bfbf9b400 R15: 0000000000022000 [ 21.440039][ T294] ? mutex_unlock+0xb2/0x1b0 [ 21.445805][ T315] [ 21.445811][ T315] Modules linked in: [ 21.445821][ T315] CR2: ffffed180000000e [ 21.445830][ T315] ---[ end trace 3d0bfe77e545a0ca ]--- [ 21.450995][ T294] ? __mutex_lock_slowpath+0x10/0x10 [ 21.458734][ T315] RIP: 0010:__rb_insert_augmented+0x63/0x610 [ 21.458756][ T315] Code: 13 2b ff 4d 8b 2f 4d 85 ed 75 18 e9 a7 05 00 00 4c 8b 2b 49 89 df 49 83 e5 fc 4c 89 2b 0f 84 91 05 00 00 4c 89 eb 48 c1 eb 03 <42> 80 3c 23 00 74 08 4c 89 ef e8 5e 13 2b ff 49 8b 45 00 a8 01 0f [ 21.460966][ T294] __x64_sys_clone+0x23f/0x290 [ 21.465937][ T315] RSP: 0018:ffffc90000a478d8 EFLAGS: 00010a02 [ 21.465952][ T315] RAX: 1ffff11023649d0e RBX: 1ffff1180000000e RCX: dffffc0000000000 [ 21.465965][ T315] RDX: ffffffff81a45440 RSI: ffff8881091ac968 RDI: ffff88811dcdd180 [ 21.476069][ T294] ? __do_sys_vfork+0x130/0x130 [ 21.483815][ T315] RBP: ffffc90000a47940 R08: dffffc0000000000 R09: ffff88811dcdd188 [ 21.483828][ T315] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 21.483839][ T315] R13: ffff88c000000070 R14: ffff88811b24e871 R15: ffff88811b24e870 [ 21.483851][ T315] FS: 00007f6bfbf9b700(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 21.493778][ T294] ? ksys_write+0x260/0x2c0 [ 21.499524][ T315] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 21.499537][ T315] CR2: ffffed180000000e CR3: 000000011b342000 CR4: 00000000003506a0 [ 21.499552][ T315] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 21.507403][ T294] ? debug_smp_processor_id+0x17/0x20 [ 21.526776][ T315] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 21.526790][ T315] Kernel panic - not syncing: Fatal exception [ 21.526948][ T315] Kernel Offset: disabled [ 22.022564][ T315] Rebooting in 86400 seconds..