./strace-static-x86_64 -e \!wait4,clock_nanosleep,nanosleep -s 100 -x -f ./syz-executor416567697
<...>
[ 3.006565][ T30] audit: type=1400 audit(1674564424.370:10): avc: denied { getattr } for pid=80 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 3.197386][ T97] udevd[97]: starting version 3.2.10
[ 3.225043][ T98] udevd[98]: starting eudev-3.2.10
[ 3.226864][ T97] udevd (97) used greatest stack depth: 23424 bytes left
[ 10.374344][ T229] sshd (229) used greatest stack depth: 23168 bytes left
[ 10.432118][ T30] kauditd_printk_skb: 49 callbacks suppressed
[ 10.432132][ T30] audit: type=1400 audit(1674564431.820:60): avc: denied { transition } for pid=231 comm="sshd" path="/bin/sh" dev="sda1" ino=73 scontext=system_u:system_r:initrc_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 10.436606][ T30] audit: type=1400 audit(1674564431.820:61): avc: denied { write } for pid=231 comm="sh" path="pipe:[12776]" dev="pipefs" ino=12776 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:initrc_t tclass=fifo_file permissive=1
[ 11.652602][ T233] sshd (233) used greatest stack depth: 22720 bytes left
[ 12.257555][ T243] scp (243) used greatest stack depth: 22336 bytes left
Warning: Permanently added '10.128.1.124' (ECDSA) to the list of known hosts.
execve("./syz-executor416567697", ["./syz-executor416567697"], 0x7ffeba955d70 /* 10 vars */) = 0
brk(NULL) = 0x555556576000
brk(0x555556576c40) = 0x555556576c40
arch_prctl(ARCH_SET_FS, 0x555556576300) = 0
uname({sysname="Linux", nodename="syzkaller", ...}) = 0
readlink("/proc/self/exe", "/root/syz-executor416567697", 4096) = 27
brk(0x555556597c40) = 0x555556597c40
brk(0x555556598000) = 0x555556598000
mprotect(0x7fb2833b1000, 16384, PROT_READ) = 0
mmap(0x1ffff000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x1ffff000
mmap(0x20000000, 16777216, PROT_READ|PROT_WRITE|PROT_EXEC, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x20000000
mmap(0x21000000, 4096, PROT_NONE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x21000000
openat(AT_FDCWD, "/sys/kernel/debug/failslab/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_futex/ignore-private", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-highmem", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/ignore-gfp-wait", O_WRONLY|O_CLOEXEC) = 3
write(3, "N", 1) = 1
close(3) = 0
openat(AT_FDCWD, "/sys/kernel/debug/fail_page_alloc/min-order", O_WRONLY|O_CLOEXEC) = 3
write(3, "0", 1) = 1
close(3) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555565765d0) = 322
./strace-static-x86_64: Process 322 attached
[pid 322] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 322] setpgid(0, 0) = 0
[pid 322] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 322] write(3, "1000", 4) = 4
[pid 322] close(3) = 0
[pid 322] socket(AF_PACKET, SOCK_RAW, htons(ETH_P_ALL)) = 3
[pid 322] setsockopt(3, SOL_PACKET, PACKET_TX_RING, 0x20000100, 28) = 0
[pid 322] mmap(0x20ff0000, 65536, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM, MAP_PRIVATE|MAP_FIXED|MAP_NONBLOCK|MAP_EXECUTABLE|MAP_LOCKED, 3, 0) = 0x20ff0000
[pid 322] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 322] write(4, "25", 2) = 2
[ 18.179675][ T30] audit: type=1400 audit(1674564439.570:62): avc: denied { execmem } for pid=321 comm="syz-executor416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1
[ 18.183642][ T30] audit: type=1400 audit(1674564439.570:63): avc: denied { integrity } for pid=321 comm="syz-executor416" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1
[ 18.186887][ T30] audit: type=1400 audit(1674564439.570:64): avc: denied { create } for pid=322 comm="syz-executor416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 18.189971][ T30] audit: type=1400 audit(1674564439.570:65): avc: denied { setopt } for pid=322 comm="syz-executor416" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 18.191980][ T322] FAULT_INJECTION: forcing a failure.
[ 18.191980][ T322] name fail_page_alloc, interval 1, probability 0, space 0, times 1
[ 18.193194][ T30] audit: type=1400 audit(1674564439.580:66): avc: denied { map } for pid=322 comm="syz-executor416" path="socket:[12939]" dev="sockfs" ino=12939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 18.194856][ T322] CPU: 1 PID: 322 Comm: syz-executor416 Not tainted 5.15.80-syzkaller-01018-ge66b45d52787 #0
[ 18.197811][ T30] audit: type=1400 audit(1674564439.580:67): avc: denied { read accept } for pid=322 comm="syz-executor416" path="socket:[12939]" dev="sockfs" ino=12939 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1
[ 18.199104][ T322] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 18.199113][ T322] Call Trace:
[ 18.199117][ T322]
[ 18.199122][ T322] dump_stack_lvl+0x151/0x1b7
[ 18.199158][ T322] ? bfq_pos_tree_add_move+0x43e/0x43e
[ 18.240003][ T322] ? pcpu_block_update_hint_alloc+0x972/0xd00
[ 18.245908][ T322] dump_stack+0x15/0x17
[ 18.249894][ T322] should_fail+0x3c0/0x510
[ 18.254146][ T322] should_fail_alloc_page+0x58/0x70
[ 18.259180][ T322] __alloc_pages+0x1de/0x7c0
[ 18.263743][ T322] ? __count_vm_events+0x30/0x30
[ 18.268512][ T322] __get_free_pages+0xe/0x30
[ 18.272934][ T322] pgd_alloc+0x22/0x2c0
[ 18.276926][ T322] mm_init+0x5bf/0x960
[ 18.280832][ T322] dup_mm+0x7e/0x2e0
[ 18.284563][ T322] copy_mm+0x108/0x1b0
[ 18.288477][ T322] copy_process+0x1295/0x3250
[ 18.292989][ T322] ? __schedule+0xb08/0x1040
[ 18.297414][ T322] ? pidfd_show_fdinfo+0x2b0/0x2b0
[ 18.302359][ T322] ? __kasan_check_write+0x14/0x20
[ 18.307304][ T322] ? _raw_spin_lock_irq+0xa4/0x1b0
[ 18.312250][ T322] kernel_clone+0x21d/0x9c0
[ 18.316593][ T322] ? create_io_thread+0x1e0/0x1e0
[ 18.321453][ T322] __x64_sys_clone+0x289/0x310
[ 18.326051][ T322] ? _raw_spin_unlock_irq+0x4e/0x70
[ 18.331083][ T322] ? __do_sys_vfork+0x130/0x130
[ 18.335769][ T322] ? fpregs_restore_userregs+0x1f0/0x3a0
[ 18.341239][ T322] ? syscall_enter_from_user_mode+0x71/0x1b0
[ 18.347056][ T322] do_syscall_64+0x44/0xd0
[ 18.351313][ T322] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 18.357035][ T322] RIP: 0033:0x7fb2833440f9
[ 18.361289][ T322] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 18.380732][ T322] RSP: 002b:00007fff9fbac4d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 18.388974][ T322] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb2833440f9
[ 18.396786][ T322] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 18.404594][ T322] RBP: 00007fff9fbac4f0 R08: 0000000000000000 R09: 0000000000000001
[ 18.412406][ T322] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 18.420217][ T322] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[pid 322] clone(child_stack=NULL, flags=0) = -1 ENOMEM (Cannot allocate memory)
[pid 322] exit_group(0) = ?
[pid 322] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=322, si_uid=0, si_status=0, si_utime=0, si_stime=0} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555565765d0) = 323
./strace-static-x86_64: Process 323 attached
[pid 323] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 323] setpgid(0, 0) = 0
[pid 323] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 323] write(3, "1000", 4) = 4
[pid 323] close(3) = 0
[pid 323] socket(AF_PACKET, SOCK_RAW, htons(ETH_P_ALL)) = 3
[pid 323] setsockopt(3, SOL_PACKET, PACKET_TX_RING, 0x20000100, 28) = 0
[pid 323] mmap(0x20ff0000, 65536, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM, MAP_PRIVATE|MAP_FIXED|MAP_NONBLOCK|MAP_EXECUTABLE|MAP_LOCKED, 3, 0) = 0x20ff0000
[pid 323] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 323] write(4, "25", 2) = 2
[ 18.428035][ T322]
[ 18.436924][ T323] FAULT_INJECTION: forcing a failure.
[ 18.436924][ T323] name failslab, interval 1, probability 0, space 0, times 1
[ 18.449473][ T323] CPU: 1 PID: 323 Comm: syz-executor416 Not tainted 5.15.80-syzkaller-01018-ge66b45d52787 #0
[ 18.459434][ T323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 18.469328][ T323] Call Trace:
[ 18.472453][ T323]
[ 18.475229][ T323] dump_stack_lvl+0x151/0x1b7
[ 18.479743][ T323] ? bfq_pos_tree_add_move+0x43e/0x43e
[ 18.485044][ T323] dump_stack+0x15/0x17
[ 18.489027][ T323] should_fail+0x3c0/0x510
[ 18.493289][ T323] __should_failslab+0x9f/0xe0
[ 18.497881][ T323] should_failslab+0x9/0x20
[ 18.502223][ T323] kmem_cache_alloc+0x4f/0x2f0
[ 18.506820][ T323] ? vm_area_dup+0x26/0x220
[ 18.511161][ T323] vm_area_dup+0x26/0x220
[ 18.515328][ T323] dup_mmap+0x6c8/0xf10
[ 18.519342][ T323] ? __delayed_free_task+0x20/0x20
[ 18.524267][ T323] ? mm_init+0x807/0x960
[ 18.528347][ T323] dup_mm+0x8e/0x2e0
[ 18.532076][ T323] copy_mm+0x108/0x1b0
[ 18.535988][ T323] copy_process+0x1295/0x3250
[ 18.540500][ T323] ? __schedule+0xb08/0x1040
[ 18.544921][ T323] ? pidfd_show_fdinfo+0x2b0/0x2b0
[ 18.549868][ T323] ? __kasan_check_write+0x14/0x20
[ 18.554816][ T323] ? _raw_spin_lock_irq+0xa4/0x1b0
[ 18.559764][ T323] kernel_clone+0x21d/0x9c0
[ 18.564107][ T323] ? create_io_thread+0x1e0/0x1e0
[ 18.568964][ T323] __x64_sys_clone+0x289/0x310
[ 18.573566][ T323] ? _raw_spin_unlock_irq+0x4e/0x70
[ 18.578597][ T323] ? __do_sys_vfork+0x130/0x130
[ 18.583285][ T323] ? fpregs_restore_userregs+0x1f0/0x3a0
[ 18.588753][ T323] ? syscall_enter_from_user_mode+0x71/0x1b0
[ 18.594567][ T323] do_syscall_64+0x44/0xd0
[ 18.598819][ T323] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 18.604549][ T323] RIP: 0033:0x7fb2833440f9
[ 18.608800][ T323] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[pid 323] clone(child_stack=NULL, flags=0) = -1 ENOMEM (Cannot allocate memory)
[pid 323] exit_group(0) = ?
[pid 323] +++ exited with 0 +++
--- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=323, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
restart_syscall(<... resuming interrupted clone ...>) = 0
clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD, child_tidptr=0x5555565765d0) = 325
./strace-static-x86_64: Process 325 attached
[pid 325] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 325] setpgid(0, 0) = 0
[pid 325] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 325] write(3, "1000", 4) = 4
[pid 325] close(3) = 0
[pid 325] socket(AF_PACKET, SOCK_RAW, htons(ETH_P_ALL)) = 3
[pid 325] setsockopt(3, SOL_PACKET, PACKET_TX_RING, 0x20000100, 28) = 0
[pid 325] mmap(0x20ff0000, 65536, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM, MAP_PRIVATE|MAP_FIXED|MAP_NONBLOCK|MAP_EXECUTABLE|MAP_LOCKED, 3, 0) = 0x20ff0000
[pid 325] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 325] write(4, "25", 2) = 2
[ 18.628423][ T323] RSP: 002b:00007fff9fbac4d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 18.636662][ T323] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb2833440f9
[ 18.644474][ T323] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 18.652284][ T323] RBP: 00007fff9fbac4f0 R08: 0000000000000000 R09: 0000000000000001
[ 18.660094][ T323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 18.667905][ T323] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 18.675720][ T323]
[ 18.685961][ T325] FAULT_INJECTION: forcing a failure.
[ 18.685961][ T325] name fail_page_alloc, interval 1, probability 0, space 0, times 0
[ 18.699109][ T325] CPU: 0 PID: 325 Comm: syz-executor416 Not tainted 5.15.80-syzkaller-01018-ge66b45d52787 #0
[ 18.709068][ T325] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 18.718961][ T325] Call Trace:
[ 18.722085][ T325]
[ 18.724863][ T325] dump_stack_lvl+0x151/0x1b7
[ 18.729377][ T325] ? bfq_pos_tree_add_move+0x43e/0x43e
[ 18.734675][ T325] dump_stack+0x15/0x17
[ 18.738663][ T325] should_fail+0x3c0/0x510
[ 18.742921][ T325] should_fail_alloc_page+0x58/0x70
[ 18.747955][ T325] __alloc_pages+0x1de/0x7c0
[ 18.752378][ T325] ? __x64_sys_clone+0x289/0x310
[ 18.757154][ T325] ? __count_vm_events+0x30/0x30
[ 18.761929][ T325] ? copy_page_range+0xecc/0x1090
[ 18.766783][ T325] allocate_slab+0x62/0x580
[ 18.771126][ T325] ___slab_alloc+0x2e2/0x6f0
[ 18.775578][ T325] ? vm_area_dup+0x26/0x220
[ 18.779891][ T325] ? vm_area_dup+0x26/0x220
[ 18.784228][ T325] __slab_alloc+0x4a/0x90
[ 18.788396][ T325] kmem_cache_alloc+0x205/0x2f0
[ 18.793079][ T325] ? vm_area_dup+0x26/0x220
[ 18.797419][ T325] vm_area_dup+0x26/0x220
[ 18.801587][ T325] dup_mmap+0x6c8/0xf10
[ 18.805579][ T325] ? __delayed_free_task+0x20/0x20
[ 18.810531][ T325] ? mm_init+0x807/0x960
[ 18.814607][ T325] dup_mm+0x8e/0x2e0
[ 18.818338][ T325] copy_mm+0x108/0x1b0
[ 18.822243][ T325] copy_process+0x1295/0x3250
[ 18.826757][ T325] ? __schedule+0xb08/0x1040
[ 18.831183][ T325] ? pidfd_show_fdinfo+0x2b0/0x2b0
[ 18.836129][ T325] ? __kasan_check_write+0x14/0x20
[ 18.841077][ T325] ? _raw_spin_lock_irq+0xa4/0x1b0
[ 18.846023][ T325] kernel_clone+0x21d/0x9c0
[ 18.850365][ T325] ? create_io_thread+0x1e0/0x1e0
[ 18.855224][ T325] __x64_sys_clone+0x289/0x310
[ 18.859825][ T325] ? _raw_spin_unlock_irq+0x4e/0x70
[ 18.864860][ T325] ? __do_sys_vfork+0x130/0x130
[ 18.869546][ T325] ? fpregs_restore_userregs+0x1f0/0x3a0
[ 18.875014][ T325] ? syscall_enter_from_user_mode+0x71/0x1b0
[ 18.880828][ T325] do_syscall_64+0x44/0xd0
[ 18.885080][ T325] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 18.890812][ T325] RIP: 0033:0x7fb2833440f9
[ 18.895059][ T325] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 18.914503][ T325] RSP: 002b:00007fff9fbac4d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 18.922746][ T325] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb2833440f9
[pid 325] clone(child_stack=NULL, flags=0./strace-static-x86_64: Process 326 attached
) = 326
[pid 325] exit_group(0) = ?
[pid 325] +++ exited with 0 +++
[pid 321] --- SIGCHLD {si_signo=SIGCHLD, si_code=CLD_EXITED, si_pid=325, si_uid=0, si_status=0, si_utime=0, si_stime=1} ---
[pid 321] restart_syscall(<... resuming interrupted clone ...>) = 0
[pid 321] clone(child_stack=NULL, flags=CLONE_CHILD_CLEARTID|CLONE_CHILD_SETTID|SIGCHLD./strace-static-x86_64: Process 327 attached
, child_tidptr=0x5555565765d0) = 327
[pid 327] prctl(PR_SET_PDEATHSIG, SIGKILL) = 0
[pid 327] setpgid(0, 0) = 0
[pid 327] openat(AT_FDCWD, "/proc/self/oom_score_adj", O_WRONLY|O_CLOEXEC) = 3
[pid 327] write(3, "1000", 4) = 4
[pid 327] close(3) = 0
[pid 327] socket(AF_PACKET, SOCK_RAW, htons(ETH_P_ALL)) = 3
[pid 327] setsockopt(3, SOL_PACKET, PACKET_TX_RING, 0x20000100, 28) = 0
[pid 327] mmap(0x20ff0000, 65536, PROT_READ|PROT_WRITE|PROT_EXEC|PROT_SEM, MAP_PRIVATE|MAP_FIXED|MAP_NONBLOCK|MAP_EXECUTABLE|MAP_LOCKED, 3, 0) = 0x20ff0000
[pid 327] openat(AT_FDCWD, "/proc/thread-self/fail-nth", O_RDWR) = 4
[pid 327] write(4, "25", 2) = 2
[ 18.930556][ T325] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 18.938371][ T325] RBP: 00007fff9fbac4f0 R08: 0000000000000000 R09: 0000000000000001
[ 18.946178][ T325] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 18.953992][ T325] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 18.961814][ T325]
[ 18.970504][ T327] FAULT_INJECTION: forcing a failure.
[ 18.970504][ T327] name failslab, interval 1, probability 0, space 0, times 0
[ 18.983069][ T327] CPU: 1 PID: 327 Comm: syz-executor416 Not tainted 5.15.80-syzkaller-01018-ge66b45d52787 #0
[ 18.993011][ T327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 19.002905][ T327] Call Trace:
[ 19.006032][ T327]
[ 19.008807][ T327] dump_stack_lvl+0x151/0x1b7
[ 19.013323][ T327] ? bfq_pos_tree_add_move+0x43e/0x43e
[ 19.018614][ T327] ? vma_interval_tree_augment_rotate+0x210/0x210
[ 19.024865][ T327] dump_stack+0x15/0x17
[ 19.028855][ T327] should_fail+0x3c0/0x510
[ 19.033111][ T327] __should_failslab+0x9f/0xe0
[ 19.037709][ T327] should_failslab+0x9/0x20
[ 19.042048][ T327] kmem_cache_alloc+0x4f/0x2f0
[ 19.046647][ T327] ? anon_vma_fork+0xf7/0x4f0
[ 19.051161][ T327] anon_vma_fork+0xf7/0x4f0
[ 19.055501][ T327] ? anon_vma_name+0x43/0x70
[ 19.059928][ T327] dup_mmap+0x760/0xf10
[ 19.063922][ T327] ? __delayed_free_task+0x20/0x20
[ 19.068866][ T327] ? mm_init+0x807/0x960
[ 19.072945][ T327] dup_mm+0x8e/0x2e0
[ 19.076677][ T327] copy_mm+0x108/0x1b0
[ 19.080586][ T327] copy_process+0x1295/0x3250
[ 19.085097][ T327] ? __schedule+0xb08/0x1040
[ 19.089523][ T327] ? pidfd_show_fdinfo+0x2b0/0x2b0
[ 19.094470][ T327] ? __kasan_check_write+0x14/0x20
[ 19.099419][ T327] ? _raw_spin_lock_irq+0xa4/0x1b0
[ 19.104367][ T327] kernel_clone+0x21d/0x9c0
[ 19.108705][ T327] ? create_io_thread+0x1e0/0x1e0
[ 19.113566][ T327] __x64_sys_clone+0x289/0x310
[ 19.118163][ T327] ? _raw_spin_unlock_irq+0x4e/0x70
[ 19.123213][ T327] ? __do_sys_vfork+0x130/0x130
[ 19.127886][ T327] ? fpregs_restore_userregs+0x1f0/0x3a0
[ 19.133355][ T327] ? syscall_enter_from_user_mode+0x71/0x1b0
[ 19.139168][ T327] do_syscall_64+0x44/0xd0
[ 19.143420][ T327] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 19.149149][ T327] RIP: 0033:0x7fb2833440f9
[ 19.153406][ T327] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 19.172844][ T327] RSP: 002b:00007fff9fbac4d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[pid 327] clone(child_stack=NULL, flags=0
[pid 326] exit(0) = ?
[ 19.181086][ T327] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb2833440f9
[ 19.188898][ T327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 19.196711][ T327] RBP: 00007fff9fbac4f0 R08: 0000000000000000 R09: 0000000000000001
[ 19.204532][ T327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 19.212335][ T327] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 19.220146][ T327]
[ 19.224289][ T327] ==================================================================
[ 19.232165][ T327] BUG: KASAN: null-ptr-deref in vm_area_free_no_check+0x7f/0x150
[ 19.239714][ T327] Write of size 4 at addr 0000000000000001 by task syz-executor416/327
[ 19.247786][ T327]
[ 19.249956][ T327] CPU: 0 PID: 327 Comm: syz-executor416 Not tainted 5.15.80-syzkaller-01018-ge66b45d52787 #0
[ 19.259937][ T327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 19.269848][ T327] Call Trace:
[ 19.272958][ T327]
[ 19.275735][ T327] dump_stack_lvl+0x151/0x1b7
[ 19.280252][ T327] ? bfq_pos_tree_add_move+0x43e/0x43e
[ 19.285539][ T327] ? __up_write+0x87/0x160
[ 19.289800][ T327] kasan_report+0x19c/0x1f0
[ 19.294135][ T327] ? vm_area_free_no_check+0x7f/0x150
[ 19.299345][ T327] ? vm_area_free_no_check+0x7f/0x150
[ 19.304547][ T327] kasan_check_range+0x2aa/0x2e0
[ 19.309321][ T327] __kasan_check_write+0x14/0x20
[ 19.314095][ T327] vm_area_free_no_check+0x7f/0x150
[ 19.319128][ T327] ? dup_mmap+0xc38/0xf10
[ 19.323300][ T327] dup_mmap+0xc40/0xf10
[ 19.327287][ T327] ? __delayed_free_task+0x20/0x20
[ 19.332255][ T327] ? mm_init+0x807/0x960
[ 19.336318][ T327] dup_mm+0x8e/0x2e0
[ 19.340045][ T327] copy_mm+0x108/0x1b0
[ 19.343951][ T327] copy_process+0x1295/0x3250
[ 19.348464][ T327] ? __schedule+0xb08/0x1040
[ 19.352893][ T327] ? pidfd_show_fdinfo+0x2b0/0x2b0
[ 19.357836][ T327] ? __kasan_check_write+0x14/0x20
[ 19.362784][ T327] ? _raw_spin_lock_irq+0xa4/0x1b0
[ 19.367731][ T327] kernel_clone+0x21d/0x9c0
[ 19.372069][ T327] ? create_io_thread+0x1e0/0x1e0
[ 19.376932][ T327] __x64_sys_clone+0x289/0x310
[ 19.381529][ T327] ? _raw_spin_unlock_irq+0x4e/0x70
[ 19.386565][ T327] ? __do_sys_vfork+0x130/0x130
[ 19.391251][ T327] ? fpregs_restore_userregs+0x1f0/0x3a0
[ 19.396725][ T327] ? syscall_enter_from_user_mode+0x71/0x1b0
[ 19.402539][ T327] do_syscall_64+0x44/0xd0
[ 19.406787][ T327] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 19.412517][ T327] RIP: 0033:0x7fb2833440f9
[ 19.416771][ T327] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 19.436215][ T327] RSP: 002b:00007fff9fbac4d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 19.444457][ T327] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb2833440f9
[ 19.452267][ T327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 19.460075][ T327] RBP: 00007fff9fbac4f0 R08: 0000000000000000 R09: 0000000000000001
[ 19.467892][ T327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 19.475698][ T327] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 19.483513][ T327]
[ 19.486375][ T327] ==================================================================
[ 19.494275][ T327] Disabling lock debugging due to kernel taint
[ 19.500645][ T327] BUG: kernel NULL pointer dereference, address: 0000000000000001
[ 19.508256][ T327] #PF: supervisor write access in kernel mode
[ 19.514151][ T327] #PF: error_code(0x0002) - not-present page
[ 19.519966][ T327] PGD 11f0db067 P4D 11f0db067 PUD 11f0de067 PMD 0
[ 19.526302][ T327] Oops: 0002 [#1] PREEMPT SMP KASAN
[ 19.531338][ T327] CPU: 0 PID: 327 Comm: syz-executor416 Tainted: G B 5.15.80-syzkaller-01018-ge66b45d52787 #0
[ 19.542709][ T327] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/12/2023
[ 19.552602][ T327] RIP: 0010:vm_area_free_no_check+0x85/0x150
[ 19.558417][ T327] Code: 42 80 3c 20 00 74 08 48 89 df e8 16 28 73 00 48 8b 1b 48 85 db 74 3a 48 89 df be 04 00 00 00 e8 11 2a 73 00 41 bc ff ff ff ff 44 0f c1 23 bf 01 00 00 00 44 89 e6 e8 e9 59 30 00 41 83 fc 01
[ 19.577858][ T327] RSP: 0018:ffffc90000947920 EFLAGS: 00010246
[ 19.583758][ T327] RAX: ffff8881071fe200 RBX: 0000000000000001 RCX: 0000000000000001
[ 19.591570][ T327] RDX: 0000000000000000 RSI: 0000000000000286 RDI: 0000000000000001
[ 19.599379][ T327] RBP: ffffc90000947950 R08: ffffffff814342f3 R09: fffffbfff0e502f9
[ 19.607194][ T327] R10: fffffbfff0e502f9 R11: 1ffffffff0e502f8 R12: 00000000ffffffff
[ 19.615002][ T327] R13: 1ffff11023e1bbab R14: ffff88811f0ddcb8 R15: ffff88811f0ddd58
[ 19.622815][ T327] FS: 0000555556576300(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 19.631579][ T327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 19.638002][ T327] CR2: 0000000000000001 CR3: 000000011f0d2000 CR4: 00000000003506b0
[ 19.645823][ T327] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 19.653625][ T327] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 19.661435][ T327] Call Trace:
[ 19.664563][ T327]
[ 19.667337][ T327] ? dup_mmap+0xc38/0xf10
[ 19.671508][ T327] dup_mmap+0xc40/0xf10
[ 19.675502][ T327] ? __delayed_free_task+0x20/0x20
[ 19.680450][ T327] ? mm_init+0x807/0x960
[ 19.684531][ T327] dup_mm+0x8e/0x2e0
[ 19.688260][ T327] copy_mm+0x108/0x1b0
[ 19.692164][ T327] copy_process+0x1295/0x3250
[ 19.696678][ T327] ? __schedule+0xb08/0x1040
[ 19.701102][ T327] ? pidfd_show_fdinfo+0x2b0/0x2b0
[ 19.706048][ T327] ? __kasan_check_write+0x14/0x20
[ 19.710995][ T327] ? _raw_spin_lock_irq+0xa4/0x1b0
[ 19.715942][ T327] kernel_clone+0x21d/0x9c0
[ 19.720284][ T327] ? create_io_thread+0x1e0/0x1e0
[ 19.725143][ T327] __x64_sys_clone+0x289/0x310
[ 19.729741][ T327] ? _raw_spin_unlock_irq+0x4e/0x70
[ 19.734780][ T327] ? __do_sys_vfork+0x130/0x130
[ 19.739460][ T327] ? fpregs_restore_userregs+0x1f0/0x3a0
[ 19.744932][ T327] ? syscall_enter_from_user_mode+0x71/0x1b0
[ 19.750746][ T327] do_syscall_64+0x44/0xd0
[ 19.754998][ T327] entry_SYSCALL_64_after_hwframe+0x61/0xcb
[ 19.760723][ T327] RIP: 0033:0x7fb2833440f9
[ 19.764979][ T327] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 b1 14 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48
[ 19.784421][ T327] RSP: 002b:00007fff9fbac4d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038
[ 19.792665][ T327] RAX: ffffffffffffffda RBX: 0000000000000002 RCX: 00007fb2833440f9
[ 19.800474][ T327] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 19.808286][ T327] RBP: 00007fff9fbac4f0 R08: 0000000000000000 R09: 0000000000000001
[ 19.816098][ T327] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000004
[ 19.823908][ T327] R13: 431bde82d7b634db R14: 0000000000000000 R15: 0000000000000000
[ 19.831720][ T327]
[ 19.834586][ T327] Modules linked in:
[ 19.838316][ T327] CR2: 0000000000000001
[ 19.842311][ T327] ---[ end trace 7bdbfef15b7ba23c ]---
[ 19.847603][ T327] RIP: 0010:vm_area_free_no_check+0x85/0x150
[ 19.853418][ T327] Code: 42 80 3c 20 00 74 08 48 89 df e8 16 28 73 00 48 8b 1b 48 85 db 74 3a 48 89 df be 04 00 00 00 e8 11 2a 73 00 41 bc ff ff ff ff 44 0f c1 23 bf 01 00 00 00 44 89 e6 e8 e9 59 30 00 41 83 fc 01
[ 19.872860][ T327] RSP: 0018:ffffc90000947920 EFLAGS: 00010246
[ 19.878763][ T327] RAX: ffff8881071fe200 RBX: 0000000000000001 RCX: 0000000000000001
[ 19.886571][ T327] RDX: 0000000000000000 RSI: 0000000000000286 RDI: 0000000000000001
[ 19.894383][ T327] RBP: ffffc90000947950 R08: ffffffff814342f3 R09: fffffbfff0e502f9
[ 19.902198][ T327] R10: fffffbfff0e502f9 R11: 1ffffffff0e502f8 R12: 00000000ffffffff
[ 19.910004][ T327] R13: 1ffff11023e1bbab R14: ffff88811f0ddcb8 R15: ffff88811f0ddd58
[ 19.917820][ T327] FS: 0000555556576300(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 19.926583][ T327] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 19.933005][ T327] CR2: 0000000000000001 CR3: 000000011f0d2000 CR4: 00000000003506b0
[ 19.940820][ T327] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 19.948628][ T327] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 19.956444][ T327] Kernel panic - not syncing: Fatal exception
[ 19.962516][ T327] Kernel Offset: disabled
[ 19.966636][ T327] Rebooting in 86400 seconds..