syzkaller login: [ 81.100868][ T5018] sshd (5018) used greatest stack depth: 18352 bytes left Warning: Permanently added '[localhost]:37955' (ED25519) to the list of known hosts. executing program [ 86.638947][ T5104] FAULT_INJECTION: forcing a failure. [ 86.638947][ T5104] name failslab, interval 1, probability 0, space 0, times 1 [ 86.654146][ T5104] CPU: 0 UID: 0 PID: 5104 Comm: syz-executor211 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 86.657612][ T5104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.662069][ T5104] Call Trace: [ 86.663385][ T5104] [ 86.664169][ T5104] dump_stack_lvl+0x241/0x360 [ 86.665744][ T5104] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.667491][ T5104] ? __pfx__printk+0x10/0x10 [ 86.669254][ T5104] ? kmem_cache_alloc_noprof+0x44/0x2a0 [ 86.672175][ T5104] ? __pfx___might_resched+0x10/0x10 [ 86.674447][ T5104] should_fail_ex+0x3b0/0x4e0 [ 86.677413][ T5104] ? security_file_alloc+0x32/0x310 [ 86.679358][ T5104] should_failslab+0xac/0x100 [ 86.681061][ T5104] ? security_file_alloc+0x32/0x310 [ 86.682582][ T5104] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 86.683944][ T5104] security_file_alloc+0x32/0x310 [ 86.685268][ T5104] init_file+0x93/0x1e0 [ 86.686521][ T5104] alloc_empty_backing_file+0x67/0xe0 [ 86.687856][ T5104] backing_file_open+0x24/0xa0 [ 86.689020][ T5104] ovl_open_realfile+0x1ee/0x350 [ 86.690224][ T5104] ovl_real_fdget_meta+0x339/0x3b0 [ 86.691408][ T5104] ? __pfx_ovl_real_fdget_meta+0x10/0x10 [ 86.692777][ T5104] ovl_llseek+0x1e7/0x3f0 [ 86.694101][ T5104] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 86.696115][ T5104] ? __pfx_ovl_llseek+0x10/0x10 [ 86.697767][ T5104] ? fdget_pos+0x265/0x320 [ 86.699032][ T5104] __x64_sys_lseek+0x150/0x1e0 [ 86.700670][ T5104] do_syscall_64+0xf3/0x230 [ 86.702344][ T5104] ? clear_bhb_loop+0x35/0x90 [ 86.703818][ T5104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.705751][ T5104] RIP: 0033:0x7f6349c038e9 [ 86.707309][ T5104] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 86.713069][ T5104] RSP: 002b:00007ffc93b800f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 86.715219][ T5104] RAX: ffffffffffffffda RBX: 00007ffc93b80110 RCX: 00007f6349c038e9 [ 86.717745][ T5104] RDX: 0000000000000000 RSI: 0000000000010000 RDI: 0000000000000004 [ 86.720671][ T5104] RBP: 0000000000000001 R08: 00007ffc93b7fe97 R09: 00000000000000a0 [ 86.723648][ T5104] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 86.726541][ T5104] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 86.729220][ T5104] [ 86.810615][ T5104] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000022: 0000 [#1] PREEMPT SMP KASAN NOPTI [ 86.815131][ T5104] KASAN: null-ptr-deref in range [0x0000000000000110-0x0000000000000117] [ 86.818603][ T5104] CPU: 0 UID: 0 PID: 5104 Comm: syz-executor211 Not tainted 6.11.0-syzkaller-10669-g11a299a7933e #0 [ 86.822895][ T5104] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 86.827239][ T5104] RIP: 0010:ovl_llseek+0x2a4/0x3f0 [ 86.829340][ T5104] Code: 8d 7c 24 60 e8 ad db e0 fe 48 8b 44 24 60 48 89 44 24 30 48 83 e0 fc 48 89 44 24 20 4c 8d b0 20 01 00 00 4d 89 f7 49 c1 ef 03 <43> 80 3c 27 00 74 08 4c 89 f7 e8 6d dc e0 fe 49 89 1e 48 8b 1c 24 [ 86.836852][ T5104] RSP: 0018:ffffc90002cafe00 EFLAGS: 00010207 [ 86.839226][ T5104] RAX: fffffffffffffff4 RBX: 0000000000000000 RCX: 0000000000000001 [ 86.842512][ T5104] RDX: 0000000000000000 RSI: ffffffff8c610080 RDI: 0000000000000001 [ 86.845690][ T5104] RBP: ffffc90002cafec8 R08: ffffffff901ce56f R09: 1ffffffff2039cad [ 86.848865][ T5104] R10: dffffc0000000000 R11: fffffbfff2039cae R12: dffffc0000000000 [ 86.852002][ T5104] R13: 1ffff1100244a624 R14: 0000000000000114 R15: 0000000000000022 [ 86.855046][ T5104] FS: 0000555560240380(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 86.858393][ T5104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 86.861046][ T5104] CR2: 00007f6349c59226 CR3: 000000003ff6c000 CR4: 0000000000350ef0 [ 86.864286][ T5104] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 86.867478][ T5104] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 86.870694][ T5104] Call Trace: [ 86.872023][ T5104] [ 86.873256][ T5104] ? __die_body+0x5f/0xb0 [ 86.874955][ T5104] ? die_addr+0xb0/0xe0 [ 86.876560][ T5104] ? exc_general_protection+0x3dd/0x5d0 [ 86.878689][ T5104] ? asm_exc_general_protection+0x26/0x30 [ 86.880984][ T5104] ? ovl_llseek+0x2a4/0x3f0 [ 86.882811][ T5104] ? __pfx_ovl_llseek+0x10/0x10 [ 86.884860][ T5104] ? fdget_pos+0x265/0x320 [ 86.886640][ T5104] __x64_sys_lseek+0x150/0x1e0 [ 86.888495][ T5104] do_syscall_64+0xf3/0x230 [ 86.890279][ T5104] ? clear_bhb_loop+0x35/0x90 [ 86.892150][ T5104] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.894400][ T5104] RIP: 0033:0x7f6349c038e9 [ 86.896085][ T5104] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 a1 1a 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 86.903780][ T5104] RSP: 002b:00007ffc93b800f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000008 [ 86.907073][ T5104] RAX: ffffffffffffffda RBX: 00007ffc93b80110 RCX: 00007f6349c038e9 [ 86.910309][ T5104] RDX: 0000000000000000 RSI: 0000000000010000 RDI: 0000000000000004 [ 86.913449][ T5104] RBP: 0000000000000001 R08: 00007ffc93b7fe97 R09: 00000000000000a0 [ 86.916672][ T5104] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000001 [ 86.919864][ T5104] R13: 431bde82d7b634db R14: 0000000000000001 R15: 0000000000000001 [ 86.922992][ T5104] [ 86.924196][ T5104] Modules linked in: [ 86.925992][ T5104] ---[ end trace 0000000000000000 ]--- [ 87.051320][ T5104] RIP: 0010:ovl_llseek+0x2a4/0x3f0 [ 87.053203][ T5104] Code: 8d 7c 24 60 e8 ad db e0 fe 48 8b 44 24 60 48 89 44 24 30 48 83 e0 fc 48 89 44 24 20 4c 8d b0 20 01 00 00 4d 89 f7 49 c1 ef 03 <43> 80 3c 27 00 74 08 4c 89 f7 e8 6d dc e0 fe 49 89 1e 48 8b 1c 24 [ 87.070679][ T5104] RSP: 0018:ffffc90002cafe00 EFLAGS: 00010207 [ 87.073084][ T5104] RAX: fffffffffffffff4 RBX: 0000000000000000 RCX: 0000000000000001 [ 87.076101][ T5104] RDX: 0000000000000000 RSI: ffffffff8c610080 RDI: 0000000000000001 [ 87.079145][ T5104] RBP: ffffc90002cafec8 R08: ffffffff901ce56f R09: 1ffffffff2039cad [ 87.090815][ T5104] R10: dffffc0000000000 R11: fffffbfff2039cae R12: dffffc0000000000 [ 87.093936][ T5104] R13: 1ffff1100244a624 R14: 0000000000000114 R15: 0000000000000022 [ 87.096999][ T5104] FS: 0000555560240380(0000) GS:ffff88801fc00000(0000) knlGS:0000000000000000 [ 87.111298][ T5104] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 87.113930][ T5104] CR2: 00007f6349c59226 CR3: 000000003ff6c000 CR4: 0000000000350ef0 [ 87.121300][ T5104] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 87.124439][ T5104] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 87.137701][ T5104] Kernel panic - not syncing: Fatal exception [ 87.140586][ T5104] Kernel Offset: disabled [ 87.142371][ T5104] Rebooting in 86400 seconds.. VM DIAGNOSIS: 17:04:43 Registers: info registers vcpu 0 CPU#0 RAX=0000000000000078 RBX=ffffffff9a704e60 RCX=0000000000000000 RDX=00000000000003f8 RSI=0000000000000000 RDI=0000000000000020 RBP=0000000000000000 RSP=ffffc90002caf530 R8 =ffffffff854925cb R9 =1ffff1100676c046 R10=dffffc0000000000 R11=ffffffff85492580 R12=dffffc0000000000 R13=ffffffff9a3fff2c R14=0000000000000078 R15=00000000000003f8 RIP=ffffffff854925fe RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 0000555560240380 ffffffff 00c00000 GS =0000 ffff88801fc00000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f6349c59226 CR3=000000003ff6c000 CR4=00350ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000fffe0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=00000000fffffffe Opmask01=0000000000000001 Opmask02=00000000fff7ffff Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffc93b80100 0000003000000010 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6349c7b2e0 00007f6349c6f558 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f6349c61164 00007f6349c74240 ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2f2e2e0000000000 0000000000000000 0000010000000000 0000000000000030 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0a0b0b0000000000 0000000000000000 0000010000000000 0000000000000015 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000