Warning: Permanently added '10.128.10.20' (ECDSA) to the list of known hosts. 2022/05/23 19:50:52 parsed 1 programs [ 36.601843][ T23] audit: type=1400 audit(1653335452.160:148): avc: denied { mounton } for pid=403 comm="syz-executor" path="/syzcgroup/unified" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 36.602422][ T403] cgroup: Unknown subsys name 'net' [ 36.630955][ T403] cgroup: Unknown subsys name 'devices' [ 36.637351][ T403] cgroup: Unknown subsys name 'hugetlb' [ 36.643377][ T403] cgroup: Unknown subsys name 'rlimit' 2022/05/23 19:50:52 executed programs: 0 [ 36.649329][ T23] audit: type=1400 audit(1653335452.210:149): avc: denied { mounton } for pid=403 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.723482][ T23] audit: type=1400 audit(1653335452.210:150): avc: denied { mount } for pid=403 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 36.747068][ T23] audit: type=1400 audit(1653335452.240:151): avc: denied { mounton } for pid=409 comm="syz-executor.2" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 36.771524][ T23] audit: type=1400 audit(1653335452.240:152): avc: denied { module_request } for pid=409 comm="syz-executor.2" kmod="netdev-nr2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 36.791836][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.800720][ T414] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.808359][ T414] device bridge_slave_0 entered promiscuous mode [ 36.818378][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.825846][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.833163][ T409] device bridge_slave_0 entered promiscuous mode [ 36.842614][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.849731][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.857094][ T409] device bridge_slave_1 entered promiscuous mode [ 36.867746][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.874875][ T414] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.882161][ T414] device bridge_slave_1 entered promiscuous mode [ 36.897641][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.904825][ T411] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.912262][ T411] device bridge_slave_0 entered promiscuous mode [ 36.927356][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.934419][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.941609][ T416] device bridge_slave_0 entered promiscuous mode [ 36.948344][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.955412][ T411] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.962724][ T411] device bridge_slave_1 entered promiscuous mode [ 36.977505][ T417] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.984687][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.991894][ T417] device bridge_slave_0 entered promiscuous mode [ 36.998510][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.005638][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.013301][ T416] device bridge_slave_1 entered promiscuous mode [ 37.031531][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.038780][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.046192][ T417] device bridge_slave_1 entered promiscuous mode [ 37.096733][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.103910][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.111456][ T415] device bridge_slave_0 entered promiscuous mode [ 37.124057][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.131113][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.138605][ T415] device bridge_slave_1 entered promiscuous mode [ 37.168461][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.175607][ T417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.182835][ T417] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.189978][ T417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.208567][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.215683][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.223260][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.230259][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.247632][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.254694][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.262088][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.269309][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.277623][ T414] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.284659][ T414] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.291855][ T414] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.298863][ T414] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.312023][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.319065][ T416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.326298][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.333352][ T416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.365561][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.372793][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.380035][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.387808][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.394965][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.402031][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.409235][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.416605][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.423792][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.430962][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.439227][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.447689][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.462386][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.470368][ T19] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.497728][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.506731][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.514678][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.523162][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.530167][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.537751][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.545844][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.552866][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.560114][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.567978][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.582346][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.607463][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.615719][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.624911][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.633376][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.641706][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.650052][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.657418][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.664822][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.672960][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.679967][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.687381][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.695268][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.703142][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.711166][ T24] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.718179][ T24] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.725647][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.733775][ T24] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.740808][ T24] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.748728][ T24] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.774748][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.783684][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.791795][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.800008][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.807446][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.815798][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.824135][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.832357][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.840389][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.847408][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.854809][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.862949][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.871517][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.879964][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.888040][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.895047][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.902440][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.910578][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.918913][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.926621][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.934509][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.942558][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.950519][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.958686][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.966873][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.975029][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.983303][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.991190][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.004821][ T23] audit: type=1400 audit(1653335453.570:153): avc: denied { mount } for pid=411 comm="syz-executor.0" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 38.038738][ T440] FAULT_INJECTION: forcing a failure. [ 38.038738][ T440] name failslab, interval 1, probability 0, space 0, times 1 [ 38.062812][ T440] CPU: 1 PID: 440 Comm: syz-executor.5 Not tainted 5.10.117-syzkaller-986967-g0974b8411a58-dirty #0 [ 38.073841][ T440] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.083940][ T440] Call Trace: [ 38.087216][ T440] dump_stack_lvl+0x1e2/0x24b [ 38.091901][ T440] ? panic+0x7d7/0x7d7 [ 38.095942][ T440] ? bfq_pos_tree_add_move+0x43e/0x43e [ 38.101403][ T440] ? find_next_bit+0xd6/0x120 [ 38.106054][ T440] ? cpumask_next+0x11/0x30 [ 38.110530][ T440] dump_stack+0x15/0x17 [ 38.114669][ T440] should_fail+0x3c0/0x510 [ 38.119053][ T440] ? percpu_ref_init+0xd0/0x330 [ 38.123876][ T440] __should_failslab+0x9f/0xe0 [ 38.128617][ T440] should_failslab+0x9/0x20 [ 38.133100][ T440] kmem_cache_alloc_trace+0x3a/0x330 [ 38.138354][ T440] percpu_ref_init+0xd0/0x330 [ 38.143100][ T440] ? cgroup_setup_root+0xea0/0xea0 [ 38.148180][ T440] cgroup_apply_control_enable+0x3a2/0x12f0 [ 38.154040][ T440] ? cgroup_reconfigure+0xe0/0xe0 [ 38.159205][ T440] cgroup_apply_control+0x93/0x710 [ 38.164294][ T440] ? css_next_child+0x160/0x160 [ 38.169113][ T440] ? io_schedule+0x120/0x120 [ 38.173678][ T440] ? kernfs_fop_write_iter+0x15e/0x410 [ 38.179105][ T440] ? __kasan_check_write+0x14/0x20 [ 38.184182][ T440] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 38.189438][ T440] cgroup_subtree_control_write+0xd19/0x1310 [ 38.195392][ T440] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 38.201340][ T440] ? __kasan_check_write+0x14/0x20 [ 38.206427][ T440] ? _copy_from_iter+0x3fb/0xd60 [ 38.211332][ T440] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 38.217279][ T440] cgroup_file_write+0x28e/0x590 [ 38.222185][ T440] ? cgroup_seqfile_stop+0xc0/0xc0 [ 38.227359][ T440] ? mutex_lock+0xa6/0x110 [ 38.231749][ T440] ? mutex_trylock+0xb0/0xb0 [ 38.236310][ T440] ? __kasan_check_write+0x14/0x20 [ 38.241390][ T440] kernfs_fop_write_iter+0x2d0/0x410 [ 38.246743][ T440] ? cgroup_seqfile_stop+0xc0/0xc0 [ 38.251911][ T440] vfs_write+0xc1c/0xf40 [ 38.256122][ T440] ? kernel_write+0x3c0/0x3c0 [ 38.260768][ T440] ? mutex_trylock+0xb0/0xb0 [ 38.265327][ T440] ? __fdget_pos+0x26d/0x310 [ 38.269887][ T440] ? ksys_write+0x77/0x2c0 [ 38.274305][ T440] ksys_write+0x198/0x2c0 [ 38.278602][ T440] ? __ia32_sys_read+0x90/0x90 [ 38.283333][ T440] ? debug_smp_processor_id+0x17/0x20 [ 38.288680][ T440] __x64_sys_write+0x7b/0x90 [ 38.293386][ T440] do_syscall_64+0x34/0x70 [ 38.297774][ T440] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 38.303639][ T440] RIP: 0033:0x7f399e0d6049 [ 38.308030][ T440] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 38.327609][ T440] RSP: 002b:00007f399e04c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 38.335990][ T440] RAX: ffffffffffffffda RBX: 00007f399e1e8f60 RCX: 00007f399e0d6049 [ 38.343932][ T440] RDX: 0000000000000006 RSI: 0000000020000140 RDI: 0000000000000004 [ 38.351870][ T440] RBP: 00007f399e04c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 38.359811][ T440] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.367758][ T440] R13: 00007ffd698e77af R14: 00007f399e04c300 R15: 0000000000022000 [ 38.376543][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.385224][ T442] FAULT_INJECTION: forcing a failure. [ 38.385224][ T442] name failslab, interval 1, probability 0, space 0, times 0 [ 38.385433][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.406389][ T442] CPU: 0 PID: 442 Comm: syz-executor.0 Not tainted 5.10.117-syzkaller-986967-g0974b8411a58-dirty #0 [ 38.406394][ T442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.406397][ T442] Call Trace: [ 38.406412][ T442] dump_stack_lvl+0x1e2/0x24b [ 38.406420][ T442] ? panic+0x7d7/0x7d7 [ 38.406428][ T442] ? bfq_pos_tree_add_move+0x43e/0x43e [ 38.406437][ T442] ? find_next_bit+0xd6/0x120 [ 38.406445][ T442] ? cpumask_next+0x11/0x30 [ 38.406453][ T442] dump_stack+0x15/0x17 [ 38.406460][ T442] should_fail+0x3c0/0x510 [ 38.406468][ T442] ? percpu_ref_init+0xd0/0x330 [ 38.406478][ T442] __should_failslab+0x9f/0xe0 [ 38.406487][ T442] should_failslab+0x9/0x20 [ 38.406496][ T442] kmem_cache_alloc_trace+0x3a/0x330 [ 38.406504][ T442] percpu_ref_init+0xd0/0x330 [ 38.406514][ T442] ? cgroup_setup_root+0xea0/0xea0 [ 38.406524][ T442] cgroup_apply_control_enable+0x3a2/0x12f0 [ 38.406531][ T442] ? cgroup_reconfigure+0xe0/0xe0 [ 38.406541][ T442] cgroup_apply_control+0x93/0x710 [ 38.406550][ T442] ? css_next_child+0x160/0x160 [ 38.406558][ T442] ? io_schedule+0x120/0x120 [ 38.406568][ T442] ? kernfs_fop_write_iter+0x15e/0x410 [ 38.406576][ T442] ? __kasan_check_write+0x14/0x20 [ 38.406585][ T442] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 38.406599][ T442] cgroup_subtree_control_write+0xd19/0x1310 [ 38.418159][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.427377][ T442] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 38.427386][ T442] ? __kasan_check_write+0x14/0x20 [ 38.427394][ T442] ? _copy_from_iter+0x3fb/0xd60 [ 38.427408][ T442] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 38.431080][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.435317][ T442] cgroup_file_write+0x28e/0x590 [ 38.435325][ T442] ? cgroup_seqfile_stop+0xc0/0xc0 [ 38.435338][ T442] ? mutex_lock+0xa6/0x110 [ 38.439507][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.444799][ T442] ? mutex_trylock+0xb0/0xb0 [ 38.444807][ T442] ? __kasan_check_write+0x14/0x20 [ 38.444820][ T442] kernfs_fop_write_iter+0x2d0/0x410 [ 38.449597][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.453932][ T442] ? cgroup_seqfile_stop+0xc0/0xc0 [ 38.453947][ T442] vfs_write+0xc1c/0xf40 [ 38.458199][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.462461][ T442] ? kernel_write+0x3c0/0x3c0 [ 38.462474][ T442] ? mutex_trylock+0xb0/0xb0 [ 38.467415][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.472022][ T442] ? __fdget_pos+0x26d/0x310 [ 38.472028][ T442] ? ksys_write+0x77/0x2c0 [ 38.472040][ T442] ksys_write+0x198/0x2c0 [ 38.476719][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.481846][ T442] ? __ia32_sys_read+0x90/0x90 [ 38.481859][ T442] ? debug_smp_processor_id+0x17/0x20 [ 38.486705][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.491580][ T442] __x64_sys_write+0x7b/0x90 [ 38.491593][ T442] do_syscall_64+0x34/0x70 [ 38.497616][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.503497][ T442] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 38.503511][ T442] RIP: 0033:0x7f53d52ee049 [ 38.508753][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.513413][ T442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 38.513423][ T442] RSP: 002b:00007f53d5264168 EFLAGS: 00000246 [ 38.518118][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.523411][ T442] ORIG_RAX: 0000000000000001 [ 38.523418][ T442] RAX: ffffffffffffffda RBX: 00007f53d5400f60 RCX: 00007f53d52ee049 [ 38.523428][ T442] RDX: 0000000000000006 RSI: 0000000020000140 RDI: 0000000000000004 [ 38.528703][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.533779][ T442] RBP: 00007f53d52641d0 R08: 0000000000000000 R09: 0000000000000000 [ 38.533784][ T442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.533789][ T442] R13: 00007ffe1fb3264f R14: 00007f53d5264300 R15: 0000000000022000 [ 38.543177][ T23] audit: type=1400 audit(1653335454.100:154): avc: denied { append } for pid=142 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.556413][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.559110][ T23] audit: type=1400 audit(1653335454.100:155): avc: denied { open } for pid=142 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.565771][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.570650][ T23] audit: type=1400 audit(1653335454.100:156): avc: denied { getattr } for pid=142 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 38.578654][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.585569][ T446] FAULT_INJECTION: forcing a failure. [ 38.585569][ T446] name failslab, interval 1, probability 0, space 0, times 0 [ 38.589566][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.593852][ T446] CPU: 0 PID: 446 Comm: syz-executor.5 Not tainted 5.10.117-syzkaller-986967-g0974b8411a58-dirty #0 [ 38.601913][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.606094][ T446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.606098][ T446] Call Trace: [ 38.606112][ T446] dump_stack_lvl+0x1e2/0x24b [ 38.606125][ T446] ? panic+0x7d7/0x7d7 [ 38.611369][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.616455][ T446] ? bfq_pos_tree_add_move+0x43e/0x43e [ 38.616463][ T446] ? find_next_bit+0xd6/0x120 [ 38.616476][ T446] ? cpumask_next+0x11/0x30 [ 38.624495][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.629423][ T446] dump_stack+0x15/0x17 [ 38.629430][ T446] should_fail+0x3c0/0x510 [ 38.629443][ T446] ? percpu_ref_init+0xd0/0x330 [ 38.633811][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.641424][ T446] __should_failslab+0x9f/0xe0 [ 38.641432][ T446] should_failslab+0x9/0x20 [ 38.641445][ T446] kmem_cache_alloc_trace+0x3a/0x330 [ 38.646520][ T378] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.650654][ T446] percpu_ref_init+0xd0/0x330 [ 38.650662][ T446] ? cgroup_setup_root+0xea0/0xea0 [ 38.650677][ T446] cgroup_apply_control_enable+0x3a2/0x12f0 [ 38.658372][ T378] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.662927][ T446] ? cgroup_reconfigure+0xe0/0xe0 [ 38.662940][ T446] cgroup_apply_control+0x93/0x710 [ 38.667524][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.672076][ T446] ? css_next_child+0x160/0x160 [ 38.672090][ T446] ? io_schedule+0x120/0x120 [ 38.680113][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.684686][ T446] ? kernfs_fop_write_iter+0x15e/0x410 [ 38.684694][ T446] ? __kasan_check_write+0x14/0x20 [ 38.684707][ T446] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 38.690160][ T378] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.697728][ T446] cgroup_subtree_control_write+0xd19/0x1310 [ 38.697738][ T446] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 38.697751][ T446] ? __kasan_check_write+0x14/0x20 [ 38.702340][ T378] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.706729][ T446] ? _copy_from_iter+0x3fb/0xd60 [ 38.714692][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.720370][ T446] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 38.720378][ T446] cgroup_file_write+0x28e/0x590 [ 38.720392][ T446] ? cgroup_seqfile_stop+0xc0/0xc0 [ 38.725005][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.732466][ T446] ? mutex_lock+0xa6/0x110 [ 38.732475][ T446] ? mutex_trylock+0xb0/0xb0 [ 38.732483][ T446] ? __kasan_check_write+0x14/0x20 [ 38.732498][ T446] kernfs_fop_write_iter+0x2d0/0x410 [ 38.752537][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.758380][ T446] ? cgroup_seqfile_stop+0xc0/0xc0 [ 38.758389][ T446] vfs_write+0xc1c/0xf40 [ 38.758403][ T446] ? kernel_write+0x3c0/0x3c0 [ 38.766990][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.771375][ T446] ? mutex_trylock+0xb0/0xb0 [ 38.771386][ T446] ? __fdget_pos+0x26d/0x310 [ 38.771402][ T446] ? ksys_write+0x77/0x2c0 [ 38.779687][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.787424][ T446] ksys_write+0x198/0x2c0 [ 38.787434][ T446] ? __ia32_sys_read+0x90/0x90 [ 38.787442][ T446] ? debug_smp_processor_id+0x17/0x20 [ 38.787456][ T446] __x64_sys_write+0x7b/0x90 [ 38.795684][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.803617][ T446] do_syscall_64+0x34/0x70 [ 38.803626][ T446] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 38.803633][ T446] RIP: 0033:0x7f399e0d6049 [ 38.803646][ T446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 38.811821][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.819622][ T446] RSP: 002b:00007f399e04c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 38.819633][ T446] RAX: ffffffffffffffda RBX: 00007f399e1e8f60 RCX: 00007f399e0d6049 [ 38.819645][ T446] RDX: 0000000000000006 RSI: 0000000020000140 RDI: 0000000000000004 [ 38.842370][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.850037][ T446] RBP: 00007f399e04c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 38.850047][ T446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 38.850059][ T446] R13: 00007ffd698e77af R14: 00007f399e04c300 R15: 0000000000022000 [ 38.873238][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.885052][ T447] FAULT_INJECTION: forcing a failure. [ 38.885052][ T447] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 38.904812][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.911936][ T447] CPU: 0 PID: 447 Comm: syz-executor.0 Not tainted 5.10.117-syzkaller-986967-g0974b8411a58-dirty #0 [ 38.926523][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.933891][ T447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 38.933895][ T447] Call Trace: [ 38.933910][ T447] dump_stack_lvl+0x1e2/0x24b [ 38.933925][ T447] ? bfq_pos_tree_add_move+0x43e/0x43e [ 38.945036][ T378] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.952548][ T447] ? arch_stack_walk+0xf8/0x140 [ 38.952556][ T447] dump_stack+0x15/0x17 [ 38.952570][ T447] should_fail+0x3c0/0x510 [ 39.485543][ T447] should_fail_alloc_page+0x50/0x60 [ 39.490899][ T447] __alloc_pages_nodemask+0x1c0/0x890 [ 39.496286][ T447] ? gfp_pfmemalloc_allowed+0x120/0x120 [ 39.501800][ T447] ? save_stack+0x1c4/0x240 [ 39.506534][ T447] allocate_slab+0x78/0x540 [ 39.511009][ T447] ___slab_alloc+0x131/0x2e0 [ 39.515578][ T447] ? pids_css_alloc+0x4e/0x120 [ 39.520312][ T447] __slab_alloc+0x63/0xa0 [ 39.524710][ T447] ? pids_css_alloc+0x4e/0x120 [ 39.529992][ T447] kmem_cache_alloc_trace+0x20e/0x330 [ 39.535431][ T447] ? pids_css_alloc+0x4e/0x120 [ 39.540174][ T447] pids_css_alloc+0x4e/0x120 [ 39.544845][ T447] cgroup_apply_control_enable+0x350/0x12f0 [ 39.551077][ T447] ? cgroup_reconfigure+0xe0/0xe0 [ 39.556194][ T447] cgroup_apply_control+0x93/0x710 [ 39.561288][ T447] ? css_next_child+0x160/0x160 [ 39.566131][ T447] ? io_schedule+0x120/0x120 [ 39.570880][ T447] ? kernfs_fop_write_iter+0x15e/0x410 [ 39.576408][ T447] ? __kasan_check_write+0x14/0x20 [ 39.581506][ T447] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 39.586935][ T447] cgroup_subtree_control_write+0xd19/0x1310 [ 39.593059][ T447] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 39.599193][ T447] ? __kasan_check_write+0x14/0x20 [ 39.604290][ T447] ? _copy_from_iter+0x3fb/0xd60 [ 39.609206][ T447] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 39.615351][ T447] cgroup_file_write+0x28e/0x590 [ 39.620528][ T447] ? cgroup_seqfile_stop+0xc0/0xc0 [ 39.625609][ T447] ? mutex_lock+0xa6/0x110 [ 39.629996][ T447] ? mutex_trylock+0xb0/0xb0 [ 39.634560][ T447] ? __kasan_check_write+0x14/0x20 [ 39.639650][ T447] kernfs_fop_write_iter+0x2d0/0x410 [ 39.644930][ T447] ? cgroup_seqfile_stop+0xc0/0xc0 [ 39.650010][ T447] vfs_write+0xc1c/0xf40 [ 39.654220][ T447] ? kernel_write+0x3c0/0x3c0 [ 39.658864][ T447] ? mutex_trylock+0xb0/0xb0 [ 39.663429][ T447] ? __fdget_pos+0x26d/0x310 [ 39.668177][ T447] ? ksys_write+0x77/0x2c0 [ 39.672567][ T447] ksys_write+0x198/0x2c0 [ 39.676864][ T447] ? __ia32_sys_read+0x90/0x90 [ 39.681595][ T447] ? debug_smp_processor_id+0x17/0x20 [ 39.686935][ T447] __x64_sys_write+0x7b/0x90 [ 39.691492][ T447] do_syscall_64+0x34/0x70 [ 39.695875][ T447] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 39.701733][ T447] RIP: 0033:0x7f53d52ee049 [ 39.706121][ T447] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 39.725707][ T447] RSP: 002b:00007f53d5243168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 39.734092][ T447] RAX: ffffffffffffffda RBX: 00007f53d5401030 RCX: 00007f53d52ee049 [ 39.742034][ T447] RDX: 0000000000000006 RSI: 0000000020000140 RDI: 0000000000000004 [ 39.749974][ T447] RBP: 00007f53d52431d0 R08: 0000000000000000 R09: 0000000000000000 [ 39.757915][ T447] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 39.765863][ T447] R13: 00007ffe1fb3264f R14: 00007f53d5243300 R15: 0000000000022000 [ 39.798829][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.803614][ T450] FAULT_INJECTION: forcing a failure. [ 39.803614][ T450] name failslab, interval 1, probability 0, space 0, times 0 [ 39.808198][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.819640][ T450] CPU: 1 PID: 450 Comm: syz-executor.5 Not tainted 5.10.117-syzkaller-986967-g0974b8411a58-dirty #0 [ 39.819645][ T450] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 39.819649][ T450] Call Trace: [ 39.819664][ T450] dump_stack_lvl+0x1e2/0x24b [ 39.819672][ T450] ? panic+0x7d7/0x7d7 [ 39.819680][ T450] ? bfq_pos_tree_add_move+0x43e/0x43e [ 39.819695][ T450] ? find_next_bit+0xd6/0x120 [ 39.819703][ T450] ? cpumask_next+0x11/0x30 [ 39.819711][ T450] dump_stack+0x15/0x17 [ 39.819718][ T450] should_fail+0x3c0/0x510 [ 39.819727][ T450] ? percpu_ref_init+0xd0/0x330 [ 39.819736][ T450] __should_failslab+0x9f/0xe0 [ 39.819745][ T450] should_failslab+0x9/0x20 [ 39.819753][ T450] kmem_cache_alloc_trace+0x3a/0x330 [ 39.819761][ T450] percpu_ref_init+0xd0/0x330 [ 39.819770][ T450] ? cgroup_setup_root+0xea0/0xea0 [ 39.819779][ T450] cgroup_apply_control_enable+0x3a2/0x12f0 [ 39.819787][ T450] ? cgroup_reconfigure+0xe0/0xe0 [ 39.819805][ T450] cgroup_apply_control+0x93/0x710 [ 39.830248][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.838835][ T450] ? css_next_child+0x160/0x160 [ 39.838844][ T450] ? io_schedule+0x120/0x120 [ 39.838852][ T450] ? kernfs_fop_write_iter+0x15e/0x410 [ 39.838868][ T450] ? __kasan_check_write+0x14/0x20 [ 39.849205][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.852241][ T450] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 39.852250][ T450] cgroup_subtree_control_write+0xd19/0x1310 [ 39.852259][ T450] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 39.852267][ T450] ? __kasan_check_write+0x14/0x20 [ 39.852276][ T450] ? _copy_from_iter+0x3fb/0xd60 [ 39.852283][ T450] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 39.852290][ T450] cgroup_file_write+0x28e/0x590 [ 39.852297][ T450] ? cgroup_seqfile_stop+0xc0/0xc0 [ 39.852304][ T450] ? mutex_lock+0xa6/0x110 [ 39.852317][ T450] ? mutex_trylock+0xb0/0xb0 [ 39.857004][ C0] ================================================================== [ 39.861006][ T450] ? __kasan_check_write+0x14/0x20 [ 39.866433][ C0] BUG: KASAN: use-after-free in ip6_pol_route+0x12cd/0x15c0 [ 39.871076][ T450] kernfs_fop_write_iter+0x2d0/0x410 [ 39.875547][ C0] Read of size 4 at addr ffff88810ff8b2f8 by task kworker/0:3/377 [ 39.879703][ T450] ? cgroup_seqfile_stop+0xc0/0xc0 [ 39.884082][ C0] [ 39.888996][ T450] vfs_write+0xc1c/0xf40 [ 40.062031][ T450] ? kernel_write+0x3c0/0x3c0 [ 40.066696][ T450] ? mutex_trylock+0xb0/0xb0 [ 40.071264][ T450] ? __fdget_pos+0x26d/0x310 [ 40.075833][ T450] ? ksys_write+0x77/0x2c0 [ 40.080223][ T450] ksys_write+0x198/0x2c0 [ 40.084526][ T450] ? __ia32_sys_read+0x90/0x90 [ 40.089264][ T450] ? debug_smp_processor_id+0x17/0x20 [ 40.094607][ T450] __x64_sys_write+0x7b/0x90 [ 40.099170][ T450] do_syscall_64+0x34/0x70 [ 40.103563][ T450] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 40.109440][ T450] RIP: 0033:0x7f399e0d6049 [ 40.113830][ T450] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 40.133757][ T450] RSP: 002b:00007f399e02b168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 40.142838][ T450] RAX: ffffffffffffffda RBX: 00007f399e1e9030 RCX: 00007f399e0d6049 [ 40.150786][ T450] RDX: 0000000000000006 RSI: 0000000020000140 RDI: 0000000000000004 [ 40.158734][ T450] RBP: 00007f399e02b1d0 R08: 0000000000000000 R09: 0000000000000000 [ 40.166681][ T450] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 40.174629][ T450] R13: 00007ffd698e77af R14: 00007f399e02b300 R15: 0000000000022000 [ 40.182769][ C0] CPU: 0 PID: 377 Comm: kworker/0:3 Not tainted 5.10.117-syzkaller-986967-g0974b8411a58-dirty #0 [ 40.186799][ T453] FAULT_INJECTION: forcing a failure. [ 40.186799][ T453] name failslab, interval 1, probability 0, space 0, times 0 [ 40.193349][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.193363][ C0] Workqueue: events linkwatch_event [ 40.193371][ C0] Call Trace: [ 40.193374][ C0] [ 40.193385][ C0] dump_stack_lvl+0x1e2/0x24b [ 40.193394][ C0] ? bfq_pos_tree_add_move+0x43e/0x43e [ 40.193402][ C0] ? panic+0x7d7/0x7d7 [ 40.193412][ C0] print_address_description+0x81/0x3c0 [ 40.193420][ C0] kasan_report+0x1a4/0x1f0 [ 40.193427][ C0] ? ip6_pol_route+0x12cd/0x15c0 [ 40.193434][ C0] ? ip6_pol_route+0x12cd/0x15c0 [ 40.193443][ C0] __asan_report_load4_noabort+0x14/0x20 [ 40.193449][ C0] ip6_pol_route+0x12cd/0x15c0 [ 40.193457][ C0] ? fib6_table_lookup+0xae0/0xae0 [ 40.193466][ C0] ? dev_queue_xmit+0x20/0x20 [ 40.193474][ C0] ? selinux_ip_postroute+0x2ae/0x1310 [ 40.193489][ C0] ? selinux_ipv6_output+0x10/0x10 [ 40.294268][ C0] ip6_pol_route_input+0x54/0x80 [ 40.299184][ C0] fib6_rule_lookup+0x259/0x600 [ 40.304103][ C0] ? ip6_route_input_lookup+0xd0/0xd0 [ 40.309447][ C0] ? fib6_lookup+0x3f0/0x3f0 [ 40.314010][ C0] ? __ip6_finish_output+0x810/0x810 [ 40.319273][ C0] ? linkwatch_event+0x4c/0x60 [ 40.324012][ C0] ? process_one_work+0x726/0xc10 [ 40.329013][ C0] ? __ipv6_addr_type+0x15b/0x2f0 [ 40.334009][ C0] ip6_route_input+0x736/0xb30 [ 40.338745][ C0] ? ipv6_hop_ra+0xa2/0x210 [ 40.343239][ C0] ? ip6_multipath_l3_keys+0x600/0x600 [ 40.348683][ C0] ? skb_orphan+0x4d/0xd0 [ 40.353073][ C0] ipv6_rcv+0x260/0x550 [ 40.357203][ C0] ? ip6_rcv_finish+0x2c0/0x2c0 [ 40.362025][ C0] ? add_grec+0x13d0/0x13d0 [ 40.366509][ C0] ? ip6_rcv_finish+0x2c0/0x2c0 [ 40.371334][ C0] __netif_receive_skb+0x1c5/0x500 [ 40.376506][ C0] ? deliver_ptype_list_skb+0x1a0/0x1a0 [ 40.382031][ C0] ? __kasan_check_write+0x14/0x20 [ 40.387115][ C0] ? _raw_spin_lock+0xa3/0x1b0 [ 40.391853][ C0] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 40.397370][ C0] ? __kasan_check_write+0x14/0x20 [ 40.402459][ C0] process_backlog+0x352/0x690 [ 40.407200][ C0] napi_poll+0x1a3/0x650 [ 40.411428][ C0] net_rx_action+0x387/0x970 [ 40.415991][ C0] ? net_tx_action+0x8f0/0x8f0 [ 40.420738][ C0] ? irqtime_account_irq+0x76/0x270 [ 40.426000][ C0] __do_softirq+0x27e/0x596 [ 40.430481][ C0] asm_call_irq_on_stack+0xf/0x20 [ 40.435475][ C0] [ 40.438393][ C0] do_softirq_own_stack+0x60/0x80 [ 40.443391][ C0] do_softirq+0xca/0x110 [ 40.447610][ C0] ? __local_bh_enable_ip+0x80/0x80 [ 40.452785][ C0] __local_bh_enable_ip+0x70/0x80 [ 40.457870][ C0] _raw_read_unlock_bh+0x29/0x30 [ 40.462782][ C0] ipv6_mc_up+0x238/0x2c0 [ 40.467086][ C0] addrconf_add_dev+0x1ab/0x620 [ 40.471910][ C0] ? local_bh_enable+0x30/0x30 [ 40.476658][ C0] ? log_output+0x4d0/0x4d0 [ 40.481137][ C0] ? atomic_notifier_call_chain+0xf5/0x110 [ 40.486919][ C0] ? call_fib_notifiers+0x9f/0xc0 [ 40.492176][ C0] ? vprintk_default+0x26/0x30 [ 40.496999][ C0] ? vprintk_func+0x19d/0x1e0 [ 40.501651][ C0] ? __kasan_check_read+0x11/0x20 [ 40.506650][ C0] addrconf_dev_config+0x237/0x570 [ 40.511734][ C0] ? init_loopback+0x1d0/0x1d0 [ 40.516478][ C0] ? addrconf_link_ready+0xfa/0x1e0 [ 40.521651][ C0] addrconf_notify+0x8d9/0xe90 [ 40.526392][ C0] ? failover_event+0xe6/0x7b0 [ 40.531132][ C0] raw_notifier_call_chain+0x9e/0x110 [ 40.536483][ C0] netdev_state_change+0x1ba/0x280 [ 40.541568][ C0] ? netdev_features_change+0x1a0/0x1a0 [ 40.547093][ C0] ? rfc2863_policy+0x23c/0x2b0 [ 40.552004][ C0] linkwatch_do_dev+0xfe/0x140 [ 40.556743][ C0] __linkwatch_run_queue+0x4f5/0x7f0 [ 40.562005][ C0] ? __mutex_lock_slowpath+0xe/0x10 [ 40.567192][ C0] ? linkwatch_run_queue+0x20/0x20 [ 40.572285][ C0] ? __kasan_check_read+0x11/0x20 [ 40.577631][ C0] linkwatch_event+0x4c/0x60 [ 40.582201][ C0] process_one_work+0x726/0xc10 [ 40.587025][ C0] worker_thread+0xb27/0x1550 [ 40.591677][ C0] kthread+0x349/0x3d0 [ 40.595722][ C0] ? worker_clr_flags+0x180/0x180 [ 40.600730][ C0] ? kthread_blkcg+0xd0/0xd0 [ 40.605294][ C0] ret_from_fork+0x1f/0x30 [ 40.609779][ C0] [ 40.609788][ T453] CPU: 1 PID: 453 Comm: syz-executor.4 Not tainted 5.10.117-syzkaller-986967-g0974b8411a58-dirty #0 [ 40.609797][ T453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 40.612107][ C0] Allocated by task 377: [ 40.622834][ T453] Call Trace: [ 40.632865][ C0] __kasan_slab_alloc+0xb2/0xe0 [ 40.637086][ T453] dump_stack_lvl+0x1e2/0x24b [ 40.640335][ C0] kmem_cache_alloc+0x16c/0x300 [ 40.645237][ T453] ? panic+0x7d7/0x7d7 [ 40.649996][ C0] dst_alloc+0x187/0x590 [ 40.654822][ T453] ? bfq_pos_tree_add_move+0x43e/0x43e [ 40.659115][ C0] ip6_pol_route+0xd06/0x15c0 [ 40.663327][ T453] ? find_next_bit+0xd6/0x120 [ 40.668837][ C0] ip6_pol_route_input+0x54/0x80 [ 40.673481][ T453] ? cpumask_next+0x11/0x30 [ 40.678123][ C0] fib6_rule_lookup+0x259/0x600 [ 40.683026][ T453] dump_stack+0x15/0x17 [ 40.687494][ C0] ip6_route_input+0x736/0xb30 [ 40.692313][ T453] should_fail+0x3c0/0x510 [ 40.696441][ C0] ipv6_rcv+0x260/0x550 [ 40.701175][ T453] ? percpu_ref_init+0xd0/0x330 [ 40.705558][ C0] __netif_receive_skb+0x1c5/0x500 [ 40.709693][ T453] __should_failslab+0x9f/0xe0 [ 40.714515][ C0] process_backlog+0x352/0x690 [ 40.719592][ T453] should_failslab+0x9/0x20 [ 40.719605][ T453] kmem_cache_alloc_trace+0x3a/0x330 [ 40.724334][ C0] napi_poll+0x1a3/0x650 [ 40.729077][ T453] percpu_ref_init+0xd0/0x330 [ 40.733548][ C0] net_rx_action+0x387/0x970 [ 40.738799][ T453] ? cgroup_setup_root+0xea0/0xea0 [ 40.743009][ C0] __do_softirq+0x27e/0x596 [ 40.747686][ T453] cgroup_apply_control_enable+0x3a2/0x12f0 [ 40.752334][ C0] [ 40.757448][ T453] ? cgroup_reconfigure+0xe0/0xe0 [ 40.761922][ C0] Freed by task 377: [ 40.767792][ T453] cgroup_apply_control+0x93/0x710 [ 40.770095][ C0] kasan_set_track+0x4c/0x80 [ 40.775261][ T453] ? css_next_child+0x160/0x160 [ 40.779124][ C0] kasan_set_free_info+0x23/0x40 [ 40.784204][ T453] ? io_schedule+0x120/0x120 [ 40.788763][ C0] ____kasan_slab_free+0x121/0x160 [ 40.793597][ T453] ? kernfs_fop_write_iter+0x15e/0x410 [ 40.798505][ C0] __kasan_slab_free+0x11/0x20 [ 40.803064][ T453] ? __kasan_check_write+0x14/0x20 [ 40.808145][ C0] slab_free_freelist_hook+0xcc/0x1a0 [ 40.813576][ T453] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 40.818305][ C0] kmem_cache_free+0xa9/0x1f0 [ 40.823555][ T453] cgroup_subtree_control_write+0xd19/0x1310 [ 40.828982][ C0] dst_destroy+0x244/0x330 [ 40.834581][ T453] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 40.839579][ C0] dst_release_immediate+0x90/0xe0 [ 40.845527][ T453] ? __kasan_check_write+0x14/0x20 [ 40.850000][ C0] rt_fibinfo_free_cpus+0xf6/0x1c0 [ 40.855947][ T453] ? _copy_from_iter+0x3fb/0xd60 [ 40.861023][ C0] fib_nh_common_release+0x8d/0x240 [ 40.866103][ T453] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 40.871182][ C0] free_fib_info_rcu+0x98/0x190 [ 40.876094][ T453] cgroup_file_write+0x28e/0x590 [ 40.881269][ C0] rcu_do_batch+0x59e/0xc40 [ 40.887301][ T453] ? cgroup_seqfile_stop+0xc0/0xc0 [ 40.892115][ C0] rcu_core+0x59b/0xe30 [ 40.897023][ T453] ? mutex_lock+0xa6/0x110 [ 40.901495][ C0] rcu_core_si+0x9/0x10 [ 40.906576][ T453] ? mutex_trylock+0xb0/0xb0 [ 40.910700][ C0] __do_softirq+0x27e/0x596 [ 40.915082][ T453] ? __kasan_check_write+0x14/0x20 [ 40.919199][ C0] [ 40.923760][ T453] kernfs_fop_write_iter+0x2d0/0x410 [ 40.928321][ C0] The buggy address belongs to the object at ffff88810ff8b280 [ 40.928321][ C0] which belongs to the cache ip6_dst_cache of size 240 [ 40.933452][ T453] ? cgroup_seqfile_stop+0xc0/0xc0 [ 40.935750][ C0] The buggy address is located 120 bytes inside of [ 40.935750][ C0] 240-byte region [ffff88810ff8b280, ffff88810ff8b370) [ 40.941368][ T453] vfs_write+0xc1c/0xf40 [ 40.955559][ C0] The buggy address belongs to the page: [ 40.960644][ T453] ? kernel_write+0x3c0/0x3c0 [ 40.973882][ C0] page:ffffea00043fe2c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10ff8b [ 40.978092][ T453] ? mutex_trylock+0xb0/0xb0 [ 40.984065][ C0] flags: 0x8000000000000200(slab) [ 40.988713][ T453] ? __fdget_pos+0x26d/0x310 [ 40.998911][ C0] raw: 8000000000000200 dead000000000100 dead000000000122 ffff88810ae12780 [ 41.003576][ T453] ? ksys_write+0x77/0x2c0 [ 41.008577][ C0] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 41.013174][ T453] ksys_write+0x198/0x2c0 [ 41.023041][ C0] page dumped because: kasan: bad access detected [ 41.027437][ T453] ? __ia32_sys_read+0x90/0x90 [ 41.035980][ C0] page_owner tracks the page as allocated [ 41.040288][ T453] ? debug_smp_processor_id+0x17/0x20 [ 41.046933][ C0] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 377, ts 39819635610, free_ts 38073197990 [ 41.051680][ T453] __x64_sys_write+0x7b/0x90 [ 41.057373][ C0] get_page_from_freelist+0x745/0x760 [ 41.062712][ T453] do_syscall_64+0x34/0x70 [ 41.080063][ C0] __alloc_pages_nodemask+0x3b6/0x890 [ 41.084665][ T453] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 41.084689][ T453] RIP: 0033:0x7f2c23b01049 [ 41.090054][ C0] allocate_slab+0x78/0x540 [ 41.094444][ T453] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 41.099793][ C0] ___slab_alloc+0x131/0x2e0 [ 41.105651][ T453] RSP: 002b:00007f2c23a77168 EFLAGS: 00000246 [ 41.110036][ C0] __slab_alloc+0x63/0xa0 [ 41.114510][ T453] ORIG_RAX: 0000000000000001 [ 41.134102][ C0] kmem_cache_alloc+0x1ef/0x300 [ 41.138836][ T453] RAX: ffffffffffffffda RBX: 00007f2c23c13f60 RCX: 00007f2c23b01049 [ 41.144895][ C0] dst_alloc+0x187/0x590 [ 41.149204][ T453] RDX: 0000000000000006 RSI: 0000000020000140 RDI: 0000000000000004 [ 41.153856][ C0] icmp6_dst_alloc+0xfb/0x5a0 [ 41.158677][ T453] RBP: 00007f2c23a771d0 R08: 0000000000000000 R09: 0000000000000000 [ 41.166640][ C0] mld_sendpack+0x49a/0xaf0 [ 41.170934][ T453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.178893][ C0] mld_ifc_timer_expire+0x85b/0xc50 [ 41.183534][ T453] R13: 00007ffe1e1ec53f R14: 00007f2c23a77300 R15: 0000000000022000 [ 41.191480][ C0] call_timer_fn+0x35/0x270 [ 41.201636][ T454] FAULT_INJECTION: forcing a failure. [ 41.201636][ T454] name failslab, interval 1, probability 0, space 0, times 0 [ 41.203895][ C0] expire_timers+0x21b/0x3a0 [ 41.203901][ C0] __run_timers+0x598/0x6f0 [ 41.203908][ C0] run_timer_softirq+0x69/0xf0 [ 41.203915][ C0] __do_softirq+0x27e/0x596 [ 41.203928][ C0] asm_call_irq_on_stack+0xf/0x20 [ 41.209116][ T454] CPU: 1 PID: 454 Comm: syz-executor.0 Not tainted 5.10.117-syzkaller-986967-g0974b8411a58-dirty #0 [ 41.217131][ C0] page last free stack trace: [ 41.221604][ T454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.234151][ C0] __free_pages_ok+0x7f8/0x830 [ 41.238715][ T454] Call Trace: [ 41.243195][ C0] __free_pages+0x2d2/0x4c0 [ 41.247930][ T454] dump_stack_lvl+0x1e2/0x24b [ 41.252482][ C0] __free_slab+0xd3/0x190 [ 41.257471][ T454] ? panic+0x7d7/0x7d7 [ 41.268288][ C0] unfreeze_partials+0x17d/0x1b0 [ 41.272935][ T454] ? bfq_pos_tree_add_move+0x43e/0x43e [ 41.283046][ C0] put_cpu_partial+0xc8/0x190 [ 41.287954][ T454] ? find_next_bit+0xd6/0x120 [ 41.291209][ C0] __slab_free+0x2d8/0x3a0 [ 41.295770][ T454] ? cpumask_next+0x11/0x30 [ 41.300502][ C0] ___cache_free+0x11f/0x140 [ 41.304800][ T454] dump_stack+0x15/0x17 [ 41.309886][ C0] qlink_free+0x38/0x40 [ 41.314895][ T454] should_fail+0x3c0/0x510 [ 41.320497][ C0] qlist_free_all+0x4c/0xc0 [ 41.325142][ T454] ? percpu_ref_init+0xd0/0x330 [ 41.330046][ C0] kasan_quarantine_reduce+0x15a/0x170 [ 41.334696][ T454] __should_failslab+0x9f/0xe0 [ 41.339184][ C0] __kasan_slab_alloc+0x2f/0xe0 [ 41.343757][ T454] should_failslab+0x9/0x20 [ 41.347967][ C0] kmem_cache_alloc+0x16c/0x300 [ 41.352176][ T454] kmem_cache_alloc_trace+0x3a/0x330 [ 41.356574][ C0] __alloc_skb+0x7e/0x580 [ 41.361307][ T454] percpu_ref_init+0xd0/0x330 [ 41.366136][ C0] netlink_sendmsg+0x7a4/0xd00 [ 41.372369][ T454] ? cgroup_setup_root+0xea0/0xea0 [ 41.377103][ C0] __sys_sendto+0x541/0x700 [ 41.381924][ T454] cgroup_apply_control_enable+0x3a2/0x12f0 [ 41.386481][ C0] __x64_sys_sendto+0xe5/0x100 [ 41.391296][ T454] ? cgroup_reconfigure+0xe0/0xe0 [ 41.396552][ C0] [ 41.400858][ T454] cgroup_apply_control+0x93/0x710 [ 41.405494][ C0] Memory state around the buggy address: [ 41.410228][ T454] ? css_next_child+0x160/0x160 [ 41.415305][ C0] ffff88810ff8b180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 41.419779][ T454] ? io_schedule+0x120/0x120 [ 41.425633][ C0] ffff88810ff8b200: 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc [ 41.430371][ T454] ? kernfs_fop_write_iter+0x15e/0x410 [ 41.435360][ C0] >ffff88810ff8b280: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 41.437667][ T454] ? __kasan_check_write+0x14/0x20 [ 41.442746][ C0] ^ [ 41.448354][ T454] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 41.453169][ C0] ffff88810ff8b300: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 41.461202][ T454] cgroup_subtree_control_write+0xd19/0x1310 [ 41.465756][ C0] ffff88810ff8b380: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 41.473787][ T454] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 41.479206][ C0] ================================================================== [ 41.487240][ T454] ? __kasan_check_write+0x14/0x20 [ 41.492311][ C0] Disabling lock debugging due to kernel taint [ 41.500257][ T454] ? _copy_from_iter+0x3fb/0xd60 [ 41.511213][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.513547][ T454] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 41.513555][ T454] cgroup_file_write+0x28e/0x590 [ 41.513567][ T454] ? cgroup_seqfile_stop+0xc0/0xc0 [ 41.513576][ T454] ? mutex_lock+0xa6/0x110 [ 41.513590][ T454] ? mutex_trylock+0xb0/0xb0 [ 41.519704][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.527575][ T454] ? __kasan_check_write+0x14/0x20 [ 41.527584][ T454] kernfs_fop_write_iter+0x2d0/0x410 [ 41.527591][ T454] ? cgroup_seqfile_stop+0xc0/0xc0 [ 41.527599][ T454] vfs_write+0xc1c/0xf40 [ 41.527609][ T454] ? kernel_write+0x3c0/0x3c0 [ 41.527617][ T454] ? mutex_trylock+0xb0/0xb0 [ 41.527626][ T454] ? __fdget_pos+0x26d/0x310 [ 41.527633][ T454] ? ksys_write+0x77/0x2c0 [ 41.527640][ T454] ksys_write+0x198/0x2c0 [ 41.527649][ T454] ? __ia32_sys_read+0x90/0x90 [ 41.527657][ T454] ? debug_smp_processor_id+0x17/0x20 [ 41.527664][ T454] __x64_sys_write+0x7b/0x90 [ 41.527673][ T454] do_syscall_64+0x34/0x70 [ 41.527681][ T454] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 41.527689][ T454] RIP: 0033:0x7f53d52ee049 [ 41.527698][ T454] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 41.527709][ T454] RSP: 002b:00007f53d5264168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 41.697921][ T454] RAX: ffffffffffffffda RBX: 00007f53d5400f60 RCX: 00007f53d52ee049 2022/05/23 19:50:57 executed programs: 12 [ 41.705960][ T454] RDX: 0000000000000006 RSI: 0000000020000140 RDI: 0000000000000004 [ 41.713901][ T454] RBP: 00007f53d52641d0 R08: 0000000000000000 R09: 0000000000000000 [ 41.721928][ T454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 41.729871][ T454] R13: 00007ffe1fb3264f R14: 00007f53d5264300 R15: 0000000000022000 [ 41.741529][ T456] FAULT_INJECTION: forcing a failure. [ 41.741529][ T456] name failslab, interval 1, probability 0, space 0, times 0 [ 41.754182][ T456] CPU: 1 PID: 456 Comm: syz-executor.5 Tainted: G B 5.10.117-syzkaller-986967-g0974b8411a58-dirty #0 [ 41.766491][ T456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 41.776607][ T456] Call Trace: [ 41.779870][ T456] dump_stack_lvl+0x1e2/0x24b [ 41.784517][ T456] ? panic+0x7d7/0x7d7 [ 41.788727][ T456] ? bfq_pos_tree_add_move+0x43e/0x43e [ 41.794165][ T456] ? find_next_bit+0xd6/0x120 [ 41.798808][ T456] ? cpumask_next+0x11/0x30 [ 41.803281][ T456] dump_stack+0x15/0x17 [ 41.807412][ T456] should_fail+0x3c0/0x510 [ 41.811799][ T456] ? percpu_ref_init+0xd0/0x330 [ 41.816619][ T456] __should_failslab+0x9f/0xe0 [ 41.821356][ T456] should_failslab+0x9/0x20 [ 41.825834][ T456] kmem_cache_alloc_trace+0x3a/0x330 [ 41.831085][ T456] percpu_ref_init+0xd0/0x330 [ 41.835825][ T456] ? cgroup_setup_root+0xea0/0xea0 [ 41.841080][ T456] cgroup_apply_control_enable+0x3a2/0x12f0 [ 41.846942][ T456] ? cgroup_reconfigure+0xe0/0xe0 [ 41.851936][ T456] cgroup_apply_control+0x93/0x710 [ 41.857016][ T456] ? css_next_child+0x160/0x160 [ 41.861834][ T456] ? io_schedule+0x120/0x120 [ 41.866396][ T456] ? kernfs_fop_write_iter+0x15e/0x410 [ 41.871834][ T456] ? __kasan_check_write+0x14/0x20 [ 41.876917][ T456] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 41.882171][ T456] cgroup_subtree_control_write+0xd19/0x1310 [ 41.888219][ T456] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 41.894167][ T456] ? __kasan_check_write+0x14/0x20 [ 41.899252][ T456] ? _copy_from_iter+0x3fb/0xd60 [ 41.904853][ T456] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 41.910798][ T456] cgroup_file_write+0x28e/0x590 [ 41.915796][ T456] ? cgroup_seqfile_stop+0xc0/0xc0 [ 41.920876][ T456] ? mutex_lock+0xa6/0x110 [ 41.925264][ T456] ? mutex_trylock+0xb0/0xb0 [ 41.929824][ T456] ? __kasan_check_write+0x14/0x20 [ 41.934904][ T456] kernfs_fop_write_iter+0x2d0/0x410 [ 41.940158][ T456] ? cgroup_seqfile_stop+0xc0/0xc0 [ 41.945239][ T456] vfs_write+0xc1c/0xf40 [ 41.949545][ T456] ? kernel_write+0x3c0/0x3c0 [ 41.954192][ T456] ? mutex_trylock+0xb0/0xb0 [ 41.958753][ T456] ? __fdget_pos+0x26d/0x310 [ 41.963496][ T456] ? ksys_write+0x77/0x2c0 [ 41.967892][ T456] ksys_write+0x198/0x2c0 [ 41.972203][ T456] ? __ia32_sys_read+0x90/0x90 [ 41.977133][ T456] ? debug_smp_processor_id+0x17/0x20 [ 41.982486][ T456] __x64_sys_write+0x7b/0x90 [ 41.987148][ T456] do_syscall_64+0x34/0x70 [ 41.991626][ T456] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 41.997669][ T456] RIP: 0033:0x7f399e0d6049 [ 42.002066][ T456] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 42.021729][ T456] RSP: 002b:00007f399e04c168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 42.030222][ T456] RAX: ffffffffffffffda RBX: 00007f399e1e8f60 RCX: 00007f399e0d6049 [ 42.038178][ T456] RDX: 0000000000000006 RSI: 0000000020000140 RDI: 0000000000000004 [ 42.046212][ T456] RBP: 00007f399e04c1d0 R08: 0000000000000000 R09: 0000000000000000 [ 42.054183][ T456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.062221][ T456] R13: 00007ffd698e77af R14: 00007f399e04c300 R15: 0000000000022000 [ 42.076066][ T459] FAULT_INJECTION: forcing a failure. [ 42.076066][ T459] name failslab, interval 1, probability 0, space 0, times 0 [ 42.089602][ T459] CPU: 1 PID: 459 Comm: syz-executor.4 Tainted: G B 5.10.117-syzkaller-986967-g0974b8411a58-dirty #0 [ 42.089893][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.102085][ T459] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.102088][ T459] Call Trace: [ 42.102103][ T459] dump_stack_lvl+0x1e2/0x24b [ 42.102110][ T459] ? panic+0x7d7/0x7d7 [ 42.102118][ T459] ? bfq_pos_tree_add_move+0x43e/0x43e [ 42.102126][ T459] ? find_next_bit+0xd6/0x120 [ 42.102134][ T459] ? cpumask_next+0x11/0x30 [ 42.102142][ T459] dump_stack+0x15/0x17 [ 42.102150][ T459] should_fail+0x3c0/0x510 [ 42.102157][ T459] ? percpu_ref_init+0xd0/0x330 [ 42.102173][ T459] __should_failslab+0x9f/0xe0 [ 42.111013][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.120434][ T459] should_failslab+0x9/0x20 [ 42.120443][ T459] kmem_cache_alloc_trace+0x3a/0x330 [ 42.120452][ T459] percpu_ref_init+0xd0/0x330 [ 42.120461][ T459] ? cgroup_setup_root+0xea0/0xea0 [ 42.120476][ T459] cgroup_apply_control_enable+0x3a2/0x12f0 [ 42.123963][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.128401][ T459] ? cgroup_reconfigure+0xe0/0xe0 [ 42.128410][ T459] cgroup_apply_control+0x93/0x710 [ 42.128423][ T459] ? css_next_child+0x160/0x160 [ 42.132633][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.138155][ T459] ? io_schedule+0x120/0x120 [ 42.138163][ T459] ? kernfs_fop_write_iter+0x15e/0x410 [ 42.138176][ T459] ? __kasan_check_write+0x14/0x20 [ 42.143027][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.147313][ T459] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 42.147321][ T459] cgroup_subtree_control_write+0xd19/0x1310 [ 42.147334][ T459] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 42.151624][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.155858][ T459] ? __kasan_check_write+0x14/0x20 [ 42.155868][ T459] ? _copy_from_iter+0x3fb/0xd60 [ 42.155875][ T459] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 42.155882][ T459] cgroup_file_write+0x28e/0x590 [ 42.155889][ T459] ? cgroup_seqfile_stop+0xc0/0xc0 [ 42.155896][ T459] ? mutex_lock+0xa6/0x110 [ 42.155909][ T459] ? mutex_trylock+0xb0/0xb0 [ 42.161121][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.165467][ T459] ? __kasan_check_write+0x14/0x20 [ 42.165476][ T459] kernfs_fop_write_iter+0x2d0/0x410 [ 42.165483][ T459] ? cgroup_seqfile_stop+0xc0/0xc0 [ 42.165490][ T459] vfs_write+0xc1c/0xf40 [ 42.165503][ T459] ? kernel_write+0x3c0/0x3c0 [ 42.173803][ T108] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.178111][ T459] ? mutex_trylock+0xb0/0xb0 [ 42.178126][ T459] ? __fdget_pos+0x26d/0x310 [ 42.365572][ T459] ? ksys_write+0x77/0x2c0 [ 42.369967][ T459] ksys_write+0x198/0x2c0 [ 42.374272][ T459] ? __ia32_sys_read+0x90/0x90 [ 42.379013][ T459] ? debug_smp_processor_id+0x17/0x20 [ 42.384358][ T459] __x64_sys_write+0x7b/0x90 [ 42.389302][ T459] do_syscall_64+0x34/0x70 [ 42.393707][ T459] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 42.399834][ T459] RIP: 0033:0x7f2c23b01049 [ 42.404315][ T459] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 42.424154][ T459] RSP: 002b:00007f2c23a56168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 42.432565][ T459] RAX: ffffffffffffffda RBX: 00007f2c23c14030 RCX: 00007f2c23b01049 [ 42.440510][ T459] RDX: 0000000000000006 RSI: 0000000020000140 RDI: 0000000000000004 [ 42.448456][ T459] RBP: 00007f2c23a561d0 R08: 0000000000000000 R09: 0000000000000000 [ 42.456444][ T459] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 42.464391][ T459] R13: 00007ffe1e1ec53f R14: 00007f2c23a56300 R15: 0000000000022000 [ 42.497362][ T461] FAULT_INJECTION: forcing a failure. [ 42.497362][ T461] name failslab, interval 1, probability 0, space 0, times 0 [ 42.497967][ C0] general protection fault, probably for non-canonical address 0xdffffc000000000f: 0000 [#1] PREEMPT SMP KASAN [ 42.510547][ T461] CPU: 1 PID: 461 Comm: syz-executor.1 Tainted: G B 5.10.117-syzkaller-986967-g0974b8411a58-dirty #0 [ 42.521736][ C0] KASAN: null-ptr-deref in range [0x0000000000000078-0x000000000000007f] [ 42.533850][ T461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.542506][ C0] CPU: 0 PID: 386 Comm: kworker/0:5 Tainted: G B 5.10.117-syzkaller-986967-g0974b8411a58-dirty #0 [ 42.552538][ T461] Call Trace: [ 42.564393][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 42.568003][ T461] dump_stack_lvl+0x1e2/0x24b [ 42.578116][ C0] Workqueue: ipv6_addrconf addrconf_dad_work [ 42.582774][ T461] ? panic+0x7d7/0x7d7 [ 42.582782][ C0] [ 42.588731][ T461] ? bfq_pos_tree_add_move+0x43e/0x43e [ 42.592864][ C0] RIP: 0010:ip6_pol_route+0x741/0x15c0 [ 42.595167][ T461] ? find_next_bit+0xd6/0x120 [ 42.600937][ C0] Code: e8 54 c1 7d fd 48 8b 03 65 4c 8b 30 31 ff 4c 89 f6 e8 33 f3 43 fd 4d 85 f6 0f 84 a7 00 00 00 49 8d 5e 78 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 68 0b 00 00 44 8b 3b 31 ff 44 89 fe e8 56 [ 42.606369][ T461] ? cpumask_next+0x11/0x30 [ 42.611098][ C0] RSP: 0018:ffffc90000007580 EFLAGS: 00010206 [ 42.630679][ T461] dump_stack+0x15/0x17 [ 42.635145][ C0] [ 42.641184][ T461] should_fail+0x3c0/0x510 [ 42.645399][ C0] RAX: 000000000000000f RBX: 0000000000000079 RCX: 0000000080000301 [ 42.647705][ T461] ? percpu_ref_init+0xd0/0x330 [ 42.652082][ C0] RDX: ffff888103ff8000 RSI: 0000000000000001 RDI: 0000000000000000 [ 42.660030][ T461] __should_failslab+0x9f/0xe0 [ 42.664847][ C0] RBP: ffffc90000007718 R08: ffffffff8428c43d R09: ffff8881108c2000 [ 42.672989][ T461] should_failslab+0x9/0x20 [ 42.677738][ C0] R10: ffffc90000007500 R11: 1ffff92000000ece R12: ffff88810cad1340 [ 42.685701][ T461] kmem_cache_alloc_trace+0x3a/0x330 [ 42.690171][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffc90000007670 [ 42.698207][ T461] percpu_ref_init+0xd0/0x330 [ 42.703466][ C0] FS: 0000000000000000(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 42.711757][ T461] ? cgroup_setup_root+0xea0/0xea0 [ 42.716405][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.725322][ T461] cgroup_apply_control_enable+0x3a2/0x12f0 [ 42.730415][ C0] CR2: 00007fd728f38922 CR3: 000000010c3f4000 CR4: 00000000003506b0 [ 42.737087][ T461] ? cgroup_reconfigure+0xe0/0xe0 [ 42.742952][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.750911][ T461] cgroup_apply_control+0x93/0x710 [ 42.755900][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.763944][ T461] ? css_next_child+0x160/0x160 [ 42.769026][ C0] Call Trace: [ 42.776977][ T461] ? io_schedule+0x120/0x120 [ 42.781792][ C0] [ 42.785139][ T461] ? kernfs_fop_write_iter+0x15e/0x410 [ 42.789708][ C0] ? fib6_table_lookup+0xae0/0xae0 [ 42.792528][ T461] ? __kasan_check_write+0x14/0x20 [ 42.797957][ C0] ? flow_hash_from_keys+0x7b/0x120 [ 42.803033][ T461] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 42.808116][ C0] ? flow_get_u32_dst+0x100/0x100 [ 42.813292][ T461] cgroup_subtree_control_write+0xd19/0x1310 [ 42.818548][ C0] ? kfree+0xc3/0x290 [ 42.823627][ T461] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 42.829574][ C0] ? rt6_multipath_hash+0x8d4/0xda0 [ 42.833551][ T461] ? __kasan_check_write+0x14/0x20 [ 42.839507][ C0] ? __kasan_slab_free+0x11/0x20 [ 42.844673][ T461] ? _copy_from_iter+0x3fb/0xd60 [ 42.849934][ C0] ip6_pol_route_input+0x54/0x80 [ 42.854925][ T461] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 42.859841][ C0] fib6_rule_lookup+0x259/0x600 [ 42.864833][ T461] cgroup_file_write+0x28e/0x590 [ 42.870788][ C0] ? ip6_finish_output+0x1c9/0x1e0 [ 42.875624][ T461] ? cgroup_seqfile_stop+0xc0/0xc0 [ 42.880625][ C0] ? ip6_route_input_lookup+0xd0/0xd0 [ 42.885878][ T461] ? mutex_lock+0xa6/0x110 [ 42.890962][ C0] ? fib6_lookup+0x3f0/0x3f0 [ 42.896562][ T461] ? mutex_trylock+0xb0/0xb0 [ 42.900947][ C0] ? ip6t_do_table+0x1563/0x1780 [ 42.905511][ T461] ? __kasan_check_write+0x14/0x20 [ 42.910073][ C0] ? __ipv6_addr_type+0x15b/0x2f0 [ 42.914980][ T461] kernfs_fop_write_iter+0x2d0/0x410 [ 42.920315][ C0] ip6_route_input+0x736/0xb30 [ 42.925343][ T461] ? cgroup_seqfile_stop+0xc0/0xc0 [ 42.930708][ C0] ? ip6_multipath_l3_keys+0x600/0x600 [ 42.935444][ T461] vfs_write+0xc1c/0xf40 [ 42.940519][ C0] ? skb_orphan+0x4d/0xd0 [ 42.945951][ T461] ? kernel_write+0x3c0/0x3c0 [ 42.950170][ C0] ipv6_rcv+0x260/0x550 [ 42.954473][ T461] ? mutex_trylock+0xb0/0xb0 [ 42.959207][ C0] ? ip6_rcv_finish+0x2c0/0x2c0 [ 42.963336][ T461] ? __fdget_pos+0x26d/0x310 [ 42.967979][ C0] ? asan.module_dtor+0x20/0x20 [ 42.972797][ T461] ? ksys_write+0x77/0x2c0 [ 42.977381][ C0] ? __kasan_check_read+0x11/0x20 [ 42.982199][ T461] ksys_write+0x198/0x2c0 [ 42.986587][ C0] ? ttwu_do_wakeup+0xdf/0x3a0 [ 42.991577][ T461] ? __ia32_sys_read+0x90/0x90 [ 42.995873][ C0] ? ip6_rcv_finish+0x2c0/0x2c0 [ 43.000604][ T461] ? debug_smp_processor_id+0x17/0x20 [ 43.005511][ C0] __netif_receive_skb+0x1c5/0x500 [ 43.010327][ T461] __x64_sys_write+0x7b/0x90 [ 43.015666][ C0] ? deliver_ptype_list_skb+0x1a0/0x1a0 [ 43.020744][ T461] do_syscall_64+0x34/0x70 [ 43.025299][ C0] ? __kasan_check_write+0x14/0x20 [ 43.030834][ T461] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 43.035213][ C0] ? _raw_spin_lock+0xa3/0x1b0 [ 43.040292][ T461] RIP: 0033:0x7ff0b822c049 [ 43.046164][ C0] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 43.050899][ T461] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.055374][ C0] ? __kasan_check_write+0x14/0x20 [ 43.060710][ T461] RSP: 002b:00007ff0b81a2168 EFLAGS: 00000246 [ 43.080288][ C0] process_backlog+0x352/0x690 [ 43.085363][ T461] ORIG_RAX: 0000000000000001 [ 43.091403][ C0] napi_poll+0x1a3/0x650 [ 43.096132][ T461] RAX: ffffffffffffffda RBX: 00007ff0b833ef60 RCX: 00007ff0b822c049 [ 43.100778][ C0] net_rx_action+0x387/0x970 [ 43.104987][ T461] RDX: 0000000000000006 RSI: 0000000020000140 RDI: 0000000000000004 [ 43.112930][ C0] ? net_tx_action+0x8f0/0x8f0 [ 43.117571][ T461] RBP: 00007ff0b81a21d0 R08: 0000000000000000 R09: 0000000000000000 [ 43.125602][ C0] ? irqtime_account_irq+0x76/0x270 [ 43.130332][ T461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.138277][ C0] __do_softirq+0x27e/0x596 [ 43.143440][ T461] R13: 00007ffef97d34df R14: 00007ff0b81a2300 R15: 0000000000022000 [ 43.151390][ C0] asm_call_irq_on_stack+0xf/0x20 [ 43.160220][ T23] audit: type=1400 audit(1653335458.060:157): avc: denied { remove_name } for pid=142 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 43.163793][ C0] [ 43.163804][ C0] do_softirq_own_stack+0x60/0x80 [ 43.163812][ C0] do_softirq+0xca/0x110 [ 43.163827][ C0] ? neigh_resolve_output+0x6d3/0x780 [ 43.169110][ T23] audit: type=1400 audit(1653335458.060:158): avc: denied { rename } for pid=142 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.191176][ C0] ? __local_bh_enable_ip+0x80/0x80 [ 43.191185][ C0] __local_bh_enable_ip+0x70/0x80 [ 43.191192][ C0] local_bh_enable+0x1f/0x30 [ 43.191204][ C0] ip6_finish_output2+0x1094/0x1950 [ 43.194767][ T464] FAULT_INJECTION: forcing a failure. [ 43.194767][ T464] name failslab, interval 1, probability 0, space 0, times 0 [ 43.199110][ C0] ? __ip6_finish_output+0x810/0x810 [ 43.199119][ C0] __ip6_finish_output+0x653/0x810 [ 43.199131][ C0] ip6_finish_output+0x1c9/0x1e0 [ 43.204059][ T464] CPU: 1 PID: 464 Comm: syz-executor.3 Tainted: G B 5.10.117-syzkaller-986967-g0974b8411a58-dirty #0 [ 43.208687][ C0] ? ip6_output+0x1f3/0x4c0 [ 43.230695][ T464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.235950][ C0] ip6_output+0x211/0x4c0 [ 43.240938][ T464] Call Trace: [ 43.245498][ C0] ? asan.module_dtor+0x20/0x20 [ 43.250664][ T464] dump_stack_lvl+0x1e2/0x24b [ 43.263212][ C0] ? ip6_output+0x4c0/0x4c0 [ 43.268722][ T464] ? panic+0x7d7/0x7d7 [ 43.273807][ C0] ndisc_send_skb+0x6fe/0xc10 [ 43.278718][ T464] ? bfq_pos_tree_add_move+0x43e/0x43e [ 43.290863][ C0] ? ndisc_alloc_skb+0x2d0/0x2d0 [ 43.295332][ T464] ? find_next_bit+0xd6/0x120 [ 43.305357][ C0] ? refcount_dec_and_test+0x80/0x80 [ 43.309915][ T464] ? cpumask_next+0x11/0x30 [ 43.313168][ C0] ? kasan_unpoison+0x61/0x80 [ 43.317986][ T464] dump_stack+0x15/0x17 [ 43.322631][ C0] ? __kasan_check_write+0x14/0x20 [ 43.327101][ T464] should_fail+0x3c0/0x510 [ 43.331152][ C0] ? skb_set_owner_w+0x204/0x360 [ 43.335793][ T464] ? percpu_ref_init+0xd0/0x330 [ 43.341217][ C0] ? ndisc_send_ns+0x358/0x810 [ 43.346121][ T464] __should_failslab+0x9f/0xe0 [ 43.350768][ C0] ? skb_put+0x119/0x210 [ 43.356019][ T464] should_failslab+0x9/0x20 [ 43.360492][ C0] ndisc_send_ns+0x629/0x810 [ 43.365136][ T464] kmem_cache_alloc_trace+0x3a/0x330 [ 43.369269][ C0] ? ndisc_send_skb+0xc10/0xc10 [ 43.374345][ T464] percpu_ref_init+0xd0/0x330 [ 43.378729][ C0] ? _raw_spin_lock+0xa3/0x1b0 [ 43.383807][ T464] ? cgroup_setup_root+0xea0/0xea0 [ 43.388620][ C0] ? _raw_spin_trylock_bh+0x1d0/0x1d0 [ 43.393352][ T464] cgroup_apply_control_enable+0x3a2/0x12f0 [ 43.398170][ C0] addrconf_dad_work+0xba6/0x15d0 [ 43.402379][ T464] ? cgroup_reconfigure+0xe0/0xe0 [ 43.406848][ C0] ? _raw_spin_unlock_irq+0x4e/0x70 [ 43.411405][ T464] cgroup_apply_control+0x93/0x710 [ 43.416665][ C0] ? refcount_inc+0x80/0x80 [ 43.421485][ T464] ? css_next_child+0x160/0x160 [ 43.426127][ C0] ? __kasan_check_write+0x14/0x20 [ 43.430857][ T464] ? io_schedule+0x120/0x120 [ 43.435939][ C0] ? __kasan_check_read+0x11/0x20 [ 43.441277][ T464] ? kernfs_fop_write_iter+0x15e/0x410 [ 43.447134][ C0] ? strscpy+0xa8/0x270 [ 43.452130][ T464] ? __kasan_check_write+0x14/0x20 [ 43.457120][ C0] process_one_work+0x726/0xc10 [ 43.462293][ T464] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 43.467370][ C0] worker_thread+0xb27/0x1550 [ 43.471927][ T464] cgroup_subtree_control_write+0xd19/0x1310 [ 43.476744][ C0] ? __kthread_parkme+0xba/0x1d0 [ 43.481824][ T464] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 43.486387][ C0] kthread+0x349/0x3d0 [ 43.491384][ T464] ? __kasan_check_write+0x14/0x20 [ 43.496808][ C0] ? worker_clr_flags+0x180/0x180 [ 43.500933][ T464] ? _copy_from_iter+0x3fb/0xd60 [ 43.506008][ C0] ? kthread_blkcg+0xd0/0xd0 [ 43.510825][ T464] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 43.516095][ C0] ret_from_fork+0x1f/0x30 [ 43.520825][ T464] cgroup_file_write+0x28e/0x590 [ 43.526766][ C0] Modules linked in: [ 43.531672][ T464] ? cgroup_seqfile_stop+0xc0/0xc0 [ 43.537616][ C0] [ 43.541655][ T464] ? mutex_lock+0xa6/0x110 [ 43.546780][ C0] ---[ end trace f8aa0e220c2dcc15 ]--- [ 43.551728][ T464] ? mutex_trylock+0xb0/0xb0 [ 43.556739][ C0] RIP: 0010:ip6_pol_route+0x741/0x15c0 [ 43.561290][ T464] ? __kasan_check_write+0x14/0x20 [ 43.567243][ C0] Code: e8 54 c1 7d fd 48 8b 03 65 4c 8b 30 31 ff 4c 89 f6 e8 33 f3 43 fd 4d 85 f6 0f 84 a7 00 00 00 49 8d 5e 78 48 89 d8 48 c1 e8 03 <42> 8a 04 28 84 c0 0f 85 68 0b 00 00 44 8b 3b 31 ff 44 89 fe e8 56 [ 43.571623][ T464] kernfs_fop_write_iter+0x2d0/0x410 [ 43.576537][ C0] RSP: 0018:ffffc90000007580 EFLAGS: 00010206 [ 43.580399][ T464] ? cgroup_seqfile_stop+0xc0/0xc0 [ 43.585475][ C0] [ 43.587775][ T464] vfs_write+0xc1c/0xf40 [ 43.592155][ C0] RAX: 000000000000000f RBX: 0000000000000079 RCX: 0000000080000301 [ 43.597576][ T464] ? kernel_write+0x3c0/0x3c0 [ 43.597588][ T464] ? mutex_trylock+0xb0/0xb0 [ 43.602145][ C0] RDX: ffff888103ff8000 RSI: 0000000000000001 RDI: 0000000000000000 [ 43.607569][ T464] ? __fdget_pos+0x26d/0x310 [ 43.607581][ T464] ? ksys_write+0x77/0x2c0 [ 43.612836][ C0] RBP: ffffc90000007718 R08: ffffffff8428c43d R09: ffff8881108c2000 [ 43.632406][ T464] ksys_write+0x198/0x2c0 [ 43.632419][ T464] ? __ia32_sys_read+0x90/0x90 [ 43.637684][ C0] R10: ffffc90000007500 R11: 1ffff92000000ece R12: ffff88810cad1340 [ 43.643717][ T464] ? debug_smp_processor_id+0x17/0x20 [ 43.643724][ T464] __x64_sys_write+0x7b/0x90 [ 43.643737][ T464] do_syscall_64+0x34/0x70 [ 43.648811][ C0] R13: dffffc0000000000 R14: 0000000000000001 R15: ffffc90000007670 [ 43.651119][ T464] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 43.655355][ C0] FS: 0000000000000000(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 43.663382][ T464] RIP: 0033:0x7f962b2f2049 [ 43.663391][ T464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.663405][ T464] RSP: 002b:00007f962b268168 EFLAGS: 00000246 [ 43.668058][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.672609][ T464] ORIG_RAX: 0000000000000001 [ 43.672615][ T464] RAX: ffffffffffffffda RBX: 00007f962b404f60 RCX: 00007f962b2f2049 [ 43.672620][ T464] RDX: 0000000000000006 RSI: 0000000020000140 RDI: 0000000000000004 [ 43.672629][ T464] RBP: 00007f962b2681d0 R08: 0000000000000000 R09: 0000000000000000 [ 43.672641][ T464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 43.680588][ C0] CR2: 00007fd728f38922 CR3: 000000010c3f4000 CR4: 00000000003506b0 [ 43.685144][ T464] R13: 00007ffebc81984f R14: 00007f962b268300 R15: 0000000000022000 [ 43.694171][ T23] audit: type=1400 audit(1653335458.060:159): avc: denied { create } for pid=142 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 43.697521][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.755575][ T466] FAULT_INJECTION: forcing a failure. [ 43.755575][ T466] name failslab, interval 1, probability 0, space 0, times 0 [ 43.756043][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.776183][ T466] CPU: 1 PID: 466 Comm: syz-executor.2 Tainted: G B D 5.10.117-syzkaller-986967-g0974b8411a58-dirty #0 [ 43.781866][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 43.788420][ T466] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 43.920277][ T466] Call Trace: [ 43.923548][ T466] dump_stack_lvl+0x1e2/0x24b [ 43.928198][ T466] ? panic+0x7d7/0x7d7 [ 43.932238][ T466] ? bfq_pos_tree_add_move+0x43e/0x43e [ 43.937678][ T466] ? find_next_bit+0xd6/0x120 [ 43.942333][ T466] ? cpumask_next+0x11/0x30 [ 43.946812][ T466] dump_stack+0x15/0x17 [ 43.951042][ T466] should_fail+0x3c0/0x510 [ 43.955446][ T466] ? percpu_ref_init+0xd0/0x330 [ 43.960277][ T466] __should_failslab+0x9f/0xe0 [ 43.965023][ T466] should_failslab+0x9/0x20 [ 43.969510][ T466] kmem_cache_alloc_trace+0x3a/0x330 [ 43.974774][ T466] percpu_ref_init+0xd0/0x330 [ 43.979436][ T466] ? cgroup_setup_root+0xea0/0xea0 [ 43.984527][ T466] cgroup_apply_control_enable+0x3a2/0x12f0 [ 43.990670][ T466] ? cgroup_reconfigure+0xe0/0xe0 [ 43.995680][ T466] cgroup_apply_control+0x93/0x710 [ 44.000766][ T466] ? css_next_child+0x160/0x160 [ 44.005593][ T466] ? io_schedule+0x120/0x120 [ 44.010160][ T466] ? kernfs_fop_write_iter+0x15e/0x410 [ 44.015608][ T466] ? __kasan_check_write+0x14/0x20 [ 44.020707][ T466] ? cgroup_kn_lock_live+0x1b0/0x2f0 [ 44.025983][ T466] cgroup_subtree_control_write+0xd19/0x1310 [ 44.031961][ T466] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 44.038188][ T466] ? __kasan_check_write+0x14/0x20 [ 44.043657][ T466] ? _copy_from_iter+0x3fb/0xd60 [ 44.048580][ T466] ? cgroup_subtree_control_show+0x1d0/0x1d0 [ 44.054711][ T466] cgroup_file_write+0x28e/0x590 [ 44.059893][ T466] ? cgroup_seqfile_stop+0xc0/0xc0 [ 44.065346][ T466] ? mutex_lock+0xa6/0x110 [ 44.069842][ T466] ? mutex_trylock+0xb0/0xb0 [ 44.074502][ T466] ? __kasan_check_write+0x14/0x20 [ 44.079593][ T466] kernfs_fop_write_iter+0x2d0/0x410 [ 44.084854][ T466] ? cgroup_seqfile_stop+0xc0/0xc0 [ 44.090030][ T466] vfs_write+0xc1c/0xf40 [ 44.094266][ T466] ? kernel_write+0x3c0/0x3c0 [ 44.099025][ T466] ? mutex_trylock+0xb0/0xb0 [ 44.103591][ T466] ? __fdget_pos+0x26d/0x310 [ 44.108244][ T466] ? ksys_write+0x77/0x2c0 [ 44.112724][ T466] ksys_write+0x198/0x2c0 [ 44.117032][ T466] ? __ia32_sys_read+0x90/0x90 [ 44.121772][ T466] ? debug_smp_processor_id+0x17/0x20 [ 44.127117][ T466] __x64_sys_write+0x7b/0x90 [ 44.131693][ T466] do_syscall_64+0x34/0x70 [ 44.136307][ T466] entry_SYSCALL_64_after_hwframe+0x44/0xa9 [ 44.142174][ T466] RIP: 0033:0x7fd728eb9049 [ 44.146570][ T466] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 44.166151][ T466] RSP: 002b:00007fd728e2f168 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 44.174717][ T466] RAX: ffffffffffffffda RBX: 00007fd728fcbf60 RCX: 00007fd728eb9049 [ 44.182669][ T466] RDX: 0000000000000006 RSI: 0000000020000140 RDI: 0000000000000004 [ 44.190614][ T466] RBP: 00007fd728e2f1d0 R08: 0000000000000000 R09: 0000000000000000 [ 44.198560][ T466] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 44.206508][ T466] R13: 00007fff7efcabaf R14: 00007fd728e2f300 R15: 0000000000022000 [ 44.214637][ C0] Kernel Offset: disabled [ 44.218947][ C0] Rebooting in 86400 seconds..