Warning: Permanently added '10.128.0.187' (ED25519) to the list of known hosts. 2024/03/26 07:18:01 ignoring optional flag "sandboxArg"="0" 2024/03/26 07:18:01 parsed 1 programs [ 39.126246][ T30] audit: type=1400 audit(1711437481.574:157): avc: denied { mounton } for pid=340 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 39.150965][ T30] audit: type=1400 audit(1711437481.574:158): avc: denied { mount } for pid=340 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 39.242582][ T30] audit: type=1400 audit(1711437481.694:159): avc: denied { unlink } for pid=340 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/03/26 07:18:01 executed programs: 0 [ 39.286076][ T340] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.334852][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.341928][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.349245][ T346] device bridge_slave_0 entered promiscuous mode [ 39.356675][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.363646][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.371012][ T346] device bridge_slave_1 entered promiscuous mode [ 39.405874][ T30] audit: type=1400 audit(1711437481.854:160): avc: denied { write } for pid=346 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.410914][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.426996][ T30] audit: type=1400 audit(1711437481.854:161): avc: denied { read } for pid=346 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.434079][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.463780][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.470744][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.488338][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.495725][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.504378][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.512826][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.533447][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.542215][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.549996][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.557554][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.564911][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.573363][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.580242][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.587751][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.598879][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.605886][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.613790][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.621864][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.631136][ T346] device veth0_vlan entered promiscuous mode [ 39.642286][ T346] device veth1_macvtap entered promiscuous mode [ 39.651812][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.662954][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.675037][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.688323][ T30] audit: type=1400 audit(1711437482.134:162): avc: denied { mounton } for pid=346 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.719234][ T352] FAULT_INJECTION: forcing a failure. [ 39.719234][ T352] name failslab, interval 1, probability 0, space 0, times 1 [ 39.733205][ T352] CPU: 0 PID: 352 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 39.743532][ T352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 39.753541][ T352] Call Trace: [ 39.756719][ T352] [ 39.759613][ T352] dump_stack_lvl+0x151/0x1b7 [ 39.764315][ T352] ? io_uring_drop_tctx_refs+0x190/0x190 [ 39.770044][ T352] dump_stack+0x15/0x17 [ 39.774040][ T352] should_fail+0x3c6/0x510 [ 39.778777][ T352] __should_failslab+0xa4/0xe0 [ 39.783375][ T352] ? anon_vma_fork+0xf7/0x4e0 [ 39.788002][ T352] should_failslab+0x9/0x20 [ 39.792440][ T352] slab_pre_alloc_hook+0x37/0xd0 [ 39.797203][ T352] ? anon_vma_fork+0xf7/0x4e0 [ 39.801714][ T352] kmem_cache_alloc+0x44/0x200 [ 39.806319][ T352] anon_vma_fork+0xf7/0x4e0 [ 39.810659][ T352] ? anon_vma_name+0x43/0x70 [ 39.815359][ T352] ? vm_area_dup+0x17a/0x230 [ 39.819989][ T352] copy_mm+0xa3a/0x13e0 [ 39.824035][ T352] ? copy_signal+0x610/0x610 [ 39.828635][ T352] ? __init_rwsem+0xd6/0x1c0 [ 39.833064][ T352] ? copy_signal+0x4e3/0x610 [ 39.837582][ T352] copy_process+0x1149/0x3290 [ 39.842263][ T352] ? proc_fail_nth_write+0x20b/0x290 [ 39.847753][ T352] ? fsnotify_perm+0x6a/0x5d0 [ 39.852446][ T352] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 39.857648][ T352] ? vfs_write+0x9ec/0x1110 [ 39.862258][ T352] kernel_clone+0x21e/0x9e0 [ 39.867279][ T352] ? file_end_write+0x1c0/0x1c0 [ 39.872378][ T352] ? create_io_thread+0x1e0/0x1e0 [ 39.877411][ T352] ? mutex_unlock+0xb2/0x260 [ 39.882161][ T352] ? __mutex_lock_slowpath+0x10/0x10 [ 39.887444][ T352] __x64_sys_clone+0x23f/0x290 [ 39.892420][ T352] ? __do_sys_vfork+0x130/0x130 [ 39.897486][ T352] ? ksys_write+0x260/0x2c0 [ 39.901944][ T352] ? debug_smp_processor_id+0x17/0x20 [ 39.907789][ T352] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 39.913867][ T352] ? exit_to_user_mode_prepare+0x39/0xa0 [ 39.919420][ T352] do_syscall_64+0x3d/0xb0 [ 39.923752][ T352] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 39.929921][ T352] RIP: 0033:0x7f3a9ca6bae9 [ 39.934194][ T352] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 39.954303][ T352] RSP: 002b:00007f3a9c5ee078 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 39.963739][ T352] RAX: ffffffffffffffda RBX: 00007f3a9cb8af80 RCX: 00007f3a9ca6bae9 [ 39.972559][ T352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 39.982087][ T352] RBP: 00007f3a9c5ee120 R08: 0000000000000000 R09: 0000000000000000 [ 39.990896][ T352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 39.999360][ T352] R13: 000000000000000b R14: 00007f3a9cb8af80 R15: 00007ffeff6e6608 [ 40.007677][ T352] [ 40.013836][ T352] ------------[ cut here ]------------ [ 40.020016][ T352] refcount_t: underflow; use-after-free. [ 40.025630][ T352] WARNING: CPU: 0 PID: 352 at lib/refcount.c:28 refcount_warn_saturate+0x158/0x1a0 [ 40.035048][ T352] Modules linked in: [ 40.038792][ T352] CPU: 0 PID: 352 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 40.050274][ T352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 40.061920][ T352] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 40.068012][ T352] Code: 04 01 48 c7 c7 00 c6 82 85 e8 e4 b4 dc fe 0f 0b eb 8b e8 3b 5d 0b ff c6 05 b3 a4 3e 04 01 48 c7 c7 60 c6 82 85 e8 c8 b4 dc fe <0f> 0b e9 6c ff ff ff e8 1c 5d 0b ff c6 05 95 a4 3e 04 01 48 c7 c7 [ 40.089121][ T352] RSP: 0018:ffffc90000b27968 EFLAGS: 00010246 [ 40.095918][ T352] RAX: b6b9941d37167f00 RBX: 0000000000000003 RCX: ffff88810cd913c0 [ 40.105063][ T352] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 40.113465][ T352] RBP: ffffc90000b27978 R08: ffffffff81575f25 R09: fffff52000164e55 [ 40.122457][ T352] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1102175eccd [ 40.130438][ T352] R13: ffff88810baf6668 R14: 0000000000000003 R15: ffff8881242c2871 [ 40.138674][ T352] FS: 00007f3a9c5ee6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 40.148007][ T352] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.154717][ T352] CR2: 00007f3a9ca96e90 CR3: 000000010cbaa000 CR4: 00000000003506b0 [ 40.164871][ T352] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.173800][ T352] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.182379][ T352] Call Trace: [ 40.185739][ T352] [ 40.188780][ T352] ? show_regs+0x58/0x60 [ 40.193516][ T352] ? __warn+0x160/0x2f0 [ 40.198338][ T352] ? refcount_warn_saturate+0x158/0x1a0 [ 40.204632][ T352] ? report_bug+0x3d9/0x5b0 [ 40.209057][ T352] ? refcount_warn_saturate+0x158/0x1a0 [ 40.214953][ T352] ? handle_bug+0x41/0x70 [ 40.219073][ T352] ? exc_invalid_op+0x1b/0x50 [ 40.223673][ T352] ? asm_exc_invalid_op+0x1b/0x20 [ 40.228579][ T352] ? __wake_up_klogd+0xd5/0x110 [ 40.233522][ T352] ? refcount_warn_saturate+0x158/0x1a0 [ 40.238991][ T352] ? refcount_warn_saturate+0x158/0x1a0 [ 40.244761][ T352] vm_area_free_no_check+0x123/0x130 [ 40.249882][ T352] copy_mm+0xefb/0x13e0 [ 40.254278][ T352] ? copy_signal+0x610/0x610 [ 40.258821][ T352] ? __init_rwsem+0xd6/0x1c0 [ 40.263749][ T352] ? copy_signal+0x4e3/0x610 [ 40.268915][ T352] copy_process+0x1149/0x3290 [ 40.273832][ T352] ? proc_fail_nth_write+0x20b/0x290 [ 40.279047][ T352] ? fsnotify_perm+0x6a/0x5d0 [ 40.283828][ T352] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 40.289264][ T352] ? vfs_write+0x9ec/0x1110 [ 40.293970][ T352] kernel_clone+0x21e/0x9e0 [ 40.298337][ T352] ? file_end_write+0x1c0/0x1c0 [ 40.303491][ T352] ? create_io_thread+0x1e0/0x1e0 [ 40.308416][ T352] ? mutex_unlock+0xb2/0x260 [ 40.313036][ T352] ? __mutex_lock_slowpath+0x10/0x10 [ 40.318215][ T352] __x64_sys_clone+0x23f/0x290 [ 40.323099][ T352] ? __do_sys_vfork+0x130/0x130 [ 40.327930][ T352] ? ksys_write+0x260/0x2c0 [ 40.332616][ T352] ? debug_smp_processor_id+0x17/0x20 [ 40.337835][ T352] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 40.343751][ T352] ? exit_to_user_mode_prepare+0x39/0xa0 [ 40.349969][ T352] do_syscall_64+0x3d/0xb0 [ 40.354261][ T352] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.360109][ T352] RIP: 0033:0x7f3a9ca6bae9 [ 40.364588][ T352] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 40.384111][ T352] RSP: 002b:00007f3a9c5ee078 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 40.392447][ T352] RAX: ffffffffffffffda RBX: 00007f3a9cb8af80 RCX: 00007f3a9ca6bae9 [ 40.400309][ T352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.408373][ T352] RBP: 00007f3a9c5ee120 R08: 0000000000000000 R09: 0000000000000000 [ 40.416364][ T352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.424226][ T352] R13: 000000000000000b R14: 00007f3a9cb8af80 R15: 00007ffeff6e6608 [ 40.431999][ T352] [ 40.434820][ T352] ---[ end trace b89efc338ec5d7a9 ]--- [ 40.454421][ T356] FAULT_INJECTION: forcing a failure. [ 40.454421][ T356] name failslab, interval 1, probability 0, space 0, times 0 [ 40.467002][ T356] CPU: 1 PID: 356 Comm: syz-executor.0 Tainted: G W 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 40.478556][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 40.488429][ T356] Call Trace: [ 40.491548][ T356] [ 40.494426][ T356] dump_stack_lvl+0x151/0x1b7 [ 40.498924][ T356] ? io_uring_drop_tctx_refs+0x190/0x190 [ 40.504492][ T356] dump_stack+0x15/0x17 [ 40.508481][ T356] should_fail+0x3c6/0x510 [ 40.512738][ T356] __should_failslab+0xa4/0xe0 [ 40.517327][ T356] ? anon_vma_clone+0x9a/0x500 [ 40.521927][ T356] should_failslab+0x9/0x20 [ 40.526267][ T356] slab_pre_alloc_hook+0x37/0xd0 [ 40.531044][ T356] ? anon_vma_clone+0x9a/0x500 [ 40.535638][ T356] kmem_cache_alloc+0x44/0x200 [ 40.540248][ T356] anon_vma_clone+0x9a/0x500 [ 40.544754][ T356] anon_vma_fork+0x91/0x4e0 [ 40.549357][ T356] ? anon_vma_name+0x4c/0x70 [ 40.553779][ T356] ? vm_area_dup+0x17a/0x230 [ 40.558229][ T356] copy_mm+0xa3a/0x13e0 [ 40.562200][ T356] ? copy_signal+0x610/0x610 [ 40.567038][ T356] ? __init_rwsem+0xd6/0x1c0 [ 40.571469][ T356] ? copy_signal+0x4e3/0x610 [ 40.575884][ T356] copy_process+0x1149/0x3290 [ 40.580411][ T356] ? proc_fail_nth_write+0x20b/0x290 [ 40.585536][ T356] ? fsnotify_perm+0x6a/0x5d0 [ 40.590038][ T356] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 40.594976][ T356] ? vfs_write+0x9ec/0x1110 [ 40.599320][ T356] kernel_clone+0x21e/0x9e0 [ 40.603672][ T356] ? file_end_write+0x1c0/0x1c0 [ 40.608355][ T356] ? create_io_thread+0x1e0/0x1e0 [ 40.613207][ T356] ? mutex_unlock+0xb2/0x260 [ 40.617807][ T356] ? __mutex_lock_slowpath+0x10/0x10 [ 40.623137][ T356] __x64_sys_clone+0x23f/0x290 [ 40.627898][ T356] ? __do_sys_vfork+0x130/0x130 [ 40.632591][ T356] ? ksys_write+0x260/0x2c0 [ 40.636930][ T356] ? debug_smp_processor_id+0x17/0x20 [ 40.642220][ T356] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 40.648121][ T356] ? exit_to_user_mode_prepare+0x39/0xa0 [ 40.653765][ T356] do_syscall_64+0x3d/0xb0 [ 40.658020][ T356] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.664128][ T356] RIP: 0033:0x7f3a9ca6bae9 [ 40.668470][ T356] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 40.688174][ T356] RSP: 002b:00007f3a9c5ee078 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 40.696467][ T356] RAX: ffffffffffffffda RBX: 00007f3a9cb8af80 RCX: 00007f3a9ca6bae9 [ 40.704629][ T356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.712443][ T356] RBP: 00007f3a9c5ee120 R08: 0000000000000000 R09: 0000000000000000 [ 40.720446][ T356] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.728676][ T356] R13: 000000000000000b R14: 00007f3a9cb8af80 R15: 00007ffeff6e6608 [ 40.736495][ T356] [ 40.750128][ T361] FAULT_INJECTION: forcing a failure. [ 40.750128][ T361] name failslab, interval 1, probability 0, space 0, times 0 [ 40.762630][ T361] CPU: 0 PID: 361 Comm: syz-executor.0 Tainted: G W 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 40.774259][ T361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 40.784156][ T361] Call Trace: [ 40.787444][ T361] [ 40.790209][ T361] dump_stack_lvl+0x151/0x1b7 [ 40.794721][ T361] ? io_uring_drop_tctx_refs+0x190/0x190 [ 40.800253][ T361] dump_stack+0x15/0x17 [ 40.804239][ T361] should_fail+0x3c6/0x510 [ 40.808500][ T361] __should_failslab+0xa4/0xe0 [ 40.813128][ T361] ? anon_vma_clone+0x9a/0x500 [ 40.817695][ T361] should_failslab+0x9/0x20 [ 40.822037][ T361] slab_pre_alloc_hook+0x37/0xd0 [ 40.826805][ T361] ? anon_vma_clone+0x9a/0x500 [ 40.831517][ T361] kmem_cache_alloc+0x44/0x200 [ 40.836181][ T361] anon_vma_clone+0x9a/0x500 [ 40.840708][ T361] anon_vma_fork+0x91/0x4e0 [ 40.845342][ T361] ? anon_vma_name+0x43/0x70 [ 40.850286][ T361] ? vm_area_dup+0x17a/0x230 [ 40.854964][ T361] copy_mm+0xa3a/0x13e0 [ 40.861083][ T361] ? copy_signal+0x610/0x610 [ 40.866501][ T361] ? __init_rwsem+0xd6/0x1c0 [ 40.871476][ T361] ? copy_signal+0x4e3/0x610 [ 40.876338][ T361] copy_process+0x1149/0x3290 [ 40.880951][ T361] ? proc_fail_nth_write+0x20b/0x290 [ 40.886152][ T361] ? fsnotify_perm+0x6a/0x5d0 [ 40.890683][ T361] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 40.895783][ T361] ? vfs_write+0x9ec/0x1110 [ 40.900201][ T361] kernel_clone+0x21e/0x9e0 [ 40.904538][ T361] ? file_end_write+0x1c0/0x1c0 [ 40.909249][ T361] ? create_io_thread+0x1e0/0x1e0 [ 40.914211][ T361] ? mutex_unlock+0xb2/0x260 [ 40.918638][ T361] ? __mutex_lock_slowpath+0x10/0x10 [ 40.923887][ T361] __x64_sys_clone+0x23f/0x290 [ 40.928688][ T361] ? __do_sys_vfork+0x130/0x130 [ 40.933881][ T361] ? ksys_write+0x260/0x2c0 [ 40.938323][ T361] ? debug_smp_processor_id+0x17/0x20 [ 40.943613][ T361] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 40.949589][ T361] ? exit_to_user_mode_prepare+0x39/0xa0 [ 40.955053][ T361] do_syscall_64+0x3d/0xb0 [ 40.959308][ T361] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.965036][ T361] RIP: 0033:0x7f3a9ca6bae9 [ 40.969311][ T361] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 40.989359][ T361] RSP: 002b:00007f3a9c5ee078 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 40.997681][ T361] RAX: ffffffffffffffda RBX: 00007f3a9cb8af80 RCX: 00007f3a9ca6bae9 [ 41.005582][ T361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.013475][ T361] RBP: 00007f3a9c5ee120 R08: 0000000000000000 R09: 0000000000000000 [ 41.021467][ T361] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.029412][ T361] R13: 000000000000000b R14: 00007f3a9cb8af80 R15: 00007ffeff6e6608 [ 41.037188][ T361] [ 41.051475][ T365] FAULT_INJECTION: forcing a failure. [ 41.051475][ T365] name failslab, interval 1, probability 0, space 0, times 0 [ 41.064358][ T365] CPU: 0 PID: 365 Comm: syz-executor.0 Tainted: G W 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 41.076430][ T365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 41.087340][ T365] Call Trace: [ 41.090858][ T365] [ 41.093880][ T365] dump_stack_lvl+0x151/0x1b7 [ 41.098704][ T365] ? io_uring_drop_tctx_refs+0x190/0x190 [ 41.104131][ T365] dump_stack+0x15/0x17 [ 41.108638][ T365] should_fail+0x3c6/0x510 [ 41.113294][ T365] __should_failslab+0xa4/0xe0 [ 41.117962][ T365] ? anon_vma_fork+0xf7/0x4e0 [ 41.122784][ T365] should_failslab+0x9/0x20 [ 41.127110][ T365] slab_pre_alloc_hook+0x37/0xd0 [ 41.132216][ T365] ? anon_vma_fork+0xf7/0x4e0 [ 41.136733][ T365] kmem_cache_alloc+0x44/0x200 [ 41.141330][ T365] anon_vma_fork+0xf7/0x4e0 [ 41.145824][ T365] ? anon_vma_name+0x4c/0x70 [ 41.150247][ T365] ? vm_area_dup+0x17a/0x230 [ 41.154851][ T365] copy_mm+0xa3a/0x13e0 [ 41.159103][ T365] ? copy_signal+0x610/0x610 [ 41.163862][ T365] ? __init_rwsem+0xd6/0x1c0 [ 41.168882][ T365] ? copy_signal+0x4e3/0x610 [ 41.173569][ T365] copy_process+0x1149/0x3290 [ 41.178255][ T365] ? proc_fail_nth_write+0x20b/0x290 [ 41.183721][ T365] ? fsnotify_perm+0x6a/0x5d0 [ 41.188412][ T365] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 41.193385][ T365] ? vfs_write+0x9ec/0x1110 [ 41.197880][ T365] kernel_clone+0x21e/0x9e0 [ 41.202441][ T365] ? file_end_write+0x1c0/0x1c0 [ 41.207620][ T365] ? create_io_thread+0x1e0/0x1e0 [ 41.213009][ T365] ? mutex_unlock+0xb2/0x260 [ 41.217877][ T365] ? __mutex_lock_slowpath+0x10/0x10 [ 41.223163][ T365] __x64_sys_clone+0x23f/0x290 [ 41.227852][ T365] ? __do_sys_vfork+0x130/0x130 [ 41.232620][ T365] ? ksys_write+0x260/0x2c0 [ 41.237388][ T365] ? debug_smp_processor_id+0x17/0x20 [ 41.242735][ T365] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 41.248749][ T365] ? exit_to_user_mode_prepare+0x39/0xa0 [ 41.254196][ T365] do_syscall_64+0x3d/0xb0 [ 41.258578][ T365] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.264562][ T365] RIP: 0033:0x7f3a9ca6bae9 [ 41.269079][ T365] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.288820][ T365] RSP: 002b:00007f3a9c5ee078 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 41.297673][ T365] RAX: ffffffffffffffda RBX: 00007f3a9cb8af80 RCX: 00007f3a9ca6bae9 [ 41.305572][ T365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.313604][ T365] RBP: 00007f3a9c5ee120 R08: 0000000000000000 R09: 0000000000000000 [ 41.321518][ T365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.329410][ T365] R13: 000000000000000b R14: 00007f3a9cb8af80 R15: 00007ffeff6e6608 [ 41.337233][ T365] [ 41.354088][ T368] FAULT_INJECTION: forcing a failure. [ 41.354088][ T368] name failslab, interval 1, probability 0, space 0, times 0 [ 41.367094][ T368] CPU: 0 PID: 368 Comm: syz-executor.0 Tainted: G W 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 41.378732][ T368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 41.388623][ T368] Call Trace: [ 41.391738][ T368] [ 41.394516][ T368] dump_stack_lvl+0x151/0x1b7 [ 41.399029][ T368] ? io_uring_drop_tctx_refs+0x190/0x190 [ 41.404529][ T368] dump_stack+0x15/0x17 [ 41.408575][ T368] should_fail+0x3c6/0x510 [ 41.412913][ T368] __should_failslab+0xa4/0xe0 [ 41.417513][ T368] ? anon_vma_fork+0x1df/0x4e0 [ 41.422114][ T368] should_failslab+0x9/0x20 [ 41.426542][ T368] slab_pre_alloc_hook+0x37/0xd0 [ 41.431315][ T368] ? anon_vma_fork+0x1df/0x4e0 [ 41.435912][ T368] kmem_cache_alloc+0x44/0x200 [ 41.440721][ T368] anon_vma_fork+0x1df/0x4e0 [ 41.445158][ T368] copy_mm+0xa3a/0x13e0 [ 41.449239][ T368] ? copy_signal+0x610/0x610 [ 41.453760][ T368] ? __init_rwsem+0xd6/0x1c0 [ 41.458302][ T368] ? copy_signal+0x4e3/0x610 [ 41.462855][ T368] copy_process+0x1149/0x3290 [ 41.467507][ T368] ? proc_fail_nth_write+0x20b/0x290 [ 41.472629][ T368] ? fsnotify_perm+0x6a/0x5d0 [ 41.477492][ T368] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 41.482527][ T368] ? vfs_write+0x9ec/0x1110 [ 41.486965][ T368] kernel_clone+0x21e/0x9e0 [ 41.491309][ T368] ? file_end_write+0x1c0/0x1c0 [ 41.496272][ T368] ? create_io_thread+0x1e0/0x1e0 [ 41.501392][ T368] ? mutex_unlock+0xb2/0x260 [ 41.506263][ T368] ? __mutex_lock_slowpath+0x10/0x10 [ 41.511383][ T368] __x64_sys_clone+0x23f/0x290 [ 41.515975][ T368] ? __do_sys_vfork+0x130/0x130 [ 41.520662][ T368] ? ksys_write+0x260/0x2c0 [ 41.525092][ T368] ? debug_smp_processor_id+0x17/0x20 [ 41.530469][ T368] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 41.536519][ T368] ? exit_to_user_mode_prepare+0x39/0xa0 [ 41.542081][ T368] do_syscall_64+0x3d/0xb0 [ 41.547019][ T368] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.552773][ T368] RIP: 0033:0x7f3a9ca6bae9 [ 41.557000][ T368] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.576527][ T368] RSP: 002b:00007f3a9c5ee078 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 41.584775][ T368] RAX: ffffffffffffffda RBX: 00007f3a9cb8af80 RCX: 00007f3a9ca6bae9 [ 41.592848][ T368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.600657][ T368] RBP: 00007f3a9c5ee120 R08: 0000000000000000 R09: 0000000000000000 [ 41.609532][ T368] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.617406][ T368] R13: 000000000000000b R14: 00007f3a9cb8af80 R15: 00007ffeff6e6608 [ 41.626166][ T368] [ 41.638232][ T371] FAULT_INJECTION: forcing a failure. [ 41.638232][ T371] name failslab, interval 1, probability 0, space 0, times 0 [ 41.650869][ T371] CPU: 0 PID: 371 Comm: syz-executor.0 Tainted: G W 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 41.662323][ T371] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 41.672206][ T371] Call Trace: [ 41.675427][ T371] [ 41.678188][ T371] dump_stack_lvl+0x151/0x1b7 [ 41.682702][ T371] ? io_uring_drop_tctx_refs+0x190/0x190 [ 41.688169][ T371] dump_stack+0x15/0x17 [ 41.692186][ T371] should_fail+0x3c6/0x510 [ 41.696415][ T371] __should_failslab+0xa4/0xe0 [ 41.701086][ T371] ? anon_vma_clone+0x9a/0x500 [ 41.705620][ T371] should_failslab+0x9/0x20 [ 41.709954][ T371] slab_pre_alloc_hook+0x37/0xd0 [ 41.714728][ T371] ? anon_vma_clone+0x9a/0x500 [ 41.719325][ T371] kmem_cache_alloc+0x44/0x200 [ 41.723927][ T371] anon_vma_clone+0x9a/0x500 [ 41.728352][ T371] anon_vma_fork+0x91/0x4e0 [ 41.732690][ T371] ? anon_vma_name+0x43/0x70 [ 41.737119][ T371] ? vm_area_dup+0x17a/0x230 [ 41.741546][ T371] copy_mm+0xa3a/0x13e0 [ 41.745638][ T371] ? copy_signal+0x610/0x610 [ 41.750050][ T371] ? __init_rwsem+0xd6/0x1c0 [ 41.754651][ T371] ? copy_signal+0x4e3/0x610 [ 41.759082][ T371] copy_process+0x1149/0x3290 [ 41.763596][ T371] ? proc_fail_nth_write+0x20b/0x290 [ 41.768711][ T371] ? fsnotify_perm+0x6a/0x5d0 [ 41.773487][ T371] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 41.778433][ T371] ? vfs_write+0x9ec/0x1110 [ 41.782872][ T371] kernel_clone+0x21e/0x9e0 [ 41.787205][ T371] ? file_end_write+0x1c0/0x1c0 [ 41.791979][ T371] ? create_io_thread+0x1e0/0x1e0 [ 41.796836][ T371] ? mutex_unlock+0xb2/0x260 [ 41.801392][ T371] ? __mutex_lock_slowpath+0x10/0x10 [ 41.806561][ T371] __x64_sys_clone+0x23f/0x290 [ 41.811167][ T371] ? __do_sys_vfork+0x130/0x130 [ 41.815940][ T371] ? ksys_write+0x260/0x2c0 [ 41.820274][ T371] ? debug_smp_processor_id+0x17/0x20 [ 41.825480][ T371] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 41.831397][ T371] ? exit_to_user_mode_prepare+0x39/0xa0 [ 41.836849][ T371] do_syscall_64+0x3d/0xb0 [ 41.841100][ T371] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.846836][ T371] RIP: 0033:0x7f3a9ca6bae9 [ 41.851671][ T371] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.871378][ T371] RSP: 002b:00007f3a9c5ee078 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 41.879695][ T371] RAX: ffffffffffffffda RBX: 00007f3a9cb8af80 RCX: 00007f3a9ca6bae9 [ 41.887682][ T371] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.895667][ T371] RBP: 00007f3a9c5ee120 R08: 0000000000000000 R09: 0000000000000000 [ 41.903474][ T371] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.911722][ T371] R13: 000000000000000b R14: 00007f3a9cb8af80 R15: 00007ffeff6e6608 [ 41.919558][ T371] [ 41.930629][ T376] FAULT_INJECTION: forcing a failure. [ 41.930629][ T376] name failslab, interval 1, probability 0, space 0, times 0 [ 41.943297][ T376] CPU: 0 PID: 376 Comm: syz-executor.0 Tainted: G W 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 41.954928][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 41.965187][ T376] Call Trace: [ 41.968314][ T376] [ 41.971084][ T376] dump_stack_lvl+0x151/0x1b7 [ 41.975782][ T376] ? io_uring_drop_tctx_refs+0x190/0x190 [ 41.981649][ T376] dump_stack+0x15/0x17 [ 41.986227][ T376] should_fail+0x3c6/0x510 [ 41.990998][ T376] __should_failslab+0xa4/0xe0 [ 41.995850][ T376] ? anon_vma_fork+0xf7/0x4e0 [ 42.000713][ T376] should_failslab+0x9/0x20 [ 42.005428][ T376] slab_pre_alloc_hook+0x37/0xd0 [ 42.010504][ T376] ? anon_vma_fork+0xf7/0x4e0 [ 42.015163][ T376] kmem_cache_alloc+0x44/0x200 [ 42.020096][ T376] anon_vma_fork+0xf7/0x4e0 [ 42.024969][ T376] ? anon_vma_name+0x43/0x70 [ 42.029539][ T376] ? vm_area_dup+0x17a/0x230 [ 42.034678][ T376] copy_mm+0xa3a/0x13e0 [ 42.038936][ T376] ? copy_signal+0x610/0x610 [ 42.043447][ T376] ? __init_rwsem+0xd6/0x1c0 [ 42.047873][ T376] ? copy_signal+0x4e3/0x610 [ 42.052291][ T376] copy_process+0x1149/0x3290 [ 42.056893][ T376] ? proc_fail_nth_write+0x20b/0x290 [ 42.062012][ T376] ? fsnotify_perm+0x6a/0x5d0 [ 42.066667][ T376] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 42.071667][ T376] ? vfs_write+0x9ec/0x1110 [ 42.075984][ T376] kernel_clone+0x21e/0x9e0 [ 42.080321][ T376] ? file_end_write+0x1c0/0x1c0 [ 42.085012][ T376] ? create_io_thread+0x1e0/0x1e0 [ 42.089869][ T376] ? mutex_unlock+0xb2/0x260 [ 42.094295][ T376] ? __mutex_lock_slowpath+0x10/0x10 [ 42.099502][ T376] __x64_sys_clone+0x23f/0x290 [ 42.104204][ T376] ? __do_sys_vfork+0x130/0x130 [ 42.108967][ T376] ? ksys_write+0x260/0x2c0 [ 42.113311][ T376] ? debug_smp_processor_id+0x17/0x20 [ 42.118525][ T376] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 42.124588][ T376] ? exit_to_user_mode_prepare+0x39/0xa0 [ 42.130529][ T376] do_syscall_64+0x3d/0xb0 [ 42.134882][ T376] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.140616][ T376] RIP: 0033:0x7f3a9ca6bae9 [ 42.145315][ T376] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.167708][ T376] RSP: 002b:00007f3a9c5ee078 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 42.177624][ T376] RAX: ffffffffffffffda RBX: 00007f3a9cb8af80 RCX: 00007f3a9ca6bae9 [ 42.185444][ T376] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.193244][ T376] RBP: 00007f3a9c5ee120 R08: 0000000000000000 R09: 0000000000000000 [ 42.201161][ T376] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.209395][ T376] R13: 000000000000000b R14: 00007f3a9cb8af80 R15: 00007ffeff6e6608 [ 42.217126][ T376] [ 42.228612][ T379] FAULT_INJECTION: forcing a failure. [ 42.228612][ T379] name failslab, interval 1, probability 0, space 0, times 0 [ 42.241102][ T379] CPU: 0 PID: 379 Comm: syz-executor.0 Tainted: G W 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 42.253005][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 42.262897][ T379] Call Trace: [ 42.266041][ T379] [ 42.268885][ T379] dump_stack_lvl+0x151/0x1b7 [ 42.273397][ T379] ? io_uring_drop_tctx_refs+0x190/0x190 [ 42.278952][ T379] dump_stack+0x15/0x17 [ 42.282943][ T379] should_fail+0x3c6/0x510 [ 42.287196][ T379] __should_failslab+0xa4/0xe0 [ 42.291892][ T379] ? anon_vma_fork+0xf7/0x4e0 [ 42.296395][ T379] should_failslab+0x9/0x20 [ 42.301082][ T379] slab_pre_alloc_hook+0x37/0xd0 [ 42.305860][ T379] ? anon_vma_fork+0xf7/0x4e0 [ 42.310369][ T379] kmem_cache_alloc+0x44/0x200 [ 42.315145][ T379] anon_vma_fork+0xf7/0x4e0 [ 42.319480][ T379] ? anon_vma_name+0x43/0x70 [ 42.324000][ T379] ? vm_area_dup+0x17a/0x230 [ 42.328427][ T379] copy_mm+0xa3a/0x13e0 [ 42.332418][ T379] ? copy_signal+0x610/0x610 [ 42.336851][ T379] ? __init_rwsem+0xd6/0x1c0 [ 42.341292][ T379] ? copy_signal+0x4e3/0x610 [ 42.346222][ T379] copy_process+0x1149/0x3290 [ 42.350871][ T379] ? proc_fail_nth_write+0x20b/0x290 [ 42.355970][ T379] ? fsnotify_perm+0x6a/0x5d0 [ 42.360500][ T379] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 42.365785][ T379] ? vfs_write+0x9ec/0x1110 [ 42.370139][ T379] kernel_clone+0x21e/0x9e0 [ 42.374451][ T379] ? file_end_write+0x1c0/0x1c0 [ 42.379130][ T379] ? create_io_thread+0x1e0/0x1e0 [ 42.384104][ T379] ? mutex_unlock+0xb2/0x260 [ 42.388616][ T379] ? __mutex_lock_slowpath+0x10/0x10 [ 42.394001][ T379] __x64_sys_clone+0x23f/0x290 [ 42.398690][ T379] ? __do_sys_vfork+0x130/0x130 [ 42.403373][ T379] ? ksys_write+0x260/0x2c0 [ 42.407733][ T379] ? debug_smp_processor_id+0x17/0x20 [ 42.413044][ T379] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 42.418946][ T379] ? exit_to_user_mode_prepare+0x39/0xa0 [ 42.424426][ T379] do_syscall_64+0x3d/0xb0 [ 42.428680][ T379] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.434574][ T379] RIP: 0033:0x7f3a9ca6bae9 [ 42.439042][ T379] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.458572][ T379] RSP: 002b:00007f3a9c5ee078 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 42.466919][ T379] RAX: ffffffffffffffda RBX: 00007f3a9cb8af80 RCX: 00007f3a9ca6bae9 [ 42.474808][ T379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.482631][ T379] RBP: 00007f3a9c5ee120 R08: 0000000000000000 R09: 0000000000000000 [ 42.490535][ T379] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.498425][ T379] R13: 000000000000000b R14: 00007f3a9cb8af80 R15: 00007ffeff6e6608 [ 42.506421][ T379] [ 42.518196][ T382] FAULT_INJECTION: forcing a failure. [ 42.518196][ T382] name failslab, interval 1, probability 0, space 0, times 0 [ 42.530967][ T382] CPU: 0 PID: 382 Comm: syz-executor.0 Tainted: G W 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 42.542987][ T382] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 42.552876][ T382] Call Trace: [ 42.555998][ T382] [ 42.558782][ T382] dump_stack_lvl+0x151/0x1b7 [ 42.563297][ T382] ? io_uring_drop_tctx_refs+0x190/0x190 [ 42.568844][ T382] dump_stack+0x15/0x17 [ 42.572832][ T382] should_fail+0x3c6/0x510 [ 42.577109][ T382] __should_failslab+0xa4/0xe0 [ 42.581691][ T382] ? anon_vma_fork+0xf7/0x4e0 [ 42.586226][ T382] should_failslab+0x9/0x20 [ 42.590537][ T382] slab_pre_alloc_hook+0x37/0xd0 [ 42.595456][ T382] ? anon_vma_fork+0xf7/0x4e0 [ 42.599954][ T382] kmem_cache_alloc+0x44/0x200 [ 42.604554][ T382] anon_vma_fork+0xf7/0x4e0 [ 42.608903][ T382] ? anon_vma_name+0x43/0x70 [ 42.613414][ T382] ? vm_area_dup+0x17a/0x230 [ 42.617940][ T382] copy_mm+0xa3a/0x13e0 [ 42.621926][ T382] ? copy_signal+0x610/0x610 [ 42.626339][ T382] ? __init_rwsem+0xd6/0x1c0 [ 42.630790][ T382] ? copy_signal+0x4e3/0x610 [ 42.635211][ T382] copy_process+0x1149/0x3290 [ 42.639916][ T382] ? proc_fail_nth_write+0x20b/0x290 [ 42.645288][ T382] ? fsnotify_perm+0x6a/0x5d0 [ 42.649913][ T382] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 42.654861][ T382] ? vfs_write+0x9ec/0x1110 [ 42.660430][ T382] kernel_clone+0x21e/0x9e0 [ 42.665501][ T382] ? file_end_write+0x1c0/0x1c0 [ 42.670364][ T382] ? create_io_thread+0x1e0/0x1e0 [ 42.675576][ T382] ? mutex_unlock+0xb2/0x260 [ 42.680154][ T382] ? __mutex_lock_slowpath+0x10/0x10 [ 42.685285][ T382] __x64_sys_clone+0x23f/0x290 [ 42.690177][ T382] ? __do_sys_vfork+0x130/0x130 [ 42.694952][ T382] ? ksys_write+0x260/0x2c0 [ 42.699277][ T382] ? debug_smp_processor_id+0x17/0x20 [ 42.704486][ T382] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 42.710382][ T382] ? exit_to_user_mode_prepare+0x39/0xa0 [ 42.715957][ T382] do_syscall_64+0x3d/0xb0 [ 42.720209][ T382] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.725929][ T382] RIP: 0033:0x7f3a9ca6bae9 [ 42.730346][ T382] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.749965][ T382] RSP: 002b:00007f3a9c5ee078 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 42.758227][ T382] RAX: ffffffffffffffda RBX: 00007f3a9cb8af80 RCX: 00007f3a9ca6bae9 [ 42.766177][ T382] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 42.774054][ T382] RBP: 00007f3a9c5ee120 R08: 0000000000000000 R09: 0000000000000000 [ 42.782080][ T382] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 42.790084][ T382] R13: 000000000000000b R14: 00007f3a9cb8af80 R15: 00007ffeff6e6608 [ 42.797979][ T382] [ 42.810468][ T386] FAULT_INJECTION: forcing a failure. [ 42.810468][ T386] name failslab, interval 1, probability 0, space 0, times 0 [ 42.823105][ T386] CPU: 0 PID: 386 Comm: syz-executor.0 Tainted: G W 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 42.835067][ T386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 42.845134][ T386] Call Trace: [ 42.848285][ T386] [ 42.851031][ T386] dump_stack_lvl+0x151/0x1b7 [ 42.855632][ T386] ? io_uring_drop_tctx_refs+0x190/0x190 [ 42.861105][ T386] dump_stack+0x15/0x17 [ 42.865092][ T386] should_fail+0x3c6/0x510 [ 42.869343][ T386] __should_failslab+0xa4/0xe0 [ 42.874245][ T386] ? anon_vma_clone+0x9a/0x500 [ 42.878787][ T386] should_failslab+0x9/0x20 [ 42.883230][ T386] slab_pre_alloc_hook+0x37/0xd0 [ 42.888094][ T386] ? anon_vma_clone+0x9a/0x500 [ 42.892807][ T386] kmem_cache_alloc+0x44/0x200 [ 42.897403][ T386] anon_vma_clone+0x9a/0x500 [ 42.901825][ T386] anon_vma_fork+0x91/0x4e0 [ 42.906162][ T386] ? anon_vma_name+0x43/0x70 [ 42.910587][ T386] ? vm_area_dup+0x17a/0x230 [ 42.915027][ T386] copy_mm+0xa3a/0x13e0 [ 42.919334][ T386] ? copy_signal+0x610/0x610 [ 42.923944][ T386] ? __init_rwsem+0xd6/0x1c0 [ 42.928360][ T386] ? copy_signal+0x4e3/0x610 [ 42.932789][ T386] copy_process+0x1149/0x3290 [ 42.937310][ T386] ? proc_fail_nth_write+0x20b/0x290 [ 42.942603][ T386] ? fsnotify_perm+0x6a/0x5d0 [ 42.947318][ T386] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 42.952493][ T386] ? vfs_write+0x9ec/0x1110 [ 42.957472][ T386] kernel_clone+0x21e/0x9e0 [ 42.962026][ T386] ? file_end_write+0x1c0/0x1c0 [ 42.967238][ T386] ? create_io_thread+0x1e0/0x1e0 [ 42.972814][ T386] ? mutex_unlock+0xb2/0x260 [ 42.977552][ T386] ? __mutex_lock_slowpath+0x10/0x10 [ 42.982862][ T386] __x64_sys_clone+0x23f/0x290 [ 42.987711][ T386] ? __do_sys_vfork+0x130/0x130 [ 42.992397][ T386] ? ksys_write+0x260/0x2c0 [ 42.997172][ T386] ? debug_smp_processor_id+0x17/0x20 [ 43.002588][ T386] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 43.008475][ T386] ? exit_to_user_mode_prepare+0x39/0xa0 [ 43.014066][ T386] do_syscall_64+0x3d/0xb0 [ 43.018431][ T386] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.024337][ T386] RIP: 0033:0x7f3a9ca6bae9 [ 43.028660][ T386] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.048450][ T386] RSP: 002b:00007f3a9c5ee078 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 43.056692][ T386] RAX: ffffffffffffffda RBX: 00007f3a9cb8af80 RCX: 00007f3a9ca6bae9 [ 43.064936][ T386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.072919][ T386] RBP: 00007f3a9c5ee120 R08: 0000000000000000 R09: 0000000000000000 [ 43.080835][ T386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 43.088997][ T386] R13: 000000000000000b R14: 00007f3a9cb8af80 R15: 00007ffeff6e6608 [ 43.096982][ T386] [ 43.100668][ T386] BUG: unable to handle page fault for address: ffffed1800000008 [ 43.108413][ T386] #PF: supervisor read access in kernel mode [ 43.114214][ T386] #PF: error_code(0x0000) - not-present page [ 43.120559][ T386] PGD 23fff2067 P4D 23fff2067 PUD 0 [ 43.125771][ T386] Oops: 0000 [#1] PREEMPT SMP KASAN [ 43.130892][ T386] CPU: 0 PID: 386 Comm: syz-executor.0 Tainted: G W 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 43.142600][ T386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 43.152707][ T386] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 43.158783][ T386] Code: 00 74 08 4c 89 ef e8 5e 0b 2b ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 30 0b 2b ff 48 89 d8 48 8b 1b 4c [ 43.178664][ T386] RSP: 0018:ffffc90000e678f8 EFLAGS: 00010a02 [ 43.184732][ T386] RAX: ffff88c000000038 RBX: ffff88c000000040 RCX: dffffc0000000000 [ 43.192642][ T386] RDX: ffffffff81a4f280 RSI: ffff88810f9f4968 RDI: ffff88810cd7f870 [ 43.200707][ T386] RBP: ffffc90000e67960 R08: dffffc0000000000 R09: ffff88810cd7f878 [ 43.208684][ T386] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 43.216520][ T386] R13: ffff8881242c2870 R14: 1ffff11800000008 R15: ffff88810cc3f4f8 [ 43.224497][ T386] FS: 00007f3a9c5ee6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 43.233704][ T386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.240129][ T386] CR2: ffffed1800000008 CR3: 000000010cd10000 CR4: 00000000003506b0 [ 43.247941][ T386] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.255827][ T386] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.263633][ T386] Call Trace: [ 43.266776][ T386] [ 43.269625][ T386] ? __die_body+0x62/0xb0 [ 43.273787][ T386] ? __die+0x7e/0x90 [ 43.277553][ T386] ? page_fault_oops+0x7f9/0xa90 [ 43.282307][ T386] ? __rb_insert_augmented+0x91/0x610 [ 43.287658][ T386] ? kernelmode_fixup_or_oops+0x270/0x270 [ 43.293228][ T386] ? is_prefetch+0x47a/0x6d0 [ 43.297672][ T386] ? search_bpf_extables+0x26d/0x2c0 [ 43.303022][ T386] ? __rb_insert_augmented+0x91/0x610 [ 43.308372][ T386] ? __rb_insert_augmented+0x91/0x610 [ 43.313572][ T386] ? __rb_insert_augmented+0x91/0x610 [ 43.318779][ T386] ? fixup_exception+0xbb/0x13c0 [ 43.323560][ T386] ? kernelmode_fixup_or_oops+0x21b/0x270 [ 43.329110][ T386] ? __bad_area_nosemaphore+0xcf/0x490 [ 43.334407][ T386] ? _raw_spin_lock+0x1b0/0x1b0 [ 43.339176][ T386] ? bad_area_nosemaphore+0x2d/0x40 [ 43.344210][ T386] ? do_kern_addr_fault+0x69/0x80 [ 43.349068][ T386] ? exc_page_fault+0x4eb/0x830 [ 43.353762][ T386] ? try_invoke_on_locked_down_task+0x2a0/0x2a0 [ 43.359829][ T386] ? rwsem_mark_wake+0x136/0x6b0 [ 43.364777][ T386] ? _raw_spin_lock_irqsave+0xf9/0x210 [ 43.370074][ T386] ? __kasan_check_write+0x14/0x20 [ 43.375012][ T386] ? wake_up_q+0x11c/0x1d0 [ 43.379258][ T386] ? asm_exc_page_fault+0x27/0x30 [ 43.384312][ T386] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 43.390563][ T386] ? __rb_insert_augmented+0x91/0x610 [ 43.395777][ T386] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 43.402270][ T386] vma_interval_tree_insert_after+0x2be/0x2d0 [ 43.408184][ T386] copy_mm+0xba2/0x13e0 [ 43.412692][ T386] ? copy_signal+0x610/0x610 [ 43.417101][ T386] ? __init_rwsem+0xd6/0x1c0 [ 43.421643][ T386] ? copy_signal+0x4e3/0x610 [ 43.426080][ T386] copy_process+0x1149/0x3290 [ 43.430646][ T386] ? proc_fail_nth_write+0x20b/0x290 [ 43.435785][ T386] ? fsnotify_perm+0x6a/0x5d0 [ 43.441082][ T386] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 43.446244][ T386] ? vfs_write+0x9ec/0x1110 [ 43.450582][ T386] kernel_clone+0x21e/0x9e0 [ 43.455268][ T386] ? file_end_write+0x1c0/0x1c0 [ 43.459944][ T386] ? create_io_thread+0x1e0/0x1e0 [ 43.464801][ T386] ? mutex_unlock+0xb2/0x260 [ 43.469217][ T386] ? __mutex_lock_slowpath+0x10/0x10 [ 43.474535][ T386] __x64_sys_clone+0x23f/0x290 [ 43.479114][ T386] ? __do_sys_vfork+0x130/0x130 [ 43.483926][ T386] ? ksys_write+0x260/0x2c0 [ 43.488229][ T386] ? debug_smp_processor_id+0x17/0x20 [ 43.493602][ T386] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 43.499619][ T386] ? exit_to_user_mode_prepare+0x39/0xa0 [ 43.505159][ T386] do_syscall_64+0x3d/0xb0 [ 43.509500][ T386] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.515239][ T386] RIP: 0033:0x7f3a9ca6bae9 [ 43.519749][ T386] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.539467][ T386] RSP: 002b:00007f3a9c5ee078 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 43.547892][ T386] RAX: ffffffffffffffda RBX: 00007f3a9cb8af80 RCX: 00007f3a9ca6bae9 [ 43.556327][ T386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 43.564169][ T386] RBP: 00007f3a9c5ee120 R08: 0000000000000000 R09: 0000000000000000 [ 43.571935][ T386] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 43.580697][ T386] R13: 000000000000000b R14: 00007f3a9cb8af80 R15: 00007ffeff6e6608 [ 43.588589][ T386] [ 43.591534][ T386] Modules linked in: [ 43.595351][ T386] CR2: ffffed1800000008 [ 43.599336][ T386] ---[ end trace b89efc338ec5d7aa ]--- [ 43.604627][ T386] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 43.610533][ T386] Code: 00 74 08 4c 89 ef e8 5e 0b 2b ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 30 0b 2b ff 48 89 d8 48 8b 1b 4c [ 43.631388][ T386] RSP: 0018:ffffc90000e678f8 EFLAGS: 00010a02 [ 43.638198][ T386] RAX: ffff88c000000038 RBX: ffff88c000000040 RCX: dffffc0000000000 [ 43.646111][ T386] RDX: ffffffff81a4f280 RSI: ffff88810f9f4968 RDI: ffff88810cd7f870 [ 43.653995][ T386] RBP: ffffc90000e67960 R08: dffffc0000000000 R09: ffff88810cd7f878 [ 43.661887][ T386] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 43.670513][ T386] R13: ffff8881242c2870 R14: 1ffff11800000008 R15: ffff88810cc3f4f8 [ 43.678653][ T386] FS: 00007f3a9c5ee6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 43.688569][ T386] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.695244][ T386] CR2: ffffed1800000008 CR3: 000000010cd10000 CR4: 00000000003506b0 [ 43.703513][ T386] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.713466][ T386] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.721524][ T386] Kernel panic - not syncing: Fatal exception [ 43.728058][ T386] Kernel Offset: disabled [ 43.732285][ T386] Rebooting in 86400 seconds..