Warning: Permanently added '10.128.1.188' (ED25519) to the list of known hosts. 2024/04/08 03:00:29 ignoring optional flag "sandboxArg"="0" 2024/04/08 03:00:29 parsed 1 programs 2024/04/08 03:00:29 executed programs: 0 [ 40.387101][ T30] audit: type=1400 audit(1712545229.782:152): avc: denied { mounton } for pid=339 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 40.412861][ T30] audit: type=1400 audit(1712545229.782:153): avc: denied { mount } for pid=339 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 40.589350][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.596478][ T346] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.604518][ T346] device bridge_slave_0 entered promiscuous mode [ 40.612890][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.619886][ T346] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.627606][ T346] device bridge_slave_1 entered promiscuous mode [ 40.706657][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.713861][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.721536][ T352] device bridge_slave_0 entered promiscuous mode [ 40.739198][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.746288][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.754825][ T354] device bridge_slave_0 entered promiscuous mode [ 40.761997][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.768997][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.776795][ T356] device bridge_slave_0 entered promiscuous mode [ 40.783912][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.790867][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.798418][ T352] device bridge_slave_1 entered promiscuous mode [ 40.816861][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.824150][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.831622][ T354] device bridge_slave_1 entered promiscuous mode [ 40.838222][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.845218][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.852459][ T356] device bridge_slave_1 entered promiscuous mode [ 40.889772][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.897981][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.905443][ T357] device bridge_slave_0 entered promiscuous mode [ 40.913132][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.919994][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.927500][ T358] device bridge_slave_0 entered promiscuous mode [ 40.951373][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.958581][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.966185][ T357] device bridge_slave_1 entered promiscuous mode [ 40.975529][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.982820][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.990462][ T358] device bridge_slave_1 entered promiscuous mode [ 41.007030][ T30] audit: type=1400 audit(1712545230.402:154): avc: denied { write } for pid=346 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.030173][ T30] audit: type=1400 audit(1712545230.402:155): avc: denied { read } for pid=346 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.065173][ T346] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.072236][ T346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.079375][ T346] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.086330][ T346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.266358][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.273712][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.282997][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.290758][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.306918][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.314980][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.321951][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.343110][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.351291][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.358299][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.390929][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.398518][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.407103][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.413958][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.441819][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.449774][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.458339][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.466701][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.474353][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.481838][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.489672][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.510889][ T346] device veth0_vlan entered promiscuous mode [ 41.524956][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.533597][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.541907][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.548830][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.556431][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.564700][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.571668][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.579177][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.589580][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.596557][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.604344][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.645737][ T346] device veth1_macvtap entered promiscuous mode [ 41.652625][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.660356][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.667588][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.675931][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.684169][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.693080][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.701612][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.708926][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.716899][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.725402][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.734038][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.741774][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.749175][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 41.757992][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.766299][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.773423][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.780670][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.789001][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.797238][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.804117][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.811415][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.819288][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.827399][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.835300][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.843325][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 41.851422][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.859895][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 41.868572][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.876571][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 41.885826][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.894232][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 41.902026][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.910410][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 41.920563][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 41.929493][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.938106][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 41.946625][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.954807][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.961758][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.985965][ T352] device veth0_vlan entered promiscuous mode [ 42.002881][ T356] device veth0_vlan entered promiscuous mode [ 42.009242][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.017723][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.027646][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.034977][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.042371][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.050209][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.057532][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.065042][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.072480][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.080204][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.088976][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.097061][ T295] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.103940][ T295] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.111216][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.119300][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.127502][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.134456][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.141712][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.150183][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.158424][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.166690][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.174868][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.187879][ T354] device veth0_vlan entered promiscuous mode [ 42.205333][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.214013][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.222297][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.229651][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.237617][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 42.245195][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.253425][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.261507][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.270629][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.278434][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.286927][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.295215][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.303192][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.317796][ T354] device veth1_macvtap entered promiscuous mode [ 42.328095][ T352] device veth1_macvtap entered promiscuous mode [ 42.343214][ T356] device veth1_macvtap entered promiscuous mode [ 42.354051][ T358] device veth0_vlan entered promiscuous mode [ 42.360493][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.368541][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.377137][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.384995][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.392615][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.401183][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.421886][ T30] audit: type=1400 audit(1712545231.812:156): avc: denied { mounton } for pid=346 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 42.429519][ T357] device veth0_vlan entered promiscuous mode [ 42.459018][ T380] FAULT_INJECTION: forcing a failure. [ 42.459018][ T380] name failslab, interval 1, probability 0, space 0, times 1 [ 42.475542][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.477284][ T380] CPU: 1 PID: 380 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 42.485569][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.494480][ T380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 42.494496][ T380] Call Trace: [ 42.494502][ T380] [ 42.494510][ T380] dump_stack_lvl+0x151/0x1b7 [ 42.494535][ T380] ? io_uring_drop_tctx_refs+0x190/0x190 [ 42.494561][ T380] ? avc_denied+0x1b0/0x1b0 [ 42.533040][ T380] dump_stack+0x15/0x17 [ 42.537072][ T380] should_fail+0x3c6/0x510 [ 42.541369][ T380] __should_failslab+0xa4/0xe0 [ 42.546138][ T380] ? vm_area_dup+0x26/0x230 [ 42.550483][ T380] should_failslab+0x9/0x20 [ 42.554840][ T380] slab_pre_alloc_hook+0x37/0xd0 [ 42.559935][ T380] ? vm_area_dup+0x26/0x230 [ 42.564396][ T380] kmem_cache_alloc+0x44/0x200 [ 42.569183][ T380] vm_area_dup+0x26/0x230 [ 42.573339][ T380] copy_mm+0x9a1/0x13e0 [ 42.577411][ T380] ? copy_signal+0x610/0x610 [ 42.582181][ T380] ? __init_rwsem+0xd6/0x1c0 [ 42.586788][ T380] ? copy_signal+0x4e3/0x610 [ 42.591397][ T380] copy_process+0x1149/0x3290 [ 42.596317][ T380] ? proc_fail_nth_write+0x20b/0x290 [ 42.601536][ T380] ? fsnotify_perm+0x6a/0x5d0 [ 42.606501][ T380] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 42.611584][ T380] ? vfs_write+0x9ec/0x1110 [ 42.616114][ T380] kernel_clone+0x21e/0x9e0 [ 42.620474][ T380] ? file_end_write+0x1c0/0x1c0 [ 42.625226][ T380] ? create_io_thread+0x1e0/0x1e0 [ 42.630365][ T380] ? mutex_unlock+0xb2/0x260 [ 42.634952][ T380] ? __mutex_lock_slowpath+0x10/0x10 [ 42.640165][ T380] __x64_sys_clone+0x23f/0x290 [ 42.644898][ T380] ? __do_sys_vfork+0x130/0x130 [ 42.649660][ T380] ? ksys_write+0x260/0x2c0 [ 42.654126][ T380] ? debug_smp_processor_id+0x17/0x20 [ 42.659633][ T380] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 42.665504][ T380] ? exit_to_user_mode_prepare+0x39/0xa0 [ 42.671056][ T380] do_syscall_64+0x3d/0xb0 [ 42.675576][ T380] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.681298][ T380] RIP: 0033:0x7f493777b8d9 [ 42.685748][ T380] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.705448][ T380] RSP: 002b:00007f49372fe078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 42.713776][ T380] RAX: ffffffffffffffda RBX: 00007f493789af80 RCX: 00007f493777b8d9 [ 42.721601][ T380] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000008200 [ 42.730052][ T380] RBP: 00007f49372fe120 R08: 0000000000000000 R09: 0000000000000000 [ 42.737989][ T380] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 42.746065][ T380] R13: 000000000000000b R14: 00007f493789af80 R15: 00007ffc224c8378 [ 42.754500][ T380] [ 42.757971][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.769022][ T384] FAULT_INJECTION: forcing a failure. [ 42.769022][ T384] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 42.769552][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.784492][ T384] CPU: 1 PID: 384 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 42.791625][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.800150][ T384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 42.800165][ T384] Call Trace: [ 42.800170][ T384] [ 42.800178][ T384] dump_stack_lvl+0x151/0x1b7 [ 42.800204][ T384] ? io_uring_drop_tctx_refs+0x190/0x190 [ 42.808440][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.818334][ T384] dump_stack+0x15/0x17 [ 42.818357][ T384] should_fail+0x3c6/0x510 [ 42.818377][ T384] should_fail_alloc_page+0x5a/0x80 [ 42.818398][ T384] prepare_alloc_pages+0x15c/0x700 [ 42.822526][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.824391][ T384] ? __alloc_pages_bulk+0xe40/0xe40 [ 42.829188][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.834373][ T384] __alloc_pages+0x18c/0x8f0 [ 42.834398][ T384] ? prep_new_page+0x110/0x110 [ 42.834421][ T384] get_zeroed_page+0x1b/0x40 [ 42.834440][ T384] __pud_alloc+0x8b/0x260 [ 42.843225][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 42.846282][ T384] ? stack_trace_snprint+0xf0/0xf0 [ 42.851213][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.855671][ T384] ? do_handle_mm_fault+0x2330/0x2330 [ 42.861258][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.868572][ T384] ? __stack_depot_save+0x34/0x470 [ 42.874246][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.881811][ T384] ? anon_vma_clone+0x9a/0x500 [ 42.881845][ T384] copy_page_range+0x2bcf/0x2f90 [ 42.881864][ T384] ? __kasan_slab_alloc+0xb1/0xe0 [ 42.881881][ T384] ? slab_post_alloc_hook+0x53/0x2c0 [ 42.881901][ T384] ? copy_mm+0xa3a/0x13e0 [ 42.887443][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.891102][ T384] ? copy_process+0x1149/0x3290 [ 42.891131][ T384] ? kernel_clone+0x21e/0x9e0 [ 42.891150][ T384] ? __x64_sys_clone+0x23f/0x290 [ 42.891171][ T384] ? do_syscall_64+0x3d/0xb0 [ 42.896423][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.900038][ T384] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.900083][ T384] ? pfn_valid+0x1e0/0x1e0 [ 42.900101][ T384] ? rwsem_write_trylock+0x15b/0x290 [ 42.900121][ T384] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 42.900145][ T384] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 42.900168][ T384] ? __rb_insert_augmented+0x5de/0x610 [ 42.900194][ T384] copy_mm+0xc7e/0x13e0 [ 42.900218][ T384] ? copy_signal+0x610/0x610 [ 42.909113][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.913117][ T384] ? __init_rwsem+0xd6/0x1c0 [ 42.913144][ T384] ? copy_signal+0x4e3/0x610 [ 42.913166][ T384] copy_process+0x1149/0x3290 [ 42.921943][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.927505][ T384] ? proc_fail_nth_write+0x20b/0x290 [ 42.936564][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.941125][ T384] ? fsnotify_perm+0x6a/0x5d0 [ 42.941159][ T384] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 42.941181][ T384] ? vfs_write+0x9ec/0x1110 [ 42.941199][ T384] kernel_clone+0x21e/0x9e0 [ 43.111065][ T384] ? file_end_write+0x1c0/0x1c0 [ 43.115736][ T384] ? create_io_thread+0x1e0/0x1e0 [ 43.120590][ T384] ? mutex_unlock+0xb2/0x260 [ 43.125015][ T384] ? __mutex_lock_slowpath+0x10/0x10 [ 43.130140][ T384] __x64_sys_clone+0x23f/0x290 [ 43.134736][ T384] ? __do_sys_vfork+0x130/0x130 [ 43.139434][ T384] ? ksys_write+0x260/0x2c0 [ 43.143767][ T384] ? debug_smp_processor_id+0x17/0x20 [ 43.149142][ T384] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 43.155054][ T384] ? exit_to_user_mode_prepare+0x39/0xa0 [ 43.160509][ T384] do_syscall_64+0x3d/0xb0 [ 43.164785][ T384] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.170496][ T384] RIP: 0033:0x7f493777b8d9 [ 43.174923][ T384] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.194795][ T384] RSP: 002b:00007f49372fe078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 43.203172][ T384] RAX: ffffffffffffffda RBX: 00007f493789af80 RCX: 00007f493777b8d9 [ 43.211141][ T384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000008200 [ 43.219316][ T384] RBP: 00007f49372fe120 R08: 0000000000000000 R09: 0000000000000000 [ 43.227133][ T384] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 43.235484][ T384] R13: 000000000000000b R14: 00007f493789af80 R15: 00007ffc224c8378 [ 43.243460][ T384] [ 43.253904][ T358] device veth1_macvtap entered promiscuous mode [ 43.262727][ T386] FAULT_INJECTION: forcing a failure. [ 43.262727][ T386] name failslab, interval 1, probability 0, space 0, times 0 [ 43.279137][ T386] CPU: 0 PID: 386 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 43.289405][ T386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 43.299466][ T386] Call Trace: [ 43.302594][ T386] [ 43.305373][ T386] dump_stack_lvl+0x151/0x1b7 [ 43.310004][ T386] ? io_uring_drop_tctx_refs+0x190/0x190 [ 43.315547][ T386] ? avc_denied+0x1b0/0x1b0 [ 43.319882][ T386] dump_stack+0x15/0x17 [ 43.323969][ T386] should_fail+0x3c6/0x510 [ 43.328309][ T386] __should_failslab+0xa4/0xe0 [ 43.333054][ T386] ? vm_area_dup+0x26/0x230 [ 43.337392][ T386] should_failslab+0x9/0x20 [ 43.341853][ T386] slab_pre_alloc_hook+0x37/0xd0 [ 43.346622][ T386] ? vm_area_dup+0x26/0x230 [ 43.350954][ T386] kmem_cache_alloc+0x44/0x200 [ 43.355555][ T386] vm_area_dup+0x26/0x230 [ 43.359741][ T386] copy_mm+0x9a1/0x13e0 [ 43.363726][ T386] ? copy_signal+0x610/0x610 [ 43.368239][ T386] ? __init_rwsem+0xd6/0x1c0 [ 43.372764][ T386] ? copy_signal+0x4e3/0x610 [ 43.377371][ T386] copy_process+0x1149/0x3290 [ 43.382193][ T386] ? proc_fail_nth_write+0x20b/0x290 [ 43.387377][ T386] ? fsnotify_perm+0x6a/0x5d0 [ 43.392193][ T386] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 43.397675][ T386] ? vfs_write+0x9ec/0x1110 [ 43.402321][ T386] kernel_clone+0x21e/0x9e0 [ 43.407099][ T386] ? file_end_write+0x1c0/0x1c0 [ 43.412022][ T386] ? create_io_thread+0x1e0/0x1e0 [ 43.417226][ T386] ? mutex_unlock+0xb2/0x260 [ 43.421725][ T386] ? __mutex_lock_slowpath+0x10/0x10 [ 43.426947][ T386] __x64_sys_clone+0x23f/0x290 [ 43.431845][ T386] ? __do_sys_vfork+0x130/0x130 [ 43.436618][ T386] ? ksys_write+0x260/0x2c0 [ 43.441167][ T386] ? debug_smp_processor_id+0x17/0x20 [ 43.446432][ T386] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 43.452436][ T386] ? exit_to_user_mode_prepare+0x39/0xa0 [ 43.458260][ T386] do_syscall_64+0x3d/0xb0 [ 43.462517][ T386] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.468485][ T386] RIP: 0033:0x7f493777b8d9 [ 43.472723][ T386] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.492847][ T386] RSP: 002b:00007f49372fe078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 43.501422][ T386] RAX: ffffffffffffffda RBX: 00007f493789af80 RCX: 00007f493777b8d9 [ 43.509872][ T386] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000008200 [ 43.517735][ T386] RBP: 00007f49372fe120 R08: 0000000000000000 R09: 0000000000000000 [ 43.525878][ T386] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 43.533682][ T386] R13: 000000000000000b R14: 00007f493789af80 R15: 00007ffc224c8378 [ 43.541512][ T386] [ 43.552825][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.565183][ T389] FAULT_INJECTION: forcing a failure. [ 43.565183][ T389] name failslab, interval 1, probability 0, space 0, times 0 [ 43.573326][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.579997][ T389] CPU: 0 PID: 389 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 43.587164][ T391] FAULT_INJECTION: forcing a failure. [ 43.587164][ T391] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 43.596107][ T389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 43.596127][ T389] Call Trace: [ 43.596133][ T389] [ 43.596141][ T389] dump_stack_lvl+0x151/0x1b7 [ 43.596166][ T389] ? io_uring_drop_tctx_refs+0x190/0x190 [ 43.610685][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.619305][ T389] ? avc_denied+0x1b0/0x1b0 [ 43.622800][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.625176][ T389] dump_stack+0x15/0x17 [ 43.635018][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.635262][ T389] should_fail+0x3c6/0x510 [ 43.670678][ T389] __should_failslab+0xa4/0xe0 [ 43.675359][ T389] ? vm_area_dup+0x26/0x230 [ 43.679706][ T389] should_failslab+0x9/0x20 [ 43.684160][ T389] slab_pre_alloc_hook+0x37/0xd0 [ 43.689336][ T389] ? vm_area_dup+0x26/0x230 [ 43.693865][ T389] kmem_cache_alloc+0x44/0x200 [ 43.698460][ T389] vm_area_dup+0x26/0x230 [ 43.702905][ T389] copy_mm+0x9a1/0x13e0 [ 43.706983][ T389] ? copy_signal+0x610/0x610 [ 43.711546][ T389] ? __init_rwsem+0xd6/0x1c0 [ 43.715963][ T389] ? copy_signal+0x4e3/0x610 [ 43.720384][ T389] copy_process+0x1149/0x3290 [ 43.724904][ T389] ? proc_fail_nth_write+0x20b/0x290 [ 43.730012][ T389] ? fsnotify_perm+0x6a/0x5d0 [ 43.734703][ T389] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 43.739644][ T389] ? vfs_write+0x9ec/0x1110 [ 43.743982][ T389] kernel_clone+0x21e/0x9e0 [ 43.748411][ T389] ? file_end_write+0x1c0/0x1c0 [ 43.753094][ T389] ? create_io_thread+0x1e0/0x1e0 [ 43.758036][ T389] ? mutex_unlock+0xb2/0x260 [ 43.762570][ T389] ? __mutex_lock_slowpath+0x10/0x10 [ 43.767683][ T389] __x64_sys_clone+0x23f/0x290 [ 43.772276][ T389] ? __do_sys_vfork+0x130/0x130 [ 43.777044][ T389] ? ksys_write+0x260/0x2c0 [ 43.781387][ T389] ? debug_smp_processor_id+0x17/0x20 [ 43.786597][ T389] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 43.792666][ T389] ? exit_to_user_mode_prepare+0x39/0xa0 [ 43.798154][ T389] do_syscall_64+0x3d/0xb0 [ 43.802413][ T389] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.808119][ T389] RIP: 0033:0x7fe427d2c8d9 [ 43.812382][ T389] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.832164][ T389] RSP: 002b:00007fe4278af078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 43.840403][ T389] RAX: ffffffffffffffda RBX: 00007fe427e4bf80 RCX: 00007fe427d2c8d9 [ 43.848302][ T389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000008200 [ 43.856292][ T389] RBP: 00007fe4278af120 R08: 0000000000000000 R09: 0000000000000000 [ 43.864558][ T389] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 43.872505][ T389] R13: 000000000000000b R14: 00007fe427e4bf80 R15: 00007ffea9b571b8 [ 43.880355][ T389] [ 43.883271][ T391] CPU: 1 PID: 391 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 43.893849][ T391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 43.903858][ T391] Call Trace: [ 43.907003][ T391] [ 43.909797][ T391] dump_stack_lvl+0x151/0x1b7 [ 43.914404][ T391] ? io_uring_drop_tctx_refs+0x190/0x190 [ 43.919964][ T391] dump_stack+0x15/0x17 [ 43.924030][ T391] should_fail+0x3c6/0x510 [ 43.928290][ T391] should_fail_alloc_page+0x5a/0x80 [ 43.933749][ T391] prepare_alloc_pages+0x15c/0x700 [ 43.938873][ T391] ? __alloc_pages_bulk+0xe40/0xe40 [ 43.944212][ T391] __alloc_pages+0x18c/0x8f0 [ 43.948757][ T391] ? prep_new_page+0x110/0x110 [ 43.953392][ T391] ? __alloc_pages+0x27e/0x8f0 [ 43.958166][ T391] ? __kasan_check_write+0x14/0x20 [ 43.963111][ T391] ? _raw_spin_lock+0xa4/0x1b0 [ 43.967711][ T391] __pmd_alloc+0xb1/0x550 [ 43.971977][ T391] ? __pud_alloc+0x260/0x260 [ 43.976606][ T391] ? __pud_alloc+0x213/0x260 [ 43.981005][ T391] ? do_handle_mm_fault+0x2330/0x2330 [ 43.986846][ T391] ? __stack_depot_save+0x34/0x470 [ 43.992872][ T391] ? anon_vma_clone+0x9a/0x500 [ 43.997827][ T391] copy_page_range+0x2b3d/0x2f90 [ 44.003008][ T391] ? __kasan_slab_alloc+0xb1/0xe0 [ 44.008258][ T391] ? slab_post_alloc_hook+0x53/0x2c0 [ 44.013326][ T391] ? copy_mm+0xa3a/0x13e0 [ 44.017491][ T391] ? copy_process+0x1149/0x3290 [ 44.022364][ T391] ? kernel_clone+0x21e/0x9e0 [ 44.026873][ T391] ? do_syscall_64+0x3d/0xb0 [ 44.031303][ T391] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.037456][ T391] ? pfn_valid+0x1e0/0x1e0 [ 44.041811][ T391] ? rwsem_write_trylock+0x15b/0x290 [ 44.047169][ T391] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 44.053483][ T391] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 44.059045][ T391] ? __rb_insert_augmented+0x5de/0x610 [ 44.064339][ T391] copy_mm+0xc7e/0x13e0 [ 44.068327][ T391] ? copy_signal+0x610/0x610 [ 44.072764][ T391] ? __init_rwsem+0xd6/0x1c0 [ 44.077324][ T391] ? copy_signal+0x4e3/0x610 [ 44.081789][ T391] copy_process+0x1149/0x3290 [ 44.086674][ T391] ? proc_fail_nth_write+0x20b/0x290 [ 44.091962][ T391] ? fsnotify_perm+0x6a/0x5d0 [ 44.097024][ T391] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 44.102052][ T391] ? vfs_write+0x9ec/0x1110 [ 44.106569][ T391] kernel_clone+0x21e/0x9e0 [ 44.111358][ T391] ? file_end_write+0x1c0/0x1c0 [ 44.116367][ T391] ? create_io_thread+0x1e0/0x1e0 [ 44.121225][ T391] ? mutex_unlock+0xb2/0x260 [ 44.125655][ T391] ? __mutex_lock_slowpath+0x10/0x10 [ 44.130781][ T391] __x64_sys_clone+0x23f/0x290 [ 44.135371][ T391] ? __do_sys_vfork+0x130/0x130 [ 44.140061][ T391] ? ksys_write+0x260/0x2c0 [ 44.144489][ T391] ? debug_smp_processor_id+0x17/0x20 [ 44.149692][ T391] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 44.157132][ T391] ? exit_to_user_mode_prepare+0x39/0xa0 [ 44.162844][ T391] do_syscall_64+0x3d/0xb0 [ 44.167099][ T391] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.172911][ T391] RIP: 0033:0x7f493777b8d9 [ 44.177163][ T391] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.197065][ T391] RSP: 002b:00007f49372fe078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 44.205403][ T391] RAX: ffffffffffffffda RBX: 00007f493789af80 RCX: 00007f493777b8d9 [ 44.213623][ T391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000008200 [ 44.221772][ T391] RBP: 00007f49372fe120 R08: 0000000000000000 R09: 0000000000000000 [ 44.229656][ T391] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 44.237815][ T391] R13: 000000000000000b R14: 00007f493789af80 R15: 00007ffc224c8378 [ 44.245631][ T391] [ 44.262176][ T357] device veth1_macvtap entered promiscuous mode [ 44.272871][ T395] FAULT_INJECTION: forcing a failure. [ 44.272871][ T395] name failslab, interval 1, probability 0, space 0, times 0 [ 44.292928][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.305850][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.314697][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.323695][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.325995][ T395] CPU: 0 PID: 395 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 44.332827][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.342918][ T395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 44.342935][ T395] Call Trace: [ 44.342941][ T395] [ 44.342948][ T395] dump_stack_lvl+0x151/0x1b7 [ 44.342973][ T395] ? io_uring_drop_tctx_refs+0x190/0x190 [ 44.342993][ T395] dump_stack+0x15/0x17 [ 44.343007][ T395] should_fail+0x3c6/0x510 [ 44.343026][ T395] __should_failslab+0xa4/0xe0 [ 44.343047][ T395] ? anon_vma_fork+0xf7/0x4e0 [ 44.343063][ T395] should_failslab+0x9/0x20 [ 44.343082][ T395] slab_pre_alloc_hook+0x37/0xd0 [ 44.343104][ T395] ? anon_vma_fork+0xf7/0x4e0 [ 44.343120][ T395] kmem_cache_alloc+0x44/0x200 [ 44.343141][ T395] anon_vma_fork+0xf7/0x4e0 [ 44.343157][ T395] ? anon_vma_name+0x43/0x70 [ 44.394149][ T400] FAULT_INJECTION: forcing a failure. [ 44.394149][ T400] name failslab, interval 1, probability 0, space 0, times 0 [ 44.395201][ T395] ? vm_area_dup+0x17a/0x230 [ 44.395230][ T395] copy_mm+0xa3a/0x13e0 [ 44.443742][ T395] ? copy_signal+0x610/0x610 [ 44.448817][ T395] ? __init_rwsem+0xd6/0x1c0 [ 44.453296][ T395] ? copy_signal+0x4e3/0x610 [ 44.457721][ T395] copy_process+0x1149/0x3290 [ 44.462239][ T395] ? proc_fail_nth_write+0x20b/0x290 [ 44.467705][ T395] ? fsnotify_perm+0x6a/0x5d0 [ 44.472229][ T395] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 44.477271][ T395] ? vfs_write+0x9ec/0x1110 [ 44.482303][ T395] kernel_clone+0x21e/0x9e0 [ 44.486774][ T395] ? file_end_write+0x1c0/0x1c0 [ 44.491604][ T395] ? create_io_thread+0x1e0/0x1e0 [ 44.496463][ T395] ? mutex_unlock+0xb2/0x260 [ 44.500890][ T395] ? __mutex_lock_slowpath+0x10/0x10 [ 44.506357][ T395] __x64_sys_clone+0x23f/0x290 [ 44.511005][ T395] ? __do_sys_vfork+0x130/0x130 [ 44.515915][ T395] ? ksys_write+0x260/0x2c0 [ 44.520343][ T395] ? debug_smp_processor_id+0x17/0x20 [ 44.522980][ T401] FAULT_INJECTION: forcing a failure. [ 44.522980][ T401] name failslab, interval 1, probability 0, space 0, times 0 [ 44.525543][ T395] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 44.544290][ T395] ? exit_to_user_mode_prepare+0x39/0xa0 [ 44.549826][ T395] do_syscall_64+0x3d/0xb0 [ 44.554270][ T395] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.560287][ T395] RIP: 0033:0x7fe427d2c8d9 [ 44.564533][ T395] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.572857][ T402] FAULT_INJECTION: forcing a failure. [ 44.572857][ T402] name failslab, interval 1, probability 0, space 0, times 0 [ 44.584815][ T395] RSP: 002b:00007fe4278af078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 44.584842][ T395] RAX: ffffffffffffffda RBX: 00007fe427e4bf80 RCX: 00007fe427d2c8d9 [ 44.584856][ T395] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000008200 [ 44.622465][ T395] RBP: 00007fe4278af120 R08: 0000000000000000 R09: 0000000000000000 [ 44.630362][ T395] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 44.638179][ T395] R13: 000000000000000b R14: 00007fe427e4bf80 R15: 00007ffea9b571b8 [ 44.646228][ T395] [ 44.649048][ T401] CPU: 1 PID: 401 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 44.659548][ T401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 44.669575][ T401] Call Trace: [ 44.672721][ T401] [ 44.675920][ T401] dump_stack_lvl+0x151/0x1b7 [ 44.680603][ T401] ? io_uring_drop_tctx_refs+0x190/0x190 [ 44.686331][ T401] dump_stack+0x15/0x17 [ 44.690416][ T401] should_fail+0x3c6/0x510 [ 44.694799][ T401] __should_failslab+0xa4/0xe0 [ 44.699459][ T401] ? anon_vma_fork+0x1df/0x4e0 [ 44.704031][ T401] should_failslab+0x9/0x20 [ 44.708554][ T401] slab_pre_alloc_hook+0x37/0xd0 [ 44.713445][ T401] ? anon_vma_fork+0x1df/0x4e0 [ 44.718012][ T401] kmem_cache_alloc+0x44/0x200 [ 44.722638][ T401] anon_vma_fork+0x1df/0x4e0 [ 44.727040][ T401] copy_mm+0xa3a/0x13e0 [ 44.731034][ T401] ? copy_signal+0x610/0x610 [ 44.735566][ T401] ? __init_rwsem+0xd6/0x1c0 [ 44.739971][ T401] ? copy_signal+0x4e3/0x610 [ 44.744464][ T401] copy_process+0x1149/0x3290 [ 44.748917][ T401] ? proc_fail_nth_write+0x20b/0x290 [ 44.754126][ T401] ? fsnotify_perm+0x6a/0x5d0 [ 44.758902][ T401] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 44.763933][ T401] ? vfs_write+0x9ec/0x1110 [ 44.768274][ T401] kernel_clone+0x21e/0x9e0 [ 44.772987][ T401] ? file_end_write+0x1c0/0x1c0 [ 44.777648][ T401] ? create_io_thread+0x1e0/0x1e0 [ 44.782595][ T401] ? mutex_unlock+0xb2/0x260 [ 44.787117][ T401] ? __mutex_lock_slowpath+0x10/0x10 [ 44.792443][ T401] __x64_sys_clone+0x23f/0x290 [ 44.797042][ T401] ? __do_sys_vfork+0x130/0x130 [ 44.801984][ T401] ? ksys_write+0x260/0x2c0 [ 44.806591][ T401] ? debug_smp_processor_id+0x17/0x20 [ 44.812051][ T401] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 44.817961][ T401] ? exit_to_user_mode_prepare+0x39/0xa0 [ 44.823891][ T401] do_syscall_64+0x3d/0xb0 [ 44.828283][ T401] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.834195][ T401] RIP: 0033:0x7fca9ecd28d9 [ 44.838619][ T401] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.858425][ T401] RSP: 002b:00007fca9e855078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 44.866677][ T401] RAX: ffffffffffffffda RBX: 00007fca9edf1f80 RCX: 00007fca9ecd28d9 [ 44.874514][ T401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000008200 [ 44.882474][ T401] RBP: 00007fca9e855120 R08: 0000000000000000 R09: 0000000000000000 [ 44.890383][ T401] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 44.898272][ T401] R13: 000000000000000b R14: 00007fca9edf1f80 R15: 00007ffe398b8748 [ 44.906192][ T401] [ 44.910441][ T405] FAULT_INJECTION: forcing a failure. [ 44.910441][ T405] name failslab, interval 1, probability 0, space 0, times 0 [ 44.921880][ T400] CPU: 0 PID: 400 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 44.933865][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 44.944311][ T400] Call Trace: [ 44.947417][ T400] [ 44.950184][ T400] dump_stack_lvl+0x151/0x1b7 [ 44.954689][ T400] ? io_uring_drop_tctx_refs+0x190/0x190 [ 44.960505][ T400] ? avc_denied+0x1b0/0x1b0 [ 44.964933][ T400] dump_stack+0x15/0x17 [ 44.969019][ T400] should_fail+0x3c6/0x510 [ 44.973404][ T400] __should_failslab+0xa4/0xe0 [ 44.978128][ T400] ? vm_area_dup+0x26/0x230 [ 44.982512][ T400] should_failslab+0x9/0x20 [ 44.986814][ T400] slab_pre_alloc_hook+0x37/0xd0 [ 44.991756][ T400] ? vm_area_dup+0x26/0x230 [ 44.996348][ T400] kmem_cache_alloc+0x44/0x200 [ 45.000952][ T400] vm_area_dup+0x26/0x230 [ 45.005202][ T400] copy_mm+0x9a1/0x13e0 [ 45.009209][ T400] ? copy_signal+0x610/0x610 [ 45.013625][ T400] ? __init_rwsem+0xd6/0x1c0 [ 45.018047][ T400] ? copy_signal+0x4e3/0x610 [ 45.022688][ T400] copy_process+0x1149/0x3290 [ 45.027164][ T400] ? proc_fail_nth_write+0x20b/0x290 [ 45.032298][ T400] ? fsnotify_perm+0x6a/0x5d0 [ 45.036804][ T400] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 45.041853][ T400] ? vfs_write+0x9ec/0x1110 [ 45.046372][ T400] kernel_clone+0x21e/0x9e0 [ 45.050792][ T400] ? file_end_write+0x1c0/0x1c0 [ 45.055732][ T400] ? create_io_thread+0x1e0/0x1e0 [ 45.061285][ T400] ? mutex_unlock+0xb2/0x260 [ 45.065709][ T400] ? __mutex_lock_slowpath+0x10/0x10 [ 45.070849][ T400] __x64_sys_clone+0x23f/0x290 [ 45.075431][ T400] ? __do_sys_vfork+0x130/0x130 [ 45.080205][ T400] ? ksys_write+0x260/0x2c0 [ 45.084547][ T400] ? debug_smp_processor_id+0x17/0x20 [ 45.089838][ T400] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 45.095827][ T400] ? exit_to_user_mode_prepare+0x39/0xa0 [ 45.101317][ T400] do_syscall_64+0x3d/0xb0 [ 45.105549][ T400] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.111416][ T400] RIP: 0033:0x7f493777b8d9 [ 45.115638][ T400] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.135076][ T400] RSP: 002b:00007f49372fe078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 45.143432][ T400] RAX: ffffffffffffffda RBX: 00007f493789af80 RCX: 00007f493777b8d9 [ 45.151209][ T400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000008200 [ 45.159023][ T400] RBP: 00007f49372fe120 R08: 0000000000000000 R09: 0000000000000000 [ 45.166918][ T400] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 45.174734][ T400] R13: 000000000000000b R14: 00007f493789af80 R15: 00007ffc224c8378 [ 45.182729][ T400] [ 45.185594][ T402] CPU: 1 PID: 402 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 45.191488][ T401] ------------[ cut here ]------------ [ 45.196538][ T402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 45.196553][ T402] Call Trace: [ 45.196559][ T402] [ 45.196565][ T402] dump_stack_lvl+0x151/0x1b7 [ 45.202288][ T401] refcount_t: underflow; use-after-free. [ 45.212081][ T402] ? io_uring_drop_tctx_refs+0x190/0x190 [ 45.212107][ T402] ? avc_denied+0x1b0/0x1b0 [ 45.212128][ T402] dump_stack+0x15/0x17 [ 45.212143][ T402] should_fail+0x3c6/0x510 [ 45.216005][ T401] WARNING: CPU: 0 PID: 401 at lib/refcount.c:28 refcount_warn_saturate+0x158/0x1a0 [ 45.217976][ T402] __should_failslab+0xa4/0xe0 [ 45.218001][ T402] ? vm_area_dup+0x26/0x230 [ 45.222966][ T401] Modules linked in: [ 45.228051][ T402] should_failslab+0x9/0x20 [ 45.228079][ T402] slab_pre_alloc_hook+0x37/0xd0 [ 45.233847][ T401] [ 45.237955][ T402] ? vm_area_dup+0x26/0x230 [ 45.237981][ T402] kmem_cache_alloc+0x44/0x200 [ 45.242538][ T401] CPU: 0 PID: 401 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 45.246277][ T402] vm_area_dup+0x26/0x230 [ 45.246305][ T402] copy_mm+0x9a1/0x13e0 [ 45.255758][ T401] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 45.259997][ T402] ? copy_signal+0x610/0x610 [ 45.264926][ T401] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 45.268241][ T402] ? __init_rwsem+0xd6/0x1c0 [ 45.268266][ T402] ? copy_signal+0x4e3/0x610 [ 45.274236][ T401] Code: 04 01 48 c7 c7 c0 c4 82 85 e8 e4 b4 dc fe 0f 0b eb 8b e8 3b 5d 0b ff c6 05 b3 a4 3e 04 01 48 c7 c7 20 c5 82 85 e8 c8 b4 dc fe <0f> 0b e9 6c ff ff ff e8 1c 5d 0b ff c6 05 95 a4 3e 04 01 48 c7 c7 [ 45.277699][ T402] copy_process+0x1149/0x3290 [ 45.277735][ T402] ? proc_fail_nth_write+0x20b/0x290 [ 45.279914][ T401] RSP: 0018:ffffc90000fd7968 EFLAGS: 00010246 [ 45.284670][ T402] ? fsnotify_perm+0x6a/0x5d0 [ 45.284694][ T402] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 45.284716][ T402] ? vfs_write+0x9ec/0x1110 [ 45.289953][ T401] [ 45.299517][ T402] kernel_clone+0x21e/0x9e0 [ 45.299548][ T402] ? file_end_write+0x1c0/0x1c0 [ 45.299566][ T402] ? create_io_thread+0x1e0/0x1e0 [ 45.299587][ T402] ? mutex_unlock+0xb2/0x260 [ 45.305694][ T401] RAX: 767616d7638c2b00 RBX: 0000000000000003 RCX: ffff8881115fbb40 [ 45.308296][ T402] ? __mutex_lock_slowpath+0x10/0x10 [ 45.308325][ T402] __x64_sys_clone+0x23f/0x290 [ 45.318555][ T401] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 45.322875][ T402] ? __do_sys_vfork+0x130/0x130 [ 45.322903][ T402] ? ksys_write+0x260/0x2c0 [ 45.322923][ T402] ? debug_smp_processor_id+0x17/0x20 [ 45.329196][ T401] RBP: ffffc90000fd7978 R08: ffffffff81575f25 R09: ffffed103ee065e8 [ 45.333443][ T402] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 45.333470][ T402] ? exit_to_user_mode_prepare+0x39/0xa0 [ 45.333493][ T402] do_syscall_64+0x3d/0xb0 [ 45.333510][ T402] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.338530][ T401] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff1102190c2f2 [ 45.357588][ T402] RIP: 0033:0x7f145c5d38d9 [ 45.357609][ T402] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.357624][ T402] RSP: 002b:00007f145c156078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 45.357646][ T402] RAX: ffffffffffffffda RBX: 00007f145c6f2f80 RCX: 00007f145c5d38d9 [ 45.362667][ T401] R13: ffff88810c861790 R14: 0000000000000003 R15: ffff88811f4d3181 [ 45.367421][ T402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000008200 [ 45.367435][ T402] RBP: 00007f145c156120 R08: 0000000000000000 R09: 0000000000000000 [ 45.367448][ T402] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 45.373829][ T401] FS: 00007fca9e8556c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 45.377806][ T402] R13: 000000000000000b R14: 00007f145c6f2f80 R15: 00007fffe616d6e8 [ 45.377826][ T402] [ 45.382845][ T405] CPU: 1 PID: 405 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 45.382875][ T405] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 45.382886][ T405] Call Trace: [ 45.382891][ T405] [ 45.382898][ T405] dump_stack_lvl+0x151/0x1b7 [ 45.382924][ T405] ? io_uring_drop_tctx_refs+0x190/0x190 [ 45.382946][ T405] dump_stack+0x15/0x17 [ 45.382962][ T405] should_fail+0x3c6/0x510 [ 45.382982][ T405] __should_failslab+0xa4/0xe0 [ 45.383003][ T405] ? anon_vma_fork+0xf7/0x4e0 [ 45.383020][ T405] should_failslab+0x9/0x20 [ 45.383039][ T405] slab_pre_alloc_hook+0x37/0xd0 [ 45.383061][ T405] ? anon_vma_fork+0xf7/0x4e0 [ 45.383084][ T405] kmem_cache_alloc+0x44/0x200 [ 45.383104][ T405] anon_vma_fork+0xf7/0x4e0 [ 45.383119][ T405] ? anon_vma_name+0x4c/0x70 [ 45.396680][ T401] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.399052][ T405] ? vm_area_dup+0x17a/0x230 [ 45.399081][ T405] copy_mm+0xa3a/0x13e0 [ 45.404551][ T401] CR2: 00007f4937897000 CR3: 0000000125680000 CR4: 00000000003506b0 [ 45.408566][ T405] ? copy_signal+0x610/0x610 [ 45.417228][ T401] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.421969][ T405] ? __init_rwsem+0xd6/0x1c0 [ 45.421997][ T405] ? copy_signal+0x4e3/0x610 [ 45.422021][ T405] copy_process+0x1149/0x3290 [ 45.422043][ T405] ? proc_fail_nth_write+0x20b/0x290 [ 45.428046][ T401] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.435481][ T405] ? fsnotify_perm+0x6a/0x5d0 [ 45.435513][ T405] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 45.435536][ T405] ? vfs_write+0x9ec/0x1110 [ 45.435555][ T405] kernel_clone+0x21e/0x9e0 [ 45.435576][ T405] ? file_end_write+0x1c0/0x1c0 [ 45.440875][ T401] Call Trace: [ 45.444680][ T405] ? create_io_thread+0x1e0/0x1e0 [ 45.444710][ T405] ? mutex_unlock+0xb2/0x260 [ 45.758855][ T405] ? __mutex_lock_slowpath+0x10/0x10 [ 45.763965][ T405] __x64_sys_clone+0x23f/0x290 [ 45.769005][ T405] ? __do_sys_vfork+0x130/0x130 [ 45.773687][ T405] ? ksys_write+0x260/0x2c0 [ 45.778136][ T405] ? debug_smp_processor_id+0x17/0x20 [ 45.783455][ T405] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 45.789349][ T405] ? exit_to_user_mode_prepare+0x39/0xa0 [ 45.794994][ T405] do_syscall_64+0x3d/0xb0 [ 45.799239][ T405] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.805119][ T405] RIP: 0033:0x7fe427d2c8d9 [ 45.809443][ T405] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.829926][ T405] RSP: 002b:00007fe4278af078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 45.838464][ T405] RAX: ffffffffffffffda RBX: 00007fe427e4bf80 RCX: 00007fe427d2c8d9 [ 45.846373][ T405] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000008200 [ 45.854529][ T405] RBP: 00007fe4278af120 R08: 0000000000000000 R09: 0000000000000000 [ 45.862794][ T405] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 45.870636][ T405] R13: 000000000000000b R14: 00007fe427e4bf80 R15: 00007ffea9b571b8 [ 45.878421][ T405] [ 45.885249][ T407] FAULT_INJECTION: forcing a failure. [ 45.885249][ T407] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 45.891738][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.898930][ T407] CPU: 0 PID: 407 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 45.908529][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.916797][ T407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 45.916811][ T407] Call Trace: [ 45.916816][ T407] [ 45.916823][ T407] dump_stack_lvl+0x151/0x1b7 [ 45.916848][ T407] ? io_uring_drop_tctx_refs+0x190/0x190 [ 45.916869][ T407] dump_stack+0x15/0x17 [ 45.916885][ T407] should_fail+0x3c6/0x510 [ 45.916905][ T407] should_fail_alloc_page+0x5a/0x80 [ 45.926673][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.934873][ T407] prepare_alloc_pages+0x15c/0x700 [ 45.934904][ T407] ? __alloc_pages_bulk+0xe40/0xe40 [ 45.934927][ T407] __alloc_pages+0x18c/0x8f0 [ 45.938711][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.940756][ T407] ? prep_new_page+0x110/0x110 [ 45.940787][ T407] get_zeroed_page+0x1b/0x40 [ 45.945646][ T401] [ 45.950825][ T407] __pud_alloc+0x8b/0x260 [ 45.950849][ T407] ? stack_trace_snprint+0xf0/0xf0 [ 45.950871][ T407] ? do_handle_mm_fault+0x2330/0x2330 [ 45.950889][ T407] ? __stack_depot_save+0x34/0x470 [ 45.950911][ T407] ? anon_vma_clone+0x9a/0x500 [ 45.950930][ T407] copy_page_range+0x2bcf/0x2f90 [ 45.950948][ T407] ? __kasan_slab_alloc+0xb1/0xe0 [ 45.950966][ T407] ? slab_post_alloc_hook+0x53/0x2c0 [ 45.950987][ T407] ? copy_mm+0xa3a/0x13e0 [ 45.951007][ T407] ? copy_process+0x1149/0x3290 [ 45.951026][ T407] ? kernel_clone+0x21e/0x9e0 [ 45.951046][ T407] ? __x64_sys_clone+0x23f/0x290 [ 45.951065][ T407] ? do_syscall_64+0x3d/0xb0 [ 45.951083][ T407] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.951114][ T407] ? pfn_valid+0x1e0/0x1e0 2024/04/08 03:00:35 executed programs: 13 [ 45.951129][ T407] ? rwsem_write_trylock+0x15b/0x290 [ 45.959152][ T401] ? show_regs+0x58/0x60 [ 45.959350][ T407] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 45.964778][ T401] ? __warn+0x160/0x2f0 [ 45.972280][ T407] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 45.972307][ T407] ? __rb_insert_augmented+0x5de/0x610 [ 45.977851][ T401] ? refcount_warn_saturate+0x158/0x1a0 [ 45.982874][ T407] copy_mm+0xc7e/0x13e0 [ 45.982903][ T407] ? copy_signal+0x610/0x610 [ 45.987878][ T401] ? report_bug+0x3d9/0x5b0 [ 45.995718][ T407] ? __init_rwsem+0xd6/0x1c0 [ 45.995747][ T407] ? copy_signal+0x4e3/0x610 [ 46.000986][ T401] ? refcount_warn_saturate+0x158/0x1a0 [ 46.004859][ T407] copy_process+0x1149/0x3290 [ 46.004888][ T407] ? proc_fail_nth_write+0x20b/0x290 [ 46.007773][ T401] ? handle_bug+0x41/0x70 [ 46.012001][ T407] ? fsnotify_perm+0x6a/0x5d0 [ 46.012024][ T407] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 46.017484][ T401] ? exc_invalid_op+0x1b/0x50 [ 46.022265][ T407] ? vfs_write+0x9ec/0x1110 [ 46.022288][ T407] kernel_clone+0x21e/0x9e0 [ 46.022309][ T407] ? file_end_write+0x1c0/0x1c0 [ 46.027587][ T401] ? asm_exc_invalid_op+0x1b/0x20 [ 46.031789][ T407] ? create_io_thread+0x1e0/0x1e0 [ 46.031814][ T407] ? mutex_unlock+0xb2/0x260 [ 46.037706][ T401] ? __wake_up_klogd+0xd5/0x110 [ 46.042581][ T407] ? __mutex_lock_slowpath+0x10/0x10 [ 46.042605][ T407] __x64_sys_clone+0x23f/0x290 [ 46.048212][ T401] ? refcount_warn_saturate+0x158/0x1a0 [ 46.051957][ T407] ? __do_sys_vfork+0x130/0x130 [ 46.051980][ T407] ? ksys_write+0x260/0x2c0 [ 46.051999][ T407] ? debug_smp_processor_id+0x17/0x20 [ 46.052020][ T407] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 46.052042][ T407] ? exit_to_user_mode_prepare+0x39/0xa0 [ 46.057373][ T401] ? refcount_warn_saturate+0x158/0x1a0 [ 46.061693][ T407] do_syscall_64+0x3d/0xb0 [ 46.061715][ T407] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.066756][ T401] vm_area_free_no_check+0x123/0x130 [ 46.070998][ T407] RIP: 0033:0x7f493777b8d9 [ 46.071018][ T407] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.071034][ T407] RSP: 002b:00007f49372fe078 EFLAGS: 00000206 [ 46.077234][ T401] copy_mm+0xefb/0x13e0 [ 46.081324][ T407] ORIG_RAX: 0000000000000038 [ 46.081335][ T407] RAX: ffffffffffffffda RBX: 00007f493789af80 RCX: 00007f493777b8d9 [ 46.081349][ T407] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000008200 [ 46.081361][ T407] RBP: 00007f49372fe120 R08: 0000000000000000 R09: 0000000000000000 [ 46.087039][ T401] ? copy_signal+0x610/0x610 [ 46.090674][ T407] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 46.090689][ T407] R13: 000000000000000b R14: 00007f493789af80 R15: 00007ffc224c8378 [ 46.090706][ T407] [ 46.359320][ T401] ? __init_rwsem+0xd6/0x1c0 [ 46.365180][ T401] ? copy_signal+0x4e3/0x610 [ 46.369754][ T401] copy_process+0x1149/0x3290 [ 46.374675][ T401] ? proc_fail_nth_write+0x20b/0x290 [ 46.390855][ T401] ? fsnotify_perm+0x6a/0x5d0 [ 46.395569][ T401] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 46.400619][ T401] ? vfs_write+0x9ec/0x1110 [ 46.404965][ T401] kernel_clone+0x21e/0x9e0 [ 46.410399][ T401] ? file_end_write+0x1c0/0x1c0 [ 46.417520][ T411] FAULT_INJECTION: forcing a failure. [ 46.417520][ T411] name failslab, interval 1, probability 0, space 0, times 0 [ 46.418476][ T412] FAULT_INJECTION: forcing a failure. [ 46.418476][ T412] name failslab, interval 1, probability 0, space 0, times 0 [ 46.435414][ T411] CPU: 0 PID: 411 Comm: syz-executor.5 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 46.443767][ T401] ? create_io_thread+0x1e0/0x1e0 [ 46.452821][ T411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 46.452835][ T411] Call Trace: [ 46.452841][ T411] [ 46.452848][ T411] dump_stack_lvl+0x151/0x1b7 [ 46.452868][ T411] ? io_uring_drop_tctx_refs+0x190/0x190 [ 46.452889][ T411] dump_stack+0x15/0x17 [ 46.452905][ T411] should_fail+0x3c6/0x510 [ 46.452924][ T411] __should_failslab+0xa4/0xe0 [ 46.452945][ T411] ? anon_vma_fork+0xf7/0x4e0 [ 46.458580][ T401] ? mutex_unlock+0xb2/0x260 [ 46.467771][ T411] should_failslab+0x9/0x20 [ 46.467794][ T411] slab_pre_alloc_hook+0x37/0xd0 [ 46.467816][ T411] ? anon_vma_fork+0xf7/0x4e0 [ 46.480088][ T401] ? __mutex_lock_slowpath+0x10/0x10 [ 46.483740][ T411] kmem_cache_alloc+0x44/0x200 [ 46.487732][ T401] __x64_sys_clone+0x23f/0x290 [ 46.491984][ T411] anon_vma_fork+0xf7/0x4e0 [ 46.492002][ T411] ? anon_vma_name+0x43/0x70 [ 46.492022][ T411] ? vm_area_dup+0x17a/0x230 [ 46.492041][ T411] copy_mm+0xa3a/0x13e0 [ 46.492064][ T411] ? copy_signal+0x610/0x610 [ 46.492084][ T411] ? __init_rwsem+0xd6/0x1c0 [ 46.510067][ T401] ? __do_sys_vfork+0x130/0x130 [ 46.510582][ T411] ? copy_signal+0x4e3/0x610 [ 46.515316][ T401] ? ksys_write+0x260/0x2c0 [ 46.519830][ T411] copy_process+0x1149/0x3290 [ 46.540807][ T401] ? debug_smp_processor_id+0x17/0x20 [ 46.543569][ T411] ? proc_fail_nth_write+0x20b/0x290 [ 46.547991][ T401] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 46.551983][ T411] ? fsnotify_perm+0x6a/0x5d0 [ 46.552005][ T411] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 46.552026][ T411] ? vfs_write+0x9ec/0x1110 [ 46.552045][ T411] kernel_clone+0x21e/0x9e0 [ 46.570064][ T401] ? exit_to_user_mode_prepare+0x39/0xa0 [ 46.574513][ T411] ? file_end_write+0x1c0/0x1c0 [ 46.578974][ T401] do_syscall_64+0x3d/0xb0 [ 46.584204][ T411] ? create_io_thread+0x1e0/0x1e0 [ 46.584237][ T411] ? mutex_unlock+0xb2/0x260 [ 46.584257][ T411] ? __mutex_lock_slowpath+0x10/0x10 [ 46.610081][ T401] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.614051][ T411] __x64_sys_clone+0x23f/0x290 [ 46.619609][ T401] RIP: 0033:0x7fca9ecd28d9 [ 46.624484][ T411] ? __do_sys_vfork+0x130/0x130 [ 46.624506][ T411] ? ksys_write+0x260/0x2c0 [ 46.624526][ T411] ? debug_smp_processor_id+0x17/0x20 [ 46.640322][ T401] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.643639][ T411] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 46.649380][ T401] RSP: 002b:00007fca9e855078 EFLAGS: 00000206 [ 46.653967][ T411] ? exit_to_user_mode_prepare+0x39/0xa0 [ 46.653990][ T411] do_syscall_64+0x3d/0xb0 [ 46.654008][ T411] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.670094][ T401] ORIG_RAX: 0000000000000038 [ 46.672896][ T411] RIP: 0033:0x7f952b3088d9 [ 46.720065][ T401] RAX: ffffffffffffffda RBX: 00007fca9edf1f80 RCX: 00007fca9ecd28d9 [ 46.720804][ T411] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.725318][ T401] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000008200 [ 46.729568][ T411] RSP: 002b:00007f952ae8b078 EFLAGS: 00000206 [ 46.760073][ T401] RBP: 00007fca9e855120 R08: 0000000000000000 R09: 0000000000000000 [ 46.765639][ T411] ORIG_RAX: 0000000000000038 [ 46.780111][ T401] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 46.784390][ T411] RAX: ffffffffffffffda RBX: 00007f952b427f80 RCX: 00007f952b3088d9 [ 46.800101][ T411] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000008200 [ 46.808025][ T411] RBP: 00007f952ae8b120 R08: 0000000000000000 R09: 0000000000000000 [ 46.810074][ T401] R13: 000000000000000b R14: 00007fca9edf1f80 R15: 00007ffe398b8748 [ 46.815908][ T411] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 46.832014][ T411] R13: 000000000000000b R14: 00007f952b427f80 R15: 00007fff68aef798 [ 46.839822][ T411] [ 46.840066][ T401] [ 46.846242][ T412] CPU: 0 PID: 412 Comm: syz-executor.4 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 46.846260][ T401] ---[ end trace e61df22c5dd9067e ]--- [ 46.862006][ T412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 46.871964][ T412] Call Trace: [ 46.875084][ T412] [ 46.877861][ T412] dump_stack_lvl+0x151/0x1b7 [ 46.882754][ T412] ? io_uring_drop_tctx_refs+0x190/0x190 [ 46.888561][ T412] dump_stack+0x15/0x17 [ 46.892708][ T412] should_fail+0x3c6/0x510 [ 46.896992][ T412] __should_failslab+0xa4/0xe0 [ 46.901595][ T412] ? anon_vma_fork+0x1df/0x4e0 [ 46.906503][ T412] should_failslab+0x9/0x20 [ 46.911115][ T412] slab_pre_alloc_hook+0x37/0xd0 [ 46.915865][ T412] ? anon_vma_fork+0x1df/0x4e0 [ 46.920963][ T412] kmem_cache_alloc+0x44/0x200 [ 46.925698][ T412] anon_vma_fork+0x1df/0x4e0 [ 46.930429][ T412] copy_mm+0xa3a/0x13e0 [ 46.934514][ T412] ? copy_signal+0x610/0x610 [ 46.939735][ T412] ? __init_rwsem+0xd6/0x1c0 [ 46.944691][ T412] ? copy_signal+0x4e3/0x610 [ 46.949121][ T412] copy_process+0x1149/0x3290 [ 46.953799][ T412] ? proc_fail_nth_write+0x20b/0x290 [ 46.958915][ T412] ? fsnotify_perm+0x6a/0x5d0 [ 46.963426][ T412] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 46.968488][ T412] ? vfs_write+0x9ec/0x1110 [ 46.973147][ T412] kernel_clone+0x21e/0x9e0 [ 46.978434][ T412] ? file_end_write+0x1c0/0x1c0 [ 46.983216][ T412] ? create_io_thread+0x1e0/0x1e0 [ 46.988082][ T412] ? mutex_unlock+0xb2/0x260 [ 46.992823][ T412] ? __mutex_lock_slowpath+0x10/0x10 [ 46.997906][ T412] __x64_sys_clone+0x23f/0x290 [ 47.002693][ T412] ? __do_sys_vfork+0x130/0x130 [ 47.007458][ T412] ? ksys_write+0x260/0x2c0 [ 47.011917][ T412] ? debug_smp_processor_id+0x17/0x20 [ 47.017646][ T412] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 47.023638][ T412] ? exit_to_user_mode_prepare+0x39/0xa0 [ 47.029291][ T412] do_syscall_64+0x3d/0xb0 [ 47.034031][ T412] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.040210][ T412] RIP: 0033:0x7f6db48848d9 [ 47.044666][ T412] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.064595][ T412] RSP: 002b:00007f6db4407078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 47.072906][ T412] RAX: ffffffffffffffda RBX: 00007f6db49a3f80 RCX: 00007f6db48848d9 [ 47.082429][ T412] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000008200 [ 47.090177][ T412] RBP: 00007f6db4407120 R08: 0000000000000000 R09: 0000000000000000 [ 47.097995][ T412] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 47.105825][ T412] R13: 000000000000000b R14: 00007f6db49a3f80 R15: 00007ffcf6033398 [ 47.113616][ T412] [ 47.118649][ T30] audit: type=1400 audit(1712545236.522:157): avc: denied { remove_name } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 47.142771][ T419] FAULT_INJECTION: forcing a failure. [ 47.142771][ T419] name failslab, interval 1, probability 0, space 0, times 0 [ 47.144303][ T420] FAULT_INJECTION: forcing a failure. [ 47.144303][ T420] name failslab, interval 1, probability 0, space 0, times 0 [ 47.155876][ T418] FAULT_INJECTION: forcing a failure. [ 47.155876][ T418] name failslab, interval 1, probability 0, space 0, times 0 [ 47.172743][ T30] audit: type=1400 audit(1712545236.522:158): avc: denied { rename } for pid=82 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.181675][ T421] FAULT_INJECTION: forcing a failure. [ 47.181675][ T421] name failslab, interval 1, probability 0, space 0, times 0 [ 47.202904][ T420] CPU: 1 PID: 420 Comm: syz-executor.3 Tainted: G W 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 47.226781][ T420] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 47.237016][ T420] Call Trace: [ 47.240133][ T420] [ 47.242911][ T420] dump_stack_lvl+0x151/0x1b7 [ 47.247513][ T420] ? io_uring_drop_tctx_refs+0x190/0x190 [ 47.253072][ T420] dump_stack+0x15/0x17 [ 47.257057][ T420] should_fail+0x3c6/0x510 [ 47.261315][ T420] __should_failslab+0xa4/0xe0 [ 47.265909][ T420] ? anon_vma_fork+0x1df/0x4e0 [ 47.270720][ T420] should_failslab+0x9/0x20 [ 47.275323][ T420] slab_pre_alloc_hook+0x37/0xd0 [ 47.280281][ T420] ? anon_vma_fork+0x1df/0x4e0 [ 47.284888][ T420] kmem_cache_alloc+0x44/0x200 [ 47.289671][ T420] anon_vma_fork+0x1df/0x4e0 [ 47.294827][ T420] copy_mm+0xa3a/0x13e0 [ 47.298819][ T420] ? copy_signal+0x610/0x610 [ 47.303249][ T420] ? __init_rwsem+0xd6/0x1c0 [ 47.307764][ T420] ? copy_signal+0x4e3/0x610 [ 47.312183][ T420] copy_process+0x1149/0x3290 [ 47.316793][ T420] ? proc_fail_nth_write+0x20b/0x290 [ 47.321990][ T420] ? fsnotify_perm+0x6a/0x5d0 [ 47.326593][ T420] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 47.331640][ T420] ? vfs_write+0x9ec/0x1110 [ 47.335977][ T420] kernel_clone+0x21e/0x9e0 [ 47.340595][ T420] ? file_end_write+0x1c0/0x1c0 [ 47.345371][ T420] ? create_io_thread+0x1e0/0x1e0 [ 47.350309][ T420] ? mutex_unlock+0xb2/0x260 [ 47.354930][ T420] ? __mutex_lock_slowpath+0x10/0x10 [ 47.360055][ T420] __x64_sys_clone+0x23f/0x290 [ 47.364666][ T420] ? __do_sys_vfork+0x130/0x130 [ 47.369344][ T420] ? ksys_write+0x260/0x2c0 [ 47.374028][ T420] ? debug_smp_processor_id+0x17/0x20 [ 47.379346][ T420] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 47.385248][ T420] ? exit_to_user_mode_prepare+0x39/0xa0 [ 47.390853][ T420] do_syscall_64+0x3d/0xb0 [ 47.395092][ T420] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.400820][ T420] RIP: 0033:0x7fca9ecd28d9 [ 47.405419][ T420] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.425037][ T420] RSP: 002b:00007fca9e855078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 47.433424][ T420] RAX: ffffffffffffffda RBX: 00007fca9edf1f80 RCX: 00007fca9ecd28d9 [ 47.441929][ T420] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000008200 [ 47.449733][ T420] RBP: 00007fca9e855120 R08: 0000000000000000 R09: 0000000000000000 [ 47.457656][ T420] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 47.465530][ T420] R13: 000000000000000b R14: 00007fca9edf1f80 R15: 00007ffe398b8748 [ 47.473342][ T420] [ 47.476291][ T418] CPU: 0 PID: 418 Comm: syz-executor.5 Tainted: G W 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 47.481748][ T30] audit: type=1400 audit(1712545236.522:159): avc: denied { create } for pid=82 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 47.488193][ T418] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 47.520083][ T418] Call Trace: [ 47.523205][ T418] [ 47.525984][ T418] dump_stack_lvl+0x151/0x1b7 [ 47.530630][ T418] ? io_uring_drop_tctx_refs+0x190/0x190 [ 47.536101][ T418] dump_stack+0x15/0x17 [ 47.540088][ T418] should_fail+0x3c6/0x510 [ 47.544345][ T418] __should_failslab+0xa4/0xe0 [ 47.549039][ T418] ? anon_vma_clone+0x9a/0x500 [ 47.553626][ T418] should_failslab+0x9/0x20 [ 47.557964][ T418] slab_pre_alloc_hook+0x37/0xd0 [ 47.562824][ T418] ? anon_vma_clone+0x9a/0x500 [ 47.567533][ T418] kmem_cache_alloc+0x44/0x200 [ 47.572235][ T418] anon_vma_clone+0x9a/0x500 [ 47.576672][ T418] anon_vma_fork+0x91/0x4e0 [ 47.581188][ T418] ? anon_vma_name+0x43/0x70 [ 47.585604][ T418] ? vm_area_dup+0x17a/0x230 [ 47.590037][ T418] copy_mm+0xa3a/0x13e0 [ 47.594025][ T418] ? copy_signal+0x610/0x610 [ 47.598451][ T418] ? __init_rwsem+0xd6/0x1c0 [ 47.602964][ T418] ? copy_signal+0x4e3/0x610 [ 47.607475][ T418] copy_process+0x1149/0x3290 [ 47.612335][ T418] ? proc_fail_nth_write+0x20b/0x290 [ 47.617805][ T418] ? fsnotify_perm+0x6a/0x5d0 [ 47.622326][ T418] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 47.627788][ T418] ? vfs_write+0x9ec/0x1110 [ 47.632134][ T418] kernel_clone+0x21e/0x9e0 [ 47.636548][ T418] ? file_end_write+0x1c0/0x1c0 [ 47.641325][ T418] ? create_io_thread+0x1e0/0x1e0 [ 47.646280][ T418] ? mutex_unlock+0xb2/0x260 [ 47.650891][ T418] ? __mutex_lock_slowpath+0x10/0x10 [ 47.656016][ T418] __x64_sys_clone+0x23f/0x290 [ 47.660607][ T418] ? __do_sys_vfork+0x130/0x130 [ 47.665418][ T418] ? ksys_write+0x260/0x2c0 [ 47.669729][ T418] ? debug_smp_processor_id+0x17/0x20 [ 47.674945][ T418] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 47.680933][ T418] ? exit_to_user_mode_prepare+0x39/0xa0 [ 47.686591][ T418] do_syscall_64+0x3d/0xb0 [ 47.690831][ T418] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.696553][ T418] RIP: 0033:0x7f952b3088d9 [ 47.700896][ T418] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.720856][ T418] RSP: 002b:00007f952ae8b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 47.729361][ T418] RAX: ffffffffffffffda RBX: 00007f952b427f80 RCX: 00007f952b3088d9 [ 47.737388][ T418] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000008200 [ 47.745369][ T418] RBP: 00007f952ae8b120 R08: 0000000000000000 R09: 0000000000000000 [ 47.753356][ T418] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 47.761250][ T418] R13: 000000000000000b R14: 00007f952b427f80 R15: 00007fff68aef798 [ 47.769156][ T418] [ 47.775373][ T346] BUG: unable to handle page fault for address: ffffed180000001a [ 47.778947][ T419] CPU: 1 PID: 419 Comm: syz-executor.1 Tainted: G W 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 47.783092][ T346] #PF: supervisor read access in kernel mode [ 47.794722][ T419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 47.800535][ T346] #PF: error_code(0x0000) - not-present page [ 47.810608][ T419] Call Trace: [ 47.810617][ T419] [ 47.816421][ T346] PGD 23fff2067 [ 47.819979][ T419] dump_stack_lvl+0x151/0x1b7 [ 47.822755][ T346] P4D 23fff2067 [ 47.826141][ T419] ? io_uring_drop_tctx_refs+0x190/0x190 [ 47.830662][ T346] PUD 0 [ 47.834049][ T419] dump_stack+0x15/0x17 [ 47.839681][ T346] Oops: 0000 [#1] PREEMPT SMP KASAN [ 47.842456][ T419] should_fail+0x3c6/0x510 [ 47.846540][ T346] CPU: 0 PID: 346 Comm: syz-executor.0 Tainted: G W 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 47.851572][ T419] __should_failslab+0xa4/0xe0 [ 47.855823][ T346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 47.867367][ T419] ? anon_vma_fork+0x1df/0x4e0 [ 47.872053][ T346] RIP: 0010:__rb_insert_augmented+0x36b/0x610 [ 47.882737][ T419] should_failslab+0x9/0x20 [ 47.887328][ T346] Code: 49 89 5d 00 48 83 e3 fc 43 80 3c 26 00 74 08 4c 89 ff e8 18 09 2b ff 4d 89 2f 48 85 db 74 2a 4c 8d 73 10 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 56 08 2b ff 48 8d 43 08 4c 39 7b [ 47.893490][ T419] slab_pre_alloc_hook+0x37/0xd0 [ 47.897838][ T346] RSP: 0018:ffffc90000cd78f8 EFLAGS: 00010a02 [ 47.917553][ T419] ? anon_vma_fork+0x1df/0x4e0 [ 47.922518][ T346] [ 47.922524][ T346] RAX: 1ffff1180000001a RBX: ffff88c0000000c0 RCX: dffffc0000000000 [ 47.928685][ T419] kmem_cache_alloc+0x44/0x200 [ 47.933286][ T346] RDX: ffffffff81a4f280 RSI: ffff88811023b7e0 RDI: ffff88811ebbc2a8 [ 47.935457][ T419] anon_vma_fork+0x1df/0x4e0 [ 47.943458][ T346] RBP: ffffc90000cd7960 R08: dffffc0000000000 R09: ffff88811ebbc2b0 [ 47.948076][ T419] copy_mm+0xa3a/0x13e0 [ 47.956042][ T346] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 47.960476][ T419] ? copy_signal+0x610/0x610 [ 47.968394][ T346] R13: ffff888107bfc748 R14: ffff88c0000000d0 R15: ffff88811f4d3180 [ 47.972384][ T419] ? __init_rwsem+0xd6/0x1c0 [ 47.980716][ T346] FS: 00005555569e7480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 47.985200][ T419] ? copy_signal+0x4e3/0x610 [ 47.992981][ T346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.997588][ T419] copy_process+0x1149/0x3290 [ 48.006353][ T346] CR2: ffffed180000001a CR3: 0000000120666000 CR4: 00000000003506b0 [ 48.010876][ T419] ? proc_fail_nth_write+0x20b/0x290 [ 48.017635][ T346] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.022237][ T419] ? fsnotify_perm+0x6a/0x5d0 [ 48.030045][ T346] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.035252][ T419] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 48.043162][ T346] Call Trace: [ 48.043169][ T346] [ 48.047759][ T419] ? vfs_write+0x9ec/0x1110 [ 48.055883][ T346] ? __die_body+0x62/0xb0 [ 48.060836][ T419] kernel_clone+0x21e/0x9e0 [ 48.063951][ T346] ? __die+0x7e/0x90 [ 48.066722][ T419] ? file_end_write+0x1c0/0x1c0 [ 48.071073][ T346] ? page_fault_oops+0x7f9/0xa90 [ 48.075231][ T419] ? create_io_thread+0x1e0/0x1e0 [ 48.079569][ T346] ? __rb_insert_augmented+0x36b/0x610 [ 48.083334][ T419] ? mutex_unlock+0xb2/0x260 [ 48.087991][ T346] ? kernelmode_fixup_or_oops+0x270/0x270 [ 48.092769][ T419] ? __mutex_lock_slowpath+0x10/0x10 [ 48.097821][ T346] ? is_prefetch+0x47a/0x6d0 [ 48.103407][ T419] __x64_sys_clone+0x23f/0x290 [ 48.107865][ T346] ? search_bpf_extables+0x26d/0x2c0 [ 48.113740][ T419] ? __do_sys_vfork+0x130/0x130 [ 48.118945][ T346] ? __rb_insert_augmented+0x36b/0x610 [ 48.123637][ T419] ? ksys_write+0x260/0x2c0 [ 48.128303][ T346] ? __rb_insert_augmented+0x36b/0x610 [ 48.133429][ T419] ? debug_smp_processor_id+0x17/0x20 [ 48.138240][ T346] ? __rb_insert_augmented+0x36b/0x610 [ 48.143525][ T419] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 48.147872][ T346] ? fixup_exception+0xbb/0x13c0 [ 48.153169][ T419] ? exit_to_user_mode_prepare+0x39/0xa0 [ 48.158381][ T346] ? stack_trace_save+0x113/0x1c0 [ 48.163751][ T419] do_syscall_64+0x3d/0xb0 [ 48.169745][ T346] ? kernelmode_fixup_or_oops+0x21b/0x270 [ 48.174516][ T419] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 48.179978][ T346] ? __bad_area_nosemaphore+0xcf/0x490 [ 48.184839][ T419] RIP: 0033:0x7f145c5d38d9 [ 48.189111][ T346] ? __kasan_slab_alloc+0xc3/0xe0 [ 48.194647][ T419] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.200374][ T346] ? bad_area_nosemaphore+0x2d/0x40 [ 48.205667][ T419] RSP: 002b:00007f145c156078 EFLAGS: 00000206 [ 48.209922][ T346] ? do_kern_addr_fault+0x69/0x80 [ 48.214781][ T419] ORIG_RAX: 0000000000000038 [ 48.234312][ T346] ? exc_page_fault+0x4eb/0x830 [ 48.239352][ T419] RAX: ffffffffffffffda RBX: 00007f145c6f2f80 RCX: 00007f145c5d38d9 [ 48.245258][ T346] ? asm_exc_page_fault+0x27/0x30 [ 48.250285][ T419] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000008200 [ 48.254907][ T346] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 48.259569][ T419] RBP: 00007f145c156120 R08: 0000000000000000 R09: 0000000000000000 [ 48.267467][ T346] ? __rb_insert_augmented+0x36b/0x610 [ 48.272324][ T419] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 48.280303][ T346] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 48.287040][ T419] R13: 000000000000000b R14: 00007f145c6f2f80 R15: 00007fffe616d6e8 [ 48.294865][ T346] vma_interval_tree_insert_after+0x2be/0x2d0 [ 48.300245][ T419] [ 48.308166][ T346] copy_mm+0xba2/0x13e0 [ 48.319668][ T421] CPU: 1 PID: 421 Comm: syz-executor.2 Tainted: G W 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 48.322522][ T346] ? copy_signal+0x610/0x610 [ 48.328503][ T421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 48.331367][ T346] ? __init_rwsem+0xd6/0x1c0 [ 48.331387][ T346] ? copy_signal+0x4e3/0x610 [ 48.331405][ T346] copy_process+0x1149/0x3290 [ 48.335364][ T421] Call Trace: [ 48.335371][ T421] [ 48.347342][ T346] ? io_schedule+0x120/0x120 [ 48.351764][ T421] dump_stack_lvl+0x151/0x1b7 [ 48.361841][ T346] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 48.366258][ T421] ? io_uring_drop_tctx_refs+0x190/0x190 [ 48.370707][ T346] kernel_clone+0x21e/0x9e0 [ 48.375210][ T421] dump_stack+0x15/0x17 [ 48.378319][ T346] ? kernel_read+0x1f0/0x1f0 [ 48.381107][ T421] should_fail+0x3c6/0x510 [ 48.385524][ T346] ? kmem_cache_free+0x116/0x2e0 [ 48.390041][ T421] __should_failslab+0xa4/0xe0 [ 48.395246][ T346] ? create_io_thread+0x1e0/0x1e0 [ 48.400743][ T421] ? anon_vma_fork+0xf7/0x4e0 [ 48.405073][ T346] ? debug_smp_processor_id+0x17/0x20 [ 48.409405][ T421] should_failslab+0x9/0x20 [ 48.413919][ T346] __x64_sys_clone+0x23f/0x290 [ 48.418594][ T421] slab_pre_alloc_hook+0x37/0xd0 [ 48.423369][ T346] ? __do_sys_vfork+0x130/0x130 [ 48.427967][ T421] ? anon_vma_fork+0xf7/0x4e0 [ 48.432837][ T346] do_syscall_64+0x3d/0xb0 [ 48.437347][ T421] kmem_cache_alloc+0x44/0x200 [ 48.442849][ T346] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 48.447190][ T421] anon_vma_fork+0xf7/0x4e0 [ 48.451787][ T346] RIP: 0033:0x7f4937778a13 [ 48.456714][ T421] ? anon_vma_name+0x43/0x70 [ 48.461482][ T346] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 48.465982][ T421] ? vm_area_dup+0x17a/0x230 [ 48.470413][ T346] RSP: 002b:00007ffc224c8588 EFLAGS: 00000246 [ 48.475093][ T421] copy_mm+0xa3a/0x13e0 [ 48.480822][ T346] ORIG_RAX: 0000000000000038 [ 48.480832][ T346] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4937778a13 [ 48.485168][ T421] ? copy_signal+0x610/0x610 [ 48.489412][ T346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 48.494103][ T421] ? __init_rwsem+0xd6/0x1c0 [ 48.515107][ T346] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 48.520024][ T421] ? copy_signal+0x4e3/0x610 [ 48.526112][ T346] R10: 00005555569e7750 R11: 0000000000000246 R12: 0000000000000001 [ 48.530308][ T421] copy_process+0x1149/0x3290 [ 48.534819][ T346] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 48.534836][ T346] [ 48.542625][ T421] ? proc_fail_nth_write+0x20b/0x290 [ 48.547134][ T346] Modules linked in: [ 48.555140][ T421] ? fsnotify_perm+0x6a/0x5d0 [ 48.559657][ T346] CR2: ffffed180000001a [ 48.567642][ T421] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 48.573454][ T346] ---[ end trace e61df22c5dd9067f ]--- [ 48.581485][ T421] ? vfs_write+0x9ec/0x1110 [ 48.586268][ T346] RIP: 0010:__rb_insert_augmented+0x36b/0x610 [ 48.594257][ T421] kernel_clone+0x21e/0x9e0 [ 48.597274][ T346] Code: 49 89 5d 00 48 83 e3 fc 43 80 3c 26 00 74 08 4c 89 ff e8 18 09 2b ff 4d 89 2f 48 85 db 74 2a 4c 8d 73 10 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 56 08 2b ff 48 8d 43 08 4c 39 7b [ 48.602481][ T421] ? file_end_write+0x1c0/0x1c0 [ 48.606204][ T346] RSP: 0018:ffffc90000cd78f8 EFLAGS: 00010a02 [ 48.610819][ T421] ? create_io_thread+0x1e0/0x1e0 [ 48.614798][ T346] [ 48.614804][ T346] RAX: 1ffff1180000001a RBX: ffff88c0000000c0 RCX: dffffc0000000000 [ 48.619929][ T421] ? mutex_unlock+0xb2/0x260 [ 48.625298][ T346] RDX: ffffffff81a4f280 RSI: ffff88811023b7e0 RDI: ffff88811ebbc2a8 [ 48.629742][ T421] ? __mutex_lock_slowpath+0x10/0x10 [ 48.635635][ T346] RBP: ffffc90000cd7960 R08: dffffc0000000000 R09: ffff88811ebbc2b0 [ 48.640085][ T421] __x64_sys_clone+0x23f/0x290 [ 48.659766][ T346] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 48.664454][ T421] ? __do_sys_vfork+0x130/0x130 [ 48.670350][ T346] R13: ffff888107bfc748 R14: ffff88c0000000d0 R15: ffff88811f4d3180 [ 48.675646][ T421] ? ksys_write+0x260/0x2c0 [ 48.677827][ T346] FS: 00005555569e7480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 48.685720][ T421] ? debug_smp_processor_id+0x17/0x20 [ 48.690428][ T346] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.698387][ T421] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 48.703796][ T346] CR2: ffffed180000001a CR3: 0000000120666000 CR4: 00000000003506b0 [ 48.703815][ T346] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.711675][ T421] ? exit_to_user_mode_prepare+0x39/0xa0 [ 48.716265][ T346] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.724270][ T421] do_syscall_64+0x3d/0xb0 [ 48.728958][ T346] Kernel panic - not syncing: Fatal exception [ 48.736787][ T421] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 48.813897][ T421] RIP: 0033:0x7fe427d2c8d9 [ 48.818145][ T421] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.839125][ T421] RSP: 002b:00007fe4278af078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 48.847445][ T421] RAX: ffffffffffffffda RBX: 00007fe427e4bf80 RCX: 00007fe427d2c8d9 [ 48.855371][ T421] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000008200 [ 48.863395][ T421] RBP: 00007fe4278af120 R08: 0000000000000000 R09: 0000000000000000 [ 48.871399][ T421] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 48.879416][ T421] R13: 000000000000000b R14: 00007fe427e4bf80 R15: 00007ffea9b571b8 [ 48.887185][ T421] [ 48.890247][ T346] Kernel Offset: disabled [ 48.894734][ T346] Rebooting in 86400 seconds..