[ 21.015379][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.023485][ T8] device bridge_slave_0 left promiscuous mode [ 21.029663][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.037717][ T8] device veth1_macvtap left promiscuous mode [ 21.044163][ T8] device veth0_vlan left promiscuous mode [ 31.956203][ T30] kauditd_printk_skb: 72 callbacks suppressed [ 31.956214][ T30] audit: type=1400 audit(1694577082.054:148): avc: denied { transition } for pid=318 comm="sshd" path="/bin/sh" dev="sda1" ino=89 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 31.983996][ T30] audit: type=1400 audit(1694577082.064:149): avc: denied { noatsecure } for pid=318 comm="sshd" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.003008][ T30] audit: type=1400 audit(1694577082.084:150): avc: denied { rlimitinh } for pid=318 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.021928][ T30] audit: type=1400 audit(1694577082.084:151): avc: denied { siginh } for pid=318 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.254' (ED25519) to the list of known hosts. 2023/09/13 03:51:29 ignoring optional flag "sandboxArg"="0" 2023/09/13 03:51:29 parsed 1 programs 2023/09/13 03:51:29 executed programs: 0 [ 39.458347][ T30] audit: type=1400 audit(1694577089.554:152): avc: denied { mounton } for pid=339 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 39.483096][ T30] audit: type=1400 audit(1694577089.564:153): avc: denied { mount } for pid=339 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 39.541665][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.548814][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.556260][ T343] device bridge_slave_0 entered promiscuous mode [ 39.563087][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.570178][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.577333][ T343] device bridge_slave_1 entered promiscuous mode [ 39.618277][ T30] audit: type=1400 audit(1694577089.714:154): avc: denied { write } for pid=343 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.624063][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.638796][ T30] audit: type=1400 audit(1694577089.724:155): avc: denied { read } for pid=343 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.645603][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.673127][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.679923][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.699379][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.706431][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.714091][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.721356][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.730597][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.738771][ T60] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.745818][ T60] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.759861][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.767804][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.774651][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.781817][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.789866][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.805092][ T343] device veth0_vlan entered promiscuous mode [ 39.811597][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.819956][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.827665][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.835052][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.846633][ T343] device veth1_macvtap entered promiscuous mode [ 39.853696][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.864328][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.875498][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.888899][ T30] audit: type=1400 audit(1694577089.994:156): avc: denied { mounton } for pid=343 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.917332][ T30] audit: type=1400 audit(1694577090.014:157): avc: denied { setopt } for pid=348 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.937421][ T30] audit: type=1400 audit(1694577090.034:158): avc: denied { map } for pid=348 comm="syz-executor.0" path="socket:[13643]" dev="sockfs" ino=13643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.938112][ T349] FAULT_INJECTION: forcing a failure. [ 39.938112][ T349] name failslab, interval 1, probability 0, space 0, times 1 [ 39.961098][ T30] audit: type=1400 audit(1694577090.034:159): avc: denied { read accept } for pid=348 comm="syz-executor.0" path="socket:[13643]" dev="sockfs" ino=13643 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 39.974640][ T349] CPU: 1 PID: 349 Comm: syz-executor.0 Not tainted 5.15.131-syzkaller-1068696-gea586874d2f9 #0 [ 40.007490][ T349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 40.017477][ T349] Call Trace: [ 40.020851][ T349] [ 40.023627][ T349] dump_stack_lvl+0x151/0x1b7 [ 40.028141][ T349] ? io_uring_drop_tctx_refs+0x190/0x190 [ 40.033697][ T349] ? slab_post_alloc_hook+0x53/0x2c0 [ 40.038822][ T349] ? kernel_clone+0x21e/0x9e0 [ 40.043418][ T349] ? do_syscall_64+0x3d/0xb0 [ 40.047838][ T349] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.053745][ T349] dump_stack+0x15/0x17 [ 40.057736][ T349] should_fail+0x3c6/0x510 [ 40.061999][ T349] __should_failslab+0xa4/0xe0 [ 40.066591][ T349] ? copy_mm+0x192/0x13e0 [ 40.070755][ T349] should_failslab+0x9/0x20 [ 40.075178][ T349] slab_pre_alloc_hook+0x37/0xd0 [ 40.079955][ T349] ? copy_mm+0x192/0x13e0 [ 40.084186][ T349] kmem_cache_alloc+0x44/0x200 [ 40.088814][ T349] copy_mm+0x192/0x13e0 [ 40.092903][ T349] ? _raw_spin_lock+0xa4/0x1b0 [ 40.097495][ T349] ? copy_signal+0x610/0x610 [ 40.102001][ T349] ? __kasan_check_write+0x14/0x20 [ 40.106960][ T349] ? __init_rwsem+0xd6/0x1c0 [ 40.111372][ T349] ? copy_signal+0x4e3/0x610 [ 40.115832][ T349] copy_process+0x12bc/0x3260 [ 40.120425][ T349] ? proc_fail_nth_write+0x20b/0x290 [ 40.125532][ T349] ? fsnotify_perm+0x6a/0x5d0 [ 40.130141][ T349] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 40.135070][ T349] ? vfs_write+0x9ec/0x1110 [ 40.139413][ T349] kernel_clone+0x21e/0x9e0 [ 40.143749][ T349] ? file_end_write+0x1c0/0x1c0 [ 40.148437][ T349] ? create_io_thread+0x1e0/0x1e0 [ 40.153296][ T349] ? mutex_unlock+0xb2/0x260 [ 40.157736][ T349] ? __mutex_lock_slowpath+0x10/0x10 [ 40.162854][ T349] __x64_sys_clone+0x23f/0x290 [ 40.167442][ T349] ? __do_sys_vfork+0x130/0x130 [ 40.172138][ T349] ? ksys_write+0x260/0x2c0 [ 40.176471][ T349] ? debug_smp_processor_id+0x17/0x20 [ 40.181679][ T349] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 40.187586][ T349] ? exit_to_user_mode_prepare+0x39/0xa0 [ 40.193220][ T349] do_syscall_64+0x3d/0xb0 [ 40.197494][ T349] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.203414][ T349] RIP: 0033:0x7f989e269899 [ 40.207674][ T349] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 40.227200][ T349] RSP: 002b:00007f989ddec078 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 40.235435][ T349] RAX: ffffffffffffffda RBX: 00007f989e388f80 RCX: 00007f989e269899 [ 40.243246][ T349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.251142][ T349] RBP: 00007f989ddec120 R08: 0000000000000000 R09: 0000000000000000 [ 40.259025][ T349] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.266782][ T349] R13: 000000000000000b R14: 00007f989e388f80 R15: 00007fffe46625c8 [ 40.274663][ T349] [ 40.290015][ T352] FAULT_INJECTION: forcing a failure. [ 40.290015][ T352] name failslab, interval 1, probability 0, space 0, times 0 [ 40.302745][ T352] CPU: 1 PID: 352 Comm: syz-executor.0 Not tainted 5.15.131-syzkaller-1068696-gea586874d2f9 #0 [ 40.312876][ T352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 40.322865][ T352] Call Trace: [ 40.325978][ T352] [ 40.328756][ T352] dump_stack_lvl+0x151/0x1b7 [ 40.333274][ T352] ? io_uring_drop_tctx_refs+0x190/0x190 [ 40.338951][ T352] dump_stack+0x15/0x17 [ 40.342932][ T352] should_fail+0x3c6/0x510 [ 40.347185][ T352] __should_failslab+0xa4/0xe0 [ 40.351790][ T352] should_failslab+0x9/0x20 [ 40.356209][ T352] slab_pre_alloc_hook+0x37/0xd0 [ 40.360993][ T352] kmem_cache_alloc_trace+0x48/0x210 [ 40.366371][ T352] ? mm_init+0x39a/0x970 [ 40.370443][ T352] mm_init+0x39a/0x970 [ 40.374353][ T352] copy_mm+0x1e3/0x13e0 [ 40.378345][ T352] ? _raw_spin_lock+0xa4/0x1b0 [ 40.383067][ T352] ? copy_signal+0x610/0x610 [ 40.387541][ T352] ? __kasan_check_write+0x14/0x20 [ 40.392575][ T352] ? __init_rwsem+0xd6/0x1c0 [ 40.397002][ T352] ? copy_signal+0x4e3/0x610 [ 40.401429][ T352] copy_process+0x12bc/0x3260 [ 40.405937][ T352] ? proc_fail_nth_write+0x20b/0x290 [ 40.411055][ T352] ? fsnotify_perm+0x6a/0x5d0 [ 40.415568][ T352] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 40.420515][ T352] ? vfs_write+0x9ec/0x1110 [ 40.424859][ T352] kernel_clone+0x21e/0x9e0 [ 40.429193][ T352] ? file_end_write+0x1c0/0x1c0 [ 40.433969][ T352] ? create_io_thread+0x1e0/0x1e0 [ 40.439351][ T352] ? mutex_unlock+0xb2/0x260 [ 40.443774][ T352] ? __mutex_lock_slowpath+0x10/0x10 [ 40.448983][ T352] __x64_sys_clone+0x23f/0x290 [ 40.453620][ T352] ? __do_sys_vfork+0x130/0x130 [ 40.458266][ T352] ? ksys_write+0x260/0x2c0 [ 40.462609][ T352] ? debug_smp_processor_id+0x17/0x20 [ 40.467817][ T352] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 40.473716][ T352] ? exit_to_user_mode_prepare+0x39/0xa0 [ 40.479273][ T352] do_syscall_64+0x3d/0xb0 [ 40.483524][ T352] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.489253][ T352] RIP: 0033:0x7f989e269899 [ 40.493505][ T352] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 40.512947][ T352] RSP: 002b:00007f989ddec078 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 40.521193][ T352] RAX: ffffffffffffffda RBX: 00007f989e388f80 RCX: 00007f989e269899 [ 40.529175][ T352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.536990][ T352] RBP: 00007f989ddec120 R08: 0000000000000000 R09: 0000000000000000 [ 40.544798][ T352] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.552625][ T352] R13: 000000000000000b R14: 00007f989e388f80 R15: 00007fffe46625c8 [ 40.560429][ T352] [ 40.572582][ T354] FAULT_INJECTION: forcing a failure. [ 40.572582][ T354] name failslab, interval 1, probability 0, space 0, times 0 [ 40.585071][ T354] CPU: 1 PID: 354 Comm: syz-executor.0 Not tainted 5.15.131-syzkaller-1068696-gea586874d2f9 #0 [ 40.595234][ T354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 40.605563][ T354] Call Trace: [ 40.608695][ T354] [ 40.611460][ T354] dump_stack_lvl+0x151/0x1b7 [ 40.615974][ T354] ? io_uring_drop_tctx_refs+0x190/0x190 [ 40.621453][ T354] ? slab_post_alloc_hook+0x53/0x2c0 [ 40.626563][ T354] ? kernel_clone+0x21e/0x9e0 [ 40.631091][ T354] ? do_syscall_64+0x3d/0xb0 [ 40.635506][ T354] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.641419][ T354] dump_stack+0x15/0x17 [ 40.645585][ T354] should_fail+0x3c6/0x510 [ 40.649938][ T354] __should_failslab+0xa4/0xe0 [ 40.654649][ T354] ? copy_mm+0x192/0x13e0 [ 40.658771][ T354] should_failslab+0x9/0x20 [ 40.663108][ T354] slab_pre_alloc_hook+0x37/0xd0 [ 40.667970][ T354] ? copy_mm+0x192/0x13e0 [ 40.672131][ T354] kmem_cache_alloc+0x44/0x200 [ 40.676749][ T354] copy_mm+0x192/0x13e0 [ 40.680819][ T354] ? _raw_spin_lock+0xa4/0x1b0 [ 40.685502][ T354] ? copy_signal+0x610/0x610 [ 40.689923][ T354] ? __kasan_check_write+0x14/0x20 [ 40.694956][ T354] ? __init_rwsem+0xd6/0x1c0 [ 40.699471][ T354] ? copy_signal+0x4e3/0x610 [ 40.703993][ T354] copy_process+0x12bc/0x3260 [ 40.708501][ T354] ? proc_fail_nth_write+0x20b/0x290 [ 40.713623][ T354] ? fsnotify_perm+0x6a/0x5d0 [ 40.718134][ T354] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 40.723079][ T354] ? vfs_write+0x9ec/0x1110 [ 40.727423][ T354] kernel_clone+0x21e/0x9e0 [ 40.731934][ T354] ? file_end_write+0x1c0/0x1c0 [ 40.736791][ T354] ? create_io_thread+0x1e0/0x1e0 [ 40.741659][ T354] ? mutex_unlock+0xb2/0x260 [ 40.746087][ T354] ? __mutex_lock_slowpath+0x10/0x10 [ 40.751198][ T354] __x64_sys_clone+0x23f/0x290 [ 40.755808][ T354] ? __do_sys_vfork+0x130/0x130 [ 40.760485][ T354] ? ksys_write+0x260/0x2c0 [ 40.764829][ T354] ? debug_smp_processor_id+0x17/0x20 [ 40.770041][ T354] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 40.776020][ T354] ? exit_to_user_mode_prepare+0x39/0xa0 [ 40.781490][ T354] do_syscall_64+0x3d/0xb0 [ 40.785828][ T354] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.791645][ T354] RIP: 0033:0x7f989e269899 [ 40.795912][ T354] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 40.815440][ T354] RSP: 002b:00007f989ddec078 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 40.823677][ T354] RAX: ffffffffffffffda RBX: 00007f989e388f80 RCX: 00007f989e269899 [ 40.831505][ T354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 40.839293][ T354] RBP: 00007f989ddec120 R08: 0000000000000000 R09: 0000000000000000 [ 40.847104][ T354] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 40.854927][ T354] R13: 000000000000000b R14: 00007f989e388f80 R15: 00007fffe46625c8 [ 40.862990][ T354] [ 40.878947][ T357] FAULT_INJECTION: forcing a failure. [ 40.878947][ T357] name failslab, interval 1, probability 0, space 0, times 0 [ 40.891781][ T357] CPU: 1 PID: 357 Comm: syz-executor.0 Not tainted 5.15.131-syzkaller-1068696-gea586874d2f9 #0 [ 40.902007][ T357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 40.911984][ T357] Call Trace: [ 40.915117][ T357] [ 40.917892][ T357] dump_stack_lvl+0x151/0x1b7 [ 40.922398][ T357] ? io_uring_drop_tctx_refs+0x190/0x190 [ 40.927869][ T357] dump_stack+0x15/0x17 [ 40.931870][ T357] should_fail+0x3c6/0x510 [ 40.936110][ T357] __should_failslab+0xa4/0xe0 [ 40.940799][ T357] ? anon_vma_fork+0xf7/0x4e0 [ 40.945311][ T357] should_failslab+0x9/0x20 [ 40.949749][ T357] slab_pre_alloc_hook+0x37/0xd0 [ 40.954555][ T357] ? anon_vma_fork+0xf7/0x4e0 [ 40.959134][ T357] kmem_cache_alloc+0x44/0x200 [ 40.963901][ T357] anon_vma_fork+0xf7/0x4e0 [ 40.968329][ T357] ? anon_vma_name+0x43/0x70 [ 40.972757][ T357] ? vm_area_dup+0x17a/0x230 [ 40.977193][ T357] copy_mm+0xa3a/0x13e0 [ 40.981172][ T357] ? copy_signal+0x610/0x610 [ 40.985599][ T357] ? __init_rwsem+0xd6/0x1c0 [ 40.990382][ T357] ? copy_signal+0x4e3/0x610 [ 40.994799][ T357] copy_process+0x12bc/0x3260 [ 40.999317][ T357] ? proc_fail_nth_write+0x20b/0x290 [ 41.004441][ T357] ? fsnotify_perm+0x6a/0x5d0 [ 41.009119][ T357] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 41.014240][ T357] ? vfs_write+0x9ec/0x1110 [ 41.018581][ T357] kernel_clone+0x21e/0x9e0 [ 41.023107][ T357] ? file_end_write+0x1c0/0x1c0 [ 41.027867][ T357] ? create_io_thread+0x1e0/0x1e0 [ 41.032724][ T357] ? mutex_unlock+0xb2/0x260 [ 41.037395][ T357] ? __mutex_lock_slowpath+0x10/0x10 [ 41.042499][ T357] __x64_sys_clone+0x23f/0x290 [ 41.047356][ T357] ? __do_sys_vfork+0x130/0x130 [ 41.052125][ T357] ? ksys_write+0x260/0x2c0 [ 41.056467][ T357] ? debug_smp_processor_id+0x17/0x20 [ 41.061674][ T357] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 41.067686][ T357] ? exit_to_user_mode_prepare+0x39/0xa0 [ 41.073130][ T357] do_syscall_64+0x3d/0xb0 [ 41.077386][ T357] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.083228][ T357] RIP: 0033:0x7f989e269899 [ 41.087489][ T357] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.107273][ T357] RSP: 002b:00007f989ddec078 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 41.115623][ T357] RAX: ffffffffffffffda RBX: 00007f989e388f80 RCX: 00007f989e269899 [ 41.123863][ T357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.131674][ T357] RBP: 00007f989ddec120 R08: 0000000000000000 R09: 0000000000000000 [ 41.139586][ T357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.147664][ T357] R13: 000000000000000b R14: 00007f989e388f80 R15: 00007fffe46625c8 [ 41.155473][ T357] [ 41.158887][ T357] ================================================================== [ 41.167028][ T357] BUG: KASAN: null-ptr-deref in vm_area_free_no_check+0x7e/0x130 [ 41.174584][ T357] Write of size 4 at addr 0000000000000001 by task syz-executor.0/357 [ 41.182562][ T357] [ 41.184728][ T357] CPU: 0 PID: 357 Comm: syz-executor.0 Not tainted 5.15.131-syzkaller-1068696-gea586874d2f9 #0 [ 41.194884][ T357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 41.204801][ T357] Call Trace: [ 41.207904][ T357] [ 41.210694][ T357] dump_stack_lvl+0x151/0x1b7 [ 41.215198][ T357] ? io_uring_drop_tctx_refs+0x190/0x190 [ 41.220668][ T357] ? unlink_anon_vmas+0x2b9/0x590 [ 41.225624][ T357] kasan_report+0x16f/0x1c0 [ 41.229963][ T357] ? vm_area_free_no_check+0x7e/0x130 [ 41.235176][ T357] ? vm_area_free_no_check+0x7e/0x130 [ 41.240388][ T357] kasan_check_range+0x293/0x2a0 [ 41.245158][ T357] __kasan_check_write+0x14/0x20 [ 41.249926][ T357] vm_area_free_no_check+0x7e/0x130 [ 41.254957][ T357] copy_mm+0xefb/0x13e0 [ 41.258955][ T357] ? copy_signal+0x610/0x610 [ 41.263374][ T357] ? __init_rwsem+0xd6/0x1c0 [ 41.267803][ T357] ? copy_signal+0x4e3/0x610 [ 41.272363][ T357] copy_process+0x12bc/0x3260 [ 41.276883][ T357] ? proc_fail_nth_write+0x20b/0x290 [ 41.281992][ T357] ? fsnotify_perm+0x6a/0x5d0 [ 41.286554][ T357] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 41.291454][ T357] ? vfs_write+0x9ec/0x1110 [ 41.295794][ T357] kernel_clone+0x21e/0x9e0 [ 41.300147][ T357] ? file_end_write+0x1c0/0x1c0 [ 41.304822][ T357] ? create_io_thread+0x1e0/0x1e0 [ 41.309689][ T357] ? mutex_unlock+0xb2/0x260 [ 41.314110][ T357] ? __mutex_lock_slowpath+0x10/0x10 [ 41.319228][ T357] __x64_sys_clone+0x23f/0x290 [ 41.323921][ T357] ? __do_sys_vfork+0x130/0x130 [ 41.328604][ T357] ? ksys_write+0x260/0x2c0 [ 41.333030][ T357] ? debug_smp_processor_id+0x17/0x20 [ 41.338235][ T357] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 41.344136][ T357] ? exit_to_user_mode_prepare+0x39/0xa0 [ 41.350127][ T357] do_syscall_64+0x3d/0xb0 [ 41.354376][ T357] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.360132][ T357] RIP: 0033:0x7f989e269899 [ 41.364547][ T357] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.383995][ T357] RSP: 002b:00007f989ddec078 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 41.392231][ T357] RAX: ffffffffffffffda RBX: 00007f989e388f80 RCX: 00007f989e269899 [ 41.400040][ T357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.407855][ T357] RBP: 00007f989ddec120 R08: 0000000000000000 R09: 0000000000000000 [ 41.415668][ T357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.423754][ T357] R13: 000000000000000b R14: 00007f989e388f80 R15: 00007fffe46625c8 [ 41.431759][ T357] [ 41.434621][ T357] ================================================================== [ 41.442516][ T357] Disabling lock debugging due to kernel taint [ 41.449788][ T357] BUG: kernel NULL pointer dereference, address: 0000000000000001 [ 41.457537][ T357] #PF: supervisor write access in kernel mode [ 41.463437][ T357] #PF: error_code(0x0002) - not-present page [ 41.469253][ T357] PGD 11dcbf067 P4D 11dcbf067 PUD 11f760067 PMD 0 [ 41.475676][ T357] Oops: 0002 [#1] PREEMPT SMP KASAN [ 41.480709][ T357] CPU: 0 PID: 357 Comm: syz-executor.0 Tainted: G B 5.15.131-syzkaller-1068696-gea586874d2f9 #0 [ 41.492425][ T357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 41.502321][ T357] RIP: 0010:vm_area_free_no_check+0x83/0x130 [ 41.508134][ T357] Code: 03 42 80 3c 38 00 74 08 48 89 df e8 d7 4e 71 00 4c 8b 3b 4d 85 ff 74 37 4c 89 ff be 04 00 00 00 e8 c2 50 71 00 bb ff ff ff ff 41 0f c1 1f bf 01 00 00 00 89 de e8 8c 7a 2f 00 83 fb 01 75 16 [ 41.527586][ T357] RSP: 0018:ffffc90000d67988 EFLAGS: 00010246 [ 41.533871][ T357] RAX: ffff88810d7be200 RBX: 00000000ffffffff RCX: ffff88810d7be2c0 [ 41.541810][ T357] RDX: 0000000000000000 RSI: 0000000000000286 RDI: 00000000ffffffff [ 41.549601][ T357] RBP: ffffc90000d679b0 R08: ffffffff81416a8b R09: 0000000000000003 [ 41.557400][ T357] R10: fffffbfff0d91e4c R11: dffffc0000000001 R12: 1ffff110216f7214 [ 41.565214][ T357] R13: ffff88810b7b90a0 R14: ffff88810b7b9000 R15: 0000000000000001 [ 41.573201][ T357] FS: 00007f989ddec6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 41.582065][ T357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.588657][ T357] CR2: 0000000000000001 CR3: 000000011df49000 CR4: 00000000003506b0 [ 41.596460][ T357] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.604267][ T357] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.612167][ T357] Call Trace: [ 41.615299][ T357] [ 41.618166][ T357] ? __die_body+0x62/0xb0 [ 41.622860][ T357] ? __die+0x7e/0x90 [ 41.626693][ T357] ? page_fault_oops+0x7f9/0xa90 [ 41.631467][ T357] ? __kasan_check_write+0x14/0x20 [ 41.636414][ T357] ? kernelmode_fixup_or_oops+0x270/0x270 [ 41.642403][ T357] ? __schedule+0xcc6/0x1580 [ 41.646832][ T357] ? exc_page_fault+0x521/0x830 [ 41.651543][ T357] ? asm_exc_page_fault+0x27/0x30 [ 41.656460][ T357] ? check_panic_on_warn+0x5b/0xb0 [ 41.661503][ T357] ? vm_area_free_no_check+0x83/0x130 [ 41.666713][ T357] ? vm_area_free_no_check+0x7e/0x130 [ 41.671923][ T357] copy_mm+0xefb/0x13e0 [ 41.676167][ T357] ? copy_signal+0x610/0x610 [ 41.680587][ T357] ? __init_rwsem+0xd6/0x1c0 [ 41.685018][ T357] ? copy_signal+0x4e3/0x610 [ 41.689530][ T357] copy_process+0x12bc/0x3260 [ 41.694048][ T357] ? proc_fail_nth_write+0x20b/0x290 [ 41.699164][ T357] ? fsnotify_perm+0x6a/0x5d0 [ 41.703679][ T357] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 41.708632][ T357] ? vfs_write+0x9ec/0x1110 [ 41.713310][ T357] kernel_clone+0x21e/0x9e0 [ 41.717735][ T357] ? file_end_write+0x1c0/0x1c0 [ 41.722426][ T357] ? create_io_thread+0x1e0/0x1e0 [ 41.727291][ T357] ? mutex_unlock+0xb2/0x260 [ 41.731724][ T357] ? __mutex_lock_slowpath+0x10/0x10 [ 41.736830][ T357] __x64_sys_clone+0x23f/0x290 [ 41.741435][ T357] ? __do_sys_vfork+0x130/0x130 [ 41.746116][ T357] ? ksys_write+0x260/0x2c0 [ 41.750548][ T357] ? debug_smp_processor_id+0x17/0x20 [ 41.755755][ T357] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 41.761662][ T357] ? exit_to_user_mode_prepare+0x39/0xa0 [ 41.767121][ T357] do_syscall_64+0x3d/0xb0 [ 41.771374][ T357] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.777105][ T357] RIP: 0033:0x7f989e269899 [ 41.781469][ T357] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.800997][ T357] RSP: 002b:00007f989ddec078 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 41.809249][ T357] RAX: ffffffffffffffda RBX: 00007f989e388f80 RCX: 00007f989e269899 [ 41.817143][ T357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 41.824951][ T357] RBP: 00007f989ddec120 R08: 0000000000000000 R09: 0000000000000000 [ 41.832769][ T357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 41.840664][ T357] R13: 000000000000000b R14: 00007f989e388f80 R15: 00007fffe46625c8 [ 41.848515][ T357] [ 41.851335][ T357] Modules linked in: [ 41.855072][ T357] CR2: 0000000000000001 [ 41.859065][ T357] ---[ end trace 8f3659a442a0fb05 ]--- [ 41.864358][ T357] RIP: 0010:vm_area_free_no_check+0x83/0x130 [ 41.870175][ T357] Code: 03 42 80 3c 38 00 74 08 48 89 df e8 d7 4e 71 00 4c 8b 3b 4d 85 ff 74 37 4c 89 ff be 04 00 00 00 e8 c2 50 71 00 bb ff ff ff ff 41 0f c1 1f bf 01 00 00 00 89 de e8 8c 7a 2f 00 83 fb 01 75 16 [ 41.889623][ T357] RSP: 0018:ffffc90000d67988 EFLAGS: 00010246 [ 41.895516][ T357] RAX: ffff88810d7be200 RBX: 00000000ffffffff RCX: ffff88810d7be2c0 [ 41.903324][ T357] RDX: 0000000000000000 RSI: 0000000000000286 RDI: 00000000ffffffff [ 41.911139][ T357] RBP: ffffc90000d679b0 R08: ffffffff81416a8b R09: 0000000000000003 [ 41.918955][ T357] R10: fffffbfff0d91e4c R11: dffffc0000000001 R12: 1ffff110216f7214 [ 41.926770][ T357] R13: ffff88810b7b90a0 R14: ffff88810b7b9000 R15: 0000000000000001 [ 41.934575][ T357] FS: 00007f989ddec6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 41.943350][ T357] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.949808][ T357] CR2: 0000000000000001 CR3: 000000011df49000 CR4: 00000000003506b0 [ 41.957587][ T357] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.965386][ T357] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.973198][ T357] Kernel panic - not syncing: Fatal exception [ 41.979319][ T357] Kernel Offset: disabled [ 41.983454][ T357] Rebooting in 86400 seconds..