[ 29.010969][ T307] device veth1_macvtap entered promiscuous mode [ 29.020285][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.030183][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.106283][ T307] syz-executor.0 (307) used greatest stack depth: 20000 bytes left [ 29.846025][ T8] device bridge_slave_1 left promiscuous mode [ 29.852132][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.859595][ T8] device bridge_slave_0 left promiscuous mode [ 29.865644][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.873456][ T8] device veth1_macvtap left promiscuous mode [ 29.879453][ T8] device veth0_vlan left promiscuous mode Warning: Permanently added '10.128.1.138' (ED25519) to the list of known hosts. 2024/11/29 02:16:38 ignoring optional flag "sandboxArg"="0" 2024/11/29 02:16:38 ignoring optional flag "type"="gce" 2024/11/29 02:16:38 parsed 1 programs [ 46.985652][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 46.985667][ T30] audit: type=1400 audit(1732846598.344:95): avc: denied { unlink } for pid=349 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2024/11/29 02:16:38 executed programs: 0 [ 47.058063][ T349] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 47.115842][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.122697][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.130251][ T355] device bridge_slave_0 entered promiscuous mode [ 47.137048][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.143881][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.151228][ T355] device bridge_slave_1 entered promiscuous mode [ 47.198123][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.204999][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.212157][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.219002][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.237820][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.245054][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.252187][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.260035][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.268865][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.277191][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.284030][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.292737][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.300868][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.307824][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.320220][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.329092][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.342456][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.353524][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.361543][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.368896][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.377302][ T355] device veth0_vlan entered promiscuous mode [ 47.387207][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.396135][ T355] device veth1_macvtap entered promiscuous mode [ 47.405263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.415421][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.437140][ T360] FAULT_INJECTION: forcing a failure. [ 47.437140][ T360] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 47.450536][ T360] CPU: 1 PID: 360 Comm: syz-executor.0 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 47.460715][ T360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 47.470685][ T360] Call Trace: [ 47.473793][ T360] [ 47.476576][ T360] dump_stack_lvl+0x151/0x1c0 [ 47.481093][ T360] ? io_uring_drop_tctx_refs+0x190/0x190 [ 47.486554][ T360] ? __alloc_pages+0x27e/0x8f0 [ 47.491150][ T360] dump_stack+0x15/0x20 [ 47.495145][ T360] should_fail+0x3c6/0x510 [ 47.499398][ T360] should_fail_alloc_page+0x5a/0x80 [ 47.504431][ T360] prepare_alloc_pages+0x15c/0x700 [ 47.509380][ T360] ? __alloc_pages_bulk+0xe40/0xe40 [ 47.514418][ T360] __alloc_pages+0x18c/0x8f0 [ 47.518838][ T360] ? prep_new_page+0x110/0x110 [ 47.523441][ T360] ? stack_trace_save+0x1c0/0x1c0 [ 47.528310][ T360] ? __kernel_text_address+0x9b/0x110 [ 47.533640][ T360] pte_alloc_one+0x73/0x1b0 [ 47.537974][ T360] ? pfn_modify_allowed+0x2f0/0x2f0 [ 47.543004][ T360] __pte_alloc+0x86/0x350 [ 47.547369][ T360] ? free_pgtables+0x280/0x280 [ 47.551988][ T360] ? __stack_depot_save+0x34/0x470 [ 47.556942][ T360] ? anon_vma_clone+0x9a/0x500 [ 47.561510][ T360] copy_page_range+0x28a8/0x2f90 [ 47.566278][ T360] ? __kasan_slab_alloc+0xb1/0xe0 [ 47.571151][ T360] ? slab_post_alloc_hook+0x53/0x2c0 [ 47.576269][ T360] ? kernel_clone+0x21e/0x9e0 [ 47.580774][ T360] ? x64_sys_call+0x1b0/0x9a0 [ 47.585295][ T360] ? do_syscall_64+0x3b/0xb0 [ 47.589712][ T360] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.595637][ T360] ? pfn_valid+0x1e0/0x1e0 [ 47.599870][ T360] ? rwsem_write_trylock+0x153/0x340 [ 47.604990][ T360] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 47.611237][ T360] ? vma_gap_callbacks_rotate+0x1b7/0x210 [ 47.616803][ T360] ? __rb_insert_augmented+0x5de/0x610 [ 47.622177][ T360] copy_mm+0xc7e/0x13e0 [ 47.626259][ T360] ? copy_signal+0x610/0x610 [ 47.630683][ T360] ? __init_rwsem+0xfe/0x1d0 [ 47.635357][ T360] ? copy_signal+0x4e3/0x610 [ 47.639707][ T360] copy_process+0x1149/0x3290 [ 47.644222][ T360] ? __kasan_check_write+0x14/0x20 [ 47.649294][ T360] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 47.654327][ T360] ? vfs_write+0x94d/0x1110 [ 47.658655][ T360] kernel_clone+0x21e/0x9e0 [ 47.663185][ T360] ? __kasan_check_write+0x14/0x20 [ 47.668117][ T360] ? create_io_thread+0x1e0/0x1e0 [ 47.672973][ T360] __x64_sys_clone+0x23f/0x290 [ 47.677577][ T360] ? __do_sys_vfork+0x130/0x130 [ 47.682263][ T360] ? debug_smp_processor_id+0x17/0x20 [ 47.687466][ T360] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 47.693372][ T360] ? exit_to_user_mode_prepare+0x39/0xa0 [ 47.698838][ T360] x64_sys_call+0x1b0/0x9a0 [ 47.703176][ T360] do_syscall_64+0x3b/0xb0 [ 47.707428][ T360] ? clear_bhb_loop+0x35/0x90 [ 47.711953][ T360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.717935][ T360] RIP: 0033:0x7f832c28ada9 [ 47.722203][ T360] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.741627][ T360] RSP: 002b:00007f832be0c078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 47.749875][ T360] RAX: ffffffffffffffda RBX: 00007f832c3b8f80 RCX: 00007f832c28ada9 [ 47.757683][ T360] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 47.765665][ T360] RBP: 00007f832be0c120 R08: 0000000000000000 R09: 0000000000000000 [ 47.773478][ T360] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 47.781300][ T360] R13: 000000000000000b R14: 00007f832c3b8f80 R15: 00007ffe334b3ac8 [ 47.789111][ T360] [ 47.795042][ T30] audit: type=1400 audit(1732846599.144:96): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 47.813541][ T364] FAULT_INJECTION: forcing a failure. [ 47.813541][ T364] name failslab, interval 1, probability 0, space 0, times 1 [ 47.829121][ T364] CPU: 0 PID: 364 Comm: syz-executor.0 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 47.839411][ T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 47.849401][ T364] Call Trace: [ 47.852518][ T364] [ 47.855316][ T364] dump_stack_lvl+0x151/0x1c0 [ 47.859805][ T364] ? io_uring_drop_tctx_refs+0x190/0x190 [ 47.865269][ T364] dump_stack+0x15/0x20 [ 47.869358][ T364] should_fail+0x3c6/0x510 [ 47.873610][ T364] __should_failslab+0xa4/0xe0 [ 47.878206][ T364] ? anon_vma_clone+0x9a/0x500 [ 47.882803][ T364] should_failslab+0x9/0x20 [ 47.887141][ T364] slab_pre_alloc_hook+0x37/0xd0 [ 47.891924][ T364] ? anon_vma_clone+0x9a/0x500 [ 47.896515][ T364] kmem_cache_alloc+0x44/0x200 [ 47.901113][ T364] anon_vma_clone+0x9a/0x500 [ 47.905541][ T364] anon_vma_fork+0x91/0x4e0 [ 47.909880][ T364] ? anon_vma_name+0x43/0x70 [ 47.914304][ T364] ? vm_area_dup+0x17a/0x230 [ 47.918731][ T364] copy_mm+0xa3a/0x13e0 [ 47.922725][ T364] ? copy_signal+0x610/0x610 [ 47.927152][ T364] ? __init_rwsem+0xfe/0x1d0 [ 47.931688][ T364] ? copy_signal+0x4e3/0x610 [ 47.936264][ T364] copy_process+0x1149/0x3290 [ 47.940787][ T364] ? __kasan_check_write+0x14/0x20 [ 47.945727][ T364] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 47.950698][ T364] ? vfs_write+0x94d/0x1110 [ 47.955100][ T364] kernel_clone+0x21e/0x9e0 [ 47.959441][ T364] ? __kasan_check_write+0x14/0x20 [ 47.964471][ T364] ? create_io_thread+0x1e0/0x1e0 [ 47.969350][ T364] __x64_sys_clone+0x23f/0x290 [ 47.973948][ T364] ? __do_sys_vfork+0x130/0x130 [ 47.978632][ T364] ? debug_smp_processor_id+0x17/0x20 [ 47.983916][ T364] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 47.989817][ T364] ? exit_to_user_mode_prepare+0x39/0xa0 [ 47.995281][ T364] x64_sys_call+0x1b0/0x9a0 [ 47.999621][ T364] do_syscall_64+0x3b/0xb0 [ 48.003872][ T364] ? clear_bhb_loop+0x35/0x90 [ 48.008389][ T364] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.014118][ T364] RIP: 0033:0x7f832c28ada9 [ 48.018384][ T364] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.037926][ T364] RSP: 002b:00007f832be0c078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 48.046273][ T364] RAX: ffffffffffffffda RBX: 00007f832c3b8f80 RCX: 00007f832c28ada9 [ 48.054231][ T364] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 48.062043][ T364] RBP: 00007f832be0c120 R08: 0000000000000000 R09: 0000000000000000 [ 48.069856][ T364] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 48.077668][ T364] R13: 000000000000000b R14: 00007f832c3b8f80 R15: 00007ffe334b3ac8 [ 48.085483][ T364] [ 48.089524][ T30] audit: type=1400 audit(1732846599.444:97): avc: denied { sys_admin } for pid=363 comm="syz-executor.0" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 48.118762][ T367] FAULT_INJECTION: forcing a failure. [ 48.118762][ T367] name failslab, interval 1, probability 0, space 0, times 0 [ 48.131415][ T367] CPU: 1 PID: 367 Comm: syz-executor.0 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 48.141475][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 48.151370][ T367] Call Trace: [ 48.154493][ T367] [ 48.157269][ T367] dump_stack_lvl+0x151/0x1c0 [ 48.161782][ T367] ? io_uring_drop_tctx_refs+0x190/0x190 [ 48.167254][ T367] dump_stack+0x15/0x20 [ 48.171283][ T367] should_fail+0x3c6/0x510 [ 48.175498][ T367] __should_failslab+0xa4/0xe0 [ 48.180196][ T367] ? anon_vma_clone+0x9a/0x500 [ 48.184928][ T367] should_failslab+0x9/0x20 [ 48.189230][ T367] slab_pre_alloc_hook+0x37/0xd0 [ 48.194004][ T367] ? anon_vma_clone+0x9a/0x500 [ 48.198605][ T367] kmem_cache_alloc+0x44/0x200 [ 48.203204][ T367] anon_vma_clone+0x9a/0x500 [ 48.207632][ T367] anon_vma_fork+0x91/0x4e0 [ 48.211970][ T367] ? anon_vma_name+0x43/0x70 [ 48.216396][ T367] ? vm_area_dup+0x17a/0x230 [ 48.220824][ T367] copy_mm+0xa3a/0x13e0 [ 48.224820][ T367] ? copy_signal+0x610/0x610 [ 48.229240][ T367] ? __init_rwsem+0xfe/0x1d0 [ 48.233666][ T367] ? copy_signal+0x4e3/0x610 [ 48.238188][ T367] copy_process+0x1149/0x3290 [ 48.242802][ T367] ? __kasan_check_write+0x14/0x20 [ 48.247823][ T367] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 48.252762][ T367] ? vfs_write+0x94d/0x1110 [ 48.257103][ T367] kernel_clone+0x21e/0x9e0 [ 48.261629][ T367] ? __kasan_check_write+0x14/0x20 [ 48.266586][ T367] ? create_io_thread+0x1e0/0x1e0 [ 48.271517][ T367] __x64_sys_clone+0x23f/0x290 [ 48.276255][ T367] ? __do_sys_vfork+0x130/0x130 [ 48.280936][ T367] ? debug_smp_processor_id+0x17/0x20 [ 48.286136][ T367] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 48.292037][ T367] ? exit_to_user_mode_prepare+0x39/0xa0 [ 48.297509][ T367] x64_sys_call+0x1b0/0x9a0 [ 48.301848][ T367] do_syscall_64+0x3b/0xb0 [ 48.306099][ T367] ? clear_bhb_loop+0x35/0x90 [ 48.310615][ T367] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.316350][ T367] RIP: 0033:0x7f832c28ada9 [ 48.320598][ T367] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.340522][ T367] RSP: 002b:00007f832be0c078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 48.348749][ T367] RAX: ffffffffffffffda RBX: 00007f832c3b8f80 RCX: 00007f832c28ada9 [ 48.356553][ T367] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 48.364624][ T367] RBP: 00007f832be0c120 R08: 0000000000000000 R09: 0000000000000000 [ 48.372428][ T367] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 48.380240][ T367] R13: 000000000000000b R14: 00007f832c3b8f80 R15: 00007ffe334b3ac8 [ 48.388054][ T367] [ 48.412097][ T370] FAULT_INJECTION: forcing a failure. [ 48.412097][ T370] name failslab, interval 1, probability 0, space 0, times 0 [ 48.425017][ T370] CPU: 0 PID: 370 Comm: syz-executor.0 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 48.435270][ T370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 48.445243][ T370] Call Trace: [ 48.448358][ T370] [ 48.451138][ T370] dump_stack_lvl+0x151/0x1c0 [ 48.455653][ T370] ? io_uring_drop_tctx_refs+0x190/0x190 [ 48.461117][ T370] dump_stack+0x15/0x20 [ 48.465288][ T370] should_fail+0x3c6/0x510 [ 48.469537][ T370] __should_failslab+0xa4/0xe0 [ 48.474134][ T370] ? anon_vma_fork+0xf7/0x4e0 [ 48.478662][ T370] should_failslab+0x9/0x20 [ 48.482990][ T370] slab_pre_alloc_hook+0x37/0xd0 [ 48.487768][ T370] ? anon_vma_fork+0xf7/0x4e0 [ 48.492274][ T370] kmem_cache_alloc+0x44/0x200 [ 48.496997][ T370] anon_vma_fork+0xf7/0x4e0 [ 48.501431][ T370] ? anon_vma_name+0x43/0x70 [ 48.505851][ T370] ? vm_area_dup+0x17a/0x230 [ 48.510281][ T370] copy_mm+0xa3a/0x13e0 [ 48.514359][ T370] ? copy_signal+0x610/0x610 [ 48.518793][ T370] ? __init_rwsem+0xfe/0x1d0 [ 48.523248][ T370] ? copy_signal+0x4e3/0x610 [ 48.527635][ T370] copy_process+0x1149/0x3290 [ 48.532150][ T370] ? __kasan_check_write+0x14/0x20 [ 48.537098][ T370] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 48.542044][ T370] ? vfs_write+0x94d/0x1110 [ 48.546398][ T370] kernel_clone+0x21e/0x9e0 [ 48.550737][ T370] ? __kasan_check_write+0x14/0x20 [ 48.555720][ T370] ? create_io_thread+0x1e0/0x1e0 [ 48.560535][ T370] __x64_sys_clone+0x23f/0x290 [ 48.565218][ T370] ? __do_sys_vfork+0x130/0x130 [ 48.569904][ T370] ? debug_smp_processor_id+0x17/0x20 [ 48.575109][ T370] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 48.581011][ T370] ? exit_to_user_mode_prepare+0x39/0xa0 [ 48.586483][ T370] x64_sys_call+0x1b0/0x9a0 [ 48.590842][ T370] do_syscall_64+0x3b/0xb0 [ 48.595079][ T370] ? clear_bhb_loop+0x35/0x90 [ 48.599612][ T370] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.605312][ T370] RIP: 0033:0x7f832c28ada9 [ 48.609662][ T370] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.629187][ T370] RSP: 002b:00007f832be0c078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 48.637559][ T370] RAX: ffffffffffffffda RBX: 00007f832c3b8f80 RCX: 00007f832c28ada9 [ 48.645353][ T370] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 48.653247][ T370] RBP: 00007f832be0c120 R08: 0000000000000000 R09: 0000000000000000 [ 48.661146][ T370] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 48.669257][ T370] R13: 000000000000000b R14: 00007f832c3b8f80 R15: 00007ffe334b3ac8 [ 48.677058][ T370] [ 48.688325][ T372] FAULT_INJECTION: forcing a failure. [ 48.688325][ T372] name failslab, interval 1, probability 0, space 0, times 0 [ 48.700811][ T372] CPU: 0 PID: 372 Comm: syz-executor.0 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 48.710903][ T372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 48.721235][ T372] Call Trace: [ 48.724366][ T372] [ 48.727125][ T372] dump_stack_lvl+0x151/0x1c0 [ 48.731641][ T372] ? io_uring_drop_tctx_refs+0x190/0x190 [ 48.737197][ T372] dump_stack+0x15/0x20 [ 48.741185][ T372] should_fail+0x3c6/0x510 [ 48.745631][ T372] __should_failslab+0xa4/0xe0 [ 48.750322][ T372] ? anon_vma_clone+0x9a/0x500 [ 48.755086][ T372] should_failslab+0x9/0x20 [ 48.759431][ T372] slab_pre_alloc_hook+0x37/0xd0 [ 48.764206][ T372] ? anon_vma_clone+0x9a/0x500 [ 48.768903][ T372] kmem_cache_alloc+0x44/0x200 [ 48.773676][ T372] anon_vma_clone+0x9a/0x500 [ 48.778101][ T372] anon_vma_fork+0x91/0x4e0 [ 48.782454][ T372] ? anon_vma_name+0x43/0x70 [ 48.786895][ T372] ? vm_area_dup+0x17a/0x230 [ 48.791476][ T372] copy_mm+0xa3a/0x13e0 [ 48.795560][ T372] ? copy_signal+0x610/0x610 [ 48.800089][ T372] ? __init_rwsem+0xfe/0x1d0 [ 48.804512][ T372] ? copy_signal+0x4e3/0x610 [ 48.808938][ T372] copy_process+0x1149/0x3290 [ 48.813448][ T372] ? __kasan_check_write+0x14/0x20 [ 48.818421][ T372] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 48.823521][ T372] ? vfs_write+0x94d/0x1110 [ 48.827813][ T372] kernel_clone+0x21e/0x9e0 [ 48.832139][ T372] ? __kasan_check_write+0x14/0x20 [ 48.837079][ T372] ? create_io_thread+0x1e0/0x1e0 [ 48.842030][ T372] __x64_sys_clone+0x23f/0x290 [ 48.846629][ T372] ? __do_sys_vfork+0x130/0x130 [ 48.851321][ T372] ? debug_smp_processor_id+0x17/0x20 [ 48.856521][ T372] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 48.862531][ T372] ? exit_to_user_mode_prepare+0x39/0xa0 [ 48.868082][ T372] x64_sys_call+0x1b0/0x9a0 [ 48.872503][ T372] do_syscall_64+0x3b/0xb0 [ 48.876756][ T372] ? clear_bhb_loop+0x35/0x90 [ 48.881268][ T372] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.887110][ T372] RIP: 0033:0x7f832c28ada9 [ 48.891369][ T372] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.910946][ T372] RSP: 002b:00007f832be0c078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 48.919189][ T372] RAX: ffffffffffffffda RBX: 00007f832c3b8f80 RCX: 00007f832c28ada9 [ 48.927162][ T372] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 48.935142][ T372] RBP: 00007f832be0c120 R08: 0000000000000000 R09: 0000000000000000 [ 48.943042][ T372] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 48.950857][ T372] R13: 000000000000000b R14: 00007f832c3b8f80 R15: 00007ffe334b3ac8 [ 48.959119][ T372] [ 48.983570][ T376] FAULT_INJECTION: forcing a failure. [ 48.983570][ T376] name failslab, interval 1, probability 0, space 0, times 0 [ 48.996319][ T376] CPU: 0 PID: 376 Comm: syz-executor.0 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 49.006649][ T376] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 49.016806][ T376] Call Trace: [ 49.019917][ T376] [ 49.022698][ T376] dump_stack_lvl+0x151/0x1c0 [ 49.027211][ T376] ? io_uring_drop_tctx_refs+0x190/0x190 [ 49.032677][ T376] dump_stack+0x15/0x20 [ 49.036667][ T376] should_fail+0x3c6/0x510 [ 49.040938][ T376] __should_failslab+0xa4/0xe0 [ 49.045529][ T376] ? anon_vma_fork+0xf7/0x4e0 [ 49.050033][ T376] should_failslab+0x9/0x20 [ 49.054375][ T376] slab_pre_alloc_hook+0x37/0xd0 [ 49.059149][ T376] ? anon_vma_fork+0xf7/0x4e0 [ 49.063662][ T376] kmem_cache_alloc+0x44/0x200 [ 49.068279][ T376] anon_vma_fork+0xf7/0x4e0 [ 49.072868][ T376] ? anon_vma_name+0x43/0x70 [ 49.077288][ T376] ? vm_area_dup+0x17a/0x230 [ 49.081713][ T376] copy_mm+0xa3a/0x13e0 [ 49.085708][ T376] ? copy_signal+0x610/0x610 [ 49.090131][ T376] ? __init_rwsem+0xfe/0x1d0 [ 49.094564][ T376] ? copy_signal+0x4e3/0x610 [ 49.099096][ T376] copy_process+0x1149/0x3290 [ 49.103612][ T376] ? __kasan_check_write+0x14/0x20 [ 49.108563][ T376] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 49.113530][ T376] ? vfs_write+0x94d/0x1110 [ 49.117844][ T376] kernel_clone+0x21e/0x9e0 [ 49.122387][ T376] ? __kasan_check_write+0x14/0x20 [ 49.127328][ T376] ? create_io_thread+0x1e0/0x1e0 [ 49.132186][ T376] __x64_sys_clone+0x23f/0x290 [ 49.136788][ T376] ? __do_sys_vfork+0x130/0x130 [ 49.141470][ T376] ? debug_smp_processor_id+0x17/0x20 [ 49.146676][ T376] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 49.152675][ T376] ? exit_to_user_mode_prepare+0x39/0xa0 [ 49.158147][ T376] x64_sys_call+0x1b0/0x9a0 [ 49.162481][ T376] do_syscall_64+0x3b/0xb0 [ 49.166725][ T376] ? clear_bhb_loop+0x35/0x90 [ 49.171239][ T376] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.176965][ T376] RIP: 0033:0x7f832c28ada9 [ 49.181221][ T376] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.200855][ T376] RSP: 002b:00007f832be0c078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 49.209092][ T376] RAX: ffffffffffffffda RBX: 00007f832c3b8f80 RCX: 00007f832c28ada9 [ 49.216893][ T376] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 49.224714][ T376] RBP: 00007f832be0c120 R08: 0000000000000000 R09: 0000000000000000 [ 49.232513][ T376] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 49.240328][ T376] R13: 000000000000000b R14: 00007f832c3b8f80 R15: 00007ffe334b3ac8 [ 49.248237][ T376] [ 49.261190][ T378] FAULT_INJECTION: forcing a failure. [ 49.261190][ T378] name failslab, interval 1, probability 0, space 0, times 0 [ 49.273983][ T378] CPU: 0 PID: 378 Comm: syz-executor.0 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 49.284118][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 49.294012][ T378] Call Trace: [ 49.297137][ T378] [ 49.299917][ T378] dump_stack_lvl+0x151/0x1c0 [ 49.304434][ T378] ? io_uring_drop_tctx_refs+0x190/0x190 [ 49.310013][ T378] dump_stack+0x15/0x20 [ 49.314000][ T378] should_fail+0x3c6/0x510 [ 49.318264][ T378] __should_failslab+0xa4/0xe0 [ 49.322858][ T378] ? anon_vma_clone+0x9a/0x500 [ 49.327453][ T378] should_failslab+0x9/0x20 [ 49.331883][ T378] slab_pre_alloc_hook+0x37/0xd0 [ 49.336656][ T378] ? anon_vma_clone+0x9a/0x500 [ 49.341253][ T378] kmem_cache_alloc+0x44/0x200 [ 49.346202][ T378] anon_vma_clone+0x9a/0x500 [ 49.350728][ T378] anon_vma_fork+0x91/0x4e0 [ 49.355255][ T378] ? anon_vma_name+0x43/0x70 [ 49.359681][ T378] ? vm_area_dup+0x17a/0x230 [ 49.364114][ T378] copy_mm+0xa3a/0x13e0 [ 49.368103][ T378] ? copy_signal+0x610/0x610 [ 49.372524][ T378] ? __init_rwsem+0xfe/0x1d0 [ 49.376953][ T378] ? copy_signal+0x4e3/0x610 [ 49.381379][ T378] copy_process+0x1149/0x3290 [ 49.385894][ T378] ? __kasan_check_write+0x14/0x20 [ 49.390850][ T378] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 49.395813][ T378] ? vfs_write+0x94d/0x1110 [ 49.400214][ T378] kernel_clone+0x21e/0x9e0 [ 49.404602][ T378] ? __kasan_check_write+0x14/0x20 [ 49.409584][ T378] ? create_io_thread+0x1e0/0x1e0 [ 49.414447][ T378] __x64_sys_clone+0x23f/0x290 [ 49.419138][ T378] ? __do_sys_vfork+0x130/0x130 [ 49.424293][ T378] ? debug_smp_processor_id+0x17/0x20 [ 49.429498][ T378] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 49.435486][ T378] ? exit_to_user_mode_prepare+0x39/0xa0 [ 49.441140][ T378] x64_sys_call+0x1b0/0x9a0 [ 49.445565][ T378] do_syscall_64+0x3b/0xb0 [ 49.449903][ T378] ? clear_bhb_loop+0x35/0x90 [ 49.454519][ T378] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.460231][ T378] RIP: 0033:0x7f832c28ada9 [ 49.464493][ T378] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.484039][ T378] RSP: 002b:00007f832be0c078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 49.492276][ T378] RAX: ffffffffffffffda RBX: 00007f832c3b8f80 RCX: 00007f832c28ada9 [ 49.500097][ T378] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 49.507896][ T378] RBP: 00007f832be0c120 R08: 0000000000000000 R09: 0000000000000000 [ 49.515739][ T378] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 49.523520][ T378] R13: 000000000000000b R14: 00007f832c3b8f80 R15: 00007ffe334b3ac8 [ 49.531423][ T378] [ 49.556769][ T381] FAULT_INJECTION: forcing a failure. [ 49.556769][ T381] name failslab, interval 1, probability 0, space 0, times 0 [ 49.569626][ T381] CPU: 1 PID: 381 Comm: syz-executor.0 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 49.579940][ T381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 49.589919][ T381] Call Trace: [ 49.593039][ T381] [ 49.595863][ T381] dump_stack_lvl+0x151/0x1c0 [ 49.600333][ T381] ? io_uring_drop_tctx_refs+0x190/0x190 [ 49.605808][ T381] dump_stack+0x15/0x20 [ 49.609790][ T381] should_fail+0x3c6/0x510 [ 49.614048][ T381] __should_failslab+0xa4/0xe0 [ 49.618645][ T381] ? anon_vma_fork+0x1df/0x4e0 [ 49.623251][ T381] should_failslab+0x9/0x20 [ 49.627582][ T381] slab_pre_alloc_hook+0x37/0xd0 [ 49.632459][ T381] ? anon_vma_fork+0x1df/0x4e0 [ 49.637043][ T381] kmem_cache_alloc+0x44/0x200 [ 49.641748][ T381] anon_vma_fork+0x1df/0x4e0 [ 49.646160][ T381] copy_mm+0xa3a/0x13e0 [ 49.650155][ T381] ? copy_signal+0x610/0x610 [ 49.654585][ T381] ? __init_rwsem+0xfe/0x1d0 [ 49.659011][ T381] ? copy_signal+0x4e3/0x610 [ 49.663450][ T381] copy_process+0x1149/0x3290 [ 49.667946][ T381] ? __kasan_check_write+0x14/0x20 [ 49.672980][ T381] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 49.677924][ T381] ? vfs_write+0x94d/0x1110 [ 49.682262][ T381] kernel_clone+0x21e/0x9e0 [ 49.686608][ T381] ? __kasan_check_write+0x14/0x20 [ 49.691554][ T381] ? create_io_thread+0x1e0/0x1e0 [ 49.696529][ T381] __x64_sys_clone+0x23f/0x290 [ 49.701125][ T381] ? __do_sys_vfork+0x130/0x130 [ 49.705902][ T381] ? debug_smp_processor_id+0x17/0x20 [ 49.711103][ T381] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 49.717008][ T381] ? exit_to_user_mode_prepare+0x39/0xa0 [ 49.722581][ T381] x64_sys_call+0x1b0/0x9a0 [ 49.727010][ T381] do_syscall_64+0x3b/0xb0 [ 49.731272][ T381] ? clear_bhb_loop+0x35/0x90 [ 49.735777][ T381] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.741747][ T381] RIP: 0033:0x7f832c28ada9 [ 49.745930][ T381] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.765376][ T381] RSP: 002b:00007f832be0c078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 49.773617][ T381] RAX: ffffffffffffffda RBX: 00007f832c3b8f80 RCX: 00007f832c28ada9 [ 49.781427][ T381] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 49.789246][ T381] RBP: 00007f832be0c120 R08: 0000000000000000 R09: 0000000000000000 [ 49.797055][ T381] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 49.804861][ T381] R13: 000000000000000b R14: 00007f832c3b8f80 R15: 00007ffe334b3ac8 [ 49.812674][ T381] [ 49.824635][ T384] FAULT_INJECTION: forcing a failure. [ 49.824635][ T384] name failslab, interval 1, probability 0, space 0, times 0 [ 49.837236][ T384] CPU: 1 PID: 384 Comm: syz-executor.0 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 49.847628][ T384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 49.857607][ T384] Call Trace: [ 49.860916][ T384] [ 49.863699][ T384] dump_stack_lvl+0x151/0x1c0 [ 49.868304][ T384] ? io_uring_drop_tctx_refs+0x190/0x190 [ 49.873765][ T384] dump_stack+0x15/0x20 [ 49.877840][ T384] should_fail+0x3c6/0x510 [ 49.882094][ T384] __should_failslab+0xa4/0xe0 [ 49.886704][ T384] ? anon_vma_fork+0xf7/0x4e0 [ 49.891204][ T384] should_failslab+0x9/0x20 [ 49.895545][ T384] slab_pre_alloc_hook+0x37/0xd0 [ 49.900443][ T384] ? anon_vma_fork+0xf7/0x4e0 [ 49.904930][ T384] kmem_cache_alloc+0x44/0x200 [ 49.909521][ T384] anon_vma_fork+0xf7/0x4e0 [ 49.914026][ T384] ? anon_vma_name+0x43/0x70 [ 49.918435][ T384] ? vm_area_dup+0x17a/0x230 [ 49.922857][ T384] copy_mm+0xa3a/0x13e0 [ 49.926861][ T384] ? copy_signal+0x610/0x610 [ 49.931370][ T384] ? __init_rwsem+0xfe/0x1d0 [ 49.935790][ T384] ? copy_signal+0x4e3/0x610 [ 49.940216][ T384] copy_process+0x1149/0x3290 [ 49.944746][ T384] ? __kasan_check_write+0x14/0x20 [ 49.950024][ T384] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 49.954973][ T384] ? vfs_write+0x94d/0x1110 [ 49.959313][ T384] kernel_clone+0x21e/0x9e0 [ 49.963647][ T384] ? __kasan_check_write+0x14/0x20 [ 49.968596][ T384] ? create_io_thread+0x1e0/0x1e0 [ 49.973458][ T384] __x64_sys_clone+0x23f/0x290 [ 49.978056][ T384] ? __do_sys_vfork+0x130/0x130 [ 49.982743][ T384] ? debug_smp_processor_id+0x17/0x20 [ 49.988069][ T384] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 49.993969][ T384] ? exit_to_user_mode_prepare+0x39/0xa0 [ 49.999428][ T384] x64_sys_call+0x1b0/0x9a0 [ 50.004289][ T384] do_syscall_64+0x3b/0xb0 [ 50.008547][ T384] ? clear_bhb_loop+0x35/0x90 [ 50.013068][ T384] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.018783][ T384] RIP: 0033:0x7f832c28ada9 [ 50.023036][ T384] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.042481][ T384] RSP: 002b:00007f832be0c078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 50.050730][ T384] RAX: ffffffffffffffda RBX: 00007f832c3b8f80 RCX: 00007f832c28ada9 [ 50.058626][ T384] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 50.066429][ T384] RBP: 00007f832be0c120 R08: 0000000000000000 R09: 0000000000000000 [ 50.074331][ T384] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 50.082229][ T384] R13: 000000000000000b R14: 00007f832c3b8f80 R15: 00007ffe334b3ac8 [ 50.090127][ T384] [ 50.101357][ T386] FAULT_INJECTION: forcing a failure. [ 50.101357][ T386] name failslab, interval 1, probability 0, space 0, times 0 [ 50.113821][ T386] CPU: 1 PID: 386 Comm: syz-executor.0 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 50.124057][ T386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 50.133939][ T386] Call Trace: [ 50.137078][ T386] [ 50.139829][ T386] dump_stack_lvl+0x151/0x1c0 [ 50.144437][ T386] ? io_uring_drop_tctx_refs+0x190/0x190 [ 50.150037][ T386] dump_stack+0x15/0x20 [ 50.154205][ T386] should_fail+0x3c6/0x510 [ 50.158469][ T386] __should_failslab+0xa4/0xe0 [ 50.163070][ T386] ? anon_vma_fork+0xf7/0x4e0 [ 50.167671][ T386] should_failslab+0x9/0x20 [ 50.172013][ T386] slab_pre_alloc_hook+0x37/0xd0 [ 50.176774][ T386] ? anon_vma_fork+0xf7/0x4e0 [ 50.181285][ T386] kmem_cache_alloc+0x44/0x200 [ 50.185884][ T386] anon_vma_fork+0xf7/0x4e0 [ 50.190228][ T386] ? anon_vma_name+0x43/0x70 [ 50.194661][ T386] ? vm_area_dup+0x17a/0x230 [ 50.199077][ T386] copy_mm+0xa3a/0x13e0 [ 50.203077][ T386] ? copy_signal+0x610/0x610 [ 50.207494][ T386] ? __init_rwsem+0xfe/0x1d0 [ 50.211926][ T386] ? copy_signal+0x4e3/0x610 [ 50.216350][ T386] copy_process+0x1149/0x3290 [ 50.220864][ T386] ? __kasan_check_write+0x14/0x20 [ 50.225812][ T386] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 50.230761][ T386] ? vfs_write+0x94d/0x1110 [ 50.235113][ T386] kernel_clone+0x21e/0x9e0 [ 50.239444][ T386] ? __kasan_check_write+0x14/0x20 [ 50.244383][ T386] ? create_io_thread+0x1e0/0x1e0 [ 50.249250][ T386] __x64_sys_clone+0x23f/0x290 [ 50.254018][ T386] ? __do_sys_vfork+0x130/0x130 [ 50.258823][ T386] ? debug_smp_processor_id+0x17/0x20 [ 50.264040][ T386] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 50.269941][ T386] ? exit_to_user_mode_prepare+0x39/0xa0 [ 50.275401][ T386] x64_sys_call+0x1b0/0x9a0 [ 50.279739][ T386] do_syscall_64+0x3b/0xb0 [ 50.284164][ T386] ? clear_bhb_loop+0x35/0x90 [ 50.288684][ T386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.294407][ T386] RIP: 0033:0x7f832c28ada9 [ 50.298663][ T386] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.318104][ T386] RSP: 002b:00007f832be0c078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 50.326350][ T386] RAX: ffffffffffffffda RBX: 00007f832c3b8f80 RCX: 00007f832c28ada9 [ 50.334157][ T386] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 50.341967][ T386] RBP: 00007f832be0c120 R08: 0000000000000000 R09: 0000000000000000 [ 50.349779][ T386] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 50.357689][ T386] R13: 000000000000000b R14: 00007f832c3b8f80 R15: 00007ffe334b3ac8 [ 50.365534][ T386] [ 50.369244][ T386] ================================================================== [ 50.377476][ T386] BUG: KASAN: double-free or invalid-free in kfree+0xc8/0x220 [ 50.384759][ T386] [ 50.386929][ T386] CPU: 1 PID: 386 Comm: syz-executor.0 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 50.397266][ T386] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 50.407165][ T386] Call Trace: [ 50.410277][ T386] [ 50.413056][ T386] dump_stack_lvl+0x151/0x1c0 [ 50.417568][ T386] ? io_uring_drop_tctx_refs+0x190/0x190 [ 50.423035][ T386] ? __wake_up_klogd+0xd5/0x110 [ 50.427724][ T386] ? panic+0x760/0x760 [ 50.431647][ T386] ? kfree+0xc8/0x220 [ 50.435446][ T386] print_address_description+0x87/0x3b0 [ 50.440836][ T386] ? kfree+0xc8/0x220 [ 50.444652][ T386] ? kfree+0xc8/0x220 [ 50.448495][ T386] kasan_report_invalid_free+0x6b/0xa0 [ 50.453773][ T386] ____kasan_slab_free+0x13e/0x160 [ 50.458708][ T386] __kasan_slab_free+0x11/0x20 [ 50.463306][ T386] slab_free_freelist_hook+0xbd/0x190 [ 50.468517][ T386] ? anon_vma_name_free+0x15/0x20 [ 50.473377][ T386] kfree+0xc8/0x220 [ 50.477020][ T386] anon_vma_name_free+0x15/0x20 [ 50.481707][ T386] vm_area_free_no_check+0xa6/0x130 [ 50.486766][ T386] copy_mm+0xefb/0x13e0 [ 50.490735][ T386] ? copy_signal+0x610/0x610 [ 50.495331][ T386] ? __init_rwsem+0xfe/0x1d0 [ 50.499757][ T386] ? copy_signal+0x4e3/0x610 [ 50.504187][ T386] copy_process+0x1149/0x3290 [ 50.508697][ T386] ? __kasan_check_write+0x14/0x20 [ 50.513647][ T386] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 50.518591][ T386] ? vfs_write+0x94d/0x1110 [ 50.522938][ T386] kernel_clone+0x21e/0x9e0 [ 50.527275][ T386] ? __kasan_check_write+0x14/0x20 [ 50.532312][ T386] ? create_io_thread+0x1e0/0x1e0 [ 50.537185][ T386] __x64_sys_clone+0x23f/0x290 [ 50.541772][ T386] ? __do_sys_vfork+0x130/0x130 [ 50.546717][ T386] ? debug_smp_processor_id+0x17/0x20 [ 50.551927][ T386] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 50.557827][ T386] ? exit_to_user_mode_prepare+0x39/0xa0 [ 50.563337][ T386] x64_sys_call+0x1b0/0x9a0 [ 50.567630][ T386] do_syscall_64+0x3b/0xb0 [ 50.571881][ T386] ? clear_bhb_loop+0x35/0x90 [ 50.576395][ T386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.582121][ T386] RIP: 0033:0x7f832c28ada9 [ 50.586375][ T386] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.605826][ T386] RSP: 002b:00007f832be0c078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 50.614076][ T386] RAX: ffffffffffffffda RBX: 00007f832c3b8f80 RCX: 00007f832c28ada9 [ 50.622060][ T386] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 50.629880][ T386] RBP: 00007f832be0c120 R08: 0000000000000000 R09: 0000000000000000 [ 50.637770][ T386] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 50.645586][ T386] R13: 000000000000000b R14: 00007f832c3b8f80 R15: 00007ffe334b3ac8 [ 50.653399][ T386] [ 50.656257][ T386] [ 50.658424][ T386] Allocated by task 354: [ 50.662503][ T386] __kasan_slab_alloc+0xb1/0xe0 [ 50.667193][ T386] slab_post_alloc_hook+0x53/0x2c0 [ 50.672137][ T386] kmem_cache_alloc+0xf5/0x200 [ 50.676821][ T386] vm_area_dup+0x26/0x230 [ 50.681028][ T386] copy_mm+0x9a1/0x13e0 [ 50.685013][ T386] copy_process+0x1149/0x3290 [ 50.689495][ T386] kernel_clone+0x21e/0x9e0 [ 50.693834][ T386] __x64_sys_clone+0x23f/0x290 [ 50.698447][ T386] x64_sys_call+0x1b0/0x9a0 [ 50.702775][ T386] do_syscall_64+0x3b/0xb0 [ 50.707116][ T386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.712842][ T386] [ 50.715013][ T386] The buggy address belongs to the object at ffff88812028e000 [ 50.715013][ T386] which belongs to the cache vm_area_struct of size 232 [ 50.729257][ T386] The buggy address is located 88 bytes inside of [ 50.729257][ T386] 232-byte region [ffff88812028e000, ffff88812028e0e8) [ 50.742266][ T386] The buggy address belongs to the page: [ 50.747748][ T386] page:ffffea000480a380 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12028e [ 50.757975][ T386] flags: 0x4000000000000200(slab|zone=1) [ 50.763450][ T386] raw: 4000000000000200 0000000000000000 dead000000000122 ffff888100187200 [ 50.771865][ T386] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 50.780282][ T386] page dumped because: kasan: bad access detected [ 50.786640][ T386] page_owner tracks the page as allocated [ 50.792290][ T386] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 354, ts 47084394414, free_ts 46941520056 [ 50.808327][ T386] post_alloc_hook+0x1a3/0x1b0 [ 50.812930][ T386] prep_new_page+0x1b/0x110 [ 50.817277][ T386] get_page_from_freelist+0x3550/0x35d0 [ 50.822820][ T386] __alloc_pages+0x27e/0x8f0 [ 50.827244][ T386] new_slab+0x9a/0x4e0 [ 50.831149][ T386] ___slab_alloc+0x39e/0x830 [ 50.835691][ T386] __slab_alloc+0x4a/0x90 [ 50.839856][ T386] kmem_cache_alloc+0x134/0x200 [ 50.844542][ T386] vm_area_dup+0x26/0x230 [ 50.848708][ T386] copy_mm+0x9a1/0x13e0 [ 50.852704][ T386] copy_process+0x1149/0x3290 [ 50.857315][ T386] kernel_clone+0x21e/0x9e0 [ 50.861640][ T386] __x64_sys_clone+0x23f/0x290 [ 50.866239][ T386] x64_sys_call+0x1b0/0x9a0 [ 50.870615][ T386] do_syscall_64+0x3b/0xb0 [ 50.874832][ T386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.880566][ T386] page last free stack trace: [ 50.885084][ T386] free_unref_page_prepare+0x7c8/0x7d0 [ 50.890567][ T386] free_unref_page+0xe8/0x750 [ 50.895054][ T386] __free_pages+0x61/0xf0 [ 50.899220][ T386] __vunmap+0x7bc/0x8f0 [ 50.903211][ T386] vfree+0x7f/0xb0 [ 50.906776][ T386] kcov_close+0x2b/0x50 [ 50.910861][ T386] __fput+0x228/0x8c0 [ 50.914669][ T386] ____fput+0x15/0x20 [ 50.918499][ T386] task_work_run+0x129/0x190 [ 50.922922][ T386] exit_to_user_mode_loop+0xc4/0xe0 [ 50.927948][ T386] exit_to_user_mode_prepare+0x5a/0xa0 [ 50.933372][ T386] syscall_exit_to_user_mode+0x26/0x160 [ 50.938715][ T386] do_syscall_64+0x47/0xb0 [ 50.942968][ T386] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.948695][ T386] [ 50.950860][ T386] Memory state around the buggy address: [ 50.956337][ T386] ffff88812028df00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 50.964234][ T386] ffff88812028df80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 50.972129][ T386] >ffff88812028e000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 50.980026][ T386] ^ [ 50.986978][ T386] ffff88812028e080: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 50.994967][ T386] ffff88812028e100: fc fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 [ 51.002864][ T386] ================================================================== [ 51.010766][ T386] Disabling lock debugging due to kernel taint [ 51.026331][ T355] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 51.037881][ T355] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 51.046122][ T355] CPU: 0 PID: 355 Comm: syz-executor.0 Tainted: G B 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 51.057741][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 51.067704][ T355] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 51.073508][ T355] Code: 00 74 08 4c 89 ef e8 2e 9c 2a ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 00 9c 2a ff 48 89 d8 48 8b 1b 4c [ 51.092946][ T355] RSP: 0018:ffffc90000a978f8 EFLAGS: 00010202 [ 51.098843][ T355] RAX: 0000000000000000 RBX: 0000000000000008 RCX: dffffc0000000000 [ 51.106654][ T355] RDX: ffffffff81a57c60 RSI: ffff888111577828 RDI: ffff88811042c2a8 [ 51.114473][ T355] RBP: ffffc90000a97960 R08: dffffc0000000000 R09: ffff88811042c2b0 [ 51.122277][ T355] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 51.130090][ T355] R13: ffff88812028e058 R14: 0000000000000001 R15: ffff88811042c2a8 [ 51.137900][ T355] FS: 000055556b857480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 51.146666][ T355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.153090][ T355] CR2: 00007f832cee26c6 CR3: 000000012028f000 CR4: 00000000003506b0 [ 51.160905][ T355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.168713][ T355] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.176524][ T355] Call Trace: [ 51.179654][ T355] [ 51.182425][ T355] ? __die_body+0x62/0xb0 [ 51.186601][ T355] ? die_addr+0x9f/0xd0 [ 51.190586][ T355] ? exc_general_protection+0x311/0x4b0 [ 51.195968][ T355] ? asm_exc_general_protection+0x27/0x30 [ 51.201525][ T355] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 51.207770][ T355] ? __rb_insert_augmented+0x91/0x610 [ 51.212975][ T355] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 51.219225][ T355] vma_interval_tree_insert_after+0x2be/0x2d0 [ 51.225129][ T355] copy_mm+0xba2/0x13e0 [ 51.229121][ T355] ? copy_signal+0x610/0x610 [ 51.233546][ T355] ? __init_rwsem+0xfe/0x1d0 [ 51.237970][ T355] ? copy_signal+0x4e3/0x610 [ 51.242400][ T355] copy_process+0x1149/0x3290 [ 51.246914][ T355] ? __kasan_check_read+0x11/0x20 [ 51.251790][ T355] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 51.256719][ T355] ? vfs_read+0x704/0xd40 [ 51.260885][ T355] kernel_clone+0x21e/0x9e0 [ 51.265224][ T355] ? create_io_thread+0x1e0/0x1e0 [ 51.270084][ T355] ? debug_smp_processor_id+0x17/0x20 [ 51.275293][ T355] __x64_sys_clone+0x23f/0x290 [ 51.279995][ T355] ? __do_sys_vfork+0x130/0x130 [ 51.284682][ T355] x64_sys_call+0x1b0/0x9a0 [ 51.289023][ T355] do_syscall_64+0x3b/0xb0 [ 51.293270][ T355] ? clear_bhb_loop+0x35/0x90 [ 51.297784][ T355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.303551][ T355] RIP: 0033:0x7f832c287dd3 [ 51.307774][ T355] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 51.327383][ T355] RSP: 002b:00007ffe334b3cd8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 51.335625][ T355] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f832c287dd3 [ 51.343442][ T355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 51.351359][ T355] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 51.359164][ T355] R10: 000055556b857750 R11: 0000000000000246 R12: 0000000000000001 [ 51.366971][ T355] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 51.374782][ T355] [ 51.377728][ T355] Modules linked in: [ 51.383367][ T355] ---[ end trace 5d914d810a05d5cd ]--- [ 51.383611][ T30] audit: type=1400 audit(1732846602.744:98): avc: denied { remove_name } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 51.388787][ T355] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 51.388817][ T355] Code: 00 74 08 4c 89 ef e8 2e 9c 2a ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 00 9c 2a ff 48 89 d8 48 8b 1b 4c [ 51.388833][ T355] RSP: 0018:ffffc90000a978f8 EFLAGS: 00010202 [ 51.388852][ T355] RAX: 0000000000000000 RBX: 0000000000000008 RCX: dffffc0000000000 [ 51.388866][ T355] RDX: ffffffff81a57c60 RSI: ffff888111577828 RDI: ffff88811042c2a8 [ 51.388880][ T355] RBP: ffffc90000a97960 R08: dffffc0000000000 R09: ffff88811042c2b0 [ 51.388895][ T355] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 51.388907][ T355] R13: ffff88812028e058 R14: 0000000000000001 R15: ffff88811042c2a8 [ 51.388920][ T355] FS: 000055556b857480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 51.388937][ T355] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.388951][ T355] CR2: 00007f832cee26c6 CR3: 000000012028f000 CR4: 00000000003506b0 [ 51.388968][ T355] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.415347][ T30] audit: type=1400 audit(1732846602.744:99): avc: denied { rename } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 51.417036][ T355] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.542277][ T355] Kernel panic - not syncing: Fatal exception [ 51.548478][ T355] Kernel Offset: disabled [ 51.552801][ T355] Rebooting in 86400 seconds..