Warning: Permanently added '10.128.10.14' (ECDSA) to the list of known hosts. 2022/10/12 23:37:43 ignoring optional flag "sandboxArg"="0" 2022/10/12 23:37:43 parsed 1 programs 2022/10/12 23:37:43 executed programs: 0 [ 36.467225][ T26] kauditd_printk_skb: 66 callbacks suppressed [ 36.467237][ T26] audit: type=1400 audit(1665617863.599:149): avc: denied { mounton } for pid=403 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 36.524376][ T26] audit: type=1400 audit(1665617863.599:150): avc: denied { mount } for pid=403 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 36.564451][ T26] audit: type=1400 audit(1665617863.629:151): avc: denied { mounton } for pid=408 comm="syz-executor.3" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 36.589585][ T26] audit: type=1400 audit(1665617863.629:152): avc: denied { module_request } for pid=408 comm="syz-executor.3" kmod="netdev-nr3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 36.645610][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.652651][ T408] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.660448][ T408] device bridge_slave_0 entered promiscuous mode [ 36.687306][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.694508][ T408] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.701992][ T408] device bridge_slave_1 entered promiscuous mode [ 36.717097][ T417] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.724220][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.731633][ T417] device bridge_slave_0 entered promiscuous mode [ 36.748833][ T416] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.756011][ T416] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.763503][ T416] device bridge_slave_0 entered promiscuous mode [ 36.771827][ T416] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.778925][ T416] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.786300][ T416] device bridge_slave_1 entered promiscuous mode [ 36.793024][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.800189][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.807763][ T417] device bridge_slave_1 entered promiscuous mode [ 36.828458][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.835599][ T418] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.842845][ T418] device bridge_slave_0 entered promiscuous mode [ 36.865429][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.872542][ T418] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.880191][ T418] device bridge_slave_1 entered promiscuous mode [ 36.909324][ T410] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.916492][ T410] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.923725][ T410] device bridge_slave_0 entered promiscuous mode [ 36.945684][ T410] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.952725][ T410] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.960552][ T410] device bridge_slave_1 entered promiscuous mode [ 36.979873][ T419] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.986932][ T419] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.994284][ T419] device bridge_slave_0 entered promiscuous mode [ 37.016399][ T419] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.023433][ T419] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.031387][ T419] device bridge_slave_1 entered promiscuous mode [ 37.084980][ T408] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.092178][ T408] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.099516][ T408] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.106700][ T408] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.148506][ T418] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.155609][ T418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.162913][ T418] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.169950][ T418] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.205378][ T27] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.212552][ T27] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.220309][ T27] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.227511][ T27] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.235865][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.243217][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.267751][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.276117][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.283479][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.301570][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.309188][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.317656][ T110] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.324787][ T110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.332434][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.341119][ T110] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.348425][ T110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.386339][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.395077][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.403281][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.410466][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.418292][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.426251][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.434187][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.442235][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.450703][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.457927][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.496334][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.504281][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.513662][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.521550][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.529677][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.536901][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.544464][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.552656][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.559935][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.567496][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.575723][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.582726][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.590067][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.598186][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.605213][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.614661][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.622813][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.629867][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.645926][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.654513][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.662225][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.670666][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.697028][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.705344][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.713316][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.720928][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.729008][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.736991][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.745249][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.753075][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.761046][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.769298][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.777425][ T375] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.784455][ T375] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.791818][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.800148][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.808267][ T375] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.815295][ T375] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.822577][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.830640][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.838549][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.846901][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.855247][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.864268][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.872834][ T375] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.907008][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.915794][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.923639][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.931676][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.940186][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.948660][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.956962][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.965468][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.973677][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.982101][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.990127][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.998028][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.006190][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.014306][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.022716][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.031245][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.039595][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.068529][ T26] audit: type=1400 audit(1665617865.199:153): avc: denied { mount } for pid=418 comm="syz-executor.2" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 38.092890][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.102127][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.110471][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.118512][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.126550][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.134456][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.142874][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.151199][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.158993][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.167294][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.175482][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.183487][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.191889][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.200192][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.208599][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.216889][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.225036][ T27] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.244791][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.255008][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.263310][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.271824][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.280441][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.294287][ T110] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.302858][ T441] loop2: detected capacity change from 0 to 16 [ 38.313082][ T441] FAULT_INJECTION: forcing a failure. [ 38.313082][ T441] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 38.313833][ T26] audit: type=1400 audit(1665617865.439:154): avc: denied { mounton } for pid=440 comm="syz-executor.2" path="/root/syzkaller-testdir3934444752/syzkaller.TYVkxB/0/file0" dev="sda1" ino=1158 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_home_t tclass=dir permissive=1 [ 38.332783][ T441] CPU: 1 PID: 441 Comm: syz-executor.2 Not tainted 5.15.72-syzkaller-04916-g43eb03f7ce81 #0 [ 38.364243][ T441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 38.374287][ T441] Call Trace: [ 38.377666][ T441] [ 38.380671][ T441] dump_stack_lvl+0x151/0x1b7 [ 38.385354][ T441] ? bfq_pos_tree_add_move+0x43e/0x43e [ 38.390821][ T441] ? widen_string+0x41/0x3a0 [ 38.395393][ T441] ? string+0x29f/0x2b0 [ 38.399534][ T441] dump_stack+0x15/0x17 [ 38.403699][ T441] should_fail+0x3c0/0x510 [ 38.408111][ T441] should_fail_alloc_page+0x50/0x60 [ 38.413464][ T441] __alloc_pages+0x1de/0x7c0 [ 38.418035][ T441] ? string+0x2b0/0x2b0 [ 38.422208][ T441] ? __count_vm_events+0x30/0x30 [ 38.427219][ T441] ? vsnprintf+0x1c02/0x1ce0 [ 38.431788][ T441] allocate_slab+0x66/0x510 [ 38.436372][ T441] ___slab_alloc+0x2e2/0x6f0 [ 38.441060][ T441] ? erofs_fc_fill_super+0xbb/0x1180 [ 38.446323][ T441] ? erofs_fc_fill_super+0xbb/0x1180 [ 38.451586][ T441] __slab_alloc+0x4a/0x90 [ 38.455905][ T441] kmem_cache_alloc_trace+0x214/0x310 [ 38.461276][ T441] ? erofs_fc_fill_super+0xbb/0x1180 [ 38.466597][ T441] erofs_fc_fill_super+0xbb/0x1180 [ 38.471783][ T441] ? sb_set_blocksize+0xb7/0xf0 [ 38.476620][ T441] get_tree_bdev+0x417/0x640 [ 38.481324][ T441] ? erofs_release_device_info+0x90/0x90 [ 38.486966][ T441] erofs_fc_get_tree+0x1c/0x20 [ 38.491907][ T441] vfs_get_tree+0x88/0x290 [ 38.496307][ T441] do_new_mount+0x289/0xad0 [ 38.500888][ T441] ? do_move_mount_old+0x160/0x160 [ 38.505982][ T441] ? security_capable+0xb2/0xd0 [ 38.510815][ T441] ? ns_capable+0x8a/0xf0 [ 38.515386][ T441] path_mount+0x60b/0x1050 [ 38.519788][ T441] __se_sys_mount+0x2d2/0x3c0 [ 38.524461][ T441] ? __x64_sys_mount+0xd0/0xd0 [ 38.529204][ T441] __x64_sys_mount+0xbf/0xd0 [ 38.534037][ T441] do_syscall_64+0x44/0xd0 [ 38.538466][ T441] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.544428][ T441] RIP: 0033:0x7ff54d226ada [ 38.548912][ T441] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 38.568497][ T441] RSP: 002b:00007ff54d199f88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 38.577151][ T441] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ff54d226ada [ 38.585104][ T441] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ff54d199fe0 [ 38.593076][ T441] RBP: 00007ff54d19a020 R08: 00007ff54d19a020 R09: 0000000020000000 [ 38.601028][ T441] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 38.609066][ T441] R13: 0000000020000100 R14: 00007ff54d199fe0 R15: 0000000020010880 [ 38.617020][ T441] [ 38.634613][ T441] erofs: (device loop2): mounted with root inode @ nid 36. [ 38.649746][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.658148][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.659977][ T26] audit: type=1400 audit(1665617865.789:155): avc: denied { unmount } for pid=418 comm="syz-executor.2" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 38.666633][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.695268][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.703713][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.711946][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.720712][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.729135][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.737671][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.747681][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.747760][ T445] loop2: detected capacity change from 0 to 16 [ 38.756262][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.767011][ T445] FAULT_INJECTION: forcing a failure. [ 38.767011][ T445] name failslab, interval 1, probability 0, space 0, times 1 [ 38.770750][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.783489][ T445] CPU: 1 PID: 445 Comm: syz-executor.2 Not tainted 5.15.72-syzkaller-04916-g43eb03f7ce81 #0 [ 38.783513][ T445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 38.783521][ T445] Call Trace: [ 38.783526][ T445] [ 38.783531][ T445] dump_stack_lvl+0x151/0x1b7 [ 38.822930][ T445] ? bfq_pos_tree_add_move+0x43e/0x43e [ 38.828472][ T445] dump_stack+0x15/0x17 [ 38.832940][ T445] should_fail+0x3c0/0x510 [ 38.837456][ T445] ? __kernfs_new_node+0x99/0x6e0 [ 38.842473][ T445] __should_failslab+0x9f/0xe0 [ 38.847316][ T445] should_failslab+0x9/0x20 [ 38.851977][ T445] __kmalloc_track_caller+0x6c/0x350 [ 38.857271][ T445] ? kvasprintf_const+0x139/0x180 [ 38.862291][ T445] kstrdup_const+0x55/0x90 [ 38.866702][ T445] __kernfs_new_node+0x99/0x6e0 [ 38.871618][ T445] ? erofs_fc_get_tree+0x1c/0x20 [ 38.876545][ T445] ? vfs_get_tree+0x88/0x290 [ 38.881268][ T445] ? do_new_mount+0x289/0xad0 [ 38.886034][ T445] ? path_mount+0x60b/0x1050 [ 38.890619][ T445] ? __se_sys_mount+0x2d2/0x3c0 [ 38.895584][ T445] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 38.901737][ T445] ? kernfs_new_node+0x170/0x170 [ 38.906680][ T445] kernfs_create_dir_ns+0x9b/0x230 [ 38.911794][ T445] sysfs_create_dir_ns+0x181/0x390 [ 38.917013][ T445] ? sysfs_warn_dup+0xa0/0xa0 [ 38.921942][ T445] ? memcpy+0x56/0x70 [ 38.925911][ T445] kobject_add_internal+0x766/0xda0 [ 38.931265][ T445] kobject_init_and_add+0x123/0x190 [ 38.936460][ T445] ? __kasan_check_write+0x14/0x20 [ 38.941651][ T445] ? kobject_add+0x210/0x210 [ 38.946222][ T445] ? inode_init_always+0x709/0x990 [ 38.951314][ T445] ? _raw_spin_unlock+0x4d/0x70 [ 38.956290][ T445] ? _raw_spin_unlock+0x4d/0x70 [ 38.961223][ T445] erofs_register_sysfs+0xd1/0x130 [ 38.966429][ T445] erofs_fc_fill_super+0x95c/0x1180 [ 38.971614][ T445] get_tree_bdev+0x417/0x640 [ 38.976305][ T445] ? erofs_release_device_info+0x90/0x90 [ 38.981917][ T445] erofs_fc_get_tree+0x1c/0x20 [ 38.986865][ T445] vfs_get_tree+0x88/0x290 [ 38.991275][ T445] do_new_mount+0x289/0xad0 [ 38.995761][ T445] ? do_move_mount_old+0x160/0x160 [ 39.000855][ T445] ? security_capable+0xb2/0xd0 [ 39.005688][ T445] ? ns_capable+0x8a/0xf0 [ 39.010002][ T445] path_mount+0x60b/0x1050 [ 39.014484][ T445] __se_sys_mount+0x2d2/0x3c0 [ 39.019139][ T445] ? __x64_sys_mount+0xd0/0xd0 [ 39.023888][ T445] __x64_sys_mount+0xbf/0xd0 [ 39.028476][ T445] do_syscall_64+0x44/0xd0 [ 39.032896][ T445] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 39.038784][ T445] RIP: 0033:0x7ff54d226ada [ 39.043448][ T445] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 39.063659][ T445] RSP: 002b:00007ff54d199f88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 39.072064][ T445] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ff54d226ada [ 39.080029][ T445] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ff54d199fe0 [ 39.088190][ T445] RBP: 00007ff54d19a020 R08: 00007ff54d19a020 R09: 0000000020000000 [ 39.096151][ T445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 39.104464][ T445] R13: 0000000020000100 R14: 00007ff54d199fe0 R15: 0000000020010880 [ 39.113601][ T445] [ 39.117846][ T26] audit: type=1400 audit(1665617866.249:156): avc: denied { append } for pid=146 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.118458][ T445] kobject_add_internal failed for loop2 (error: -12 parent: erofs) [ 39.144104][ T26] audit: type=1400 audit(1665617866.249:157): avc: denied { open } for pid=146 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.149167][ T445] ------------[ cut here ]------------ [ 39.176952][ T445] refcount_t: underflow; use-after-free. [ 39.194503][ T26] audit: type=1400 audit(1665617866.249:158): avc: denied { getattr } for pid=146 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 39.194513][ T445] WARNING: CPU: 0 PID: 445 at lib/refcount.c:28 refcount_warn_saturate+0x165/0x1b0 [ 39.228031][ T445] Modules linked in: [ 39.232307][ T445] CPU: 1 PID: 445 Comm: syz-executor.2 Not tainted 5.15.72-syzkaller-04916-g43eb03f7ce81 #0 [ 39.245293][ T448] loop1: detected capacity change from 0 to 16 [ 39.248055][ T445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 39.255595][ T448] FAULT_INJECTION: forcing a failure. [ 39.255595][ T448] name failslab, interval 1, probability 0, space 0, times 0 [ 39.268562][ T445] RIP: 0010:refcount_warn_saturate+0x165/0x1b0 [ 39.277240][ T448] CPU: 1 PID: 448 Comm: syz-executor.1 Not tainted 5.15.72-syzkaller-04916-g43eb03f7ce81 #0 [ 39.291202][ T448] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 39.301267][ T448] Call Trace: [ 39.304544][ T448] [ 39.307474][ T448] dump_stack_lvl+0x151/0x1b7 [ 39.312168][ T448] ? bfq_pos_tree_add_move+0x43e/0x43e [ 39.317635][ T448] dump_stack+0x15/0x17 [ 39.318160][ T445] Code: c7 e0 a6 66 85 31 c0 e8 69 d7 ec fe 0f 0b eb 83 e8 f0 06 1b ff c6 05 d9 90 2a 04 01 48 c7 c7 40 a7 66 85 31 c0 e8 4b d7 ec fe <0f> 0b e9 62 ff ff ff e8 cf 06 1b ff c6 05 b9 90 2a 04 01 48 c7 c7 [ 39.321895][ T448] should_fail+0x3c0/0x510 [ 39.321918][ T448] ? __kernfs_new_node+0x99/0x6e0 [ 39.321933][ T448] __should_failslab+0x9f/0xe0 [ 39.347197][ T445] RSP: 0018:ffffc90000ec7a38 EFLAGS: 00010246 [ 39.351421][ T448] should_failslab+0x9/0x20 [ 39.351446][ T448] __kmalloc_track_caller+0x6c/0x350 [ 39.351464][ T448] ? kvasprintf_const+0x139/0x180 [ 39.356543][ T445] [ 39.362363][ T448] kstrdup_const+0x55/0x90 [ 39.362388][ T448] __kernfs_new_node+0x99/0x6e0 [ 39.362404][ T448] ? erofs_fc_get_tree+0x1c/0x20 [ 39.368812][ T445] RAX: b3dfa82148168d00 RBX: 0000000000000003 RCX: ffff888103f8cf00 [ 39.377259][ T448] ? vfs_get_tree+0x88/0x290 [ 39.377286][ T448] ? do_new_mount+0x289/0xad0 [ 39.377303][ T448] ? path_mount+0x60b/0x1050 [ 39.377316][ T448] ? __se_sys_mount+0x2d2/0x3c0 [ 39.377332][ T448] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 39.377351][ T448] ? kernfs_new_node+0x170/0x170 [ 39.382967][ T445] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 39.384755][ T448] kernfs_create_dir_ns+0x9b/0x230 [ 39.384776][ T448] sysfs_create_dir_ns+0x181/0x390 [ 39.384791][ T448] ? sysfs_warn_dup+0xa0/0xa0 [ 39.384805][ T448] ? memcpy+0x56/0x70 [ 39.384819][ T448] kobject_add_internal+0x766/0xda0 [ 39.389564][ T445] RBP: ffffc90000ec7a48 R08: ffffffff81572d19 R09: ffffed103ee465d0 [ 39.394028][ T448] kobject_init_and_add+0x123/0x190 [ 39.394048][ T448] ? __kasan_check_write+0x14/0x20 [ 39.399424][ T445] R10: ffffed103ee465d0 R11: 1ffff1103ee465cf R12: ffff888126013c00 [ 39.406913][ T448] ? kobject_add+0x210/0x210 [ 39.406933][ T448] ? inode_init_always+0x709/0x990 [ 39.406947][ T448] ? _raw_spin_unlock+0x4d/0x70 [ 39.406963][ T448] ? _raw_spin_unlock+0x4d/0x70 [ 39.411868][ T445] R13: ffff888126013d20 R14: 0000000000000003 R15: dffffc0000000000 [ 39.416282][ T448] erofs_register_sysfs+0xd1/0x130 [ 39.416302][ T448] erofs_fc_fill_super+0x95c/0x1180 [ 39.416317][ T448] get_tree_bdev+0x417/0x640 [ 39.416331][ T448] ? erofs_release_device_info+0x90/0x90 [ 39.416347][ T448] erofs_fc_get_tree+0x1c/0x20 [ 39.421305][ T445] FS: 00007ff54d19a700(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 39.425838][ T448] vfs_get_tree+0x88/0x290 [ 39.425857][ T448] do_new_mount+0x289/0xad0 [ 39.425874][ T448] ? do_move_mount_old+0x160/0x160 [ 39.425889][ T448] ? security_capable+0xb2/0xd0 [ 39.425903][ T448] ? ns_capable+0x8a/0xf0 [ 39.425918][ T448] path_mount+0x60b/0x1050 [ 39.434000][ T453] loop3: detected capacity change from 0 to 16 [ 39.436878][ T448] __se_sys_mount+0x2d2/0x3c0 [ 39.436902][ T448] ? __x64_sys_mount+0xd0/0xd0 [ 39.436919][ T448] __x64_sys_mount+0xbf/0xd0 [ 39.446468][ T445] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.450418][ T448] do_syscall_64+0x44/0xd0 [ 39.450445][ T448] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 39.461484][ T453] FAULT_INJECTION: forcing a failure. [ 39.461484][ T453] name failslab, interval 1, probability 0, space 0, times 0 [ 39.464248][ T448] RIP: 0033:0x7f4c40bf4ada [ 39.464266][ T448] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 39.464279][ T448] RSP: 002b:00007f4c40b67f88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 39.473866][ T445] CR2: 00005595d80ec0a8 CR3: 0000000110ae2000 CR4: 00000000003506b0 [ 39.477679][ T448] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f4c40bf4ada [ 39.477692][ T448] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f4c40b67fe0 [ 39.477703][ T448] RBP: 00007f4c40b68020 R08: 00007f4c40b68020 R09: 0000000020000000 [ 39.477713][ T448] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 39.477724][ T448] R13: 0000000020000100 R14: 00007f4c40b67fe0 R15: 0000000020010880 [ 39.477737][ T448] [ 39.485367][ T454] loop0: detected capacity change from 0 to 16 [ 39.489375][ T453] CPU: 0 PID: 453 Comm: syz-executor.3 Not tainted 5.15.72-syzkaller-04916-g43eb03f7ce81 #0 [ 39.498110][ T455] loop5: detected capacity change from 0 to 16 [ 39.500559][ T453] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 39.507731][ T455] FAULT_INJECTION: forcing a failure. [ 39.507731][ T455] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 39.510480][ T453] Call Trace: [ 39.510487][ T453] [ 39.772552][ T453] dump_stack_lvl+0x151/0x1b7 [ 39.777419][ T453] ? bfq_pos_tree_add_move+0x43e/0x43e [ 39.783224][ T453] dump_stack+0x15/0x17 [ 39.787715][ T453] should_fail+0x3c0/0x510 [ 39.792246][ T453] __should_failslab+0x9f/0xe0 [ 39.796998][ T453] should_failslab+0x9/0x20 [ 39.801488][ T453] kmem_cache_alloc+0x4f/0x2f0 [ 39.806235][ T453] ? __kernfs_new_node+0xdb/0x6e0 [ 39.811287][ T453] __kernfs_new_node+0xdb/0x6e0 [ 39.816119][ T453] ? erofs_fc_get_tree+0x1c/0x20 [ 39.821170][ T453] ? vfs_get_tree+0x88/0x290 [ 39.825746][ T453] ? do_new_mount+0x289/0xad0 [ 39.830503][ T453] ? path_mount+0x60b/0x1050 [ 39.835172][ T453] ? __se_sys_mount+0x2d2/0x3c0 [ 39.840008][ T453] ? kernfs_new_node+0x170/0x170 [ 39.845033][ T453] kernfs_create_dir_ns+0x9b/0x230 [ 39.850650][ T453] sysfs_create_dir_ns+0x181/0x390 [ 39.855780][ T453] ? sysfs_warn_dup+0xa0/0xa0 [ 39.860444][ T453] ? memcpy+0x56/0x70 [ 39.864420][ T453] kobject_add_internal+0x766/0xda0 [ 39.869610][ T453] kobject_init_and_add+0x123/0x190 [ 39.874808][ T453] ? __kasan_check_write+0x14/0x20 [ 39.879905][ T453] ? kobject_add+0x210/0x210 [ 39.884668][ T453] ? inode_init_always+0x709/0x990 [ 39.889860][ T453] ? _raw_spin_unlock+0x4d/0x70 [ 39.894880][ T453] ? _raw_spin_unlock+0x4d/0x70 [ 39.899757][ T453] erofs_register_sysfs+0xd1/0x130 [ 39.904951][ T453] erofs_fc_fill_super+0x95c/0x1180 [ 39.910309][ T453] get_tree_bdev+0x417/0x640 [ 39.914885][ T453] ? erofs_release_device_info+0x90/0x90 [ 39.920507][ T453] erofs_fc_get_tree+0x1c/0x20 [ 39.925258][ T453] vfs_get_tree+0x88/0x290 [ 39.929662][ T453] do_new_mount+0x289/0xad0 [ 39.934158][ T453] ? do_move_mount_old+0x160/0x160 [ 39.939430][ T453] ? security_capable+0xb2/0xd0 [ 39.944270][ T453] ? ns_capable+0x8a/0xf0 [ 39.948592][ T453] path_mount+0x60b/0x1050 [ 39.953002][ T453] __se_sys_mount+0x2d2/0x3c0 [ 39.957840][ T453] ? __x64_sys_mount+0xd0/0xd0 [ 39.962589][ T453] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 39.968649][ T453] __x64_sys_mount+0xbf/0xd0 [ 39.973225][ T453] do_syscall_64+0x44/0xd0 [ 39.978232][ T453] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 39.984114][ T453] RIP: 0033:0x7f8c9adbeada [ 39.988519][ T453] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 40.008108][ T453] RSP: 002b:00007f8c9ad31f88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.016514][ T453] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f8c9adbeada [ 40.024475][ T453] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f8c9ad31fe0 [ 40.032703][ T453] RBP: 00007f8c9ad32020 R08: 00007f8c9ad32020 R09: 0000000020000000 [ 40.041633][ T453] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 40.049683][ T453] R13: 0000000020000100 R14: 00007f8c9ad31fe0 R15: 0000000020010880 [ 40.057744][ T453] [ 40.060852][ T455] CPU: 1 PID: 455 Comm: syz-executor.5 Not tainted 5.15.72-syzkaller-04916-g43eb03f7ce81 #0 [ 40.064213][ T456] loop4: detected capacity change from 0 to 16 [ 40.070924][ T455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 40.070935][ T455] Call Trace: [ 40.070940][ T455] [ 40.070944][ T455] dump_stack_lvl+0x151/0x1b7 [ 40.070964][ T455] ? bfq_pos_tree_add_move+0x43e/0x43e [ 40.070980][ T455] dump_stack+0x15/0x17 [ 40.093963][ T456] FAULT_INJECTION: forcing a failure. [ 40.093963][ T456] name failslab, interval 1, probability 0, space 0, times 0 [ 40.094083][ T455] should_fail+0x3c0/0x510 [ 40.100393][ T445] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.104169][ T455] should_fail_alloc_page+0x50/0x60 [ 40.109560][ T445] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.121077][ T455] __alloc_pages+0x1de/0x7c0 [ 40.121099][ T455] ? stack_trace_save+0x1f0/0x1f0 [ 40.121118][ T455] ? __count_vm_events+0x30/0x30 [ 40.121133][ T455] ? stack_trace_save+0x12d/0x1f0 [ 40.143891][ T445] Call Trace: [ 40.146773][ T455] __stack_depot_save+0x3c5/0x4b0 [ 40.146797][ T455] stack_depot_save+0xe/0x10 [ 40.146812][ T455] save_stack+0x103/0x1e0 [ 40.146829][ T455] ? __reset_page_owner+0x160/0x160 [ 40.146844][ T455] ? get_page_from_freelist+0x5aa/0x5c0 [ 40.153948][ T454] FAULT_INJECTION: forcing a failure. [ 40.153948][ T454] name failslab, interval 1, probability 0, space 0, times 0 [ 40.156409][ T455] ? __alloc_pages+0x3a8/0x7c0 [ 40.156429][ T455] ? __stack_depot_save+0x3c5/0x4b0 [ 40.156446][ T455] ? ____kasan_kmalloc+0xee/0x110 [ 40.177165][ T445] [ 40.179587][ T455] ? __kasan_kmalloc+0x9/0x10 [ 40.191030][ T445] kobject_put+0x206/0x240 [ 40.194700][ T455] ? kmem_cache_alloc_trace+0x1e3/0x310 [ 40.194719][ T455] ? loop_queue_rq+0x3d8/0xb40 [ 40.194735][ T455] ? __blk_mq_issue_directly+0x216/0xab0 [ 40.250586][ T455] ? __blk_mq_try_issue_directly+0x297/0x310 [ 40.256573][ T455] ? blk_mq_try_issue_directly+0xe3/0x360 [ 40.262286][ T455] ? blk_mq_submit_bio+0xd68/0x1c80 [ 40.263764][ T445] ? kobject_put+0x88/0x240 [ 40.267474][ T455] ? __submit_bio+0x844/0x930 [ 40.267491][ T455] ? submit_bio_noacct+0x89b/0xa80 [ 40.267507][ T455] ? submit_bio+0x2d7/0x560 [ 40.267520][ T455] ? submit_bh_wbc+0x5cf/0x6b0 [ 40.267534][ T455] ? block_read_full_page+0x836/0x9c0 [ 40.283411][ T445] erofs_unregister_sysfs+0x4f/0x70 [ 40.287362][ T455] ? trace_mm_page_alloc_zone_locked+0xd0/0xd0 [ 40.287383][ T455] __set_page_owner+0x3b/0x2e0 [ 40.287401][ T455] ? kernel_init_free_pages+0xde/0xf0 [ 40.300071][ T448] kobject_add_internal failed for loop1 (error: -12 parent: erofs) [ 40.302951][ T455] get_page_from_freelist+0x5aa/0x5c0 [ 40.315584][ T445] ? erofs_free_inode+0xb0/0xb0 [ 40.319345][ T455] __alloc_pages+0x3a8/0x7c0 [ 40.319363][ T455] ? __count_vm_events+0x30/0x30 [ 40.347083][ T455] ? stack_trace_save+0x12d/0x1f0 [ 40.352291][ T455] ? stack_trace_snprint+0x100/0x100 [ 40.357579][ T455] __stack_depot_save+0x3c5/0x4b0 [ 40.362705][ T455] ? loop_queue_rq+0x3d8/0xb40 [ 40.366165][ T445] erofs_put_super+0x46/0xa0 [ 40.367470][ T455] ____kasan_kmalloc+0xee/0x110 [ 40.367492][ T455] ? ____kasan_kmalloc+0xdc/0x110 [ 40.377495][ T445] ? erofs_free_inode+0xb0/0xb0 [ 40.381903][ T455] ? __kasan_kmalloc+0x9/0x10 [ 40.391825][ T455] ? kmem_cache_alloc_trace+0x1e3/0x310 [ 40.397373][ T455] ? loop_queue_rq+0x3d8/0xb40 [ 40.402128][ T455] ? __blk_mq_issue_directly+0x216/0xab0 [ 40.407843][ T455] ? __blk_mq_try_issue_directly+0x297/0x310 [ 40.413919][ T455] ? blk_mq_try_issue_directly+0xe3/0x360 [ 40.417164][ T445] generic_shutdown_super+0x14f/0x2d0 [ 40.419626][ T455] ? blk_mq_submit_bio+0xd68/0x1c80 [ 40.419644][ T455] ? __submit_bio+0x844/0x930 [ 40.434895][ T455] ? submit_bio_noacct+0x89b/0xa80 [ 40.440211][ T455] ? submit_bio+0x2d7/0x560 [ 40.444701][ T455] ? submit_bh_wbc+0x5cf/0x6b0 [ 40.449452][ T455] ? block_read_full_page+0x836/0x9c0 [ 40.450824][ T445] kill_block_super+0x80/0xe0 [ 40.454811][ T455] ? blkdev_readpage+0x1c/0x20 [ 40.454829][ T455] ? do_read_cache_page+0x68b/0xa70 [ 40.454844][ T455] ? read_cache_page+0x4d/0x70 [ 40.473609][ T445] erofs_kill_sb+0x66/0x130 [ 40.474308][ T455] ? erofs_fc_fill_super+0x1eb/0x1180 [ 40.484136][ T455] ? get_tree_bdev+0x417/0x640 [ 40.488895][ T455] ? erofs_fc_get_tree+0x1c/0x20 [ 40.493824][ T455] ? vfs_get_tree+0x88/0x290 [ 40.494099][ T445] deactivate_locked_super+0xb0/0x100 [ 40.498399][ T455] ? do_new_mount+0x289/0xad0 [ 40.498415][ T455] ? path_mount+0x60b/0x1050 [ 40.498430][ T455] ? __se_sys_mount+0x2d2/0x3c0 [ 40.498445][ T455] ? __x64_sys_mount+0xbf/0xd0 [ 40.521316][ T445] get_tree_bdev+0x437/0x640 [ 40.522884][ T455] ? do_syscall_64+0x44/0xd0 [ 40.522902][ T455] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.538792][ T455] __kasan_kmalloc+0x9/0x10 [ 40.543287][ T455] kmem_cache_alloc_trace+0x1e3/0x310 [ 40.548647][ T455] ? loop_queue_rq+0x3d8/0xb40 [ 40.549501][ T445] ? erofs_release_device_info+0x90/0x90 [ 40.553487][ T455] loop_queue_rq+0x3d8/0xb40 [ 40.563700][ T455] __blk_mq_issue_directly+0x216/0xab0 [ 40.569191][ T455] ? __blk_mq_run_hw_queue+0x170/0x170 [ 40.574683][ T455] ? __kasan_check_write+0x14/0x20 [ 40.579789][ T455] __blk_mq_try_issue_directly+0x297/0x310 [ 40.585597][ T455] blk_mq_try_issue_directly+0xe3/0x360 [ 40.589286][ T445] erofs_fc_get_tree+0x1c/0x20 [ 40.591215][ T455] blk_mq_submit_bio+0xd68/0x1c80 [ 40.601569][ T455] ? blk_mq_try_issue_list_directly+0x500/0x500 [ 40.607815][ T455] ? __kasan_slab_alloc+0xc4/0xe0 [ 40.612831][ T455] ? __kasan_slab_alloc+0xb2/0xe0 [ 40.617853][ T455] ? kmem_cache_alloc+0x189/0x2f0 [ 40.618920][ T445] vfs_get_tree+0x88/0x290 [ 40.622956][ T455] ? radix_tree_node_alloc+0x194/0x3c0 [ 40.622976][ T455] ? radix_tree_insert+0x1ee/0x5f0 [ 40.638073][ T455] ? bio_associate_blkg_from_css+0x7ba/0xab0 [ 40.644137][ T455] ? bio_associate_blkg+0xdb/0xf0 [ 40.649324][ T455] ? submit_bh_wbc+0x362/0x6b0 [ 40.654090][ T455] ? blk_try_enter_queue+0x15c/0x340 [ 40.655453][ T445] do_new_mount+0x289/0xad0 [ 40.659452][ T455] ? path_mount+0x60b/0x1050 [ 40.659471][ T455] ? __se_sys_mount+0x2d2/0x3c0 [ 40.673774][ T455] __submit_bio+0x844/0x930 [ 40.676899][ T445] ? do_move_mount_old+0x160/0x160 [ 40.678447][ T455] ? trace_raw_output_block_rq_remap+0x240/0x240 [ 40.688961][ T445] ? security_capable+0xb2/0xd0 [ 40.689965][ T455] submit_bio_noacct+0x89b/0xa80 [ 40.699975][ T455] ? radix_tree_node_alloc+0xbe/0x3c0 [ 40.705430][ T455] ? blk_put_request+0x20/0x20 [ 40.710182][ T455] ? radix_tree_insert+0x516/0x5f0 [ 40.713095][ T445] ? ns_capable+0x8a/0xf0 [ 40.715284][ T455] ? _raw_spin_unlock+0x4d/0x70 [ 40.715302][ T455] ? blkg_create+0xc06/0xf30 [ 40.715319][ T455] ? __kasan_check_read+0x11/0x20 [ 40.715334][ T455] submit_bio+0x2d7/0x560 [ 40.715348][ T455] ? submit_bio_noacct+0xa80/0xa80 [ 40.727216][ T445] path_mount+0x60b/0x1050 [ 40.729046][ T455] ? bio_add_page+0x2cc/0x450 [ 40.739482][ T445] __se_sys_mount+0x2d2/0x3c0 [ 40.743538][ T455] ? guard_bio_eod+0xf3/0x140 [ 40.762651][ T455] submit_bh_wbc+0x5cf/0x6b0 [ 40.767244][ T455] block_read_full_page+0x836/0x9c0 [ 40.772542][ T455] ? blkdev_fallocate+0x3e0/0x3e0 [ 40.776376][ T445] ? __x64_sys_mount+0xd0/0xd0 [ 40.777651][ T455] ? block_is_partially_uptodate+0x270/0x270 [ 40.777671][ T455] ? add_to_page_cache_locked+0x40/0x40 [ 40.786935][ T445] __x64_sys_mount+0xbf/0xd0 [ 40.788918][ T455] blkdev_readpage+0x1c/0x20 [ 40.788939][ T455] do_read_cache_page+0x68b/0xa70 [ 40.808754][ T455] read_cache_page+0x4d/0x70 [ 40.813453][ T455] erofs_fc_fill_super+0x1eb/0x1180 [ 40.818638][ T455] ? sb_set_blocksize+0xb7/0xf0 [ 40.819356][ T445] do_syscall_64+0x44/0xd0 [ 40.823480][ T455] get_tree_bdev+0x417/0x640 [ 40.823497][ T455] ? erofs_release_device_info+0x90/0x90 [ 40.838067][ T455] erofs_fc_get_tree+0x1c/0x20 [ 40.843008][ T455] vfs_get_tree+0x88/0x290 [ 40.847417][ T455] do_new_mount+0x289/0xad0 [ 40.851994][ T455] ? do_move_mount_old+0x160/0x160 [ 40.854873][ T445] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.857264][ T455] ? security_capable+0xb2/0xd0 [ 40.857283][ T455] ? ns_capable+0x8a/0xf0 [ 40.871808][ T445] RIP: 0033:0x7ff54d226ada [ 40.872265][ T455] path_mount+0x60b/0x1050 [ 40.881051][ T455] __se_sys_mount+0x2d2/0x3c0 [ 40.885727][ T455] ? __x64_sys_mount+0xd0/0xd0 [ 40.890498][ T455] __x64_sys_mount+0xbf/0xd0 [ 40.892249][ T445] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 40.895125][ T455] do_syscall_64+0x44/0xd0 [ 40.895143][ T455] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.895162][ T455] RIP: 0033:0x7f531437bada [ 40.895174][ T455] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 40.895187][ T455] RSP: 002b:00007f53142eef88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 40.959839][ T455] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f531437bada [ 40.967926][ T455] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f53142eefe0 [ 40.975894][ T455] RBP: 00007f53142ef020 R08: 00007f53142ef020 R09: 0000000020000000 [ 40.983866][ T455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 40.988777][ T445] RSP: 002b:00007ff54d199f88 EFLAGS: 00000246 [ 40.991949][ T455] R13: 0000000020000100 R14: 00007f53142eefe0 R15: 0000000020010880 [ 40.991966][ T455] [ 41.015104][ T456] CPU: 0 PID: 456 Comm: syz-executor.4 Not tainted 5.15.72-syzkaller-04916-g43eb03f7ce81 #0 [ 41.018314][ T455] erofs: (device loop5): mounted with root inode @ nid 36. [ 41.025366][ T456] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 41.025377][ T456] Call Trace: [ 41.025382][ T456] [ 41.025387][ T456] dump_stack_lvl+0x151/0x1b7 [ 41.025424][ T456] ? bfq_pos_tree_add_move+0x43e/0x43e [ 41.037252][ T453] kobject_add_internal failed for loop3 (error: -12 parent: erofs) [ 41.042989][ T456] ? find_inode+0x424/0x4d0 [ 41.043014][ T456] ? erofs_getattr+0x120/0x120 [ 41.043029][ T456] dump_stack+0x15/0x17 [ 41.081052][ T456] should_fail+0x3c0/0x510 [ 41.085491][ T456] ? erofs_getattr+0x120/0x120 [ 41.090249][ T456] __should_failslab+0x9f/0xe0 [ 41.095097][ T456] should_failslab+0x9/0x20 [ 41.099686][ T456] kmem_cache_alloc+0x4f/0x2f0 [ 41.104541][ T456] ? _raw_spin_unlock+0x4d/0x70 [ 41.109407][ T456] ? erofs_alloc_inode+0x1b/0x50 [ 41.114357][ T456] ? ilookup5+0x18f/0x1a0 [ 41.118677][ T456] ? _erofs_info+0x190/0x190 [ 41.123547][ T456] ? erofs_getattr+0x120/0x120 [ 41.128367][ T456] ? erofs_ilookup_test_actor+0x70/0x70 [ 41.134158][ T456] erofs_alloc_inode+0x1b/0x50 [ 41.138917][ T456] ? _erofs_info+0x190/0x190 [ 41.143509][ T456] iget5_locked+0xba/0x280 [ 41.147910][ T456] ? erofs_ilookup_test_actor+0x70/0x70 [ 41.153702][ T456] erofs_iget+0xae/0x1b0 [ 41.157971][ T456] ? erofs_inode_init_once+0x20/0x20 [ 41.163413][ T456] erofs_fc_fill_super+0x7a7/0x1180 [ 41.168708][ T456] get_tree_bdev+0x417/0x640 [ 41.173288][ T456] ? erofs_release_device_info+0x90/0x90 [ 41.179095][ T456] erofs_fc_get_tree+0x1c/0x20 [ 41.183966][ T456] vfs_get_tree+0x88/0x290 [ 41.188392][ T456] do_new_mount+0x289/0xad0 [ 41.192981][ T456] ? do_move_mount_old+0x160/0x160 [ 41.198201][ T456] ? security_capable+0xb2/0xd0 [ 41.203163][ T456] ? ns_capable+0x8a/0xf0 [ 41.207505][ T456] path_mount+0x60b/0x1050 [ 41.211923][ T456] __se_sys_mount+0x2d2/0x3c0 [ 41.221535][ T456] ? __x64_sys_mount+0xd0/0xd0 [ 41.226473][ T456] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 41.232532][ T456] __x64_sys_mount+0xbf/0xd0 [ 41.237110][ T456] do_syscall_64+0x44/0xd0 [ 41.241885][ T456] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.247964][ T456] RIP: 0033:0x7fac6ca7eada [ 41.252720][ T456] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 41.273031][ T456] RSP: 002b:00007fac6c9f1f88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 41.281441][ T456] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fac6ca7eada [ 41.289487][ T456] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fac6c9f1fe0 [ 41.297448][ T456] RBP: 00007fac6c9f2020 R08: 00007fac6c9f2020 R09: 0000000020000000 [ 41.306188][ T456] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 41.314154][ T456] R13: 0000000020000100 R14: 00007fac6c9f1fe0 R15: 0000000020010880 [ 41.322193][ T456] [ 41.331975][ T445] ORIG_RAX: 00000000000000a5 [ 41.337178][ T445] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007ff54d226ada [ 41.350304][ T454] CPU: 1 PID: 454 Comm: syz-executor.0 Not tainted 5.15.72-syzkaller-04916-g43eb03f7ce81 #0 [ 41.351552][ T461] loop5: detected capacity change from 0 to 16 [ 41.360416][ T454] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 41.360427][ T454] Call Trace: [ 41.360431][ T454] [ 41.360436][ T454] dump_stack_lvl+0x151/0x1b7 [ 41.360459][ T454] ? bfq_pos_tree_add_move+0x43e/0x43e [ 41.366874][ T445] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007ff54d199fe0 [ 41.376709][ T454] ? get_tree_bdev+0x417/0x640 [ 41.376730][ T454] ? vfs_get_tree+0x88/0x290 [ 41.376743][ T454] ? do_new_mount+0x289/0xad0 [ 41.381534][ T461] FAULT_INJECTION: forcing a failure. [ 41.381534][ T461] name failslab, interval 1, probability 0, space 0, times 0 [ 41.383018][ T454] ? path_mount+0x60b/0x1050 [ 41.383042][ T454] ? __x64_sys_mount+0xbf/0xd0 [ 41.388290][ T445] RBP: 00007ff54d19a020 R08: 00007ff54d19a020 R09: 0000000020000000 [ 41.393444][ T454] ? do_syscall_64+0x44/0xd0 [ 41.393470][ T454] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.424019][ T445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 41.428128][ T454] dump_stack+0x15/0x17 [ 41.428149][ T454] should_fail+0x3c0/0x510 [ 41.440446][ T445] R13: 0000000020000100 R14: 00007ff54d199fe0 R15: 0000000020010880 [ 41.445544][ T454] ? kvasprintf_const+0x139/0x180 [ 41.445567][ T454] __should_failslab+0x9f/0xe0 [ 41.445583][ T454] should_failslab+0x9/0x20 [ 41.445597][ T454] __kmalloc_track_caller+0x6c/0x350 [ 41.445614][ T454] kstrdup_const+0x55/0x90 [ 41.445635][ T454] kvasprintf_const+0x139/0x180 [ 41.445650][ T454] kobject_set_name_vargs+0x61/0x120 [ 41.445665][ T454] kobject_init_and_add+0xdb/0x190 [ 41.445679][ T454] ? __kasan_check_write+0x14/0x20 [ 41.445693][ T454] ? kobject_add+0x210/0x210 [ 41.445706][ T454] ? inode_init_always+0x709/0x990 [ 41.445721][ T454] ? _raw_spin_unlock+0x4d/0x70 [ 41.445739][ T454] ? _raw_spin_unlock+0x4d/0x70 [ 41.445755][ T454] erofs_register_sysfs+0xd1/0x130 [ 41.445769][ T454] erofs_fc_fill_super+0x95c/0x1180 [ 41.445785][ T454] get_tree_bdev+0x417/0x640 [ 41.461124][ T445] [ 41.464574][ T454] ? erofs_release_device_info+0x90/0x90 [ 41.464596][ T454] erofs_fc_get_tree+0x1c/0x20 [ 41.464610][ T454] vfs_get_tree+0x88/0x290 [ 41.476343][ T445] ---[ end trace c4d90f07b9fa39cd ]--- [ 41.481185][ T454] do_new_mount+0x289/0xad0 [ 41.589023][ T454] ? do_move_mount_old+0x160/0x160 [ 41.594139][ T454] ? security_capable+0xb2/0xd0 [ 41.599149][ T454] ? ns_capable+0x8a/0xf0 [ 41.603925][ T454] path_mount+0x60b/0x1050 [ 41.608449][ T454] __se_sys_mount+0x2d2/0x3c0 [ 41.613115][ T454] ? __x64_sys_mount+0xd0/0xd0 [ 41.617985][ T454] __x64_sys_mount+0xbf/0xd0 [ 41.622587][ T454] do_syscall_64+0x44/0xd0 [ 41.627255][ T454] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.633134][ T454] RIP: 0033:0x7f22dfbdcada [ 41.637539][ T454] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 41.657495][ T454] RSP: 002b:00007f22dfb4ff88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 41.665994][ T454] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f22dfbdcada [ 41.673948][ T454] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f22dfb4ffe0 [ 41.681906][ T454] RBP: 00007f22dfb50020 R08: 00007f22dfb50020 R09: 0000000020000000 [ 41.689954][ T454] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 41.697913][ T454] R13: 0000000020000100 R14: 00007f22dfb4ffe0 R15: 0000000020010880 [ 41.705872][ T454] [ 41.709862][ T461] CPU: 0 PID: 461 Comm: syz-executor.5 Tainted: G W 5.15.72-syzkaller-04916-g43eb03f7ce81 #0 [ 41.711270][ T454] kobject: can not set name properly! [ 41.721322][ T461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 41.721334][ T461] Call Trace: [ 41.721340][ T461] [ 41.721345][ T461] dump_stack_lvl+0x151/0x1b7 [ 41.721370][ T461] ? bfq_pos_tree_add_move+0x43e/0x43e [ 41.753630][ T461] dump_stack+0x15/0x17 [ 41.758403][ T461] should_fail+0x3c0/0x510 [ 41.762802][ T461] __should_failslab+0x9f/0xe0 [ 41.767548][ T461] should_failslab+0x9/0x20 [ 41.772117][ T461] kmem_cache_alloc+0x4f/0x2f0 [ 41.776886][ T461] ? from_kuid_munged+0x7b0/0x7b0 [ 41.781894][ T461] ? security_inode_alloc+0x29/0x140 [ 41.787198][ T461] security_inode_alloc+0x29/0x140 [ 41.792377][ T461] inode_init_always+0x3e4/0x990 [ 41.797296][ T461] ? _erofs_info+0x190/0x190 [ 41.801865][ T461] new_inode_pseudo+0x93/0x220 [ 41.806881][ T461] new_inode+0x28/0x1c0 [ 41.811030][ T461] ? _raw_spin_unlock+0x4d/0x70 [ 41.815877][ T461] ? erofs_shrinker_register+0xfb/0x110 [ 41.821593][ T461] erofs_fc_fill_super+0x867/0x1180 [ 41.826881][ T461] get_tree_bdev+0x417/0x640 [ 41.831469][ T461] ? erofs_release_device_info+0x90/0x90 [ 41.837171][ T461] erofs_fc_get_tree+0x1c/0x20 [ 41.841919][ T461] vfs_get_tree+0x88/0x290 [ 41.846450][ T461] do_new_mount+0x289/0xad0 [ 41.850938][ T461] ? do_move_mount_old+0x160/0x160 [ 41.856041][ T461] ? security_capable+0xb2/0xd0 [ 41.860909][ T461] ? ns_capable+0x8a/0xf0 [ 41.865327][ T461] path_mount+0x60b/0x1050 [ 41.869840][ T461] __se_sys_mount+0x2d2/0x3c0 [ 41.874518][ T461] ? __x64_sys_mount+0xd0/0xd0 [ 41.879385][ T461] ? sched_clock_cpu+0x18/0x3b0 [ 41.884324][ T461] __x64_sys_mount+0xbf/0xd0 [ 41.888933][ T461] do_syscall_64+0x44/0xd0 [ 41.893351][ T461] ? irqentry_exit+0x12/0x40 [ 41.897925][ T461] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.904292][ T461] RIP: 0033:0x7f531437bada [ 41.908974][ T461] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 41.928824][ T461] RSP: 002b:00007f53142eef88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 41.937220][ T461] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f531437bada [ 41.945616][ T461] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f53142eefe0 [ 41.953836][ T461] RBP: 00007f53142ef020 R08: 00007f53142ef020 R09: 0000000020000000 [ 41.961877][ T461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 41.970103][ T461] R13: 0000000020000100 R14: 00007f53142eefe0 R15: 0000000020010880 [ 41.978069][ T461] [ 41.981647][ T461] ------------[ cut here ]------------ [ 41.988293][ T461] kobject: '(null)' (ffff8881261930e8): is not initialized, yet kobject_put() is being called. [ 41.998782][ T461] WARNING: CPU: 1 PID: 461 at lib/kobject.c:752 kobject_put+0x7f/0x240 2022/10/12 23:37:49 executed programs: 8 [ 42.007418][ T461] Modules linked in: [ 42.011372][ T461] CPU: 1 PID: 461 Comm: syz-executor.5 Tainted: G W 5.15.72-syzkaller-04916-g43eb03f7ce81 #0 [ 42.023018][ T461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 42.034156][ T461] RIP: 0010:kobject_put+0x7f/0x240 [ 42.039447][ T461] Code: 4c 89 f0 48 c1 e8 03 42 80 3c 38 00 74 08 4c 89 f7 e8 35 ce 36 ff 49 8b 36 48 c7 c7 00 22 68 85 4c 89 f2 31 c0 e8 f1 23 cb fe <0f> 0b eb 0f e8 78 53 f9 fe e9 58 01 00 00 e8 6e 53 f9 fe 4d 8d 6e [ 42.059747][ T461] RSP: 0018:ffffc90000fa7a58 EFLAGS: 00010246 [ 42.065957][ T461] RAX: d0ad1b9160117e00 RBX: 0000000000000000 RCX: ffff88810cdc2780 [ 42.074130][ T461] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 42.082296][ T461] RBP: ffffc90000fa7a88 R08: ffffffff81572d19 R09: fffff520001f4e91 [ 42.092079][ T463] loop4: detected capacity change from 0 to 16 [ 42.094419][ T461] R10: fffff520001f4e91 R11: 1ffff920001f4e90 R12: ffff888126193000 [ 42.105568][ T463] ------------[ cut here ]------------ [ 42.106629][ T461] R13: dffffc0000000000 R14: ffff8881261930e8 R15: dffffc0000000000 [ 42.113898][ T463] refcount_t: saturated; leaking memory. [ 42.120517][ T461] FS: 00007f53142ef700(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 42.126315][ T463] WARNING: CPU: 1 PID: 463 at lib/refcount.c:22 refcount_warn_saturate+0x129/0x1b0 [ 42.135367][ T461] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.144658][ T463] Modules linked in: [ 42.151488][ T461] CR2: 00007ffdfb439e48 CR3: 000000011ffeb000 CR4: 00000000003506b0 [ 42.155378][ T463] CPU: 1 PID: 463 Comm: syz-executor.4 Tainted: G W 5.15.72-syzkaller-04916-g43eb03f7ce81 #0 [ 42.163469][ T461] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.174723][ T463] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 42.174734][ T463] RIP: 0010:refcount_warn_saturate+0x129/0x1b0 [ 42.174760][ T463] Code: c7 00 a8 66 85 31 c0 e8 a5 d7 ec fe 0f 0b eb bf e8 2c 07 1b ff c6 05 13 91 2a 04 01 48 c7 c7 60 a6 66 85 31 c0 e8 87 d7 ec fe <0f> 0b eb a1 e8 0e 07 1b ff c6 05 f6 90 2a 04 01 48 c7 c7 e0 a6 66 [ 42.174772][ T463] RSP: 0018:ffffc90000e87970 EFLAGS: 00010246 [ 42.174785][ T463] RAX: 8561f6ad934ff600 RBX: 0000000000000001 RCX: ffff88810b750000 [ 42.183416][ T461] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.214896][ T463] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 42.220714][ T461] Call Trace: [ 42.227015][ T463] RBP: ffffc90000e87980 R08: ffffffff81572d19 R09: 0000000000000003 [ 42.234980][ T461] [ 42.243160][ T463] R10: fffff520001d0e9d R11: 1ffff920001d0e9c R12: 1ffff11024c4721d [ 42.251272][ T461] ? kobject_put+0x88/0x240 [ 42.254768][ T463] R13: 1ffff11024c47221 R14: 0000000000000001 R15: 00000000c0000001 [ 42.263033][ T461] erofs_unregister_sysfs+0x4f/0x70 [ 42.266294][ T463] FS: 00007fac6c9f2700(0000) GS:ffff8881f7300000(0000) knlGS:0000000000000000 [ 42.274688][ T461] ? erofs_free_inode+0xb0/0xb0 [ 42.279037][ T463] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.279052][ T463] CR2: 00007fac6cba00b0 CR3: 000000010eed5000 CR4: 00000000003506a0 [ 42.279067][ T463] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.287563][ T461] erofs_put_super+0x46/0xa0 [ 42.292728][ T463] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.302032][ T461] ? erofs_free_inode+0xb0/0xb0 [ 42.306677][ T463] Call Trace: [ 42.306683][ T463] [ 42.306688][ T463] kobject_add_internal+0xc81/0xda0 [ 42.306706][ T463] kobject_init_and_add+0x123/0x190 [ 42.313801][ T461] generic_shutdown_super+0x14f/0x2d0 [ 42.321577][ T463] ? __kasan_check_write+0x14/0x20 [ 42.330185][ T461] kill_block_super+0x80/0xe0 [ 42.334641][ T463] ? kobject_add+0x210/0x210 [ 42.342608][ T461] erofs_kill_sb+0x66/0x130 [ 42.347618][ T463] ? inode_init_always+0x709/0x990 [ 42.350714][ T461] deactivate_locked_super+0xb0/0x100 [ 42.353585][ T463] ? _raw_spin_unlock+0x4d/0x70 [ 42.361284][ T461] get_tree_bdev+0x437/0x640 [ 42.364194][ T463] ? _raw_spin_unlock+0x4d/0x70 [ 42.369740][ T461] ? erofs_release_device_info+0x90/0x90 [ 42.374977][ T463] erofs_register_sysfs+0xd1/0x130 [ 42.379790][ T461] erofs_fc_get_tree+0x1c/0x20 [ 42.384304][ T463] erofs_fc_fill_super+0x95c/0x1180 [ 42.388957][ T461] vfs_get_tree+0x88/0x290 [ 42.393908][ T463] get_tree_bdev+0x417/0x640 [ 42.399535][ T461] do_new_mount+0x289/0xad0 [ 42.404245][ T463] ? erofs_release_device_info+0x90/0x90 [ 42.409224][ T461] ? do_move_mount_old+0x160/0x160 [ 42.413936][ T463] erofs_fc_get_tree+0x1c/0x20 [ 42.419880][ T461] ? security_capable+0xb2/0xd0 [ 42.424661][ T463] vfs_get_tree+0x88/0x290 [ 42.429544][ T461] ? ns_capable+0x8a/0xf0 [ 42.434700][ T463] do_new_mount+0x289/0xad0 [ 42.439268][ T461] path_mount+0x60b/0x1050 [ 42.443789][ T463] ? do_move_mount_old+0x160/0x160 [ 42.448664][ T461] __se_sys_mount+0x2d2/0x3c0 [ 42.454206][ T463] ? security_capable+0xb2/0xd0 [ 42.459399][ T461] ? __x64_sys_mount+0xd0/0xd0 [ 42.464121][ T463] ? ns_capable+0x8a/0xf0 [ 42.469274][ T461] ? sched_clock_cpu+0x18/0x3b0 [ 42.473733][ T463] path_mount+0x60b/0x1050 [ 42.478060][ T461] __x64_sys_mount+0xbf/0xd0 [ 42.482770][ T463] __se_sys_mount+0x2d2/0x3c0 [ 42.488163][ T461] do_syscall_64+0x44/0xd0 [ 42.498032][ T463] ? __x64_sys_mount+0xd0/0xd0 [ 42.502805][ T461] ? irqentry_exit+0x12/0x40 [ 42.517206][ T463] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 42.521463][ T461] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.526325][ T463] __x64_sys_mount+0xbf/0xd0 [ 42.530880][ T461] RIP: 0033:0x7f531437bada [ 42.535418][ T463] do_syscall_64+0x44/0xd0 [ 42.540054][ T461] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 42.544753][ T463] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.550888][ T461] RSP: 002b:00007f53142eef88 EFLAGS: 00000246 [ 42.556923][ T463] RIP: 0033:0x7fac6ca7eada [ 42.561435][ T461] ORIG_RAX: 00000000000000a5 [ 42.566072][ T463] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 42.570648][ T461] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f531437bada [ 42.590993][ T463] RSP: 002b:00007fac6c9f1f88 EFLAGS: 00000246 [ 42.596939][ T461] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f53142eefe0 [ 42.602927][ T463] ORIG_RAX: 00000000000000a5 [ 42.607217][ T461] RBP: 00007f53142ef020 R08: 00007f53142ef020 R09: 0000000020000000 [ 42.612057][ T463] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007fac6ca7eada [ 42.632152][ T461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 42.640466][ T463] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007fac6c9f1fe0 [ 42.646483][ T461] R13: 0000000020000100 R14: 00007f53142eefe0 R15: 0000000020010880 [ 42.654532][ T463] RBP: 00007fac6c9f2020 R08: 00007fac6c9f2020 R09: 0000000020000000 [ 42.659054][ T461] [ 42.667174][ T463] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 42.675066][ T461] ---[ end trace c4d90f07b9fa39ce ]--- [ 42.683283][ T463] R13: 0000000020000100 R14: 00007fac6c9f1fe0 R15: 0000000020010880 [ 42.691260][ T461] list_add corruption. prev is NULL. [ 42.699675][ T463] [ 42.707448][ T461] ------------[ cut here ]------------ [ 42.710636][ T463] ---[ end trace c4d90f07b9fa39cf ]--- [ 42.718387][ T461] kernel BUG at lib/list_debug.c:24! [ 42.718404][ T461] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 42.718419][ T461] CPU: 0 PID: 461 Comm: syz-executor.5 Tainted: G W 5.15.72-syzkaller-04916-g43eb03f7ce81 #0 [ 42.718436][ T461] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/22/2022 [ 42.724375][ T463] kobject_add_internal failed for loop4 (error: -2 parent: erofs) [ 42.731983][ T461] RIP: 0010:__list_add_valid+0xbc/0x100 [ 42.732010][ T461] Code: c0 74 ed 48 c7 c7 60 c8 66 85 4c 89 fe 4c 89 e2 4c 89 f1 31 c0 e8 41 22 57 02 0f 0b 48 c7 c7 60 c6 66 85 31 c0 e8 31 22 57 02 <0f> 0b 48 c7 c7 00 c7 66 85 31 c0 e8 21 22 57 02 0f 0b 48 c7 c7 60 [ 42.817263][ T461] RSP: 0018:ffffc90000fa78e0 EFLAGS: 00010046 [ 42.823472][ T461] RAX: 0000000000000022 RBX: 1ffff920001f4f3d RCX: d0ad1b9160117e00 [ 42.831522][ T461] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 42.839470][ T461] RBP: ffffc90000fa7908 R08: ffffffff81572d19 R09: ffffed103ee465d0 [ 42.847516][ T461] R10: ffffed103ee465d0 R11: 1ffff1103ee465cf R12: ffffc90000fa79e8 [ 42.855473][ T461] R13: 1ffff11024c3262c R14: ffffc90000fa79e0 R15: ffff888126193160 [ 42.863426][ T461] FS: 00007f53142ef700(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 42.872333][ T461] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.878892][ T461] CR2: 00005555573553b8 CR3: 000000011ffeb000 CR4: 00000000003506b0 [ 42.887161][ T461] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.895196][ T461] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.903152][ T461] Call Trace: [ 42.906407][ T461] [ 42.909313][ T461] __prepare_to_swait+0xad/0x140 [ 42.914256][ T461] wait_for_common+0x257/0x430 [ 42.918994][ T461] ? handle_bug+0x41/0x70 [ 42.923392][ T461] ? wait_for_completion+0x20/0x20 [ 42.928479][ T461] ? refcount_warn_saturate+0xba/0x1b0 [ 42.934565][ T461] wait_for_completion+0x18/0x20 [ 42.939655][ T461] erofs_unregister_sysfs+0x5e/0x70 [ 42.944836][ T461] ? erofs_free_inode+0xb0/0xb0 [ 42.949745][ T461] erofs_put_super+0x46/0xa0 [ 42.954309][ T461] ? erofs_free_inode+0xb0/0xb0 [ 42.959143][ T461] generic_shutdown_super+0x14f/0x2d0 [ 42.964490][ T461] kill_block_super+0x80/0xe0 [ 42.969318][ T461] erofs_kill_sb+0x66/0x130 [ 42.973796][ T461] deactivate_locked_super+0xb0/0x100 [ 42.979146][ T461] get_tree_bdev+0x437/0x640 [ 42.983734][ T461] ? erofs_release_device_info+0x90/0x90 [ 42.989341][ T461] erofs_fc_get_tree+0x1c/0x20 [ 42.994086][ T461] vfs_get_tree+0x88/0x290 [ 42.998479][ T461] do_new_mount+0x289/0xad0 [ 43.002961][ T461] ? do_move_mount_old+0x160/0x160 [ 43.008046][ T461] ? security_capable+0xb2/0xd0 [ 43.012870][ T461] ? ns_capable+0x8a/0xf0 [ 43.017177][ T461] path_mount+0x60b/0x1050 [ 43.021569][ T461] __se_sys_mount+0x2d2/0x3c0 [ 43.026221][ T461] ? __x64_sys_mount+0xd0/0xd0 [ 43.030958][ T461] ? sched_clock_cpu+0x18/0x3b0 [ 43.035785][ T461] __x64_sys_mount+0xbf/0xd0 [ 43.040358][ T461] do_syscall_64+0x44/0xd0 [ 43.044843][ T461] ? irqentry_exit+0x12/0x40 [ 43.049406][ T461] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.055451][ T461] RIP: 0033:0x7f531437bada [ 43.059932][ T461] Code: 48 c7 c2 b8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff eb d2 e8 b8 04 00 00 0f 1f 84 00 00 00 00 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 43.079859][ T461] RSP: 002b:00007f53142eef88 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 43.088470][ T461] RAX: ffffffffffffffda RBX: 0000000020000200 RCX: 00007f531437bada [ 43.096429][ T461] RDX: 0000000020000000 RSI: 0000000020000100 RDI: 00007f53142eefe0 [ 43.104377][ T461] RBP: 00007f53142ef020 R08: 00007f53142ef020 R09: 0000000020000000 [ 43.112324][ T461] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000020000000 [ 43.120271][ T461] R13: 0000000020000100 R14: 00007f53142eefe0 R15: 0000000020010880 [ 43.128486][ T461] [ 43.131491][ T461] Modules linked in: [ 43.135450][ T461] ---[ end trace c4d90f07b9fa39d0 ]--- [ 43.140877][ T461] RIP: 0010:__list_add_valid+0xbc/0x100 [ 43.146404][ T461] Code: c0 74 ed 48 c7 c7 60 c8 66 85 4c 89 fe 4c 89 e2 4c 89 f1 31 c0 e8 41 22 57 02 0f 0b 48 c7 c7 60 c6 66 85 31 c0 e8 31 22 57 02 <0f> 0b 48 c7 c7 00 c7 66 85 31 c0 e8 21 22 57 02 0f 0b 48 c7 c7 60 [ 43.166189][ T461] RSP: 0018:ffffc90000fa78e0 EFLAGS: 00010046 [ 43.172334][ T461] RAX: 0000000000000022 RBX: 1ffff920001f4f3d RCX: d0ad1b9160117e00 [ 43.180497][ T461] RDX: 0000000000000000 RSI: 0000000080000001 RDI: 0000000000000000 [ 43.188532][ T461] RBP: ffffc90000fa7908 R08: ffffffff81572d19 R09: ffffed103ee465d0 [ 43.196598][ T461] R10: ffffed103ee465d0 R11: 1ffff1103ee465cf R12: ffffc90000fa79e8 [ 43.204646][ T461] R13: 1ffff11024c3262c R14: ffffc90000fa79e0 R15: ffff888126193160 [ 43.212682][ T461] FS: 00007f53142ef700(0000) GS:ffff8881f7200000(0000) knlGS:0000000000000000 [ 43.221598][ T461] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.228156][ T461] CR2: 00005555573553b8 CR3: 000000011ffeb000 CR4: 00000000003506b0 [ 43.236191][ T461] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 43.244163][ T461] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 43.252117][ T461] Kernel panic - not syncing: Fatal exception [ 43.258351][ T461] Kernel Offset: disabled [ 43.262655][ T461] Rebooting in 86400 seconds..