Warning: Permanently added '10.128.0.227' (ED25519) to the list of known hosts. 2025/07/15 20:44:29 ignoring optional flag "sandboxArg"="0" 2025/07/15 20:44:29 ignoring optional flag "type"="gce" 2025/07/15 20:44:29 parsed 1 programs [ 50.604689][ T28] kauditd_printk_skb: 29 callbacks suppressed [ 50.604702][ T28] audit: type=1400 audit(1752612270.445:103): avc: denied { unlink } for pid=380 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 50.666883][ T380] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.307859][ T28] audit: type=1401 audit(1752612271.145:104): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 51.361128][ T28] audit: type=1400 audit(1752612271.195:105): avc: denied { create } for pid=404 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 51.669926][ T429] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.676996][ T429] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.685117][ T429] device bridge_slave_0 entered promiscuous mode [ 51.692335][ T429] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.699672][ T429] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.707062][ T429] device bridge_slave_1 entered promiscuous mode [ 51.745578][ T429] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.752626][ T429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.760013][ T429] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.767048][ T429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.783775][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.791670][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.798940][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.808807][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.817172][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.824305][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.832802][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.841633][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.848791][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.859926][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.869799][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.882103][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.892977][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.901160][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.908802][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.917879][ T429] device veth0_vlan entered promiscuous mode [ 51.927482][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.936562][ T429] device veth1_macvtap entered promiscuous mode [ 51.949968][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.958515][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/07/15 20:44:31 executed programs: 0 [ 51.989741][ T28] audit: type=1400 audit(1752612271.825:106): avc: denied { write } for pid=374 comm="syz-execprog" path="pipe:[15589]" dev="pipefs" ino=15589 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 52.127570][ T442] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.134869][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.142300][ T442] device bridge_slave_0 entered promiscuous mode [ 52.150743][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.158382][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.166036][ T442] device bridge_slave_1 entered promiscuous mode [ 52.264516][ T444] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.271554][ T444] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.279079][ T444] device bridge_slave_0 entered promiscuous mode [ 52.286053][ T444] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.293162][ T444] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.300670][ T444] device bridge_slave_1 entered promiscuous mode [ 52.340231][ T448] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.347303][ T448] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.354738][ T448] device bridge_slave_0 entered promiscuous mode [ 52.364932][ T449] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.371958][ T449] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.379633][ T449] device bridge_slave_0 entered promiscuous mode [ 52.392640][ T448] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.399724][ T448] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.407044][ T448] device bridge_slave_1 entered promiscuous mode [ 52.419734][ T449] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.426986][ T449] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.434549][ T449] device bridge_slave_1 entered promiscuous mode [ 52.453536][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.460609][ T442] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.468153][ T442] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.475190][ T442] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.513595][ T447] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.521120][ T447] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.528528][ T447] device bridge_slave_0 entered promiscuous mode [ 52.545840][ T447] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.552882][ T447] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.560403][ T447] device bridge_slave_1 entered promiscuous mode [ 52.585338][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.592760][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.737871][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.745352][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.774014][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.782565][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.790873][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.797918][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.811149][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.818881][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.842718][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.851324][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.859612][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.866766][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.874411][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 52.882403][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.890616][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.898135][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.905559][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 52.913658][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.928349][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 52.936840][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.945061][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.952067][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.960273][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 52.968780][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.977067][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.984183][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.994474][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.013916][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.021872][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.033268][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.042201][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.062483][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.070890][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.079260][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.086321][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.094198][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.102651][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.110890][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.118007][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.145813][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.153458][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.161872][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.170508][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.177550][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.185046][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.193283][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.201926][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.209046][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.216464][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.224483][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.232566][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.250735][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 53.258776][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.266943][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.292393][ T442] device veth0_vlan entered promiscuous mode [ 53.301370][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.309916][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.318287][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.327463][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 53.335156][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.342509][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.350583][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.358759][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.367198][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.382557][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.390074][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.397722][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 53.406081][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.414654][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.421935][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.429469][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 53.438075][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.446608][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.453711][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.463929][ T449] device veth0_vlan entered promiscuous mode [ 53.480482][ T447] device veth0_vlan entered promiscuous mode [ 53.487089][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.496221][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.505382][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.513334][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.520956][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.528614][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 53.536308][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.544419][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.552327][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.560527][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.568142][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.581019][ T448] device veth0_vlan entered promiscuous mode [ 53.596291][ T444] device veth0_vlan entered promiscuous mode [ 53.602689][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.610772][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.619065][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.627641][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.635349][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.642981][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.658007][ T448] device veth1_macvtap entered promiscuous mode [ 53.668430][ T449] device veth1_macvtap entered promiscuous mode [ 53.679692][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.688186][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.696380][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.703946][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.712438][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.720927][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.729288][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.737593][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.745435][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.753581][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.762398][ T447] device veth1_macvtap entered promiscuous mode [ 53.770211][ T442] device veth1_macvtap entered promiscuous mode [ 53.780590][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.788364][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.796197][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.804664][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.817678][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.826050][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.845282][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.853588][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.862973][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.871337][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.879772][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.888322][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.896875][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.905273][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.914441][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.922958][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.932039][ T444] device veth1_macvtap entered promiscuous mode [ 53.939341][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.947209][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.955585][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.973082][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.981619][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.009401][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 54.017956][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.040505][ T468] FAULT_INJECTION: forcing a failure. [ 54.040505][ T468] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 54.048661][ T470] FAULT_INJECTION: forcing a failure. [ 54.048661][ T470] name failslab, interval 1, probability 0, space 0, times 1 [ 54.054542][ T468] CPU: 0 PID: 468 Comm: syz.2.17 Not tainted 6.1.141-syzkaller-1169945-ge2deb0b42a3a #0 [ 54.076083][ T468] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.086136][ T468] Call Trace: [ 54.089404][ T468] [ 54.092317][ T468] __dump_stack+0x21/0x24 [ 54.096656][ T468] dump_stack_lvl+0xee/0x150 [ 54.101329][ T468] ? __cfi_dump_stack_lvl+0x8/0x8 [ 54.106344][ T468] dump_stack+0x15/0x24 [ 54.110493][ T468] should_fail_ex+0x3d4/0x520 [ 54.115161][ T468] should_fail_alloc_page+0x61/0x90 [ 54.120352][ T468] prepare_alloc_pages+0x148/0x5f0 [ 54.125473][ T468] ? __alloc_pages_bulk+0x9c0/0x9c0 [ 54.130846][ T468] __alloc_pages+0x115/0x3a0 [ 54.135453][ T468] ? __cfi___alloc_pages+0x10/0x10 [ 54.140552][ T468] ? __kasan_check_write+0x14/0x20 [ 54.145739][ T468] ? _raw_spin_lock+0x8e/0xe0 [ 54.150414][ T468] pte_alloc_one+0x70/0x180 [ 54.154911][ T468] ? __cfi_pte_alloc_one+0x10/0x10 [ 54.160013][ T468] ? __mod_lruvec_page_state+0x183/0x200 [ 54.165646][ T468] ? _raw_spin_unlock+0x4c/0x70 [ 54.170496][ T468] ? __pmd_alloc+0x3ef/0x4a0 [ 54.175092][ T468] __pte_alloc+0x75/0x290 [ 54.179235][ T473] loop0: detected capacity change from 0 to 512 [ 54.179404][ T468] ? __cfi___pmd_alloc+0x10/0x10 [ 54.190581][ T468] ? __cfi___pte_alloc+0x10/0x10 [ 54.195515][ T468] ? __kasan_check_read+0x11/0x20 [ 54.200531][ T468] handle_mm_fault+0x22b5/0x2640 [ 54.205490][ T468] ? __cfi_handle_mm_fault+0x10/0x10 [ 54.210788][ T468] ? mtree_load+0x519/0x710 [ 54.215316][ T468] __get_user_pages+0x33d/0xd80 [ 54.220248][ T468] ? populate_vma_page_range+0x120/0x120 [ 54.225867][ T468] ? userfaultfd_unmap_complete+0x275/0x2d0 [ 54.231837][ T468] ? do_mmap+0x813/0xcf0 [ 54.236062][ T468] __mm_populate+0x2e4/0x420 [ 54.240642][ T468] ? __cfi___mm_populate+0x10/0x10 [ 54.245741][ T468] vm_mmap_pgoff+0x268/0x3f0 [ 54.250488][ T468] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 54.255588][ T468] ? __kasan_check_write+0x14/0x20 [ 54.260683][ T468] ? fput+0x154/0x1a0 [ 54.264654][ T468] ? ksys_write+0x1eb/0x240 [ 54.269142][ T468] ksys_mmap_pgoff+0xf6/0x1d0 [ 54.273960][ T468] __x64_sys_mmap+0xfa/0x110 [ 54.278527][ T468] x64_sys_call+0x8fd/0x9a0 [ 54.283009][ T468] do_syscall_64+0x4c/0xa0 [ 54.287484][ T468] ? clear_bhb_loop+0x30/0x80 [ 54.292146][ T468] ? clear_bhb_loop+0x30/0x80 [ 54.296828][ T468] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.302702][ T468] RIP: 0033:0x7fe4bd579eb9 [ 54.307112][ T468] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.326820][ T468] RSP: 002b:00007fe4bd3ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 54.335223][ T468] RAX: ffffffffffffffda RBX: 00007fe4bd715f80 RCX: 00007fe4bd579eb9 [ 54.343177][ T468] RDX: 000000000200000f RSI: 0000000000b36000 RDI: 0000000020000000 [ 54.351127][ T468] RBP: 00007fe4bd3ff090 R08: ffffffffffffffff R09: 0000000000000000 [ 54.359076][ T468] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000001 [ 54.367028][ T468] R13: 0000000000000001 R14: 00007fe4bd715f80 R15: 00007ffd467d58d8 [ 54.374990][ T468] [ 54.380401][ T470] CPU: 0 PID: 470 Comm: syz.4.19 Not tainted 6.1.141-syzkaller-1169945-ge2deb0b42a3a #0 [ 54.390145][ T470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.390728][ T473] EXT4-fs (loop0): can't mount with data_err=abort, fs mounted w/o journal [ 54.400365][ T470] Call Trace: [ 54.400372][ T470] [ 54.400377][ T470] __dump_stack+0x21/0x24 [ 54.400402][ T470] dump_stack_lvl+0xee/0x150 [ 54.400427][ T470] ? __cfi_dump_stack_lvl+0x8/0x8 [ 54.400447][ T470] ? mas_alloc_nodes+0x2d8/0x850 [ 54.410721][ T472] FAULT_INJECTION: forcing a failure. [ 54.410721][ T472] name failslab, interval 1, probability 0, space 0, times 1 [ 54.412367][ T470] dump_stack+0x15/0x24 [ 54.450831][ T470] should_fail_ex+0x3d4/0x520 [ 54.455524][ T470] __should_failslab+0xac/0xf0 [ 54.460357][ T470] should_failslab+0x9/0x20 [ 54.464941][ T470] kmem_cache_alloc_bulk+0x2d/0x3c0 [ 54.470245][ T470] ? mas_alloc_nodes+0x2d8/0x850 [ 54.475173][ T470] mas_alloc_nodes+0x423/0x850 [ 54.480106][ T470] mas_preallocate+0xdcf/0x1390 [ 54.484953][ T470] ? __cfi_mas_preallocate+0x10/0x10 [ 54.487337][ T474] loop2: detected capacity change from 0 to 512 [ 54.490332][ T470] ? mas_prev_slot+0x8a8/0x8e0 [ 54.490355][ T470] ? rwsem_write_trylock+0x130/0x300 [ 54.506568][ T470] vma_expand+0x3b7/0xa10 [ 54.510887][ T470] ? can_vma_merge_after+0x99/0x330 [ 54.516156][ T470] mmap_region+0xed0/0x2140 [ 54.520647][ T470] ? __cfi_mmap_region+0x10/0x10 [ 54.525592][ T470] ? cap_mmap_addr+0x165/0x2e0 [ 54.530340][ T470] ? get_unmapped_area+0x313/0x380 [ 54.535431][ T470] do_mmap+0x7ae/0xcf0 [ 54.539481][ T470] ? __cfi_do_mmap+0x10/0x10 [ 54.544141][ T470] vm_mmap_pgoff+0x1f5/0x3f0 [ 54.548724][ T470] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 54.553836][ T470] ? __kasan_check_write+0x14/0x20 [ 54.558930][ T470] ? fput+0x154/0x1a0 [ 54.562906][ T470] ? ksys_write+0x1eb/0x240 [ 54.567389][ T470] ksys_mmap_pgoff+0xf6/0x1d0 [ 54.572086][ T470] __x64_sys_mmap+0xfa/0x110 [ 54.576671][ T470] x64_sys_call+0x8fd/0x9a0 [ 54.581166][ T470] do_syscall_64+0x4c/0xa0 [ 54.585574][ T470] ? clear_bhb_loop+0x30/0x80 [ 54.590235][ T470] ? clear_bhb_loop+0x30/0x80 [ 54.594892][ T470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.600770][ T470] RIP: 0033:0x7efd61179eb9 [ 54.605174][ T470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.624767][ T470] RSP: 002b:00007efd61f85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 54.633193][ T470] RAX: ffffffffffffffda RBX: 00007efd61315f80 RCX: 00007efd61179eb9 [ 54.641247][ T470] RDX: 000000000200000f RSI: 0000000000b36000 RDI: 0000000020000000 [ 54.649289][ T470] RBP: 00007efd61f85090 R08: ffffffffffffffff R09: 0000000000000000 [ 54.657345][ T470] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000001 [ 54.665293][ T470] R13: 0000000000000001 R14: 00007efd61315f80 R15: 00007ffe066bc198 [ 54.673248][ T470] [ 54.679411][ T472] CPU: 0 PID: 472 Comm: syz.0.15 Not tainted 6.1.141-syzkaller-1169945-ge2deb0b42a3a #0 [ 54.689146][ T472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.689887][ T477] FAULT_INJECTION: forcing a failure. [ 54.689887][ T477] name failslab, interval 1, probability 0, space 0, times 1 [ 54.699198][ T472] Call Trace: [ 54.699206][ T472] [ 54.699211][ T472] __dump_stack+0x21/0x24 [ 54.699235][ T472] dump_stack_lvl+0xee/0x150 [ 54.699254][ T472] ? __cfi_dump_stack_lvl+0x8/0x8 [ 54.732007][ T472] ? __kasan_check_read+0x11/0x20 [ 54.737038][ T472] dump_stack+0x15/0x24 [ 54.741188][ T472] should_fail_ex+0x3d4/0x520 [ 54.745855][ T472] ? mas_alloc_nodes+0x2d8/0x850 [ 54.750785][ T472] __should_failslab+0xac/0xf0 [ 54.755545][ T472] should_failslab+0x9/0x20 [ 54.760037][ T472] kmem_cache_alloc+0x3b/0x330 [ 54.764789][ T472] mas_alloc_nodes+0x2d8/0x850 [ 54.769550][ T472] mas_preallocate+0xdcf/0x1390 [ 54.774392][ T472] ? __cfi_mas_preallocate+0x10/0x10 [ 54.779756][ T472] ? mas_prev_slot+0x8a8/0x8e0 [ 54.784511][ T472] ? rwsem_write_trylock+0x130/0x300 [ 54.788093][ T474] EXT4-fs (loop2): can't mount with data_err=abort, fs mounted w/o journal [ 54.789793][ T472] vma_expand+0x3b7/0xa10 [ 54.802784][ T472] ? can_vma_merge_after+0x99/0x330 [ 54.807990][ T472] mmap_region+0xed0/0x2140 [ 54.812505][ T472] ? __cfi_mmap_region+0x10/0x10 [ 54.817462][ T472] ? cap_mmap_addr+0x165/0x2e0 [ 54.822321][ T472] ? get_unmapped_area+0x313/0x380 [ 54.827503][ T472] do_mmap+0x7ae/0xcf0 [ 54.831568][ T472] ? __cfi_do_mmap+0x10/0x10 [ 54.836150][ T472] vm_mmap_pgoff+0x1f5/0x3f0 [ 54.840748][ T472] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 54.844227][ T470] ------------[ cut here ]------------ [ 54.846024][ T472] ? __kasan_check_write+0x14/0x20 [ 54.851594][ T470] kernel BUG at mm/mmap.c:2829! [ 54.856651][ T472] ? fput+0x154/0x1a0 [ 54.856671][ T472] ? ksys_write+0x1eb/0x240 [ 54.856690][ T472] ksys_mmap_pgoff+0xf6/0x1d0 [ 54.871906][ T470] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 54.874611][ T472] __x64_sys_mmap+0xfa/0x110 [ 54.880667][ T470] CPU: 1 PID: 470 Comm: syz.4.19 Not tainted 6.1.141-syzkaller-1169945-ge2deb0b42a3a #0 [ 54.885227][ T472] x64_sys_call+0x8fd/0x9a0 [ 54.894911][ T470] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 54.899404][ T472] do_syscall_64+0x4c/0xa0 [ 54.909440][ T470] RIP: 0010:mmap_region+0x1ffd/0x2140 [ 54.913835][ T472] ? clear_bhb_loop+0x30/0x80 [ 54.919209][ T470] Code: 80 c1 03 38 c1 0f 8c f8 f9 ff ff 4c 89 f7 49 89 d5 e8 67 10 09 00 4c 89 ea e9 e5 f9 ff ff e8 ca b5 c4 ff 0f 0b e8 c3 b5 c4 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 6a fb ff ff 48 89 df e8 [ 54.923852][ T472] ? clear_bhb_loop+0x30/0x80 [ 54.943521][ T470] RSP: 0018:ffffc90000d57a60 EFLAGS: 00010293 [ 54.948179][ T472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 54.954214][ T470] RAX: ffffffff81ab41ad RBX: 0000000020b36000 RCX: ffff88812d0d8000 [ 54.960076][ T472] RIP: 0033:0x7fd02ed79eb9 [ 54.968018][ T470] RDX: 0000000000000000 RSI: 0000000020b35fff RDI: 0000000020b36000 [ 54.972407][ T472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 54.980531][ T470] RBP: ffffc90000d57c50 R08: ffff88812d0d8000 R09: 0000000000000003 [ 55.000106][ T472] RSP: 002b:00007fd02fb00038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 55.008140][ T470] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000020b36000 [ 55.008152][ T470] R13: 0000000020b35fff R14: dffffc0000000000 R15: ffff88812e77de00 [ 55.016538][ T472] RAX: ffffffffffffffda RBX: 00007fd02ef15f80 RCX: 00007fd02ed79eb9 [ 55.024480][ T470] FS: 00007efd61f856c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 55.032423][ T472] RDX: 000000000200000f RSI: 0000000000b36000 RDI: 0000000020000000 [ 55.040366][ T470] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.049267][ T472] RBP: 00007fd02fb00090 R08: ffffffffffffffff R09: 0000000000000000 [ 55.057218][ T470] CR2: 00007fdef5f3d000 CR3: 000000012106c000 CR4: 00000000003506a0 [ 55.063779][ T472] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000001 [ 55.071728][ T470] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.079678][ T472] R13: 0000000000000001 R14: 00007fd02ef15f80 R15: 00007ffdcdcedbc8 [ 55.087672][ T470] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.095718][ T472] [ 55.103668][ T470] Call Trace: [ 55.103675][ T470] [ 55.112569][ T472] ------------[ cut here ]------------ [ 55.114632][ T470] ? __cfi_mmap_region+0x10/0x10 [ 55.114659][ T470] ? cap_mmap_addr+0x165/0x2e0 [ 55.114681][ T470] ? get_unmapped_area+0x313/0x380 [ 55.114700][ T470] do_mmap+0x7ae/0xcf0 [ 55.114718][ T470] ? __cfi_do_mmap+0x10/0x10 [ 55.114737][ T470] vm_mmap_pgoff+0x1f5/0x3f0 [ 55.114759][ T470] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 55.114779][ T470] ? __kasan_check_write+0x14/0x20 [ 55.114801][ T470] ? fput+0x154/0x1a0 [ 55.114817][ T470] ? ksys_write+0x1eb/0x240 [ 55.114838][ T470] ksys_mmap_pgoff+0xf6/0x1d0 [ 55.114856][ T470] __x64_sys_mmap+0xfa/0x110 [ 55.114873][ T470] x64_sys_call+0x8fd/0x9a0 [ 55.114890][ T470] do_syscall_64+0x4c/0xa0 [ 55.114905][ T470] ? clear_bhb_loop+0x30/0x80 [ 55.114922][ T470] ? clear_bhb_loop+0x30/0x80 [ 55.114939][ T470] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 55.114956][ T470] RIP: 0033:0x7efd61179eb9 [ 55.114971][ T470] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.114985][ T470] RSP: 002b:00007efd61f85038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 55.115004][ T470] RAX: ffffffffffffffda RBX: 00007efd61315f80 RCX: 00007efd61179eb9 [ 55.118361][ T472] kernel BUG at mm/mmap.c:2829! [ 55.121274][ T470] RDX: 000000000200000f RSI: 0000000000b36000 RDI: 0000000020000000 [ 55.260069][ T470] RBP: 00007efd61f85090 R08: ffffffffffffffff R09: 0000000000000000 [ 55.268029][ T470] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000001 [ 55.275981][ T470] R13: 0000000000000001 R14: 00007efd61315f80 R15: 00007ffe066bc198 [ 55.283932][ T470] [ 55.286950][ T470] Modules linked in: [ 55.290863][ T472] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 55.296927][ T472] CPU: 0 PID: 472 Comm: syz.0.15 Tainted: G D 6.1.141-syzkaller-1169945-ge2deb0b42a3a #0 [ 55.297034][ T477] CPU: 1 PID: 477 Comm: syz.3.18 Tainted: G D 6.1.141-syzkaller-1169945-ge2deb0b42a3a #0 [ 55.308198][ T472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.319445][ T477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.329477][ T472] RIP: 0010:mmap_region+0x1ffd/0x2140 [ 55.339513][ T477] Call Trace: [ 55.339521][ T477] [ 55.344869][ T472] Code: 80 c1 03 38 c1 0f 8c f8 f9 ff ff 4c 89 f7 49 89 d5 e8 67 10 09 00 4c 89 ea e9 e5 f9 ff ff e8 ca b5 c4 ff 0f 0b e8 c3 b5 c4 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 6a fb ff ff 48 89 df e8 [ 55.348124][ T477] __dump_stack+0x21/0x24 [ 55.351031][ T472] RSP: 0018:ffffc90000d67a60 EFLAGS: 00010293 [ 55.370786][ T477] dump_stack_lvl+0xee/0x150 [ 55.375103][ T472] [ 55.375109][ T472] RAX: ffffffff81ab41ad RBX: 0000000020b36000 RCX: ffff88812087a880 [ 55.381145][ T477] ? __cfi_dump_stack_lvl+0x8/0x8 [ 55.385708][ T472] RDX: 0000000000000000 RSI: 0000000020b35fff RDI: 0000000020b36000 [ 55.388014][ T477] ? asm_exc_int3+0x3a/0x40 [ 55.395958][ T472] RBP: ffffc90000d67c50 R08: ffff88812087a880 R09: 0000000000000003 [ 55.400951][ T477] dump_stack+0x15/0x24 [ 55.408894][ T472] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000020b36000 [ 55.413368][ T477] should_fail_ex+0x3d4/0x520 [ 55.421311][ T472] R13: 0000000020b35fff R14: dffffc0000000000 R15: ffff88812e77d900 [ 55.425441][ T477] __should_failslab+0xac/0xf0 [ 55.433382][ T472] FS: 00007fd02fb006c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 55.438025][ T477] should_failslab+0x9/0x20 [ 55.446225][ T472] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.450968][ T477] kmem_cache_alloc_bulk+0x2d/0x3c0 [ 55.459956][ T472] CR2: 00007fe4bd3fef98 CR3: 00000001211cb000 CR4: 00000000003506b0 [ 55.464483][ T477] ? mas_alloc_nodes+0x2d8/0x850 [ 55.471052][ T472] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.476222][ T477] mas_alloc_nodes+0x423/0x850 [ 55.484165][ T472] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.489074][ T477] mas_preallocate+0xdcf/0x1390 [ 55.497019][ T472] Call Trace: [ 55.497025][ T472] [ 55.501876][ T477] ? __cfi_mas_preallocate+0x10/0x10 [ 55.509837][ T472] ? __cfi_mmap_region+0x10/0x10 [ 55.514661][ T477] ? mas_prev_slot+0x8a8/0x8e0 [ 55.517935][ T472] ? cap_mmap_addr+0x165/0x2e0 [ 55.520880][ T477] ? rwsem_write_trylock+0x130/0x300 [ 55.526137][ T472] ? get_unmapped_area+0x313/0x380 [ 55.531060][ T477] vma_expand+0x3b7/0xa10 [ 55.535823][ T472] do_mmap+0x7ae/0xcf0 [ 55.540571][ T477] ? can_vma_merge_after+0x99/0x330 [ 55.545830][ T472] ? __cfi_do_mmap+0x10/0x10 [ 55.551005][ T477] mmap_region+0xed0/0x2140 [ 55.555304][ T472] vm_mmap_pgoff+0x1f5/0x3f0 [ 55.559361][ T477] ? __cfi_mmap_region+0x10/0x10 [ 55.564527][ T472] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 55.569088][ T477] ? cap_mmap_addr+0x165/0x2e0 [ 55.573562][ T472] ? __kasan_check_write+0x14/0x20 [ 55.578125][ T477] ? get_unmapped_area+0x313/0x380 [ 55.583132][ T472] ? fput+0x154/0x1a0 [ 55.588230][ T477] do_mmap+0x7ae/0xcf0 [ 55.593484][ T472] ? ksys_write+0x1eb/0x240 [ 55.598577][ T477] ? __cfi_do_mmap+0x10/0x10 [ 55.603661][ T472] ksys_mmap_pgoff+0xf6/0x1d0 [ 55.607709][ T477] vm_mmap_pgoff+0x1f5/0x3f0 [ 55.611749][ T472] __x64_sys_mmap+0xfa/0x110 [ 55.616229][ T477] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 55.620874][ T472] x64_sys_call+0x8fd/0x9a0 [ 55.625516][ T477] ? __kasan_check_write+0x14/0x20 [ 55.630076][ T472] do_syscall_64+0x4c/0xa0 [ 55.634632][ T477] ? fput+0x154/0x1a0 [ 55.639716][ T472] ? clear_bhb_loop+0x30/0x80 [ 55.644287][ T477] ? ksys_write+0x1eb/0x240 [ 55.649640][ T472] ? clear_bhb_loop+0x30/0x80 [ 55.654047][ T477] ksys_mmap_pgoff+0xf6/0x1d0 [ 55.658007][ T472] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 55.662664][ T477] __x64_sys_mmap+0xfa/0x110 [ 55.667133][ T472] RIP: 0033:0x7fd02ed79eb9 [ 55.671781][ T477] x64_sys_call+0x8fd/0x9a0 [ 55.676429][ T472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.682294][ T477] do_syscall_64+0x4c/0xa0 [ 55.686851][ T472] RSP: 002b:00007fd02fb00038 EFLAGS: 00000246 [ 55.691235][ T477] ? clear_bhb_loop+0x30/0x80 [ 55.695708][ T472] ORIG_RAX: 0000000000000009 [ 55.715295][ T477] ? clear_bhb_loop+0x30/0x80 [ 55.719683][ T472] RAX: ffffffffffffffda RBX: 00007fd02ef15f80 RCX: 00007fd02ed79eb9 [ 55.725745][ T477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 55.730476][ T472] RDX: 000000000200000f RSI: 0000000000b36000 RDI: 0000000020000000 [ 55.735123][ T477] RIP: 0033:0x7efc76f79eb9 [ 55.739941][ T472] RBP: 00007fd02fb00090 R08: ffffffffffffffff R09: 0000000000000000 [ 55.748060][ T477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 55.753925][ T472] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000001 [ 55.762013][ T477] RSP: 002b:00007efc77d0d038 EFLAGS: 00000246 [ 55.766398][ T472] R13: 0000000000000001 R14: 00007fd02ef15f80 R15: 00007ffdcdcedbc8 [ 55.774524][ T477] ORIG_RAX: 0000000000000009 [ 55.774539][ T477] RAX: ffffffffffffffda RBX: 00007efc77115f80 RCX: 00007efc76f79eb9 [ 55.794120][ T472] [ 55.802153][ T477] RDX: 000000000200000f RSI: 0000000000b36000 RDI: 0000000020000000 [ 55.808191][ T472] Modules linked in: [ 55.816139][ T477] RBP: 00007efc77d0d090 R08: ffffffffffffffff R09: 0000000000000000 [ 55.822036][ T472] ---[ end trace 0000000000000000 ]--- [ 55.828736][ T477] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000001 [ 55.828747][ T477] R13: 0000000000000001 R14: 00007efc77115f80 R15: 00007ffe622707a8 [ 55.828761][ T477] [ 55.865526][ T470] ---[ end trace 0000000000000000 ]--- [ 55.883466][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 55.896147][ T479] FAULT_INJECTION: forcing a failure. [ 55.896147][ T479] name failslab, interval 1, probability 0, space 0, times 0 [ 55.903248][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 55.909429][ T470] RIP: 0010:mmap_region+0x1ffd/0x2140 [ 55.918186][ T472] RIP: 0010:mmap_region+0x1ffd/0x2140 [ 55.922590][ T479] CPU: 1 PID: 479 Comm: syz.2.20 Tainted: G D 6.1.141-syzkaller-1169945-ge2deb0b42a3a #0 [ 55.927757][ T472] Code: 80 c1 03 38 c1 0f 8c f8 f9 ff ff 4c 89 f7 49 89 d5 e8 67 10 09 00 4c 89 ea e9 e5 f9 ff ff e8 ca b5 c4 ff 0f 0b e8 c3 b5 c4 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 6a fb ff ff 48 89 df e8 [ 55.938824][ T479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 55.938833][ T479] Call Trace: [ 55.938838][ T479] [ 55.938843][ T479] __dump_stack+0x21/0x24 [ 55.958883][ T472] RSP: 0018:ffffc90000d57a60 EFLAGS: 00010293 [ 55.968652][ T479] dump_stack_lvl+0xee/0x150 [ 55.968680][ T479] ? __cfi_dump_stack_lvl+0x8/0x8 [ 55.972158][ T472] [ 55.974857][ T479] dump_stack+0x15/0x24 [ 55.974879][ T479] should_fail_ex+0x3d4/0x520 [ 55.979392][ T472] RAX: ffffffff81ab41ad RBX: 0000000020b36000 RCX: ffff88812d0d8000 [ 55.985664][ T479] __should_failslab+0xac/0xf0 [ 55.985683][ T479] should_failslab+0x9/0x20 [ 55.985702][ T479] kmem_cache_alloc_bulk+0x2d/0x3c0 [ 55.985722][ T479] ? mas_alloc_nodes+0x2d8/0x850 [ 55.985745][ T479] mas_alloc_nodes+0x423/0x850 [ 55.985766][ T479] mas_preallocate+0xdcf/0x1390 [ 55.985785][ T479] ? __cfi_mas_preallocate+0x10/0x10 [ 55.985804][ T479] ? mas_prev_slot+0x8a8/0x8e0 [ 55.985823][ T479] ? rwsem_write_trylock+0x130/0x300 [ 55.990518][ T477] ------------[ cut here ]------------ [ 55.995399][ T479] vma_expand+0x3b7/0xa10 [ 55.995420][ T479] ? can_vma_merge_after+0x99/0x330 [ 55.997728][ T477] kernel BUG at mm/mmap.c:2829! [ 56.001882][ T479] mmap_region+0xed0/0x2140 [ 56.001903][ T479] ? __cfi_mmap_region+0x10/0x10 [ 56.007989][ T472] RDX: 0000000000000000 RSI: 0000000020b35fff RDI: 0000000020b36000 [ 56.014496][ T479] ? cap_mmap_addr+0x165/0x2e0 [ 56.014522][ T479] ? get_unmapped_area+0x313/0x380 [ 56.014540][ T479] do_mmap+0x7ae/0xcf0 [ 56.019775][ T477] invalid opcode: 0000 [#3] PREEMPT SMP KASAN [ 56.023796][ T479] ? __cfi_do_mmap+0x10/0x10 [ 56.028965][ T477] CPU: 0 PID: 477 Comm: syz.3.18 Tainted: G D 6.1.141-syzkaller-1169945-ge2deb0b42a3a #0 [ 56.033880][ T479] vm_mmap_pgoff+0x1f5/0x3f0 [ 56.038610][ T477] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 56.043433][ T479] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 56.048687][ T477] RIP: 0010:mmap_region+0x1ffd/0x2140 [ 56.053423][ T479] ? __kasan_check_write+0x14/0x20 [ 56.058685][ T477] Code: 80 c1 03 38 c1 0f 8c f8 f9 ff ff 4c 89 f7 49 89 d5 e8 67 10 09 00 4c 89 ea e9 e5 f9 ff ff e8 ca b5 c4 ff 0f 0b e8 c3 b5 c4 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 6a fb ff ff 48 89 df e8 [ 56.064117][ T479] ? fput+0x154/0x1a0 [ 56.068415][ T477] RSP: 0018:ffffc90000db7a60 EFLAGS: 00010293 [ 56.073586][ T479] ? ksys_write+0x1eb/0x240 [ 56.078413][ T477] [ 56.078418][ T477] RAX: ffffffff81ab41ad RBX: 0000000020b36000 RCX: ffff88812087bcc0 [ 56.082893][ T479] ksys_mmap_pgoff+0xf6/0x1d0 [ 56.087890][ T477] RDX: 0000000000000000 RSI: 0000000020b35fff RDI: 0000000020b36000 [ 56.095927][ T479] __x64_sys_mmap+0xfa/0x110 [ 56.100744][ T477] RBP: ffffc90000db7c50 R08: ffff88812087bcc0 R09: 0000000000000003 [ 56.105841][ T479] x64_sys_call+0x8fd/0x9a0 [ 56.109874][ T477] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000020b36000 [ 56.115908][ T479] do_syscall_64+0x4c/0xa0 [ 56.120641][ T477] R13: 0000000020b35fff R14: dffffc0000000000 R15: ffff88811a93c000 [ 56.131988][ T479] ? clear_bhb_loop+0x30/0x80 [ 56.136905][ T477] FS: 00007efc77d0d6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 56.146950][ T479] ? clear_bhb_loop+0x30/0x80 [ 56.152038][ T477] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.157557][ T479] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.162647][ T477] CR2: 00007fdef60bdd30 CR3: 000000012120a000 CR4: 00000000003506b0 [ 56.182313][ T479] RIP: 0033:0x7fe4bd579eb9 [ 56.186303][ T477] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.192336][ T479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.196806][ T477] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.199107][ T479] RSP: 002b:00007fe4bd3ff038 EFLAGS: 00000246 [ 56.207050][ T477] Call Trace: [ 56.207056][ T477] [ 56.211700][ T479] ORIG_RAX: 0000000000000009 [ 56.219646][ T477] ? __cfi_mmap_region+0x10/0x10 [ 56.224199][ T479] RAX: ffffffffffffffda RBX: 00007fe4bd715f80 RCX: 00007fe4bd579eb9 [ 56.232319][ T477] ? cap_mmap_addr+0x165/0x2e0 [ 56.236790][ T479] RDX: 000000000200000f RSI: 0000000000b36000 RDI: 0000000020000000 [ 56.244907][ T477] ? get_unmapped_area+0x313/0x380 [ 56.249302][ T479] RBP: 00007fe4bd3ff090 R08: ffffffffffffffff R09: 0000000000000000 [ 56.257372][ T477] do_mmap+0x7ae/0xcf0 [ 56.262029][ T479] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000001 [ 56.270957][ T477] ? __cfi_do_mmap+0x10/0x10 [ 56.275602][ T479] R13: 0000000000000001 R14: 00007fe4bd715f80 R15: 00007ffd467d58d8 [ 56.282245][ T477] vm_mmap_pgoff+0x1f5/0x3f0 [ 56.288133][ T479] [ 56.296077][ T477] ? __cfi_vm_mmap_pgoff+0x10/0x10 [ 56.301934][ T470] Code: 80 c1 03 38 c1 0f 8c f8 f9 ff ff 4c 89 f7 49 89 d5 e8 67 10 09 00 4c 89 ea e9 e5 f9 ff ff e8 ca b5 c4 ff 0f 0b e8 c3 b5 c4 ff <0f> 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 6a fb ff ff 48 89 df e8 [ 56.308417][ T477] ? __kasan_check_write+0x14/0x20 [ 56.308442][ T477] ? fput+0x154/0x1a0 [ 56.308456][ T477] ? ksys_write+0x1eb/0x240 [ 56.335583][ T470] RSP: 0018:ffffc90000d57a60 EFLAGS: 00010293 [ 56.336589][ T477] ksys_mmap_pgoff+0xf6/0x1d0 [ 56.342775][ T470] [ 56.346155][ T477] __x64_sys_mmap+0xfa/0x110 [ 56.346175][ T477] x64_sys_call+0x8fd/0x9a0 [ 56.346191][ T477] do_syscall_64+0x4c/0xa0 [ 56.349472][ T470] RAX: ffffffff81ab41ad RBX: 0000000020b36000 RCX: ffff88812d0d8000 [ 56.353846][ T477] ? clear_bhb_loop+0x30/0x80 [ 56.353866][ T477] ? clear_bhb_loop+0x30/0x80 [ 56.359248][ T470] RDX: 0000000000000000 RSI: 0000000020b35fff RDI: 0000000020b36000 [ 56.367466][ T477] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 56.367488][ T477] RIP: 0033:0x7efc76f79eb9 [ 56.367507][ T477] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 56.372595][ T470] RBP: ffffc90000d57c50 R08: ffff88812d0d8000 R09: 0000000000000003 [ 56.380392][ T477] RSP: 002b:00007efc77d0d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 56.380417][ T477] RAX: ffffffffffffffda RBX: 00007efc77115f80 RCX: 00007efc76f79eb9 [ 56.380428][ T477] RDX: 000000000200000f RSI: 0000000000b36000 RDI: 0000000020000000 [ 56.380437][ T477] RBP: 00007efc77d0d090 R08: ffffffffffffffff R09: 0000000000000000 [ 56.380446][ T477] R10: 0000000004008032 R11: 0000000000000246 R12: 0000000000000001 [ 56.380455][ T477] R13: 0000000000000001 R14: 00007efc77115f80 R15: 00007ffe622707a8 [ 56.380467][ T477] [ 56.386008][ T470] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000020b36000 [ 56.393530][ T477] Modules linked in: [ 56.397763][ T470] R13: 0000000020b35fff R14: dffffc0000000000 R15: ffff88812e77de00 [ 56.418341][ T472] RBP: ffffc90000d57c50 R08: ffff88812d0d8000 R09: 0000000000000003 [ 56.418362][ T472] R10: 0000000000000003 R11: 0000000000000000 R12: 0000000020b36000 [ 56.418373][ T472] R13: 0000000020b35fff R14: dffffc0000000000 R15: ffff88812e77de00 [ 56.418385][ T472] FS: 00007fd02fb006c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 56.424484][ T470] FS: 00007efd61f856c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 56.431115][ T472] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.453509][ T470] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.456488][ T472] CR2: 00007fdef60bdd30 CR3: 00000001211cb000 CR4: 00000000003506b0 [ 56.464925][ T470] CR2: 000000c002609505 CR3: 000000012106c000 CR4: 00000000003506a0 [ 56.477694][ T472] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.477711][ T472] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.477723][ T472] Kernel panic - not syncing: Fatal exception [ 56.477943][ T472] Kernel Offset: disabled [ 56.723075][ T472] Rebooting in 86400 seconds..