1.190455][ T7521] ? ovl_d_real+0x107/0x3e0 [ 441.194956][ T7521] ovl_splice_read+0x1a5/0x670 [ 441.199732][ T7521] ? ovl_splice_write+0x490/0x490 [ 441.204746][ T7521] ? vfs_splice_read+0x24d/0x3b0 [ 441.209757][ T7521] ? ovl_splice_write+0x490/0x490 [ 441.214767][ T7521] splice_direct_to_actor+0x2c4/0x9e0 [ 441.220137][ T7521] ? direct_file_splice_eof+0xb0/0xb0 [ 441.225507][ T7521] ? warn_unsupported+0xc0/0xc0 [ 441.230380][ T7521] ? fsnotify_perm+0x63/0x5a0 [ 441.235317][ T7521] ? security_file_permission+0x79/0xa0 [ 441.240857][ T7521] do_splice_direct+0x2ac/0x3f0 [ 441.246049][ T7521] ? splice_direct_to_actor+0x9e0/0x9e0 [ 441.251667][ T7521] ? rcu_read_lock_any_held+0xb7/0x160 [ 441.257223][ T7521] ? do_splice_direct+0x3f0/0x3f0 [ 441.262441][ T7521] do_sendfile+0x623/0x1070 [ 441.266957][ T7521] ? do_pwritev+0x360/0x360 [ 441.271801][ T7521] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 441.278043][ T7521] __se_sys_sendfile64+0x17c/0x1e0 [ 441.283259][ T7521] ? __x64_sys_sendfile64+0xb0/0xb0 [ 441.288465][ T7521] ? syscall_enter_from_user_mode+0x32/0x230 [ 441.294458][ T7521] ? lockdep_hardirqs_on+0x98/0x140 [ 441.299751][ T7521] ? syscall_enter_from_user_mode+0x32/0x230 [ 441.305730][ T7521] do_syscall_64+0x41/0xc0 [ 441.310330][ T7521] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 441.316405][ T7521] RIP: 0033:0x7f4c3ea8c389 [ 441.320825][ T7521] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 441.341078][ T7521] RSP: 002b:00007f4c3f833168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 441.349784][ T7521] RAX: ffffffffffffffda RBX: 00007f4c3ebabf80 RCX: 00007f4c3ea8c389 [ 441.357751][ T7521] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 441.365826][ T7521] RBP: 00007f4c3f8331d0 R08: 0000000000000000 R09: 0000000000000000 [ 441.373799][ T7521] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 441.381776][ T7521] R13: 00007ffdd927bc9f R14: 00007f4c3f833300 R15: 0000000000022000 [ 441.390226][ T7521] [ 441.447812][ T27] audit: type=1804 audit(1688295748.296:901): pid=7523 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2834565485/syzkaller.Rb7NwJ/899/bus/file0" dev="overlay" ino=1939 res=1 errno=0 [ 441.452762][ T7523] FAULT_INJECTION: forcing a failure. [ 441.452762][ T7523] name failslab, interval 1, probability 0, space 0, times 0 [ 441.486896][ T7523] CPU: 0 PID: 7523 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-10099-g0ed645e2a86c #0 [ 441.496901][ T7523] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 441.507328][ T7523] Call Trace: [ 441.510692][ T7523] [ 441.513622][ T7523] dump_stack_lvl+0x1e7/0x2d0 [ 441.518667][ T7523] ? nf_tcp_handle_invalid+0x650/0x650 [ 441.524211][ T7523] ? panic+0x770/0x770 [ 441.528278][ T7523] ? __might_sleep+0xc0/0xc0 [ 441.532872][ T7523] should_fail_ex+0x3aa/0x4e0 [ 441.537630][ T7523] should_failslab+0x9/0x20 [ 441.542215][ T7523] slab_pre_alloc_hook+0x59/0x2b0 [ 441.547245][ T7523] kmem_cache_alloc+0x52/0x300 [ 441.552217][ T7523] ? security_file_alloc+0x28/0x120 [ 441.557644][ T7523] security_file_alloc+0x28/0x120 [ 441.562685][ T7523] init_file+0xa5/0x220 [ 441.566954][ T7523] alloc_empty_backing_file+0x67/0xe0 [ 441.572324][ T7523] backing_file_open+0x26/0x100 [ 441.577184][ T7523] ovl_open_realfile+0x1f6/0x350 [ 441.582219][ T7523] ovl_real_fdget_meta+0x3be/0x4b0 [ 441.587505][ T7523] ? ovl_aio_request_cache_destroy+0x20/0x20 [ 441.593480][ T7523] ? __asan_memset+0x23/0x40 [ 441.598088][ T7523] ? ovl_d_real+0x107/0x3e0 [ 441.602876][ T7523] ovl_splice_read+0x1a5/0x670 [ 441.607907][ T7523] ? ovl_splice_write+0x490/0x490 [ 441.613036][ T7523] ? vfs_splice_read+0x24d/0x3b0 [ 441.618059][ T7523] ? ovl_splice_write+0x490/0x490 [ 441.623172][ T7523] splice_direct_to_actor+0x2c4/0x9e0 [ 441.628549][ T7523] ? direct_file_splice_eof+0xb0/0xb0 [ 441.634054][ T7523] ? warn_unsupported+0xc0/0xc0 [ 441.638908][ T7523] ? fsnotify_perm+0x63/0x5a0 [ 441.643584][ T7523] ? security_file_permission+0x79/0xa0 [ 441.649128][ T7523] do_splice_direct+0x2ac/0x3f0 [ 441.653980][ T7523] ? splice_direct_to_actor+0x9e0/0x9e0 [ 441.659526][ T7523] ? rcu_read_lock_any_held+0xb7/0x160 [ 441.665166][ T7523] ? do_splice_direct+0x3f0/0x3f0 [ 441.670199][ T7523] do_sendfile+0x623/0x1070 [ 441.674796][ T7523] ? do_pwritev+0x360/0x360 [ 441.679301][ T7523] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 441.685284][ T7523] __se_sys_sendfile64+0x17c/0x1e0 [ 441.690399][ T7523] ? __x64_sys_sendfile64+0xb0/0xb0 [ 441.695685][ T7523] ? syscall_enter_from_user_mode+0x32/0x230 [ 441.701747][ T7523] ? lockdep_hardirqs_on+0x98/0x140 [ 441.707088][ T7523] ? syscall_enter_from_user_mode+0x32/0x230 [ 441.713148][ T7523] do_syscall_64+0x41/0xc0 [ 441.717645][ T7523] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 441.723544][ T7523] RIP: 0033:0x7f4c3ea8c389 [ 441.728042][ T7523] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 441.747928][ T7523] RSP: 002b:00007f4c3f833168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 441.757143][ T7523] RAX: ffffffffffffffda RBX: 00007f4c3ebabf80 RCX: 00007f4c3ea8c389 [ 441.765294][ T7523] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 441.773432][ T7523] RBP: 00007f4c3f8331d0 R08: 0000000000000000 R09: 0000000000000000 [ 441.781421][ T7523] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 441.789500][ T7523] R13: 00007ffdd927bc9f R14: 00007f4c3f833300 R15: 0000000000022000 [ 441.797575][ T7523] [ 441.846197][ T27] audit: type=1804 audit(1688295748.696:902): pid=7525 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2834565485/syzkaller.Rb7NwJ/900/bus/file0" dev="overlay" ino=1939 res=1 errno=0 [ 441.846821][ T7525] FAULT_INJECTION: forcing a failure. [ 441.846821][ T7525] name failslab, interval 1, probability 0, space 0, times 0 [ 441.884715][ T7525] CPU: 0 PID: 7525 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-10099-g0ed645e2a86c #0 [ 441.894746][ T7525] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 441.904972][ T7525] Call Trace: [ 441.908414][ T7525] [ 441.911344][ T7525] dump_stack_lvl+0x1e7/0x2d0 [ 441.916118][ T7525] ? nf_tcp_handle_invalid+0x650/0x650 [ 441.921751][ T7525] ? panic+0x770/0x770 [ 441.925900][ T7525] ? __might_sleep+0xc0/0xc0 [ 441.930580][ T7525] should_fail_ex+0x3aa/0x4e0 [ 441.935348][ T7525] should_failslab+0x9/0x20 [ 441.940291][ T7525] slab_pre_alloc_hook+0x59/0x2b0 [ 441.945378][ T7525] kmem_cache_alloc+0x52/0x300 [ 441.950226][ T7525] ? security_file_alloc+0x28/0x120 [ 441.955425][ T7525] security_file_alloc+0x28/0x120 [ 441.960695][ T7525] init_file+0xa5/0x220 [ 441.965045][ T7525] alloc_empty_backing_file+0x67/0xe0 [ 441.972162][ T7525] backing_file_open+0x26/0x100 [ 441.977097][ T7525] ovl_open_realfile+0x1f6/0x350 [ 441.982135][ T7525] ovl_real_fdget_meta+0x3be/0x4b0 [ 441.987242][ T7525] ? ovl_aio_request_cache_destroy+0x20/0x20 [ 441.993228][ T7525] ? __asan_memset+0x23/0x40 [ 441.997903][ T7525] ? ovl_d_real+0x107/0x3e0 [ 442.002405][ T7525] ovl_splice_read+0x1a5/0x670 [ 442.007169][ T7525] ? ovl_splice_write+0x490/0x490 [ 442.012276][ T7525] ? vfs_splice_read+0x24d/0x3b0 [ 442.017310][ T7525] ? ovl_splice_write+0x490/0x490 [ 442.022424][ T7525] splice_direct_to_actor+0x2c4/0x9e0 [ 442.027885][ T7525] ? direct_file_splice_eof+0xb0/0xb0 [ 442.033249][ T7525] ? warn_unsupported+0xc0/0xc0 [ 442.038270][ T7525] ? fsnotify_perm+0x63/0x5a0 [ 442.043037][ T7525] ? security_file_permission+0x79/0xa0 [ 442.048664][ T7525] do_splice_direct+0x2ac/0x3f0 [ 442.053773][ T7525] ? splice_direct_to_actor+0x9e0/0x9e0 [ 442.059409][ T7525] ? rcu_read_lock_any_held+0xb7/0x160 [ 442.064941][ T7525] ? do_splice_direct+0x3f0/0x3f0 [ 442.069964][ T7525] do_sendfile+0x623/0x1070 [ 442.074556][ T7525] ? do_pwritev+0x360/0x360 [ 442.079065][ T7525] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 442.085165][ T7525] __se_sys_sendfile64+0x17c/0x1e0 [ 442.090390][ T7525] ? __x64_sys_sendfile64+0xb0/0xb0 [ 442.095856][ T7525] ? syscall_enter_from_user_mode+0x32/0x230 [ 442.101916][ T7525] ? lockdep_hardirqs_on+0x98/0x140 [ 442.107106][ T7525] ? syscall_enter_from_user_mode+0x32/0x230 [ 442.113083][ T7525] do_syscall_64+0x41/0xc0 [ 442.117498][ T7525] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 442.123382][ T7525] RIP: 0033:0x7f4c3ea8c389 [ 442.127798][ T7525] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 442.147746][ T7525] RSP: 002b:00007f4c3f833168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 442.156245][ T7525] RAX: ffffffffffffffda RBX: 00007f4c3ebabf80 RCX: 00007f4c3ea8c389 [ 442.164217][ T7525] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 442.172197][ T7525] RBP: 00007f4c3f8331d0 R08: 0000000000000000 R09: 0000000000000000 [ 442.180293][ T7525] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 442.188253][ T7525] R13: 00007ffdd927bc9f R14: 00007f4c3f833300 R15: 0000000000022000 [ 442.196585][ T7525] [ 442.251428][ T27] audit: type=1804 audit(1688295749.106:903): pid=7527 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2834565485/syzkaller.Rb7NwJ/901/bus/file0" dev="overlay" ino=1939 res=1 errno=0 [ 442.260881][ T7527] FAULT_INJECTION: forcing a failure. [ 442.260881][ T7527] name failslab, interval 1, probability 0, space 0, times 0 [ 442.289867][ T7527] CPU: 0 PID: 7527 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-10099-g0ed645e2a86c #0 [ 442.300136][ T7527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 442.310893][ T7527] Call Trace: [ 442.314195][ T7527] [ 442.317139][ T7527] dump_stack_lvl+0x1e7/0x2d0 [ 442.321833][ T7527] ? nf_tcp_handle_invalid+0x650/0x650 [ 442.327315][ T7527] ? panic+0x770/0x770 [ 442.331393][ T7527] ? __might_sleep+0xc0/0xc0 [ 442.336063][ T7527] should_fail_ex+0x3aa/0x4e0 [ 442.340925][ T7527] should_failslab+0x9/0x20 [ 442.345710][ T7527] slab_pre_alloc_hook+0x59/0x2b0 [ 442.350951][ T7527] kmem_cache_alloc+0x52/0x300 [ 442.355981][ T7527] ? security_file_alloc+0x28/0x120 [ 442.361380][ T7527] security_file_alloc+0x28/0x120 [ 442.366408][ T7527] init_file+0xa5/0x220 [ 442.370649][ T7527] alloc_empty_backing_file+0x67/0xe0 [ 442.376188][ T7527] backing_file_open+0x26/0x100 [ 442.381040][ T7527] ovl_open_realfile+0x1f6/0x350 [ 442.385976][ T7527] ovl_real_fdget_meta+0x3be/0x4b0 [ 442.391426][ T7527] ? ovl_aio_request_cache_destroy+0x20/0x20 [ 442.397489][ T7527] ? __asan_memset+0x23/0x40 [ 442.402078][ T7527] ? ovl_d_real+0x107/0x3e0 [ 442.406748][ T7527] ovl_splice_read+0x1a5/0x670 [ 442.411513][ T7527] ? ovl_splice_write+0x490/0x490 [ 442.416551][ T7527] ? vfs_splice_read+0x24d/0x3b0 [ 442.421677][ T7527] ? ovl_splice_write+0x490/0x490 [ 442.426692][ T7527] splice_direct_to_actor+0x2c4/0x9e0 [ 442.432183][ T7527] ? direct_file_splice_eof+0xb0/0xb0 [ 442.437801][ T7527] ? warn_unsupported+0xc0/0xc0 [ 442.442646][ T7527] ? fsnotify_perm+0x63/0x5a0 [ 442.447322][ T7527] ? security_file_permission+0x79/0xa0 [ 442.452889][ T7527] do_splice_direct+0x2ac/0x3f0 [ 442.457739][ T7527] ? splice_direct_to_actor+0x9e0/0x9e0 [ 442.463269][ T7527] ? rcu_read_lock_any_held+0xb7/0x160 [ 442.468731][ T7527] ? do_splice_direct+0x3f0/0x3f0 [ 442.473854][ T7527] do_sendfile+0x623/0x1070 [ 442.478533][ T7527] ? do_pwritev+0x360/0x360 [ 442.483379][ T7527] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 442.489352][ T7527] __se_sys_sendfile64+0x17c/0x1e0 [ 442.494553][ T7527] ? __x64_sys_sendfile64+0xb0/0xb0 [ 442.499832][ T7527] ? syscall_enter_from_user_mode+0x32/0x230 [ 442.505884][ T7527] ? lockdep_hardirqs_on+0x98/0x140 [ 442.511337][ T7527] ? syscall_enter_from_user_mode+0x32/0x230 [ 442.517390][ T7527] do_syscall_64+0x41/0xc0 [ 442.521797][ T7527] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 442.527681][ T7527] RIP: 0033:0x7f4c3ea8c389 [ 442.532093][ T7527] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 442.552043][ T7527] RSP: 002b:00007f4c3f833168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 442.560742][ T7527] RAX: ffffffffffffffda RBX: 00007f4c3ebabf80 RCX: 00007f4c3ea8c389 [ 442.568981][ T7527] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 442.576952][ T7527] RBP: 00007f4c3f8331d0 R08: 0000000000000000 R09: 0000000000000000 [ 442.585006][ T7527] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 442.593158][ T7527] R13: 00007ffdd927bc9f R14: 00007f4c3f833300 R15: 0000000000022000 [ 442.601316][ T7527] [ 442.667541][ T27] audit: type=1804 audit(1688295749.516:904): pid=7529 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2834565485/syzkaller.Rb7NwJ/902/bus/file0" dev="overlay" ino=1939 res=1 errno=0 [ 442.668296][ T7529] FAULT_INJECTION: forcing a failure. [ 442.668296][ T7529] name failslab, interval 1, probability 0, space 0, times 0 [ 442.705585][ T7529] CPU: 0 PID: 7529 Comm: syz-executor.0 Not tainted 6.4.0-syzkaller-10099-g0ed645e2a86c #0 [ 442.715771][ T7529] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 442.726091][ T7529] Call Trace: [ 442.729381][ T7529] [ 442.732407][ T7529] dump_stack_lvl+0x1e7/0x2d0 [ 442.737095][ T7529] ? nf_tcp_handle_invalid+0x650/0x650 [ 442.742562][ T7529] ? panic+0x770/0x770 [ 442.746629][ T7529] ? __might_sleep+0xc0/0xc0 [ 442.751322][ T7529] should_fail_ex+0x3aa/0x4e0 [ 442.756231][ T7529] should_failslab+0x9/0x20 [ 442.760821][ T7529] slab_pre_alloc_hook+0x59/0x2b0 [ 442.765843][ T7529] kmem_cache_alloc+0x52/0x300 [ 442.770691][ T7529] ? security_file_alloc+0x28/0x120 [ 442.775991][ T7529] security_file_alloc+0x28/0x120 [ 442.781111][ T7529] init_file+0xa5/0x220 [ 442.785315][ T7529] alloc_empty_backing_file+0x67/0xe0 [ 442.790694][ T7529] backing_file_open+0x26/0x100 [ 442.795558][ T7529] ovl_open_realfile+0x1f6/0x350 [ 442.800598][ T7529] ovl_real_fdget_meta+0x3be/0x4b0 [ 442.805713][ T7529] ? ovl_aio_request_cache_destroy+0x20/0x20 [ 442.811694][ T7529] ? __asan_memset+0x23/0x40 [ 442.816365][ T7529] ? ovl_d_real+0x107/0x3e0 [ 442.821035][ T7529] ovl_splice_read+0x1a5/0x670 [ 442.825808][ T7529] ? ovl_splice_write+0x490/0x490 [ 442.830832][ T7529] ? vfs_splice_read+0x24d/0x3b0 [ 442.835965][ T7529] ? ovl_splice_write+0x490/0x490 [ 442.841006][ T7529] splice_direct_to_actor+0x2c4/0x9e0 [ 442.846651][ T7529] ? direct_file_splice_eof+0xb0/0xb0 [ 442.852104][ T7529] ? warn_unsupported+0xc0/0xc0 [ 442.856953][ T7529] ? fsnotify_perm+0x63/0x5a0 [ 442.861806][ T7529] ? security_file_permission+0x79/0xa0 [ 442.867360][ T7529] do_splice_direct+0x2ac/0x3f0 [ 442.872208][ T7529] ? splice_direct_to_actor+0x9e0/0x9e0 [ 442.877747][ T7529] ? rcu_read_lock_any_held+0xb7/0x160 [ 442.883251][ T7529] ? do_splice_direct+0x3f0/0x3f0 [ 442.888358][ T7529] do_sendfile+0x623/0x1070 [ 442.892952][ T7529] ? do_pwritev+0x360/0x360 [ 442.897472][ T7529] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 442.904138][ T7529] __se_sys_sendfile64+0x17c/0x1e0 [ 442.909259][ T7529] ? __x64_sys_sendfile64+0xb0/0xb0 [ 442.914568][ T7529] ? syscall_enter_from_user_mode+0x32/0x230 [ 442.920605][ T7529] ? lockdep_hardirqs_on+0x98/0x140 [ 442.925814][ T7529] ? syscall_enter_from_user_mode+0x32/0x230 [ 442.931976][ T7529] do_syscall_64+0x41/0xc0 [ 442.936483][ T7529] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 442.942657][ T7529] RIP: 0033:0x7f4c3ea8c389 [ 442.947259][ T7529] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 f1 19 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b8 ff ff ff f7 d8 64 89 01 48 [ 442.967123][ T7529] RSP: 002b:00007f4c3f833168 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 442.975637][ T7529] RAX: ffffffffffffffda RBX: 00007f4c3ebabf80 RCX: 00007f4c3ea8c389 [ 442.983654][ T7529] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 442.991632][ T7529] RBP: 00007f4c3f8331d0 R08: 0000000000000000 R09: 0000000000000000 [ 442.999861][ T7529] R10: 000000007ffff000 R11: 0000000000000246 R12: 0000000000000001 [ 443.007922][ T7529] R13: 00007ffdd927bc9f R14: 00007f4c3f833300 R15: 0000000000022000 [ 443.016073][ T7529] [ 443.299023][ T41] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.339679][ T41] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.377582][ T41] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.438590][ T41] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.268612][ T41] hsr_slave_0: left promiscuous mode [ 444.274713][ T41] hsr_slave_1: left promiscuous mode [ 444.282529][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 444.290501][ T41] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 444.301172][ T41] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 444.308771][ T41] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 444.318490][ T41] bridge_slave_1: left allmulticast mode [ 444.324614][ T41] bridge_slave_1: left promiscuous mode [ 444.330772][ T41] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.339782][ T41] bridge_slave_0: left allmulticast mode [ 444.345630][ T41] bridge_slave_0: left promiscuous mode [ 444.351800][ T41] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.365685][ T41] veth1_macvtap: left promiscuous mode [ 444.371572][ T41] veth0_macvtap: left promiscuous mode [ 444.377293][ T41] veth1_vlan: left promiscuous mode [ 444.383103][ T41] veth0_vlan: left promiscuous mode [ 444.517388][ T41] team0 (unregistering): Port device team_slave_1 removed [ 444.530955][ T41] team0 (unregistering): Port device team_slave_0 removed [ 444.542585][ T41] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 444.555790][ T41] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 444.602135][ T41] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.1.158' (ECDSA) to the list of known hosts. [ 446.517305][ T27] audit: type=1804 audit(1688295753.366:905): pid=7637 uid=0 auid=4294967295 ses=4294967295 subj=_ op=invalid_pcr cause=ToMToU comm="syz-executor117" name="/root/bus/file0" dev="overlay" ino=1946 res=1 errno=0 [ 446.517992][ T7637] FAULT_INJECTION: forcing a failure. [ 446.517992][ T7637] name failslab, interval 1, probability 0, space 0, times 0 [ 446.551456][ T7637] CPU: 1 PID: 7637 Comm: syz-executor117 Not tainted 6.4.0-syzkaller-10099-g0ed645e2a86c #0 [ 446.561816][ T7637] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/27/2023 [ 446.571901][ T7637] Call Trace: [ 446.575550][ T7637] [ 446.578500][ T7637] dump_stack_lvl+0x1e7/0x2d0 [ 446.583269][ T7637] ? nf_tcp_handle_invalid+0x650/0x650 [ 446.588763][ T7637] ? panic+0x770/0x770 [ 446.593605][ T7637] ? __might_sleep+0xc0/0xc0 [ 446.599193][ T7637] should_fail_ex+0x3aa/0x4e0 [ 446.604075][ T7637] should_failslab+0x9/0x20 [ 446.608783][ T7637] slab_pre_alloc_hook+0x59/0x2b0 [ 446.613932][ T7637] kmem_cache_alloc+0x52/0x300 [ 446.618733][ T7637] ? security_file_alloc+0x28/0x120 [ 446.623967][ T7637] security_file_alloc+0x28/0x120 [ 446.629024][ T7637] init_file+0xa5/0x220 [ 446.633348][ T7637] alloc_empty_backing_file+0x67/0xe0 [ 446.638844][ T7637] backing_file_open+0x26/0x100 [ 446.643729][ T7637] ovl_open_realfile+0x1f6/0x350 [ 446.648707][ T7637] ovl_real_fdget_meta+0x3be/0x4b0 [ 446.653856][ T7637] ? ovl_aio_request_cache_destroy+0x20/0x20 [ 446.660132][ T7637] ? __asan_memset+0x23/0x40 [ 446.664761][ T7637] ? ovl_d_real+0x107/0x3e0 [ 446.669308][ T7637] ovl_splice_read+0x1a5/0x670 [ 446.674113][ T7637] ? ovl_splice_write+0x490/0x490 [ 446.679166][ T7637] ? vfs_splice_read+0x24d/0x3b0 [ 446.684136][ T7637] ? ovl_splice_write+0x490/0x490 [ 446.689201][ T7637] splice_direct_to_actor+0x2c4/0x9e0 [ 446.694621][ T7637] ? direct_file_splice_eof+0xb0/0xb0 [ 446.700024][ T7637] ? warn_unsupported+0xc0/0xc0 [ 446.705078][ T7637] ? fsnotify_perm+0x63/0x5a0 [ 446.709781][ T7637] ? security_file_permission+0x79/0xa0 [ 446.715359][ T7637] do_splice_direct+0x2ac/0x3f0 [ 446.720333][ T7637] ? splice_direct_to_actor+0x9e0/0x9e0 [ 446.725907][ T7637] ? rcu_read_lock_any_held+0xb7/0x160 [ 446.731491][ T7637] ? do_splice_direct+0x3f0/0x3f0 [ 446.736615][ T7637] do_sendfile+0x623/0x1070 [ 446.741156][ T7637] ? do_pwritev+0x360/0x360 [ 446.745701][ T7637] ? lockdep_hardirqs_on_prepare+0x43c/0x7a0 [ 446.751719][ T7637] __se_sys_sendfile64+0x17c/0x1e0 [ 446.756875][ T7637] ? __x64_sys_sendfile64+0xb0/0xb0 [ 446.762455][ T7637] ? syscall_enter_from_user_mode+0x32/0x230 [ 446.768477][ T7637] ? lockdep_hardirqs_on+0x98/0x140 [ 446.773791][ T7637] ? syscall_enter_from_user_mode+0x32/0x230 [ 446.779898][ T7637] do_syscall_64+0x41/0xc0 [ 446.784342][ T7637] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 446.790266][ T7637] RIP: 0033:0x7fb6d3e5f7a9 [ 446.794878][ T7637] Code: 28 c3 e8 2a 14 00 00 66 2e 0f 1f 84 00 00 00 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 446.815116][ T7637] RSP: 002b:00007fff