Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. 2024/03/17 14:18:35 ignoring optional flag "sandboxArg"="0" 2024/03/17 14:18:35 parsed 1 programs [ 39.734826][ T30] audit: type=1400 audit(1710685115.251:157): avc: denied { mounton } for pid=339 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 39.759725][ T30] audit: type=1400 audit(1710685115.251:158): avc: denied { mount } for pid=339 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2024/03/17 14:18:35 executed programs: 0 [ 39.796645][ T30] audit: type=1400 audit(1710685115.321:159): avc: denied { unlink } for pid=339 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 39.828192][ T339] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 39.885161][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.892055][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.899571][ T345] device bridge_slave_0 entered promiscuous mode [ 39.906548][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.913742][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.921514][ T345] device bridge_slave_1 entered promiscuous mode [ 39.965624][ T30] audit: type=1400 audit(1710685115.481:160): avc: denied { write } for pid=345 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.971288][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.986286][ T30] audit: type=1400 audit(1710685115.481:161): avc: denied { read } for pid=345 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 39.993186][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.020968][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.027785][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.047299][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.054654][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.062338][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 40.069660][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.087271][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.095642][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.102884][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.110063][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.118182][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.125011][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.132448][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.140271][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.152489][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.163723][ T345] device veth0_vlan entered promiscuous mode [ 40.170590][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.179595][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.186890][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.198419][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.207285][ T345] device veth1_macvtap entered promiscuous mode [ 40.216028][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.226208][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.242224][ T30] audit: type=1400 audit(1710685115.761:162): avc: denied { mounton } for pid=345 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 40.276616][ T352] FAULT_INJECTION: forcing a failure. [ 40.276616][ T352] name failslab, interval 1, probability 0, space 0, times 1 [ 40.289243][ T352] CPU: 0 PID: 352 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 40.299504][ T352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 40.309387][ T352] Call Trace: [ 40.312514][ T352] [ 40.315527][ T352] dump_stack_lvl+0x151/0x1b7 [ 40.320026][ T352] ? io_uring_drop_tctx_refs+0x190/0x190 [ 40.325500][ T352] dump_stack+0x15/0x17 [ 40.329750][ T352] should_fail+0x3c6/0x510 [ 40.334089][ T352] __should_failslab+0xa4/0xe0 [ 40.338779][ T352] ? anon_vma_clone+0x9a/0x500 [ 40.343368][ T352] should_failslab+0x9/0x20 [ 40.347791][ T352] slab_pre_alloc_hook+0x37/0xd0 [ 40.352576][ T352] ? anon_vma_clone+0x9a/0x500 [ 40.357177][ T352] kmem_cache_alloc+0x44/0x200 [ 40.361797][ T352] anon_vma_clone+0x9a/0x500 [ 40.366196][ T352] anon_vma_fork+0x91/0x4e0 [ 40.370527][ T352] ? anon_vma_name+0x43/0x70 [ 40.375738][ T352] ? vm_area_dup+0x17a/0x230 [ 40.380159][ T352] copy_mm+0xa3a/0x13e0 [ 40.384159][ T352] ? copy_signal+0x610/0x610 [ 40.388581][ T352] ? __init_rwsem+0xd6/0x1c0 [ 40.393005][ T352] ? copy_signal+0x4e3/0x610 [ 40.397434][ T352] copy_process+0x1149/0x3290 [ 40.401948][ T352] ? proc_fail_nth_write+0x20b/0x290 [ 40.407073][ T352] ? fsnotify_perm+0x6a/0x5d0 [ 40.411592][ T352] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 40.416533][ T352] ? vfs_write+0x9ec/0x1110 [ 40.420869][ T352] kernel_clone+0x21e/0x9e0 [ 40.425206][ T352] ? file_end_write+0x1c0/0x1c0 [ 40.429892][ T352] ? create_io_thread+0x1e0/0x1e0 [ 40.434770][ T352] ? mutex_unlock+0xb2/0x260 [ 40.439188][ T352] ? __mutex_lock_slowpath+0x10/0x10 [ 40.444478][ T352] __x64_sys_clone+0x23f/0x290 [ 40.449171][ T352] ? __do_sys_vfork+0x130/0x130 [ 40.453859][ T352] ? ksys_write+0x260/0x2c0 [ 40.458300][ T352] ? debug_smp_processor_id+0x17/0x20 [ 40.463578][ T352] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 40.469485][ T352] ? exit_to_user_mode_prepare+0x39/0xa0 [ 40.474954][ T352] do_syscall_64+0x3d/0xb0 [ 40.479290][ T352] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.485115][ T352] RIP: 0033:0x7f79d2973ae9 [ 40.489367][ T352] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 40.508980][ T352] RSP: 002b:00007f79d24f6078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 40.517331][ T352] RAX: ffffffffffffffda RBX: 00007f79d2a92f80 RCX: 00007f79d2973ae9 [ 40.525234][ T352] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 40.533135][ T352] RBP: 00007f79d24f6120 R08: 0000000000000000 R09: 0000000000000000 [ 40.541205][ T352] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 40.549017][ T352] R13: 000000000000000b R14: 00007f79d2a92f80 R15: 00007fff93f19368 [ 40.556825][ T352] [ 40.566101][ T30] audit: type=1400 audit(1710685116.081:163): avc: denied { sys_admin } for pid=351 comm="syz-executor.0" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 40.598112][ T356] FAULT_INJECTION: forcing a failure. [ 40.598112][ T356] name failslab, interval 1, probability 0, space 0, times 0 [ 40.610852][ T356] CPU: 0 PID: 356 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 40.621010][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 40.630906][ T356] Call Trace: [ 40.634033][ T356] [ 40.636810][ T356] dump_stack_lvl+0x151/0x1b7 [ 40.641325][ T356] ? io_uring_drop_tctx_refs+0x190/0x190 [ 40.646797][ T356] dump_stack+0x15/0x17 [ 40.650792][ T356] should_fail+0x3c6/0x510 [ 40.655326][ T356] __should_failslab+0xa4/0xe0 [ 40.659919][ T356] ? anon_vma_fork+0xf7/0x4e0 [ 40.664811][ T356] should_failslab+0x9/0x20 [ 40.669206][ T356] slab_pre_alloc_hook+0x37/0xd0 [ 40.673990][ T356] ? anon_vma_fork+0xf7/0x4e0 [ 40.678585][ T356] kmem_cache_alloc+0x44/0x200 [ 40.683182][ T356] anon_vma_fork+0xf7/0x4e0 [ 40.687610][ T356] ? anon_vma_name+0x43/0x70 [ 40.692029][ T356] ? vm_area_dup+0x17a/0x230 [ 40.696455][ T356] copy_mm+0xa3a/0x13e0 [ 40.700455][ T356] ? copy_signal+0x610/0x610 [ 40.704876][ T356] ? __init_rwsem+0xd6/0x1c0 [ 40.709424][ T356] ? copy_signal+0x4e3/0x610 [ 40.713847][ T356] copy_process+0x1149/0x3290 [ 40.718544][ T356] ? proc_fail_nth_write+0x20b/0x290 [ 40.723654][ T356] ? fsnotify_perm+0x6a/0x5d0 [ 40.728176][ T356] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 40.733113][ T356] ? vfs_write+0x9ec/0x1110 [ 40.737454][ T356] kernel_clone+0x21e/0x9e0 [ 40.741885][ T356] ? file_end_write+0x1c0/0x1c0 [ 40.746575][ T356] ? create_io_thread+0x1e0/0x1e0 [ 40.751422][ T356] ? mutex_unlock+0xb2/0x260 [ 40.755852][ T356] ? __mutex_lock_slowpath+0x10/0x10 [ 40.761061][ T356] __x64_sys_clone+0x23f/0x290 [ 40.765658][ T356] ? __do_sys_vfork+0x130/0x130 [ 40.770430][ T356] ? ksys_write+0x260/0x2c0 [ 40.774770][ T356] ? debug_smp_processor_id+0x17/0x20 [ 40.780063][ T356] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 40.785966][ T356] ? exit_to_user_mode_prepare+0x39/0xa0 [ 40.791434][ T356] do_syscall_64+0x3d/0xb0 [ 40.795770][ T356] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.801508][ T356] RIP: 0033:0x7f79d2973ae9 [ 40.805757][ T356] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 40.825195][ T356] RSP: 002b:00007f79d24f6078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 40.833440][ T356] RAX: ffffffffffffffda RBX: 00007f79d2a92f80 RCX: 00007f79d2973ae9 [ 40.841260][ T356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 40.849063][ T356] RBP: 00007f79d24f6120 R08: 0000000000000000 R09: 0000000000000000 [ 40.856876][ T356] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 40.864772][ T356] R13: 000000000000000b R14: 00007f79d2a92f80 R15: 00007fff93f19368 [ 40.872590][ T356] [ 40.876054][ T356] ------------[ cut here ]------------ [ 40.881517][ T356] refcount_t: underflow; use-after-free. [ 40.887197][ T356] WARNING: CPU: 1 PID: 356 at lib/refcount.c:28 refcount_warn_saturate+0x158/0x1a0 [ 40.896571][ T356] Modules linked in: [ 40.900270][ T356] CPU: 1 PID: 356 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 40.910489][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 40.921536][ T356] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 40.927637][ T356] Code: 04 01 48 c7 c7 c0 c3 82 85 e8 e4 b4 dc fe 0f 0b eb 8b e8 3b 5d 0b ff c6 05 b3 a4 3e 04 01 48 c7 c7 20 c4 82 85 e8 c8 b4 dc fe <0f> 0b e9 6c ff ff ff e8 1c 5d 0b ff c6 05 95 a4 3e 04 01 48 c7 c7 [ 40.947654][ T356] RSP: 0018:ffffc90000d67968 EFLAGS: 00010246 [ 40.953641][ T356] RAX: 52114998a0b32900 RBX: 0000000000000003 RCX: ffff88810bbf13c0 [ 40.962632][ T356] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 40.970489][ T356] RBP: ffffc90000d67978 R08: ffffffff81575f25 R09: fffff520001ace55 [ 40.978532][ T356] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110219e01d0 [ 40.986789][ T356] R13: ffff88810cf00e80 R14: 0000000000000003 R15: ffff88810b8efd11 [ 40.994767][ T356] FS: 00007f79d24f66c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 41.004309][ T356] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.011147][ T356] CR2: 0000555555e49430 CR3: 00000001266ad000 CR4: 00000000003506a0 [ 41.019608][ T356] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.027696][ T356] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.035606][ T356] Call Trace: [ 41.038812][ T356] [ 41.041506][ T356] ? show_regs+0x58/0x60 [ 41.045579][ T356] ? __warn+0x160/0x2f0 [ 41.049807][ T356] ? refcount_warn_saturate+0x158/0x1a0 [ 41.055132][ T356] ? report_bug+0x3d9/0x5b0 [ 41.059619][ T356] ? refcount_warn_saturate+0x158/0x1a0 [ 41.065235][ T356] ? handle_bug+0x41/0x70 [ 41.069436][ T356] ? exc_invalid_op+0x1b/0x50 [ 41.073945][ T356] ? asm_exc_invalid_op+0x1b/0x20 [ 41.079204][ T356] ? __wake_up_klogd+0xd5/0x110 [ 41.083999][ T356] ? refcount_warn_saturate+0x158/0x1a0 [ 41.089528][ T356] ? refcount_warn_saturate+0x158/0x1a0 [ 41.095072][ T356] vm_area_free_no_check+0x123/0x130 [ 41.100272][ T356] copy_mm+0xefb/0x13e0 [ 41.104303][ T356] ? copy_signal+0x610/0x610 [ 41.108769][ T356] ? __init_rwsem+0xd6/0x1c0 [ 41.113245][ T356] ? copy_signal+0x4e3/0x610 [ 41.117739][ T356] copy_process+0x1149/0x3290 [ 41.122411][ T356] ? proc_fail_nth_write+0x20b/0x290 [ 41.127736][ T356] ? fsnotify_perm+0x6a/0x5d0 [ 41.132222][ T356] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 41.137331][ T356] ? vfs_write+0x9ec/0x1110 [ 41.141603][ T356] kernel_clone+0x21e/0x9e0 [ 41.145969][ T356] ? file_end_write+0x1c0/0x1c0 [ 41.150618][ T356] ? create_io_thread+0x1e0/0x1e0 [ 41.155563][ T356] ? mutex_unlock+0xb2/0x260 [ 41.160793][ T356] ? __mutex_lock_slowpath+0x10/0x10 [ 41.166128][ T356] __x64_sys_clone+0x23f/0x290 [ 41.170938][ T356] ? __do_sys_vfork+0x130/0x130 [ 41.175939][ T356] ? ksys_write+0x260/0x2c0 [ 41.180437][ T356] ? debug_smp_processor_id+0x17/0x20 [ 41.185741][ T356] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 41.191813][ T356] ? exit_to_user_mode_prepare+0x39/0xa0 [ 41.197309][ T356] do_syscall_64+0x3d/0xb0 [ 41.201537][ T356] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.207250][ T356] RIP: 0033:0x7f79d2973ae9 [ 41.211538][ T356] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.231496][ T356] RSP: 002b:00007f79d24f6078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 41.241078][ T356] RAX: ffffffffffffffda RBX: 00007f79d2a92f80 RCX: 00007f79d2973ae9 [ 41.248932][ T356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 41.256834][ T356] RBP: 00007f79d24f6120 R08: 0000000000000000 R09: 0000000000000000 [ 41.265096][ T356] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 41.272941][ T356] R13: 000000000000000b R14: 00007f79d2a92f80 R15: 00007fff93f19368 [ 41.280763][ T356] [ 41.283556][ T356] ---[ end trace 0dc36dd7126e48bd ]--- [ 41.299670][ T358] FAULT_INJECTION: forcing a failure. [ 41.299670][ T358] name failslab, interval 1, probability 0, space 0, times 0 [ 41.312322][ T358] CPU: 1 PID: 358 Comm: syz-executor.0 Tainted: G W 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 41.324223][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 41.334317][ T358] Call Trace: [ 41.337543][ T358] [ 41.340285][ T358] dump_stack_lvl+0x151/0x1b7 [ 41.344869][ T358] ? io_uring_drop_tctx_refs+0x190/0x190 [ 41.350344][ T358] dump_stack+0x15/0x17 [ 41.354345][ T358] should_fail+0x3c6/0x510 [ 41.358595][ T358] __should_failslab+0xa4/0xe0 [ 41.363458][ T358] ? anon_vma_fork+0xf7/0x4e0 [ 41.367972][ T358] should_failslab+0x9/0x20 [ 41.372383][ T358] slab_pre_alloc_hook+0x37/0xd0 [ 41.377159][ T358] ? anon_vma_fork+0xf7/0x4e0 [ 41.381765][ T358] kmem_cache_alloc+0x44/0x200 [ 41.386361][ T358] anon_vma_fork+0xf7/0x4e0 [ 41.390897][ T358] ? anon_vma_name+0x4c/0x70 [ 41.395383][ T358] ? vm_area_dup+0x17a/0x230 [ 41.399811][ T358] copy_mm+0xa3a/0x13e0 [ 41.403808][ T358] ? copy_signal+0x610/0x610 [ 41.408238][ T358] ? __init_rwsem+0xd6/0x1c0 [ 41.412753][ T358] ? copy_signal+0x4e3/0x610 [ 41.417172][ T358] copy_process+0x1149/0x3290 [ 41.421685][ T358] ? proc_fail_nth_write+0x20b/0x290 [ 41.426809][ T358] ? fsnotify_perm+0x6a/0x5d0 [ 41.431500][ T358] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 41.436700][ T358] ? vfs_write+0x9ec/0x1110 [ 41.441047][ T358] kernel_clone+0x21e/0x9e0 [ 41.445379][ T358] ? file_end_write+0x1c0/0x1c0 [ 41.450066][ T358] ? create_io_thread+0x1e0/0x1e0 [ 41.455011][ T358] ? mutex_unlock+0xb2/0x260 [ 41.459437][ T358] ? __mutex_lock_slowpath+0x10/0x10 [ 41.464558][ T358] __x64_sys_clone+0x23f/0x290 [ 41.469169][ T358] ? __do_sys_vfork+0x130/0x130 [ 41.474020][ T358] ? ksys_write+0x260/0x2c0 [ 41.478535][ T358] ? debug_smp_processor_id+0x17/0x20 [ 41.483745][ T358] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 41.489747][ T358] ? exit_to_user_mode_prepare+0x39/0xa0 [ 41.495384][ T358] do_syscall_64+0x3d/0xb0 [ 41.499637][ T358] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.505457][ T358] RIP: 0033:0x7f79d2973ae9 [ 41.509797][ T358] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.529408][ T358] RSP: 002b:00007f79d24f6078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 41.537741][ T358] RAX: ffffffffffffffda RBX: 00007f79d2a92f80 RCX: 00007f79d2973ae9 [ 41.545551][ T358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 41.553547][ T358] RBP: 00007f79d24f6120 R08: 0000000000000000 R09: 0000000000000000 [ 41.561443][ T358] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 41.569445][ T358] R13: 000000000000000b R14: 00007f79d2a92f80 R15: 00007fff93f19368 [ 41.577353][ T358] [ 41.593902][ T361] FAULT_INJECTION: forcing a failure. [ 41.593902][ T361] name failslab, interval 1, probability 0, space 0, times 0 [ 41.606555][ T361] CPU: 1 PID: 361 Comm: syz-executor.0 Tainted: G W 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 41.618451][ T361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 41.628346][ T361] Call Trace: [ 41.631469][ T361] [ 41.634249][ T361] dump_stack_lvl+0x151/0x1b7 [ 41.638769][ T361] ? io_uring_drop_tctx_refs+0x190/0x190 [ 41.644232][ T361] dump_stack+0x15/0x17 [ 41.648236][ T361] should_fail+0x3c6/0x510 [ 41.652496][ T361] __should_failslab+0xa4/0xe0 [ 41.657091][ T361] ? anon_vma_fork+0xf7/0x4e0 [ 41.661588][ T361] should_failslab+0x9/0x20 [ 41.665937][ T361] slab_pre_alloc_hook+0x37/0xd0 [ 41.670702][ T361] ? anon_vma_fork+0xf7/0x4e0 [ 41.675298][ T361] kmem_cache_alloc+0x44/0x200 [ 41.680005][ T361] anon_vma_fork+0xf7/0x4e0 [ 41.684339][ T361] ? anon_vma_name+0x43/0x70 [ 41.688778][ T361] ? vm_area_dup+0x17a/0x230 [ 41.693197][ T361] copy_mm+0xa3a/0x13e0 [ 41.697201][ T361] ? copy_signal+0x610/0x610 [ 41.701631][ T361] ? __init_rwsem+0xd6/0x1c0 [ 41.706038][ T361] ? copy_signal+0x4e3/0x610 [ 41.710555][ T361] copy_process+0x1149/0x3290 [ 41.715076][ T361] ? proc_fail_nth_write+0x20b/0x290 [ 41.720304][ T361] ? fsnotify_perm+0x6a/0x5d0 [ 41.724818][ T361] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 41.729763][ T361] ? vfs_write+0x9ec/0x1110 [ 41.734186][ T361] kernel_clone+0x21e/0x9e0 [ 41.738529][ T361] ? file_end_write+0x1c0/0x1c0 [ 41.743216][ T361] ? create_io_thread+0x1e0/0x1e0 [ 41.748242][ T361] ? mutex_unlock+0xb2/0x260 [ 41.752665][ T361] ? __mutex_lock_slowpath+0x10/0x10 [ 41.757792][ T361] __x64_sys_clone+0x23f/0x290 [ 41.762393][ T361] ? __do_sys_vfork+0x130/0x130 [ 41.767260][ T361] ? ksys_write+0x260/0x2c0 [ 41.771654][ T361] ? debug_smp_processor_id+0x17/0x20 [ 41.776800][ T361] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 41.782702][ T361] ? exit_to_user_mode_prepare+0x39/0xa0 [ 41.788886][ T361] do_syscall_64+0x3d/0xb0 [ 41.793416][ T361] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.799141][ T361] RIP: 0033:0x7f79d2973ae9 [ 41.803477][ T361] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.823185][ T361] RSP: 002b:00007f79d24f6078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 41.831446][ T361] RAX: ffffffffffffffda RBX: 00007f79d2a92f80 RCX: 00007f79d2973ae9 [ 41.839337][ T361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 41.847217][ T361] RBP: 00007f79d24f6120 R08: 0000000000000000 R09: 0000000000000000 [ 41.855035][ T361] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 41.863400][ T361] R13: 000000000000000b R14: 00007f79d2a92f80 R15: 00007fff93f19368 [ 41.871185][ T361] [ 41.884921][ T363] FAULT_INJECTION: forcing a failure. [ 41.884921][ T363] name failslab, interval 1, probability 0, space 0, times 0 [ 41.897448][ T363] CPU: 1 PID: 363 Comm: syz-executor.0 Tainted: G W 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 41.909114][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 41.919114][ T363] Call Trace: [ 41.922237][ T363] [ 41.925010][ T363] dump_stack_lvl+0x151/0x1b7 [ 41.929539][ T363] ? io_uring_drop_tctx_refs+0x190/0x190 [ 41.935272][ T363] dump_stack+0x15/0x17 [ 41.939297][ T363] should_fail+0x3c6/0x510 [ 41.943548][ T363] __should_failslab+0xa4/0xe0 [ 41.948149][ T363] ? anon_vma_fork+0x1df/0x4e0 [ 41.952905][ T363] should_failslab+0x9/0x20 [ 41.957193][ T363] slab_pre_alloc_hook+0x37/0xd0 [ 41.962138][ T363] ? anon_vma_fork+0x1df/0x4e0 [ 41.967004][ T363] kmem_cache_alloc+0x44/0x200 [ 41.971602][ T363] anon_vma_fork+0x1df/0x4e0 [ 41.976113][ T363] copy_mm+0xa3a/0x13e0 [ 41.980115][ T363] ? copy_signal+0x610/0x610 [ 41.984839][ T363] ? __init_rwsem+0xd6/0x1c0 [ 41.989500][ T363] ? copy_signal+0x4e3/0x610 [ 41.993922][ T363] copy_process+0x1149/0x3290 [ 41.998643][ T363] ? proc_fail_nth_write+0x20b/0x290 [ 42.003768][ T363] ? fsnotify_perm+0x6a/0x5d0 [ 42.008640][ T363] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 42.013673][ T363] ? vfs_write+0x9ec/0x1110 [ 42.018026][ T363] kernel_clone+0x21e/0x9e0 [ 42.022453][ T363] ? file_end_write+0x1c0/0x1c0 [ 42.027349][ T363] ? create_io_thread+0x1e0/0x1e0 [ 42.032215][ T363] ? mutex_unlock+0xb2/0x260 [ 42.036648][ T363] ? __mutex_lock_slowpath+0x10/0x10 [ 42.042018][ T363] __x64_sys_clone+0x23f/0x290 [ 42.046617][ T363] ? __do_sys_vfork+0x130/0x130 [ 42.051312][ T363] ? ksys_write+0x260/0x2c0 [ 42.055642][ T363] ? debug_smp_processor_id+0x17/0x20 [ 42.060944][ T363] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 42.066932][ T363] ? exit_to_user_mode_prepare+0x39/0xa0 [ 42.072395][ T363] do_syscall_64+0x3d/0xb0 [ 42.076665][ T363] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.082449][ T363] RIP: 0033:0x7f79d2973ae9 [ 42.086725][ T363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.106334][ T363] RSP: 002b:00007f79d24f6078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 42.114625][ T363] RAX: ffffffffffffffda RBX: 00007f79d2a92f80 RCX: 00007f79d2973ae9 [ 42.123027][ T363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 42.130838][ T363] RBP: 00007f79d24f6120 R08: 0000000000000000 R09: 0000000000000000 [ 42.138753][ T363] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 42.146563][ T363] R13: 000000000000000b R14: 00007f79d2a92f80 R15: 00007fff93f19368 [ 42.154771][ T363] [ 42.168294][ T365] FAULT_INJECTION: forcing a failure. [ 42.168294][ T365] name failslab, interval 1, probability 0, space 0, times 0 [ 42.181171][ T365] CPU: 0 PID: 365 Comm: syz-executor.0 Tainted: G W 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 42.192719][ T365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 42.202630][ T365] Call Trace: [ 42.205734][ T365] [ 42.208790][ T365] dump_stack_lvl+0x151/0x1b7 [ 42.213286][ T365] ? io_uring_drop_tctx_refs+0x190/0x190 [ 42.218756][ T365] dump_stack+0x15/0x17 [ 42.222745][ T365] should_fail+0x3c6/0x510 [ 42.227001][ T365] __should_failslab+0xa4/0xe0 [ 42.231697][ T365] ? anon_vma_fork+0x1df/0x4e0 [ 42.236438][ T365] should_failslab+0x9/0x20 [ 42.240760][ T365] slab_pre_alloc_hook+0x37/0xd0 [ 42.245529][ T365] ? anon_vma_fork+0x1df/0x4e0 [ 42.250225][ T365] kmem_cache_alloc+0x44/0x200 [ 42.254901][ T365] anon_vma_fork+0x1df/0x4e0 [ 42.259327][ T365] copy_mm+0xa3a/0x13e0 [ 42.263326][ T365] ? copy_signal+0x610/0x610 [ 42.267755][ T365] ? __init_rwsem+0xd6/0x1c0 [ 42.272189][ T365] ? copy_signal+0x4e3/0x610 [ 42.276626][ T365] copy_process+0x1149/0x3290 [ 42.281116][ T365] ? proc_fail_nth_write+0x20b/0x290 [ 42.286246][ T365] ? fsnotify_perm+0x6a/0x5d0 [ 42.290746][ T365] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 42.295698][ T365] ? vfs_write+0x9ec/0x1110 [ 42.300031][ T365] kernel_clone+0x21e/0x9e0 [ 42.304374][ T365] ? file_end_write+0x1c0/0x1c0 [ 42.309147][ T365] ? create_io_thread+0x1e0/0x1e0 [ 42.314004][ T365] ? mutex_unlock+0xb2/0x260 [ 42.318449][ T365] ? __mutex_lock_slowpath+0x10/0x10 [ 42.323555][ T365] __x64_sys_clone+0x23f/0x290 [ 42.328152][ T365] ? __do_sys_vfork+0x130/0x130 [ 42.333131][ T365] ? ksys_write+0x260/0x2c0 [ 42.337539][ T365] ? debug_smp_processor_id+0x17/0x20 [ 42.342876][ T365] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 42.348771][ T365] ? exit_to_user_mode_prepare+0x39/0xa0 [ 42.354460][ T365] do_syscall_64+0x3d/0xb0 [ 42.358786][ T365] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.364620][ T365] RIP: 0033:0x7f79d2973ae9 [ 42.368860][ T365] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.388747][ T365] RSP: 002b:00007f79d24f6078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 42.397503][ T365] RAX: ffffffffffffffda RBX: 00007f79d2a92f80 RCX: 00007f79d2973ae9 [ 42.405498][ T365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 42.413386][ T365] RBP: 00007f79d24f6120 R08: 0000000000000000 R09: 0000000000000000 [ 42.421458][ T365] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 42.429255][ T365] R13: 000000000000000b R14: 00007f79d2a92f80 R15: 00007fff93f19368 [ 42.437074][ T365] [ 42.449708][ T367] general protection fault, probably for non-canonical address 0xdffffc0020000001: 0000 [#1] PREEMPT SMP KASAN [ 42.461278][ T367] KASAN: probably user-memory-access in range [0x0000000100000008-0x000000010000000f] [ 42.470998][ T367] CPU: 0 PID: 367 Comm: syz-executor.0 Tainted: G W 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 42.482546][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/29/2024 [ 42.492526][ T367] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 42.498346][ T367] Code: 00 74 08 4c 89 ef e8 5e 0b 2b ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 30 0b 2b ff 48 89 d8 48 8b 1b 4c [ 42.517974][ T367] RSP: 0018:ffffc90000df78f8 EFLAGS: 00010202 [ 42.523870][ T367] RAX: 0000000100000000 RBX: 0000000100000008 RCX: dffffc0000000000 [ 42.531794][ T367] RDX: ffffffff81a4f280 RSI: ffff88810fe22080 RDI: ffff88810d13f620 [ 42.539599][ T367] RBP: ffffc90000df7960 R08: dffffc0000000000 R09: ffff88810d13f628 [ 42.547410][ T367] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 42.555361][ T367] R13: ffff88810b8ef17c R14: 0000000020000001 R15: ffff88810b8ee998 [ 42.563124][ T367] FS: 00007f79d24f66c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 42.571896][ T367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.578310][ T367] CR2: 00007f79d24f5ff8 CR3: 00000001266a8000 CR4: 00000000003506b0 [ 42.586214][ T367] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.594025][ T367] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.602024][ T367] Call Trace: [ 42.605145][ T367] [ 42.607924][ T367] ? __die_body+0x62/0xb0 [ 42.612088][ T367] ? die_addr+0x9f/0xd0 [ 42.616086][ T367] ? exc_general_protection+0x311/0x4b0 [ 42.621468][ T367] ? asm_exc_general_protection+0x27/0x30 [ 42.627024][ T367] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 42.633268][ T367] ? __rb_insert_augmented+0x91/0x610 [ 42.638474][ T367] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 42.644811][ T367] vma_interval_tree_insert_after+0x2be/0x2d0 [ 42.650899][ T367] copy_mm+0xba2/0x13e0 [ 42.654976][ T367] ? copy_signal+0x610/0x610 [ 42.659403][ T367] ? __init_rwsem+0xd6/0x1c0 [ 42.663825][ T367] ? copy_signal+0x4e3/0x610 [ 42.668255][ T367] copy_process+0x1149/0x3290 [ 42.672770][ T367] ? proc_fail_nth_write+0x20b/0x290 [ 42.677971][ T367] ? fsnotify_perm+0x6a/0x5d0 [ 42.682510][ T367] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 42.687443][ T367] ? vfs_write+0x9ec/0x1110 [ 42.691770][ T367] kernel_clone+0x21e/0x9e0 [ 42.696111][ T367] ? file_end_write+0x1c0/0x1c0 [ 42.700905][ T367] ? create_io_thread+0x1e0/0x1e0 [ 42.705795][ T367] ? mutex_unlock+0xb2/0x260 [ 42.710212][ T367] ? __mutex_lock_slowpath+0x10/0x10 [ 42.715321][ T367] __x64_sys_clone+0x23f/0x290 [ 42.720029][ T367] ? __do_sys_vfork+0x130/0x130 [ 42.724716][ T367] ? ksys_write+0x260/0x2c0 [ 42.729080][ T367] ? debug_smp_processor_id+0x17/0x20 [ 42.734269][ T367] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 42.740161][ T367] ? exit_to_user_mode_prepare+0x39/0xa0 [ 42.745717][ T367] do_syscall_64+0x3d/0xb0 [ 42.749968][ T367] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.755966][ T367] RIP: 0033:0x7f79d2973ae9 [ 42.760227][ T367] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.779660][ T367] RSP: 002b:00007f79d24f6078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 42.787993][ T367] RAX: ffffffffffffffda RBX: 00007f79d2a92f80 RCX: 00007f79d2973ae9 [ 42.795804][ T367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 42.803627][ T367] RBP: 00007f79d24f6120 R08: 0000000000000000 R09: 0000000000000000 [ 42.811511][ T367] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 42.819326][ T367] R13: 000000000000000b R14: 00007f79d2a92f80 R15: 00007fff93f19368 [ 42.827327][ T367] [ 42.830183][ T367] Modules linked in: [ 42.834677][ T367] ---[ end trace 0dc36dd7126e48be ]--- [ 42.840073][ T367] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 42.846193][ T367] Code: 00 74 08 4c 89 ef e8 5e 0b 2b ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 30 0b 2b ff 48 89 d8 48 8b 1b 4c [ 42.866331][ T367] RSP: 0018:ffffc90000df78f8 EFLAGS: 00010202 [ 42.872345][ T367] RAX: 0000000100000000 RBX: 0000000100000008 RCX: dffffc0000000000 [ 42.880476][ T367] RDX: ffffffff81a4f280 RSI: ffff88810fe22080 RDI: ffff88810d13f620 [ 42.888586][ T367] RBP: ffffc90000df7960 R08: dffffc0000000000 R09: ffff88810d13f628 [ 42.896618][ T367] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 42.904489][ T367] R13: ffff88810b8ef17c R14: 0000000020000001 R15: ffff88810b8ee998 [ 42.912744][ T367] FS: 00007f79d24f66c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 42.921728][ T367] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.928266][ T367] CR2: 0000555555e49430 CR3: 00000001266a8000 CR4: 00000000003506a0 [ 42.936388][ T367] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.944373][ T367] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.952447][ T367] Kernel panic - not syncing: Fatal exception [ 42.958523][ T367] Kernel Offset: disabled [ 42.962753][ T367] Rebooting in 86400 seconds..