Warning: Permanently added '10.128.1.43' (ED25519) to the list of known hosts. 2025/04/23 18:40:23 ignoring optional flag "sandboxArg"="0" 2025/04/23 18:40:23 ignoring optional flag "type"="gce" 2025/04/23 18:40:23 parsed 1 programs 2025/04/23 18:40:23 executed programs: 0 [ 49.250798][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 49.250817][ T30] audit: type=1400 audit(1745433623.657:95): avc: denied { unlink } for pid=351 comm="syz-executor" name="swap-file" dev="sda1" ino=1930 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 49.291052][ T351] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.351925][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.358924][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.366306][ T357] device bridge_slave_0 entered promiscuous mode [ 49.373246][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.380173][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.387628][ T357] device bridge_slave_1 entered promiscuous mode [ 49.436744][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.443631][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.450762][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.457632][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.479602][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.487242][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.494513][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.502099][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.511494][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.519492][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.526363][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.535074][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.543285][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.550114][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.562824][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.572239][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.586675][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.598437][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.606807][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.614460][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.623231][ T357] device veth0_vlan entered promiscuous mode [ 49.633972][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.643036][ T357] device veth1_macvtap entered promiscuous mode [ 49.652680][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.662622][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.685024][ T363] FAULT_INJECTION: forcing a failure. [ 49.685024][ T363] name failslab, interval 1, probability 0, space 0, times 1 [ 49.697845][ T363] CPU: 0 PID: 363 Comm: syz-executor.0 Not tainted 5.15.180-syzkaller-1080019-g8034ec1338e8 #0 [ 49.708776][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 49.719083][ T363] Call Trace: [ 49.722162][ T363] [ 49.725021][ T363] dump_stack_lvl+0x151/0x1c0 [ 49.729638][ T363] ? io_uring_drop_tctx_refs+0x190/0x190 [ 49.735296][ T363] dump_stack+0x15/0x20 [ 49.739270][ T363] should_fail+0x3c6/0x510 [ 49.743527][ T363] __should_failslab+0xa4/0xe0 [ 49.748123][ T363] ? anon_vma_clone+0x9a/0x500 [ 49.752930][ T363] should_failslab+0x9/0x20 [ 49.757235][ T363] slab_pre_alloc_hook+0x37/0xd0 [ 49.762011][ T363] ? anon_vma_clone+0x9a/0x500 [ 49.766614][ T363] kmem_cache_alloc+0x44/0x250 [ 49.771292][ T363] anon_vma_clone+0x9a/0x500 [ 49.775644][ T363] anon_vma_fork+0x91/0x4e0 [ 49.779984][ T363] ? anon_vma_name+0x43/0x70 [ 49.784434][ T363] ? vm_area_dup+0x17a/0x230 [ 49.788953][ T363] copy_mm+0xa3a/0x13e0 [ 49.792945][ T363] ? copy_signal+0x610/0x610 [ 49.797371][ T363] ? __init_rwsem+0xfe/0x1d0 [ 49.801826][ T363] ? copy_signal+0x4e3/0x610 [ 49.806225][ T363] copy_process+0x1149/0x3290 [ 49.810732][ T363] ? __kasan_check_write+0x14/0x20 [ 49.815680][ T363] ? asm_sysvec_apic_timer_interrupt+0x1b/0x20 [ 49.821668][ T363] ? vfs_write+0x3f4/0x1110 [ 49.826006][ T363] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 49.830959][ T363] ? vfs_write+0x94d/0x1110 [ 49.835296][ T363] kernel_clone+0x21e/0x9e0 [ 49.839637][ T363] ? __kasan_check_write+0x14/0x20 [ 49.844584][ T363] ? create_io_thread+0x1e0/0x1e0 [ 49.849444][ T363] __x64_sys_clone+0x23f/0x290 [ 49.854043][ T363] ? __do_sys_vfork+0x130/0x130 [ 49.858731][ T363] ? __kasan_check_write+0x14/0x20 [ 49.863757][ T363] ? switch_fpu_return+0x15f/0x2e0 [ 49.868713][ T363] ? exit_to_user_mode_prepare+0x7e/0xa0 [ 49.874176][ T363] x64_sys_call+0x1b0/0x9a0 [ 49.878515][ T363] do_syscall_64+0x3b/0x80 [ 49.882782][ T363] ? clear_bhb_loop+0x35/0x90 [ 49.887292][ T363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.893015][ T363] RIP: 0033:0x7fe9f67faae9 [ 49.897267][ T363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.916817][ T363] RSP: 002b:00007fe9f637d078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 49.925168][ T363] RAX: ffffffffffffffda RBX: 00007fe9f6919f80 RCX: 00007fe9f67faae9 [ 49.933090][ T363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 [ 49.940870][ T363] RBP: 00007fe9f637d120 R08: 0000000000000000 R09: 0000000000000000 [ 49.948673][ T363] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 49.956485][ T363] R13: 000000000000000b R14: 00007fe9f6919f80 R15: 00007ffc87a7d838 [ 49.964299][ T363] [ 49.969632][ T30] audit: type=1400 audit(1745433624.367:96): avc: denied { sys_admin } for pid=362 comm="syz-executor.0" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 49.998563][ T367] FAULT_INJECTION: forcing a failure. [ 49.998563][ T367] name failslab, interval 1, probability 0, space 0, times 0 [ 50.011104][ T367] CPU: 1 PID: 367 Comm: syz-executor.0 Not tainted 5.15.180-syzkaller-1080019-g8034ec1338e8 #0 [ 50.021402][ T367] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.031267][ T367] Call Trace: [ 50.034474][ T367] [ 50.037253][ T367] dump_stack_lvl+0x151/0x1c0 [ 50.041765][ T367] ? io_uring_drop_tctx_refs+0x190/0x190 [ 50.047232][ T367] dump_stack+0x15/0x20 [ 50.051319][ T367] should_fail+0x3c6/0x510 [ 50.055565][ T367] __should_failslab+0xa4/0xe0 [ 50.060333][ T367] ? anon_vma_clone+0x9a/0x500 [ 50.065105][ T367] should_failslab+0x9/0x20 [ 50.069564][ T367] slab_pre_alloc_hook+0x37/0xd0 [ 50.074585][ T367] ? anon_vma_clone+0x9a/0x500 [ 50.079273][ T367] kmem_cache_alloc+0x44/0x250 [ 50.083886][ T367] anon_vma_clone+0x9a/0x500 [ 50.088301][ T367] anon_vma_fork+0x91/0x4e0 [ 50.092641][ T367] ? anon_vma_name+0x43/0x70 [ 50.097064][ T367] ? vm_area_dup+0x17a/0x230 [ 50.101489][ T367] copy_mm+0xa3a/0x13e0 [ 50.105570][ T367] ? copy_signal+0x610/0x610 [ 50.110114][ T367] ? __init_rwsem+0xfe/0x1d0 [ 50.114539][ T367] ? copy_signal+0x4e3/0x610 [ 50.118974][ T367] copy_process+0x1149/0x3290 [ 50.123655][ T367] ? __kasan_check_write+0x14/0x20 [ 50.128606][ T367] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 50.133729][ T367] ? vfs_write+0x94d/0x1110 [ 50.138129][ T367] kernel_clone+0x21e/0x9e0 [ 50.142411][ T367] ? __kasan_check_write+0x14/0x20 [ 50.147355][ T367] ? create_io_thread+0x1e0/0x1e0 [ 50.152217][ T367] __x64_sys_clone+0x23f/0x290 [ 50.156815][ T367] ? __do_sys_vfork+0x130/0x130 [ 50.161506][ T367] ? debug_smp_processor_id+0x17/0x20 [ 50.166731][ T367] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 50.172615][ T367] ? exit_to_user_mode_prepare+0x39/0xa0 [ 50.178082][ T367] x64_sys_call+0x1b0/0x9a0 [ 50.182420][ T367] do_syscall_64+0x3b/0x80 [ 50.186688][ T367] ? clear_bhb_loop+0x35/0x90 [ 50.191189][ T367] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.196910][ T367] RIP: 0033:0x7fe9f67faae9 [ 50.201174][ T367] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.220697][ T367] RSP: 002b:00007fe9f637d078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 50.228942][ T367] RAX: ffffffffffffffda RBX: 00007fe9f6919f80 RCX: 00007fe9f67faae9 [ 50.236846][ T367] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 [ 50.244652][ T367] RBP: 00007fe9f637d120 R08: 0000000000000000 R09: 0000000000000000 [ 50.252467][ T367] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 50.260270][ T367] R13: 000000000000000b R14: 00007fe9f6919f80 R15: 00007ffc87a7d838 [ 50.268089][ T367] [ 50.292068][ T370] FAULT_INJECTION: forcing a failure. [ 50.292068][ T370] name failslab, interval 1, probability 0, space 0, times 0 [ 50.304661][ T370] CPU: 1 PID: 370 Comm: syz-executor.0 Not tainted 5.15.180-syzkaller-1080019-g8034ec1338e8 #0 [ 50.314900][ T370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.324794][ T370] Call Trace: [ 50.327916][ T370] [ 50.330696][ T370] dump_stack_lvl+0x151/0x1c0 [ 50.335770][ T370] ? io_uring_drop_tctx_refs+0x190/0x190 [ 50.341232][ T370] dump_stack+0x15/0x20 [ 50.345230][ T370] should_fail+0x3c6/0x510 [ 50.349475][ T370] __should_failslab+0xa4/0xe0 [ 50.354076][ T370] ? anon_vma_clone+0x9a/0x500 [ 50.358678][ T370] should_failslab+0x9/0x20 [ 50.363015][ T370] slab_pre_alloc_hook+0x37/0xd0 [ 50.367789][ T370] ? anon_vma_clone+0x9a/0x500 [ 50.372397][ T370] kmem_cache_alloc+0x44/0x250 [ 50.376995][ T370] anon_vma_clone+0x9a/0x500 [ 50.381420][ T370] anon_vma_fork+0x91/0x4e0 [ 50.385766][ T370] ? anon_vma_name+0x43/0x70 [ 50.390186][ T370] ? vm_area_dup+0x17a/0x230 [ 50.394612][ T370] copy_mm+0xa3a/0x13e0 [ 50.398603][ T370] ? copy_signal+0x610/0x610 [ 50.403029][ T370] ? __init_rwsem+0xfe/0x1d0 [ 50.407456][ T370] ? copy_signal+0x4e3/0x610 [ 50.411978][ T370] copy_process+0x1149/0x3290 [ 50.416580][ T370] ? __kasan_check_write+0x14/0x20 [ 50.421516][ T370] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 50.426552][ T370] ? vfs_write+0x94d/0x1110 [ 50.430890][ T370] kernel_clone+0x21e/0x9e0 [ 50.435232][ T370] ? __kasan_check_write+0x14/0x20 [ 50.440185][ T370] ? create_io_thread+0x1e0/0x1e0 [ 50.445125][ T370] __x64_sys_clone+0x23f/0x290 [ 50.449852][ T370] ? __do_sys_vfork+0x130/0x130 [ 50.454520][ T370] ? debug_smp_processor_id+0x17/0x20 [ 50.459728][ T370] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 50.465634][ T370] ? exit_to_user_mode_prepare+0x39/0xa0 [ 50.471183][ T370] x64_sys_call+0x1b0/0x9a0 [ 50.475544][ T370] do_syscall_64+0x3b/0x80 [ 50.479891][ T370] ? clear_bhb_loop+0x35/0x90 [ 50.484376][ T370] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.490200][ T370] RIP: 0033:0x7fe9f67faae9 [ 50.494441][ T370] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.513888][ T370] RSP: 002b:00007fe9f637d078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 50.522127][ T370] RAX: ffffffffffffffda RBX: 00007fe9f6919f80 RCX: 00007fe9f67faae9 [ 50.530037][ T370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 [ 50.537852][ T370] RBP: 00007fe9f637d120 R08: 0000000000000000 R09: 0000000000000000 [ 50.545661][ T370] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 50.553653][ T370] R13: 000000000000000b R14: 00007fe9f6919f80 R15: 00007ffc87a7d838 [ 50.561469][ T370] [ 50.589358][ T374] FAULT_INJECTION: forcing a failure. [ 50.589358][ T374] name failslab, interval 1, probability 0, space 0, times 0 [ 50.601900][ T374] CPU: 1 PID: 374 Comm: syz-executor.0 Not tainted 5.15.180-syzkaller-1080019-g8034ec1338e8 #0 [ 50.612085][ T374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.622012][ T374] Call Trace: [ 50.625108][ T374] [ 50.627886][ T374] dump_stack_lvl+0x151/0x1c0 [ 50.632482][ T374] ? io_uring_drop_tctx_refs+0x190/0x190 [ 50.637959][ T374] dump_stack+0x15/0x20 [ 50.641939][ T374] should_fail+0x3c6/0x510 [ 50.646200][ T374] __should_failslab+0xa4/0xe0 [ 50.650972][ T374] ? anon_vma_clone+0x9a/0x500 [ 50.655566][ T374] should_failslab+0x9/0x20 [ 50.660092][ T374] slab_pre_alloc_hook+0x37/0xd0 [ 50.664854][ T374] ? anon_vma_clone+0x9a/0x500 [ 50.669546][ T374] kmem_cache_alloc+0x44/0x250 [ 50.674139][ T374] anon_vma_clone+0x9a/0x500 [ 50.678739][ T374] anon_vma_fork+0x91/0x4e0 [ 50.683000][ T374] ? anon_vma_name+0x43/0x70 [ 50.687419][ T374] ? vm_area_dup+0x17a/0x230 [ 50.691845][ T374] copy_mm+0xa3a/0x13e0 [ 50.695845][ T374] ? copy_signal+0x610/0x610 [ 50.700274][ T374] ? __init_rwsem+0xfe/0x1d0 [ 50.704690][ T374] ? copy_signal+0x4e3/0x610 [ 50.709115][ T374] copy_process+0x1149/0x3290 [ 50.713627][ T374] ? __kasan_check_write+0x14/0x20 [ 50.718576][ T374] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 50.723704][ T374] ? vfs_write+0x94d/0x1110 [ 50.728325][ T374] kernel_clone+0x21e/0x9e0 [ 50.732751][ T374] ? __kasan_check_write+0x14/0x20 [ 50.737695][ T374] ? create_io_thread+0x1e0/0x1e0 [ 50.742556][ T374] __x64_sys_clone+0x23f/0x290 [ 50.747163][ T374] ? __do_sys_vfork+0x130/0x130 [ 50.751959][ T374] ? debug_smp_processor_id+0x17/0x20 [ 50.757192][ T374] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 50.763046][ T374] ? exit_to_user_mode_prepare+0x39/0xa0 [ 50.768503][ T374] x64_sys_call+0x1b0/0x9a0 [ 50.773045][ T374] do_syscall_64+0x3b/0x80 [ 50.777815][ T374] ? clear_bhb_loop+0x35/0x90 [ 50.782420][ T374] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.788150][ T374] RIP: 0033:0x7fe9f67faae9 [ 50.792399][ T374] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.812357][ T374] RSP: 002b:00007fe9f637d078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 50.820554][ T374] RAX: ffffffffffffffda RBX: 00007fe9f6919f80 RCX: 00007fe9f67faae9 [ 50.828454][ T374] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 [ 50.836351][ T374] RBP: 00007fe9f637d120 R08: 0000000000000000 R09: 0000000000000000 [ 50.844159][ T374] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 50.851967][ T374] R13: 000000000000000b R14: 00007fe9f6919f80 R15: 00007ffc87a7d838 [ 50.859799][ T374] [ 50.864860][ T30] audit: type=1400 audit(1745433625.267:97): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 50.893725][ T377] FAULT_INJECTION: forcing a failure. [ 50.893725][ T377] name failslab, interval 1, probability 0, space 0, times 0 [ 50.906713][ T377] CPU: 0 PID: 377 Comm: syz-executor.0 Not tainted 5.15.180-syzkaller-1080019-g8034ec1338e8 #0 [ 50.916887][ T377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 50.927038][ T377] Call Trace: [ 50.930432][ T377] [ 50.933321][ T377] dump_stack_lvl+0x151/0x1c0 [ 50.937833][ T377] ? io_uring_drop_tctx_refs+0x190/0x190 [ 50.943300][ T377] dump_stack+0x15/0x20 [ 50.947298][ T377] should_fail+0x3c6/0x510 [ 50.951548][ T377] __should_failslab+0xa4/0xe0 [ 50.956140][ T377] ? anon_vma_fork+0xf7/0x4e0 [ 50.960655][ T377] should_failslab+0x9/0x20 [ 50.964995][ T377] slab_pre_alloc_hook+0x37/0xd0 [ 50.969769][ T377] ? anon_vma_fork+0xf7/0x4e0 [ 50.974282][ T377] kmem_cache_alloc+0x44/0x250 [ 50.978882][ T377] anon_vma_fork+0xf7/0x4e0 [ 50.983314][ T377] ? anon_vma_name+0x43/0x70 [ 50.987945][ T377] ? vm_area_dup+0x17a/0x230 [ 50.992371][ T377] copy_mm+0xa3a/0x13e0 [ 50.996367][ T377] ? copy_signal+0x610/0x610 [ 51.000796][ T377] ? __init_rwsem+0xfe/0x1d0 [ 51.005216][ T377] ? copy_signal+0x4e3/0x610 [ 51.009818][ T377] copy_process+0x1149/0x3290 [ 51.014362][ T377] ? __kasan_check_write+0x14/0x20 [ 51.019302][ T377] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 51.024245][ T377] ? vfs_write+0x94d/0x1110 [ 51.028587][ T377] kernel_clone+0x21e/0x9e0 [ 51.032924][ T377] ? __kasan_check_write+0x14/0x20 [ 51.037873][ T377] ? create_io_thread+0x1e0/0x1e0 [ 51.042736][ T377] __x64_sys_clone+0x23f/0x290 [ 51.047333][ T377] ? __do_sys_vfork+0x130/0x130 [ 51.052031][ T377] ? debug_smp_processor_id+0x17/0x20 [ 51.057229][ T377] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 51.063218][ T377] ? exit_to_user_mode_prepare+0x39/0xa0 [ 51.068776][ T377] x64_sys_call+0x1b0/0x9a0 [ 51.073132][ T377] do_syscall_64+0x3b/0x80 [ 51.077362][ T377] ? clear_bhb_loop+0x35/0x90 [ 51.081878][ T377] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.087694][ T377] RIP: 0033:0x7fe9f67faae9 [ 51.091947][ T377] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.111827][ T377] RSP: 002b:00007fe9f637d078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 51.120060][ T377] RAX: ffffffffffffffda RBX: 00007fe9f6919f80 RCX: 00007fe9f67faae9 [ 51.127990][ T377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 [ 51.135834][ T377] RBP: 00007fe9f637d120 R08: 0000000000000000 R09: 0000000000000000 [ 51.143617][ T377] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 51.151426][ T377] R13: 000000000000000b R14: 00007fe9f6919f80 R15: 00007ffc87a7d838 [ 51.159305][ T377] [ 51.165051][ T377] ------------[ cut here ]------------ [ 51.170596][ T377] refcount_t: underflow; use-after-free. [ 51.176173][ T377] WARNING: CPU: 0 PID: 377 at lib/refcount.c:28 refcount_warn_saturate+0x158/0x1a0 [ 51.185722][ T377] Modules linked in: [ 51.189493][ T377] CPU: 1 PID: 377 Comm: syz-executor.0 Not tainted 5.15.180-syzkaller-1080019-g8034ec1338e8 #0 [ 51.199680][ T377] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 51.209688][ T377] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 51.215801][ T377] Code: 04 01 48 c7 c7 00 fe a2 85 e8 f4 ed db fe 0f 0b eb 8b e8 db 73 0a ff c6 05 79 f8 c0 04 01 48 c7 c7 60 fe a2 85 e8 d8 ed db fe <0f> 0b e9 6c ff ff ff e8 bc 73 0a ff c6 05 5b f8 c0 04 01 48 c7 c7 [ 51.235312][ T377] RSP: 0018:ffffc90000b07968 EFLAGS: 00010246 [ 51.241199][ T377] RAX: 84da860e152a3200 RBX: 0000000000000003 RCX: ffff8881100ce2c0 [ 51.248976][ T377] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 51.256832][ T377] RBP: ffffc90000b07978 R08: ffffffff81576465 R09: ffffed103ee04e93 [ 51.264706][ T377] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11023ca5c14 [ 51.272660][ T377] R13: ffff88811e52e0a0 R14: 0000000000000003 R15: ffff88811ca9c3d1 [ 51.280417][ T377] FS: 00007fe9f637d6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 51.289246][ T377] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.295984][ T377] CR2: 00007fe9f6916000 CR3: 000000011d481000 CR4: 00000000003506a0 [ 51.304135][ T377] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.312021][ T377] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.319771][ T377] Call Trace: [ 51.322932][ T377] [ 51.325650][ T377] vm_area_free_no_check+0x123/0x130 [ 51.330800][ T377] copy_mm+0xefb/0x13e0 [ 51.334756][ T377] ? copy_signal+0x610/0x610 [ 51.339179][ T377] ? __init_rwsem+0xfe/0x1d0 [ 51.343680][ T377] ? copy_signal+0x4e3/0x610 [ 51.348031][ T377] copy_process+0x1149/0x3290 [ 51.352749][ T377] ? __kasan_check_write+0x14/0x20 [ 51.358007][ T377] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 51.363125][ T377] ? vfs_write+0x94d/0x1110 [ 51.367357][ T377] kernel_clone+0x21e/0x9e0 [ 51.371762][ T377] ? __kasan_check_write+0x14/0x20 [ 51.376673][ T377] ? create_io_thread+0x1e0/0x1e0 [ 51.381584][ T377] __x64_sys_clone+0x23f/0x290 [ 51.386104][ T377] ? __do_sys_vfork+0x130/0x130 [ 51.390844][ T377] ? debug_smp_processor_id+0x17/0x20 [ 51.396007][ T377] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 51.402033][ T377] ? exit_to_user_mode_prepare+0x39/0xa0 [ 51.407459][ T377] x64_sys_call+0x1b0/0x9a0 [ 51.411950][ T377] do_syscall_64+0x3b/0x80 [ 51.416224][ T377] ? clear_bhb_loop+0x35/0x90 [ 51.420956][ T377] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.426737][ T377] RIP: 0033:0x7fe9f67faae9 [ 51.431145][ T377] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.451910][ T377] RSP: 002b:00007fe9f637d078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 51.460476][ T377] RAX: ffffffffffffffda RBX: 00007fe9f6919f80 RCX: 00007fe9f67faae9 [ 51.468310][ T377] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 [ 51.476252][ T377] RBP: 00007fe9f637d120 R08: 0000000000000000 R09: 0000000000000000 [ 51.484050][ T377] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 51.491855][ T377] R13: 000000000000000b R14: 00007fe9f6919f80 R15: 00007ffc87a7d838 [ 51.499720][ T377] [ 51.502920][ T377] ---[ end trace 229f31a3e93f1ab0 ]--- [ 51.516619][ T379] FAULT_INJECTION: forcing a failure. [ 51.516619][ T379] name failslab, interval 1, probability 0, space 0, times 0 [ 51.529322][ T379] CPU: 0 PID: 379 Comm: syz-executor.0 Tainted: G W 5.15.180-syzkaller-1080019-g8034ec1338e8 #0 [ 51.540958][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 51.550975][ T379] Call Trace: [ 51.554219][ T379] [ 51.556992][ T379] dump_stack_lvl+0x151/0x1c0 [ 51.561537][ T379] ? io_uring_drop_tctx_refs+0x190/0x190 [ 51.566982][ T379] dump_stack+0x15/0x20 [ 51.570968][ T379] should_fail+0x3c6/0x510 [ 51.575305][ T379] __should_failslab+0xa4/0xe0 [ 51.579925][ T379] ? anon_vma_clone+0x9a/0x500 [ 51.584516][ T379] should_failslab+0x9/0x20 [ 51.589111][ T379] slab_pre_alloc_hook+0x37/0xd0 [ 51.593876][ T379] ? anon_vma_clone+0x9a/0x500 [ 51.598478][ T379] kmem_cache_alloc+0x44/0x250 [ 51.603076][ T379] anon_vma_clone+0x9a/0x500 [ 51.607532][ T379] anon_vma_fork+0x91/0x4e0 [ 51.611843][ T379] ? anon_vma_name+0x43/0x70 [ 51.616269][ T379] ? vm_area_dup+0x17a/0x230 [ 51.620694][ T379] copy_mm+0xa3a/0x13e0 [ 51.624689][ T379] ? copy_signal+0x610/0x610 [ 51.629121][ T379] ? __init_rwsem+0xfe/0x1d0 [ 51.633545][ T379] ? copy_signal+0x4e3/0x610 [ 51.637969][ T379] copy_process+0x1149/0x3290 [ 51.642517][ T379] ? __kasan_check_write+0x14/0x20 [ 51.647428][ T379] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 51.652763][ T379] ? vfs_write+0x94d/0x1110 [ 51.657062][ T379] kernel_clone+0x21e/0x9e0 [ 51.661404][ T379] ? __kasan_check_write+0x14/0x20 [ 51.666348][ T379] ? create_io_thread+0x1e0/0x1e0 [ 51.671216][ T379] __x64_sys_clone+0x23f/0x290 [ 51.675818][ T379] ? __do_sys_vfork+0x130/0x130 [ 51.680842][ T379] ? debug_smp_processor_id+0x17/0x20 [ 51.686051][ T379] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 51.691963][ T379] ? exit_to_user_mode_prepare+0x39/0xa0 [ 51.697428][ T379] x64_sys_call+0x1b0/0x9a0 [ 51.701768][ T379] do_syscall_64+0x3b/0x80 [ 51.706013][ T379] ? clear_bhb_loop+0x35/0x90 [ 51.710536][ T379] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.716255][ T379] RIP: 0033:0x7fe9f67faae9 [ 51.720515][ T379] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.739948][ T379] RSP: 002b:00007fe9f637d078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 51.748207][ T379] RAX: ffffffffffffffda RBX: 00007fe9f6919f80 RCX: 00007fe9f67faae9 [ 51.756005][ T379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 [ 51.763904][ T379] RBP: 00007fe9f637d120 R08: 0000000000000000 R09: 0000000000000000 [ 51.771800][ T379] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 51.779701][ T379] R13: 000000000000000b R14: 00007fe9f6919f80 R15: 00007ffc87a7d838 [ 51.787529][ T379] [ 51.811859][ T383] FAULT_INJECTION: forcing a failure. [ 51.811859][ T383] name failslab, interval 1, probability 0, space 0, times 0 [ 51.824348][ T383] CPU: 0 PID: 383 Comm: syz-executor.0 Tainted: G W 5.15.180-syzkaller-1080019-g8034ec1338e8 #0 [ 51.835911][ T383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 51.845805][ T383] Call Trace: [ 51.848929][ T383] [ 51.851708][ T383] dump_stack_lvl+0x151/0x1c0 [ 51.856221][ T383] ? io_uring_drop_tctx_refs+0x190/0x190 [ 51.861980][ T383] dump_stack+0x15/0x20 [ 51.866040][ T383] should_fail+0x3c6/0x510 [ 51.870371][ T383] __should_failslab+0xa4/0xe0 [ 51.874966][ T383] ? anon_vma_clone+0x9a/0x500 [ 51.879565][ T383] should_failslab+0x9/0x20 [ 51.883910][ T383] slab_pre_alloc_hook+0x37/0xd0 [ 51.888823][ T383] ? anon_vma_clone+0x9a/0x500 [ 51.893420][ T383] kmem_cache_alloc+0x44/0x250 [ 51.898011][ T383] anon_vma_clone+0x9a/0x500 [ 51.902437][ T383] anon_vma_fork+0x91/0x4e0 [ 51.906787][ T383] ? anon_vma_name+0x43/0x70 [ 51.911206][ T383] ? vm_area_dup+0x17a/0x230 [ 51.915630][ T383] copy_mm+0xa3a/0x13e0 [ 51.919644][ T383] ? copy_signal+0x610/0x610 [ 51.924047][ T383] ? __init_rwsem+0xfe/0x1d0 [ 51.928559][ T383] ? copy_signal+0x4e3/0x610 [ 51.932986][ T383] copy_process+0x1149/0x3290 [ 51.937623][ T383] ? __kasan_check_write+0x14/0x20 [ 51.942550][ T383] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 51.947495][ T383] ? vfs_write+0x94d/0x1110 [ 51.951838][ T383] kernel_clone+0x21e/0x9e0 [ 51.956181][ T383] ? __kasan_check_write+0x14/0x20 [ 51.961121][ T383] ? create_io_thread+0x1e0/0x1e0 [ 51.966094][ T383] __x64_sys_clone+0x23f/0x290 [ 51.970738][ T383] ? __do_sys_vfork+0x130/0x130 [ 51.975388][ T383] ? debug_smp_processor_id+0x17/0x20 [ 51.980588][ T383] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 51.986488][ T383] ? exit_to_user_mode_prepare+0x39/0xa0 [ 51.991954][ T383] x64_sys_call+0x1b0/0x9a0 [ 51.996297][ T383] do_syscall_64+0x3b/0x80 [ 52.000574][ T383] ? clear_bhb_loop+0x35/0x90 [ 52.005071][ T383] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.010795][ T383] RIP: 0033:0x7fe9f67faae9 [ 52.015048][ T383] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.034485][ T383] RSP: 002b:00007fe9f637d078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 52.043021][ T383] RAX: ffffffffffffffda RBX: 00007fe9f6919f80 RCX: 00007fe9f67faae9 [ 52.051010][ T383] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 [ 52.058815][ T383] RBP: 00007fe9f637d120 R08: 0000000000000000 R09: 0000000000000000 [ 52.066638][ T383] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 52.074582][ T383] R13: 000000000000000b R14: 00007fe9f6919f80 R15: 00007ffc87a7d838 [ 52.082393][ T383] [ 52.086083][ T383] BUG: unable to handle page fault for address: ffffed180000001e [ 52.093709][ T383] #PF: supervisor read access in kernel mode [ 52.099521][ T383] #PF: error_code(0x0000) - not-present page [ 52.105332][ T383] PGD 23fff2067 P4D 23fff2067 PUD 0 [ 52.110454][ T383] Oops: 0000 [#1] PREEMPT SMP KASAN [ 52.115578][ T383] CPU: 0 PID: 383 Comm: syz-executor.0 Tainted: G W 5.15.180-syzkaller-1080019-g8034ec1338e8 #0 [ 52.127260][ T383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 52.137134][ T383] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 52.142951][ T383] Code: 00 74 08 4c 89 ef e8 5e 8c 2a ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 30 8c 2a ff 48 89 d8 48 8b 1b 4c [ 52.162419][ T383] RSP: 0018:ffffc90000dd78f8 EFLAGS: 00010a06 [ 52.168318][ T383] RAX: ffff88c0000000e8 RBX: ffff88c0000000f0 RCX: dffffc0000000000 [ 52.176103][ T383] RDX: ffffffff81a54270 RSI: ffff88810990cf40 RDI: ffff88811e658180 [ 52.184080][ T383] RBP: ffffc90000dd7960 R08: dffffc0000000000 R09: ffff88811e658188 [ 52.191860][ T383] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 52.199658][ T383] R13: ffff88811ca9c3d0 R14: 1ffff1180000001e R15: ffff88811e529ac0 [ 52.207473][ T383] FS: 00007fe9f637d6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 52.216235][ T383] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.222664][ T383] CR2: ffffed180000001e CR3: 000000011bdf2000 CR4: 00000000003506b0 [ 52.230472][ T383] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.238364][ T383] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.246268][ T383] Call Trace: [ 52.249389][ T383] [ 52.252169][ T383] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 52.258418][ T383] vma_interval_tree_insert_after+0x2be/0x2d0 [ 52.264319][ T383] copy_mm+0xba2/0x13e0 [ 52.268318][ T383] ? copy_signal+0x610/0x610 [ 52.272738][ T383] ? __init_rwsem+0xfe/0x1d0 [ 52.277162][ T383] ? copy_signal+0x4e3/0x610 [ 52.281591][ T383] copy_process+0x1149/0x3290 [ 52.286104][ T383] ? __kasan_check_write+0x14/0x20 [ 52.291052][ T383] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 52.295996][ T383] ? vfs_write+0x94d/0x1110 [ 52.300339][ T383] kernel_clone+0x21e/0x9e0 [ 52.304693][ T383] ? __kasan_check_write+0x14/0x20 [ 52.309627][ T383] ? create_io_thread+0x1e0/0x1e0 [ 52.314514][ T383] __x64_sys_clone+0x23f/0x290 [ 52.319083][ T383] ? __do_sys_vfork+0x130/0x130 [ 52.323773][ T383] ? debug_smp_processor_id+0x17/0x20 [ 52.328977][ T383] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 52.334889][ T383] ? exit_to_user_mode_prepare+0x39/0xa0 [ 52.340349][ T383] x64_sys_call+0x1b0/0x9a0 [ 52.344687][ T383] do_syscall_64+0x3b/0x80 [ 52.348946][ T383] ? clear_bhb_loop+0x35/0x90 [ 52.353622][ T383] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.359428][ T383] RIP: 0033:0x7fe9f67faae9 [ 52.363707][ T383] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.383245][ T383] RSP: 002b:00007fe9f637d078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 52.391474][ T383] RAX: ffffffffffffffda RBX: 00007fe9f6919f80 RCX: 00007fe9f67faae9 [ 52.399275][ T383] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000075848400 [ 52.407086][ T383] RBP: 00007fe9f637d120 R08: 0000000000000000 R09: 0000000000000000 [ 52.414983][ T383] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 52.422897][ T383] R13: 000000000000000b R14: 00007fe9f6919f80 R15: 00007ffc87a7d838 [ 52.430705][ T383] [ 52.433554][ T383] Modules linked in: [ 52.437305][ T383] CR2: ffffed180000001e [ 52.441300][ T383] ---[ end trace 229f31a3e93f1ab1 ]--- [ 52.446777][ T383] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 52.452575][ T383] Code: 00 74 08 4c 89 ef e8 5e 8c 2a ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 30 8c 2a ff 48 89 d8 48 8b 1b 4c [ 52.472105][ T383] RSP: 0018:ffffc90000dd78f8 EFLAGS: 00010a06 [ 52.478188][ T383] RAX: ffff88c0000000e8 RBX: ffff88c0000000f0 RCX: dffffc0000000000 [ 52.486011][ T383] RDX: ffffffff81a54270 RSI: ffff88810990cf40 RDI: ffff88811e658180 [ 52.493811][ T383] RBP: ffffc90000dd7960 R08: dffffc0000000000 R09: ffff88811e658188 [ 52.501622][ T383] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 52.509432][ T383] R13: ffff88811ca9c3d0 R14: 1ffff1180000001e R15: ffff88811e529ac0 [ 52.517244][ T383] FS: 00007fe9f637d6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 52.526010][ T383] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.532435][ T383] CR2: ffffed180000001e CR3: 000000011bdf2000 CR4: 00000000003506b0 [ 52.540246][ T383] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.548318][ T383] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.556168][ T383] Kernel panic - not syncing: Fatal exception [ 52.562267][ T383] Kernel Offset: disabled [ 52.566400][ T383] Rebooting in 86400 seconds..