Warning: Permanently added '10.128.0.143' (ED25519) to the list of known hosts. 2024/06/18 14:41:56 ignoring optional flag "sandboxArg"="0" 2024/06/18 14:41:56 parsed 1 programs 2024/06/18 14:41:56 executed programs: 0 [ 39.434449][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.441897][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.449291][ T342] device bridge_slave_0 entered promiscuous mode [ 39.456144][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.463234][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.470346][ T342] device bridge_slave_1 entered promiscuous mode [ 39.514671][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.521565][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.528623][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.535576][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.555535][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.563044][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.570349][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 39.577829][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 39.598999][ T342] device veth0_vlan entered promiscuous mode [ 39.606599][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.614849][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.623058][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.630645][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.638206][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 39.646357][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.653294][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 39.660684][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 39.668722][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.675688][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 39.682880][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 39.691313][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 39.704125][ T342] device veth1_macvtap entered promiscuous mode [ 39.711785][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.725770][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.734805][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.746727][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 39.746741][ T30] audit: type=1400 audit(1718721717.349:91): avc: denied { mounton } for pid=342 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.782503][ T350] FAULT_INJECTION: forcing a failure. [ 39.782503][ T350] name failslab, interval 1, probability 0, space 0, times 1 [ 39.795265][ T350] CPU: 1 PID: 350 Comm: syz-executor.0 Not tainted 5.15.149-syzkaller-1069274-g85445b5a2107 #0 [ 39.805326][ T350] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 39.815227][ T350] Call Trace: [ 39.818397][ T350] [ 39.821120][ T350] dump_stack_lvl+0x151/0x1b7 [ 39.825631][ T350] ? io_uring_drop_tctx_refs+0x190/0x190 [ 39.831110][ T350] dump_stack+0x15/0x17 [ 39.835092][ T350] should_fail+0x3c6/0x510 [ 39.839345][ T350] __should_failslab+0xa4/0xe0 [ 39.843958][ T350] ? anon_vma_clone+0x9a/0x500 [ 39.848543][ T350] should_failslab+0x9/0x20 [ 39.852986][ T350] slab_pre_alloc_hook+0x37/0xd0 [ 39.858004][ T350] ? anon_vma_clone+0x9a/0x500 [ 39.862640][ T350] kmem_cache_alloc+0x44/0x200 [ 39.867328][ T350] anon_vma_clone+0x9a/0x500 [ 39.871956][ T350] anon_vma_fork+0x91/0x4e0 [ 39.876291][ T350] ? anon_vma_name+0x43/0x70 [ 39.880836][ T350] ? vm_area_dup+0x17a/0x230 [ 39.885290][ T350] copy_mm+0xa3a/0x13e0 [ 39.889312][ T350] ? copy_signal+0x610/0x610 [ 39.893825][ T350] ? __init_rwsem+0xd6/0x1c0 [ 39.898247][ T350] ? copy_signal+0x4e3/0x610 [ 39.902811][ T350] copy_process+0x1149/0x3290 [ 39.907413][ T350] ? proc_fail_nth_write+0x20b/0x290 [ 39.912513][ T350] ? fsnotify_perm+0x6a/0x5d0 [ 39.917046][ T350] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 39.922287][ T350] ? vfs_write+0x9ec/0x1110 [ 39.927151][ T350] kernel_clone+0x21e/0x9e0 [ 39.931568][ T350] ? file_end_write+0x1c0/0x1c0 [ 39.936715][ T350] ? create_io_thread+0x1e0/0x1e0 [ 39.941635][ T350] ? mutex_unlock+0xb2/0x260 [ 39.946151][ T350] ? __mutex_lock_slowpath+0x10/0x10 [ 39.951360][ T350] __x64_sys_clone+0x23f/0x290 [ 39.955976][ T350] ? __do_sys_vfork+0x130/0x130 [ 39.960641][ T350] ? ksys_write+0x260/0x2c0 [ 39.965077][ T350] ? debug_smp_processor_id+0x17/0x20 [ 39.970402][ T350] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 39.976494][ T350] ? exit_to_user_mode_prepare+0x39/0xa0 [ 39.982018][ T350] do_syscall_64+0x3d/0xb0 [ 39.986272][ T350] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 39.992007][ T350] RIP: 0033:0x7fa96d429959 [ 39.996253][ T350] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 40.015938][ T350] RSP: 002b:00007fa96cfac078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 40.024214][ T350] RAX: ffffffffffffffda RBX: 00007fa96d548f80 RCX: 00007fa96d429959 [ 40.032426][ T350] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 40.040352][ T350] RBP: 00007fa96cfac120 R08: 0000000000000000 R09: 0000000000000000 [ 40.048282][ T350] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 40.056261][ T350] R13: 000000000000000b R14: 00007fa96d548f80 R15: 00007ffda3ef8a08 [ 40.064358][ T350] [ 40.089832][ T354] FAULT_INJECTION: forcing a failure. [ 40.089832][ T354] name failslab, interval 1, probability 0, space 0, times 0 [ 40.103050][ T354] CPU: 0 PID: 354 Comm: syz-executor.0 Not tainted 5.15.149-syzkaller-1069274-g85445b5a2107 #0 [ 40.113533][ T354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 40.123690][ T354] Call Trace: [ 40.126904][ T354] [ 40.129764][ T354] dump_stack_lvl+0x151/0x1b7 [ 40.134534][ T354] ? io_uring_drop_tctx_refs+0x190/0x190 [ 40.140316][ T354] dump_stack+0x15/0x17 [ 40.144657][ T354] should_fail+0x3c6/0x510 [ 40.148989][ T354] __should_failslab+0xa4/0xe0 [ 40.153766][ T354] ? anon_vma_clone+0x9a/0x500 [ 40.158451][ T354] should_failslab+0x9/0x20 [ 40.162873][ T354] slab_pre_alloc_hook+0x37/0xd0 [ 40.167878][ T354] ? anon_vma_clone+0x9a/0x500 [ 40.172836][ T354] kmem_cache_alloc+0x44/0x200 [ 40.177412][ T354] anon_vma_clone+0x9a/0x500 [ 40.181891][ T354] anon_vma_fork+0x91/0x4e0 [ 40.186259][ T354] ? anon_vma_name+0x43/0x70 [ 40.190691][ T354] ? vm_area_dup+0x17a/0x230 [ 40.195109][ T354] copy_mm+0xa3a/0x13e0 [ 40.199103][ T354] ? copy_signal+0x610/0x610 [ 40.203526][ T354] ? __init_rwsem+0xd6/0x1c0 [ 40.207956][ T354] ? copy_signal+0x4e3/0x610 [ 40.212474][ T354] copy_process+0x1149/0x3290 [ 40.217160][ T354] ? proc_fail_nth_write+0x20b/0x290 [ 40.222286][ T354] ? fsnotify_perm+0x6a/0x5d0 [ 40.226791][ T354] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 40.231746][ T354] ? vfs_write+0x9ec/0x1110 [ 40.236086][ T354] kernel_clone+0x21e/0x9e0 [ 40.240532][ T354] ? file_end_write+0x1c0/0x1c0 [ 40.245372][ T354] ? create_io_thread+0x1e0/0x1e0 [ 40.250350][ T354] ? mutex_unlock+0xb2/0x260 [ 40.254831][ T354] ? __mutex_lock_slowpath+0x10/0x10 [ 40.260121][ T354] __x64_sys_clone+0x23f/0x290 [ 40.264745][ T354] ? __do_sys_vfork+0x130/0x130 [ 40.269416][ T354] ? ksys_write+0x260/0x2c0 [ 40.273845][ T354] ? debug_smp_processor_id+0x17/0x20 [ 40.279126][ T354] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 40.285028][ T354] ? exit_to_user_mode_prepare+0x39/0xa0 [ 40.290643][ T354] do_syscall_64+0x3d/0xb0 [ 40.294955][ T354] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.300681][ T354] RIP: 0033:0x7fa96d429959 [ 40.305033][ T354] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 40.325139][ T354] RSP: 002b:00007fa96cfac078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 40.333456][ T354] RAX: ffffffffffffffda RBX: 00007fa96d548f80 RCX: 00007fa96d429959 [ 40.341438][ T354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 40.349256][ T354] RBP: 00007fa96cfac120 R08: 0000000000000000 R09: 0000000000000000 [ 40.357232][ T354] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 40.365043][ T354] R13: 000000000000000b R14: 00007fa96d548f80 R15: 00007ffda3ef8a08 [ 40.373222][ T354] [ 40.397609][ T357] FAULT_INJECTION: forcing a failure. [ 40.397609][ T357] name failslab, interval 1, probability 0, space 0, times 0 [ 40.410554][ T357] CPU: 1 PID: 357 Comm: syz-executor.0 Not tainted 5.15.149-syzkaller-1069274-g85445b5a2107 #0 [ 40.421988][ T357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 40.432312][ T357] Call Trace: [ 40.435601][ T357] [ 40.438374][ T357] dump_stack_lvl+0x151/0x1b7 [ 40.442983][ T357] ? io_uring_drop_tctx_refs+0x190/0x190 [ 40.448646][ T357] dump_stack+0x15/0x17 [ 40.453033][ T357] should_fail+0x3c6/0x510 [ 40.457665][ T357] __should_failslab+0xa4/0xe0 [ 40.462908][ T357] ? anon_vma_clone+0x9a/0x500 [ 40.467476][ T357] should_failslab+0x9/0x20 [ 40.471915][ T357] slab_pre_alloc_hook+0x37/0xd0 [ 40.476666][ T357] ? anon_vma_clone+0x9a/0x500 [ 40.481281][ T357] kmem_cache_alloc+0x44/0x200 [ 40.485857][ T357] anon_vma_clone+0x9a/0x500 [ 40.490281][ T357] anon_vma_fork+0x91/0x4e0 [ 40.494620][ T357] ? anon_vma_name+0x43/0x70 [ 40.499050][ T357] ? vm_area_dup+0x17a/0x230 [ 40.503487][ T357] copy_mm+0xa3a/0x13e0 [ 40.507497][ T357] ? copy_signal+0x610/0x610 [ 40.512173][ T357] ? __init_rwsem+0xd6/0x1c0 [ 40.516716][ T357] ? copy_signal+0x4e3/0x610 [ 40.521317][ T357] copy_process+0x1149/0x3290 [ 40.525822][ T357] ? proc_fail_nth_write+0x20b/0x290 [ 40.530934][ T357] ? fsnotify_perm+0x6a/0x5d0 [ 40.535539][ T357] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 40.540754][ T357] ? vfs_write+0x9ec/0x1110 [ 40.545253][ T357] kernel_clone+0x21e/0x9e0 [ 40.549586][ T357] ? file_end_write+0x1c0/0x1c0 [ 40.554290][ T357] ? create_io_thread+0x1e0/0x1e0 [ 40.559132][ T357] ? mutex_unlock+0xb2/0x260 [ 40.563587][ T357] ? __mutex_lock_slowpath+0x10/0x10 [ 40.568742][ T357] __x64_sys_clone+0x23f/0x290 [ 40.573376][ T357] ? __do_sys_vfork+0x130/0x130 [ 40.578079][ T357] ? ksys_write+0x260/0x2c0 [ 40.582900][ T357] ? debug_smp_processor_id+0x17/0x20 [ 40.588397][ T357] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 40.594673][ T357] ? exit_to_user_mode_prepare+0x39/0xa0 [ 40.600508][ T357] do_syscall_64+0x3d/0xb0 [ 40.604706][ T357] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.610445][ T357] RIP: 0033:0x7fa96d429959 [ 40.614779][ T357] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 40.634921][ T357] RSP: 002b:00007fa96cfac078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 40.643330][ T357] RAX: ffffffffffffffda RBX: 00007fa96d548f80 RCX: 00007fa96d429959 [ 40.651594][ T357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 40.659753][ T357] RBP: 00007fa96cfac120 R08: 0000000000000000 R09: 0000000000000000 [ 40.667638][ T357] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 40.675559][ T357] R13: 000000000000000b R14: 00007fa96d548f80 R15: 00007ffda3ef8a08 [ 40.683371][ T357] [ 40.709830][ T361] FAULT_INJECTION: forcing a failure. [ 40.709830][ T361] name failslab, interval 1, probability 0, space 0, times 0 [ 40.722526][ T361] CPU: 1 PID: 361 Comm: syz-executor.0 Not tainted 5.15.149-syzkaller-1069274-g85445b5a2107 #0 [ 40.732958][ T361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 40.743137][ T361] Call Trace: [ 40.746270][ T361] [ 40.749138][ T361] dump_stack_lvl+0x151/0x1b7 [ 40.753731][ T361] ? io_uring_drop_tctx_refs+0x190/0x190 [ 40.759322][ T361] dump_stack+0x15/0x17 [ 40.763278][ T361] should_fail+0x3c6/0x510 [ 40.767528][ T361] __should_failslab+0xa4/0xe0 [ 40.772129][ T361] ? anon_vma_fork+0xf7/0x4e0 [ 40.776736][ T361] should_failslab+0x9/0x20 [ 40.781079][ T361] slab_pre_alloc_hook+0x37/0xd0 [ 40.785850][ T361] ? anon_vma_fork+0xf7/0x4e0 [ 40.790545][ T361] kmem_cache_alloc+0x44/0x200 [ 40.795139][ T361] anon_vma_fork+0xf7/0x4e0 [ 40.799570][ T361] ? anon_vma_name+0x43/0x70 [ 40.804081][ T361] ? vm_area_dup+0x17a/0x230 [ 40.808503][ T361] copy_mm+0xa3a/0x13e0 [ 40.812774][ T361] ? copy_signal+0x610/0x610 [ 40.817460][ T361] ? __init_rwsem+0xd6/0x1c0 [ 40.822163][ T361] ? copy_signal+0x4e3/0x610 [ 40.826754][ T361] copy_process+0x1149/0x3290 [ 40.831272][ T361] ? proc_fail_nth_write+0x20b/0x290 [ 40.836571][ T361] ? fsnotify_perm+0x6a/0x5d0 [ 40.841079][ T361] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 40.846040][ T361] ? vfs_write+0x9ec/0x1110 [ 40.850697][ T361] kernel_clone+0x21e/0x9e0 [ 40.855105][ T361] ? file_end_write+0x1c0/0x1c0 [ 40.859980][ T361] ? create_io_thread+0x1e0/0x1e0 [ 40.865002][ T361] ? mutex_unlock+0xb2/0x260 [ 40.869426][ T361] ? __mutex_lock_slowpath+0x10/0x10 [ 40.874811][ T361] __x64_sys_clone+0x23f/0x290 [ 40.879529][ T361] ? __do_sys_vfork+0x130/0x130 [ 40.884204][ T361] ? ksys_write+0x260/0x2c0 [ 40.888643][ T361] ? debug_smp_processor_id+0x17/0x20 [ 40.893867][ T361] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 40.899918][ T361] ? exit_to_user_mode_prepare+0x39/0xa0 [ 40.905379][ T361] do_syscall_64+0x3d/0xb0 [ 40.909630][ T361] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 40.915358][ T361] RIP: 0033:0x7fa96d429959 [ 40.919613][ T361] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 40.939410][ T361] RSP: 002b:00007fa96cfac078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 40.947910][ T361] RAX: ffffffffffffffda RBX: 00007fa96d548f80 RCX: 00007fa96d429959 [ 40.955801][ T361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 40.963895][ T361] RBP: 00007fa96cfac120 R08: 0000000000000000 R09: 0000000000000000 [ 40.971801][ T361] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 40.979719][ T361] R13: 000000000000000b R14: 00007fa96d548f80 R15: 00007ffda3ef8a08 [ 40.987550][ T361] [ 40.993543][ T361] ------------[ cut here ]------------ [ 40.998845][ T361] refcount_t: underflow; use-after-free. [ 41.004565][ T361] WARNING: CPU: 0 PID: 361 at lib/refcount.c:28 refcount_warn_saturate+0x158/0x1a0 [ 41.014315][ T361] Modules linked in: [ 41.018018][ T361] CPU: 0 PID: 361 Comm: syz-executor.0 Not tainted 5.15.149-syzkaller-1069274-g85445b5a2107 #0 [ 41.028435][ T361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 41.038319][ T361] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 41.044562][ T361] Code: 04 01 48 c7 c7 80 cf 82 85 e8 24 67 dc fe 0f 0b eb 8b e8 bb 23 0b ff c6 05 13 6b 3e 04 01 48 c7 c7 e0 cf 82 85 e8 08 67 dc fe <0f> 0b e9 6c ff ff ff e8 9c 23 0b ff c6 05 f5 6a 3e 04 01 48 c7 c7 [ 41.064138][ T361] RSP: 0018:ffffc90000d67968 EFLAGS: 00010246 [ 41.070003][ T361] RAX: 8a681acc5c772400 RBX: 0000000000000003 RCX: ffff88810c438000 [ 41.077941][ T361] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 41.086184][ T361] RBP: ffffc90000d67978 R08: ffffffff81576225 R09: fffff520001ace55 [ 41.094351][ T361] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110218d68a8 [ 41.102447][ T361] R13: ffff88810c6b4540 R14: 0000000000000003 R15: ffff888123cc0999 [ 41.110212][ T361] FS: 00007fa96cfac6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 41.119366][ T361] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 41.125872][ T361] CR2: 00005614123f82a0 CR3: 000000010cdbc000 CR4: 00000000003506b0 [ 41.133893][ T361] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.141748][ T361] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.149762][ T361] Call Trace: [ 41.153008][ T361] [ 41.155960][ T361] ? show_regs+0x58/0x60 [ 41.160039][ T361] ? __warn+0x160/0x2f0 [ 41.164139][ T361] ? refcount_warn_saturate+0x158/0x1a0 [ 41.169638][ T361] ? report_bug+0x3d9/0x5b0 [ 41.174205][ T361] ? refcount_warn_saturate+0x158/0x1a0 [ 41.179545][ T361] ? handle_bug+0x41/0x70 [ 41.183750][ T361] ? exc_invalid_op+0x1b/0x50 [ 41.188394][ T361] ? asm_exc_invalid_op+0x1b/0x20 [ 41.193444][ T361] ? __wake_up_klogd+0xd5/0x110 [ 41.198128][ T361] ? refcount_warn_saturate+0x158/0x1a0 [ 41.203656][ T361] ? refcount_warn_saturate+0x158/0x1a0 [ 41.209058][ T361] vm_area_free_no_check+0x123/0x130 [ 41.214288][ T361] copy_mm+0xefb/0x13e0 [ 41.218388][ T361] ? copy_signal+0x610/0x610 [ 41.223015][ T361] ? __init_rwsem+0xd6/0x1c0 [ 41.227531][ T361] ? copy_signal+0x4e3/0x610 [ 41.231969][ T361] copy_process+0x1149/0x3290 [ 41.236421][ T361] ? proc_fail_nth_write+0x20b/0x290 [ 41.241740][ T361] ? fsnotify_perm+0x6a/0x5d0 [ 41.246658][ T361] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 41.251929][ T361] ? vfs_write+0x9ec/0x1110 [ 41.256167][ T361] kernel_clone+0x21e/0x9e0 [ 41.260507][ T361] ? file_end_write+0x1c0/0x1c0 [ 41.265325][ T361] ? create_io_thread+0x1e0/0x1e0 [ 41.270138][ T361] ? mutex_unlock+0xb2/0x260 [ 41.274603][ T361] ? __mutex_lock_slowpath+0x10/0x10 [ 41.279971][ T361] __x64_sys_clone+0x23f/0x290 [ 41.284698][ T361] ? __do_sys_vfork+0x130/0x130 [ 41.289733][ T361] ? ksys_write+0x260/0x2c0 [ 41.294268][ T361] ? debug_smp_processor_id+0x17/0x20 [ 41.299548][ T361] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 41.305701][ T361] ? exit_to_user_mode_prepare+0x39/0xa0 [ 41.311321][ T361] do_syscall_64+0x3d/0xb0 [ 41.315549][ T361] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.321394][ T361] RIP: 0033:0x7fa96d429959 [ 41.325698][ T361] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.345830][ T361] RSP: 002b:00007fa96cfac078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 41.354100][ T361] RAX: ffffffffffffffda RBX: 00007fa96d548f80 RCX: 00007fa96d429959 [ 41.362006][ T361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 41.370036][ T361] RBP: 00007fa96cfac120 R08: 0000000000000000 R09: 0000000000000000 [ 41.377978][ T361] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 41.385944][ T361] R13: 000000000000000b R14: 00007fa96d548f80 R15: 00007ffda3ef8a08 [ 41.393870][ T361] [ 41.397064][ T361] ---[ end trace c59c542a0c9b0203 ]--- [ 41.410058][ T363] FAULT_INJECTION: forcing a failure. [ 41.410058][ T363] name failslab, interval 1, probability 0, space 0, times 0 [ 41.423387][ T363] CPU: 1 PID: 363 Comm: syz-executor.0 Tainted: G W 5.15.149-syzkaller-1069274-g85445b5a2107 #0 [ 41.435321][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 41.445479][ T363] Call Trace: [ 41.448771][ T363] [ 41.451557][ T363] dump_stack_lvl+0x151/0x1b7 [ 41.456062][ T363] ? io_uring_drop_tctx_refs+0x190/0x190 [ 41.461530][ T363] dump_stack+0x15/0x17 [ 41.465531][ T363] should_fail+0x3c6/0x510 [ 41.469805][ T363] __should_failslab+0xa4/0xe0 [ 41.474376][ T363] ? anon_vma_fork+0x1df/0x4e0 [ 41.479218][ T363] should_failslab+0x9/0x20 [ 41.483725][ T363] slab_pre_alloc_hook+0x37/0xd0 [ 41.488593][ T363] ? anon_vma_fork+0x1df/0x4e0 [ 41.493401][ T363] kmem_cache_alloc+0x44/0x200 [ 41.498355][ T363] anon_vma_fork+0x1df/0x4e0 [ 41.502890][ T363] copy_mm+0xa3a/0x13e0 [ 41.506886][ T363] ? copy_signal+0x610/0x610 [ 41.511451][ T363] ? __init_rwsem+0xd6/0x1c0 [ 41.515874][ T363] ? copy_signal+0x4e3/0x610 [ 41.520389][ T363] copy_process+0x1149/0x3290 [ 41.524908][ T363] ? proc_fail_nth_write+0x20b/0x290 [ 41.530110][ T363] ? fsnotify_perm+0x6a/0x5d0 [ 41.534738][ T363] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 41.539753][ T363] ? vfs_write+0x9ec/0x1110 [ 41.544093][ T363] kernel_clone+0x21e/0x9e0 [ 41.548568][ T363] ? file_end_write+0x1c0/0x1c0 [ 41.553327][ T363] ? create_io_thread+0x1e0/0x1e0 [ 41.558275][ T363] ? mutex_unlock+0xb2/0x260 [ 41.563002][ T363] ? __mutex_lock_slowpath+0x10/0x10 [ 41.568465][ T363] __x64_sys_clone+0x23f/0x290 [ 41.573147][ T363] ? __do_sys_vfork+0x130/0x130 [ 41.578124][ T363] ? ksys_write+0x260/0x2c0 [ 41.582565][ T363] ? debug_smp_processor_id+0x17/0x20 [ 41.587878][ T363] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 41.593837][ T363] ? exit_to_user_mode_prepare+0x39/0xa0 [ 41.599659][ T363] do_syscall_64+0x3d/0xb0 [ 41.604006][ T363] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.609981][ T363] RIP: 0033:0x7fa96d429959 [ 41.614343][ T363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.634684][ T363] RSP: 002b:00007fa96cfac078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 41.643009][ T363] RAX: ffffffffffffffda RBX: 00007fa96d548f80 RCX: 00007fa96d429959 [ 41.650806][ T363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 41.658618][ T363] RBP: 00007fa96cfac120 R08: 0000000000000000 R09: 0000000000000000 [ 41.666516][ T363] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 41.674317][ T363] R13: 000000000000000b R14: 00007fa96d548f80 R15: 00007ffda3ef8a08 [ 41.682143][ T363] [ 41.695199][ T366] FAULT_INJECTION: forcing a failure. [ 41.695199][ T366] name failslab, interval 1, probability 0, space 0, times 0 [ 41.708019][ T366] CPU: 1 PID: 366 Comm: syz-executor.0 Tainted: G W 5.15.149-syzkaller-1069274-g85445b5a2107 #0 [ 41.719836][ T366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 41.730025][ T366] Call Trace: [ 41.733590][ T366] [ 41.736558][ T366] dump_stack_lvl+0x151/0x1b7 [ 41.741097][ T366] ? io_uring_drop_tctx_refs+0x190/0x190 [ 41.746730][ T366] dump_stack+0x15/0x17 [ 41.750698][ T366] should_fail+0x3c6/0x510 [ 41.755149][ T366] __should_failslab+0xa4/0xe0 [ 41.759812][ T366] ? anon_vma_fork+0xf7/0x4e0 [ 41.764325][ T366] should_failslab+0x9/0x20 [ 41.768620][ T366] slab_pre_alloc_hook+0x37/0xd0 [ 41.773374][ T366] ? anon_vma_fork+0xf7/0x4e0 [ 41.778098][ T366] kmem_cache_alloc+0x44/0x200 [ 41.782951][ T366] anon_vma_fork+0xf7/0x4e0 [ 41.787289][ T366] ? anon_vma_name+0x43/0x70 [ 41.791725][ T366] ? vm_area_dup+0x17a/0x230 [ 41.796319][ T366] copy_mm+0xa3a/0x13e0 [ 41.800412][ T366] ? copy_signal+0x610/0x610 [ 41.804837][ T366] ? __init_rwsem+0xd6/0x1c0 [ 41.809523][ T366] ? copy_signal+0x4e3/0x610 [ 41.813980][ T366] copy_process+0x1149/0x3290 [ 41.818467][ T366] ? proc_fail_nth_write+0x20b/0x290 [ 41.823673][ T366] ? fsnotify_perm+0x6a/0x5d0 [ 41.828187][ T366] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 41.833136][ T366] ? vfs_write+0x9ec/0x1110 [ 41.837480][ T366] kernel_clone+0x21e/0x9e0 [ 41.841812][ T366] ? file_end_write+0x1c0/0x1c0 [ 41.846499][ T366] ? create_io_thread+0x1e0/0x1e0 [ 41.851450][ T366] ? mutex_unlock+0xb2/0x260 [ 41.855871][ T366] ? __mutex_lock_slowpath+0x10/0x10 [ 41.860998][ T366] __x64_sys_clone+0x23f/0x290 [ 41.865593][ T366] ? __do_sys_vfork+0x130/0x130 [ 41.870395][ T366] ? ksys_write+0x260/0x2c0 [ 41.874871][ T366] ? debug_smp_processor_id+0x17/0x20 [ 41.880240][ T366] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 41.886143][ T366] ? exit_to_user_mode_prepare+0x39/0xa0 [ 41.891588][ T366] do_syscall_64+0x3d/0xb0 [ 41.895853][ T366] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 41.902089][ T366] RIP: 0033:0x7fa96d429959 [ 41.906519][ T366] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 41.926766][ T366] RSP: 002b:00007fa96cfac078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 41.935438][ T366] RAX: ffffffffffffffda RBX: 00007fa96d548f80 RCX: 00007fa96d429959 [ 41.943462][ T366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 41.951624][ T366] RBP: 00007fa96cfac120 R08: 0000000000000000 R09: 0000000000000000 [ 41.959443][ T366] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 41.967260][ T366] R13: 000000000000000b R14: 00007fa96d548f80 R15: 00007ffda3ef8a08 [ 41.975410][ T366] [ 41.987612][ T342] BUG: unable to handle page fault for address: ffffed1800000012 [ 41.995340][ T342] #PF: supervisor read access in kernel mode [ 42.001345][ T342] #PF: error_code(0x0000) - not-present page [ 42.007135][ T342] PGD 23fff2067 P4D 23fff2067 PUD 0 [ 42.012266][ T342] Oops: 0000 [#1] PREEMPT SMP KASAN [ 42.017290][ T342] CPU: 0 PID: 342 Comm: syz-executor.0 Tainted: G W 5.15.149-syzkaller-1069274-g85445b5a2107 #0 [ 42.029187][ T342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 42.039165][ T342] RIP: 0010:__rb_insert_augmented+0x36b/0x610 [ 42.045231][ T342] Code: 49 89 5d 00 48 83 e3 fc 43 80 3c 26 00 74 08 4c 89 ff e8 58 f8 2a ff 4d 89 2f 48 85 db 74 2a 4c 8d 73 10 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 96 f7 2a ff 48 8d 43 08 4c 39 7b [ 42.064775][ T342] RSP: 0018:ffffc90000a478f8 EFLAGS: 00010a06 [ 42.070961][ T342] RAX: 1ffff11800000012 RBX: ffff88c000000080 RCX: ffff88810a5f62c0 [ 42.078903][ T342] RDX: 0000000000000000 RSI: ffff88810cace3d0 RDI: ffff8881073b01c0 [ 42.086738][ T342] RBP: ffffc90000a47960 R08: dffffc0000000000 R09: ffff88810cace3d8 [ 42.094984][ T342] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 42.102986][ T342] R13: ffff88810cace3d0 R14: ffff88c000000090 R15: ffff888123cc0998 [ 42.110801][ T342] FS: 000055555705b480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 42.119746][ T342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.126252][ T342] CR2: ffffed1800000012 CR3: 00000001073b4000 CR4: 00000000003506b0 [ 42.134150][ T342] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.142164][ T342] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.149942][ T342] Call Trace: [ 42.153177][ T342] [ 42.155955][ T342] ? __die_body+0x62/0xb0 [ 42.160206][ T342] ? __die+0x7e/0x90 [ 42.164113][ T342] ? page_fault_oops+0x7f9/0xa90 [ 42.168886][ T342] ? __rb_insert_augmented+0x36b/0x610 [ 42.174194][ T342] ? kernelmode_fixup_or_oops+0x270/0x270 [ 42.179751][ T342] ? is_prefetch+0x47a/0x6d0 [ 42.184248][ T342] ? search_bpf_extables+0x26d/0x2c0 [ 42.189898][ T342] ? __rb_insert_augmented+0x36b/0x610 [ 42.195379][ T342] ? __rb_insert_augmented+0x36b/0x610 [ 42.200662][ T342] ? __rb_insert_augmented+0x36b/0x610 [ 42.205956][ T342] ? fixup_exception+0xbb/0x13c0 [ 42.210809][ T342] ? stack_trace_save+0x113/0x1c0 [ 42.215676][ T342] ? kernelmode_fixup_or_oops+0x21b/0x270 [ 42.221321][ T342] ? __bad_area_nosemaphore+0xcf/0x490 [ 42.226816][ T342] ? __kasan_slab_alloc+0xc3/0xe0 [ 42.232067][ T342] ? bad_area_nosemaphore+0x2d/0x40 [ 42.237175][ T342] ? do_kern_addr_fault+0x69/0x80 [ 42.242548][ T342] ? exc_page_fault+0x4eb/0x830 [ 42.247331][ T342] ? asm_exc_page_fault+0x27/0x30 [ 42.252271][ T342] ? __rb_insert_augmented+0x36b/0x610 [ 42.257838][ T342] ? __rb_insert_augmented+0x28f/0x610 [ 42.263122][ T342] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 42.269372][ T342] vma_interval_tree_insert_after+0x2be/0x2d0 [ 42.275456][ T342] copy_mm+0xba2/0x13e0 [ 42.279593][ T342] ? copy_signal+0x610/0x610 [ 42.284133][ T342] ? __init_rwsem+0xd6/0x1c0 [ 42.288620][ T342] ? copy_signal+0x4e3/0x610 [ 42.293042][ T342] copy_process+0x1149/0x3290 [ 42.297547][ T342] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 42.302595][ T342] kernel_clone+0x21e/0x9e0 [ 42.307460][ T342] ? kernel_read+0x1f0/0x1f0 [ 42.311976][ T342] ? kmem_cache_free+0x116/0x2e0 [ 42.316845][ T342] ? create_io_thread+0x1e0/0x1e0 [ 42.321794][ T342] ? debug_smp_processor_id+0x17/0x20 [ 42.327084][ T342] __x64_sys_clone+0x23f/0x290 [ 42.331877][ T342] ? __do_sys_vfork+0x130/0x130 [ 42.336749][ T342] do_syscall_64+0x3d/0xb0 [ 42.341002][ T342] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.346720][ T342] RIP: 0033:0x7fa96d426a93 [ 42.350998][ T342] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 42.370559][ T342] RSP: 002b:00007ffda3ef8c18 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 42.378789][ T342] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fa96d426a93 [ 42.386922][ T342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 42.395121][ T342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 42.403208][ T342] R10: 000055555705b750 R11: 0000000000000246 R12: 0000000000000001 [ 42.411186][ T342] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 42.419317][ T342] [ 42.422286][ T342] Modules linked in: [ 42.426101][ T342] CR2: ffffed1800000012 [ 42.430237][ T342] ---[ end trace c59c542a0c9b0204 ]--- [ 42.435561][ T342] RIP: 0010:__rb_insert_augmented+0x36b/0x610 [ 42.442031][ T342] Code: 49 89 5d 00 48 83 e3 fc 43 80 3c 26 00 74 08 4c 89 ff e8 58 f8 2a ff 4d 89 2f 48 85 db 74 2a 4c 8d 73 10 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 96 f7 2a ff 48 8d 43 08 4c 39 7b [ 42.461899][ T342] RSP: 0018:ffffc90000a478f8 EFLAGS: 00010a06 [ 42.467935][ T342] RAX: 1ffff11800000012 RBX: ffff88c000000080 RCX: ffff88810a5f62c0 [ 42.475842][ T342] RDX: 0000000000000000 RSI: ffff88810cace3d0 RDI: ffff8881073b01c0 [ 42.483655][ T342] RBP: ffffc90000a47960 R08: dffffc0000000000 R09: ffff88810cace3d8 [ 42.491472][ T342] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 42.499375][ T342] R13: ffff88810cace3d0 R14: ffff88c000000090 R15: ffff888123cc0998 [ 42.507537][ T342] FS: 000055555705b480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 42.516380][ T342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 42.522849][ T342] CR2: ffffed1800000012 CR3: 00000001073b4000 CR4: 00000000003506b0 [ 42.530965][ T342] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 42.538833][ T342] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 42.546668][ T342] Kernel panic - not syncing: Fatal exception [ 42.553188][ T342] Kernel Offset: disabled [ 42.557338][ T342] Rebooting in 86400 seconds..