u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 32.875492][ T30] audit: type=1400 audit(1712543049.140:151): avc: denied { siginh } for pid=318 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.0.232' (ED25519) to the list of known hosts. 2024/04/08 02:24:16 ignoring optional flag "sandboxArg"="0" 2024/04/08 02:24:17 parsed 1 programs 2024/04/08 02:24:17 executed programs: 0 [ 40.770756][ T30] audit: type=1400 audit(1712543057.090:152): avc: denied { mounton } for pid=340 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 40.797712][ T30] audit: type=1400 audit(1712543057.100:153): avc: denied { mount } for pid=340 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 41.035142][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.042074][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.049584][ T358] device bridge_slave_0 entered promiscuous mode [ 41.073120][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.079972][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.088136][ T358] device bridge_slave_1 entered promiscuous mode [ 41.098207][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.105093][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.112287][ T350] device bridge_slave_0 entered promiscuous mode [ 41.118818][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.126023][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.133816][ T355] device bridge_slave_0 entered promiscuous mode [ 41.140622][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.147720][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.155016][ T354] device bridge_slave_0 entered promiscuous mode [ 41.161620][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.168468][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.175845][ T353] device bridge_slave_0 entered promiscuous mode [ 41.185191][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.192199][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.199439][ T353] device bridge_slave_1 entered promiscuous mode [ 41.208781][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.215813][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.223238][ T350] device bridge_slave_1 entered promiscuous mode [ 41.229974][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.237043][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.244485][ T355] device bridge_slave_1 entered promiscuous mode [ 41.251726][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.258996][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.266740][ T354] device bridge_slave_1 entered promiscuous mode [ 41.294589][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.301919][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.309266][ T357] device bridge_slave_0 entered promiscuous mode [ 41.335527][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.342614][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.350126][ T357] device bridge_slave_1 entered promiscuous mode [ 41.544543][ T30] audit: type=1400 audit(1712543057.870:154): avc: denied { write } for pid=354 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.550584][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.565280][ T30] audit: type=1400 audit(1712543057.870:155): avc: denied { read } for pid=354 comm="syz-executor.5" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.571823][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.571926][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.606310][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.643575][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.650442][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.657571][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.664653][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.686622][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.693586][ T350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.701046][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.707978][ T350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.718212][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.725171][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.732368][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.739118][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.755239][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.762294][ T358] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.769508][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.776509][ T358] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.802365][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.809392][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.816514][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.823298][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.860504][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.868532][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.875699][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.883140][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.890322][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.897708][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.905063][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.912176][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.919371][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.926473][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.933785][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.941145][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.948187][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.996297][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.005520][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.013613][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.021520][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.028784][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.036996][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.043946][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.051182][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.059216][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.066173][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.073339][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.081540][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.088878][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.096415][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.104844][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.112926][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.119988][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.127660][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.136827][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.145141][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.152143][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.159869][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.168216][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.176337][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.184044][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.191533][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.199954][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.208347][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.215307][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.242169][ T350] device veth0_vlan entered promiscuous mode [ 42.251674][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.259812][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.268558][ T300] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.275614][ T300] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.282987][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.291925][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.299858][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.308357][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.316240][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.324167][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.331624][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.338942][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.347371][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.355632][ T300] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.362499][ T300] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.391083][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.399394][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.408332][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.416659][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.424163][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.432606][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.440530][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.447476][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.454769][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 42.462099][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.469461][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 42.477721][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.485876][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.492751][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.499960][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.508466][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.516715][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.523610][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.530835][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 42.539012][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.547244][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 42.555357][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.569819][ T355] device veth0_vlan entered promiscuous mode [ 42.579037][ T354] device veth0_vlan entered promiscuous mode [ 42.586271][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.594594][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.602415][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.609732][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.617862][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.625414][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.641149][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.649383][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.657804][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.664668][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.672130][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.680004][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.695443][ T355] device veth1_macvtap entered promiscuous mode [ 42.714092][ T358] device veth0_vlan entered promiscuous mode [ 42.721467][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.729987][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.739578][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.747859][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.755768][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.763651][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 42.772157][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.780317][ T295] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.787199][ T295] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.801356][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.809353][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.817307][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.835966][ T350] device veth1_macvtap entered promiscuous mode [ 42.853582][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.862412][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.870506][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.878722][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.886943][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.895299][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.909829][ T354] device veth1_macvtap entered promiscuous mode [ 42.922553][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 42.931204][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.939384][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 42.948023][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.956449][ T295] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.970330][ T30] audit: type=1400 audit(1712543059.300:156): avc: denied { mounton } for pid=350 comm="syz-executor.2" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 42.981724][ T358] device veth1_macvtap entered promiscuous mode [ 43.002247][ T357] device veth0_vlan entered promiscuous mode [ 43.014909][ T357] device veth1_macvtap entered promiscuous mode [ 43.025566][ T381] FAULT_INJECTION: forcing a failure. [ 43.025566][ T381] name failslab, interval 1, probability 0, space 0, times 1 [ 43.039290][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.039645][ T381] CPU: 1 PID: 381 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 43.050284][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.057436][ T381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 43.057456][ T381] Call Trace: [ 43.057463][ T381] [ 43.057470][ T381] dump_stack_lvl+0x151/0x1b7 [ 43.057497][ T381] ? io_uring_drop_tctx_refs+0x190/0x190 [ 43.070545][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.076347][ T381] dump_stack+0x15/0x17 [ 43.076380][ T381] should_fail+0x3c6/0x510 [ 43.076400][ T381] __should_failslab+0xa4/0xe0 [ 43.076421][ T381] ? anon_vma_fork+0xf7/0x4e0 [ 43.080665][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.082503][ T381] should_failslab+0x9/0x20 [ 43.082530][ T381] slab_pre_alloc_hook+0x37/0xd0 [ 43.082553][ T381] ? anon_vma_fork+0xf7/0x4e0 [ 43.082568][ T381] kmem_cache_alloc+0x44/0x200 [ 43.082589][ T381] anon_vma_fork+0xf7/0x4e0 [ 43.082606][ T381] ? anon_vma_name+0x43/0x70 [ 43.082627][ T381] ? vm_area_dup+0x17a/0x230 [ 43.088344][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.093067][ T381] copy_mm+0xa3a/0x13e0 [ 43.093107][ T381] ? copy_signal+0x610/0x610 [ 43.093128][ T381] ? __init_rwsem+0xd6/0x1c0 [ 43.101636][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.104779][ T381] ? copy_signal+0x4e3/0x610 [ 43.104810][ T381] copy_process+0x1149/0x3290 [ 43.109399][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.113629][ T381] ? proc_fail_nth_write+0x20b/0x290 [ 43.113655][ T381] ? fsnotify_perm+0x6a/0x5d0 [ 43.119293][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.126335][ T381] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 43.126366][ T381] ? vfs_write+0x9ec/0x1110 [ 43.126387][ T381] kernel_clone+0x21e/0x9e0 [ 43.131828][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.135974][ T381] ? file_end_write+0x1c0/0x1c0 [ 43.136005][ T381] ? create_io_thread+0x1e0/0x1e0 [ 43.141388][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.145195][ T381] ? mutex_unlock+0xb2/0x260 [ 43.145232][ T381] ? __mutex_lock_slowpath+0x10/0x10 [ 43.145253][ T381] __x64_sys_clone+0x23f/0x290 [ 43.150132][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.154025][ T381] ? __do_sys_vfork+0x130/0x130 [ 43.154051][ T381] ? ksys_write+0x260/0x2c0 [ 43.154071][ T381] ? debug_smp_processor_id+0x17/0x20 [ 43.170368][ T353] device veth0_vlan entered promiscuous mode [ 43.174168][ T381] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 43.174200][ T381] ? exit_to_user_mode_prepare+0x39/0xa0 [ 43.204650][ T353] device veth1_macvtap entered promiscuous mode [ 43.208533][ T381] do_syscall_64+0x3d/0xb0 [ 43.225733][ T384] FAULT_INJECTION: forcing a failure. [ 43.225733][ T384] name failslab, interval 1, probability 0, space 0, times 1 [ 43.226236][ T381] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.342896][ T381] RIP: 0033:0x7fe5212f7959 [ 43.347155][ T381] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.366779][ T381] RSP: 002b:00007fe520e7a078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 43.375374][ T381] RAX: ffffffffffffffda RBX: 00007fe521416f80 RCX: 00007fe5212f7959 [ 43.383175][ T381] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000070000000 [ 43.390987][ T381] RBP: 00007fe520e7a120 R08: 0000000000000000 R09: 0000000000000000 [ 43.398802][ T381] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 43.406619][ T381] R13: 000000000000000b R14: 00007fe521416f80 R15: 00007ffd154ec988 [ 43.414423][ T381] [ 43.417723][ T384] CPU: 0 PID: 384 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 43.428063][ T384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 43.437953][ T384] Call Trace: [ 43.441077][ T384] [ 43.443857][ T384] dump_stack_lvl+0x151/0x1b7 [ 43.448365][ T384] ? io_uring_drop_tctx_refs+0x190/0x190 [ 43.453833][ T384] ? avc_denied+0x1b0/0x1b0 [ 43.458299][ T384] dump_stack+0x15/0x17 [ 43.462272][ T384] should_fail+0x3c6/0x510 [ 43.466692][ T384] __should_failslab+0xa4/0xe0 [ 43.471290][ T384] ? vm_area_dup+0x26/0x230 [ 43.475726][ T384] should_failslab+0x9/0x20 [ 43.480053][ T384] slab_pre_alloc_hook+0x37/0xd0 [ 43.484903][ T384] ? vm_area_dup+0x26/0x230 [ 43.489257][ T384] kmem_cache_alloc+0x44/0x200 [ 43.493856][ T384] vm_area_dup+0x26/0x230 [ 43.498039][ T384] copy_mm+0x9a1/0x13e0 [ 43.502017][ T384] ? copy_signal+0x610/0x610 [ 43.506439][ T384] ? __init_rwsem+0xd6/0x1c0 [ 43.510867][ T384] ? copy_signal+0x4e3/0x610 [ 43.515303][ T384] copy_process+0x1149/0x3290 [ 43.519993][ T384] ? proc_fail_nth_write+0x20b/0x290 [ 43.525117][ T384] ? fsnotify_perm+0x6a/0x5d0 [ 43.529623][ T384] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 43.534569][ T384] ? vfs_write+0x9ec/0x1110 [ 43.539083][ T384] kernel_clone+0x21e/0x9e0 [ 43.543431][ T384] ? file_end_write+0x1c0/0x1c0 [ 43.548152][ T384] ? create_io_thread+0x1e0/0x1e0 [ 43.552971][ T384] ? mutex_unlock+0xb2/0x260 [ 43.557483][ T384] ? __mutex_lock_slowpath+0x10/0x10 [ 43.562606][ T384] __x64_sys_clone+0x23f/0x290 [ 43.567205][ T384] ? __do_sys_vfork+0x130/0x130 [ 43.572111][ T384] ? ksys_write+0x260/0x2c0 [ 43.576406][ T384] ? debug_smp_processor_id+0x17/0x20 [ 43.581698][ T384] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 43.587685][ T384] ? exit_to_user_mode_prepare+0x39/0xa0 [ 43.593253][ T384] do_syscall_64+0x3d/0xb0 [ 43.597492][ T384] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.603500][ T384] RIP: 0033:0x7fae9cc59959 [ 43.607745][ T384] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.627650][ T384] RSP: 002b:00007fae9c7dc078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 43.636176][ T384] RAX: ffffffffffffffda RBX: 00007fae9cd78f80 RCX: 00007fae9cc59959 [ 43.644106][ T384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000070000000 [ 43.651912][ T384] RBP: 00007fae9c7dc120 R08: 0000000000000000 R09: 0000000000000000 [ 43.659758][ T384] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 43.667737][ T384] R13: 000000000000000b R14: 00007fae9cd78f80 R15: 00007ffe079a72b8 [ 43.675809][ T384] [ 43.704098][ T387] FAULT_INJECTION: forcing a failure. [ 43.704098][ T387] name failslab, interval 1, probability 0, space 0, times 0 [ 43.717162][ T387] CPU: 1 PID: 387 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 43.719283][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.727312][ T387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 43.727324][ T387] Call Trace: [ 43.727330][ T387] [ 43.727337][ T387] dump_stack_lvl+0x151/0x1b7 [ 43.738812][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.745912][ T387] ? io_uring_drop_tctx_refs+0x190/0x190 [ 43.745945][ T387] dump_stack+0x15/0x17 [ 43.749424][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 43.751892][ T387] should_fail+0x3c6/0x510 [ 43.751916][ T387] __should_failslab+0xa4/0xe0 [ 43.756944][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.763524][ T387] ? anon_vma_fork+0x1df/0x4e0 [ 43.763548][ T387] should_failslab+0x9/0x20 [ 43.763567][ T387] slab_pre_alloc_hook+0x37/0xd0 [ 43.763587][ T387] ? anon_vma_fork+0x1df/0x4e0 [ 43.763603][ T387] kmem_cache_alloc+0x44/0x200 [ 43.763623][ T387] anon_vma_fork+0x1df/0x4e0 [ 43.773270][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 43.775628][ T387] copy_mm+0xa3a/0x13e0 [ 43.784470][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.788355][ T387] ? copy_signal+0x610/0x610 [ 43.793504][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 43.800925][ T387] ? __init_rwsem+0xd6/0x1c0 [ 43.800953][ T387] ? copy_signal+0x4e3/0x610 [ 43.805917][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.809862][ T387] copy_process+0x1149/0x3290 [ 43.809892][ T387] ? proc_fail_nth_write+0x20b/0x290 [ 43.816150][ T388] FAULT_INJECTION: forcing a failure. [ 43.816150][ T388] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 43.819454][ T387] ? fsnotify_perm+0x6a/0x5d0 [ 43.828278][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 43.828445][ T387] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 43.845108][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.847675][ T387] ? vfs_write+0x9ec/0x1110 [ 43.860054][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.864424][ T387] kernel_clone+0x21e/0x9e0 [ 43.864453][ T387] ? file_end_write+0x1c0/0x1c0 [ 43.864471][ T387] ? create_io_thread+0x1e0/0x1e0 [ 43.879061][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.881175][ T387] ? mutex_unlock+0xb2/0x260 [ 43.881204][ T387] ? __mutex_lock_slowpath+0x10/0x10 [ 43.901383][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.903919][ T387] __x64_sys_clone+0x23f/0x290 [ 43.912192][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.916266][ T387] ? __do_sys_vfork+0x130/0x130 [ 43.916298][ T387] ? ksys_write+0x260/0x2c0 [ 43.934362][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.936571][ T387] ? debug_smp_processor_id+0x17/0x20 [ 43.948945][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 43.950545][ T387] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 43.968495][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.976154][ T387] ? exit_to_user_mode_prepare+0x39/0xa0 [ 43.976191][ T387] do_syscall_64+0x3d/0xb0 [ 43.976211][ T387] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.976235][ T387] RIP: 0033:0x7fe5212f7959 [ 43.994405][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 43.997814][ T387] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.997834][ T387] RSP: 002b:00007fe520e7a078 EFLAGS: 00000206 [ 44.018210][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.019090][ T387] ORIG_RAX: 0000000000000038 [ 44.019101][ T387] RAX: ffffffffffffffda RBX: 00007fe521416f80 RCX: 00007fe5212f7959 [ 44.019116][ T387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000070000000 [ 44.034979][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.038615][ T387] RBP: 00007fe520e7a120 R08: 0000000000000000 R09: 0000000000000000 [ 44.038632][ T387] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 44.050956][ T299] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.053470][ T387] R13: 000000000000000b R14: 00007fe521416f80 R15: 00007ffd154ec988 [ 44.053493][ T387] [ 44.156116][ T388] CPU: 0 PID: 388 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 44.166275][ T388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 44.176162][ T388] Call Trace: [ 44.179282][ T388] [ 44.182060][ T388] dump_stack_lvl+0x151/0x1b7 [ 44.186577][ T388] ? io_uring_drop_tctx_refs+0x190/0x190 [ 44.192047][ T388] dump_stack+0x15/0x17 [ 44.196036][ T388] should_fail+0x3c6/0x510 [ 44.200285][ T388] should_fail_alloc_page+0x5a/0x80 [ 44.205433][ T388] prepare_alloc_pages+0x15c/0x700 [ 44.210558][ T388] ? __alloc_pages_bulk+0xe40/0xe40 [ 44.215572][ T388] __alloc_pages+0x18c/0x8f0 [ 44.219994][ T388] ? prep_new_page+0x110/0x110 [ 44.224947][ T388] ? __alloc_pages+0x27e/0x8f0 [ 44.229656][ T388] ? __kasan_check_write+0x14/0x20 [ 44.234670][ T388] ? _raw_spin_lock+0xa4/0x1b0 [ 44.239292][ T388] pte_alloc_one+0x73/0x1b0 [ 44.243712][ T388] ? pfn_modify_allowed+0x2f0/0x2f0 [ 44.248743][ T388] ? __pmd_alloc+0x48d/0x550 [ 44.253168][ T388] __pte_alloc+0x86/0x350 [ 44.257570][ T388] ? __pud_alloc+0x260/0x260 [ 44.262267][ T388] ? free_pgtables+0x280/0x280 [ 44.266880][ T388] ? __stack_depot_save+0x34/0x470 [ 44.271917][ T388] ? anon_vma_clone+0x9a/0x500 [ 44.276534][ T388] copy_page_range+0x28a8/0x2f90 [ 44.281273][ T388] ? __kasan_slab_alloc+0xb1/0xe0 [ 44.286231][ T388] ? slab_post_alloc_hook+0x53/0x2c0 [ 44.291343][ T388] ? kernel_clone+0x21e/0x9e0 [ 44.295865][ T388] ? do_syscall_64+0x3d/0xb0 [ 44.300278][ T388] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.306208][ T388] ? pfn_valid+0x1e0/0x1e0 [ 44.310533][ T388] ? rwsem_write_trylock+0x15b/0x290 [ 44.315823][ T388] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 44.322151][ T388] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 44.327796][ T388] ? __rb_insert_augmented+0x5de/0x610 [ 44.333199][ T388] copy_mm+0xc7e/0x13e0 [ 44.337171][ T388] ? copy_signal+0x610/0x610 [ 44.341598][ T388] ? __init_rwsem+0xd6/0x1c0 [ 44.346020][ T388] ? copy_signal+0x4e3/0x610 [ 44.350448][ T388] copy_process+0x1149/0x3290 [ 44.355052][ T388] ? proc_fail_nth_write+0x20b/0x290 [ 44.360201][ T388] ? fsnotify_perm+0x6a/0x5d0 [ 44.364684][ T388] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 44.369716][ T388] ? vfs_write+0x9ec/0x1110 [ 44.374058][ T388] kernel_clone+0x21e/0x9e0 [ 44.378396][ T388] ? file_end_write+0x1c0/0x1c0 [ 44.383081][ T388] ? create_io_thread+0x1e0/0x1e0 [ 44.388991][ T388] ? mutex_unlock+0xb2/0x260 [ 44.393412][ T388] ? __mutex_lock_slowpath+0x10/0x10 [ 44.398722][ T388] __x64_sys_clone+0x23f/0x290 [ 44.403316][ T388] ? __do_sys_vfork+0x130/0x130 [ 44.408001][ T388] ? ksys_write+0x260/0x2c0 [ 44.412340][ T388] ? debug_smp_processor_id+0x17/0x20 [ 44.417556][ T388] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 44.423549][ T388] ? exit_to_user_mode_prepare+0x39/0xa0 [ 44.429018][ T388] do_syscall_64+0x3d/0xb0 [ 44.433268][ T388] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.439005][ T388] RIP: 0033:0x7fae9cc59959 [ 44.443464][ T388] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.463247][ T388] RSP: 002b:00007fae9c7dc078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 44.471489][ T388] RAX: ffffffffffffffda RBX: 00007fae9cd78f80 RCX: 00007fae9cc59959 [ 44.479304][ T388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000070000000 [ 44.487117][ T388] RBP: 00007fae9c7dc120 R08: 0000000000000000 R09: 0000000000000000 [ 44.494923][ T388] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 44.502741][ T388] R13: 000000000000000b R14: 00007fae9cd78f80 R15: 00007ffe079a72b8 [ 44.510555][ T388] [ 44.546809][ T387] ------------[ cut here ]------------ [ 44.554378][ T387] refcount_t: underflow; use-after-free. [ 44.562054][ T387] WARNING: CPU: 0 PID: 387 at lib/refcount.c:28 refcount_warn_saturate+0x158/0x1a0 [ 44.575040][ T394] FAULT_INJECTION: forcing a failure. [ 44.575040][ T394] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 44.593219][ T398] FAULT_INJECTION: forcing a failure. [ 44.593219][ T398] name failslab, interval 1, probability 0, space 0, times 0 [ 44.606955][ T397] FAULT_INJECTION: forcing a failure. [ 44.606955][ T397] name failslab, interval 1, probability 0, space 0, times 0 [ 44.613373][ T403] FAULT_INJECTION: forcing a failure. [ 44.613373][ T403] name failslab, interval 1, probability 0, space 0, times 0 [ 44.625339][ T397] CPU: 1 PID: 397 Comm: syz-executor.4 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 44.633220][ T400] FAULT_INJECTION: forcing a failure. [ 44.633220][ T400] name failslab, interval 1, probability 0, space 0, times 0 [ 44.642636][ T397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 44.642651][ T397] Call Trace: [ 44.642656][ T397] [ 44.642664][ T397] dump_stack_lvl+0x151/0x1b7 [ 44.642688][ T397] ? io_uring_drop_tctx_refs+0x190/0x190 [ 44.642709][ T397] dump_stack+0x15/0x17 [ 44.642725][ T397] should_fail+0x3c6/0x510 [ 44.642744][ T397] __should_failslab+0xa4/0xe0 [ 44.642765][ T397] ? anon_vma_clone+0x9a/0x500 [ 44.642782][ T397] should_failslab+0x9/0x20 [ 44.660274][ T387] Modules linked in: [ 44.665568][ T397] slab_pre_alloc_hook+0x37/0xd0 [ 44.665602][ T397] ? anon_vma_clone+0x9a/0x500 [ 44.665618][ T397] kmem_cache_alloc+0x44/0x200 [ 44.690944][ T387] [ 44.694708][ T397] anon_vma_clone+0x9a/0x500 [ 44.699389][ T387] CPU: 0 PID: 387 Comm: syz-executor.2 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 44.703647][ T397] anon_vma_fork+0x91/0x4e0 [ 44.703673][ T397] ? anon_vma_name+0x43/0x70 [ 44.703696][ T397] ? vm_area_dup+0x17a/0x230 [ 44.720909][ T387] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 44.721351][ T397] copy_mm+0xa3a/0x13e0 [ 44.723553][ T387] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 44.727950][ T397] ? copy_signal+0x610/0x610 [ 44.773194][ T387] Code: 04 01 48 c7 c7 80 c3 82 85 e8 e4 b4 dc fe 0f 0b eb 8b e8 3b 5d 0b ff c6 05 b3 a4 3e 04 01 48 c7 c7 e0 c3 82 85 e8 c8 b4 dc fe <0f> 0b e9 6c ff ff ff e8 1c 5d 0b ff c6 05 95 a4 3e 04 01 48 c7 c7 [ 44.776336][ T397] ? __init_rwsem+0xd6/0x1c0 [ 44.801173][ T397] ? copy_signal+0x4e3/0x610 [ 44.805588][ T397] copy_process+0x1149/0x3290 [ 44.810177][ T397] ? proc_fail_nth_write+0x20b/0x290 [ 44.815326][ T397] ? fsnotify_perm+0x6a/0x5d0 [ 44.819876][ T397] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 44.824845][ T397] ? vfs_write+0x9ec/0x1110 [ 44.829291][ T397] kernel_clone+0x21e/0x9e0 [ 44.833610][ T397] ? file_end_write+0x1c0/0x1c0 [ 44.838294][ T397] ? create_io_thread+0x1e0/0x1e0 [ 44.843159][ T397] ? mutex_unlock+0xb2/0x260 [ 44.847583][ T397] ? __mutex_lock_slowpath+0x10/0x10 [ 44.852702][ T397] __x64_sys_clone+0x23f/0x290 [ 44.857389][ T397] ? __do_sys_vfork+0x130/0x130 [ 44.860916][ T387] RSP: 0018:ffffc90000f67968 EFLAGS: 00010246 [ 44.862167][ T397] ? ksys_write+0x260/0x2c0 [ 44.862189][ T397] ? debug_smp_processor_id+0x17/0x20 [ 44.877712][ T397] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 44.883988][ T397] ? exit_to_user_mode_prepare+0x39/0xa0 [ 44.889697][ T397] do_syscall_64+0x3d/0xb0 [ 44.893980][ T397] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.900025][ T397] RIP: 0033:0x7f7804044959 [ 44.900967][ T387] [ 44.904360][ T397] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.904380][ T397] RSP: 002b:00007f7803bc7078 EFLAGS: 00000206 [ 44.911459][ T387] RAX: 0e125e19f29c5f00 RBX: 0000000000000003 RCX: ffff88811094e2c0 [ 44.926149][ T397] ORIG_RAX: 0000000000000038 [ 44.926172][ T397] RAX: ffffffffffffffda RBX: 00007f7804163f80 RCX: 00007f7804044959 [ 44.926188][ T397] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000070000000 [ 44.926199][ T397] RBP: 00007f7803bc7120 R08: 0000000000000000 R09: 0000000000000000 [ 44.926211][ T397] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 44.926222][ T397] R13: 000000000000000b R14: 00007f7804163f80 R15: 00007ffc1b194a68 [ 44.980910][ T387] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 44.984297][ T397] [ 44.995705][ T398] CPU: 0 PID: 398 Comm: syz-executor.5 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 45.005855][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 45.010923][ T30] audit: type=1400 audit(1712543061.320:157): avc: denied { sys_admin } for pid=391 comm="syz-executor.4" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 45.015832][ T398] Call Trace: [ 45.015843][ T398] [ 45.015851][ T398] dump_stack_lvl+0x151/0x1b7 [ 45.047723][ T398] ? io_uring_drop_tctx_refs+0x190/0x190 [ 45.053197][ T398] ? avc_denied+0x1b0/0x1b0 [ 45.057623][ T398] dump_stack+0x15/0x17 [ 45.061618][ T398] should_fail+0x3c6/0x510 [ 45.065942][ T398] __should_failslab+0xa4/0xe0 [ 45.070547][ T398] ? vm_area_dup+0x26/0x230 [ 45.074979][ T398] should_failslab+0x9/0x20 [ 45.079315][ T398] slab_pre_alloc_hook+0x37/0xd0 [ 45.084176][ T398] ? vm_area_dup+0x26/0x230 [ 45.088770][ T398] kmem_cache_alloc+0x44/0x200 [ 45.093374][ T398] vm_area_dup+0x26/0x230 [ 45.097536][ T398] copy_mm+0x9a1/0x13e0 [ 45.101574][ T398] ? copy_signal+0x610/0x610 [ 45.106301][ T398] ? __init_rwsem+0xd6/0x1c0 [ 45.110718][ T398] ? copy_signal+0x4e3/0x610 [ 45.115229][ T398] copy_process+0x1149/0x3290 [ 45.119766][ T398] ? proc_fail_nth_write+0x20b/0x290 [ 45.125062][ T398] ? fsnotify_perm+0x6a/0x5d0 [ 45.129643][ T398] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 45.134853][ T398] ? vfs_write+0x9ec/0x1110 [ 45.139402][ T398] kernel_clone+0x21e/0x9e0 [ 45.143900][ T398] ? file_end_write+0x1c0/0x1c0 [ 45.148752][ T398] ? create_io_thread+0x1e0/0x1e0 [ 45.153618][ T398] ? mutex_unlock+0xb2/0x260 [ 45.158038][ T398] ? __mutex_lock_slowpath+0x10/0x10 [ 45.163198][ T398] __x64_sys_clone+0x23f/0x290 [ 45.167849][ T398] ? __do_sys_vfork+0x130/0x130 [ 45.172537][ T398] ? ksys_write+0x260/0x2c0 [ 45.177048][ T398] ? debug_smp_processor_id+0x17/0x20 [ 45.182253][ T398] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 45.188156][ T398] ? exit_to_user_mode_prepare+0x39/0xa0 [ 45.193628][ T398] do_syscall_64+0x3d/0xb0 [ 45.197878][ T398] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.203608][ T398] RIP: 0033:0x7f415b2c8959 [ 45.208559][ T398] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.228443][ T398] RSP: 002b:00007f415ae4b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 45.236778][ T398] RAX: ffffffffffffffda RBX: 00007f415b3e7f80 RCX: 00007f415b2c8959 [ 45.244685][ T398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000070000000 [ 45.252594][ T398] RBP: 00007f415ae4b120 R08: 0000000000000000 R09: 0000000000000000 [ 45.260478][ T398] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 45.268375][ T398] R13: 000000000000000b R14: 00007f415b3e7f80 R15: 00007ffcb01f7aa8 [ 45.276458][ T398] [ 45.279515][ T400] CPU: 1 PID: 400 Comm: syz-executor.1 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 45.289763][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 45.299731][ T400] Call Trace: [ 45.302941][ T400] [ 45.303161][ T387] RBP: ffffc90000f67978 R08: ffffffff81575f25 R09: ffffed103ee065e8 [ 45.305714][ T400] dump_stack_lvl+0x151/0x1b7 [ 45.305740][ T400] ? io_uring_drop_tctx_refs+0x190/0x190 [ 45.313751][ T387] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110219537ab [ 45.318211][ T400] dump_stack+0x15/0x17 [ 45.318231][ T400] should_fail+0x3c6/0x510 [ 45.330902][ T387] R13: ffff88810ca9bd58 R14: 0000000000000003 R15: ffff8881207c14f9 [ 45.331578][ T400] __should_failslab+0xa4/0xe0 [ 45.340898][ T387] FS: 00007fe520e7a6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 45.347738][ T400] ? anon_vma_fork+0xf7/0x4e0 [ 45.365705][ T400] should_failslab+0x9/0x20 [ 45.370031][ T400] slab_pre_alloc_hook+0x37/0xd0 [ 45.374892][ T400] ? anon_vma_fork+0xf7/0x4e0 [ 45.379418][ T400] kmem_cache_alloc+0x44/0x200 [ 45.383726][ T387] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.384003][ T400] anon_vma_fork+0xf7/0x4e0 [ 45.390502][ T387] CR2: 00007f7803ba6d58 CR3: 000000011ebe3000 CR4: 00000000003506b0 [ 45.394878][ T400] ? anon_vma_name+0x43/0x70 [ 45.394904][ T400] ? vm_area_dup+0x17a/0x230 [ 45.411636][ T400] copy_mm+0xa3a/0x13e0 [ 45.415699][ T400] ? copy_signal+0x610/0x610 [ 45.420120][ T400] ? __init_rwsem+0xd6/0x1c0 [ 45.424549][ T400] ? copy_signal+0x4e3/0x610 [ 45.428973][ T400] copy_process+0x1149/0x3290 [ 45.430924][ T387] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.433496][ T400] ? proc_fail_nth_write+0x20b/0x290 [ 45.433522][ T400] ? fsnotify_perm+0x6a/0x5d0 [ 45.450921][ T387] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.451115][ T400] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 45.462114][ T387] Call Trace: [ 45.463871][ T400] ? vfs_write+0x9ec/0x1110 [ 45.471344][ T400] kernel_clone+0x21e/0x9e0 [ 45.475775][ T400] ? file_end_write+0x1c0/0x1c0 [ 45.480547][ T400] ? create_io_thread+0x1e0/0x1e0 [ 45.480918][ T387] [ 45.485582][ T400] ? mutex_unlock+0xb2/0x260 [ 45.485605][ T400] ? __mutex_lock_slowpath+0x10/0x10 [ 45.488372][ T387] ? show_regs+0x58/0x60 [ 45.492858][ T400] __x64_sys_clone+0x23f/0x290 [ 45.492883][ T400] ? __do_sys_vfork+0x130/0x130 [ 45.510923][ T387] ? __warn+0x160/0x2f0 [ 45.511623][ T400] ? ksys_write+0x260/0x2c0 [ 45.516893][ T387] ? refcount_warn_saturate+0x158/0x1a0 [ 45.520130][ T400] ? debug_smp_processor_id+0x17/0x20 [ 45.530723][ T400] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 45.536621][ T400] ? exit_to_user_mode_prepare+0x39/0xa0 [ 45.542090][ T400] do_syscall_64+0x3d/0xb0 [ 45.546426][ T400] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.550912][ T387] ? report_bug+0x3d9/0x5b0 [ 45.552155][ T400] RIP: 0033:0x7fa30b9b5959 [ 45.552174][ T400] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.556528][ T387] ? refcount_warn_saturate+0x158/0x1a0 [ 45.560744][ T400] RSP: 002b:00007fa30b538078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 45.560768][ T400] RAX: ffffffffffffffda RBX: 00007fa30bad4f80 RCX: 00007fa30b9b5959 [ 45.602987][ T400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000070000000 [ 45.610859][ T400] RBP: 00007fa30b538120 R08: 0000000000000000 R09: 0000000000000000 [ 45.618662][ T400] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 45.620904][ T387] ? handle_bug+0x41/0x70 [ 45.626585][ T400] R13: 000000000000000b R14: 00007fa30bad4f80 R15: 00007ffd10c9fc08 [ 45.626605][ T400] [ 45.628195][ T408] FAULT_INJECTION: forcing a failure. [ 45.628195][ T408] name failslab, interval 1, probability 0, space 0, times 0 [ 45.639488][ T394] CPU: 0 PID: 394 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 45.665175][ T394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 45.675470][ T394] Call Trace: [ 45.678626][ T394] [ 45.681408][ T394] dump_stack_lvl+0x151/0x1b7 [ 45.686002][ T394] ? io_uring_drop_tctx_refs+0x190/0x190 [ 45.691557][ T394] ? lruvec_init+0x150/0x150 [ 45.696077][ T394] dump_stack+0x15/0x17 [ 45.700149][ T394] should_fail+0x3c6/0x510 [ 45.704405][ T394] should_fail_alloc_page+0x5a/0x80 [ 45.709434][ T394] prepare_alloc_pages+0x15c/0x700 [ 45.714384][ T394] ? __alloc_pages_bulk+0xe40/0xe40 [ 45.719504][ T394] __alloc_pages+0x18c/0x8f0 [ 45.723928][ T394] ? prep_new_page+0x110/0x110 [ 45.728533][ T394] ? stack_trace_save+0x1c0/0x1c0 [ 45.733480][ T394] ? __kernel_text_address+0x9b/0x110 [ 45.738772][ T394] ? arch_stack_walk+0xf3/0x140 [ 45.743634][ T394] __pmd_alloc+0xb1/0x550 [ 45.747972][ T394] ? stack_trace_save+0x113/0x1c0 [ 45.752830][ T394] ? __pud_alloc+0x260/0x260 [ 45.757547][ T394] ? stack_trace_snprint+0xf0/0xf0 [ 45.762676][ T394] ? __stack_depot_save+0x34/0x470 [ 45.767867][ T394] ? anon_vma_clone+0x9a/0x500 [ 45.772458][ T394] copy_page_range+0x2b3d/0x2f90 [ 45.777606][ T394] ? __kasan_slab_alloc+0xb1/0xe0 [ 45.782464][ T394] ? slab_post_alloc_hook+0x53/0x2c0 [ 45.787767][ T394] ? copy_mm+0xa3a/0x13e0 [ 45.791926][ T394] ? copy_process+0x1149/0x3290 [ 45.796695][ T394] ? kernel_clone+0x21e/0x9e0 [ 45.801384][ T394] ? do_syscall_64+0x3d/0xb0 [ 45.805900][ T394] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.811809][ T394] ? pfn_valid+0x1e0/0x1e0 [ 45.816139][ T394] ? rwsem_write_trylock+0x15b/0x290 [ 45.821262][ T394] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 45.827505][ T394] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 45.833250][ T394] ? __rb_insert_augmented+0x5de/0x610 [ 45.838531][ T394] copy_mm+0xc7e/0x13e0 [ 45.842616][ T394] ? copy_signal+0x610/0x610 [ 45.847210][ T394] ? __init_rwsem+0xd6/0x1c0 [ 45.851681][ T394] ? copy_signal+0x4e3/0x610 [ 45.856064][ T394] copy_process+0x1149/0x3290 [ 45.860767][ T394] ? proc_fail_nth_write+0x20b/0x290 [ 45.865880][ T394] ? fsnotify_perm+0x6a/0x5d0 [ 45.870562][ T394] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 45.875602][ T394] ? vfs_write+0x9ec/0x1110 [ 45.880039][ T394] kernel_clone+0x21e/0x9e0 [ 45.884365][ T394] ? file_end_write+0x1c0/0x1c0 [ 45.889142][ T394] ? create_io_thread+0x1e0/0x1e0 [ 45.894027][ T394] ? mutex_unlock+0xb2/0x260 [ 45.898426][ T394] ? __mutex_lock_slowpath+0x10/0x10 [ 45.903553][ T394] __x64_sys_clone+0x23f/0x290 [ 45.908286][ T394] ? __do_sys_vfork+0x130/0x130 [ 45.912928][ T394] ? ksys_write+0x260/0x2c0 [ 45.917258][ T394] ? debug_smp_processor_id+0x17/0x20 [ 45.922481][ T394] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 45.928629][ T394] ? exit_to_user_mode_prepare+0x39/0xa0 [ 45.934116][ T394] do_syscall_64+0x3d/0xb0 [ 45.938351][ T394] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.944081][ T394] RIP: 0033:0x7fb2b1fa7959 [ 45.948336][ T394] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.967948][ T394] RSP: 002b:00007fb2b1b2a078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 45.976190][ T394] RAX: ffffffffffffffda RBX: 00007fb2b20c6f80 RCX: 00007fb2b1fa7959 [ 45.984095][ T394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000070000000 [ 45.991899][ T394] RBP: 00007fb2b1b2a120 R08: 0000000000000000 R09: 0000000000000000 [ 45.999884][ T394] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 46.007797][ T394] R13: 000000000000000b R14: 00007fb2b20c6f80 R15: 00007ffe4c0edbc8 [ 46.015608][ T394] [ 46.018470][ T403] CPU: 1 PID: 403 Comm: syz-executor.3 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 46.024459][ T387] ? exc_invalid_op+0x1b/0x50 [ 46.028623][ T403] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 46.033354][ T387] ? asm_exc_invalid_op+0x1b/0x20 [ 46.043306][ T403] Call Trace: [ 46.043314][ T403] [ 46.043321][ T403] dump_stack_lvl+0x151/0x1b7 [ 46.048162][ T387] ? __wake_up_klogd+0xd5/0x110 [ 46.051462][ T403] ? io_uring_drop_tctx_refs+0x190/0x190 [ 46.051486][ T403] dump_stack+0x15/0x17 [ 46.054239][ T387] ? refcount_warn_saturate+0x158/0x1a0 [ 46.058752][ T403] should_fail+0x3c6/0x510 [ 46.064601][ T387] ? refcount_warn_saturate+0x158/0x1a0 [ 46.069121][ T403] __should_failslab+0xa4/0xe0 [ 46.073216][ T387] vm_area_free_no_check+0x123/0x130 [ 46.078539][ T403] ? anon_vma_fork+0xf7/0x4e0 [ 46.082816][ T387] copy_mm+0xefb/0x13e0 [ 46.088179][ T403] should_failslab+0x9/0x20 [ 46.092800][ T387] ? copy_signal+0x610/0x610 [ 46.098239][ T403] slab_pre_alloc_hook+0x37/0xd0 [ 46.102822][ T387] ? __init_rwsem+0xd6/0x1c0 [ 46.106749][ T403] ? anon_vma_fork+0xf7/0x4e0 [ 46.112708][ T387] ? copy_signal+0x4e3/0x610 [ 46.115598][ T403] kmem_cache_alloc+0x44/0x200 [ 46.115625][ T403] anon_vma_fork+0xf7/0x4e0 [ 46.120414][ T387] copy_process+0x1149/0x3290 [ 46.124806][ T403] ? anon_vma_name+0x43/0x70 [ 46.124830][ T403] ? vm_area_dup+0x17a/0x230 [ 46.129401][ T387] ? proc_fail_nth_write+0x20b/0x290 [ 46.133739][ T403] copy_mm+0xa3a/0x13e0 [ 46.133769][ T403] ? copy_signal+0x610/0x610 [ 46.133791][ T403] ? __init_rwsem+0xd6/0x1c0 [ 46.138375][ T387] ? fsnotify_perm+0x6a/0x5d0 [ 46.142952][ T403] ? copy_signal+0x4e3/0x610 [ 46.142976][ T403] copy_process+0x1149/0x3290 [ 46.147700][ T387] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 46.152225][ T403] ? proc_fail_nth_write+0x20b/0x290 [ 46.152262][ T403] ? fsnotify_perm+0x6a/0x5d0 [ 46.152284][ T403] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 46.156807][ T387] ? vfs_write+0x9ec/0x1110 [ 46.161955][ T403] ? vfs_write+0x9ec/0x1110 [ 46.161976][ T403] kernel_clone+0x21e/0x9e0 [ 46.161997][ T403] ? file_end_write+0x1c0/0x1c0 [ 46.162014][ T403] ? create_io_thread+0x1e0/0x1e0 [ 46.162033][ T403] ? mutex_unlock+0xb2/0x260 [ 46.162052][ T403] ? __mutex_lock_slowpath+0x10/0x10 [ 46.240716][ T403] __x64_sys_clone+0x23f/0x290 [ 46.245284][ T403] ? __do_sys_vfork+0x130/0x130 [ 46.250073][ T403] ? ksys_write+0x260/0x2c0 [ 46.254515][ T403] ? debug_smp_processor_id+0x17/0x20 [ 46.259707][ T403] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 46.265703][ T403] ? exit_to_user_mode_prepare+0x39/0xa0 [ 46.271245][ T403] do_syscall_64+0x3d/0xb0 [ 46.275585][ T403] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.281401][ T403] RIP: 0033:0x7fae9cc59959 [ 46.285658][ T403] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.305537][ T403] RSP: 002b:00007fae9c7dc078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 46.313881][ T403] RAX: ffffffffffffffda RBX: 00007fae9cd78f80 RCX: 00007fae9cc59959 [ 46.321900][ T403] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000070000000 [ 46.329771][ T403] RBP: 00007fae9c7dc120 R08: 0000000000000000 R09: 0000000000000000 [ 46.337584][ T403] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 46.345606][ T403] R13: 000000000000000b R14: 00007fae9cd78f80 R15: 00007ffe079a72b8 2024/04/08 02:24:22 executed programs: 10 [ 46.353404][ T403] [ 46.356967][ T387] kernel_clone+0x21e/0x9e0 [ 46.364469][ T387] ? file_end_write+0x1c0/0x1c0 [ 46.368436][ T408] CPU: 1 PID: 408 Comm: syz-executor.4 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 46.369477][ T387] ? create_io_thread+0x1e0/0x1e0 [ 46.379504][ T408] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 46.379518][ T408] Call Trace: [ 46.379524][ T408] [ 46.379530][ T408] dump_stack_lvl+0x151/0x1b7 [ 46.379551][ T408] ? io_uring_drop_tctx_refs+0x190/0x190 [ 46.379569][ T408] ? avc_denied+0x1b0/0x1b0 [ 46.379590][ T408] dump_stack+0x15/0x17 [ 46.379605][ T408] should_fail+0x3c6/0x510 [ 46.379624][ T408] __should_failslab+0xa4/0xe0 [ 46.379645][ T408] ? vm_area_dup+0x26/0x230 [ 46.379664][ T408] should_failslab+0x9/0x20 [ 46.385082][ T387] ? mutex_unlock+0xb2/0x260 [ 46.394829][ T408] slab_pre_alloc_hook+0x37/0xd0 [ 46.394853][ T408] ? vm_area_dup+0x26/0x230 [ 46.397998][ T387] ? __mutex_lock_slowpath+0x10/0x10 [ 46.400797][ T408] kmem_cache_alloc+0x44/0x200 [ 46.400821][ T408] vm_area_dup+0x26/0x230 [ 46.405592][ T387] __x64_sys_clone+0x23f/0x290 [ 46.410955][ T408] copy_mm+0x9a1/0x13e0 [ 46.410988][ T408] ? copy_signal+0x610/0x610 [ 46.411008][ T408] ? __init_rwsem+0xd6/0x1c0 [ 46.411028][ T408] ? copy_signal+0x4e3/0x610 [ 46.415356][ T387] ? __do_sys_vfork+0x130/0x130 [ 46.419370][ T408] copy_process+0x1149/0x3290 [ 46.419396][ T408] ? proc_fail_nth_write+0x20b/0x290 [ 46.423683][ T387] ? ksys_write+0x260/0x2c0 [ 46.428225][ T408] ? fsnotify_perm+0x6a/0x5d0 [ 46.428250][ T408] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 46.432639][ T387] ? debug_smp_processor_id+0x17/0x20 [ 46.436909][ T408] ? vfs_write+0x9ec/0x1110 [ 46.436931][ T408] kernel_clone+0x21e/0x9e0 [ 46.441401][ T387] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 46.446102][ T408] ? file_end_write+0x1c0/0x1c0 [ 46.446123][ T408] ? create_io_thread+0x1e0/0x1e0 [ 46.450495][ T387] ? exit_to_user_mode_prepare+0x39/0xa0 [ 46.455562][ T408] ? mutex_unlock+0xb2/0x260 [ 46.455584][ T408] ? __mutex_lock_slowpath+0x10/0x10 [ 46.460219][ T387] do_syscall_64+0x3d/0xb0 [ 46.464676][ T408] __x64_sys_clone+0x23f/0x290 [ 46.464701][ T408] ? __do_sys_vfork+0x130/0x130 [ 46.464721][ T408] ? ksys_write+0x260/0x2c0 [ 46.464738][ T408] ? debug_smp_processor_id+0x17/0x20 [ 46.469963][ T387] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.473712][ T408] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 46.473737][ T408] ? exit_to_user_mode_prepare+0x39/0xa0 [ 46.478217][ T387] RIP: 0033:0x7fe5212f7959 [ 46.482575][ T408] do_syscall_64+0x3d/0xb0 [ 46.482596][ T408] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.487039][ T387] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.491666][ T408] RIP: 0033:0x7f7804044959 [ 46.491683][ T408] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.491698][ T408] RSP: 002b:00007f7803ba6078 EFLAGS: 00000206 [ 46.496225][ T387] RSP: 002b:00007fe520e7a078 EFLAGS: 00000206 [ 46.501388][ T408] ORIG_RAX: 0000000000000038 [ 46.501399][ T408] RAX: ffffffffffffffda RBX: 00007f7804164050 RCX: 00007f7804044959 [ 46.501414][ T408] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000070000000 [ 46.501426][ T408] RBP: 00007f7803ba6120 R08: 0000000000000000 R09: 0000000000000000 [ 46.505866][ T387] ORIG_RAX: 0000000000000038 [ 46.510768][ T408] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 46.510782][ T408] R13: 000000000000006e R14: 00007f7804164050 R15: 00007ffc1b194a68 [ 46.510801][ T408] [ 46.516087][ T387] RAX: ffffffffffffffda RBX: 00007fe521416f80 RCX: 00007fe5212f7959 [ 46.530375][ T394] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 46.536235][ T387] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000070000000 [ 46.540457][ T394] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 46.540473][ T394] CPU: 1 PID: 394 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 46.540495][ T394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 46.545745][ T387] RBP: 00007fe520e7a120 R08: 0000000000000000 R09: 0000000000000000 [ 46.550967][ T394] RIP: 0010:__rb_erase_color+0x2bd/0xa60 [ 46.551004][ T394] Code: 89 ef e8 d6 27 2b ff 48 8b 45 d0 49 89 45 00 49 89 c5 48 89 c3 48 83 cb 01 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 a5 27 2b ff 49 89 1e 4c 89 eb 48 c1 [ 46.555602][ T387] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 46.560621][ T394] RSP: 0018:ffffc90000f876a0 EFLAGS: 00010246 [ 46.560642][ T394] RAX: 0000000000000000 RBX: ffff88811d3f53d1 RCX: dffffc0000000000 [ 46.565092][ T387] R13: 000000000000000b R14: 00007fe521416f80 R15: 00007ffd154ec988 [ 46.569463][ T394] RDX: ffffffff81a4f280 RSI: ffff888109344390 RDI: ffff88811d3f53d0 [ 46.569481][ T394] RBP: ffffc90000f87700 R08: ffffffff81a4d340 R09: ffffed1021268876 [ 46.569496][ T394] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110240f830e [ 46.574650][ T387] [ 46.578837][ T394] R13: ffff88811d3f53d0 R14: 0000000000000000 R15: ffff8881207c1870 [ 46.578854][ T394] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 46.578871][ T394] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.584317][ T387] ---[ end trace 449faac6a1ccb7d1 ]--- [ 46.590043][ T394] CR2: 00007fb2b20c8988 CR3: 000000000620f000 CR4: 00000000003506a0 [ 46.590062][ T394] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.590074][ T394] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.921222][ T394] Call Trace: [ 46.924354][ T394] [ 46.927133][ T394] ? __die_body+0x62/0xb0 [ 46.931291][ T394] ? die_addr+0x9f/0xd0 [ 46.935369][ T394] ? exc_general_protection+0x311/0x4b0 [ 46.940757][ T394] ? asm_exc_general_protection+0x27/0x30 [ 46.946310][ T394] ? vma_interval_tree_remove+0xae0/0xba0 [ 46.951954][ T394] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 46.958212][ T394] ? __rb_erase_color+0x2bd/0xa60 [ 46.963239][ T394] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 46.969496][ T394] vma_interval_tree_remove+0xb82/0xba0 [ 46.974869][ T394] unlink_file_vma+0xd9/0xf0 [ 46.979306][ T394] free_pgtables+0x13f/0x280 [ 46.983720][ T394] exit_mmap+0x3e7/0x6f0 [ 46.987906][ T394] ? exit_aio+0x25e/0x3c0 [ 46.992052][ T394] ? vm_brk+0x30/0x30 [ 46.995893][ T394] ? mutex_unlock+0xb2/0x260 [ 47.000481][ T394] ? uprobe_clear_state+0x2cd/0x320 [ 47.005592][ T394] __mmput+0x95/0x310 [ 47.009418][ T394] mmput+0x5b/0x170 [ 47.013070][ T394] do_exit+0xb9c/0x2ca0 [ 47.017050][ T394] ? task_work_run+0x129/0x190 [ 47.021648][ T394] ? exit_to_user_mode_loop+0xc4/0xe0 [ 47.026975][ T394] ? exit_to_user_mode_prepare+0x5a/0xa0 [ 47.032411][ T394] ? put_task_struct+0x80/0x80 [ 47.037028][ T394] ? __kasan_check_write+0x14/0x20 [ 47.041959][ T394] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 47.046932][ T394] ? _raw_spin_lock_irqsave+0x210/0x210 [ 47.052382][ T394] do_group_exit+0x141/0x310 [ 47.056978][ T394] get_signal+0x7a3/0x1630 [ 47.061328][ T394] arch_do_signal_or_restart+0xbd/0x1680 [ 47.066867][ T394] ? rcu_gp_kthread_wake+0x90/0x90 [ 47.072497][ T394] ? security_file_free+0xc6/0xe0 [ 47.077414][ T394] ? kmem_cache_free+0x116/0x2e0 [ 47.082350][ T394] ? percpu_counter_add_batch+0x13d/0x160 [ 47.088585][ T394] ? get_sigframe_size+0x10/0x10 [ 47.093292][ T394] ? __se_sys_futex+0x37b/0x3e0 [ 47.098000][ T394] ? ____fput+0x15/0x20 [ 47.101975][ T394] exit_to_user_mode_loop+0xa0/0xe0 [ 47.107093][ T394] exit_to_user_mode_prepare+0x5a/0xa0 [ 47.112724][ T394] syscall_exit_to_user_mode+0x26/0x160 [ 47.118192][ T394] do_syscall_64+0x49/0xb0 [ 47.122446][ T394] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.128347][ T394] RIP: 0033:0x7fb2b1fa7959 [ 47.132734][ T394] Code: Unable to access opcode bytes at RIP 0x7fb2b1fa792f. [ 47.139910][ T394] RSP: 002b:00007fb2b1b2a178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 47.148321][ T394] RAX: fffffffffffffe00 RBX: 00007fb2b20c6f88 RCX: 00007fb2b1fa7959 [ 47.156239][ T394] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fb2b20c6f88 [ 47.164044][ T394] RBP: 00007fb2b20c6f80 R08: 00007fb2b1b2a6c0 R09: 00007fb2b1b2a6c0 [ 47.172125][ T394] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fb2b20c6f8c [ 47.180100][ T394] R13: 000000000000000b R14: 00007ffe4c0edae0 R15: 00007ffe4c0edbc8 [ 47.188194][ T394] [ 47.191060][ T394] Modules linked in: [ 47.197372][ T394] ---[ end trace 449faac6a1ccb7d2 ]--- [ 47.203989][ T394] RIP: 0010:__rb_erase_color+0x2bd/0xa60 [ 47.216376][ T394] Code: 89 ef e8 d6 27 2b ff 48 8b 45 d0 49 89 45 00 49 89 c5 48 89 c3 48 83 cb 01 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 a5 27 2b ff 49 89 1e 4c 89 eb 48 c1 [ 47.237061][ T394] RSP: 0018:ffffc90000f876a0 EFLAGS: 00010246 [ 47.243867][ T394] RAX: 0000000000000000 RBX: ffff88811d3f53d1 RCX: dffffc0000000000 [ 47.252498][ T394] RDX: ffffffff81a4f280 RSI: ffff888109344390 RDI: ffff88811d3f53d0 [ 47.260616][ T394] RBP: ffffc90000f87700 R08: ffffffff81a4d340 R09: ffffed1021268876 [ 47.268606][ T394] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110240f830e [ 47.276516][ T394] R13: ffff88811d3f53d0 R14: 0000000000000000 R15: ffff8881207c1870 [ 47.284709][ T394] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 47.293632][ T394] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.300641][ T394] CR2: 00007fa30c5fe6be CR3: 000000010c838000 CR4: 00000000003506a0 [ 47.308827][ T394] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.316690][ T394] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.324595][ T394] Kernel panic - not syncing: Fatal exception [ 47.330802][ T394] Kernel Offset: disabled [ 47.335118][ T394] Rebooting in 86400 seconds..