Warning: Permanently added '10.128.15.210' (ED25519) to the list of known hosts. 2024/03/03 13:27:35 ignoring optional flag "sandboxArg"="0" 2024/03/03 13:27:35 parsed 1 programs 2024/03/03 13:27:35 executed programs: 0 [ 41.599297][ T30] audit: type=1400 audit(1709472455.270:152): avc: denied { mounton } for pid=339 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 41.625809][ T30] audit: type=1400 audit(1709472455.270:153): avc: denied { mount } for pid=339 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 41.672018][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.679323][ T342] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.686919][ T342] device bridge_slave_0 entered promiscuous mode [ 41.693989][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.701497][ T342] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.708979][ T342] device bridge_slave_1 entered promiscuous mode [ 41.752745][ T30] audit: type=1400 audit(1709472455.430:154): avc: denied { write } for pid=342 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.767748][ T342] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.775196][ T30] audit: type=1400 audit(1709472455.440:155): avc: denied { read } for pid=342 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.782166][ T342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.782279][ T342] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.817671][ T342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.836529][ T296] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.844115][ T296] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.851369][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.859368][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.879891][ T342] device veth0_vlan entered promiscuous mode [ 41.888616][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.897728][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.906150][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.913884][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.921351][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.931424][ T26] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.938581][ T26] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.945844][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.954464][ T26] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.961378][ T26] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.968652][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.976640][ T26] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.989800][ T342] device veth1_macvtap entered promiscuous mode [ 41.996901][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.010428][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.020162][ T296] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.032707][ T30] audit: type=1400 audit(1709472455.710:156): avc: denied { mounton } for pid=342 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 42.064255][ T351] FAULT_INJECTION: forcing a failure. [ 42.064255][ T351] name failslab, interval 1, probability 0, space 0, times 1 [ 42.077783][ T351] CPU: 0 PID: 351 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 42.089031][ T351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 42.099301][ T351] Call Trace: [ 42.102481][ T351] [ 42.105261][ T351] dump_stack_lvl+0x151/0x1b7 [ 42.109869][ T351] ? io_uring_drop_tctx_refs+0x190/0x190 [ 42.115567][ T351] dump_stack+0x15/0x17 [ 42.119667][ T351] should_fail+0x3c6/0x510 [ 42.124016][ T351] __should_failslab+0xa4/0xe0 [ 42.128697][ T351] ? anon_vma_clone+0x9a/0x500 [ 42.133383][ T351] should_failslab+0x9/0x20 [ 42.137725][ T351] slab_pre_alloc_hook+0x37/0xd0 [ 42.142761][ T351] ? anon_vma_clone+0x9a/0x500 [ 42.147505][ T351] kmem_cache_alloc+0x44/0x200 [ 42.152098][ T351] anon_vma_clone+0x9a/0x500 [ 42.156538][ T351] anon_vma_fork+0x91/0x4e0 [ 42.160875][ T351] ? anon_vma_name+0x43/0x70 [ 42.165331][ T351] ? vm_area_dup+0x17a/0x230 [ 42.169891][ T351] copy_mm+0xa3a/0x13e0 [ 42.174060][ T351] ? copy_signal+0x610/0x610 [ 42.178481][ T351] ? __init_rwsem+0xd6/0x1c0 [ 42.182907][ T351] ? copy_signal+0x4e3/0x610 [ 42.187597][ T351] copy_process+0x1149/0x3290 [ 42.192110][ T351] ? proc_fail_nth_write+0x20b/0x290 [ 42.197414][ T351] ? fsnotify_perm+0x6a/0x5d0 [ 42.202091][ T351] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 42.207034][ T351] ? vfs_write+0x9ec/0x1110 [ 42.211637][ T351] kernel_clone+0x21e/0x9e0 [ 42.215984][ T351] ? file_end_write+0x1c0/0x1c0 [ 42.220661][ T351] ? create_io_thread+0x1e0/0x1e0 [ 42.225522][ T351] ? mutex_unlock+0xb2/0x260 [ 42.230205][ T351] ? __mutex_lock_slowpath+0x10/0x10 [ 42.235746][ T351] __x64_sys_clone+0x23f/0x290 [ 42.240990][ T351] ? __do_sys_vfork+0x130/0x130 [ 42.245991][ T351] ? ksys_write+0x260/0x2c0 [ 42.250418][ T351] ? debug_smp_processor_id+0x17/0x20 [ 42.255889][ T351] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 42.261962][ T351] ? exit_to_user_mode_prepare+0x39/0xa0 [ 42.267721][ T351] do_syscall_64+0x3d/0xb0 [ 42.271977][ T351] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.277717][ T351] RIP: 0033:0x7fde90772d39 [ 42.282062][ T351] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.301953][ T351] RSP: 002b:00007fde906f7078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 42.310608][ T351] RAX: ffffffffffffffda RBX: 00007fde90893f80 RCX: 00007fde90772d39 [ 42.318590][ T351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 42.326578][ T351] RBP: 00007fde906f7120 R08: 0000000000000000 R09: 0000000000000000 [ 42.334394][ T351] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 42.342411][ T351] R13: 000000000000000b R14: 00007fde90893f80 R15: 00007ffd93b49988 [ 42.350927][ T351] [ 42.366769][ T354] FAULT_INJECTION: forcing a failure. [ 42.366769][ T354] name failslab, interval 1, probability 0, space 0, times 0 [ 42.380044][ T354] CPU: 0 PID: 354 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 42.390717][ T354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 42.400874][ T354] Call Trace: [ 42.404001][ T354] [ 42.406858][ T354] dump_stack_lvl+0x151/0x1b7 [ 42.412501][ T354] ? io_uring_drop_tctx_refs+0x190/0x190 [ 42.418072][ T354] dump_stack+0x15/0x17 [ 42.422107][ T354] should_fail+0x3c6/0x510 [ 42.426383][ T354] __should_failslab+0xa4/0xe0 [ 42.431342][ T354] ? anon_vma_fork+0xf7/0x4e0 [ 42.435930][ T354] should_failslab+0x9/0x20 [ 42.440437][ T354] slab_pre_alloc_hook+0x37/0xd0 [ 42.445321][ T354] ? anon_vma_fork+0xf7/0x4e0 [ 42.449916][ T354] kmem_cache_alloc+0x44/0x200 [ 42.454826][ T354] anon_vma_fork+0xf7/0x4e0 [ 42.459158][ T354] ? anon_vma_name+0x43/0x70 [ 42.463590][ T354] ? vm_area_dup+0x17a/0x230 [ 42.468367][ T354] copy_mm+0xa3a/0x13e0 [ 42.472479][ T354] ? copy_signal+0x610/0x610 [ 42.477036][ T354] ? __init_rwsem+0xd6/0x1c0 [ 42.481713][ T354] ? copy_signal+0x4e3/0x610 [ 42.486212][ T354] copy_process+0x1149/0x3290 [ 42.490802][ T354] ? proc_fail_nth_write+0x20b/0x290 [ 42.496438][ T354] ? fsnotify_perm+0x6a/0x5d0 [ 42.500998][ T354] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 42.506030][ T354] ? vfs_write+0x9ec/0x1110 [ 42.510461][ T354] kernel_clone+0x21e/0x9e0 [ 42.514927][ T354] ? file_end_write+0x1c0/0x1c0 [ 42.519786][ T354] ? create_io_thread+0x1e0/0x1e0 [ 42.525011][ T354] ? mutex_unlock+0xb2/0x260 [ 42.529691][ T354] ? __mutex_lock_slowpath+0x10/0x10 [ 42.534814][ T354] __x64_sys_clone+0x23f/0x290 [ 42.539410][ T354] ? __do_sys_vfork+0x130/0x130 [ 42.544095][ T354] ? ksys_write+0x260/0x2c0 [ 42.548437][ T354] ? debug_smp_processor_id+0x17/0x20 [ 42.553646][ T354] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 42.559817][ T354] ? exit_to_user_mode_prepare+0x39/0xa0 [ 42.565381][ T354] do_syscall_64+0x3d/0xb0 [ 42.569622][ T354] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.575980][ T354] RIP: 0033:0x7fde90772d39 [ 42.580311][ T354] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.600175][ T354] RSP: 002b:00007fde906f7078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 42.608502][ T354] RAX: ffffffffffffffda RBX: 00007fde90893f80 RCX: 00007fde90772d39 [ 42.616310][ T354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 42.624353][ T354] RBP: 00007fde906f7120 R08: 0000000000000000 R09: 0000000000000000 [ 42.632551][ T354] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 42.640535][ T354] R13: 000000000000000b R14: 00007fde90893f80 R15: 00007ffd93b49988 [ 42.648481][ T354] [ 42.661059][ T356] FAULT_INJECTION: forcing a failure. [ 42.661059][ T356] name failslab, interval 1, probability 0, space 0, times 0 [ 42.674674][ T356] CPU: 1 PID: 356 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 42.684830][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 42.694981][ T356] Call Trace: [ 42.698557][ T356] [ 42.701379][ T356] dump_stack_lvl+0x151/0x1b7 [ 42.706130][ T356] ? io_uring_drop_tctx_refs+0x190/0x190 [ 42.711949][ T356] dump_stack+0x15/0x17 [ 42.716456][ T356] should_fail+0x3c6/0x510 [ 42.721103][ T356] __should_failslab+0xa4/0xe0 [ 42.726221][ T356] ? anon_vma_fork+0x1df/0x4e0 [ 42.731131][ T356] should_failslab+0x9/0x20 [ 42.735453][ T356] slab_pre_alloc_hook+0x37/0xd0 [ 42.740687][ T356] ? anon_vma_fork+0x1df/0x4e0 [ 42.745610][ T356] kmem_cache_alloc+0x44/0x200 [ 42.750395][ T356] anon_vma_fork+0x1df/0x4e0 [ 42.755084][ T356] copy_mm+0xa3a/0x13e0 [ 42.759158][ T356] ? copy_signal+0x610/0x610 [ 42.763585][ T356] ? __init_rwsem+0xd6/0x1c0 [ 42.768126][ T356] ? copy_signal+0x4e3/0x610 [ 42.773305][ T356] copy_process+0x1149/0x3290 [ 42.777817][ T356] ? proc_fail_nth_write+0x20b/0x290 [ 42.783025][ T356] ? fsnotify_perm+0x6a/0x5d0 [ 42.787716][ T356] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 42.792669][ T356] ? vfs_write+0x9ec/0x1110 [ 42.796999][ T356] kernel_clone+0x21e/0x9e0 [ 42.801596][ T356] ? file_end_write+0x1c0/0x1c0 [ 42.806299][ T356] ? create_io_thread+0x1e0/0x1e0 [ 42.811228][ T356] ? mutex_unlock+0xb2/0x260 [ 42.816700][ T356] ? __mutex_lock_slowpath+0x10/0x10 [ 42.822245][ T356] __x64_sys_clone+0x23f/0x290 [ 42.826944][ T356] ? __do_sys_vfork+0x130/0x130 [ 42.831903][ T356] ? ksys_write+0x260/0x2c0 [ 42.837256][ T356] ? debug_smp_processor_id+0x17/0x20 [ 42.843096][ T356] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 42.851565][ T356] ? exit_to_user_mode_prepare+0x39/0xa0 [ 42.857044][ T356] do_syscall_64+0x3d/0xb0 [ 42.862082][ T356] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.868786][ T356] RIP: 0033:0x7fde90772d39 [ 42.873608][ T356] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.894798][ T356] RSP: 002b:00007fde906f7078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 42.904007][ T356] RAX: ffffffffffffffda RBX: 00007fde90893f80 RCX: 00007fde90772d39 [ 42.912511][ T356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 42.921021][ T356] RBP: 00007fde906f7120 R08: 0000000000000000 R09: 0000000000000000 [ 42.929225][ T356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 42.938519][ T356] R13: 000000000000000b R14: 00007fde90893f80 R15: 00007ffd93b49988 [ 42.947467][ T356] [ 42.964702][ T359] FAULT_INJECTION: forcing a failure. [ 42.964702][ T359] name failslab, interval 1, probability 0, space 0, times 0 [ 42.977326][ T359] CPU: 1 PID: 359 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 42.987905][ T359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 42.997972][ T359] Call Trace: [ 43.001469][ T359] [ 43.004416][ T359] dump_stack_lvl+0x151/0x1b7 [ 43.008939][ T359] ? io_uring_drop_tctx_refs+0x190/0x190 [ 43.014834][ T359] dump_stack+0x15/0x17 [ 43.019000][ T359] should_fail+0x3c6/0x510 [ 43.023250][ T359] __should_failslab+0xa4/0xe0 [ 43.027867][ T359] ? anon_vma_fork+0x1df/0x4e0 [ 43.032670][ T359] should_failslab+0x9/0x20 [ 43.037274][ T359] slab_pre_alloc_hook+0x37/0xd0 [ 43.042236][ T359] ? anon_vma_fork+0x1df/0x4e0 [ 43.047028][ T359] kmem_cache_alloc+0x44/0x200 [ 43.051859][ T359] anon_vma_fork+0x1df/0x4e0 [ 43.056324][ T359] copy_mm+0xa3a/0x13e0 [ 43.060339][ T359] ? copy_signal+0x610/0x610 [ 43.064793][ T359] ? __init_rwsem+0xd6/0x1c0 [ 43.069209][ T359] ? copy_signal+0x4e3/0x610 [ 43.073731][ T359] copy_process+0x1149/0x3290 [ 43.078766][ T359] ? proc_fail_nth_write+0x20b/0x290 [ 43.084062][ T359] ? fsnotify_perm+0x6a/0x5d0 [ 43.088653][ T359] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 43.094215][ T359] ? vfs_write+0x9ec/0x1110 [ 43.098555][ T359] kernel_clone+0x21e/0x9e0 [ 43.102991][ T359] ? file_end_write+0x1c0/0x1c0 [ 43.107933][ T359] ? create_io_thread+0x1e0/0x1e0 [ 43.113048][ T359] ? mutex_unlock+0xb2/0x260 [ 43.117653][ T359] ? __mutex_lock_slowpath+0x10/0x10 [ 43.122819][ T359] __x64_sys_clone+0x23f/0x290 [ 43.127372][ T359] ? __do_sys_vfork+0x130/0x130 [ 43.132065][ T359] ? ksys_write+0x260/0x2c0 [ 43.136771][ T359] ? debug_smp_processor_id+0x17/0x20 [ 43.142325][ T359] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 43.148861][ T359] ? exit_to_user_mode_prepare+0x39/0xa0 [ 43.155704][ T359] do_syscall_64+0x3d/0xb0 [ 43.160313][ T359] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.167106][ T359] RIP: 0033:0x7fde90772d39 [ 43.171428][ T359] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.191901][ T359] RSP: 002b:00007fde906f7078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 43.200460][ T359] RAX: ffffffffffffffda RBX: 00007fde90893f80 RCX: 00007fde90772d39 [ 43.208557][ T359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 43.216535][ T359] RBP: 00007fde906f7120 R08: 0000000000000000 R09: 0000000000000000 [ 43.224530][ T359] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 43.232678][ T359] R13: 000000000000000b R14: 00007fde90893f80 R15: 00007ffd93b49988 [ 43.241362][ T359] [ 43.255563][ T361] FAULT_INJECTION: forcing a failure. [ 43.255563][ T361] name failslab, interval 1, probability 0, space 0, times 0 [ 43.268824][ T361] CPU: 0 PID: 361 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 43.279092][ T361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 43.289207][ T361] Call Trace: [ 43.292410][ T361] [ 43.295179][ T361] dump_stack_lvl+0x151/0x1b7 [ 43.299791][ T361] ? io_uring_drop_tctx_refs+0x190/0x190 [ 43.305881][ T361] dump_stack+0x15/0x17 [ 43.310113][ T361] should_fail+0x3c6/0x510 [ 43.314361][ T361] __should_failslab+0xa4/0xe0 [ 43.319193][ T361] ? anon_vma_fork+0xf7/0x4e0 [ 43.323655][ T361] should_failslab+0x9/0x20 [ 43.328298][ T361] slab_pre_alloc_hook+0x37/0xd0 [ 43.333320][ T361] ? anon_vma_fork+0xf7/0x4e0 [ 43.337860][ T361] kmem_cache_alloc+0x44/0x200 [ 43.342816][ T361] anon_vma_fork+0xf7/0x4e0 [ 43.347337][ T361] ? anon_vma_name+0x43/0x70 [ 43.352302][ T361] ? vm_area_dup+0x17a/0x230 [ 43.356817][ T361] copy_mm+0xa3a/0x13e0 [ 43.360982][ T361] ? copy_signal+0x610/0x610 [ 43.365574][ T361] ? __init_rwsem+0xd6/0x1c0 [ 43.370204][ T361] ? copy_signal+0x4e3/0x610 [ 43.374777][ T361] copy_process+0x1149/0x3290 [ 43.379483][ T361] ? proc_fail_nth_write+0x20b/0x290 [ 43.384770][ T361] ? fsnotify_perm+0x6a/0x5d0 [ 43.389380][ T361] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 43.394575][ T361] ? vfs_write+0x9ec/0x1110 [ 43.399189][ T361] kernel_clone+0x21e/0x9e0 [ 43.403800][ T361] ? file_end_write+0x1c0/0x1c0 [ 43.408747][ T361] ? create_io_thread+0x1e0/0x1e0 [ 43.413961][ T361] ? mutex_unlock+0xb2/0x260 [ 43.418388][ T361] ? __mutex_lock_slowpath+0x10/0x10 [ 43.423510][ T361] __x64_sys_clone+0x23f/0x290 [ 43.428361][ T361] ? __do_sys_vfork+0x130/0x130 [ 43.433058][ T361] ? ksys_write+0x260/0x2c0 [ 43.437509][ T361] ? debug_smp_processor_id+0x17/0x20 [ 43.442978][ T361] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 43.449150][ T361] ? exit_to_user_mode_prepare+0x39/0xa0 [ 43.454697][ T361] do_syscall_64+0x3d/0xb0 [ 43.459031][ T361] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.464974][ T361] RIP: 0033:0x7fde90772d39 [ 43.469202][ T361] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.489080][ T361] RSP: 002b:00007fde906f7078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 43.497494][ T361] RAX: ffffffffffffffda RBX: 00007fde90893f80 RCX: 00007fde90772d39 [ 43.505397][ T361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 43.513300][ T361] RBP: 00007fde906f7120 R08: 0000000000000000 R09: 0000000000000000 [ 43.521313][ T361] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 43.529287][ T361] R13: 000000000000000b R14: 00007fde90893f80 R15: 00007ffd93b49988 [ 43.537941][ T361] [ 43.555684][ T363] FAULT_INJECTION: forcing a failure. [ 43.555684][ T363] name failslab, interval 1, probability 0, space 0, times 0 [ 43.568854][ T363] CPU: 1 PID: 363 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 43.580167][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 43.590687][ T363] Call Trace: [ 43.593782][ T363] [ 43.597213][ T363] dump_stack_lvl+0x151/0x1b7 [ 43.601885][ T363] ? io_uring_drop_tctx_refs+0x190/0x190 [ 43.607586][ T363] dump_stack+0x15/0x17 [ 43.611787][ T363] should_fail+0x3c6/0x510 [ 43.616201][ T363] __should_failslab+0xa4/0xe0 [ 43.620882][ T363] ? anon_vma_fork+0xf7/0x4e0 [ 43.625668][ T363] should_failslab+0x9/0x20 [ 43.630093][ T363] slab_pre_alloc_hook+0x37/0xd0 [ 43.635329][ T363] ? anon_vma_fork+0xf7/0x4e0 [ 43.639927][ T363] kmem_cache_alloc+0x44/0x200 [ 43.644966][ T363] anon_vma_fork+0xf7/0x4e0 [ 43.649779][ T363] ? anon_vma_name+0x4c/0x70 [ 43.654801][ T363] ? vm_area_dup+0x17a/0x230 [ 43.659323][ T363] copy_mm+0xa3a/0x13e0 [ 43.663315][ T363] ? copy_signal+0x610/0x610 [ 43.667995][ T363] ? __init_rwsem+0xd6/0x1c0 [ 43.672685][ T363] ? copy_signal+0x4e3/0x610 [ 43.677107][ T363] copy_process+0x1149/0x3290 [ 43.681769][ T363] ? proc_fail_nth_write+0x20b/0x290 [ 43.687256][ T363] ? fsnotify_perm+0x6a/0x5d0 [ 43.691782][ T363] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 43.696806][ T363] ? vfs_write+0x9ec/0x1110 [ 43.701155][ T363] kernel_clone+0x21e/0x9e0 [ 43.705686][ T363] ? file_end_write+0x1c0/0x1c0 [ 43.710887][ T363] ? create_io_thread+0x1e0/0x1e0 [ 43.715717][ T363] ? mutex_unlock+0xb2/0x260 [ 43.720410][ T363] ? __mutex_lock_slowpath+0x10/0x10 [ 43.725526][ T363] __x64_sys_clone+0x23f/0x290 [ 43.730506][ T363] ? __do_sys_vfork+0x130/0x130 [ 43.736854][ T363] ? ksys_write+0x260/0x2c0 [ 43.741309][ T363] ? debug_smp_processor_id+0x17/0x20 [ 43.746611][ T363] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 43.752671][ T363] ? exit_to_user_mode_prepare+0x39/0xa0 [ 43.758135][ T363] do_syscall_64+0x3d/0xb0 [ 43.762387][ T363] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.768425][ T363] RIP: 0033:0x7fde90772d39 [ 43.772769][ T363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.798777][ T363] RSP: 002b:00007fde906f7078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 43.807021][ T363] RAX: ffffffffffffffda RBX: 00007fde90893f80 RCX: 00007fde90772d39 [ 43.814836][ T363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 43.822637][ T363] RBP: 00007fde906f7120 R08: 0000000000000000 R09: 0000000000000000 [ 43.830715][ T363] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 43.838791][ T363] R13: 000000000000000b R14: 00007fde90893f80 R15: 00007ffd93b49988 [ 43.847198][ T363] [ 43.859997][ T365] FAULT_INJECTION: forcing a failure. [ 43.859997][ T365] name failslab, interval 1, probability 0, space 0, times 0 [ 43.873065][ T365] CPU: 0 PID: 365 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 43.883762][ T365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 43.894118][ T365] Call Trace: [ 43.897667][ T365] [ 43.900528][ T365] dump_stack_lvl+0x151/0x1b7 [ 43.905217][ T365] ? io_uring_drop_tctx_refs+0x190/0x190 [ 43.911587][ T365] dump_stack+0x15/0x17 [ 43.916426][ T365] should_fail+0x3c6/0x510 [ 43.920949][ T365] __should_failslab+0xa4/0xe0 [ 43.926222][ T365] ? anon_vma_clone+0x9a/0x500 [ 43.931147][ T365] should_failslab+0x9/0x20 [ 43.935964][ T365] slab_pre_alloc_hook+0x37/0xd0 [ 43.941303][ T365] ? anon_vma_clone+0x9a/0x500 [ 43.946047][ T365] kmem_cache_alloc+0x44/0x200 [ 43.950902][ T365] anon_vma_clone+0x9a/0x500 [ 43.955488][ T365] anon_vma_fork+0x91/0x4e0 [ 43.960234][ T365] ? anon_vma_name+0x43/0x70 [ 43.964942][ T365] ? vm_area_dup+0x17a/0x230 [ 43.969530][ T365] copy_mm+0xa3a/0x13e0 [ 43.973550][ T365] ? copy_signal+0x610/0x610 [ 43.977945][ T365] ? __init_rwsem+0xd6/0x1c0 [ 43.982382][ T365] ? copy_signal+0x4e3/0x610 [ 43.986804][ T365] copy_process+0x1149/0x3290 [ 43.991321][ T365] ? proc_fail_nth_write+0x20b/0x290 [ 43.996547][ T365] ? fsnotify_perm+0x6a/0x5d0 [ 44.001151][ T365] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 44.006277][ T365] ? vfs_write+0x9ec/0x1110 [ 44.010822][ T365] kernel_clone+0x21e/0x9e0 [ 44.015463][ T365] ? file_end_write+0x1c0/0x1c0 [ 44.020123][ T365] ? create_io_thread+0x1e0/0x1e0 [ 44.025182][ T365] ? mutex_unlock+0xb2/0x260 [ 44.029998][ T365] ? __mutex_lock_slowpath+0x10/0x10 [ 44.035292][ T365] __x64_sys_clone+0x23f/0x290 [ 44.039889][ T365] ? __do_sys_vfork+0x130/0x130 [ 44.044759][ T365] ? ksys_write+0x260/0x2c0 [ 44.049271][ T365] ? debug_smp_processor_id+0x17/0x20 [ 44.054471][ T365] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 44.060375][ T365] ? exit_to_user_mode_prepare+0x39/0xa0 [ 44.066388][ T365] do_syscall_64+0x3d/0xb0 [ 44.070889][ T365] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.076634][ T365] RIP: 0033:0x7fde90772d39 [ 44.081237][ T365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.101463][ T365] RSP: 002b:00007fde906f7078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 44.110140][ T365] RAX: ffffffffffffffda RBX: 00007fde90893f80 RCX: 00007fde90772d39 [ 44.118152][ T365] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 44.125956][ T365] RBP: 00007fde906f7120 R08: 0000000000000000 R09: 0000000000000000 [ 44.134034][ T365] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 44.142115][ T365] R13: 000000000000000b R14: 00007fde90893f80 R15: 00007ffd93b49988 [ 44.150023][ T365] [ 44.170800][ T370] FAULT_INJECTION: forcing a failure. [ 44.170800][ T370] name failslab, interval 1, probability 0, space 0, times 0 [ 44.184785][ T370] CPU: 1 PID: 370 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 44.195813][ T370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 44.206065][ T370] Call Trace: [ 44.209273][ T370] [ 44.212097][ T370] dump_stack_lvl+0x151/0x1b7 [ 44.216821][ T370] ? io_uring_drop_tctx_refs+0x190/0x190 [ 44.222920][ T370] dump_stack+0x15/0x17 [ 44.227000][ T370] should_fail+0x3c6/0x510 [ 44.232156][ T370] __should_failslab+0xa4/0xe0 [ 44.238528][ T370] ? anon_vma_fork+0xf7/0x4e0 [ 44.243636][ T370] should_failslab+0x9/0x20 [ 44.249588][ T370] slab_pre_alloc_hook+0x37/0xd0 [ 44.255509][ T370] ? anon_vma_fork+0xf7/0x4e0 [ 44.260543][ T370] kmem_cache_alloc+0x44/0x200 [ 44.265499][ T370] anon_vma_fork+0xf7/0x4e0 [ 44.270361][ T370] ? anon_vma_name+0x43/0x70 [ 44.274872][ T370] ? vm_area_dup+0x17a/0x230 [ 44.279502][ T370] copy_mm+0xa3a/0x13e0 [ 44.283749][ T370] ? copy_signal+0x610/0x610 [ 44.288257][ T370] ? __init_rwsem+0xd6/0x1c0 [ 44.293074][ T370] ? copy_signal+0x4e3/0x610 [ 44.297588][ T370] copy_process+0x1149/0x3290 [ 44.302192][ T370] ? proc_fail_nth_write+0x20b/0x290 [ 44.307764][ T370] ? fsnotify_perm+0x6a/0x5d0 [ 44.312679][ T370] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 44.318041][ T370] ? vfs_write+0x9ec/0x1110 [ 44.322457][ T370] kernel_clone+0x21e/0x9e0 [ 44.327180][ T370] ? file_end_write+0x1c0/0x1c0 [ 44.332298][ T370] ? create_io_thread+0x1e0/0x1e0 [ 44.337940][ T370] ? mutex_unlock+0xb2/0x260 [ 44.342365][ T370] ? __mutex_lock_slowpath+0x10/0x10 [ 44.347487][ T370] __x64_sys_clone+0x23f/0x290 [ 44.352257][ T370] ? __do_sys_vfork+0x130/0x130 [ 44.357202][ T370] ? ksys_write+0x260/0x2c0 [ 44.361546][ T370] ? debug_smp_processor_id+0x17/0x20 [ 44.366753][ T370] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 44.372656][ T370] ? exit_to_user_mode_prepare+0x39/0xa0 [ 44.378557][ T370] do_syscall_64+0x3d/0xb0 [ 44.383114][ T370] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.389094][ T370] RIP: 0033:0x7fde90772d39 [ 44.393523][ T370] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.414215][ T370] RSP: 002b:00007fde906f7078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 44.423153][ T370] RAX: ffffffffffffffda RBX: 00007fde90893f80 RCX: 00007fde90772d39 [ 44.431506][ T370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 44.439600][ T370] RBP: 00007fde906f7120 R08: 0000000000000000 R09: 0000000000000000 [ 44.447605][ T370] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 44.455519][ T370] R13: 000000000000000b R14: 00007fde90893f80 R15: 00007ffd93b49988 [ 44.463646][ T370] [ 44.478041][ T372] FAULT_INJECTION: forcing a failure. [ 44.478041][ T372] name failslab, interval 1, probability 0, space 0, times 0 [ 44.491989][ T372] CPU: 1 PID: 372 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 44.502244][ T372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 44.512449][ T372] Call Trace: [ 44.515765][ T372] [ 44.519155][ T372] dump_stack_lvl+0x151/0x1b7 [ 44.523644][ T372] ? io_uring_drop_tctx_refs+0x190/0x190 [ 44.529200][ T372] dump_stack+0x15/0x17 [ 44.533645][ T372] should_fail+0x3c6/0x510 [ 44.538001][ T372] __should_failslab+0xa4/0xe0 [ 44.543105][ T372] ? anon_vma_fork+0xf7/0x4e0 [ 44.547867][ T372] should_failslab+0x9/0x20 [ 44.552592][ T372] slab_pre_alloc_hook+0x37/0xd0 [ 44.557536][ T372] ? anon_vma_fork+0xf7/0x4e0 [ 44.562049][ T372] kmem_cache_alloc+0x44/0x200 [ 44.566749][ T372] anon_vma_fork+0xf7/0x4e0 [ 44.571298][ T372] ? anon_vma_name+0x43/0x70 [ 44.575837][ T372] ? vm_area_dup+0x17a/0x230 [ 44.580367][ T372] copy_mm+0xa3a/0x13e0 [ 44.584441][ T372] ? copy_signal+0x610/0x610 [ 44.588861][ T372] ? __init_rwsem+0xd6/0x1c0 [ 44.593284][ T372] ? copy_signal+0x4e3/0x610 [ 44.597834][ T372] copy_process+0x1149/0x3290 [ 44.602554][ T372] ? proc_fail_nth_write+0x20b/0x290 [ 44.608112][ T372] ? fsnotify_perm+0x6a/0x5d0 [ 44.613018][ T372] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 44.618377][ T372] ? vfs_write+0x9ec/0x1110 [ 44.622742][ T372] kernel_clone+0x21e/0x9e0 [ 44.627078][ T372] ? file_end_write+0x1c0/0x1c0 [ 44.631776][ T372] ? create_io_thread+0x1e0/0x1e0 [ 44.636812][ T372] ? mutex_unlock+0xb2/0x260 [ 44.641625][ T372] ? __mutex_lock_slowpath+0x10/0x10 [ 44.646686][ T372] __x64_sys_clone+0x23f/0x290 [ 44.651298][ T372] ? __do_sys_vfork+0x130/0x130 [ 44.656056][ T372] ? ksys_write+0x260/0x2c0 [ 44.660495][ T372] ? debug_smp_processor_id+0x17/0x20 [ 44.665885][ T372] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 44.672608][ T372] ? exit_to_user_mode_prepare+0x39/0xa0 [ 44.678796][ T372] do_syscall_64+0x3d/0xb0 [ 44.683337][ T372] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.689205][ T372] RIP: 0033:0x7fde90772d39 [ 44.693504][ T372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.713865][ T372] RSP: 002b:00007fde906f7078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 44.722814][ T372] RAX: ffffffffffffffda RBX: 00007fde90893f80 RCX: 00007fde90772d39 [ 44.731099][ T372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 44.739148][ T372] RBP: 00007fde906f7120 R08: 0000000000000000 R09: 0000000000000000 [ 44.747232][ T372] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 44.755122][ T372] R13: 000000000000000b R14: 00007fde90893f80 R15: 00007ffd93b49988 [ 44.763031][ T372] [ 44.766920][ T372] ================================================================== [ 44.776036][ T372] BUG: KASAN: double-free or invalid-free in kfree+0xc8/0x220 [ 44.784018][ T372] [ 44.786458][ T372] CPU: 1 PID: 372 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 44.797600][ T372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 44.808011][ T372] Call Trace: [ 44.811393][ T372] [ 44.814275][ T372] dump_stack_lvl+0x151/0x1b7 [ 44.819935][ T372] ? io_uring_drop_tctx_refs+0x190/0x190 [ 44.825879][ T372] ? __wake_up_klogd+0xd5/0x110 [ 44.830848][ T372] ? panic+0x751/0x751 [ 44.834749][ T372] ? kfree+0xc8/0x220 [ 44.838569][ T372] print_address_description+0x87/0x3b0 [ 44.844144][ T372] ? kfree+0xc8/0x220 [ 44.847961][ T372] ? kfree+0xc8/0x220 [ 44.851953][ T372] kasan_report_invalid_free+0x6b/0xa0 [ 44.857516][ T372] ____kasan_slab_free+0x13e/0x160 [ 44.863336][ T372] __kasan_slab_free+0x11/0x20 [ 44.868013][ T372] slab_free_freelist_hook+0xbd/0x190 [ 44.873402][ T372] ? anon_vma_name_free+0x15/0x20 [ 44.878339][ T372] kfree+0xc8/0x220 [ 44.882083][ T372] anon_vma_name_free+0x15/0x20 [ 44.886757][ T372] vm_area_free_no_check+0xa6/0x130 [ 44.892228][ T372] copy_mm+0xefb/0x13e0 [ 44.896219][ T372] ? copy_signal+0x610/0x610 [ 44.900730][ T372] ? __init_rwsem+0xd6/0x1c0 [ 44.905372][ T372] ? copy_signal+0x4e3/0x610 [ 44.910216][ T372] copy_process+0x1149/0x3290 [ 44.915013][ T372] ? proc_fail_nth_write+0x20b/0x290 [ 44.920390][ T372] ? fsnotify_perm+0x6a/0x5d0 [ 44.924914][ T372] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 44.930232][ T372] ? vfs_write+0x9ec/0x1110 [ 44.934808][ T372] kernel_clone+0x21e/0x9e0 [ 44.939392][ T372] ? file_end_write+0x1c0/0x1c0 [ 44.944514][ T372] ? create_io_thread+0x1e0/0x1e0 [ 44.949755][ T372] ? mutex_unlock+0xb2/0x260 [ 44.954402][ T372] ? __mutex_lock_slowpath+0x10/0x10 [ 44.959783][ T372] __x64_sys_clone+0x23f/0x290 [ 44.964391][ T372] ? __do_sys_vfork+0x130/0x130 [ 44.969071][ T372] ? ksys_write+0x260/0x2c0 [ 44.973410][ T372] ? debug_smp_processor_id+0x17/0x20 [ 44.979232][ T372] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 44.985676][ T372] ? exit_to_user_mode_prepare+0x39/0xa0 [ 44.991469][ T372] do_syscall_64+0x3d/0xb0 [ 44.996086][ T372] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.001800][ T372] RIP: 0033:0x7fde90772d39 [ 45.006232][ T372] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.026906][ T372] RSP: 002b:00007fde906f7078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 45.035325][ T372] RAX: ffffffffffffffda RBX: 00007fde90893f80 RCX: 00007fde90772d39 [ 45.043481][ T372] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 45.051297][ T372] RBP: 00007fde906f7120 R08: 0000000000000000 R09: 0000000000000000 [ 45.059187][ T372] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 45.067000][ T372] R13: 000000000000000b R14: 00007fde90893f80 R15: 00007ffd93b49988 [ 45.074817][ T372] [ 45.077678][ T372] [ 45.079847][ T372] Allocated by task 341: [ 45.084115][ T372] __kasan_slab_alloc+0xb1/0xe0 [ 45.088993][ T372] slab_post_alloc_hook+0x53/0x2c0 [ 45.093906][ T372] kmem_cache_alloc+0xf5/0x200 [ 45.098508][ T372] vm_area_dup+0x26/0x230 [ 45.103029][ T372] copy_mm+0x9a1/0x13e0 [ 45.107273][ T372] copy_process+0x1149/0x3290 [ 45.112050][ T372] kernel_clone+0x21e/0x9e0 [ 45.116831][ T372] __x64_sys_clone+0x23f/0x290 [ 45.121607][ T372] do_syscall_64+0x3d/0xb0 [ 45.126199][ T372] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.132014][ T372] [ 45.134716][ T372] The buggy address belongs to the object at ffff88811eb86378 [ 45.134716][ T372] which belongs to the cache vm_area_struct of size 232 [ 45.149614][ T372] The buggy address is located 88 bytes inside of [ 45.149614][ T372] 232-byte region [ffff88811eb86378, ffff88811eb86460) [ 45.162899][ T372] The buggy address belongs to the page: [ 45.168624][ T372] page:ffffea00047ae180 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11eb86 [ 45.178876][ T372] flags: 0x4000000000000200(slab|zone=1) [ 45.184467][ T372] raw: 4000000000000200 0000000000000000 dead000000000122 ffff8881001bd500 [ 45.193508][ T372] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 45.202375][ T372] page dumped because: kasan: bad access detected [ 45.208878][ T372] page_owner tracks the page as allocated [ 45.214893][ T372] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 341, ts 41631308929, free_ts 35505772953 [ 45.231600][ T372] post_alloc_hook+0x1a3/0x1b0 [ 45.236675][ T372] prep_new_page+0x1b/0x110 [ 45.241534][ T372] get_page_from_freelist+0x3550/0x35d0 [ 45.247856][ T372] __alloc_pages+0x27e/0x8f0 [ 45.252648][ T372] new_slab+0x9a/0x4e0 [ 45.256985][ T372] ___slab_alloc+0x39e/0x830 [ 45.261733][ T372] __slab_alloc+0x4a/0x90 [ 45.266088][ T372] kmem_cache_alloc+0x134/0x200 [ 45.270852][ T372] vm_area_dup+0x26/0x230 [ 45.275034][ T372] copy_mm+0x9a1/0x13e0 [ 45.279149][ T372] copy_process+0x1149/0x3290 [ 45.283756][ T372] kernel_clone+0x21e/0x9e0 [ 45.289196][ T372] __x64_sys_clone+0x23f/0x290 [ 45.293905][ T372] do_syscall_64+0x3d/0xb0 [ 45.298238][ T372] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.304255][ T372] page last free stack trace: [ 45.308774][ T372] free_unref_page_prepare+0x7c8/0x7d0 [ 45.314157][ T372] free_unref_page+0xe8/0x750 [ 45.318758][ T372] __put_page+0xb0/0xe0 [ 45.322845][ T372] anon_pipe_buf_release+0x187/0x200 [ 45.328336][ T372] pipe_read+0x5a6/0x1040 [ 45.332903][ T372] vfs_read+0xa7e/0xd40 [ 45.336898][ T372] ksys_read+0x199/0x2c0 [ 45.340986][ T372] __x64_sys_read+0x7b/0x90 [ 45.345331][ T372] do_syscall_64+0x3d/0xb0 [ 45.349568][ T372] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.356116][ T372] [ 45.358296][ T372] Memory state around the buggy address: [ 45.364459][ T372] ffff88811eb86280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 45.376441][ T372] ffff88811eb86300: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 [ 45.384679][ T372] >ffff88811eb86380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 45.393182][ T372] ^ [ 45.399776][ T372] ffff88811eb86400: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 45.409857][ T372] ffff88811eb86480: fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00 [ 45.418442][ T372] ================================================================== [ 45.427391][ T372] Disabling lock debugging due to kernel taint [ 45.441752][ T342] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 45.453899][ T342] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 45.462704][ T342] CPU: 1 PID: 342 Comm: syz-executor.0 Tainted: G B 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 45.475300][ T342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/25/2024 [ 45.485365][ T342] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 45.491774][ T342] Code: 00 74 08 4c 89 ef e8 5e 0b 2b ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 30 0b 2b ff 48 89 d8 48 8b 1b 4c [ 45.512232][ T342] RSP: 0018:ffffc900009d78f8 EFLAGS: 00010202 [ 45.518749][ T342] RAX: 0000000000000000 RBX: 0000000000000008 RCX: dffffc0000000000 [ 45.526997][ T342] RDX: ffffffff81a4f280 RSI: ffff88810c1dc968 RDI: ffff88810ccff3d0 [ 45.535487][ T342] RBP: ffffc900009d7960 R08: dffffc0000000000 R09: ffff88810ccff3d8 [ 45.543647][ T342] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 45.551715][ T342] R13: ffff88811eb863d0 R14: 0000000000000001 R15: ffff88810ccff3d0 [ 45.559713][ T342] FS: 0000555557344480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 45.568558][ T342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.575188][ T342] CR2: 00007fde917cd3be CR3: 000000011eb87000 CR4: 00000000003506a0 [ 45.583309][ T342] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.593347][ T342] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.602067][ T342] Call Trace: [ 45.605718][ T342] [ 45.609017][ T342] ? __die_body+0x62/0xb0 [ 45.613375][ T342] ? die_addr+0x9f/0xd0 [ 45.617659][ T342] ? exc_general_protection+0x311/0x4b0 [ 45.623754][ T342] ? asm_exc_general_protection+0x27/0x30 [ 45.629576][ T342] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 45.636091][ T342] ? __rb_insert_augmented+0x91/0x610 [ 45.641311][ T342] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 45.648165][ T342] vma_interval_tree_insert_after+0x2be/0x2d0 [ 45.654587][ T342] copy_mm+0xba2/0x13e0 [ 45.659144][ T342] ? copy_signal+0x610/0x610 [ 45.663653][ T342] ? __init_rwsem+0xd6/0x1c0 [ 45.668165][ T342] ? copy_signal+0x4e3/0x610 [ 45.672597][ T342] copy_process+0x1149/0x3290 [ 45.677372][ T342] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 45.682315][ T342] kernel_clone+0x21e/0x9e0 [ 45.686912][ T342] ? kernel_read+0x1f0/0x1f0 [ 45.691523][ T342] ? kmem_cache_free+0x116/0x2e0 [ 45.696651][ T342] ? create_io_thread+0x1e0/0x1e0 [ 45.701787][ T342] ? debug_smp_processor_id+0x17/0x20 [ 45.707001][ T342] __x64_sys_clone+0x23f/0x290 [ 45.711965][ T342] ? __do_sys_vfork+0x130/0x130 [ 45.716948][ T342] do_syscall_64+0x3d/0xb0 [ 45.721545][ T342] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.727706][ T342] RIP: 0033:0x7fde9076fd93 [ 45.732223][ T342] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 45.753389][ T342] RSP: 002b:00007ffd93b49bc8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 45.763015][ T342] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fde9076fd93 [ 45.773246][ T342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 45.781289][ T342] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 45.789487][ T342] R10: 0000555557344750 R11: 0000000000000246 R12: 0000000000000001 [ 45.797946][ T342] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 45.806411][ T342] [ 45.810030][ T342] Modules linked in: [ 45.817245][ T342] ---[ end trace 3c1ec1d110f20c11 ]--- [ 45.822846][ T342] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 45.828819][ T342] Code: 00 74 08 4c 89 ef e8 5e 0b 2b ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 30 0b 2b ff 48 89 d8 48 8b 1b 4c [ 45.850433][ T342] RSP: 0018:ffffc900009d78f8 EFLAGS: 00010202 [ 45.857150][ T342] RAX: 0000000000000000 RBX: 0000000000000008 RCX: dffffc0000000000 [ 45.865383][ T342] RDX: ffffffff81a4f280 RSI: ffff88810c1dc968 RDI: ffff88810ccff3d0 [ 45.874329][ T342] RBP: ffffc900009d7960 R08: dffffc0000000000 R09: ffff88810ccff3d8 [ 45.882539][ T342] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 45.890686][ T342] R13: ffff88811eb863d0 R14: 0000000000000001 R15: ffff88810ccff3d0 [ 45.898991][ T342] FS: 0000555557344480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 45.908163][ T342] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 45.914672][ T342] CR2: 00007ffd93b49bc8 CR3: 000000011eb87000 CR4: 00000000003506b0 [ 45.922561][ T342] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 45.930438][ T342] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 45.938379][ T342] Kernel panic - not syncing: Fatal exception [ 45.944461][ T342] Kernel Offset: disabled [ 45.948754][ T342] Rebooting in 86400 seconds..