Warning: Permanently added '10.128.1.56' (ED25519) to the list of known hosts. 2024/04/09 08:48:54 ignoring optional flag "sandboxArg"="0" 2024/04/09 08:48:54 parsed 1 programs [ 41.479065][ T30] audit: type=1400 audit(1712652534.711:157): avc: denied { mounton } for pid=339 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 41.504624][ T30] audit: type=1400 audit(1712652534.711:158): avc: denied { mount } for pid=339 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 2024/04/09 08:48:54 executed programs: 0 [ 41.559573][ T30] audit: type=1400 audit(1712652534.791:159): avc: denied { unlink } for pid=339 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 41.599221][ T339] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 41.643105][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.650488][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.657722][ T345] device bridge_slave_0 entered promiscuous mode [ 41.665363][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.672460][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.680082][ T345] device bridge_slave_1 entered promiscuous mode [ 41.711291][ T30] audit: type=1400 audit(1712652534.941:160): avc: denied { write } for pid=345 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.732777][ T30] audit: type=1400 audit(1712652534.971:161): avc: denied { read } for pid=345 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 41.737095][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.760636][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.767690][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.774591][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.790512][ T297] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.797725][ T297] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.805481][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 41.813187][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 41.829469][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 41.837948][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 41.846063][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.853077][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 41.860535][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 41.868473][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.875349][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 41.883059][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 41.890983][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 41.901938][ T345] device veth0_vlan entered promiscuous mode [ 41.908716][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 41.916495][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 41.923837][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 41.933803][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 41.942528][ T345] device veth1_macvtap entered promiscuous mode [ 41.950923][ T60] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 41.962226][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 41.973675][ T30] audit: type=1400 audit(1712652535.201:162): avc: denied { mounton } for pid=345 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 42.002248][ T352] FAULT_INJECTION: forcing a failure. [ 42.002248][ T352] name failslab, interval 1, probability 0, space 0, times 1 [ 42.015088][ T352] CPU: 0 PID: 352 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 42.025547][ T352] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 42.035846][ T352] Call Trace: [ 42.039016][ T352] [ 42.041795][ T352] dump_stack_lvl+0x151/0x1b7 [ 42.046426][ T352] ? io_uring_drop_tctx_refs+0x190/0x190 [ 42.052061][ T352] dump_stack+0x15/0x17 [ 42.056056][ T352] should_fail+0x3c6/0x510 [ 42.060563][ T352] __should_failslab+0xa4/0xe0 [ 42.066298][ T352] ? anon_vma_clone+0x9a/0x500 [ 42.071070][ T352] should_failslab+0x9/0x20 [ 42.075406][ T352] slab_pre_alloc_hook+0x37/0xd0 [ 42.080269][ T352] ? anon_vma_clone+0x9a/0x500 [ 42.084887][ T352] kmem_cache_alloc+0x44/0x200 [ 42.089461][ T352] anon_vma_clone+0x9a/0x500 [ 42.093891][ T352] anon_vma_fork+0x91/0x4e0 [ 42.098224][ T352] ? anon_vma_name+0x43/0x70 [ 42.102996][ T352] ? vm_area_dup+0x17a/0x230 [ 42.107432][ T352] copy_mm+0xa3a/0x13e0 [ 42.111540][ T352] ? copy_signal+0x610/0x610 [ 42.115949][ T352] ? __init_rwsem+0xd6/0x1c0 [ 42.120472][ T352] ? copy_signal+0x4e3/0x610 [ 42.124896][ T352] copy_process+0x1149/0x3290 [ 42.129406][ T352] ? proc_fail_nth_write+0x20b/0x290 [ 42.134704][ T352] ? fsnotify_perm+0x6a/0x5d0 [ 42.139214][ T352] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 42.144327][ T352] ? vfs_write+0x9ec/0x1110 [ 42.148672][ T352] kernel_clone+0x21e/0x9e0 [ 42.153012][ T352] ? file_end_write+0x1c0/0x1c0 [ 42.157699][ T352] ? create_io_thread+0x1e0/0x1e0 [ 42.162815][ T352] ? mutex_unlock+0xb2/0x260 [ 42.167261][ T352] ? __mutex_lock_slowpath+0x10/0x10 [ 42.172363][ T352] __x64_sys_clone+0x23f/0x290 [ 42.176962][ T352] ? __do_sys_vfork+0x130/0x130 [ 42.181646][ T352] ? ksys_write+0x260/0x2c0 [ 42.186249][ T352] ? debug_smp_processor_id+0x17/0x20 [ 42.191462][ T352] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 42.197360][ T352] ? exit_to_user_mode_prepare+0x39/0xa0 [ 42.202824][ T352] do_syscall_64+0x3d/0xb0 [ 42.207074][ T352] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.212803][ T352] RIP: 0033:0x7fe80528eda9 [ 42.217070][ T352] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.236765][ T352] RSP: 002b:00007fe804e10078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 42.245012][ T352] RAX: ffffffffffffffda RBX: 00007fe8053bcf80 RCX: 00007fe80528eda9 [ 42.253700][ T352] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 42.261591][ T352] RBP: 00007fe804e10120 R08: 0000000000000000 R09: 0000000000000000 [ 42.269428][ T352] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 42.277287][ T352] R13: 000000000000000b R14: 00007fe8053bcf80 R15: 00007ffcb6553c88 [ 42.285570][ T352] [ 42.290208][ T30] audit: type=1400 audit(1712652535.521:163): avc: denied { sys_admin } for pid=351 comm="syz-executor.0" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 42.316063][ T356] FAULT_INJECTION: forcing a failure. [ 42.316063][ T356] name failslab, interval 1, probability 0, space 0, times 0 [ 42.329107][ T356] CPU: 0 PID: 356 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 42.339522][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 42.349487][ T356] Call Trace: [ 42.352570][ T356] [ 42.355576][ T356] dump_stack_lvl+0x151/0x1b7 [ 42.360189][ T356] ? io_uring_drop_tctx_refs+0x190/0x190 [ 42.365717][ T356] dump_stack+0x15/0x17 [ 42.369758][ T356] should_fail+0x3c6/0x510 [ 42.374008][ T356] __should_failslab+0xa4/0xe0 [ 42.378606][ T356] ? anon_vma_fork+0xf7/0x4e0 [ 42.383216][ T356] should_failslab+0x9/0x20 [ 42.387607][ T356] slab_pre_alloc_hook+0x37/0xd0 [ 42.392418][ T356] ? anon_vma_fork+0xf7/0x4e0 [ 42.396929][ T356] kmem_cache_alloc+0x44/0x200 [ 42.401536][ T356] anon_vma_fork+0xf7/0x4e0 [ 42.405966][ T356] ? anon_vma_name+0x43/0x70 [ 42.410558][ T356] ? vm_area_dup+0x17a/0x230 [ 42.415252][ T356] copy_mm+0xa3a/0x13e0 [ 42.419351][ T356] ? copy_signal+0x610/0x610 [ 42.423800][ T356] ? __init_rwsem+0xd6/0x1c0 [ 42.428306][ T356] ? copy_signal+0x4e3/0x610 [ 42.432822][ T356] copy_process+0x1149/0x3290 [ 42.437319][ T356] ? proc_fail_nth_write+0x20b/0x290 [ 42.442499][ T356] ? fsnotify_perm+0x6a/0x5d0 [ 42.447308][ T356] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 42.452338][ T356] ? vfs_write+0x9ec/0x1110 [ 42.457450][ T356] kernel_clone+0x21e/0x9e0 [ 42.462484][ T356] ? file_end_write+0x1c0/0x1c0 [ 42.467172][ T356] ? create_io_thread+0x1e0/0x1e0 [ 42.472030][ T356] ? mutex_unlock+0xb2/0x260 [ 42.476485][ T356] ? __mutex_lock_slowpath+0x10/0x10 [ 42.481804][ T356] __x64_sys_clone+0x23f/0x290 [ 42.486362][ T356] ? __do_sys_vfork+0x130/0x130 [ 42.491112][ T356] ? ksys_write+0x260/0x2c0 [ 42.495434][ T356] ? debug_smp_processor_id+0x17/0x20 [ 42.500583][ T356] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 42.506573][ T356] ? exit_to_user_mode_prepare+0x39/0xa0 [ 42.512038][ T356] do_syscall_64+0x3d/0xb0 [ 42.516294][ T356] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.522021][ T356] RIP: 0033:0x7fe80528eda9 [ 42.526273][ T356] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.545890][ T356] RSP: 002b:00007fe804e10078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 42.554155][ T356] RAX: ffffffffffffffda RBX: 00007fe8053bcf80 RCX: 00007fe80528eda9 [ 42.561943][ T356] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 42.570015][ T356] RBP: 00007fe804e10120 R08: 0000000000000000 R09: 0000000000000000 [ 42.577912][ T356] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 42.585813][ T356] R13: 000000000000000b R14: 00007fe8053bcf80 R15: 00007ffcb6553c88 [ 42.593655][ T356] [ 42.604638][ T358] FAULT_INJECTION: forcing a failure. [ 42.604638][ T358] name failslab, interval 1, probability 0, space 0, times 0 [ 42.617261][ T358] CPU: 0 PID: 358 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 42.627397][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 42.637379][ T358] Call Trace: [ 42.640499][ T358] [ 42.643277][ T358] dump_stack_lvl+0x151/0x1b7 [ 42.647787][ T358] ? io_uring_drop_tctx_refs+0x190/0x190 [ 42.653692][ T358] dump_stack+0x15/0x17 [ 42.657782][ T358] should_fail+0x3c6/0x510 [ 42.662145][ T358] __should_failslab+0xa4/0xe0 [ 42.666706][ T358] ? anon_vma_clone+0x9a/0x500 [ 42.671485][ T358] should_failslab+0x9/0x20 [ 42.675831][ T358] slab_pre_alloc_hook+0x37/0xd0 [ 42.680604][ T358] ? anon_vma_clone+0x9a/0x500 [ 42.685372][ T358] kmem_cache_alloc+0x44/0x200 [ 42.690256][ T358] anon_vma_clone+0x9a/0x500 [ 42.694774][ T358] anon_vma_fork+0x91/0x4e0 [ 42.699106][ T358] ? anon_vma_name+0x43/0x70 [ 42.703714][ T358] ? vm_area_dup+0x17a/0x230 [ 42.708131][ T358] copy_mm+0xa3a/0x13e0 [ 42.712140][ T358] ? copy_signal+0x610/0x610 [ 42.716735][ T358] ? __init_rwsem+0xd6/0x1c0 [ 42.721158][ T358] ? copy_signal+0x4e3/0x610 [ 42.725643][ T358] copy_process+0x1149/0x3290 [ 42.730189][ T358] ? proc_fail_nth_write+0x20b/0x290 [ 42.735304][ T358] ? fsnotify_perm+0x6a/0x5d0 [ 42.739902][ T358] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 42.744847][ T358] ? vfs_write+0x9ec/0x1110 [ 42.749187][ T358] kernel_clone+0x21e/0x9e0 [ 42.753526][ T358] ? file_end_write+0x1c0/0x1c0 [ 42.758213][ T358] ? create_io_thread+0x1e0/0x1e0 [ 42.763251][ T358] ? mutex_unlock+0xb2/0x260 [ 42.767758][ T358] ? __mutex_lock_slowpath+0x10/0x10 [ 42.772905][ T358] __x64_sys_clone+0x23f/0x290 [ 42.777478][ T358] ? __do_sys_vfork+0x130/0x130 [ 42.782164][ T358] ? ksys_write+0x260/0x2c0 [ 42.786505][ T358] ? debug_smp_processor_id+0x17/0x20 [ 42.791711][ T358] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 42.797717][ T358] ? exit_to_user_mode_prepare+0x39/0xa0 [ 42.803188][ T358] do_syscall_64+0x3d/0xb0 [ 42.807432][ T358] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 42.813244][ T358] RIP: 0033:0x7fe80528eda9 [ 42.817492][ T358] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 42.837194][ T358] RSP: 002b:00007fe804e10078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 42.845525][ T358] RAX: ffffffffffffffda RBX: 00007fe8053bcf80 RCX: 00007fe80528eda9 [ 42.853421][ T358] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 42.861242][ T358] RBP: 00007fe804e10120 R08: 0000000000000000 R09: 0000000000000000 [ 42.869045][ T358] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 42.876941][ T358] R13: 000000000000000b R14: 00007fe8053bcf80 R15: 00007ffcb6553c88 [ 42.884854][ T358] [ 42.911097][ T362] FAULT_INJECTION: forcing a failure. [ 42.911097][ T362] name failslab, interval 1, probability 0, space 0, times 0 [ 42.923914][ T362] CPU: 0 PID: 362 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 42.934138][ T362] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 42.944027][ T362] Call Trace: [ 42.947153][ T362] [ 42.949937][ T362] dump_stack_lvl+0x151/0x1b7 [ 42.954446][ T362] ? io_uring_drop_tctx_refs+0x190/0x190 [ 42.959924][ T362] dump_stack+0x15/0x17 [ 42.963906][ T362] should_fail+0x3c6/0x510 [ 42.968157][ T362] __should_failslab+0xa4/0xe0 [ 42.972849][ T362] ? anon_vma_fork+0x1df/0x4e0 [ 42.977716][ T362] should_failslab+0x9/0x20 [ 42.982041][ T362] slab_pre_alloc_hook+0x37/0xd0 [ 42.986918][ T362] ? anon_vma_fork+0x1df/0x4e0 [ 42.991688][ T362] kmem_cache_alloc+0x44/0x200 [ 42.996363][ T362] anon_vma_fork+0x1df/0x4e0 [ 43.000884][ T362] copy_mm+0xa3a/0x13e0 [ 43.004885][ T362] ? copy_signal+0x610/0x610 [ 43.009384][ T362] ? __init_rwsem+0xd6/0x1c0 [ 43.013811][ T362] ? copy_signal+0x4e3/0x610 [ 43.018497][ T362] copy_process+0x1149/0x3290 [ 43.023400][ T362] ? proc_fail_nth_write+0x20b/0x290 [ 43.028522][ T362] ? fsnotify_perm+0x6a/0x5d0 [ 43.033140][ T362] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 43.038502][ T362] ? vfs_write+0x9ec/0x1110 [ 43.042967][ T362] kernel_clone+0x21e/0x9e0 [ 43.047294][ T362] ? file_end_write+0x1c0/0x1c0 [ 43.052146][ T362] ? create_io_thread+0x1e0/0x1e0 [ 43.057120][ T362] ? mutex_unlock+0xb2/0x260 [ 43.061528][ T362] ? __mutex_lock_slowpath+0x10/0x10 [ 43.066810][ T362] __x64_sys_clone+0x23f/0x290 [ 43.071671][ T362] ? __do_sys_vfork+0x130/0x130 [ 43.076362][ T362] ? ksys_write+0x260/0x2c0 [ 43.080795][ T362] ? debug_smp_processor_id+0x17/0x20 [ 43.085990][ T362] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 43.091899][ T362] ? exit_to_user_mode_prepare+0x39/0xa0 [ 43.097365][ T362] do_syscall_64+0x3d/0xb0 [ 43.101728][ T362] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.107726][ T362] RIP: 0033:0x7fe80528eda9 [ 43.111970][ T362] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.132021][ T362] RSP: 002b:00007fe804e10078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 43.140267][ T362] RAX: ffffffffffffffda RBX: 00007fe8053bcf80 RCX: 00007fe80528eda9 [ 43.148089][ T362] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 43.155970][ T362] RBP: 00007fe804e10120 R08: 0000000000000000 R09: 0000000000000000 [ 43.163804][ T362] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 43.171592][ T362] R13: 000000000000000b R14: 00007fe8053bcf80 R15: 00007ffcb6553c88 [ 43.179652][ T362] [ 43.191681][ T364] FAULT_INJECTION: forcing a failure. [ 43.191681][ T364] name failslab, interval 1, probability 0, space 0, times 0 [ 43.204501][ T364] CPU: 0 PID: 364 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 43.214831][ T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 43.224720][ T364] Call Trace: [ 43.227844][ T364] [ 43.230632][ T364] dump_stack_lvl+0x151/0x1b7 [ 43.235227][ T364] ? io_uring_drop_tctx_refs+0x190/0x190 [ 43.240868][ T364] dump_stack+0x15/0x17 [ 43.244857][ T364] should_fail+0x3c6/0x510 [ 43.249185][ T364] __should_failslab+0xa4/0xe0 [ 43.254065][ T364] ? anon_vma_fork+0xf7/0x4e0 [ 43.258567][ T364] should_failslab+0x9/0x20 [ 43.262921][ T364] slab_pre_alloc_hook+0x37/0xd0 [ 43.267794][ T364] ? anon_vma_fork+0xf7/0x4e0 [ 43.272293][ T364] kmem_cache_alloc+0x44/0x200 [ 43.276894][ T364] anon_vma_fork+0xf7/0x4e0 [ 43.281837][ T364] ? anon_vma_name+0x4c/0x70 [ 43.286262][ T364] ? vm_area_dup+0x17a/0x230 [ 43.290694][ T364] copy_mm+0xa3a/0x13e0 [ 43.294683][ T364] ? copy_signal+0x610/0x610 [ 43.299114][ T364] ? __init_rwsem+0xd6/0x1c0 [ 43.303539][ T364] ? copy_signal+0x4e3/0x610 [ 43.307972][ T364] copy_process+0x1149/0x3290 [ 43.312500][ T364] ? proc_fail_nth_write+0x20b/0x290 [ 43.318560][ T364] ? fsnotify_perm+0x6a/0x5d0 [ 43.323077][ T364] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 43.328245][ T364] ? vfs_write+0x9ec/0x1110 [ 43.332686][ T364] kernel_clone+0x21e/0x9e0 [ 43.337019][ T364] ? file_end_write+0x1c0/0x1c0 [ 43.341880][ T364] ? create_io_thread+0x1e0/0x1e0 [ 43.347016][ T364] ? mutex_unlock+0xb2/0x260 [ 43.351446][ T364] ? __mutex_lock_slowpath+0x10/0x10 [ 43.356664][ T364] __x64_sys_clone+0x23f/0x290 [ 43.361353][ T364] ? __do_sys_vfork+0x130/0x130 [ 43.366039][ T364] ? ksys_write+0x260/0x2c0 [ 43.370465][ T364] ? debug_smp_processor_id+0x17/0x20 [ 43.376049][ T364] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 43.382043][ T364] ? exit_to_user_mode_prepare+0x39/0xa0 [ 43.387593][ T364] do_syscall_64+0x3d/0xb0 [ 43.391834][ T364] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.397655][ T364] RIP: 0033:0x7fe80528eda9 [ 43.402117][ T364] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.421965][ T364] RSP: 002b:00007fe804e10078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 43.430289][ T364] RAX: ffffffffffffffda RBX: 00007fe8053bcf80 RCX: 00007fe80528eda9 [ 43.438098][ T364] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 43.445995][ T364] RBP: 00007fe804e10120 R08: 0000000000000000 R09: 0000000000000000 [ 43.453981][ T364] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 43.462260][ T364] R13: 000000000000000b R14: 00007fe8053bcf80 R15: 00007ffcb6553c88 [ 43.470712][ T364] [ 43.482461][ T366] FAULT_INJECTION: forcing a failure. [ 43.482461][ T366] name failslab, interval 1, probability 0, space 0, times 0 [ 43.495067][ T366] CPU: 0 PID: 366 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 43.505499][ T366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 43.516127][ T366] Call Trace: [ 43.519234][ T366] [ 43.522012][ T366] dump_stack_lvl+0x151/0x1b7 [ 43.526735][ T366] ? io_uring_drop_tctx_refs+0x190/0x190 [ 43.532550][ T366] dump_stack+0x15/0x17 [ 43.536750][ T366] should_fail+0x3c6/0x510 [ 43.541001][ T366] __should_failslab+0xa4/0xe0 [ 43.545704][ T366] ? anon_vma_clone+0x9a/0x500 [ 43.550298][ T366] should_failslab+0x9/0x20 [ 43.554732][ T366] slab_pre_alloc_hook+0x37/0xd0 [ 43.559584][ T366] ? anon_vma_clone+0x9a/0x500 [ 43.564319][ T366] kmem_cache_alloc+0x44/0x200 [ 43.568903][ T366] anon_vma_clone+0x9a/0x500 [ 43.573422][ T366] anon_vma_fork+0x91/0x4e0 [ 43.577786][ T366] ? anon_vma_name+0x43/0x70 [ 43.582392][ T366] ? vm_area_dup+0x17a/0x230 [ 43.587055][ T366] copy_mm+0xa3a/0x13e0 [ 43.591049][ T366] ? copy_signal+0x610/0x610 [ 43.595472][ T366] ? __init_rwsem+0xd6/0x1c0 [ 43.599899][ T366] ? copy_signal+0x4e3/0x610 [ 43.604412][ T366] copy_process+0x1149/0x3290 [ 43.608929][ T366] ? proc_fail_nth_write+0x20b/0x290 [ 43.614051][ T366] ? fsnotify_perm+0x6a/0x5d0 [ 43.618574][ T366] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 43.623696][ T366] ? vfs_write+0x9ec/0x1110 [ 43.628343][ T366] kernel_clone+0x21e/0x9e0 [ 43.632995][ T366] ? file_end_write+0x1c0/0x1c0 [ 43.637680][ T366] ? create_io_thread+0x1e0/0x1e0 [ 43.642538][ T366] ? mutex_unlock+0xb2/0x260 [ 43.646946][ T366] ? __mutex_lock_slowpath+0x10/0x10 [ 43.652160][ T366] __x64_sys_clone+0x23f/0x290 [ 43.656752][ T366] ? __do_sys_vfork+0x130/0x130 [ 43.661443][ T366] ? ksys_write+0x260/0x2c0 [ 43.665868][ T366] ? debug_smp_processor_id+0x17/0x20 [ 43.671161][ T366] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 43.677062][ T366] ? exit_to_user_mode_prepare+0x39/0xa0 [ 43.682531][ T366] do_syscall_64+0x3d/0xb0 [ 43.686870][ T366] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.693069][ T366] RIP: 0033:0x7fe80528eda9 [ 43.697470][ T366] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.717080][ T366] RSP: 002b:00007fe804e10078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 43.725584][ T366] RAX: ffffffffffffffda RBX: 00007fe8053bcf80 RCX: 00007fe80528eda9 [ 43.733526][ T366] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 43.741589][ T366] RBP: 00007fe804e10120 R08: 0000000000000000 R09: 0000000000000000 [ 43.749392][ T366] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 43.758770][ T366] R13: 000000000000000b R14: 00007fe8053bcf80 R15: 00007ffcb6553c88 [ 43.766626][ T366] [ 43.787390][ T369] FAULT_INJECTION: forcing a failure. [ 43.787390][ T369] name failslab, interval 1, probability 0, space 0, times 0 [ 43.800239][ T369] CPU: 0 PID: 369 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 43.810468][ T369] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 43.820457][ T369] Call Trace: [ 43.823664][ T369] [ 43.826433][ T369] dump_stack_lvl+0x151/0x1b7 [ 43.830983][ T369] ? io_uring_drop_tctx_refs+0x190/0x190 [ 43.836420][ T369] dump_stack+0x15/0x17 [ 43.840407][ T369] should_fail+0x3c6/0x510 [ 43.844696][ T369] __should_failslab+0xa4/0xe0 [ 43.849271][ T369] ? anon_vma_fork+0x1df/0x4e0 [ 43.853858][ T369] should_failslab+0x9/0x20 [ 43.858704][ T369] slab_pre_alloc_hook+0x37/0xd0 [ 43.863510][ T369] ? anon_vma_fork+0x1df/0x4e0 [ 43.868121][ T369] kmem_cache_alloc+0x44/0x200 [ 43.872714][ T369] anon_vma_fork+0x1df/0x4e0 [ 43.877136][ T369] copy_mm+0xa3a/0x13e0 [ 43.881131][ T369] ? copy_signal+0x610/0x610 [ 43.885557][ T369] ? __init_rwsem+0xd6/0x1c0 [ 43.890066][ T369] ? copy_signal+0x4e3/0x610 [ 43.894499][ T369] copy_process+0x1149/0x3290 [ 43.899009][ T369] ? proc_fail_nth_write+0x20b/0x290 [ 43.904393][ T369] ? fsnotify_perm+0x6a/0x5d0 [ 43.909283][ T369] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 43.914370][ T369] ? vfs_write+0x9ec/0x1110 [ 43.918736][ T369] kernel_clone+0x21e/0x9e0 [ 43.923255][ T369] ? file_end_write+0x1c0/0x1c0 [ 43.928340][ T369] ? create_io_thread+0x1e0/0x1e0 [ 43.933279][ T369] ? mutex_unlock+0xb2/0x260 [ 43.937776][ T369] ? __mutex_lock_slowpath+0x10/0x10 [ 43.942982][ T369] __x64_sys_clone+0x23f/0x290 [ 43.947599][ T369] ? __do_sys_vfork+0x130/0x130 [ 43.952266][ T369] ? ksys_write+0x260/0x2c0 [ 43.956817][ T369] ? debug_smp_processor_id+0x17/0x20 [ 43.962080][ T369] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 43.967987][ T369] ? exit_to_user_mode_prepare+0x39/0xa0 [ 43.973808][ T369] do_syscall_64+0x3d/0xb0 [ 43.978061][ T369] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 43.983875][ T369] RIP: 0033:0x7fe80528eda9 [ 43.988128][ T369] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.008003][ T369] RSP: 002b:00007fe804e10078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 44.016594][ T369] RAX: ffffffffffffffda RBX: 00007fe8053bcf80 RCX: 00007fe80528eda9 [ 44.024789][ T369] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 44.032753][ T369] RBP: 00007fe804e10120 R08: 0000000000000000 R09: 0000000000000000 [ 44.041874][ T369] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 44.049680][ T369] R13: 000000000000000b R14: 00007fe8053bcf80 R15: 00007ffcb6553c88 [ 44.057925][ T369] [ 44.070840][ T372] FAULT_INJECTION: forcing a failure. [ 44.070840][ T372] name failslab, interval 1, probability 0, space 0, times 0 [ 44.083649][ T372] CPU: 0 PID: 372 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 44.093789][ T372] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 44.103794][ T372] Call Trace: [ 44.107003][ T372] [ 44.109859][ T372] dump_stack_lvl+0x151/0x1b7 [ 44.114384][ T372] ? io_uring_drop_tctx_refs+0x190/0x190 [ 44.120330][ T372] dump_stack+0x15/0x17 [ 44.124286][ T372] should_fail+0x3c6/0x510 [ 44.128539][ T372] __should_failslab+0xa4/0xe0 [ 44.133139][ T372] ? anon_vma_fork+0xf7/0x4e0 [ 44.137650][ T372] should_failslab+0x9/0x20 [ 44.142287][ T372] slab_pre_alloc_hook+0x37/0xd0 [ 44.147026][ T372] ? anon_vma_fork+0xf7/0x4e0 [ 44.151556][ T372] kmem_cache_alloc+0x44/0x200 [ 44.156153][ T372] anon_vma_fork+0xf7/0x4e0 [ 44.160479][ T372] ? anon_vma_name+0x43/0x70 [ 44.164911][ T372] ? vm_area_dup+0x17a/0x230 [ 44.169432][ T372] copy_mm+0xa3a/0x13e0 [ 44.173416][ T372] ? copy_signal+0x610/0x610 [ 44.177857][ T372] ? __init_rwsem+0xd6/0x1c0 [ 44.182792][ T372] ? copy_signal+0x4e3/0x610 [ 44.187218][ T372] copy_process+0x1149/0x3290 [ 44.191734][ T372] ? proc_fail_nth_write+0x20b/0x290 [ 44.196848][ T372] ? fsnotify_perm+0x6a/0x5d0 [ 44.201658][ T372] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 44.206579][ T372] ? vfs_write+0x9ec/0x1110 [ 44.210910][ T372] kernel_clone+0x21e/0x9e0 [ 44.215249][ T372] ? file_end_write+0x1c0/0x1c0 [ 44.220032][ T372] ? create_io_thread+0x1e0/0x1e0 [ 44.225173][ T372] ? mutex_unlock+0xb2/0x260 [ 44.229566][ T372] ? __mutex_lock_slowpath+0x10/0x10 [ 44.234685][ T372] __x64_sys_clone+0x23f/0x290 [ 44.239281][ T372] ? __do_sys_vfork+0x130/0x130 [ 44.243972][ T372] ? ksys_write+0x260/0x2c0 [ 44.248310][ T372] ? debug_smp_processor_id+0x17/0x20 [ 44.253631][ T372] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 44.259722][ T372] ? exit_to_user_mode_prepare+0x39/0xa0 [ 44.265266][ T372] do_syscall_64+0x3d/0xb0 [ 44.269629][ T372] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.275353][ T372] RIP: 0033:0x7fe80528eda9 [ 44.279605][ T372] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.299850][ T372] RSP: 002b:00007fe804e10078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 44.308231][ T372] RAX: ffffffffffffffda RBX: 00007fe8053bcf80 RCX: 00007fe80528eda9 [ 44.315986][ T372] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 44.323798][ T372] RBP: 00007fe804e10120 R08: 0000000000000000 R09: 0000000000000000 [ 44.331905][ T372] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 44.339830][ T372] R13: 000000000000000b R14: 00007fe8053bcf80 R15: 00007ffcb6553c88 [ 44.347840][ T372] [ 44.357920][ T374] FAULT_INJECTION: forcing a failure. [ 44.357920][ T374] name failslab, interval 1, probability 0, space 0, times 0 [ 44.370530][ T374] CPU: 0 PID: 374 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 44.380778][ T374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 44.391202][ T374] Call Trace: [ 44.394588][ T374] [ 44.397668][ T374] dump_stack_lvl+0x151/0x1b7 [ 44.402130][ T374] ? io_uring_drop_tctx_refs+0x190/0x190 [ 44.407796][ T374] dump_stack+0x15/0x17 [ 44.411790][ T374] should_fail+0x3c6/0x510 [ 44.416050][ T374] __should_failslab+0xa4/0xe0 [ 44.420660][ T374] ? anon_vma_clone+0x9a/0x500 [ 44.425242][ T374] should_failslab+0x9/0x20 [ 44.429590][ T374] slab_pre_alloc_hook+0x37/0xd0 [ 44.434453][ T374] ? anon_vma_clone+0x9a/0x500 [ 44.439124][ T374] kmem_cache_alloc+0x44/0x200 [ 44.443815][ T374] anon_vma_clone+0x9a/0x500 [ 44.448246][ T374] anon_vma_fork+0x91/0x4e0 [ 44.452594][ T374] ? anon_vma_name+0x43/0x70 [ 44.457357][ T374] ? vm_area_dup+0x17a/0x230 [ 44.462161][ T374] copy_mm+0xa3a/0x13e0 [ 44.466226][ T374] ? copy_signal+0x610/0x610 [ 44.470749][ T374] ? __init_rwsem+0xd6/0x1c0 [ 44.475252][ T374] ? copy_signal+0x4e3/0x610 [ 44.479851][ T374] copy_process+0x1149/0x3290 [ 44.484359][ T374] ? proc_fail_nth_write+0x20b/0x290 [ 44.489588][ T374] ? fsnotify_perm+0x6a/0x5d0 [ 44.494105][ T374] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 44.499143][ T374] ? vfs_write+0x9ec/0x1110 [ 44.503474][ T374] kernel_clone+0x21e/0x9e0 [ 44.508083][ T374] ? file_end_write+0x1c0/0x1c0 [ 44.512875][ T374] ? create_io_thread+0x1e0/0x1e0 [ 44.517734][ T374] ? mutex_unlock+0xb2/0x260 [ 44.522164][ T374] ? __mutex_lock_slowpath+0x10/0x10 [ 44.527281][ T374] __x64_sys_clone+0x23f/0x290 [ 44.531884][ T374] ? __do_sys_vfork+0x130/0x130 [ 44.536686][ T374] ? ksys_write+0x260/0x2c0 [ 44.541448][ T374] ? debug_smp_processor_id+0x17/0x20 [ 44.546844][ T374] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 44.552736][ T374] ? exit_to_user_mode_prepare+0x39/0xa0 [ 44.558210][ T374] do_syscall_64+0x3d/0xb0 [ 44.562720][ T374] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.569078][ T374] RIP: 0033:0x7fe80528eda9 [ 44.573336][ T374] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.593642][ T374] RSP: 002b:00007fe804e10078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 44.601969][ T374] RAX: ffffffffffffffda RBX: 00007fe8053bcf80 RCX: 00007fe80528eda9 [ 44.609965][ T374] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 44.618395][ T374] RBP: 00007fe804e10120 R08: 0000000000000000 R09: 0000000000000000 [ 44.626199][ T374] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 44.634007][ T374] R13: 000000000000000b R14: 00007fe8053bcf80 R15: 00007ffcb6553c88 [ 44.641839][ T374] [ 44.662164][ T378] FAULT_INJECTION: forcing a failure. [ 44.662164][ T378] name failslab, interval 1, probability 0, space 0, times 0 [ 44.675226][ T378] CPU: 0 PID: 378 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 44.685370][ T378] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 44.695458][ T378] Call Trace: [ 44.698607][ T378] [ 44.701448][ T378] dump_stack_lvl+0x151/0x1b7 [ 44.706138][ T378] ? io_uring_drop_tctx_refs+0x190/0x190 [ 44.711612][ T378] dump_stack+0x15/0x17 [ 44.715974][ T378] should_fail+0x3c6/0x510 [ 44.720498][ T378] __should_failslab+0xa4/0xe0 [ 44.725240][ T378] ? anon_vma_fork+0x1df/0x4e0 [ 44.729922][ T378] should_failslab+0x9/0x20 [ 44.734697][ T378] slab_pre_alloc_hook+0x37/0xd0 [ 44.739480][ T378] ? anon_vma_fork+0x1df/0x4e0 [ 44.744072][ T378] kmem_cache_alloc+0x44/0x200 [ 44.748771][ T378] anon_vma_fork+0x1df/0x4e0 [ 44.753178][ T378] copy_mm+0xa3a/0x13e0 [ 44.757258][ T378] ? copy_signal+0x610/0x610 [ 44.761689][ T378] ? __init_rwsem+0xd6/0x1c0 [ 44.766120][ T378] ? copy_signal+0x4e3/0x610 [ 44.770534][ T378] copy_process+0x1149/0x3290 [ 44.775596][ T378] ? proc_fail_nth_write+0x20b/0x290 [ 44.780714][ T378] ? fsnotify_perm+0x6a/0x5d0 [ 44.785482][ T378] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 44.790837][ T378] ? vfs_write+0x9ec/0x1110 [ 44.795242][ T378] kernel_clone+0x21e/0x9e0 [ 44.799696][ T378] ? file_end_write+0x1c0/0x1c0 [ 44.804356][ T378] ? create_io_thread+0x1e0/0x1e0 [ 44.809443][ T378] ? mutex_unlock+0xb2/0x260 [ 44.813937][ T378] ? __mutex_lock_slowpath+0x10/0x10 [ 44.819318][ T378] __x64_sys_clone+0x23f/0x290 [ 44.824084][ T378] ? __do_sys_vfork+0x130/0x130 [ 44.828768][ T378] ? ksys_write+0x260/0x2c0 [ 44.833108][ T378] ? debug_smp_processor_id+0x17/0x20 [ 44.838321][ T378] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 44.844222][ T378] ? exit_to_user_mode_prepare+0x39/0xa0 [ 44.849685][ T378] do_syscall_64+0x3d/0xb0 [ 44.854060][ T378] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 44.860038][ T378] RIP: 0033:0x7fe80528eda9 [ 44.864307][ T378] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.884254][ T378] RSP: 002b:00007fe804e10078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 44.892585][ T378] RAX: ffffffffffffffda RBX: 00007fe8053bcf80 RCX: 00007fe80528eda9 [ 44.900395][ T378] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 44.908303][ T378] RBP: 00007fe804e10120 R08: 0000000000000000 R09: 0000000000000000 [ 44.916159][ T378] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 44.924279][ T378] R13: 000000000000000b R14: 00007fe8053bcf80 R15: 00007ffcb6553c88 [ 44.932186][ T378] [ 44.941660][ T380] FAULT_INJECTION: forcing a failure. [ 44.941660][ T380] name failslab, interval 1, probability 0, space 0, times 0 [ 44.954448][ T380] CPU: 0 PID: 380 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 44.964606][ T380] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 44.974494][ T380] Call Trace: [ 44.977645][ T380] [ 44.980484][ T380] dump_stack_lvl+0x151/0x1b7 [ 44.985000][ T380] ? io_uring_drop_tctx_refs+0x190/0x190 [ 44.990465][ T380] dump_stack+0x15/0x17 [ 44.994455][ T380] should_fail+0x3c6/0x510 [ 44.998707][ T380] __should_failslab+0xa4/0xe0 [ 45.003421][ T380] ? anon_vma_fork+0xf7/0x4e0 [ 45.007920][ T380] should_failslab+0x9/0x20 [ 45.012280][ T380] slab_pre_alloc_hook+0x37/0xd0 [ 45.017234][ T380] ? anon_vma_fork+0xf7/0x4e0 [ 45.021739][ T380] kmem_cache_alloc+0x44/0x200 [ 45.026608][ T380] anon_vma_fork+0xf7/0x4e0 [ 45.031130][ T380] ? anon_vma_name+0x43/0x70 [ 45.035760][ T380] ? vm_area_dup+0x17a/0x230 [ 45.040317][ T380] copy_mm+0xa3a/0x13e0 [ 45.044506][ T380] ? copy_signal+0x610/0x610 [ 45.048907][ T380] ? __init_rwsem+0xd6/0x1c0 [ 45.053428][ T380] ? copy_signal+0x4e3/0x610 [ 45.057944][ T380] copy_process+0x1149/0x3290 [ 45.062885][ T380] ? proc_fail_nth_write+0x20b/0x290 [ 45.068007][ T380] ? fsnotify_perm+0x6a/0x5d0 [ 45.072608][ T380] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 45.077816][ T380] ? vfs_write+0x9ec/0x1110 [ 45.082377][ T380] kernel_clone+0x21e/0x9e0 [ 45.086783][ T380] ? file_end_write+0x1c0/0x1c0 [ 45.091458][ T380] ? create_io_thread+0x1e0/0x1e0 [ 45.096414][ T380] ? mutex_unlock+0xb2/0x260 [ 45.100836][ T380] ? __mutex_lock_slowpath+0x10/0x10 [ 45.106157][ T380] __x64_sys_clone+0x23f/0x290 [ 45.110756][ T380] ? __do_sys_vfork+0x130/0x130 [ 45.115481][ T380] ? ksys_write+0x260/0x2c0 [ 45.120259][ T380] ? debug_smp_processor_id+0x17/0x20 [ 45.125795][ T380] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 45.131714][ T380] ? exit_to_user_mode_prepare+0x39/0xa0 [ 45.137271][ T380] do_syscall_64+0x3d/0xb0 [ 45.141539][ T380] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.147255][ T380] RIP: 0033:0x7fe80528eda9 [ 45.151610][ T380] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.171553][ T380] RSP: 002b:00007fe804e10078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 45.179885][ T380] RAX: ffffffffffffffda RBX: 00007fe8053bcf80 RCX: 00007fe80528eda9 [ 45.188066][ T380] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 45.195854][ T380] RBP: 00007fe804e10120 R08: 0000000000000000 R09: 0000000000000000 [ 45.203840][ T380] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 45.211765][ T380] R13: 000000000000000b R14: 00007fe8053bcf80 R15: 00007ffcb6553c88 [ 45.219755][ T380] [ 45.230077][ T383] FAULT_INJECTION: forcing a failure. [ 45.230077][ T383] name failslab, interval 1, probability 0, space 0, times 0 [ 45.242771][ T383] CPU: 0 PID: 383 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 45.253286][ T383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 45.263725][ T383] Call Trace: [ 45.266850][ T383] [ 45.269716][ T383] dump_stack_lvl+0x151/0x1b7 [ 45.274236][ T383] ? io_uring_drop_tctx_refs+0x190/0x190 [ 45.279925][ T383] dump_stack+0x15/0x17 [ 45.284078][ T383] should_fail+0x3c6/0x510 [ 45.288328][ T383] __should_failslab+0xa4/0xe0 [ 45.292921][ T383] ? anon_vma_fork+0xf7/0x4e0 [ 45.297532][ T383] should_failslab+0x9/0x20 [ 45.301965][ T383] slab_pre_alloc_hook+0x37/0xd0 [ 45.306980][ T383] ? anon_vma_fork+0xf7/0x4e0 [ 45.311493][ T383] kmem_cache_alloc+0x44/0x200 [ 45.316810][ T383] anon_vma_fork+0xf7/0x4e0 [ 45.321155][ T383] ? anon_vma_name+0x4c/0x70 [ 45.326042][ T383] ? vm_area_dup+0x17a/0x230 [ 45.330454][ T383] copy_mm+0xa3a/0x13e0 [ 45.334650][ T383] ? copy_signal+0x610/0x610 [ 45.339186][ T383] ? __init_rwsem+0xd6/0x1c0 [ 45.343588][ T383] ? copy_signal+0x4e3/0x610 [ 45.348095][ T383] copy_process+0x1149/0x3290 [ 45.352776][ T383] ? proc_fail_nth_write+0x20b/0x290 [ 45.357901][ T383] ? fsnotify_perm+0x6a/0x5d0 [ 45.362420][ T383] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 45.367451][ T383] ? vfs_write+0x9ec/0x1110 [ 45.371959][ T383] kernel_clone+0x21e/0x9e0 [ 45.376301][ T383] ? file_end_write+0x1c0/0x1c0 [ 45.381068][ T383] ? create_io_thread+0x1e0/0x1e0 [ 45.385936][ T383] ? mutex_unlock+0xb2/0x260 [ 45.390363][ T383] ? __mutex_lock_slowpath+0x10/0x10 [ 45.395487][ T383] __x64_sys_clone+0x23f/0x290 [ 45.400162][ T383] ? __do_sys_vfork+0x130/0x130 [ 45.404967][ T383] ? ksys_write+0x260/0x2c0 [ 45.409543][ T383] ? debug_smp_processor_id+0x17/0x20 [ 45.414936][ T383] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 45.421056][ T383] ? exit_to_user_mode_prepare+0x39/0xa0 [ 45.426823][ T383] do_syscall_64+0x3d/0xb0 [ 45.431212][ T383] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.436944][ T383] RIP: 0033:0x7fe80528eda9 [ 45.441362][ T383] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.461162][ T383] RSP: 002b:00007fe804e10078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 45.469907][ T383] RAX: ffffffffffffffda RBX: 00007fe8053bcf80 RCX: 00007fe80528eda9 [ 45.477723][ T383] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 45.485706][ T383] RBP: 00007fe804e10120 R08: 0000000000000000 R09: 0000000000000000 [ 45.493587][ T383] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 45.501588][ T383] R13: 000000000000000b R14: 00007fe8053bcf80 R15: 00007ffcb6553c88 [ 45.509506][ T383] [ 45.521883][ T385] FAULT_INJECTION: forcing a failure. [ 45.521883][ T385] name failslab, interval 1, probability 0, space 0, times 0 [ 45.534932][ T385] CPU: 1 PID: 385 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 45.545404][ T385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 45.555299][ T385] Call Trace: [ 45.558422][ T385] [ 45.561286][ T385] dump_stack_lvl+0x151/0x1b7 [ 45.565799][ T385] ? io_uring_drop_tctx_refs+0x190/0x190 [ 45.571498][ T385] dump_stack+0x15/0x17 [ 45.575479][ T385] should_fail+0x3c6/0x510 [ 45.579825][ T385] __should_failslab+0xa4/0xe0 [ 45.584728][ T385] ? anon_vma_fork+0xf7/0x4e0 [ 45.589498][ T385] should_failslab+0x9/0x20 [ 45.594010][ T385] slab_pre_alloc_hook+0x37/0xd0 [ 45.598792][ T385] ? anon_vma_fork+0xf7/0x4e0 [ 45.603307][ T385] kmem_cache_alloc+0x44/0x200 [ 45.608347][ T385] anon_vma_fork+0xf7/0x4e0 [ 45.612688][ T385] ? anon_vma_name+0x43/0x70 [ 45.617230][ T385] ? vm_area_dup+0x17a/0x230 [ 45.621754][ T385] copy_mm+0xa3a/0x13e0 [ 45.625934][ T385] ? copy_signal+0x610/0x610 [ 45.630562][ T385] ? __init_rwsem+0xd6/0x1c0 [ 45.635057][ T385] ? copy_signal+0x4e3/0x610 [ 45.639831][ T385] copy_process+0x1149/0x3290 [ 45.644459][ T385] ? proc_fail_nth_write+0x20b/0x290 [ 45.649572][ T385] ? fsnotify_perm+0x6a/0x5d0 [ 45.654395][ T385] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 45.659546][ T385] ? vfs_write+0x9ec/0x1110 [ 45.664093][ T385] kernel_clone+0x21e/0x9e0 [ 45.668676][ T385] ? file_end_write+0x1c0/0x1c0 [ 45.673564][ T385] ? create_io_thread+0x1e0/0x1e0 [ 45.678964][ T385] ? mutex_unlock+0xb2/0x260 [ 45.683751][ T385] ? __mutex_lock_slowpath+0x10/0x10 [ 45.690685][ T385] __x64_sys_clone+0x23f/0x290 [ 45.695295][ T385] ? __do_sys_vfork+0x130/0x130 [ 45.699956][ T385] ? ksys_write+0x260/0x2c0 [ 45.704308][ T385] ? debug_smp_processor_id+0x17/0x20 [ 45.709879][ T385] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 45.716220][ T385] ? exit_to_user_mode_prepare+0x39/0xa0 [ 45.721668][ T385] do_syscall_64+0x3d/0xb0 [ 45.725922][ T385] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 45.731733][ T385] RIP: 0033:0x7fe80528eda9 [ 45.736116][ T385] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.756160][ T385] RSP: 002b:00007fe804e10078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 45.764772][ T385] RAX: ffffffffffffffda RBX: 00007fe8053bcf80 RCX: 00007fe80528eda9 [ 45.772566][ T385] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 45.780474][ T385] RBP: 00007fe804e10120 R08: 0000000000000000 R09: 0000000000000000 [ 45.788364][ T385] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 45.796453][ T385] R13: 000000000000000b R14: 00007fe8053bcf80 R15: 00007ffcb6553c88 [ 45.804529][ T385] [ 45.808076][ T385] ================================================================== [ 45.816039][ T385] BUG: KASAN: double-free or invalid-free in kfree+0xc8/0x220 [ 45.823983][ T385] [ 45.826111][ T385] CPU: 1 PID: 385 Comm: syz-executor.0 Not tainted 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 45.838277][ T385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 45.849068][ T385] Call Trace: [ 45.852175][ T385] [ 45.855041][ T385] dump_stack_lvl+0x151/0x1b7 [ 45.860273][ T385] ? io_uring_drop_tctx_refs+0x190/0x190 [ 45.866047][ T385] ? __wake_up_klogd+0xd5/0x110 [ 45.870887][ T385] ? panic+0x751/0x751 [ 45.874977][ T385] ? kfree+0xc8/0x220 [ 45.879237][ T385] print_address_description+0x87/0x3b0 [ 45.884696][ T385] ? kfree+0xc8/0x220 [ 45.888516][ T385] ? kfree+0xc8/0x220 [ 45.892536][ T385] kasan_report_invalid_free+0x6b/0xa0 [ 45.897907][ T385] ____kasan_slab_free+0x13e/0x160 [ 45.902855][ T385] __kasan_slab_free+0x11/0x20 [ 45.907540][ T385] slab_free_freelist_hook+0xbd/0x190 [ 45.912860][ T385] ? anon_vma_name_free+0x15/0x20 [ 45.918229][ T385] kfree+0xc8/0x220 [ 45.921863][ T385] anon_vma_name_free+0x15/0x20 [ 45.926547][ T385] vm_area_free_no_check+0xa6/0x130 [ 45.931667][ T385] copy_mm+0xefb/0x13e0 [ 45.935662][ T385] ? copy_signal+0x610/0x610 [ 45.940173][ T385] ? __init_rwsem+0xd6/0x1c0 [ 45.944624][ T385] ? copy_signal+0x4e3/0x610 [ 45.949209][ T385] copy_process+0x1149/0x3290 [ 45.953722][ T385] ? proc_fail_nth_write+0x20b/0x290 [ 45.958835][ T385] ? fsnotify_perm+0x6a/0x5d0 [ 45.963346][ T385] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 45.968290][ T385] ? vfs_write+0x9ec/0x1110 [ 45.972632][ T385] kernel_clone+0x21e/0x9e0 [ 45.976974][ T385] ? file_end_write+0x1c0/0x1c0 [ 45.981659][ T385] ? create_io_thread+0x1e0/0x1e0 [ 45.986523][ T385] ? mutex_unlock+0xb2/0x260 [ 45.990946][ T385] ? __mutex_lock_slowpath+0x10/0x10 [ 45.996182][ T385] __x64_sys_clone+0x23f/0x290 [ 46.000876][ T385] ? __do_sys_vfork+0x130/0x130 [ 46.005554][ T385] ? ksys_write+0x260/0x2c0 [ 46.009896][ T385] ? debug_smp_processor_id+0x17/0x20 [ 46.015211][ T385] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 46.021216][ T385] ? exit_to_user_mode_prepare+0x39/0xa0 [ 46.027167][ T385] do_syscall_64+0x3d/0xb0 [ 46.031574][ T385] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.037232][ T385] RIP: 0033:0x7fe80528eda9 [ 46.041499][ T385] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.061245][ T385] RSP: 002b:00007fe804e10078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 46.069438][ T385] RAX: ffffffffffffffda RBX: 00007fe8053bcf80 RCX: 00007fe80528eda9 [ 46.077435][ T385] RDX: 0000000000000000 RSI: ffffffffffffffa0 RDI: 0000000073041480 [ 46.085931][ T385] RBP: 00007fe804e10120 R08: 0000000000000000 R09: 0000000000000000 [ 46.093825][ T385] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 46.101812][ T385] R13: 000000000000000b R14: 00007fe8053bcf80 R15: 00007ffcb6553c88 [ 46.109630][ T385] [ 46.112489][ T385] [ 46.114656][ T385] Allocated by task 344: [ 46.118738][ T385] __kasan_slab_alloc+0xb1/0xe0 [ 46.124549][ T385] slab_post_alloc_hook+0x53/0x2c0 [ 46.129496][ T385] kmem_cache_alloc+0xf5/0x200 [ 46.134232][ T385] vm_area_dup+0x26/0x230 [ 46.138386][ T385] copy_mm+0x9a1/0x13e0 [ 46.142361][ T385] copy_process+0x1149/0x3290 [ 46.147031][ T385] kernel_clone+0x21e/0x9e0 [ 46.151371][ T385] __x64_sys_clone+0x23f/0x290 [ 46.156069][ T385] do_syscall_64+0x3d/0xb0 [ 46.160396][ T385] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.166135][ T385] [ 46.168307][ T385] Last potentially related work creation: [ 46.173872][ T385] kasan_save_stack+0x3b/0x60 [ 46.178360][ T385] __kasan_record_aux_stack+0xd3/0xf0 [ 46.183573][ T385] kasan_record_aux_stack_noalloc+0xb/0x10 [ 46.189210][ T385] call_rcu+0x133/0x12a0 [ 46.193298][ T385] vm_area_free_no_check+0xff/0x130 [ 46.198324][ T385] vm_area_free+0x53/0x60 [ 46.202498][ T385] exit_mmap+0x50d/0x6f0 [ 46.206567][ T385] __mmput+0x95/0x310 [ 46.210388][ T385] mmput+0x5b/0x170 [ 46.214135][ T385] do_exit+0xb9c/0x2ca0 [ 46.218141][ T385] do_group_exit+0x141/0x310 [ 46.222857][ T385] __x64_sys_exit_group+0x3f/0x40 [ 46.227773][ T385] do_syscall_64+0x3d/0xb0 [ 46.232126][ T385] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.237831][ T385] [ 46.240007][ T385] The buggy address belongs to the object at ffff88810c88d378 [ 46.240007][ T385] which belongs to the cache vm_area_struct of size 232 [ 46.254672][ T385] The buggy address is located 88 bytes inside of [ 46.254672][ T385] 232-byte region [ffff88810c88d378, ffff88810c88d460) [ 46.268213][ T385] The buggy address belongs to the page: [ 46.273888][ T385] page:ffffea0004322340 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10c88d [ 46.284932][ T385] flags: 0x4000000000000200(slab|zone=1) [ 46.291280][ T385] raw: 4000000000000200 ffffea000431db00 0000000200000002 ffff8881001bdb00 [ 46.300457][ T385] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 46.309125][ T385] page dumped because: kasan: bad access detected [ 46.315370][ T385] page_owner tracks the page as allocated [ 46.320940][ T385] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 80, ts 3892252490, free_ts 3891221569 [ 46.336589][ T385] post_alloc_hook+0x1a3/0x1b0 [ 46.341470][ T385] prep_new_page+0x1b/0x110 [ 46.345907][ T385] get_page_from_freelist+0x3550/0x35d0 [ 46.351478][ T385] __alloc_pages+0x27e/0x8f0 [ 46.356187][ T385] new_slab+0x9a/0x4e0 [ 46.360068][ T385] ___slab_alloc+0x39e/0x830 [ 46.364708][ T385] __slab_alloc+0x4a/0x90 [ 46.369047][ T385] kmem_cache_alloc+0x134/0x200 [ 46.373733][ T385] vm_area_dup+0x26/0x230 [ 46.378340][ T385] __split_vma+0xc0/0x480 [ 46.382527][ T385] __do_munmap+0x3a5/0x1a90 [ 46.386847][ T385] mmap_region+0x9cc/0x1b60 [ 46.391355][ T385] do_mmap+0x776/0xe50 [ 46.395268][ T385] vm_mmap_pgoff+0x1dd/0x450 [ 46.399778][ T385] ksys_mmap_pgoff+0x15d/0x1e0 [ 46.404545][ T385] __x64_sys_mmap+0x103/0x120 [ 46.409314][ T385] page last free stack trace: [ 46.413777][ T385] free_unref_page_prepare+0x7c8/0x7d0 [ 46.419239][ T385] free_unref_page_list+0x14b/0xa60 [ 46.424277][ T385] release_pages+0x1310/0x1370 [ 46.428871][ T385] free_pages_and_swap_cache+0x8a/0xa0 [ 46.434355][ T385] tlb_finish_mmu+0x177/0x320 [ 46.438969][ T385] exit_mmap+0x3ef/0x6f0 [ 46.443045][ T385] __mmput+0x95/0x310 [ 46.446952][ T385] mmput+0x5b/0x170 [ 46.450589][ T385] exec_mmap+0x46b/0x510 [ 46.454768][ T385] begin_new_exec+0xbbc/0x1ed0 [ 46.459443][ T385] load_elf_binary+0x945/0x2750 [ 46.464216][ T385] bprm_execve+0x7ae/0x14a0 [ 46.468561][ T385] do_execveat_common+0x565/0x710 [ 46.473414][ T385] __x64_sys_execve+0x92/0xb0 [ 46.477930][ T385] do_syscall_64+0x3d/0xb0 [ 46.482284][ T385] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.488435][ T385] [ 46.490686][ T385] Memory state around the buggy address: [ 46.496164][ T385] ffff88810c88d280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.504055][ T385] ffff88810c88d300: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 [ 46.512022][ T385] >ffff88810c88d380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.519851][ T385] ^ [ 46.526836][ T385] ffff88810c88d400: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 46.534814][ T385] ffff88810c88d480: fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb fb [ 46.542978][ T385] ================================================================== [ 46.551042][ T385] Disabling lock debugging due to kernel taint [ 46.570559][ T345] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 46.582218][ T345] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 46.590550][ T345] CPU: 1 PID: 345 Comm: syz-executor.0 Tainted: G B 5.15.148-syzkaller-1069047-g993bed180178 #0 [ 46.602320][ T345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 46.612674][ T345] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 46.618685][ T345] Code: 00 74 08 4c 89 ef e8 5e 0b 2b ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 30 0b 2b ff 48 89 d8 48 8b 1b 4c [ 46.639178][ T345] RSP: 0018:ffffc90000ae78f8 EFLAGS: 00010202 [ 46.645073][ T345] RAX: 0000000000000000 RBX: 0000000000000008 RCX: dffffc0000000000 [ 46.652887][ T345] RDX: ffffffff81a4f280 RSI: ffff88810c1db208 RDI: ffff88811f06a4f8 [ 46.661138][ T345] RBP: ffffc90000ae7960 R08: dffffc0000000000 R09: ffff88811f06a500 [ 46.669030][ T345] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 46.677021][ T345] R13: ffff88810c88d3d0 R14: 0000000000000001 R15: ffff88811f06a4f8 [ 46.684929][ T345] FS: 0000555555b88480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 46.693976][ T345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.700968][ T345] CR2: 00007fe805ee66c6 CR3: 000000011f9e7000 CR4: 00000000003506a0 [ 46.709138][ T345] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.717255][ T345] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.725076][ T345] Call Trace: [ 46.728225][ T345] [ 46.730970][ T345] ? __die_body+0x62/0xb0 [ 46.735133][ T345] ? die_addr+0x9f/0xd0 [ 46.739127][ T345] ? exc_general_protection+0x311/0x4b0 [ 46.744717][ T345] ? asm_exc_general_protection+0x27/0x30 [ 46.750628][ T345] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 46.756917][ T345] ? __rb_insert_augmented+0x91/0x610 [ 46.762237][ T345] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 46.768463][ T345] vma_interval_tree_insert_after+0x2be/0x2d0 [ 46.774374][ T345] copy_mm+0xba2/0x13e0 [ 46.778539][ T345] ? copy_signal+0x610/0x610 [ 46.783042][ T345] ? __init_rwsem+0xd6/0x1c0 [ 46.787468][ T345] ? copy_signal+0x4e3/0x610 [ 46.792026][ T345] copy_process+0x1149/0x3290 [ 46.796586][ T345] ? io_schedule+0x120/0x120 [ 46.801008][ T345] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 46.806563][ T345] kernel_clone+0x21e/0x9e0 [ 46.810990][ T345] ? kernel_read+0x1f0/0x1f0 [ 46.815422][ T345] ? kmem_cache_free+0x116/0x2e0 [ 46.820295][ T345] ? create_io_thread+0x1e0/0x1e0 [ 46.825136][ T345] ? debug_smp_processor_id+0x17/0x20 [ 46.830431][ T345] __x64_sys_clone+0x23f/0x290 [ 46.835054][ T345] ? __do_sys_vfork+0x130/0x130 [ 46.839900][ T345] do_syscall_64+0x3d/0xb0 [ 46.844230][ T345] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.850389][ T345] RIP: 0033:0x7fe80528bdd3 [ 46.854726][ T345] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 46.874731][ T345] RSP: 002b:00007ffcb6553e98 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 46.883183][ T345] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fe80528bdd3 [ 46.891076][ T345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 46.898972][ T345] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 46.906783][ T345] R10: 0000555555b88750 R11: 0000000000000246 R12: 0000000000000001 [ 46.914847][ T345] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 46.923079][ T345] [ 46.926179][ T345] Modules linked in: [ 46.930289][ T345] ---[ end trace b0b59bf1edf0e156 ]--- [ 46.935556][ T345] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 46.941414][ T345] Code: 00 74 08 4c 89 ef e8 5e 0b 2b ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 30 0b 2b ff 48 89 d8 48 8b 1b 4c [ 46.961693][ T345] RSP: 0018:ffffc90000ae78f8 EFLAGS: 00010202 [ 46.967520][ T345] RAX: 0000000000000000 RBX: 0000000000000008 RCX: dffffc0000000000 [ 46.975370][ T345] RDX: ffffffff81a4f280 RSI: ffff88810c1db208 RDI: ffff88811f06a4f8 [ 46.983254][ T345] RBP: ffffc90000ae7960 R08: dffffc0000000000 R09: ffff88811f06a500 [ 46.991180][ T345] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 46.999141][ T345] R13: ffff88810c88d3d0 R14: 0000000000000001 R15: ffff88811f06a4f8 [ 47.007403][ T345] FS: 0000555555b88480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 47.017355][ T345] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.023898][ T345] CR2: 00007fe805ee66c6 CR3: 000000011f9e7000 CR4: 00000000003506a0 [ 47.032584][ T345] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.040427][ T345] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.048349][ T345] Kernel panic - not syncing: Fatal exception [ 47.054828][ T345] Kernel Offset: disabled [ 47.060379][ T345] Rebooting in 86400 seconds..