DUID 00:04:dc:6c:a8:75:19:b8:f7:30:df:f1:e8:1e:24:9d:66:1e forked to background, child pid 3175 [ 26.791305][ T3176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 26.802224][ T3176] eql: remember to turn off Van-Jacobson compression on your slave devices Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.158' (ECDSA) to the list of known hosts. syzkaller login: [ 52.066598][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 52.081003][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.091773][ T1781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 52.101773][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 executing program [ 52.110780][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 52.119199][ T3261] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 52.132771][ T3599] FAULT_INJECTION: forcing a failure. [ 52.132771][ T3599] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 52.146433][ T3599] CPU: 1 PID: 3599 Comm: syz-executor168 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 52.156931][ T3599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.166976][ T3599] Call Trace: [ 52.170244][ T3599] [ 52.173162][ T3599] dump_stack_lvl+0xcd/0x134 [ 52.177786][ T3599] should_fail.cold+0x5/0xa [ 52.182277][ T3599] prepare_alloc_pages+0x17b/0x570 [ 52.187388][ T3599] __alloc_pages+0x12f/0x500 [ 52.191988][ T3599] ? __alloc_pages_slowpath.constprop.0+0x20d0/0x20d0 [ 52.198753][ T3599] alloc_pages+0x1aa/0x310 [ 52.203161][ T3599] watch_queue_set_size+0x2da/0x630 [ 52.208359][ T3599] pipe_ioctl+0xac/0x2b0 [ 52.212593][ T3599] ? pipe_fasync+0x230/0x230 [ 52.217174][ T3599] __x64_sys_ioctl+0x193/0x200 [ 52.221937][ T3599] do_syscall_64+0x35/0xb0 [ 52.226362][ T3599] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 52.232247][ T3599] RIP: 0033:0x7ff3284b2d59 [ 52.236650][ T3599] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.256407][ T3599] RSP: 002b:00007ffc794ece38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.264873][ T3599] RAX: ffffffffffffffda RBX: 0000000000000031 RCX: 00007ff3284b2d59 [ 52.272830][ T3599] RDX: 0000000000000029 RSI: 0000000000005760 RDI: 0000000000000003 [ 52.280788][ T3599] RBP: 00007ffc794ece40 R08: 0000000000000001 R09: 00007ffc794e0035 [ 52.288853][ T3599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.296808][ T3599] R13: 00007ffc794ecea0 R14: 000000000000000d R15: 00007ff328525490 [ 52.304784][ T3599] [ 52.308543][ T3599] ================================================================== [ 52.316887][ T3599] BUG: KASAN: null-ptr-deref in __free_pages+0x1f/0x1b0 [ 52.323838][ T3599] Read of size 4 at addr 0000000000000034 by task syz-executor168/3599 [ 52.332083][ T3599] [ 52.334406][ T3599] CPU: 1 PID: 3599 Comm: syz-executor168 Not tainted 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 52.344907][ T3599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.354968][ T3599] Call Trace: [ 52.358248][ T3599] [ 52.361176][ T3599] dump_stack_lvl+0xcd/0x134 [ 52.365773][ T3599] kasan_report.cold+0x66/0xdf [ 52.370548][ T3599] ? __free_pages+0x1f/0x1b0 [ 52.375141][ T3599] kasan_check_range+0x13d/0x180 [ 52.380086][ T3599] __free_pages+0x1f/0x1b0 [ 52.384506][ T3599] watch_queue_set_size+0x499/0x630 [ 52.389800][ T3599] pipe_ioctl+0xac/0x2b0 [ 52.394087][ T3599] ? pipe_fasync+0x230/0x230 [ 52.398681][ T3599] __x64_sys_ioctl+0x193/0x200 [ 52.403453][ T3599] do_syscall_64+0x35/0xb0 [ 52.407906][ T3599] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 52.413813][ T3599] RIP: 0033:0x7ff3284b2d59 [ 52.418229][ T3599] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.437831][ T3599] RSP: 002b:00007ffc794ece38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.446241][ T3599] RAX: ffffffffffffffda RBX: 0000000000000031 RCX: 00007ff3284b2d59 [ 52.454208][ T3599] RDX: 0000000000000029 RSI: 0000000000005760 RDI: 0000000000000003 [ 52.462181][ T3599] RBP: 00007ffc794ece40 R08: 0000000000000001 R09: 00007ffc794e0035 [ 52.470156][ T3599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.478133][ T3599] R13: 00007ffc794ecea0 R14: 000000000000000d R15: 00007ff328525490 [ 52.486264][ T3599] [ 52.489288][ T3599] ================================================================== [ 52.497343][ T3599] Disabling lock debugging due to kernel taint [ 52.504100][ T3599] Kernel panic - not syncing: panic_on_warn set ... [ 52.510712][ T3599] CPU: 0 PID: 3599 Comm: syz-executor168 Tainted: G B 5.17.0-rc8-syzkaller-00003-g56e337f2cf13 #0 [ 52.522593][ T3599] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 52.532670][ T3599] Call Trace: [ 52.535936][ T3599] [ 52.538858][ T3599] dump_stack_lvl+0xcd/0x134 [ 52.543449][ T3599] panic+0x2b0/0x6dd [ 52.547420][ T3599] ? __warn_printk+0xf3/0xf3 [ 52.552003][ T3599] ? preempt_schedule_common+0x59/0xc0 [ 52.557460][ T3599] ? __free_pages+0x1f/0x1b0 [ 52.562041][ T3599] ? preempt_schedule_thunk+0x16/0x18 [ 52.567408][ T3599] ? trace_hardirqs_on+0x38/0x1c0 [ 52.572423][ T3599] ? trace_hardirqs_on+0x51/0x1c0 [ 52.577445][ T3599] ? __free_pages+0x1f/0x1b0 [ 52.582029][ T3599] ? __free_pages+0x1f/0x1b0 [ 52.586610][ T3599] end_report.cold+0x63/0x6f [ 52.591197][ T3599] kasan_report.cold+0x71/0xdf [ 52.595962][ T3599] ? __free_pages+0x1f/0x1b0 [ 52.600544][ T3599] kasan_check_range+0x13d/0x180 [ 52.605476][ T3599] __free_pages+0x1f/0x1b0 [ 52.609884][ T3599] watch_queue_set_size+0x499/0x630 [ 52.615080][ T3599] pipe_ioctl+0xac/0x2b0 [ 52.619321][ T3599] ? pipe_fasync+0x230/0x230 [ 52.623903][ T3599] __x64_sys_ioctl+0x193/0x200 [ 52.628662][ T3599] do_syscall_64+0x35/0xb0 [ 52.633083][ T3599] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 52.638983][ T3599] RIP: 0033:0x7ff3284b2d59 [ 52.643388][ T3599] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 31 18 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 c0 ff ff ff f7 d8 64 89 01 48 [ 52.662993][ T3599] RSP: 002b:00007ffc794ece38 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 52.671398][ T3599] RAX: ffffffffffffffda RBX: 0000000000000031 RCX: 00007ff3284b2d59 [ 52.679360][ T3599] RDX: 0000000000000029 RSI: 0000000000005760 RDI: 0000000000000003 [ 52.687321][ T3599] RBP: 00007ffc794ece40 R08: 0000000000000001 R09: 00007ffc794e0035 [ 52.695282][ T3599] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 52.703243][ T3599] R13: 00007ffc794ecea0 R14: 000000000000000d R15: 00007ff328525490 [ 52.711209][ T3599] [ 52.714400][ T3599] Kernel Offset: disabled [ 52.718711][ T3599] Rebooting in 86400 seconds..