Warning: Permanently added '10.128.0.52' (ED25519) to the list of known hosts. 2024/11/29 01:57:28 ignoring optional flag "sandboxArg"="0" 2024/11/29 01:57:28 ignoring optional flag "type"="gce" 2024/11/29 01:57:28 parsed 1 programs 2024/11/29 01:57:28 executed programs: 0 [ 48.276359][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.283227][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.290693][ T366] device bridge_slave_0 entered promiscuous mode [ 48.299236][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.306143][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.313397][ T366] device bridge_slave_1 entered promiscuous mode [ 48.343736][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.350600][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.358206][ T363] device bridge_slave_0 entered promiscuous mode [ 48.378301][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.385171][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.392514][ T363] device bridge_slave_1 entered promiscuous mode [ 48.417054][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.423955][ T364] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.431089][ T364] device bridge_slave_0 entered promiscuous mode [ 48.452130][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.459473][ T364] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.466844][ T364] device bridge_slave_1 entered promiscuous mode [ 48.495698][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.502548][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.510064][ T365] device bridge_slave_0 entered promiscuous mode [ 48.532777][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.539733][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.546951][ T365] device bridge_slave_1 entered promiscuous mode [ 48.566412][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.573264][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.580616][ T362] device bridge_slave_0 entered promiscuous mode [ 48.600344][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.607234][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.614626][ T362] device bridge_slave_1 entered promiscuous mode [ 48.692002][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.699045][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.706320][ T356] device bridge_slave_0 entered promiscuous mode [ 48.713184][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.720185][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.727469][ T356] device bridge_slave_1 entered promiscuous mode [ 48.853550][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.860426][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.867632][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.874656][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.888707][ T364] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.895662][ T364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.902757][ T364] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.909662][ T364] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.921001][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.927872][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.934971][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.941739][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.991572][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.998445][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.005654][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.012415][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.025192][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.032222][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.039391][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.046337][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.094870][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.101969][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.109089][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.116629][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.124040][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.131410][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.139974][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.148257][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.155593][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.162633][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.169883][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.198931][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.206606][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.215859][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.241298][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.256297][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.264560][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.272379][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.280712][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.287583][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.295976][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.304042][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.310868][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.318320][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.325786][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.348484][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.356889][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.365066][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.371946][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.379294][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.387494][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.395538][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.402493][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.409739][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.417340][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.424966][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.433579][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.441632][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.448486][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.455679][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.463935][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.471950][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.478943][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.486412][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.494547][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.502395][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.510649][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.518704][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.526885][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.539049][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.552554][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.560908][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.569039][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.575925][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.584194][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.592473][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.600815][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.607759][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.631481][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.639770][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.647617][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.656011][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.664135][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.672388][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.697590][ T366] device veth0_vlan entered promiscuous mode [ 49.707493][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.715834][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.723433][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.731721][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.739372][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.746933][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.754587][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.762719][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.771148][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.778026][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.785350][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.793582][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.801745][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.810327][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.818562][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.825548][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.832971][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.841085][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.849145][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.857408][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.865194][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.873178][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.880734][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.896069][ T363] device veth0_vlan entered promiscuous mode [ 49.903950][ T364] device veth0_vlan entered promiscuous mode [ 49.910017][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.918185][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.926254][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.934471][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.953800][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.962128][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.970392][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.977879][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.990517][ T363] device veth1_macvtap entered promiscuous mode [ 50.001360][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.009701][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.018120][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.027571][ T366] device veth1_macvtap entered promiscuous mode [ 50.037732][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.046314][ T356] device veth0_vlan entered promiscuous mode [ 50.059011][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.067288][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.075807][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.084498][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.100473][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.112803][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.126925][ T365] device veth0_vlan entered promiscuous mode [ 50.139593][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 50.139609][ T30] audit: type=1400 audit(1732845450.468:91): avc: denied { mounton } for pid=363 comm="syz-executor.1" path="/dev/binderfs" dev="devtmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 50.141696][ T356] device veth1_macvtap entered promiscuous mode [ 50.175306][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.184041][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.191870][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.200263][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.208690][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.216941][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.225905][ T364] device veth1_macvtap entered promiscuous mode [ 50.242936][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.251616][ T389] FAULT_INJECTION: forcing a failure. [ 50.251616][ T389] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 50.254913][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.266235][ T389] CPU: 0 PID: 389 Comm: syz-executor.1 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 50.273055][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.282975][ T389] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 50.282999][ T389] Call Trace: [ 50.283006][ T389] [ 50.283013][ T389] dump_stack_lvl+0x151/0x1c0 [ 50.290435][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.299916][ T389] ? io_uring_drop_tctx_refs+0x190/0x190 [ 50.299949][ T389] dump_stack+0x15/0x20 [ 50.299970][ T389] should_fail+0x3c6/0x510 [ 50.331056][ T389] should_fail_alloc_page+0x5a/0x80 [ 50.336080][ T389] prepare_alloc_pages+0x15c/0x700 [ 50.341039][ T389] ? __alloc_pages_bulk+0xe40/0xe40 [ 50.346065][ T389] __alloc_pages+0x18c/0x8f0 [ 50.350489][ T389] ? prep_new_page+0x110/0x110 [ 50.355180][ T389] ? __alloc_pages+0x27e/0x8f0 [ 50.359776][ T389] ? __kasan_check_write+0x14/0x20 [ 50.364810][ T389] ? _raw_spin_lock+0xa4/0x1b0 [ 50.369418][ T389] __pmd_alloc+0xb1/0x550 [ 50.373580][ T389] ? __pud_alloc+0x260/0x260 [ 50.378003][ T389] ? __pud_alloc+0x213/0x260 [ 50.382515][ T389] ? do_handle_mm_fault+0x2400/0x2400 [ 50.387726][ T389] ? __stack_depot_save+0x34/0x470 [ 50.392668][ T389] ? anon_vma_clone+0x9a/0x500 [ 50.397282][ T389] copy_page_range+0x2b3d/0x2f90 [ 50.402061][ T389] ? __kasan_slab_alloc+0xb1/0xe0 [ 50.406921][ T389] ? slab_post_alloc_hook+0x53/0x2c0 [ 50.412029][ T389] ? copy_mm+0xa3a/0x13e0 [ 50.416204][ T389] ? copy_process+0x1149/0x3290 [ 50.420884][ T389] ? kernel_clone+0x21e/0x9e0 [ 50.425390][ T389] ? x64_sys_call+0x1b0/0x9a0 [ 50.429903][ T389] ? do_syscall_64+0x3b/0xb0 [ 50.434341][ T389] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.440384][ T389] ? pfn_valid+0x1e0/0x1e0 [ 50.444708][ T389] ? rwsem_write_trylock+0x153/0x340 [ 50.449914][ T389] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 50.456173][ T389] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 50.461728][ T389] ? __rb_insert_augmented+0x5de/0x610 [ 50.467016][ T389] copy_mm+0xc7e/0x13e0 [ 50.471007][ T389] ? copy_signal+0x610/0x610 [ 50.475431][ T389] ? __init_rwsem+0xfe/0x1d0 [ 50.479885][ T389] ? copy_signal+0x4e3/0x610 [ 50.484290][ T389] copy_process+0x1149/0x3290 [ 50.488972][ T389] ? __kasan_check_write+0x14/0x20 [ 50.494008][ T389] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 50.498960][ T389] ? vfs_write+0x94d/0x1110 [ 50.503468][ T389] kernel_clone+0x21e/0x9e0 [ 50.507897][ T389] ? __kasan_check_write+0x14/0x20 [ 50.512838][ T389] ? create_io_thread+0x1e0/0x1e0 [ 50.517699][ T389] __x64_sys_clone+0x23f/0x290 [ 50.522304][ T389] ? __do_sys_vfork+0x130/0x130 [ 50.526991][ T389] ? debug_smp_processor_id+0x17/0x20 [ 50.532189][ T389] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 50.538182][ T389] ? exit_to_user_mode_prepare+0x39/0xa0 [ 50.543647][ T389] x64_sys_call+0x1b0/0x9a0 [ 50.547989][ T389] do_syscall_64+0x3b/0xb0 [ 50.552261][ T389] ? clear_bhb_loop+0x35/0x90 [ 50.556754][ T389] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.562579][ T389] RIP: 0033:0x7f195fe91999 [ 50.566826][ T389] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.586280][ T389] RSP: 002b:00007f195fa14078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 50.594772][ T389] RAX: ffffffffffffffda RBX: 00007f195ffb0f80 RCX: 00007f195fe91999 [ 50.602582][ T389] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100000 [ 50.610403][ T389] RBP: 00007f195fa14120 R08: 0000000000000000 R09: 0000000000000000 [ 50.618301][ T389] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 50.626102][ T389] R13: 000000000000000b R14: 00007f195ffb0f80 R15: 00007fffea8a4b28 [ 50.633916][ T389] [ 50.641375][ T362] device veth0_vlan entered promiscuous mode [ 50.652040][ T365] device veth1_macvtap entered promiscuous mode [ 50.669922][ T391] FAULT_INJECTION: forcing a failure. [ 50.669922][ T391] name failslab, interval 1, probability 0, space 0, times 1 [ 50.683928][ T391] CPU: 0 PID: 391 Comm: syz-executor.1 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 50.690472][ T393] FAULT_INJECTION: forcing a failure. [ 50.690472][ T393] name failslab, interval 1, probability 0, space 0, times 1 [ 50.694084][ T391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 50.694098][ T391] Call Trace: [ 50.694104][ T391] [ 50.694111][ T391] dump_stack_lvl+0x151/0x1c0 [ 50.694139][ T391] ? io_uring_drop_tctx_refs+0x190/0x190 [ 50.732844][ T391] dump_stack+0x15/0x20 [ 50.736845][ T391] should_fail+0x3c6/0x510 [ 50.741086][ T391] __should_failslab+0xa4/0xe0 [ 50.745689][ T391] ? anon_vma_fork+0xf7/0x4e0 [ 50.750197][ T391] should_failslab+0x9/0x20 [ 50.754536][ T391] slab_pre_alloc_hook+0x37/0xd0 [ 50.759318][ T391] ? anon_vma_fork+0xf7/0x4e0 [ 50.763824][ T391] kmem_cache_alloc+0x44/0x200 [ 50.768437][ T391] anon_vma_fork+0xf7/0x4e0 [ 50.772766][ T391] ? anon_vma_name+0x43/0x70 [ 50.777192][ T391] ? vm_area_dup+0x17a/0x230 [ 50.781618][ T391] copy_mm+0xa3a/0x13e0 [ 50.785706][ T391] ? copy_signal+0x610/0x610 [ 50.790119][ T391] ? __init_rwsem+0xfe/0x1d0 [ 50.794556][ T391] ? copy_signal+0x4e3/0x610 [ 50.798978][ T391] copy_process+0x1149/0x3290 [ 50.803664][ T391] ? __kasan_check_write+0x14/0x20 [ 50.808619][ T391] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 50.813555][ T391] ? vfs_write+0x94d/0x1110 [ 50.817901][ T391] kernel_clone+0x21e/0x9e0 [ 50.822237][ T391] ? __kasan_check_write+0x14/0x20 [ 50.827325][ T391] ? create_io_thread+0x1e0/0x1e0 [ 50.832195][ T391] __x64_sys_clone+0x23f/0x290 [ 50.836786][ T391] ? __do_sys_vfork+0x130/0x130 [ 50.841471][ T391] ? debug_smp_processor_id+0x17/0x20 [ 50.846674][ T391] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 50.852578][ T391] ? exit_to_user_mode_prepare+0x39/0xa0 [ 50.858093][ T391] x64_sys_call+0x1b0/0x9a0 [ 50.862483][ T391] do_syscall_64+0x3b/0xb0 [ 50.866725][ T391] ? clear_bhb_loop+0x35/0x90 [ 50.871247][ T391] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.876968][ T391] RIP: 0033:0x7f195fe91999 [ 50.881221][ T391] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.900665][ T391] RSP: 002b:00007f195fa14078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 50.908919][ T391] RAX: ffffffffffffffda RBX: 00007f195ffb0f80 RCX: 00007f195fe91999 [ 50.916903][ T391] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100000 [ 50.924738][ T391] RBP: 00007f195fa14120 R08: 0000000000000000 R09: 0000000000000000 [ 50.932794][ T391] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 50.940598][ T391] R13: 000000000000000b R14: 00007f195ffb0f80 R15: 00007fffea8a4b28 [ 50.948436][ T391] [ 50.951365][ T393] CPU: 1 PID: 393 Comm: syz-executor.2 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 50.961518][ T393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 50.971419][ T393] Call Trace: [ 50.974534][ T393] [ 50.977314][ T393] dump_stack_lvl+0x151/0x1c0 [ 50.981921][ T393] ? io_uring_drop_tctx_refs+0x190/0x190 [ 50.987387][ T393] dump_stack+0x15/0x20 [ 50.991464][ T393] should_fail+0x3c6/0x510 [ 50.995727][ T393] __should_failslab+0xa4/0xe0 [ 51.000318][ T393] ? anon_vma_clone+0x9a/0x500 [ 51.004949][ T393] should_failslab+0x9/0x20 [ 51.009267][ T393] slab_pre_alloc_hook+0x37/0xd0 [ 51.014123][ T393] ? anon_vma_clone+0x9a/0x500 [ 51.018716][ T393] kmem_cache_alloc+0x44/0x200 [ 51.023403][ T393] anon_vma_clone+0x9a/0x500 [ 51.027928][ T393] anon_vma_fork+0x91/0x4e0 [ 51.032259][ T393] ? anon_vma_name+0x43/0x70 [ 51.036694][ T393] ? vm_area_dup+0x17a/0x230 [ 51.041120][ T393] copy_mm+0xa3a/0x13e0 [ 51.045105][ T393] ? copy_signal+0x610/0x610 [ 51.049536][ T393] ? __init_rwsem+0xfe/0x1d0 [ 51.053953][ T393] ? copy_signal+0x4e3/0x610 [ 51.058390][ T393] copy_process+0x1149/0x3290 [ 51.062899][ T393] ? __kasan_check_write+0x14/0x20 [ 51.067846][ T393] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 51.072798][ T393] ? vfs_write+0x94d/0x1110 [ 51.077130][ T393] kernel_clone+0x21e/0x9e0 [ 51.081479][ T393] ? __kasan_check_write+0x14/0x20 [ 51.086424][ T393] ? create_io_thread+0x1e0/0x1e0 [ 51.091450][ T393] __x64_sys_clone+0x23f/0x290 [ 51.096052][ T393] ? __do_sys_vfork+0x130/0x130 [ 51.100752][ T393] ? debug_smp_processor_id+0x17/0x20 [ 51.106033][ T393] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 51.112117][ T393] ? exit_to_user_mode_prepare+0x39/0xa0 [ 51.117585][ T393] x64_sys_call+0x1b0/0x9a0 [ 51.121916][ T393] do_syscall_64+0x3b/0xb0 [ 51.126463][ T393] ? clear_bhb_loop+0x35/0x90 [ 51.130982][ T393] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.136703][ T393] RIP: 0033:0x7fbbb630c999 [ 51.140955][ T393] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.160487][ T393] RSP: 002b:00007fbbb5e8f078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 51.168847][ T393] RAX: ffffffffffffffda RBX: 00007fbbb642bf80 RCX: 00007fbbb630c999 [ 51.176659][ T393] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100000 [ 51.184473][ T393] RBP: 00007fbbb5e8f120 R08: 0000000000000000 R09: 0000000000000000 [ 51.192280][ T393] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 51.200092][ T393] R13: 000000000000000b R14: 00007fbbb642bf80 R15: 00007ffe59b36748 [ 51.207910][ T393] [ 51.223288][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.237833][ T398] FAULT_INJECTION: forcing a failure. [ 51.237833][ T398] name failslab, interval 1, probability 0, space 0, times 0 [ 51.245073][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.258215][ T398] CPU: 1 PID: 398 Comm: syz-executor.1 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 51.259260][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.268374][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 51.268389][ T398] Call Trace: [ 51.268395][ T398] [ 51.268403][ T398] dump_stack_lvl+0x151/0x1c0 [ 51.276529][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.285995][ T398] ? io_uring_drop_tctx_refs+0x190/0x190 [ 51.286030][ T398] dump_stack+0x15/0x20 [ 51.289493][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.291898][ T398] should_fail+0x3c6/0x510 [ 51.291924][ T398] __should_failslab+0xa4/0xe0 [ 51.296927][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.304250][ T398] ? anon_vma_fork+0x1df/0x4e0 [ 51.304277][ T398] should_failslab+0x9/0x20 [ 51.304296][ T398] slab_pre_alloc_hook+0x37/0xd0 [ 51.304319][ T398] ? anon_vma_fork+0x1df/0x4e0 [ 51.304337][ T398] kmem_cache_alloc+0x44/0x200 [ 51.304359][ T398] anon_vma_fork+0x1df/0x4e0 [ 51.304377][ T398] copy_mm+0xa3a/0x13e0 [ 51.304396][ T398] ? copy_signal+0x610/0x610 [ 51.310651][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.314057][ T398] ? __init_rwsem+0xfe/0x1d0 [ 51.314085][ T398] ? copy_signal+0x4e3/0x610 [ 51.314102][ T398] copy_process+0x1149/0x3290 [ 51.328361][ T362] device veth1_macvtap entered promiscuous mode [ 51.330113][ T398] ? __kasan_check_write+0x14/0x20 [ 51.344565][ T400] FAULT_INJECTION: forcing a failure. [ 51.344565][ T400] name failslab, interval 1, probability 0, space 0, times 0 [ 51.347013][ T398] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 51.423858][ T398] ? vfs_write+0x94d/0x1110 [ 51.428200][ T398] kernel_clone+0x21e/0x9e0 [ 51.432538][ T398] ? __kasan_check_write+0x14/0x20 [ 51.437576][ T398] ? create_io_thread+0x1e0/0x1e0 [ 51.442433][ T398] __x64_sys_clone+0x23f/0x290 [ 51.447218][ T398] ? __do_sys_vfork+0x130/0x130 [ 51.451892][ T398] ? debug_smp_processor_id+0x17/0x20 [ 51.457096][ T398] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 51.463001][ T398] ? exit_to_user_mode_prepare+0x39/0xa0 [ 51.468640][ T398] x64_sys_call+0x1b0/0x9a0 [ 51.472978][ T398] do_syscall_64+0x3b/0xb0 [ 51.477272][ T398] ? clear_bhb_loop+0x35/0x90 [ 51.481754][ T398] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.487476][ T398] RIP: 0033:0x7f195fe91999 [ 51.491727][ T398] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.511260][ T398] RSP: 002b:00007f195fa14078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 51.519503][ T398] RAX: ffffffffffffffda RBX: 00007f195ffb0f80 RCX: 00007f195fe91999 [ 51.527516][ T398] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100000 [ 51.535717][ T398] RBP: 00007f195fa14120 R08: 0000000000000000 R09: 0000000000000000 [ 51.543487][ T398] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 51.551384][ T398] R13: 000000000000000b R14: 00007f195ffb0f80 R15: 00007fffea8a4b28 [ 51.559204][ T398] [ 51.562063][ T400] CPU: 0 PID: 400 Comm: syz-executor.2 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 51.572231][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 51.582114][ T400] Call Trace: [ 51.585323][ T400] [ 51.588109][ T400] dump_stack_lvl+0x151/0x1c0 [ 51.592612][ T400] ? io_uring_drop_tctx_refs+0x190/0x190 [ 51.598513][ T400] dump_stack+0x15/0x20 [ 51.602505][ T400] should_fail+0x3c6/0x510 [ 51.606764][ T400] __should_failslab+0xa4/0xe0 [ 51.611356][ T400] ? anon_vma_fork+0x1df/0x4e0 [ 51.615958][ T400] should_failslab+0x9/0x20 [ 51.620321][ T400] slab_pre_alloc_hook+0x37/0xd0 [ 51.625115][ T400] ? anon_vma_fork+0x1df/0x4e0 [ 51.629672][ T400] kmem_cache_alloc+0x44/0x200 [ 51.634275][ T400] anon_vma_fork+0x1df/0x4e0 [ 51.638798][ T400] copy_mm+0xa3a/0x13e0 [ 51.642810][ T400] ? copy_signal+0x610/0x610 [ 51.647212][ T400] ? __init_rwsem+0xfe/0x1d0 [ 51.651638][ T400] ? copy_signal+0x4e3/0x610 [ 51.656108][ T400] copy_process+0x1149/0x3290 [ 51.660581][ T400] ? __kasan_check_write+0x14/0x20 [ 51.665971][ T400] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 51.670900][ T400] ? vfs_write+0x94d/0x1110 [ 51.675252][ T400] kernel_clone+0x21e/0x9e0 [ 51.679579][ T400] ? __kasan_check_write+0x14/0x20 [ 51.684532][ T400] ? create_io_thread+0x1e0/0x1e0 [ 51.689477][ T400] __x64_sys_clone+0x23f/0x290 [ 51.694420][ T400] ? __do_sys_vfork+0x130/0x130 [ 51.699395][ T400] ? debug_smp_processor_id+0x17/0x20 [ 51.704899][ T400] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 51.710796][ T400] ? exit_to_user_mode_prepare+0x39/0xa0 [ 51.716266][ T400] x64_sys_call+0x1b0/0x9a0 [ 51.720600][ T400] do_syscall_64+0x3b/0xb0 [ 51.724854][ T400] ? clear_bhb_loop+0x35/0x90 [ 51.729454][ T400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.735180][ T400] RIP: 0033:0x7fbbb630c999 [ 51.739464][ T400] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.758875][ T400] RSP: 002b:00007fbbb5e8f078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 51.767291][ T400] RAX: ffffffffffffffda RBX: 00007fbbb642bf80 RCX: 00007fbbb630c999 [ 51.775104][ T400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100000 [ 51.782997][ T400] RBP: 00007fbbb5e8f120 R08: 0000000000000000 R09: 0000000000000000 [ 51.791055][ T400] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 51.798927][ T400] R13: 000000000000000b R14: 00007fbbb642bf80 R15: 00007ffe59b36748 [ 51.806684][ T400] [ 51.818212][ T402] FAULT_INJECTION: forcing a failure. [ 51.818212][ T402] name failslab, interval 1, probability 0, space 0, times 0 [ 51.829508][ T400] ------------[ cut here ]------------ [ 51.830743][ T402] CPU: 1 PID: 402 Comm: syz-executor.1 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 51.842911][ T400] refcount_t: underflow; use-after-free. [ 51.846093][ T402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 51.846109][ T402] Call Trace: [ 51.846115][ T402] [ 51.846122][ T402] dump_stack_lvl+0x151/0x1c0 [ 51.846153][ T402] ? io_uring_drop_tctx_refs+0x190/0x190 [ 51.846179][ T402] dump_stack+0x15/0x20 [ 51.852035][ T400] WARNING: CPU: 0 PID: 400 at lib/refcount.c:28 refcount_warn_saturate+0x158/0x1a0 [ 51.861539][ T402] should_fail+0x3c6/0x510 [ 51.861564][ T402] __should_failslab+0xa4/0xe0 [ 51.861586][ T402] ? anon_vma_fork+0x1df/0x4e0 [ 51.861605][ T402] should_failslab+0x9/0x20 [ 51.864999][ T400] Modules linked in: [ 51.867449][ T402] slab_pre_alloc_hook+0x37/0xd0 [ 51.871978][ T400] [ 51.877435][ T402] ? anon_vma_fork+0x1df/0x4e0 [ 51.877466][ T402] kmem_cache_alloc+0x44/0x200 [ 51.877489][ T402] anon_vma_fork+0x1df/0x4e0 [ 51.877508][ T402] copy_mm+0xa3a/0x13e0 [ 51.877529][ T402] ? copy_signal+0x610/0x610 [ 51.881635][ T400] CPU: 0 PID: 400 Comm: syz-executor.2 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 51.890538][ T402] ? __init_rwsem+0xfe/0x1d0 [ 51.890565][ T402] ? copy_signal+0x4e3/0x610 [ 51.890583][ T402] copy_process+0x1149/0x3290 [ 51.894826][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 51.899379][ T402] ? __kasan_check_write+0x14/0x20 [ 51.904068][ T400] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 51.908329][ T402] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 51.912085][ T400] Code: 04 01 48 c7 c7 20 08 a3 85 e8 14 de db fe 0f 0b eb 8b e8 cb 96 0a ff c6 05 e5 b8 c0 04 01 48 c7 c7 80 08 a3 85 e8 f8 dd db fe <0f> 0b e9 6c ff ff ff e8 ac 96 0a ff c6 05 c7 b8 c0 04 01 48 c7 c7 [ 51.916821][ T402] ? vfs_write+0x94d/0x1110 [ 51.916845][ T402] kernel_clone+0x21e/0x9e0 [ 51.919015][ T400] RSP: 0018:ffffc90000f27968 EFLAGS: 00010246 [ 51.923595][ T402] ? __kasan_check_write+0x14/0x20 [ 51.923619][ T402] ? create_io_thread+0x1e0/0x1e0 [ 51.923643][ T402] __x64_sys_clone+0x23f/0x290 [ 51.923666][ T402] ? __do_sys_vfork+0x130/0x130 [ 51.923689][ T402] ? debug_smp_processor_id+0x17/0x20 [ 51.923708][ T402] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 51.928249][ T400] [ 51.932621][ T402] ? exit_to_user_mode_prepare+0x39/0xa0 [ 51.932647][ T402] x64_sys_call+0x1b0/0x9a0 [ 51.936978][ T400] RAX: 4227f7d833685500 RBX: 0000000000000003 RCX: ffff888112fe3b40 [ 51.941177][ T402] do_syscall_64+0x3b/0xb0 [ 51.941199][ T402] ? clear_bhb_loop+0x35/0x90 [ 51.951571][ T400] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 51.955830][ T402] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.955856][ T402] RIP: 0033:0x7f195fe91999 [ 51.955873][ T402] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.960714][ T400] RBP: ffffc90000f27978 R08: ffffffff81579f45 R09: 0000000000000003 [ 51.964956][ T402] RSP: 002b:00007f195fa14078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 51.964979][ T402] RAX: ffffffffffffffda RBX: 00007f195ffb0f80 RCX: 00007f195fe91999 [ 51.964994][ T402] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100000 [ 51.965005][ T402] RBP: 00007f195fa14120 R08: 0000000000000000 R09: 0000000000000000 [ 51.965017][ T402] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 51.975016][ T400] R10: fffff520001e4e88 R11: dffffc0000000001 R12: 1ffff11024c3e4f2 [ 51.979907][ T402] R13: 000000000000000b R14: 00007f195ffb0f80 R15: 00007fffea8a4b28 [ 51.979927][ T402] [ 51.994067][ T404] FAULT_INJECTION: forcing a failure. [ 51.994067][ T404] name failslab, interval 1, probability 0, space 0, times 0 [ 52.019201][ T400] R13: ffff8881261f2790 R14: 0000000000000003 R15: ffff888124861d11 [ 52.036049][ T366] general protection fault, probably for non-canonical address 0xe1b145c720000001: 0000 [#1] PREEMPT SMP KASAN [ 52.047966][ T400] FS: 00007fbbb5e8f6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 52.050862][ T366] KASAN: maybe wild-memory-access in range [0x0d8a4e3900000008-0x0d8a4e390000000f] [ 52.056815][ T400] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.058935][ T366] CPU: 1 PID: 366 Comm: syz-executor.4 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 52.064777][ T400] CR2: 000055558a1b1430 CR3: 0000000124235000 CR4: 00000000003506b0 [ 52.068743][ T366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.076652][ T400] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.080891][ T366] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 52.085482][ T400] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.093392][ T366] Code: 00 74 08 4c 89 ef e8 2e 9c 2a ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 00 9c 2a ff 48 89 d8 48 8b 1b 4c [ 52.099178][ T400] Call Trace: [ 52.103459][ T366] RSP: 0018:ffffc90000db78f8 EFLAGS: 00010202 [ 52.123027][ T404] CPU: 0 PID: 404 Comm: syz-executor.1 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 52.130797][ T366] [ 52.130803][ T366] RAX: 0d8a4e3900000000 RBX: 0d8a4e3900000008 RCX: dffffc0000000000 [ 52.139168][ T404] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.146970][ T366] RDX: ffffffff81a57c60 RSI: ffff8881092f6c78 RDI: ffff88811c280180 [ 52.154781][ T404] Call Trace: [ 52.154790][ T404] [ 52.162711][ T366] RBP: ffffc90000db7960 R08: dffffc0000000000 R09: ffff88811c280188 [ 52.170524][ T404] dump_stack_lvl+0x151/0x1c0 [ 52.178420][ T366] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 52.186327][ T404] ? io_uring_drop_tctx_refs+0x190/0x190 [ 52.189196][ T366] R13: ffff88810d8a486c R14: 01b149c720000001 R15: ffff88811d369620 [ 52.201767][ T404] ? avc_denied+0x1b0/0x1b0 [ 52.209580][ T366] FS: 000055555a226480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 52.221296][ T404] dump_stack+0x15/0x20 [ 52.230161][ T366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.239270][ T404] should_fail+0x3c6/0x510 [ 52.245697][ T366] CR2: 00007ffde67d47c0 CR3: 00000001249e6000 CR4: 00000000003506a0 [ 52.255846][ T404] __should_failslab+0xa4/0xe0 [ 52.263659][ T366] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.273654][ T404] ? vm_area_dup+0x26/0x230 [ 52.281563][ T366] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.287370][ T404] should_failslab+0x9/0x20 [ 52.295386][ T366] Call Trace: [ 52.295394][ T366] [ 52.314817][ T404] slab_pre_alloc_hook+0x37/0xd0 [ 52.317941][ T366] ? __die_body+0x62/0xb0 [ 52.323842][ T404] ? vm_area_dup+0x26/0x230 [ 52.334001][ T366] ? die_addr+0x9f/0xd0 [ 52.336167][ T404] kmem_cache_alloc+0x44/0x200 [ 52.343979][ T366] ? exc_general_protection+0x311/0x4b0 [ 52.353871][ T404] vm_area_dup+0x26/0x230 [ 52.361805][ T366] ? asm_exc_general_protection+0x27/0x30 [ 52.365002][ T404] copy_mm+0x9a1/0x13e0 [ 52.367777][ T366] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 52.375763][ T404] ? copy_signal+0x610/0x610 [ 52.380264][ T366] ? __rb_insert_augmented+0x91/0x610 [ 52.388078][ T404] ? __init_rwsem+0xfe/0x1d0 [ 52.393559][ T366] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 52.401369][ T404] ? copy_signal+0x4e3/0x610 [ 52.405879][ T366] vma_interval_tree_insert_after+0x2be/0x2d0 [ 52.414647][ T404] copy_process+0x1149/0x3290 [ 52.418631][ T366] copy_mm+0xba2/0x13e0 [ 52.425141][ T404] ? __kasan_check_write+0x14/0x20 [ 52.429481][ T366] ? copy_signal+0x610/0x610 [ 52.437466][ T404] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 52.442071][ T366] ? __init_rwsem+0xfe/0x1d0 [ 52.449881][ T404] ? vfs_write+0x94d/0x1110 [ 52.454214][ T366] ? copy_signal+0x4e3/0x610 [ 52.462026][ T404] kernel_clone+0x21e/0x9e0 [ 52.466361][ T366] copy_process+0x1149/0x3290 [ 52.469488][ T404] ? __kasan_check_write+0x14/0x20 [ 52.472277][ T366] ? __kasan_check_read+0x11/0x20 [ 52.477040][ T404] ? create_io_thread+0x1e0/0x1e0 [ 52.481205][ T366] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 52.485545][ T404] __x64_sys_clone+0x23f/0x290 [ 52.489543][ T366] ? vfs_read+0x704/0xd40 [ 52.494138][ T404] ? __do_sys_vfork+0x130/0x130 [ 52.499516][ T366] kernel_clone+0x21e/0x9e0 [ 52.503780][ T404] ? debug_smp_processor_id+0x17/0x20 [ 52.509327][ T366] ? create_io_thread+0x1e0/0x1e0 [ 52.513406][ T404] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 52.519661][ T366] ? debug_smp_processor_id+0x17/0x20 [ 52.524091][ T404] ? exit_to_user_mode_prepare+0x39/0xa0 [ 52.529467][ T366] __x64_sys_clone+0x23f/0x290 [ 52.533893][ T404] x64_sys_call+0x1b0/0x9a0 [ 52.540137][ T366] ? __do_sys_vfork+0x130/0x130 [ 52.544571][ T404] do_syscall_64+0x3b/0xb0 [ 52.550470][ T366] x64_sys_call+0x1b0/0x9a0 [ 52.555007][ T404] ? clear_bhb_loop+0x35/0x90 [ 52.558970][ T366] do_syscall_64+0x3b/0xb0 [ 52.563917][ T404] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.568344][ T366] ? clear_bhb_loop+0x35/0x90 [ 52.573291][ T404] RIP: 0033:0x7f195fe91999 [ 52.577718][ T366] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.582077][ T404] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.586486][ T366] RIP: 0033:0x7fdbb146ead3 [ 52.590825][ T404] RSP: 002b:00007f195fa14078 EFLAGS: 00000206 [ 52.595335][ T366] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 52.600389][ T404] ORIG_RAX: 0000000000000038 [ 52.605239][ T366] RSP: 002b:00007ffde67921a8 EFLAGS: 00000246 [ 52.610180][ T404] RAX: ffffffffffffffda RBX: 00007f195ffb0f80 RCX: 00007f195fe91999 [ 52.615122][ T366] ORIG_RAX: 0000000000000038 [ 52.619727][ T404] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100000 [ 52.624092][ T366] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fdbb146ead3 [ 52.628777][ T404] RBP: 00007f195fa14120 R08: 0000000000000000 R09: 0000000000000000 [ 52.633116][ T366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 52.638325][ T404] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 52.643540][ T366] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 52.649526][ T404] R13: 000000000000000b R14: 00007f195ffb0f80 R15: 00007fffea8a4b28 [ 52.654727][ T366] R10: 000055555a226750 R11: 0000000000000246 R12: 0000000000000001 [ 52.660201][ T404] [ 52.664879][ T366] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 52.857310][ T366] [ 52.860172][ T366] Modules linked in: [ 52.864709][ T400] [ 52.868620][ T400] ? show_regs+0x58/0x60 [ 52.872369][ T366] ---[ end trace 308eb01c4c59f5cd ]--- [ 52.872746][ T400] ? __warn+0x160/0x2f0 [ 52.878934][ T30] audit: type=1400 audit(1732845453.208:92): avc: denied { remove_name } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 52.885380][ T400] ? refcount_warn_saturate+0x158/0x1a0 [ 52.906911][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.911194][ T400] ? report_bug+0x3d9/0x5b0 [ 52.920721][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.921967][ T400] ? refcount_warn_saturate+0x158/0x1a0 [ 52.929566][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.934752][ T400] ? handle_bug+0x41/0x70 [ 52.942821][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.946346][ T400] ? exc_invalid_op+0x1b/0x50 [ 52.946371][ T400] ? asm_exc_invalid_op+0x1b/0x20 [ 52.954551][ T30] audit: type=1400 audit(1732845453.248:93): avc: denied { rename } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 52.958644][ T400] ? __wake_up_klogd+0xd5/0x110 [ 52.964253][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.985605][ T400] ? refcount_warn_saturate+0x158/0x1a0 [ 52.990462][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.997152][ T400] ? refcount_warn_saturate+0x158/0x1a0 [ 52.997182][ T400] vm_area_free_no_check+0x123/0x130 [ 52.997205][ T400] copy_mm+0xefb/0x13e0 [ 52.997225][ T400] ? copy_signal+0x610/0x610 [ 53.003432][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.010377][ T400] ? __init_rwsem+0xfe/0x1d0 [ 53.016439][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.020848][ T400] ? copy_signal+0x4e3/0x610 [ 53.020876][ T400] copy_process+0x1149/0x3290 [ 53.025792][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.029284][ T400] ? __kasan_check_write+0x14/0x20 [ 53.037778][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.041554][ T400] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 53.050186][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.054359][ T400] ? vfs_write+0x94d/0x1110 [ 53.064877][ T366] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 53.066652][ T400] kernel_clone+0x21e/0x9e0 [ 53.084581][ T366] Code: 00 74 08 4c 89 ef e8 2e 9c 2a ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 00 9c 2a ff 48 89 d8 48 8b 1b 4c [ 53.092399][ T400] ? __kasan_check_write+0x14/0x20 [ 53.098798][ T366] RSP: 0018:ffffc90000db78f8 EFLAGS: 00010202 [ 53.102925][ T400] ? create_io_thread+0x1e0/0x1e0 [ 53.109088][ T366] [ 53.144256][ T400] __x64_sys_clone+0x23f/0x290 [ 53.145908][ T366] RAX: 0d8a4e3900000000 RBX: 0d8a4e3900000008 RCX: dffffc0000000000 [ 53.149322][ T400] ? __do_sys_vfork+0x130/0x130 [ 53.158333][ T366] RDX: ffffffff81a57c60 RSI: ffff8881092f6c78 RDI: ffff88811c280180 [ 53.165126][ T400] ? debug_smp_processor_id+0x17/0x20 [ 53.170144][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.175035][ T400] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 53.183475][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.188742][ T400] ? exit_to_user_mode_prepare+0x39/0xa0 [ 53.197241][ T366] RBP: ffffc90000db7960 R08: dffffc0000000000 R09: ffff88811c280188 [ 53.202113][ T400] x64_sys_call+0x1b0/0x9a0 [ 53.210959][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.214628][ T400] do_syscall_64+0x3b/0xb0 [ 53.222700][ T197] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.226513][ T400] ? clear_bhb_loop+0x35/0x90 [ 53.234884][ T366] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 53.238952][ T400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 53.248261][ T366] R13: ffff88810d8a486c R14: 01b149c720000001 R15: ffff88811d369620 [ 53.252589][ T400] RIP: 0033:0x7fbbb630c999 [ 53.266264][ T400] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.269544][ T366] FS: 000055555a226480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 53.286376][ T400] RSP: 002b:00007fbbb5e8f078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 53.297393][ T366] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.306329][ T400] RAX: ffffffffffffffda RBX: 00007fbbb642bf80 RCX: 00007fbbb630c999 [ 53.309947][ T366] CR2: 00007f986fffbdc0 CR3: 00000001249e6000 CR4: 00000000003506b0 [ 53.317387][ T400] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000100000 [ 53.325599][ T366] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.334091][ T400] RBP: 00007fbbb5e8f120 R08: 0000000000000000 R09: 0000000000000000 [ 53.357362][ T400] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 53.368849][ T400] R13: 000000000000000b R14: 00007fbbb642bf80 R15: 00007ffe59b36748 [ 53.377185][ T400] [ 53.380154][ T400] ---[ end trace 308eb01c4c59f5ce ]--- [ 53.382254][ T366] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.393320][ T366] Kernel panic - not syncing: Fatal exception [ 53.399588][ T366] Kernel Offset: disabled [ 53.403769][ T366] Rebooting in 86400 seconds..