Warning: Permanently added '10.128.0.44' (ED25519) to the list of known hosts. 2024/11/12 01:16:03 ignoring optional flag "sandboxArg"="0" 2024/11/12 01:16:03 ignoring optional flag "type"="gce" 2024/11/12 01:16:03 parsed 1 programs 2024/11/12 01:16:03 executed programs: 0 [ 48.787933][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.795032][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.802838][ T360] device bridge_slave_0 entered promiscuous mode [ 48.810883][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.818039][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.825303][ T360] device bridge_slave_1 entered promiscuous mode [ 48.902474][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.909423][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.916928][ T361] device bridge_slave_0 entered promiscuous mode [ 48.924905][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.931916][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.939046][ T361] device bridge_slave_1 entered promiscuous mode [ 48.985261][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.992523][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.999705][ T365] device bridge_slave_0 entered promiscuous mode [ 49.007894][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.014844][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.022156][ T365] device bridge_slave_1 entered promiscuous mode [ 49.124834][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.132034][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.139335][ T357] device bridge_slave_0 entered promiscuous mode [ 49.151440][ T367] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.158300][ T367] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.166008][ T367] device bridge_slave_0 entered promiscuous mode [ 49.172717][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.179583][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.187458][ T357] device bridge_slave_1 entered promiscuous mode [ 49.202487][ T367] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.209347][ T367] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.217003][ T367] device bridge_slave_1 entered promiscuous mode [ 49.276354][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.283466][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.290630][ T366] device bridge_slave_0 entered promiscuous mode [ 49.312099][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.318969][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.326478][ T366] device bridge_slave_1 entered promiscuous mode [ 49.365827][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.372702][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.379876][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.386684][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.446132][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.453026][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.460129][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.467011][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.490590][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.497525][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.504601][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.511472][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.587639][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.594548][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.601637][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.608407][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.616905][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.624591][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.631840][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.638904][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.646181][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.653319][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.660463][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.667758][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.676278][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.683717][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.701837][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.709977][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.716851][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.724118][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.732622][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.739562][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.802170][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.810302][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.822614][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.830506][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.838536][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.846919][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.861448][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.869794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.878147][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.885219][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.892608][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.900838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.909156][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.916045][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.923341][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.930831][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.938275][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.946501][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.954986][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.961867][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.985913][ T360] device veth0_vlan entered promiscuous mode [ 50.002794][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.010990][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.019200][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.026191][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.035343][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.043725][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.051803][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.058856][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.066101][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.073517][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.080851][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.089184][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.097740][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.104609][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.111993][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.120249][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.128607][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.135610][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.142850][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.150711][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.158590][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.166589][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.174562][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.182342][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.190101][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.197744][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.205176][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.213375][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.221502][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.228328][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.235710][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.244030][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.252104][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.259326][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.266827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.275274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.283474][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.290313][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.297650][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.308659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.316260][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.323609][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.331814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.339280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.347827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.355842][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.371908][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.379793][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.392551][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.415659][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.423884][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.432005][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.440993][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.454917][ T361] device veth0_vlan entered promiscuous mode [ 50.468517][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.476620][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.484088][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.491931][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.500164][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.508847][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.517020][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.525534][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.533881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.541646][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.549482][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.557080][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.565490][ T365] device veth0_vlan entered promiscuous mode [ 50.576002][ T361] device veth1_macvtap entered promiscuous mode [ 50.584741][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.596756][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.606484][ T360] device veth1_macvtap entered promiscuous mode [ 50.625302][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.633934][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.642382][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.650599][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.659162][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.667449][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.678460][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.686599][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.694035][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.704312][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.722341][ T367] device veth0_vlan entered promiscuous mode [ 50.730438][ T357] device veth0_vlan entered promiscuous mode [ 50.736376][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 50.736392][ T30] audit: type=1400 audit(1731374166.008:91): avc: denied { mounton } for pid=360 comm="syz-executor.1" path="/dev/binderfs" dev="devtmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 50.737468][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.773545][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.781665][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.789111][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.797399][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.805824][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.814137][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.838465][ T391] FAULT_INJECTION: forcing a failure. [ 50.838465][ T391] name failslab, interval 1, probability 0, space 0, times 1 [ 50.848574][ T366] device veth0_vlan entered promiscuous mode [ 50.857550][ T393] FAULT_INJECTION: forcing a failure. [ 50.857550][ T393] name failslab, interval 1, probability 0, space 0, times 1 [ 50.872462][ T391] CPU: 0 PID: 391 Comm: syz-executor.3 Not tainted 5.15.167-syzkaller-1075754-g3bfe08931bff #0 [ 50.873217][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.883172][ T391] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 50.883188][ T391] Call Trace: [ 50.883207][ T391] [ 50.883216][ T391] dump_stack_lvl+0x151/0x1c0 [ 50.883260][ T391] ? io_uring_drop_tctx_refs+0x190/0x190 [ 50.883286][ T391] dump_stack+0x15/0x20 [ 50.883306][ T391] should_fail+0x3c6/0x510 [ 50.891801][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.900538][ T391] __should_failslab+0xa4/0xe0 [ 50.921764][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.924653][ T391] ? anon_vma_fork+0xf7/0x4e0 [ 50.934762][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.936721][ T391] should_failslab+0x9/0x20 [ 50.959744][ T391] slab_pre_alloc_hook+0x37/0xd0 [ 50.964507][ T391] ? anon_vma_fork+0xf7/0x4e0 [ 50.969105][ T391] kmem_cache_alloc+0x44/0x200 [ 50.973721][ T391] anon_vma_fork+0xf7/0x4e0 [ 50.978046][ T391] ? anon_vma_name+0x43/0x70 [ 50.982482][ T391] ? vm_area_dup+0x17a/0x230 [ 50.986907][ T391] copy_mm+0xa3a/0x13e0 [ 50.990899][ T391] ? copy_signal+0x610/0x610 [ 50.995327][ T391] ? __init_rwsem+0xfe/0x1d0 [ 50.999745][ T391] ? copy_signal+0x4e3/0x610 [ 51.004274][ T391] copy_process+0x1149/0x3290 [ 51.005352][ T367] device veth1_macvtap entered promiscuous mode [ 51.008784][ T391] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 51.019978][ T391] ? copy_clone_args_from_user+0x744/0x830 [ 51.025623][ T391] kernel_clone+0x21e/0x9e0 [ 51.029970][ T391] ? __delayed_free_task+0x20/0x20 [ 51.034995][ T391] ? create_io_thread+0x1e0/0x1e0 [ 51.039850][ T391] ? file_end_write+0x1c0/0x1c0 [ 51.044547][ T391] __x64_sys_clone3+0x376/0x3a0 [ 51.049226][ T391] ? __ia32_sys_clone+0x290/0x290 [ 51.054088][ T391] ? ksys_write+0x260/0x2c0 [ 51.058422][ T391] ? exc_page_fault+0x47a/0x7f0 [ 51.063204][ T391] ? debug_smp_processor_id+0x17/0x20 [ 51.068404][ T391] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 51.074310][ T391] ? exit_to_user_mode_prepare+0x39/0xa0 [ 51.079788][ T391] x64_sys_call+0x935/0x9a0 [ 51.084117][ T391] do_syscall_64+0x3b/0xb0 [ 51.088383][ T391] ? clear_bhb_loop+0x35/0x90 [ 51.093006][ T391] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.099082][ T391] RIP: 0033:0x7f9bd6a29859 [ 51.103337][ T391] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.122826][ T391] RSP: 002b:00007f9bd65abf98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 51.131021][ T391] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f9bd6a29859 [ 51.139029][ T391] RDX: 00007f9bd65abfb0 RSI: 0000000000000058 RDI: 00007f9bd65abfb0 [ 51.146846][ T391] RBP: 00007f9bd65ac120 R08: 0000000000000000 R09: 0000000000000058 [ 51.154652][ T391] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.162466][ T391] R13: 000000000000000b R14: 00007f9bd6b48f80 R15: 00007ffd8c649f58 [ 51.170466][ T391] [ 51.173328][ T393] CPU: 1 PID: 393 Comm: syz-executor.1 Not tainted 5.15.167-syzkaller-1075754-g3bfe08931bff #0 [ 51.183481][ T393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 51.193457][ T393] Call Trace: [ 51.196586][ T393] [ 51.199367][ T393] dump_stack_lvl+0x151/0x1c0 [ 51.203974][ T393] ? io_uring_drop_tctx_refs+0x190/0x190 [ 51.209442][ T393] dump_stack+0x15/0x20 [ 51.213437][ T393] should_fail+0x3c6/0x510 [ 51.217687][ T393] __should_failslab+0xa4/0xe0 [ 51.222286][ T393] ? anon_vma_clone+0x9a/0x500 [ 51.226886][ T393] should_failslab+0x9/0x20 [ 51.231352][ T393] slab_pre_alloc_hook+0x37/0xd0 [ 51.236578][ T393] ? anon_vma_clone+0x9a/0x500 [ 51.241135][ T393] kmem_cache_alloc+0x44/0x200 [ 51.245736][ T393] anon_vma_clone+0x9a/0x500 [ 51.250172][ T393] anon_vma_fork+0x91/0x4e0 [ 51.254507][ T393] ? anon_vma_name+0x4c/0x70 [ 51.258926][ T393] ? vm_area_dup+0x17a/0x230 [ 51.263400][ T393] copy_mm+0xa3a/0x13e0 [ 51.267370][ T393] ? copy_signal+0x610/0x610 [ 51.271862][ T393] ? __init_rwsem+0xfe/0x1d0 [ 51.276285][ T393] ? copy_signal+0x4e3/0x610 [ 51.280731][ T393] copy_process+0x1149/0x3290 [ 51.285235][ T393] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 51.290175][ T393] ? copy_clone_args_from_user+0x744/0x830 [ 51.295918][ T393] kernel_clone+0x21e/0x9e0 [ 51.300344][ T393] ? __delayed_free_task+0x20/0x20 [ 51.305294][ T393] ? create_io_thread+0x1e0/0x1e0 [ 51.310151][ T393] ? file_end_write+0x1c0/0x1c0 [ 51.315275][ T393] __x64_sys_clone3+0x376/0x3a0 [ 51.319962][ T393] ? __ia32_sys_clone+0x290/0x290 [ 51.324833][ T393] ? ksys_write+0x260/0x2c0 [ 51.329159][ T393] ? exc_page_fault+0x47a/0x7f0 [ 51.333847][ T393] ? debug_smp_processor_id+0x17/0x20 [ 51.339142][ T393] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 51.345222][ T393] ? exit_to_user_mode_prepare+0x39/0xa0 [ 51.350685][ T393] x64_sys_call+0x935/0x9a0 [ 51.355031][ T393] do_syscall_64+0x3b/0xb0 [ 51.359277][ T393] ? clear_bhb_loop+0x35/0x90 [ 51.363791][ T393] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.369639][ T393] RIP: 0033:0x7f67189f2859 [ 51.373978][ T393] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.393596][ T393] RSP: 002b:00007f6718574f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 51.401839][ T393] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f67189f2859 [ 51.409651][ T393] RDX: 00007f6718574fb0 RSI: 0000000000000058 RDI: 00007f6718574fb0 [ 51.417721][ T393] RBP: 00007f6718575120 R08: 0000000000000000 R09: 0000000000000058 [ 51.425631][ T393] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.433431][ T393] R13: 000000000000000b R14: 00007f6718b11f80 R15: 00007ffd312ce258 [ 51.441421][ T393] [ 51.459104][ T366] device veth1_macvtap entered promiscuous mode [ 51.467818][ T365] device veth1_macvtap entered promiscuous mode [ 51.468493][ T398] FAULT_INJECTION: forcing a failure. [ 51.468493][ T398] name fail_page_alloc, interval 1, probability 0, space 0, times 1 [ 51.487904][ T357] device veth1_macvtap entered promiscuous mode [ 51.496194][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.497638][ T398] CPU: 0 PID: 398 Comm: syz-executor.3 Not tainted 5.15.167-syzkaller-1075754-g3bfe08931bff #0 [ 51.507616][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.514072][ T398] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 51.514087][ T398] Call Trace: [ 51.514093][ T398] [ 51.514100][ T398] dump_stack_lvl+0x151/0x1c0 [ 51.514131][ T398] ? io_uring_drop_tctx_refs+0x190/0x190 [ 51.522467][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.531775][ T398] ? lruvec_init+0x150/0x150 [ 51.531805][ T398] dump_stack+0x15/0x20 [ 51.531828][ T398] should_fail+0x3c6/0x510 [ 51.531848][ T398] should_fail_alloc_page+0x5a/0x80 [ 51.535982][ T400] FAULT_INJECTION: forcing a failure. [ 51.535982][ T400] name failslab, interval 1, probability 0, space 0, times 0 [ 51.537865][ T398] prepare_alloc_pages+0x15c/0x700 [ 51.537897][ T398] ? __alloc_pages_bulk+0xe40/0xe40 [ 51.543313][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.548307][ T398] __alloc_pages+0x18c/0x8f0 [ 51.548342][ T398] ? prep_new_page+0x110/0x110 [ 51.564685][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.568358][ T398] ? stack_trace_save+0x1c0/0x1c0 [ 51.583245][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.586060][ T398] ? __kernel_text_address+0x9b/0x110 [ 51.593628][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.596040][ T398] ? arch_stack_walk+0xf3/0x140 [ 51.613082][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.620778][ T398] __pmd_alloc+0xb1/0x550 [ 51.620810][ T398] ? stack_trace_save+0x113/0x1c0 [ 51.636077][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.638828][ T398] ? __pud_alloc+0x260/0x260 [ 51.655947][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.659501][ T398] ? stack_trace_snprint+0xf0/0xf0 [ 51.659535][ T398] ? __stack_depot_save+0x34/0x470 [ 51.669580][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.676330][ T398] ? anon_vma_clone+0x9a/0x500 [ 51.676365][ T398] copy_page_range+0x2b3d/0x2f90 [ 51.676386][ T398] ? __kasan_slab_alloc+0xb1/0xe0 [ 51.676406][ T398] ? slab_post_alloc_hook+0x53/0x2c0 [ 51.691371][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.692906][ T398] ? copy_mm+0xa3a/0x13e0 [ 51.698235][ T388] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.705655][ T398] ? copy_process+0x1149/0x3290 [ 51.705682][ T398] ? kernel_clone+0x21e/0x9e0 [ 51.705703][ T398] ? x64_sys_call+0x935/0x9a0 [ 51.705722][ T398] ? do_syscall_64+0x3b/0xb0 [ 51.705740][ T398] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.768850][ T398] ? pfn_valid+0x1e0/0x1e0 [ 51.773094][ T398] ? rwsem_write_trylock+0x153/0x340 [ 51.778226][ T398] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 51.784646][ T398] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 51.790192][ T398] ? __rb_insert_augmented+0x5de/0x610 [ 51.795500][ T398] copy_mm+0xc7e/0x13e0 [ 51.799485][ T398] ? copy_signal+0x610/0x610 [ 51.803916][ T398] ? __init_rwsem+0xfe/0x1d0 [ 51.808340][ T398] ? copy_signal+0x4e3/0x610 [ 51.812766][ T398] copy_process+0x1149/0x3290 [ 51.817281][ T398] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 51.822216][ T398] ? copy_clone_args_from_user+0x744/0x830 [ 51.827949][ T398] kernel_clone+0x21e/0x9e0 [ 51.832310][ T398] ? __delayed_free_task+0x20/0x20 [ 51.837230][ T398] ? create_io_thread+0x1e0/0x1e0 [ 51.842093][ T398] ? file_end_write+0x1c0/0x1c0 [ 51.846780][ T398] __x64_sys_clone3+0x376/0x3a0 [ 51.851478][ T398] ? __ia32_sys_clone+0x290/0x290 [ 51.856329][ T398] ? ksys_write+0x260/0x2c0 [ 51.860668][ T398] ? exc_page_fault+0x47a/0x7f0 [ 51.865377][ T398] ? debug_smp_processor_id+0x17/0x20 [ 51.870564][ T398] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 51.876745][ T398] ? exit_to_user_mode_prepare+0x39/0xa0 [ 51.882201][ T398] x64_sys_call+0x935/0x9a0 [ 51.886554][ T398] do_syscall_64+0x3b/0xb0 [ 51.890927][ T398] ? clear_bhb_loop+0x35/0x90 [ 51.895527][ T398] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.901270][ T398] RIP: 0033:0x7f9bd6a29859 [ 51.905512][ T398] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.925033][ T398] RSP: 002b:00007f9bd65abf98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 51.933285][ T398] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f9bd6a29859 [ 51.941088][ T398] RDX: 00007f9bd65abfb0 RSI: 0000000000000058 RDI: 00007f9bd65abfb0 [ 51.948916][ T398] RBP: 00007f9bd65ac120 R08: 0000000000000000 R09: 0000000000000058 [ 51.956891][ T398] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 51.964698][ T398] R13: 000000000000000b R14: 00007f9bd6b48f80 R15: 00007ffd8c649f58 [ 51.972522][ T398] [ 51.975374][ T400] CPU: 1 PID: 400 Comm: syz-executor.1 Not tainted 5.15.167-syzkaller-1075754-g3bfe08931bff #0 [ 51.985898][ T400] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 51.995777][ T400] Call Trace: [ 51.998902][ T400] [ 52.001681][ T400] dump_stack_lvl+0x151/0x1c0 [ 52.006189][ T400] ? io_uring_drop_tctx_refs+0x190/0x190 [ 52.011660][ T400] ? avc_denied+0x1b0/0x1b0 [ 52.016002][ T400] dump_stack+0x15/0x20 [ 52.020002][ T400] should_fail+0x3c6/0x510 [ 52.024257][ T400] __should_failslab+0xa4/0xe0 [ 52.028853][ T400] ? vm_area_dup+0x26/0x230 [ 52.033182][ T400] should_failslab+0x9/0x20 [ 52.037613][ T400] slab_pre_alloc_hook+0x37/0xd0 [ 52.042301][ T400] ? vm_area_dup+0x26/0x230 [ 52.046639][ T400] kmem_cache_alloc+0x44/0x200 [ 52.051237][ T400] vm_area_dup+0x26/0x230 [ 52.055402][ T400] copy_mm+0x9a1/0x13e0 [ 52.059400][ T400] ? copy_signal+0x610/0x610 [ 52.063821][ T400] ? __init_rwsem+0xfe/0x1d0 [ 52.068257][ T400] ? copy_signal+0x4e3/0x610 [ 52.072764][ T400] copy_process+0x1149/0x3290 [ 52.077284][ T400] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 52.082343][ T400] ? copy_clone_args_from_user+0x744/0x830 [ 52.087977][ T400] kernel_clone+0x21e/0x9e0 [ 52.092317][ T400] ? __delayed_free_task+0x20/0x20 [ 52.097300][ T400] ? create_io_thread+0x1e0/0x1e0 [ 52.102160][ T400] ? file_end_write+0x1c0/0x1c0 [ 52.106812][ T400] __x64_sys_clone3+0x376/0x3a0 [ 52.111496][ T400] ? __ia32_sys_clone+0x290/0x290 [ 52.116469][ T400] ? ksys_write+0x260/0x2c0 [ 52.120803][ T400] ? exc_page_fault+0x47a/0x7f0 [ 52.125497][ T400] ? debug_smp_processor_id+0x17/0x20 [ 52.130716][ T400] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 52.136595][ T400] ? exit_to_user_mode_prepare+0x39/0xa0 [ 52.142074][ T400] x64_sys_call+0x935/0x9a0 [ 52.146664][ T400] do_syscall_64+0x3b/0xb0 [ 52.150917][ T400] ? clear_bhb_loop+0x35/0x90 [ 52.155429][ T400] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.161156][ T400] RIP: 0033:0x7f67189f2859 [ 52.165423][ T400] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.184855][ T400] RSP: 002b:00007f6718574f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 52.193096][ T400] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f67189f2859 [ 52.200918][ T400] RDX: 00007f6718574fb0 RSI: 0000000000000058 RDI: 00007f6718574fb0 [ 52.208722][ T400] RBP: 00007f6718575120 R08: 0000000000000000 R09: 0000000000000058 [ 52.216535][ T400] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.224355][ T400] R13: 000000000000000b R14: 00007f6718b11f80 R15: 00007ffd312ce258 [ 52.232157][ T400] [ 52.253142][ T402] FAULT_INJECTION: forcing a failure. [ 52.253142][ T402] name failslab, interval 1, probability 0, space 0, times 0 [ 52.276856][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.276912][ T402] CPU: 0 PID: 402 Comm: syz-executor.3 Not tainted 5.15.167-syzkaller-1075754-g3bfe08931bff #0 [ 52.287484][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.294821][ T402] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.294835][ T402] Call Trace: [ 52.294841][ T402] [ 52.294848][ T402] dump_stack_lvl+0x151/0x1c0 [ 52.294878][ T402] ? io_uring_drop_tctx_refs+0x190/0x190 [ 52.294901][ T402] ? avc_denied+0x1b0/0x1b0 [ 52.303987][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.312791][ T402] dump_stack+0x15/0x20 [ 52.312826][ T402] should_fail+0x3c6/0x510 [ 52.312847][ T402] __should_failslab+0xa4/0xe0 [ 52.312869][ T402] ? vm_area_dup+0x26/0x230 [ 52.316938][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.318796][ T402] should_failslab+0x9/0x20 [ 52.324158][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.328761][ T402] slab_pre_alloc_hook+0x37/0xd0 [ 52.333787][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.340911][ T402] ? vm_area_dup+0x26/0x230 [ 52.345691][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.349240][ T402] kmem_cache_alloc+0x44/0x200 [ 52.354486][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.358185][ T402] vm_area_dup+0x26/0x230 [ 52.369295][ T407] FAULT_INJECTION: forcing a failure. [ 52.369295][ T407] name failslab, interval 1, probability 0, space 0, times 0 [ 52.370419][ T402] copy_mm+0x9a1/0x13e0 [ 52.436929][ T402] ? copy_signal+0x610/0x610 [ 52.441395][ T402] ? __init_rwsem+0xfe/0x1d0 [ 52.446209][ T402] ? copy_signal+0x4e3/0x610 [ 52.450637][ T402] copy_process+0x1149/0x3290 [ 52.455154][ T402] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 52.460098][ T402] ? copy_clone_args_from_user+0x744/0x830 [ 52.465740][ T402] kernel_clone+0x21e/0x9e0 [ 52.470173][ T402] ? __delayed_free_task+0x20/0x20 [ 52.475302][ T402] ? create_io_thread+0x1e0/0x1e0 [ 52.480146][ T402] ? file_end_write+0x1c0/0x1c0 [ 52.484837][ T402] __x64_sys_clone3+0x376/0x3a0 [ 52.489520][ T402] ? __ia32_sys_clone+0x290/0x290 [ 52.494383][ T402] ? ksys_write+0x260/0x2c0 [ 52.498726][ T402] ? exc_page_fault+0x47a/0x7f0 [ 52.503551][ T402] ? debug_smp_processor_id+0x17/0x20 [ 52.508758][ T402] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 52.514654][ T402] ? exit_to_user_mode_prepare+0x39/0xa0 [ 52.520119][ T402] x64_sys_call+0x935/0x9a0 [ 52.524457][ T402] do_syscall_64+0x3b/0xb0 [ 52.528710][ T402] ? clear_bhb_loop+0x35/0x90 [ 52.533270][ T402] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.539126][ T402] RIP: 0033:0x7f9bd6a29859 [ 52.543377][ T402] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.562923][ T402] RSP: 002b:00007f9bd65abf98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 52.571282][ T402] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f9bd6a29859 [ 52.579063][ T402] RDX: 00007f9bd65abfb0 RSI: 0000000000000058 RDI: 00007f9bd65abfb0 [ 52.586871][ T402] RBP: 00007f9bd65ac120 R08: 0000000000000000 R09: 0000000000000058 [ 52.594771][ T402] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.602582][ T402] R13: 000000000000000b R14: 00007f9bd6b48f80 R15: 00007ffd8c649f58 [ 52.610398][ T402] [ 52.613260][ T407] CPU: 1 PID: 407 Comm: syz-executor.1 Not tainted 5.15.167-syzkaller-1075754-g3bfe08931bff #0 [ 52.623413][ T407] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.633317][ T407] Call Trace: [ 52.636441][ T407] [ 52.639221][ T407] dump_stack_lvl+0x151/0x1c0 [ 52.643722][ T407] ? io_uring_drop_tctx_refs+0x190/0x190 [ 52.649196][ T407] ? avc_denied+0x1b0/0x1b0 [ 52.653552][ T407] dump_stack+0x15/0x20 [ 52.657607][ T407] should_fail+0x3c6/0x510 [ 52.661863][ T407] __should_failslab+0xa4/0xe0 [ 52.666464][ T407] ? vm_area_dup+0x26/0x230 [ 52.670888][ T407] should_failslab+0x9/0x20 [ 52.675244][ T407] slab_pre_alloc_hook+0x37/0xd0 [ 52.680002][ T407] ? vm_area_dup+0x26/0x230 [ 52.684354][ T407] kmem_cache_alloc+0x44/0x200 [ 52.688945][ T407] vm_area_dup+0x26/0x230 [ 52.693253][ T407] copy_mm+0x9a1/0x13e0 [ 52.697247][ T407] ? copy_signal+0x610/0x610 [ 52.701892][ T407] ? __init_rwsem+0xfe/0x1d0 [ 52.703658][ T410] FAULT_INJECTION: forcing a failure. [ 52.703658][ T410] name failslab, interval 1, probability 0, space 0, times 0 [ 52.706988][ T407] ? copy_signal+0x4e3/0x610 [ 52.707016][ T407] copy_process+0x1149/0x3290 [ 52.728615][ T407] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 52.733555][ T407] ? copy_clone_args_from_user+0x744/0x830 [ 52.739197][ T407] kernel_clone+0x21e/0x9e0 [ 52.743540][ T407] ? __delayed_free_task+0x20/0x20 [ 52.748582][ T407] ? create_io_thread+0x1e0/0x1e0 [ 52.753442][ T407] ? file_end_write+0x1c0/0x1c0 [ 52.758554][ T407] __x64_sys_clone3+0x376/0x3a0 [ 52.763235][ T407] ? __ia32_sys_clone+0x290/0x290 [ 52.768099][ T407] ? ksys_write+0x260/0x2c0 [ 52.772549][ T407] ? exc_page_fault+0x47a/0x7f0 [ 52.777242][ T407] ? debug_smp_processor_id+0x17/0x20 [ 52.782450][ T407] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 52.788348][ T407] ? exit_to_user_mode_prepare+0x39/0xa0 [ 52.793816][ T407] x64_sys_call+0x935/0x9a0 [ 52.798157][ T407] do_syscall_64+0x3b/0xb0 [ 52.802407][ T407] ? clear_bhb_loop+0x35/0x90 [ 52.806923][ T407] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 52.812648][ T407] RIP: 0033:0x7f67189f2859 [ 52.816902][ T407] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 52.836689][ T407] RSP: 002b:00007f6718574f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 52.844935][ T407] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f67189f2859 [ 52.852841][ T407] RDX: 00007f6718574fb0 RSI: 0000000000000058 RDI: 00007f6718574fb0 [ 52.860899][ T407] RBP: 00007f6718575120 R08: 0000000000000000 R09: 0000000000000058 [ 52.869301][ T407] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 52.877047][ T407] R13: 000000000000000b R14: 00007f6718b11f80 R15: 00007ffd312ce258 [ 52.884912][ T407] [ 52.888287][ T410] CPU: 0 PID: 410 Comm: syz-executor.3 Not tainted 5.15.167-syzkaller-1075754-g3bfe08931bff #0 [ 52.898450][ T410] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 52.908342][ T410] Call Trace: [ 52.911466][ T410] [ 52.914243][ T410] dump_stack_lvl+0x151/0x1c0 [ 52.918752][ T410] ? io_uring_drop_tctx_refs+0x190/0x190 [ 52.924222][ T410] dump_stack+0x15/0x20 [ 52.928487][ T410] should_fail+0x3c6/0x510 [ 52.932726][ T410] __should_failslab+0xa4/0xe0 [ 52.937329][ T410] ? anon_vma_fork+0xf7/0x4e0 [ 52.941928][ T410] should_failslab+0x9/0x20 [ 52.946362][ T410] slab_pre_alloc_hook+0x37/0xd0 [ 52.951239][ T410] ? anon_vma_fork+0xf7/0x4e0 [ 52.955737][ T410] kmem_cache_alloc+0x44/0x200 [ 52.960348][ T410] anon_vma_fork+0xf7/0x4e0 [ 52.964689][ T410] ? anon_vma_name+0x43/0x70 [ 52.969117][ T410] ? vm_area_dup+0x17a/0x230 [ 52.973531][ T410] copy_mm+0xa3a/0x13e0 [ 52.977515][ T410] ? copy_signal+0x610/0x610 [ 52.981938][ T410] ? __init_rwsem+0xfe/0x1d0 [ 52.986496][ T410] ? copy_signal+0x4e3/0x610 [ 52.990885][ T410] copy_process+0x1149/0x3290 [ 52.995397][ T410] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 53.000337][ T410] ? copy_clone_args_from_user+0x744/0x830 [ 53.005983][ T410] kernel_clone+0x21e/0x9e0 [ 53.010321][ T410] ? __delayed_free_task+0x20/0x20 [ 53.015270][ T410] ? create_io_thread+0x1e0/0x1e0 [ 53.020314][ T410] ? file_end_write+0x1c0/0x1c0 [ 53.025000][ T410] __x64_sys_clone3+0x376/0x3a0 [ 53.029760][ T410] ? __ia32_sys_clone+0x290/0x290 [ 53.034622][ T410] ? ksys_write+0x260/0x2c0 [ 53.038962][ T410] ? exc_page_fault+0x47a/0x7f0 [ 53.043736][ T410] ? debug_smp_processor_id+0x17/0x20 [ 53.049027][ T410] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 53.054935][ T410] ? exit_to_user_mode_prepare+0x39/0xa0 [ 53.060400][ T410] x64_sys_call+0x935/0x9a0 [ 53.064739][ T410] do_syscall_64+0x3b/0xb0 [ 53.069017][ T410] ? clear_bhb_loop+0x35/0x90 [ 53.073505][ T410] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 53.079231][ T410] RIP: 0033:0x7f9bd6a29859 [ 53.083679][ T410] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.103884][ T410] RSP: 002b:00007f9bd65abf98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 53.112128][ T410] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f9bd6a29859 [ 53.119936][ T410] RDX: 00007f9bd65abfb0 RSI: 0000000000000058 RDI: 00007f9bd65abfb0 [ 53.127749][ T410] RBP: 00007f9bd65ac120 R08: 0000000000000000 R09: 0000000000000058 [ 53.135647][ T410] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.143460][ T410] R13: 000000000000000b R14: 00007f9bd6b48f80 R15: 00007ffd8c649f58 [ 53.151383][ T410] [ 53.180604][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 53.198399][ T412] FAULT_INJECTION: forcing a failure. [ 53.198399][ T412] name failslab, interval 1, probability 0, space 0, times 0 [ 53.200641][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.211763][ T414] FAULT_INJECTION: forcing a failure. [ 53.211763][ T414] name failslab, interval 1, probability 0, space 0, times 0 [ 53.221431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.232385][ T412] CPU: 1 PID: 412 Comm: syz-executor.5 Not tainted 5.15.167-syzkaller-1075754-g3bfe08931bff #0 [ 53.240085][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.249667][ T412] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.249682][ T412] Call Trace: [ 53.249688][ T412] [ 53.249696][ T412] dump_stack_lvl+0x151/0x1c0 [ 53.249726][ T412] ? io_uring_drop_tctx_refs+0x190/0x190 [ 53.249751][ T412] dump_stack+0x15/0x20 [ 53.249771][ T412] should_fail+0x3c6/0x510 [ 53.291794][ T412] __should_failslab+0xa4/0xe0 [ 53.296389][ T412] ? anon_vma_fork+0xf7/0x4e0 [ 53.300905][ T412] should_failslab+0x9/0x20 [ 53.305247][ T412] slab_pre_alloc_hook+0x37/0xd0 [ 53.310016][ T412] ? anon_vma_fork+0xf7/0x4e0 [ 53.314530][ T412] kmem_cache_alloc+0x44/0x200 [ 53.319142][ T412] anon_vma_fork+0xf7/0x4e0 [ 53.323471][ T412] ? anon_vma_name+0x4c/0x70 [ 53.327896][ T412] ? vm_area_dup+0x17a/0x230 [ 53.332435][ T412] copy_mm+0xa3a/0x13e0 [ 53.336458][ T412] ? copy_signal+0x610/0x610 [ 53.340839][ T412] ? __init_rwsem+0xfe/0x1d0 [ 53.345265][ T412] ? copy_signal+0x4e3/0x610 [ 53.349841][ T412] copy_process+0x1149/0x3290 [ 53.354324][ T412] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 53.359467][ T412] ? copy_clone_args_from_user+0x744/0x830 [ 53.365106][ T412] kernel_clone+0x21e/0x9e0 [ 53.369446][ T412] ? __delayed_free_task+0x20/0x20 [ 53.374392][ T412] ? create_io_thread+0x1e0/0x1e0 [ 53.379256][ T412] ? file_end_write+0x1c0/0x1c0 [ 53.383943][ T412] __x64_sys_clone3+0x376/0x3a0 [ 53.388629][ T412] ? __ia32_sys_clone+0x290/0x290 [ 53.393492][ T412] ? ksys_write+0x260/0x2c0 [ 53.397838][ T412] ? exc_page_fault+0x47a/0x7f0 [ 53.402519][ T412] ? debug_smp_processor_id+0x17/0x20 [ 53.407809][ T412] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 53.413718][ T412] ? exit_to_user_mode_prepare+0x39/0xa0 [ 53.419179][ T412] x64_sys_call+0x935/0x9a0 [ 53.423522][ T412] do_syscall_64+0x3b/0xb0 [ 53.427773][ T412] ? clear_bhb_loop+0x35/0x90 [ 53.432308][ T412] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 53.438106][ T412] RIP: 0033:0x7fe634c96859 [ 53.442357][ T412] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.461797][ T412] RSP: 002b:00007fe634818f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 53.470187][ T412] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fe634c96859 [ 53.477984][ T412] RDX: 00007fe634818fb0 RSI: 0000000000000058 RDI: 00007fe634818fb0 [ 53.485890][ T412] RBP: 00007fe634819120 R08: 0000000000000000 R09: 0000000000000058 [ 53.493880][ T412] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.501681][ T412] R13: 000000000000000b R14: 00007fe634db5f80 R15: 00007ffcc5c03858 [ 53.509844][ T412] [ 53.512706][ T414] CPU: 0 PID: 414 Comm: syz-executor.1 Not tainted 5.15.167-syzkaller-1075754-g3bfe08931bff #0 [ 53.522954][ T414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.525083][ T416] FAULT_INJECTION: forcing a failure. [ 53.525083][ T416] name failslab, interval 1, probability 0, space 0, times 0 [ 53.532936][ T414] Call Trace: [ 53.532950][ T414] [ 53.532958][ T414] dump_stack_lvl+0x151/0x1c0 [ 53.532989][ T414] ? io_uring_drop_tctx_refs+0x190/0x190 [ 53.533014][ T414] dump_stack+0x15/0x20 [ 53.533033][ T414] should_fail+0x3c6/0x510 [ 53.552221][ T30] audit: type=1400 audit(1731374168.838:92): avc: denied { remove_name } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 53.555852][ T414] __should_failslab+0xa4/0xe0 [ 53.567017][ T30] audit: type=1400 audit(1731374168.838:93): avc: denied { rename } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 53.569777][ T414] ? anon_vma_fork+0x1df/0x4e0 [ 53.623136][ T414] should_failslab+0x9/0x20 [ 53.627476][ T414] slab_pre_alloc_hook+0x37/0xd0 [ 53.632259][ T414] ? anon_vma_fork+0x1df/0x4e0 [ 53.636849][ T414] kmem_cache_alloc+0x44/0x200 [ 53.641453][ T414] anon_vma_fork+0x1df/0x4e0 [ 53.645885][ T414] copy_mm+0xa3a/0x13e0 [ 53.649875][ T414] ? copy_signal+0x610/0x610 [ 53.654291][ T414] ? __init_rwsem+0xfe/0x1d0 [ 53.658750][ T414] ? copy_signal+0x4e3/0x610 [ 53.663152][ T414] copy_process+0x1149/0x3290 [ 53.667675][ T414] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 53.672705][ T414] ? copy_clone_args_from_user+0x744/0x830 [ 53.678333][ T414] kernel_clone+0x21e/0x9e0 [ 53.682759][ T414] ? __delayed_free_task+0x20/0x20 [ 53.687708][ T414] ? create_io_thread+0x1e0/0x1e0 [ 53.692742][ T414] ? file_end_write+0x1c0/0x1c0 [ 53.697426][ T414] __x64_sys_clone3+0x376/0x3a0 [ 53.702117][ T414] ? __ia32_sys_clone+0x290/0x290 [ 53.706976][ T414] ? ksys_write+0x260/0x2c0 [ 53.711317][ T414] ? exc_page_fault+0x47a/0x7f0 [ 53.716004][ T414] ? debug_smp_processor_id+0x17/0x20 [ 53.721311][ T414] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 53.727203][ T414] ? exit_to_user_mode_prepare+0x39/0xa0 [ 53.732667][ T414] x64_sys_call+0x935/0x9a0 [ 53.737006][ T414] do_syscall_64+0x3b/0xb0 [ 53.741257][ T414] ? clear_bhb_loop+0x35/0x90 [ 53.745770][ T414] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 53.751499][ T414] RIP: 0033:0x7f67189f2859 [ 53.755753][ T414] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.775281][ T414] RSP: 002b:00007f6718574f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 53.783750][ T414] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f67189f2859 [ 53.791527][ T414] RDX: 00007f6718574fb0 RSI: 0000000000000058 RDI: 00007f6718574fb0 [ 53.799421][ T414] RBP: 00007f6718575120 R08: 0000000000000000 R09: 0000000000000058 [ 53.807219][ T414] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.815118][ T414] R13: 000000000000000b R14: 00007f6718b11f80 R15: 00007ffd312ce258 [ 53.823024][ T414] 2024/11/12 01:16:09 executed programs: 13 [ 53.829259][ T414] ------------[ cut here ]------------ [ 53.831887][ T416] CPU: 0 PID: 416 Comm: syz-executor.3 Not tainted 5.15.167-syzkaller-1075754-g3bfe08931bff #0 [ 53.839701][ T414] refcount_t: underflow; use-after-free. [ 53.844783][ T416] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.844797][ T416] Call Trace: [ 53.844803][ T416] [ 53.844809][ T416] dump_stack_lvl+0x151/0x1c0 [ 53.844838][ T416] ? io_uring_drop_tctx_refs+0x190/0x190 [ 53.844861][ T416] ? avc_denied+0x1b0/0x1b0 [ 53.844883][ T416] dump_stack+0x15/0x20 [ 53.844904][ T416] should_fail+0x3c6/0x510 [ 53.844925][ T416] __should_failslab+0xa4/0xe0 [ 53.844947][ T416] ? vm_area_dup+0x26/0x230 [ 53.844969][ T416] should_failslab+0x9/0x20 [ 53.872676][ T414] WARNING: CPU: 1 PID: 414 at lib/refcount.c:28 refcount_warn_saturate+0x158/0x1a0 [ 53.876366][ T416] slab_pre_alloc_hook+0x37/0xd0 [ 53.876394][ T416] ? vm_area_dup+0x26/0x230 [ 53.881441][ T414] Modules linked in: [ 53.884691][ T416] kmem_cache_alloc+0x44/0x200 [ 53.891790][ T414] [ 53.893978][ T416] vm_area_dup+0x26/0x230 [ 53.898368][ T414] CPU: 1 PID: 414 Comm: syz-executor.1 Not tainted 5.15.167-syzkaller-1075754-g3bfe08931bff #0 [ 53.902889][ T416] copy_mm+0x9a1/0x13e0 [ 53.902913][ T416] ? copy_signal+0x610/0x610 [ 53.902931][ T416] ? __init_rwsem+0xfe/0x1d0 [ 53.902953][ T416] ? copy_signal+0x4e3/0x610 [ 53.912832][ T414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 53.916774][ T416] copy_process+0x1149/0x3290 [ 53.921606][ T414] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 53.924937][ T416] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 53.929554][ T414] Code: 04 01 48 c7 c7 80 03 a3 85 e8 c4 de db fe 0f 0b eb 8b e8 4b 94 0a ff c6 05 b5 bd c0 04 01 48 c7 c7 e0 03 a3 85 e8 a8 de db fe <0f> 0b e9 6c ff ff ff e8 2c 94 0a ff c6 05 97 bd c0 04 01 48 c7 c7 [ 53.931700][ T416] ? copy_clone_args_from_user+0x744/0x830 [ 53.931723][ T416] kernel_clone+0x21e/0x9e0 [ 53.931744][ T416] ? __delayed_free_task+0x20/0x20 [ 53.931761][ T416] ? create_io_thread+0x1e0/0x1e0 [ 53.931783][ T416] ? file_end_write+0x1c0/0x1c0 [ 53.939021][ T414] RSP: 0018:ffffc900010378c8 EFLAGS: 00010246 [ 53.946050][ T416] __x64_sys_clone3+0x376/0x3a0 [ 53.946090][ T416] ? __ia32_sys_clone+0x290/0x290 [ 53.946113][ T416] ? ksys_write+0x260/0x2c0 [ 53.946132][ T416] ? exc_page_fault+0x47a/0x7f0 [ 53.946154][ T416] ? debug_smp_processor_id+0x17/0x20 [ 53.946174][ T416] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 53.946198][ T416] ? exit_to_user_mode_prepare+0x39/0xa0 [ 53.946222][ T416] x64_sys_call+0x935/0x9a0 [ 53.946241][ T416] do_syscall_64+0x3b/0xb0 [ 53.946259][ T416] ? clear_bhb_loop+0x35/0x90 [ 53.946279][ T416] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 53.953546][ T414] [ 53.954667][ T416] RIP: 0033:0x7f9bd6a29859 [ 53.954691][ T416] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 53.959105][ T414] RAX: b2f11a99d5e57100 RBX: 0000000000000003 RCX: ffff8881138a4f00 [ 53.963512][ T416] RSP: 002b:00007f9bd65abf98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 53.963535][ T416] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f9bd6a29859 [ 53.963549][ T416] RDX: 00007f9bd65abfb0 RSI: 0000000000000058 RDI: 00007f9bd65abfb0 [ 53.963562][ T416] RBP: 00007f9bd65ac120 R08: 0000000000000000 R09: 0000000000000058 [ 53.963575][ T416] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 53.974239][ T414] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 53.977917][ T416] R13: 000000000000000b R14: 00007f9bd6b48f80 R15: 00007ffd8c649f58 [ 53.977938][ T416] [ 54.186006][ T414] RBP: ffffc900010378d8 R08: ffffffff815791b5 R09: ffffed103ee265e8 [ 54.199247][ T414] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff11024c361ab [ 54.207270][ T414] R13: ffff8881261b0d58 R14: 0000000000000003 R15: ffff88812347c181 [ 54.234113][ T421] FAULT_INJECTION: forcing a failure. [ 54.234113][ T421] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 54.234613][ T422] FAULT_INJECTION: forcing a failure. [ 54.234613][ T422] name failslab, interval 1, probability 0, space 0, times 0 [ 54.252593][ T414] FS: 00007f67185756c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 54.262001][ T423] FAULT_INJECTION: forcing a failure. [ 54.262001][ T423] name failslab, interval 1, probability 0, space 0, times 0 [ 54.269253][ T421] CPU: 0 PID: 421 Comm: syz-executor.4 Not tainted 5.15.167-syzkaller-1075754-g3bfe08931bff #0 [ 54.290980][ T421] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 54.300875][ T421] Call Trace: [ 54.303992][ T421] [ 54.306776][ T421] dump_stack_lvl+0x151/0x1c0 [ 54.311385][ T421] ? io_uring_drop_tctx_refs+0x190/0x190 [ 54.316935][ T421] ? lruvec_init+0x150/0x150 [ 54.321356][ T421] dump_stack+0x15/0x20 [ 54.325348][ T421] should_fail+0x3c6/0x510 [ 54.329702][ T421] should_fail_alloc_page+0x5a/0x80 [ 54.334728][ T421] prepare_alloc_pages+0x15c/0x700 [ 54.339673][ T421] ? __alloc_pages_bulk+0xe40/0xe40 [ 54.344704][ T421] __alloc_pages+0x18c/0x8f0 [ 54.349128][ T421] ? prep_new_page+0x110/0x110 [ 54.353843][ T421] ? stack_trace_save+0x1c0/0x1c0 [ 54.358760][ T421] ? __kernel_text_address+0x9b/0x110 [ 54.364112][ T421] ? arch_stack_walk+0xf3/0x140 [ 54.368775][ T421] __pmd_alloc+0xb1/0x550 [ 54.372936][ T421] ? stack_trace_save+0x113/0x1c0 [ 54.377795][ T421] ? __pud_alloc+0x260/0x260 [ 54.382223][ T421] ? stack_trace_snprint+0xf0/0xf0 [ 54.387177][ T421] ? __stack_depot_save+0x34/0x470 [ 54.392128][ T421] ? anon_vma_clone+0x9a/0x500 [ 54.396716][ T421] copy_page_range+0x2b3d/0x2f90 [ 54.401498][ T421] ? __kasan_slab_alloc+0xb1/0xe0 [ 54.406524][ T421] ? slab_post_alloc_hook+0x53/0x2c0 [ 54.411643][ T421] ? copy_mm+0xa3a/0x13e0 [ 54.415817][ T421] ? copy_process+0x1149/0x3290 [ 54.420494][ T421] ? kernel_clone+0x21e/0x9e0 [ 54.425110][ T421] ? x64_sys_call+0x935/0x9a0 [ 54.429613][ T421] ? do_syscall_64+0x3b/0xb0 [ 54.434038][ T421] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 54.439948][ T421] ? pfn_valid+0x1e0/0x1e0 [ 54.444192][ T421] ? rwsem_write_trylock+0x153/0x340 [ 54.449320][ T421] ? vma_interval_tree_augment_rotate+0x1d0/0x1d0 [ 54.455563][ T421] ? vma_gap_callbacks_rotate+0x1e2/0x210 [ 54.461121][ T421] ? __rb_insert_augmented+0x5de/0x610 [ 54.466415][ T421] copy_mm+0xc7e/0x13e0 [ 54.470455][ T421] ? copy_signal+0x610/0x610 [ 54.474835][ T421] ? __init_rwsem+0xfe/0x1d0 [ 54.479264][ T421] ? copy_signal+0x4e3/0x610 [ 54.483694][ T421] copy_process+0x1149/0x3290 [ 54.488633][ T421] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 54.493579][ T421] ? copy_clone_args_from_user+0x744/0x830 [ 54.499327][ T421] kernel_clone+0x21e/0x9e0 [ 54.503656][ T421] ? __delayed_free_task+0x20/0x20 [ 54.508615][ T421] ? create_io_thread+0x1e0/0x1e0 [ 54.513484][ T421] ? file_end_write+0x1c0/0x1c0 [ 54.518150][ T421] __x64_sys_clone3+0x376/0x3a0 [ 54.522838][ T421] ? __ia32_sys_clone+0x290/0x290 [ 54.527698][ T421] ? ksys_write+0x260/0x2c0 [ 54.532035][ T421] ? exc_page_fault+0x47a/0x7f0 [ 54.536725][ T421] ? debug_smp_processor_id+0x17/0x20 [ 54.541950][ T421] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 54.547843][ T421] ? exit_to_user_mode_prepare+0x39/0xa0 [ 54.553313][ T421] x64_sys_call+0x935/0x9a0 [ 54.557641][ T421] do_syscall_64+0x3b/0xb0 [ 54.561983][ T421] ? clear_bhb_loop+0x35/0x90 [ 54.566497][ T421] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 54.572221][ T421] RIP: 0033:0x7f87f2c8b859 [ 54.576478][ T421] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.596012][ T421] RSP: 002b:00007f87f280df98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 54.604253][ T421] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f87f2c8b859 [ 54.612135][ T421] RDX: 00007f87f280dfb0 RSI: 0000000000000058 RDI: 00007f87f280dfb0 [ 54.619875][ T421] RBP: 00007f87f280e120 R08: 0000000000000000 R09: 0000000000000058 [ 54.627693][ T421] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.635601][ T421] R13: 000000000000000b R14: 00007f87f2daaf80 R15: 00007ffcccc13428 [ 54.643402][ T421] [ 54.648133][ T423] CPU: 0 PID: 423 Comm: syz-executor.2 Not tainted 5.15.167-syzkaller-1075754-g3bfe08931bff #0 [ 54.658311][ T423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 54.668274][ T423] Call Trace: [ 54.671504][ T423] [ 54.674279][ T423] dump_stack_lvl+0x151/0x1c0 [ 54.678794][ T423] ? io_uring_drop_tctx_refs+0x190/0x190 [ 54.684260][ T423] dump_stack+0x15/0x20 [ 54.688256][ T423] should_fail+0x3c6/0x510 [ 54.692506][ T423] __should_failslab+0xa4/0xe0 [ 54.697224][ T423] ? anon_vma_fork+0xf7/0x4e0 [ 54.701737][ T423] should_failslab+0x9/0x20 [ 54.706075][ T423] slab_pre_alloc_hook+0x37/0xd0 [ 54.710938][ T423] ? anon_vma_fork+0xf7/0x4e0 [ 54.715450][ T423] kmem_cache_alloc+0x44/0x200 [ 54.720135][ T423] anon_vma_fork+0xf7/0x4e0 [ 54.724479][ T423] ? anon_vma_name+0x43/0x70 [ 54.728906][ T423] ? vm_area_dup+0x17a/0x230 [ 54.733418][ T423] copy_mm+0xa3a/0x13e0 [ 54.737427][ T423] ? copy_signal+0x610/0x610 [ 54.742023][ T423] ? __init_rwsem+0xfe/0x1d0 [ 54.746449][ T423] ? copy_signal+0x4e3/0x610 [ 54.750867][ T423] copy_process+0x1149/0x3290 [ 54.755379][ T423] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 54.760326][ T423] ? copy_clone_args_from_user+0x744/0x830 [ 54.766082][ T423] kernel_clone+0x21e/0x9e0 [ 54.770413][ T423] ? __delayed_free_task+0x20/0x20 [ 54.775359][ T423] ? create_io_thread+0x1e0/0x1e0 [ 54.780219][ T423] ? file_end_write+0x1c0/0x1c0 [ 54.784971][ T423] __x64_sys_clone3+0x376/0x3a0 [ 54.789588][ T423] ? __ia32_sys_clone+0x290/0x290 [ 54.794459][ T423] ? ksys_write+0x260/0x2c0 [ 54.798784][ T423] ? exc_page_fault+0x47a/0x7f0 [ 54.803473][ T423] ? debug_smp_processor_id+0x17/0x20 [ 54.808682][ T423] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 54.814580][ T423] ? exit_to_user_mode_prepare+0x39/0xa0 [ 54.820094][ T423] x64_sys_call+0x935/0x9a0 [ 54.824391][ T423] do_syscall_64+0x3b/0xb0 [ 54.828730][ T423] ? clear_bhb_loop+0x35/0x90 [ 54.833240][ T423] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 54.838967][ T423] RIP: 0033:0x7f531d05f859 [ 54.843223][ T423] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 54.862752][ T423] RSP: 002b:00007f531cbe1f98 EFLAGS: 00000246 ORIG_RAX: 00000000000001b3 [ 54.870995][ T423] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007f531d05f859 [ 54.878816][ T423] RDX: 00007f531cbe1fb0 RSI: 0000000000000058 RDI: 00007f531cbe1fb0 [ 54.886617][ T423] RBP: 00007f531cbe2120 R08: 0000000000000000 R09: 0000000000000058 [ 54.894429][ T423] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 54.902679][ T423] R13: 000000000000000b R14: 00007f531d17ef80 R15: 00007ffe6ab33d18 [ 54.910580][ T423] [ 54.913719][ T414] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 54.913715][ T422] CPU: 0 PID: 422 Comm: syz-executor.0 Not tainted 5.15.167-syzkaller-1075754-g3bfe08931bff #0 [ 54.913741][ T422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 54.925929][ T414] CR2: 00007f87f280dff8 CR3: 0000000122ecd000 CR4: 00000000003506b0 [ 54.930383][ T422] Call Trace: [ 54.930392][ T422] [ 54.930400][ T422] dump_stack_lvl+0x151/0x1c0 [ 54.942553][ T414] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 54.948263][ T422] ? io_uring_drop_tctx_refs+0x190/0x190 [ 54.948296][ T422] ? avc_denied+0x1b0/0x1b0 [ 54.951482][ T414] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 54.954163][ T422] dump_stack+0x15/0x20 [ 54.954188][ T422] should_fail+0x3c6/0x510 [ 54.958709][ T414] Call Trace: [ 54.966574][ T422] __should_failslab+0xa4/0xe0 [ 54.966599][ T422] ? vm_area_dup+0x26/0x230 [ 54.972313][ T414] [ 54.976388][ T422] should_failslab+0x9/0x20 [ 54.976412][ T422] slab_pre_alloc_hook+0x37/0xd0 [ 54.986381][ T414] ? show_regs+0x58/0x60 [ 54.988361][ T422] ? vm_area_dup+0x26/0x230 [ 54.988387][ T422] kmem_cache_alloc+0x44/0x200 [ 54.992709][ T414] ? __warn+0x160/0x2f0 [ 54.995749][ T422] vm_area_dup+0x26/0x230 [ 54.995773][ T422] copy_mm+0x9a1/0x13e0 [ 55.000641][ T414] ? refcount_warn_saturate+0x158/0x1a0 [ 55.004941][ T422] ? copy_signal+0x610/0x610 [ 55.004960][ T422] ? __init_rwsem+0xfe/0x1d0 [ 55.004980][ T422] ? copy_signal+0x4e3/0x610 [ 55.004997][ T422] copy_process+0x1149/0x3290 [ 55.005023][ T422] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 55.010070][ T423] BUG: unable to handle page fault for address: ffffed1800000012 [ 55.012062][ T422] ? copy_clone_args_from_user+0x744/0x830 [ 55.016821][ T423] #PF: supervisor read access in kernel mode [ 55.020920][ T422] kernel_clone+0x21e/0x9e0 [ 55.025329][ T423] #PF: error_code(0x0000) - not-present page [ 55.025341][ T423] PGD 23fff2067 [ 55.029932][ T422] ? __delayed_free_task+0x20/0x20 [ 55.033924][ T423] P4D 23fff2067 [ 55.038092][ T422] ? create_io_thread+0x1e0/0x1e0 [ 55.042081][ T423] PUD 0 [ 55.047475][ T422] ? file_end_write+0x1c0/0x1c0 [ 55.051887][ T423] [ 55.051894][ T423] Oops: 0000 [#1] PREEMPT SMP KASAN [ 55.056316][ T422] __x64_sys_clone3+0x376/0x3a0 [ 55.060752][ T423] CPU: 1 PID: 423 Comm: syz-executor.2 Not tainted 5.15.167-syzkaller-1075754-g3bfe08931bff #0 [ 55.065256][ T422] ? __ia32_sys_clone+0x290/0x290 [ 55.070204][ T423] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 55.077760][ T422] ? ksys_write+0x260/0x2c0 [ 55.083397][ T423] RIP: 0010:__rb_erase_color+0xa08/0xa60 [ 55.089214][ T422] ? exc_page_fault+0x47a/0x7f0 [ 55.093637][ T423] Code: 4c 89 ef e8 7a b1 2a ff 4d 89 65 00 4d 85 f6 49 bc 00 00 00 00 00 fc ff df 48 8b 5d a0 74 29 49 8d 5e 10 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 a9 b0 2a ff 49 8d 46 08 4d 39 6e [ 55.099455][ T422] ? debug_smp_processor_id+0x17/0x20 [ 55.102834][ T423] RSP: 0018:ffffc900010a76a0 EFLAGS: 00010a06 [ 55.107784][ T422] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 55.111345][ T423] [ 55.111352][ T423] RAX: 1ffff11800000012 RBX: ffff88c000000090 RCX: dffffc0000000000 [ 55.116204][ T422] ? exit_to_user_mode_prepare+0x39/0xa0 [ 55.118915][ T423] RDX: ffffffff81a56f80 RSI: ffff88810936daf0 RDI: ffff88812369f058 [ 55.123581][ T422] x64_sys_call+0x935/0x9a0 [ 55.125759][ T423] RBP: ffffc900010a7700 R08: ffffffff81a55040 R09: ffffed102126db62 [ 55.130784][ T422] do_syscall_64+0x3b/0xb0 [ 55.135564][ T423] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 55.145711][ T422] ? clear_bhb_loop+0x35/0x90 [ 55.150571][ T423] R13: ffff88812369f058 R14: ffff88c000000080 R15: ffff888126547e38 [ 55.160472][ T422] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.164804][ T423] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 55.170273][ T422] RIP: 0033:0x7fa7e50f4859 [ 55.175049][ T423] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.194490][ T422] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 55.199695][ T423] CR2: ffffed1800000012 CR3: 0000000006a0f000 CR4: 00000000003506a0 [ 55.205598][ T422] RSP: 002b:00007fa7e4c76f98 EFLAGS: 00000246 [ 55.211675][ T423] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.213883][ T422] ORIG_RAX: 00000000000001b3 [ 55.221653][ T423] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.227127][ T422] RAX: ffffffffffffffda RBX: 0000000000000058 RCX: 00007fa7e50f4859 [ 55.235034][ T423] Call Trace: [ 55.235041][ T423] [ 55.239388][ T422] RDX: 00007fa7e4c76fb0 RSI: 0000000000000058 RDI: 00007fa7e4c76fb0 [ 55.247191][ T423] ? __die_body+0x62/0xb0 [ 55.251456][ T422] RBP: 00007fa7e4c77120 R08: 0000000000000000 R09: 0000000000000058 [ 55.259253][ T423] ? __die+0x7e/0x90 [ 55.263768][ T422] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 55.271870][ T423] ? page_fault_oops+0x7f9/0xa90 [ 55.277719][ T422] R13: 000000000000000b R14: 00007fa7e5213f80 R15: 00007ffcdf631ee8 [ 55.286569][ T423] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 55.290829][ T422] [ 55.297327][ T423] ? search_bpf_extables+0x26d/0x2c0 [ 55.422516][ T423] ? is_prefetch+0x47a/0x6d0 [ 55.426946][ T423] ? __rb_erase_color+0xa08/0xa60 [ 55.431782][ T423] ? __rb_erase_color+0xa08/0xa60 [ 55.436643][ T423] ? search_exception_tables+0x54/0x60 [ 55.441947][ T423] ? stack_trace_snprint+0xf0/0xf0 [ 55.446896][ T423] ? unlock_page_memcg+0x146/0x160 [ 55.451875][ T423] ? kernelmode_fixup_or_oops+0xb9/0xd0 [ 55.457216][ T423] ? __bad_area_nosemaphore+0xc2/0x480 [ 55.462517][ T423] ? kmem_cache_free+0x116/0x2e0 [ 55.467372][ T423] ? kasan_set_track+0x5d/0x70 [ 55.471973][ T423] ? bad_area_nosemaphore+0x2d/0x40 [ 55.477005][ T423] ? do_kern_addr_fault+0x69/0x80 [ 55.481864][ T423] ? exc_page_fault+0x4dd/0x7f0 [ 55.486556][ T423] ? asm_exc_page_fault+0x27/0x30 [ 55.491420][ T423] ? vma_interval_tree_remove+0xae0/0xba0 [ 55.496966][ T423] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 55.503306][ T423] ? __rb_erase_color+0xa08/0xa60 [ 55.508163][ T423] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 55.514417][ T423] vma_interval_tree_remove+0xb82/0xba0 [ 55.519800][ T423] unlink_file_vma+0xd9/0xf0 [ 55.524222][ T423] free_pgtables+0x13f/0x280 [ 55.528648][ T423] exit_mmap+0x405/0x940 [ 55.532723][ T423] ? exit_aio+0x25e/0x3c0 [ 55.536904][ T423] ? vm_brk+0x30/0x30 [ 55.540708][ T423] ? mutex_unlock+0xb2/0x260 [ 55.545145][ T423] ? uprobe_clear_state+0x2cd/0x320 [ 55.550173][ T423] __mmput+0x95/0x310 [ 55.554015][ T423] mmput+0x5b/0x170 [ 55.557721][ T423] do_exit+0xb9c/0x2ca0 [ 55.561715][ T423] ? kasan_save_stack+0x4b/0x60 [ 55.566483][ T423] ? kasan_save_stack+0x3b/0x60 [ 55.571190][ T423] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.577087][ T423] ? put_task_struct+0x80/0x80 [ 55.581675][ T423] ? __kasan_check_write+0x14/0x20 [ 55.586625][ T423] ? _raw_spin_lock_irq+0xa5/0x1b0 [ 55.591569][ T423] ? _raw_spin_lock_irqsave+0x210/0x210 [ 55.596953][ T423] do_group_exit+0x141/0x310 [ 55.601378][ T423] get_signal+0x7a3/0x1630 [ 55.605637][ T423] arch_do_signal_or_restart+0xbd/0x1680 [ 55.611101][ T423] ? rcu_gp_kthread_wake+0x90/0x90 [ 55.616043][ T423] ? percpu_counter_add_batch+0x13d/0x160 [ 55.621606][ T423] ? get_sigframe_size+0x10/0x10 [ 55.626372][ T423] ? __se_sys_futex+0x37b/0x3e0 [ 55.631061][ T423] ? ____fput+0x15/0x20 [ 55.635053][ T423] exit_to_user_mode_loop+0xa0/0xe0 [ 55.640097][ T423] exit_to_user_mode_prepare+0x5a/0xa0 [ 55.645385][ T423] syscall_exit_to_user_mode+0x26/0x160 [ 55.650765][ T423] do_syscall_64+0x47/0xb0 [ 55.655025][ T423] ? clear_bhb_loop+0x35/0x90 [ 55.659546][ T423] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 55.665255][ T423] RIP: 0033:0x7f531d05f859 [ 55.669604][ T423] Code: Unable to access opcode bytes at RIP 0x7f531d05f82f. [ 55.676807][ T423] RSP: 002b:00007f531cbe2178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 55.685048][ T423] RAX: fffffffffffffe00 RBX: 00007f531d17ef88 RCX: 00007f531d05f859 [ 55.693209][ T423] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f531d17ef88 [ 55.701085][ T423] RBP: 00007f531d17ef80 R08: 00007f531cbe26c0 R09: 00007f531cbe26c0 [ 55.709013][ T423] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f531d17ef8c [ 55.716916][ T423] R13: 000000000000000b R14: 00007ffe6ab33c30 R15: 00007ffe6ab33d18 [ 55.724732][ T423] [ 55.728025][ T423] Modules linked in: [ 55.731781][ T423] CR2: ffffed1800000012 [ 55.735764][ T423] ---[ end trace 88e0360fa10c7e28 ]--- [ 55.741044][ T423] RIP: 0010:__rb_erase_color+0xa08/0xa60 [ 55.746524][ T423] Code: 4c 89 ef e8 7a b1 2a ff 4d 89 65 00 4d 85 f6 49 bc 00 00 00 00 00 fc ff df 48 8b 5d a0 74 29 49 8d 5e 10 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 a9 b0 2a ff 49 8d 46 08 4d 39 6e [ 55.765955][ T423] RSP: 0018:ffffc900010a76a0 EFLAGS: 00010a06 [ 55.771881][ T423] RAX: 1ffff11800000012 RBX: ffff88c000000090 RCX: dffffc0000000000 [ 55.779753][ T423] RDX: ffffffff81a56f80 RSI: ffff88810936daf0 RDI: ffff88812369f058 [ 55.787565][ T423] RBP: ffffc900010a7700 R08: ffffffff81a55040 R09: ffffed102126db62 [ 55.795462][ T423] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 55.803360][ T423] R13: ffff88812369f058 R14: ffff88c000000080 R15: ffff888126547e38 [ 55.811173][ T423] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 55.820457][ T423] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.826889][ T423] CR2: ffffed1800000012 CR3: 0000000006a0f000 CR4: 00000000003506a0 [ 55.834849][ T423] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.842651][ T423] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.850474][ T423] Kernel panic - not syncing: Fatal exception [ 55.856575][ T423] Kernel Offset: disabled [ 55.860706][ T423] Rebooting in 86400 seconds..