Warning: Permanently added '10.128.0.197' (ED25519) to the list of known hosts. 2024/11/29 02:27:30 ignoring optional flag "sandboxArg"="0" 2024/11/29 02:27:30 ignoring optional flag "type"="gce" 2024/11/29 02:27:30 parsed 1 programs 2024/11/29 02:27:30 executed programs: 0 [ 36.388655][ T30] kauditd_printk_skb: 19 callbacks suppressed [ 36.388670][ T30] audit: type=1400 audit(1732847250.521:95): avc: denied { unlink } for pid=336 comm="syz-executor" name="swap-file" dev="sda1" ino=1929 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 36.425585][ T336] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 36.618486][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.625432][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.632856][ T352] device bridge_slave_0 entered promiscuous mode [ 36.640629][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.647471][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.654777][ T352] device bridge_slave_1 entered promiscuous mode [ 36.673839][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.680742][ T353] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.687863][ T353] device bridge_slave_0 entered promiscuous mode [ 36.705856][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.712980][ T353] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.720268][ T353] device bridge_slave_1 entered promiscuous mode [ 36.763751][ T350] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.770978][ T350] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.778410][ T350] device bridge_slave_0 entered promiscuous mode [ 36.785725][ T350] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.792638][ T350] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.799773][ T350] device bridge_slave_1 entered promiscuous mode [ 36.892722][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.899606][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.906715][ T351] device bridge_slave_0 entered promiscuous mode [ 36.924877][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.931742][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.939029][ T351] device bridge_slave_1 entered promiscuous mode [ 36.969868][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.976723][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.984034][ T354] device bridge_slave_0 entered promiscuous mode [ 36.996468][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.003479][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.010581][ T354] device bridge_slave_1 entered promiscuous mode [ 37.046207][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.053095][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.060274][ T355] device bridge_slave_0 entered promiscuous mode [ 37.067118][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.073976][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.081245][ T355] device bridge_slave_1 entered promiscuous mode [ 37.125746][ T353] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.132613][ T353] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.139714][ T353] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.146477][ T353] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.227797][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.234661][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.241763][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.248545][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.296267][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.303126][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.310267][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.317113][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.329969][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.336810][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.343934][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.350708][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.363928][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.371353][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.378370][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.385304][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.393914][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.401016][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.408027][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.415011][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.422727][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.429992][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.473567][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.482117][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.488965][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.496238][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.504395][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.511258][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.518438][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.525621][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.532898][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.540898][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.547713][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.554959][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.562935][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.569772][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.605732][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.624971][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.633678][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.641509][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.649789][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.656606][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.663823][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 37.671720][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.679521][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 37.687344][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.695129][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.703253][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.711287][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.718135][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.733581][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.740913][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.748437][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.756597][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.764878][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.771925][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.779218][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.787318][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.795516][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.802364][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.809582][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.831960][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 37.839222][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.846480][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.854744][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.863949][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 37.872251][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.880447][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 37.888389][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.896180][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 37.904515][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.912628][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.919501][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.926604][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 37.934806][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.943001][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.949851][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.957137][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.964575][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.971880][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 37.982301][ T352] device veth0_vlan entered promiscuous mode [ 37.998110][ T353] device veth0_vlan entered promiscuous mode [ 38.007131][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 38.014960][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.023006][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.031384][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.038677][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.046391][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.054409][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.061812][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.072421][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.080575][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.095026][ T352] device veth1_macvtap entered promiscuous mode [ 38.105516][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.113756][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.122116][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.130373][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.138797][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.146750][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.153599][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.166353][ T351] device veth0_vlan entered promiscuous mode [ 38.178398][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.186317][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.194179][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.201663][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.209622][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.217350][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.225526][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.243255][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.251391][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.259476][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.266301][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.273536][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.281740][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.290007][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.307880][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.315975][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.324218][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.341402][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 38.349504][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.357557][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 38.365595][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.373809][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.388468][ T351] device veth1_macvtap entered promiscuous mode [ 38.395884][ T353] device veth1_macvtap entered promiscuous mode [ 38.405226][ T350] device veth0_vlan entered promiscuous mode [ 38.419419][ T354] device veth0_vlan entered promiscuous mode [ 38.425683][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.430649][ T379] FAULT_INJECTION: forcing a failure. [ 38.430649][ T379] name failslab, interval 1, probability 0, space 0, times 1 [ 38.437001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.446549][ T379] CPU: 1 PID: 379 Comm: syz-executor.5 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 38.458386][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.463587][ T379] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 38.471191][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.480520][ T379] Call Trace: [ 38.480528][ T379] [ 38.480535][ T379] dump_stack_lvl+0x151/0x1c0 [ 38.488382][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 38.490679][ T379] ? io_uring_drop_tctx_refs+0x190/0x190 [ 38.494276][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.497958][ T379] dump_stack+0x15/0x20 [ 38.517501][ T355] device veth0_vlan entered promiscuous mode [ 38.518093][ T379] should_fail+0x3c6/0x510 [ 38.518120][ T379] __should_failslab+0xa4/0xe0 [ 38.536759][ T379] ? anon_vma_clone+0x9a/0x500 [ 38.541362][ T379] should_failslab+0x9/0x20 [ 38.545693][ T379] slab_pre_alloc_hook+0x37/0xd0 [ 38.550467][ T379] ? anon_vma_clone+0x9a/0x500 [ 38.555064][ T379] kmem_cache_alloc+0x44/0x200 [ 38.559681][ T379] anon_vma_clone+0x9a/0x500 [ 38.564090][ T379] anon_vma_fork+0x91/0x4e0 [ 38.568431][ T379] ? anon_vma_name+0x4c/0x70 [ 38.572875][ T379] ? vm_area_dup+0x17a/0x230 [ 38.577302][ T379] copy_mm+0xa3a/0x13e0 [ 38.581281][ T379] ? copy_signal+0x610/0x610 [ 38.585793][ T379] ? __init_rwsem+0xfe/0x1d0 [ 38.590217][ T379] ? copy_signal+0x4e3/0x610 [ 38.594772][ T379] copy_process+0x1149/0x3290 [ 38.599288][ T379] ? __kasan_check_write+0x14/0x20 [ 38.604246][ T379] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 38.609180][ T379] ? vfs_write+0x94d/0x1110 [ 38.613519][ T379] kernel_clone+0x21e/0x9e0 [ 38.617858][ T379] ? __kasan_check_write+0x14/0x20 [ 38.622806][ T379] ? create_io_thread+0x1e0/0x1e0 [ 38.627669][ T379] __x64_sys_clone+0x23f/0x290 [ 38.632286][ T379] ? __do_sys_vfork+0x130/0x130 [ 38.636955][ T379] ? debug_smp_processor_id+0x17/0x20 [ 38.642181][ T379] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 38.648109][ T379] ? exit_to_user_mode_prepare+0x39/0xa0 [ 38.653532][ T379] x64_sys_call+0x1b0/0x9a0 [ 38.657875][ T379] do_syscall_64+0x3b/0xb0 [ 38.662134][ T379] ? clear_bhb_loop+0x35/0x90 [ 38.666640][ T379] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.672366][ T379] RIP: 0033:0x7f1a69251b29 [ 38.676620][ T379] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 38.696062][ T379] RSP: 002b:00007f1a68dd4078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 38.704328][ T379] RAX: ffffffffffffffda RBX: 00007f1a69370f80 RCX: 00007f1a69251b29 [ 38.712118][ T379] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 38.719932][ T379] RBP: 00007f1a68dd4120 R08: 0000000000000000 R09: 0000000000000000 [ 38.727917][ T379] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 38.735724][ T379] R13: 000000000000000b R14: 00007f1a69370f80 R15: 00007fff40f6b148 [ 38.743537][ T379] [ 38.753014][ T30] audit: type=1400 audit(1732847252.881:96): avc: denied { sys_admin } for pid=377 comm="syz-executor.5" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 38.761853][ T384] FAULT_INJECTION: forcing a failure. [ 38.761853][ T384] name failslab, interval 1, probability 0, space 0, times 0 [ 38.787487][ T384] CPU: 1 PID: 384 Comm: syz-executor.5 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 38.797655][ T384] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 38.804743][ T355] device veth1_macvtap entered promiscuous mode [ 38.807526][ T384] Call Trace: [ 38.807533][ T384] [ 38.819592][ T384] dump_stack_lvl+0x151/0x1c0 [ 38.824103][ T384] ? io_uring_drop_tctx_refs+0x190/0x190 [ 38.829575][ T384] dump_stack+0x15/0x20 [ 38.833562][ T384] should_fail+0x3c6/0x510 [ 38.837817][ T384] __should_failslab+0xa4/0xe0 [ 38.842423][ T384] ? anon_vma_clone+0x9a/0x500 [ 38.847020][ T384] should_failslab+0x9/0x20 [ 38.851357][ T384] slab_pre_alloc_hook+0x37/0xd0 [ 38.856132][ T384] ? anon_vma_clone+0x9a/0x500 [ 38.860732][ T384] kmem_cache_alloc+0x44/0x200 [ 38.865337][ T384] anon_vma_clone+0x9a/0x500 [ 38.869759][ T384] anon_vma_fork+0x91/0x4e0 [ 38.874101][ T384] ? anon_vma_name+0x4c/0x70 [ 38.878524][ T384] ? vm_area_dup+0x17a/0x230 [ 38.882950][ T384] copy_mm+0xa3a/0x13e0 [ 38.886947][ T384] ? copy_signal+0x610/0x610 [ 38.891367][ T384] ? __init_rwsem+0xfe/0x1d0 [ 38.895794][ T384] ? copy_signal+0x4e3/0x610 [ 38.900220][ T384] copy_process+0x1149/0x3290 [ 38.904743][ T384] ? __kasan_check_write+0x14/0x20 [ 38.909683][ T384] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 38.914626][ T384] ? vfs_write+0x94d/0x1110 [ 38.918967][ T384] kernel_clone+0x21e/0x9e0 [ 38.923305][ T384] ? __kasan_check_write+0x14/0x20 [ 38.928259][ T384] ? create_io_thread+0x1e0/0x1e0 [ 38.933115][ T384] __x64_sys_clone+0x23f/0x290 [ 38.937714][ T384] ? __do_sys_vfork+0x130/0x130 [ 38.942404][ T384] ? debug_smp_processor_id+0x17/0x20 [ 38.947741][ T384] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 38.953641][ T384] ? exit_to_user_mode_prepare+0x39/0xa0 [ 38.959108][ T384] x64_sys_call+0x1b0/0x9a0 [ 38.963446][ T384] do_syscall_64+0x3b/0xb0 [ 38.967699][ T384] ? clear_bhb_loop+0x35/0x90 [ 38.972210][ T384] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.977936][ T384] RIP: 0033:0x7f1a69251b29 [ 38.982199][ T384] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 39.001636][ T384] RSP: 002b:00007f1a68dd4078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 39.009879][ T384] RAX: ffffffffffffffda RBX: 00007f1a69370f80 RCX: 00007f1a69251b29 [ 39.017695][ T384] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 39.025504][ T384] RBP: 00007f1a68dd4120 R08: 0000000000000000 R09: 0000000000000000 [ 39.033317][ T384] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 39.041122][ T384] R13: 000000000000000b R14: 00007f1a69370f80 R15: 00007fff40f6b148 [ 39.048940][ T384] [ 39.054203][ T30] audit: type=1400 audit(1732847253.181:97): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=1915 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.075968][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.084416][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.092552][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.100052][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.107612][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.113034][ T388] FAULT_INJECTION: forcing a failure. [ 39.113034][ T388] name failslab, interval 1, probability 0, space 0, times 0 [ 39.116844][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.127810][ T388] CPU: 0 PID: 388 Comm: syz-executor.5 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 39.135765][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.145180][ T388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 39.145194][ T388] Call Trace: [ 39.145200][ T388] [ 39.145207][ T388] dump_stack_lvl+0x151/0x1c0 [ 39.152953][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.162102][ T388] ? io_uring_drop_tctx_refs+0x190/0x190 [ 39.162136][ T388] dump_stack+0x15/0x20 [ 39.165887][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.168019][ T388] should_fail+0x3c6/0x510 [ 39.168046][ T388] __should_failslab+0xa4/0xe0 [ 39.173128][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.180338][ T388] ? anon_vma_fork+0xf7/0x4e0 [ 39.180363][ T388] should_failslab+0x9/0x20 [ 39.180383][ T388] slab_pre_alloc_hook+0x37/0xd0 [ 39.180404][ T388] ? anon_vma_fork+0xf7/0x4e0 [ 39.180421][ T388] kmem_cache_alloc+0x44/0x200 [ 39.180442][ T388] anon_vma_fork+0xf7/0x4e0 [ 39.180458][ T388] ? anon_vma_name+0x43/0x70 [ 39.187266][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.189785][ T388] ? vm_area_dup+0x17a/0x230 [ 39.189810][ T388] copy_mm+0xa3a/0x13e0 [ 39.198112][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.202033][ T388] ? copy_signal+0x610/0x610 [ 39.207262][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.214438][ T388] ? __init_rwsem+0xfe/0x1d0 [ 39.214464][ T388] ? copy_signal+0x4e3/0x610 [ 39.220390][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.223293][ T388] copy_process+0x1149/0x3290 [ 39.229274][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.232575][ T388] ? __kasan_check_write+0x14/0x20 [ 39.316868][ T388] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 39.321806][ T388] ? vfs_write+0x94d/0x1110 [ 39.326154][ T388] kernel_clone+0x21e/0x9e0 [ 39.330486][ T388] ? __kasan_check_write+0x14/0x20 [ 39.335437][ T388] ? create_io_thread+0x1e0/0x1e0 [ 39.340298][ T388] __x64_sys_clone+0x23f/0x290 [ 39.344896][ T388] ? __do_sys_vfork+0x130/0x130 [ 39.349583][ T388] ? debug_smp_processor_id+0x17/0x20 [ 39.354807][ T388] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 39.360691][ T388] ? exit_to_user_mode_prepare+0x39/0xa0 [ 39.366161][ T388] x64_sys_call+0x1b0/0x9a0 [ 39.370504][ T388] do_syscall_64+0x3b/0xb0 [ 39.374752][ T388] ? clear_bhb_loop+0x35/0x90 [ 39.379268][ T388] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 39.384994][ T388] RIP: 0033:0x7f1a69251b29 [ 39.389249][ T388] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 39.408686][ T388] RSP: 002b:00007f1a68dd4078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 39.416932][ T388] RAX: ffffffffffffffda RBX: 00007f1a69370f80 RCX: 00007f1a69251b29 [ 39.424745][ T388] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 39.432558][ T388] RBP: 00007f1a68dd4120 R08: 0000000000000000 R09: 0000000000000000 [ 39.440369][ T388] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 39.448179][ T388] R13: 000000000000000b R14: 00007f1a69370f80 R15: 00007fff40f6b148 [ 39.455993][ T388] [ 39.460468][ T388] ------------[ cut here ]------------ [ 39.465796][ T388] refcount_t: underflow; use-after-free. [ 39.467543][ T354] device veth1_macvtap entered promiscuous mode [ 39.471407][ T388] WARNING: CPU: 0 PID: 388 at lib/refcount.c:28 refcount_warn_saturate+0x158/0x1a0 [ 39.487279][ T388] Modules linked in: [ 39.494182][ T350] device veth1_macvtap entered promiscuous mode [ 39.500395][ T388] CPU: 0 PID: 388 Comm: syz-executor.5 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 39.511606][ T388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 39.522610][ T388] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 39.528657][ T388] Code: 04 01 48 c7 c7 e0 0a a3 85 e8 14 de db fe 0f 0b eb 8b e8 cb 96 0a ff c6 05 e5 b8 c0 04 01 48 c7 c7 40 0b a3 85 e8 f8 dd db fe <0f> 0b e9 6c ff ff ff e8 ac 96 0a ff c6 05 c7 b8 c0 04 01 48 c7 c7 [ 39.531581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.548916][ T388] RSP: 0018:ffffc90000f57968 EFLAGS: 00010246 [ 39.555765][ T30] audit: type=1400 audit(1732847253.661:98): avc: denied { mounton } for pid=353 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=514 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 39.562022][ T388] RAX: 302d44564dd4eb00 RBX: 0000000000000003 RCX: ffff888102df8000 [ 39.587272][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.599948][ T388] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 39.599984][ T388] RBP: ffffc90000f57978 R08: ffffffff81579f45 R09: 0000000000000003 [ 39.599998][ T388] R10: fffff520001eae88 R11: dffffc0000000001 R12: 1ffff11024d571ab [ 39.608942][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.623604][ T388] R13: ffff888126ab8d58 R14: 0000000000000003 R15: ffff88810f1603d1 [ 39.631329][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.638579][ T388] FS: 00007f1a68dd46c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 39.646806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.654855][ T388] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 39.663189][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.669055][ T388] CR2: 000055558d1d3430 CR3: 0000000126a92000 CR4: 00000000003506b0 [ 39.676807][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.684212][ T388] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 39.692571][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.699938][ T388] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 39.708481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.715853][ T388] Call Trace: [ 39.724289][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.727089][ T388] [ 39.738517][ T388] ? show_regs+0x58/0x60 [ 39.742614][ T388] ? __warn+0x160/0x2f0 [ 39.746627][ T388] ? refcount_warn_saturate+0x158/0x1a0 [ 39.767126][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.776579][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.785654][ T392] FAULT_INJECTION: forcing a failure. [ 39.785654][ T392] name failslab, interval 1, probability 0, space 0, times 0 [ 39.785828][ T388] ? report_bug+0x3d9/0x5b0 [ 39.800696][ T394] FAULT_INJECTION: forcing a failure. [ 39.800696][ T394] name failslab, interval 1, probability 0, space 0, times 0 [ 39.803982][ T388] ? refcount_warn_saturate+0x158/0x1a0 [ 39.815756][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.820874][ T388] ? handle_bug+0x41/0x70 [ 39.828509][ T392] CPU: 1 PID: 392 Comm: syz-executor.4 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 39.828534][ T392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 39.828545][ T392] Call Trace: [ 39.828551][ T392] [ 39.828558][ T392] dump_stack_lvl+0x151/0x1c0 [ 39.828582][ T392] ? io_uring_drop_tctx_refs+0x190/0x190 [ 39.828605][ T392] dump_stack+0x15/0x20 [ 39.828624][ T392] should_fail+0x3c6/0x510 [ 39.828644][ T392] __should_failslab+0xa4/0xe0 [ 39.828665][ T392] ? anon_vma_clone+0x9a/0x500 [ 39.833700][ T388] ? exc_invalid_op+0x1b/0x50 [ 39.842966][ T392] should_failslab+0x9/0x20 [ 39.842991][ T392] slab_pre_alloc_hook+0x37/0xd0 [ 39.843013][ T392] ? anon_vma_clone+0x9a/0x500 [ 39.843030][ T392] kmem_cache_alloc+0x44/0x200 [ 39.853357][ T388] ? asm_exc_invalid_op+0x1b/0x20 [ 39.855982][ T392] anon_vma_clone+0x9a/0x500 [ 39.856005][ T392] anon_vma_fork+0x91/0x4e0 [ 39.859054][ T388] ? __wake_up_klogd+0xd5/0x110 [ 39.863276][ T392] ? anon_vma_name+0x4c/0x70 [ 39.863297][ T392] ? vm_area_dup+0x17a/0x230 [ 39.869140][ T388] ? refcount_warn_saturate+0x158/0x1a0 [ 39.872731][ T392] copy_mm+0xa3a/0x13e0 [ 39.872752][ T392] ? copy_signal+0x610/0x610 [ 39.877025][ T388] ? refcount_warn_saturate+0x158/0x1a0 [ 39.881587][ T392] ? __init_rwsem+0xfe/0x1d0 [ 39.881608][ T392] ? copy_signal+0x4e3/0x610 [ 39.881626][ T392] copy_process+0x1149/0x3290 [ 39.886771][ T388] vm_area_free_no_check+0x123/0x130 [ 39.890698][ T392] ? __kasan_check_write+0x14/0x20 [ 39.890725][ T392] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 39.890745][ T392] ? vfs_write+0x94d/0x1110 [ 39.890764][ T392] kernel_clone+0x21e/0x9e0 [ 39.901872][ T388] copy_mm+0xefb/0x13e0 [ 39.904411][ T392] ? __kasan_check_write+0x14/0x20 [ 39.916914][ T388] ? copy_signal+0x610/0x610 [ 39.918385][ T392] ? create_io_thread+0x1e0/0x1e0 [ 39.918428][ T392] __x64_sys_clone+0x23f/0x290 [ 39.918449][ T392] ? __do_sys_vfork+0x130/0x130 [ 39.927328][ T388] ? __init_rwsem+0xfe/0x1d0 [ 39.927413][ T392] ? debug_smp_processor_id+0x17/0x20 [ 39.936409][ T388] ? copy_signal+0x4e3/0x610 [ 39.941651][ T392] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 39.941676][ T392] ? exit_to_user_mode_prepare+0x39/0xa0 [ 39.952396][ T388] copy_process+0x1149/0x3290 [ 39.955532][ T392] x64_sys_call+0x1b0/0x9a0 [ 39.955554][ T392] do_syscall_64+0x3b/0xb0 [ 39.965383][ T388] ? __kasan_check_write+0x14/0x20 [ 39.968900][ T392] ? clear_bhb_loop+0x35/0x90 [ 39.968928][ T392] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 39.968948][ T392] RIP: 0033:0x7fb51323fb29 [ 39.968963][ T392] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 39.977310][ T388] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 39.978967][ T392] RSP: 002b:00007fb512dc2078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 39.978990][ T392] RAX: ffffffffffffffda RBX: 00007fb51335ef80 RCX: 00007fb51323fb29 [ 39.979006][ T392] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 39.979017][ T392] RBP: 00007fb512dc2120 R08: 0000000000000000 R09: 0000000000000000 [ 39.979029][ T392] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 39.986261][ T388] ? vfs_write+0x94d/0x1110 [ 39.988252][ T392] R13: 000000000000000b R14: 00007fb51335ef80 R15: 00007ffe0cf464a8 [ 39.988271][ T392] [ 39.990046][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.992966][ T394] CPU: 0 PID: 394 Comm: syz-executor.0 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 39.996933][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 40.001531][ T394] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 40.001543][ T394] Call Trace: [ 40.001550][ T394] [ 40.001557][ T394] dump_stack_lvl+0x151/0x1c0 [ 40.001583][ T394] ? io_uring_drop_tctx_refs+0x190/0x190 [ 40.001608][ T394] dump_stack+0x15/0x20 [ 40.001628][ T394] should_fail+0x3c6/0x510 [ 40.001649][ T394] __should_failslab+0xa4/0xe0 [ 40.001672][ T394] ? anon_vma_fork+0x1df/0x4e0 [ 40.001691][ T394] should_failslab+0x9/0x20 [ 40.006414][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.010925][ T394] slab_pre_alloc_hook+0x37/0xd0 [ 40.010950][ T394] ? anon_vma_fork+0x1df/0x4e0 [ 40.015838][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 40.020216][ T394] kmem_cache_alloc+0x44/0x200 [ 40.020243][ T394] anon_vma_fork+0x1df/0x4e0 [ 40.025040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.029850][ T394] copy_mm+0xa3a/0x13e0 [ 40.029877][ T394] ? copy_signal+0x610/0x610 [ 40.036111][ T388] kernel_clone+0x21e/0x9e0 [ 40.040177][ T394] ? __init_rwsem+0xfe/0x1d0 [ 40.040201][ T394] ? copy_signal+0x4e3/0x610 [ 40.040219][ T394] copy_process+0x1149/0x3290 [ 40.040241][ T394] ? __kasan_check_write+0x14/0x20 [ 40.040267][ T394] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 40.040288][ T394] ? vfs_write+0x94d/0x1110 [ 40.040309][ T394] kernel_clone+0x21e/0x9e0 [ 40.046596][ T388] ? __kasan_check_write+0x14/0x20 [ 40.050257][ T394] ? __kasan_check_write+0x14/0x20 [ 40.050280][ T394] ? create_io_thread+0x1e0/0x1e0 [ 40.054637][ T388] ? create_io_thread+0x1e0/0x1e0 [ 40.058851][ T394] __x64_sys_clone+0x23f/0x290 [ 40.058875][ T394] ? __do_sys_vfork+0x130/0x130 [ 40.063830][ T388] __x64_sys_clone+0x23f/0x290 [ 40.068310][ T394] ? debug_smp_processor_id+0x17/0x20 [ 40.068333][ T394] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 40.074071][ T388] ? __do_sys_vfork+0x130/0x130 [ 40.078293][ T394] ? exit_to_user_mode_prepare+0x39/0xa0 [ 40.078316][ T394] x64_sys_call+0x1b0/0x9a0 [ 40.078333][ T394] do_syscall_64+0x3b/0xb0 [ 40.078348][ T394] ? clear_bhb_loop+0x35/0x90 [ 40.078365][ T394] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 40.078382][ T394] RIP: 0033:0x7f4d85c84b29 [ 40.078398][ T394] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 40.078413][ T394] RSP: 002b:00007f4d85807078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 40.078433][ T394] RAX: ffffffffffffffda RBX: 00007f4d85da3f80 RCX: 00007f4d85c84b29 [ 40.078447][ T394] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000030000000 [ 40.098414][ T388] ? debug_smp_processor_id+0x17/0x20 [ 40.102874][ T394] RBP: 00007f4d85807120 R08: 0000000000000000 R09: 0000000000000000 [ 40.102889][ T394] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 40.102900][ T394] R13: 000000000000000b R14: 00007f4d85da3f80 R15: 00007fff88885b58 [ 40.111180][ T388] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 40.118949][ T394] [ 40.143159][ T353] BUG: unable to handle page fault for address: ffffed180000000b [ 40.483972][ T353] #PF: supervisor read access in kernel mode [ 40.489780][ T353] #PF: error_code(0x0000) - not-present page [ 40.495596][ T353] PGD 23fff2067 P4D 23fff2067 PUD 0 [ 40.500719][ T353] Oops: 0000 [#1] PREEMPT SMP KASAN [ 40.505749][ T353] CPU: 0 PID: 353 Comm: syz-executor.0 Not tainted 5.15.168-syzkaller-1076471-g101e665d55a8 #0 [ 40.515905][ T353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 40.525800][ T353] RIP: 0010:__rb_insert_augmented+0x36b/0x610 [ 40.531703][ T353] Code: 49 89 5d 00 48 83 e3 fc 43 80 3c 26 00 74 08 4c 89 ff e8 e8 99 2a ff 4d 89 2f 48 85 db 74 2a 4c 8d 73 10 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 26 99 2a ff 48 8d 43 08 4c 39 7b [ 40.551143][ T353] RSP: 0018:ffffc90000d778f8 EFLAGS: 00010a02 [ 40.557047][ T353] RAX: 1ffff1180000000b RBX: ffff88c000000048 RCX: ffff88810f3b93c0 [ 40.564864][ T353] RDX: 0000000000000000 RSI: ffff888127086e38 RDI: ffff888124e34c28 [ 40.572666][ T353] RBP: ffffc90000d77960 R08: dffffc0000000000 R09: ffff888127086e40 [ 40.580477][ T353] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 40.588289][ T353] R13: ffff888127086e38 R14: ffff88c000000058 R15: ffff88810f1603d0 [ 40.596100][ T353] FS: 000055558a3d0480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 40.604867][ T353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.611288][ T353] CR2: ffffed180000000b CR3: 0000000124e40000 CR4: 00000000003506b0 [ 40.619103][ T353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.626915][ T353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.634725][ T353] Call Trace: [ 40.637857][ T353] [ 40.640627][ T353] ? __die_body+0x62/0xb0 [ 40.644792][ T353] ? __die+0x7e/0x90 [ 40.648526][ T353] ? page_fault_oops+0x7f9/0xa90 [ 40.653298][ T353] ? kernelmode_fixup_or_oops+0xd0/0xd0 [ 40.658681][ T353] ? is_prefetch+0x47a/0x6d0 [ 40.663366][ T353] ? __rb_insert_augmented+0x36b/0x610 [ 40.668658][ T353] ? __rb_insert_augmented+0x36b/0x610 [ 40.673956][ T353] ? __rb_insert_augmented+0x36b/0x610 [ 40.679253][ T353] ? fixup_exception+0xbb/0x13c0 [ 40.684025][ T353] ? stack_trace_save+0x113/0x1c0 [ 40.688887][ T353] ? kernelmode_fixup_or_oops+0xb9/0xd0 [ 40.694262][ T353] ? __bad_area_nosemaphore+0xc2/0x480 [ 40.699566][ T353] ? bad_area_nosemaphore+0x2d/0x40 [ 40.704593][ T353] ? do_kern_addr_fault+0x69/0x80 [ 40.709473][ T353] ? exc_page_fault+0x4dd/0x7f0 [ 40.714145][ T353] ? asm_exc_page_fault+0x27/0x30 [ 40.719098][ T353] ? __rb_insert_augmented+0x36b/0x610 [ 40.724394][ T353] ? __rb_insert_augmented+0x28f/0x610 [ 40.729682][ T353] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 40.736024][ T353] vma_interval_tree_insert_after+0x2be/0x2d0 [ 40.741924][ T353] copy_mm+0xba2/0x13e0 [ 40.745921][ T353] ? copy_signal+0x610/0x610 [ 40.750348][ T353] ? __init_rwsem+0xfe/0x1d0 [ 40.754787][ T353] ? copy_signal+0x4e3/0x610 [ 40.759194][ T353] copy_process+0x1149/0x3290 [ 40.763710][ T353] ? __kasan_check_read+0x11/0x20 [ 40.768565][ T353] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 40.773513][ T353] ? vfs_read+0x704/0xd40 [ 40.777693][ T353] kernel_clone+0x21e/0x9e0 [ 40.782022][ T353] ? create_io_thread+0x1e0/0x1e0 [ 40.786878][ T353] ? debug_smp_processor_id+0x17/0x20 [ 40.792088][ T353] __x64_sys_clone+0x23f/0x290 [ 40.796687][ T353] ? __do_sys_vfork+0x130/0x130 [ 40.801384][ T353] x64_sys_call+0x1b0/0x9a0 [ 40.805716][ T353] do_syscall_64+0x3b/0xb0 [ 40.809966][ T353] ? clear_bhb_loop+0x35/0x90 [ 40.814485][ T353] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 40.820320][ T353] RIP: 0033:0x7f4d85c81b53 [ 40.824566][ T353] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 40.844006][ T353] RSP: 002b:00007fff88885d68 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 40.852264][ T353] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f4d85c81b53 [ 40.860076][ T353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 40.867871][ T353] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 40.875686][ T353] R10: 000055558a3d0750 R11: 0000000000000246 R12: 0000000000000001 [ 40.883514][ T353] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 40.891310][ T353] [ 40.894172][ T353] Modules linked in: [ 40.897918][ T353] CR2: ffffed180000000b [ 40.901904][ T353] ---[ end trace d48318e43457d195 ]--- [ 40.907191][ T353] RIP: 0010:__rb_insert_augmented+0x36b/0x610 [ 40.913090][ T353] Code: 49 89 5d 00 48 83 e3 fc 43 80 3c 26 00 74 08 4c 89 ff e8 e8 99 2a ff 4d 89 2f 48 85 db 74 2a 4c 8d 73 10 4c 89 f0 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 f7 e8 26 99 2a ff 48 8d 43 08 4c 39 7b [ 40.932531][ T353] RSP: 0018:ffffc90000d778f8 EFLAGS: 00010a02 [ 40.938433][ T353] RAX: 1ffff1180000000b RBX: ffff88c000000048 RCX: ffff88810f3b93c0 [ 40.946245][ T353] RDX: 0000000000000000 RSI: ffff888127086e38 RDI: ffff888124e34c28 [ 40.954061][ T353] RBP: ffffc90000d77960 R08: dffffc0000000000 R09: ffff888127086e40 [ 40.961999][ T353] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 40.969762][ T353] R13: ffff888127086e38 R14: ffff88c000000058 R15: ffff88810f1603d0 [ 40.977574][ T353] FS: 000055558a3d0480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 40.986349][ T353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.992770][ T353] CR2: ffffed180000000b CR3: 0000000124e40000 CR4: 00000000003506b0 [ 41.000580][ T353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 41.008386][ T353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 41.016214][ T353] Kernel panic - not syncing: Fatal exception [ 41.022360][ T353] Kernel Offset: disabled [ 41.026487][ T353] Rebooting in 86400 seconds..