Warning: Permanently added '10.128.1.121' (ED25519) to the list of known hosts. 2024/09/05 00:48:04 ignoring optional flag "sandboxArg"="0" 2024/09/05 00:48:04 parsed 1 programs 2024/09/05 00:48:04 executed programs: 0 [ 44.279170][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.286373][ T352] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.293767][ T352] device bridge_slave_0 entered promiscuous mode [ 44.301743][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.308808][ T352] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.316110][ T352] device bridge_slave_1 entered promiscuous mode [ 44.411301][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.418338][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.425928][ T366] device bridge_slave_0 entered promiscuous mode [ 44.458235][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.465289][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.472565][ T366] device bridge_slave_1 entered promiscuous mode [ 44.494912][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.501795][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.509225][ T363] device bridge_slave_0 entered promiscuous mode [ 44.529975][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.536933][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.544440][ T363] device bridge_slave_1 entered promiscuous mode [ 44.569499][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.576505][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.583820][ T357] device bridge_slave_0 entered promiscuous mode [ 44.590636][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.598005][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.605431][ T357] device bridge_slave_1 entered promiscuous mode [ 44.634881][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.641846][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.649274][ T361] device bridge_slave_0 entered promiscuous mode [ 44.671963][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.678884][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.686135][ T361] device bridge_slave_1 entered promiscuous mode [ 44.745458][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.752486][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.759906][ T359] device bridge_slave_0 entered promiscuous mode [ 44.787111][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.794025][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.801372][ T359] device bridge_slave_1 entered promiscuous mode [ 44.898042][ T352] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.905332][ T352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.912496][ T352] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.919485][ T352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.975006][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.981950][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.989104][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.996117][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.003992][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.010840][ T361] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.017969][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.024835][ T361] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.036526][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.043497][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.050663][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.057738][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.091652][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.098553][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.105661][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.112501][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.149828][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.157320][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.165162][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.172527][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.179979][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.187222][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.194347][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.201877][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.209120][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.216235][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.225402][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.232878][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.265530][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.283040][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.291379][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.298439][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.305841][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.314573][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.321522][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.329180][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.337182][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.345316][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.352162][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.359438][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.367505][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.374492][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.381713][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.389079][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.396522][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.404939][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.413035][ T307] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.419857][ T307] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.427100][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.435418][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.443482][ T307] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.450549][ T307] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.457820][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.465705][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.489344][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.497610][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.505193][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.513444][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.521523][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.528411][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.535712][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.543651][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.552013][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.560411][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.568883][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.575778][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.597921][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.606582][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.614341][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.622541][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.630644][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.637518][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.644908][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.653071][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.661444][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.668315][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.687482][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.695675][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.703898][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.712200][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.720565][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.728154][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.735613][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.744337][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.753342][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.760348][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.767746][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.775933][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.784226][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.791170][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.809785][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.819323][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.838033][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.847048][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.855240][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.863227][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.871067][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.879147][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.887554][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.894995][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.919455][ T352] device veth0_vlan entered promiscuous mode [ 45.926331][ T366] device veth0_vlan entered promiscuous mode [ 45.937135][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.945354][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.953311][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.961479][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.969683][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.977678][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.985851][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.995201][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.003562][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.011953][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.029698][ T357] device veth0_vlan entered promiscuous mode [ 46.045295][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.054127][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.062455][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.071156][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.079481][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.087469][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.095684][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.103624][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.119677][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.128688][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.136871][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.144375][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.154014][ T352] device veth1_macvtap entered promiscuous mode [ 46.162829][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.170919][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.181058][ T361] device veth0_vlan entered promiscuous mode [ 46.189840][ T357] device veth1_macvtap entered promiscuous mode [ 46.201708][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.209863][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.218227][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.226653][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.235292][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.244526][ T359] device veth0_vlan entered promiscuous mode [ 46.252939][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.260367][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.270892][ T307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.279873][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.287733][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.302527][ T30] kauditd_printk_skb: 15 callbacks suppressed [ 46.302543][ T30] audit: type=1400 audit(1725497286.608:91): avc: denied { mounton } for pid=352 comm="syz-executor.1" path="/dev/binderfs" dev="devtmpfs" ino=362 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 46.314475][ T359] device veth1_macvtap entered promiscuous mode [ 46.339260][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.347997][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.356354][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.364542][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.373351][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.382538][ T366] device veth1_macvtap entered promiscuous mode [ 46.397712][ T363] device veth0_vlan entered promiscuous mode [ 46.402326][ T388] FAULT_INJECTION: forcing a failure. [ 46.402326][ T388] name failslab, interval 1, probability 0, space 0, times 1 [ 46.406921][ T361] device veth1_macvtap entered promiscuous mode [ 46.416727][ T388] CPU: 0 PID: 388 Comm: syz-executor.1 Not tainted 5.15.157-syzkaller-1070873-g38761ec9fc9e #0 [ 46.432253][ T388] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 46.442158][ T388] Call Trace: [ 46.445271][ T388] [ 46.448046][ T388] dump_stack_lvl+0x151/0x1c0 [ 46.452761][ T388] ? io_uring_drop_tctx_refs+0x190/0x190 [ 46.458174][ T388] dump_stack+0x15/0x20 [ 46.462181][ T388] should_fail+0x3c6/0x510 [ 46.466415][ T388] __should_failslab+0xa4/0xe0 [ 46.471018][ T388] ? anon_vma_clone+0x9a/0x500 [ 46.475956][ T388] should_failslab+0x9/0x20 [ 46.480295][ T388] slab_pre_alloc_hook+0x37/0xd0 [ 46.485353][ T388] ? anon_vma_clone+0x9a/0x500 [ 46.489998][ T388] kmem_cache_alloc+0x44/0x200 [ 46.494544][ T388] anon_vma_clone+0x9a/0x500 [ 46.499076][ T388] anon_vma_fork+0x91/0x4e0 [ 46.503407][ T388] ? anon_vma_name+0x43/0x70 [ 46.508200][ T388] ? vm_area_dup+0x17a/0x230 [ 46.512608][ T388] copy_mm+0xa3a/0x13e0 [ 46.516603][ T388] ? copy_signal+0x610/0x610 [ 46.521032][ T388] ? __init_rwsem+0xfe/0x1d0 [ 46.525456][ T388] ? copy_signal+0x4e3/0x610 [ 46.529878][ T388] copy_process+0x1149/0x3290 [ 46.534659][ T388] ? __kasan_check_write+0x14/0x20 [ 46.539607][ T388] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 46.544554][ T388] ? vfs_write+0x9ec/0x1110 [ 46.548891][ T388] kernel_clone+0x21e/0x9e0 [ 46.553225][ T388] ? __kasan_check_write+0x14/0x20 [ 46.558294][ T388] ? create_io_thread+0x1e0/0x1e0 [ 46.563214][ T388] __x64_sys_clone+0x23f/0x290 [ 46.568134][ T388] ? __do_sys_vfork+0x130/0x130 [ 46.572907][ T388] ? debug_smp_processor_id+0x17/0x20 [ 46.578201][ T388] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 46.584091][ T388] ? exit_to_user_mode_prepare+0x39/0xa0 [ 46.589647][ T388] x64_sys_call+0x1b0/0x9a0 [ 46.593995][ T388] do_syscall_64+0x3b/0xb0 [ 46.598242][ T388] ? clear_bhb_loop+0x35/0x90 [ 46.602839][ T388] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.608574][ T388] RIP: 0033:0x7f01801d7d39 [ 46.612828][ T388] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.632366][ T388] RSP: 002b:00007f018015c078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 46.640770][ T388] RAX: ffffffffffffffda RBX: 00007f01802f8f80 RCX: 00007f01801d7d39 [ 46.648666][ T388] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000001000 [ 46.656573][ T388] RBP: 00007f018015c120 R08: 0000000000000000 R09: 0000000000000000 [ 46.664470][ T388] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 46.672759][ T388] R13: 000000000000000b R14: 00007f01802f8f80 R15: 00007ffe1304c2b8 [ 46.680575][ T388] [ 46.697632][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.697993][ T393] FAULT_INJECTION: forcing a failure. [ 46.697993][ T393] name failslab, interval 1, probability 0, space 0, times 0 [ 46.706013][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.720654][ T393] CPU: 1 PID: 393 Comm: syz-executor.1 Not tainted 5.15.157-syzkaller-1070873-g38761ec9fc9e #0 [ 46.726139][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.735513][ T393] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 46.735528][ T393] Call Trace: [ 46.735534][ T393] [ 46.735541][ T393] dump_stack_lvl+0x151/0x1c0 [ 46.735570][ T393] ? io_uring_drop_tctx_refs+0x190/0x190 [ 46.735593][ T393] dump_stack+0x15/0x20 [ 46.744367][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.753490][ T393] should_fail+0x3c6/0x510 [ 46.753516][ T393] __should_failslab+0xa4/0xe0 [ 46.753538][ T393] ? anon_vma_clone+0x9a/0x500 [ 46.753557][ T393] should_failslab+0x9/0x20 [ 46.756991][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.759564][ T393] slab_pre_alloc_hook+0x37/0xd0 [ 46.759590][ T393] ? anon_vma_clone+0x9a/0x500 [ 46.764617][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.769639][ T393] kmem_cache_alloc+0x44/0x200 [ 46.769668][ T393] anon_vma_clone+0x9a/0x500 [ 46.774255][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.781616][ T393] anon_vma_fork+0x91/0x4e0 [ 46.781646][ T393] ? anon_vma_name+0x43/0x70 [ 46.786356][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.790463][ T393] ? vm_area_dup+0x17a/0x230 [ 46.790490][ T393] copy_mm+0xa3a/0x13e0 [ 46.796102][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.800045][ T393] ? copy_signal+0x610/0x610 [ 46.800073][ T393] ? __init_rwsem+0xfe/0x1d0 [ 46.810190][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.812878][ T393] ? copy_signal+0x4e3/0x610 [ 46.812904][ T393] copy_process+0x1149/0x3290 [ 46.812926][ T393] ? __kasan_check_write+0x14/0x20 [ 46.818244][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.824819][ T393] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 46.824848][ T393] ? vfs_write+0x9ec/0x1110 [ 46.824866][ T393] kernel_clone+0x21e/0x9e0 [ 46.824885][ T393] ? __kasan_check_write+0x14/0x20 [ 46.824905][ T393] ? create_io_thread+0x1e0/0x1e0 [ 46.824928][ T393] __x64_sys_clone+0x23f/0x290 [ 46.824949][ T393] ? __do_sys_vfork+0x130/0x130 [ 46.824973][ T393] ? debug_smp_processor_id+0x17/0x20 [ 46.824993][ T393] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 46.825017][ T393] ? exit_to_user_mode_prepare+0x39/0xa0 [ 46.831290][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.834505][ T393] x64_sys_call+0x1b0/0x9a0 [ 46.834532][ T393] do_syscall_64+0x3b/0xb0 [ 46.834553][ T393] ? clear_bhb_loop+0x35/0x90 [ 46.834572][ T393] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.843027][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.847208][ T393] RIP: 0033:0x7f01801d7d39 [ 46.847228][ T393] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.852886][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.859768][ T393] RSP: 002b:00007f018015c078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 47.043516][ T393] RAX: ffffffffffffffda RBX: 00007f01802f8f80 RCX: 00007f01801d7d39 [ 47.051321][ T393] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000001000 [ 47.059653][ T393] RBP: 00007f018015c120 R08: 0000000000000000 R09: 0000000000000000 [ 47.067465][ T393] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 47.075757][ T393] R13: 000000000000000b R14: 00007f01802f8f80 R15: 00007ffe1304c2b8 [ 47.083659][ T393] [ 47.097371][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.106250][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.110945][ T396] FAULT_INJECTION: forcing a failure. [ 47.110945][ T396] name failslab, interval 1, probability 0, space 0, times 0 [ 47.115107][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.127822][ T396] CPU: 1 PID: 396 Comm: syz-executor.1 Not tainted 5.15.157-syzkaller-1070873-g38761ec9fc9e #0 [ 47.135997][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.145243][ T396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 47.145257][ T396] Call Trace: [ 47.145263][ T396] [ 47.145270][ T396] dump_stack_lvl+0x151/0x1c0 [ 47.145300][ T396] ? io_uring_drop_tctx_refs+0x190/0x190 [ 47.145324][ T396] dump_stack+0x15/0x20 [ 47.145344][ T396] should_fail+0x3c6/0x510 [ 47.145363][ T396] __should_failslab+0xa4/0xe0 [ 47.154292][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.163205][ T396] ? anon_vma_fork+0x1df/0x4e0 [ 47.163232][ T396] should_failslab+0x9/0x20 [ 47.163259][ T396] slab_pre_alloc_hook+0x37/0xd0 [ 47.167091][ T386] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.169116][ T396] ? anon_vma_fork+0x1df/0x4e0 [ 47.226834][ T396] kmem_cache_alloc+0x44/0x200 [ 47.231428][ T396] anon_vma_fork+0x1df/0x4e0 [ 47.236184][ T396] copy_mm+0xa3a/0x13e0 [ 47.240187][ T396] ? copy_signal+0x610/0x610 [ 47.244595][ T396] ? __init_rwsem+0xfe/0x1d0 [ 47.249020][ T396] ? copy_signal+0x4e3/0x610 [ 47.253447][ T396] copy_process+0x1149/0x3290 [ 47.257958][ T396] ? __kasan_check_write+0x14/0x20 [ 47.262940][ T396] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 47.267968][ T396] ? vfs_write+0x9ec/0x1110 [ 47.272503][ T396] kernel_clone+0x21e/0x9e0 [ 47.276981][ T396] ? __kasan_check_write+0x14/0x20 [ 47.281916][ T396] ? create_io_thread+0x1e0/0x1e0 [ 47.286983][ T396] __x64_sys_clone+0x23f/0x290 [ 47.291547][ T396] ? __do_sys_vfork+0x130/0x130 [ 47.296461][ T396] ? debug_smp_processor_id+0x17/0x20 [ 47.301655][ T396] ? fpregs_assert_state_consistent+0xb6/0xe0 [ 47.307691][ T396] ? exit_to_user_mode_prepare+0x39/0xa0 [ 47.313353][ T396] x64_sys_call+0x1b0/0x9a0 [ 47.317675][ T396] do_syscall_64+0x3b/0xb0 [ 47.321942][ T396] ? clear_bhb_loop+0x35/0x90 [ 47.326447][ T396] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.332187][ T396] RIP: 0033:0x7f01801d7d39 [ 47.336475][ T396] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.356051][ T396] RSP: 002b:00007f018015c078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 47.364516][ T396] RAX: ffffffffffffffda RBX: 00007f01802f8f80 RCX: 00007f01801d7d39 [ 47.372414][ T396] RDX: 00000000200000c0 RSI: 0000000000000000 RDI: 0000000000001000 [ 47.380427][ T396] RBP: 00007f018015c120 R08: 0000000000000000 R09: 0000000000000000 [ 47.388236][ T396] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 47.396129][ T396] R13: 000000000000000b R14: 00007f01802f8f80 R15: 00007ffe1304c2b8 [ 47.403944][ T396] [ 47.408654][ T396] ------------[ cut here ]------------ [ 47.419550][ T396] refcount_t: underflow; use-after-free. [ 47.429816][ T396] WARNING: CPU: 0 PID: 396 at lib/refcount.c:28 refcount_warn_saturate+0x158/0x1a0 [ 47.439263][ T396] Modules linked in: [ 47.459000][ T363] device veth1_macvtap entered promiscuous mode [ 47.466769][ T396] CPU: 0 PID: 396 Comm: syz-executor.1 Not tainted 5.15.157-syzkaller-1070873-g38761ec9fc9e #0 [ 47.468316][ T359] BUG: unable to handle page fault for address: ffffed180000000a [ 47.477780][ T396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 47.484957][ T359] #PF: supervisor read access in kernel mode [ 47.484971][ T359] #PF: error_code(0x0000) - not-present page [ 47.484983][ T359] PGD 23fff2067 P4D 23fff2067 PUD 0 [ 47.494993][ T396] RIP: 0010:refcount_warn_saturate+0x158/0x1a0 [ 47.500858][ T359] [ 47.500865][ T359] Oops: 0000 [#1] PREEMPT SMP KASAN [ 47.500881][ T359] CPU: 1 PID: 359 Comm: syz-executor.3 Not tainted 5.15.157-syzkaller-1070873-g38761ec9fc9e #0 [ 47.506799][ T396] Code: 04 01 48 c7 c7 20 f2 a2 85 e8 44 31 dc fe 0f 0b eb 8b e8 bb f9 0a ff c6 05 94 e6 60 04 01 48 c7 c7 80 f2 a2 85 e8 28 31 dc fe <0f> 0b e9 6c ff ff ff e8 9c f9 0a ff c6 05 76 e6 60 04 01 48 c7 c7 [ 47.511862][ T359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 47.511880][ T359] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 47.518071][ T396] RSP: 0018:ffffc90000f57968 EFLAGS: 00010246 [ 47.520468][ T359] Code: 00 74 08 4c 89 ef e8 7e e8 2a ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 50 e8 2a ff 48 89 d8 48 8b 1b 4c [ 47.520485][ T359] RSP: 0018:ffffc90000d778f8 EFLAGS: 00010a06 [ 47.527905][ T396] [ 47.535744][ T359] [ 47.535753][ T359] RAX: ffff88c000000048 RBX: ffff88c000000050 RCX: dffffc0000000000 [ 47.535771][ T359] RDX: ffffffff81a56970 RSI: ffff8881092e5518 RDI: ffff88810cd02180 [ 47.535785][ T359] RBP: ffffc90000d77960 R08: dffffc0000000000 R09: ffff88810cd02188 [ 47.535799][ T359] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 47.535812][ T359] R13: ffff88811cdc7748 R14: 1ffff1180000000a R15: ffff88811d89d620 [ 47.556850][ T396] RAX: 151c7154f07d2400 RBX: 0000000000000003 RCX: ffff88810cf22780 [ 47.565165][ T359] FS: 0000555555cd6480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 47.565190][ T359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.565204][ T359] CR2: ffffed180000000a CR3: 0000000123ff9000 CR4: 00000000003506a0 [ 47.565220][ T359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.565232][ T359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.571526][ T396] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 47.577581][ T359] Call Trace: [ 47.577589][ T359] [ 47.577596][ T359] ? __die_body+0x62/0xb0 [ 47.577622][ T359] ? __die+0x7e/0x90 [ 47.599248][ T396] RBP: ffffc90000f57978 R08: ffffffff81579755 R09: ffffed103ee065e8 [ 47.603321][ T359] ? page_fault_oops+0x7f9/0xa90 [ 47.603351][ T359] ? __rb_insert_augmented+0x91/0x610 [ 47.605813][ T396] R10: 0000000000000000 R11: dffffc0000000001 R12: 1ffff110219a6c83 [ 47.607657][ T359] ? kernelmode_fixup_or_oops+0x270/0x270 [ 47.615840][ T396] R13: ffff88810cd36418 R14: 0000000000000003 R15: ffff88811cdc7749 [ 47.623454][ T359] ? is_prefetch+0x47a/0x6d0 [ 47.623481][ T359] ? search_bpf_extables+0x26d/0x2c0 [ 47.632201][ T396] FS: 00007f018015c6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 47.639903][ T359] ? __rb_insert_augmented+0x91/0x610 [ 47.639928][ T359] ? __rb_insert_augmented+0x91/0x610 [ 47.639946][ T359] ? __rb_insert_augmented+0x91/0x610 [ 47.649068][ T396] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.655682][ T359] ? fixup_exception+0xbb/0x13c0 [ 47.655706][ T359] ? stack_trace_save+0x113/0x1c0 [ 47.664802][ T396] CR2: 0000560de92690f8 CR3: 00000001275b5000 CR4: 00000000003506b0 [ 47.671070][ T359] ? kernelmode_fixup_or_oops+0x21b/0x270 [ 47.679309][ T396] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.686817][ T359] ? __bad_area_nosemaphore+0xcf/0x490 [ 47.686854][ T359] ? __kasan_slab_alloc+0xc3/0xe0 [ 47.686875][ T359] ? bad_area_nosemaphore+0x2d/0x40 [ 47.696475][ T396] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.702486][ T359] ? do_kern_addr_fault+0x69/0x80 [ 47.705880][ T396] Call Trace: [ 47.708391][ T359] ? exc_page_fault+0x4eb/0x830 [ 47.708420][ T359] ? asm_exc_page_fault+0x27/0x30 [ 47.712581][ T396] [ 47.716285][ T359] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 47.716310][ T359] ? __rb_insert_augmented+0x91/0x610 [ 47.724713][ T396] ? show_regs+0x58/0x60 [ 47.729058][ T359] ? anon_vma_interval_tree_iter_next+0x390/0x390 [ 47.734491][ T396] ? __warn+0x160/0x2f0 [ 47.742069][ T359] vma_interval_tree_insert_after+0x2be/0x2d0 [ 47.748516][ T396] ? refcount_warn_saturate+0x158/0x1a0 [ 47.755726][ T359] copy_mm+0xba2/0x13e0 [ 47.755758][ T359] ? copy_signal+0x610/0x610 [ 47.755775][ T359] ? __init_rwsem+0xfe/0x1d0 [ 47.755795][ T359] ? copy_signal+0x4e3/0x610 [ 47.760699][ T396] ? report_bug+0x3d9/0x5b0 [ 47.765251][ T359] copy_process+0x1149/0x3290 [ 47.765282][ T359] ? __kasan_check_read+0x11/0x20 [ 47.774588][ T396] ? refcount_warn_saturate+0x158/0x1a0 [ 47.779683][ T359] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 47.779711][ T359] ? vfs_read+0x64b/0xd40 [ 47.785318][ T396] ? handle_bug+0x41/0x70 [ 47.790105][ T359] kernel_clone+0x21e/0x9e0 [ 47.790134][ T359] ? create_io_thread+0x1e0/0x1e0 [ 47.797194][ T396] ? exc_invalid_op+0x1b/0x50 [ 47.801392][ T359] ? debug_smp_processor_id+0x17/0x20 [ 47.801415][ T359] __x64_sys_clone+0x23f/0x290 [ 47.806586][ T396] ? asm_exc_invalid_op+0x1b/0x20 [ 47.814157][ T359] ? __do_sys_vfork+0x130/0x130 [ 47.814188][ T359] x64_sys_call+0x1b0/0x9a0 [ 47.820593][ T396] ? __wake_up_klogd+0xd5/0x110 [ 47.828253][ T359] do_syscall_64+0x3b/0xb0 [ 47.828277][ T359] ? clear_bhb_loop+0x35/0x90 [ 47.834023][ T396] ? refcount_warn_saturate+0x158/0x1a0 [ 47.838490][ T359] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.843892][ T396] ? refcount_warn_saturate+0x158/0x1a0 [ 47.851446][ T359] RIP: 0033:0x7f801760dd93 [ 47.851467][ T359] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 47.856636][ T396] vm_area_free_no_check+0x123/0x130 [ 47.859609][ T359] RSP: 002b:00007fff439ead18 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 47.859633][ T359] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f801760dd93 [ 47.864589][ T396] copy_mm+0xefb/0x13e0 [ 47.869325][ T359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 47.869339][ T359] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 47.872136][ T396] ? copy_signal+0x610/0x610 [ 47.879233][ T359] R10: 0000555555cd6750 R11: 0000000000000246 R12: 0000000000000001 [ 47.879247][ T359] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 47.879262][ T359] [ 47.879267][ T359] Modules linked in: [ 47.879293][ T359] CR2: ffffed180000000a [ 47.885189][ T396] ? __init_rwsem+0xfe/0x1d0 [ 47.888604][ T359] ---[ end trace 050612e6c7550383 ]--- [ 47.888616][ T359] RIP: 0010:__rb_insert_augmented+0x91/0x610 [ 47.895598][ T396] ? copy_signal+0x4e3/0x610 [ 47.899012][ T359] Code: 00 74 08 4c 89 ef e8 7e e8 2a ff 49 8b 45 00 a8 01 0f 85 60 05 00 00 48 89 5d a0 48 89 45 c0 48 8d 58 08 49 89 de 49 c1 ee 03 <43> 80 3c 26 00 74 08 48 89 df e8 50 e8 2a ff 48 89 d8 48 8b 1b 4c [ 47.899030][ T359] RSP: 0018:ffffc90000d778f8 EFLAGS: 00010a06 [ 47.905193][ T396] copy_process+0x1149/0x3290 [ 47.910368][ T359] [ 47.910376][ T359] RAX: ffff88c000000048 RBX: ffff88c000000050 RCX: dffffc0000000000 [ 47.910392][ T359] RDX: ffffffff81a56970 RSI: ffff8881092e5518 RDI: ffff88810cd02180 [ 47.914747][ T396] ? __kasan_check_write+0x14/0x20 [ 47.918788][ T359] RBP: ffffc90000d77960 R08: dffffc0000000000 R09: ffff88810cd02188 [ 47.918804][ T359] R10: 0000000000000000 R11: dffffc0000000001 R12: dffffc0000000000 [ 47.923499][ T396] ? pidfd_show_fdinfo+0x2b0/0x2b0 [ 47.927644][ T359] R13: ffff88811cdc7748 R14: 1ffff1180000000a R15: ffff88811d89d620 [ 47.927662][ T359] FS: 0000555555cd6480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 47.932092][ T396] ? vfs_write+0x9ec/0x1110 [ 47.936582][ T359] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.936597][ T359] CR2: ffffed180000000a CR3: 0000000123ff9000 CR4: 00000000003506a0 [ 47.936615][ T359] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.942043][ T396] kernel_clone+0x21e/0x9e0 [ 47.946825][ T359] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.946854][ T359] Kernel panic - not syncing: Fatal exception [ 47.947108][ T359] Kernel Offset: disabled [ 48.286883][ T359] Rebooting in 86400 seconds..