------------[ cut here ]------------
WARNING: CPU: 1 PID: 1 at mm/slub.c:4550 slab_free_after_rcu_debug+0x18b/0x270 mm/slub.c:4550
Modules linked in:
CPU: 1 UID: 0 PID: 1 Comm: swapper/0 Not tainted 6.11.0-rc2-next-20240807-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024
RIP: 0010:slab_free_after_rcu_debug+0x18b/0x270 mm/slub.c:4550
Code: 48 89 04 19 48 8d 4a 08 49 8b 34 24 65 48 0f c7 0e 75 c8 4c 89 f7 48 83 c4 08 5b 41 5c 41 5d 41 5e 41 5f 5d e9 36 55 ff ff 90 <0f> 0b 90 eb 92 90 0f 0b 90 eb 8c 90 0f 0b 90 eb 86 41 8b 54 24 1c
RSP: 0000:ffffc90000a18bc0 EFLAGS: 00010286
RAX: ffff88823be00000 RBX: ffff88802b75ca00 RCX: 00000000000a6fe0
RDX: ffffea0000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc90000a18e30 R08: ffffffff8142d3dc R09: 1ffffffff26e96f3
R10: dffffc0000000000 R11: ffffffff81f100d0 R12: dffffc0000000000
R13: ffffffff817bf146 R14: ffff88823bea6fe0 R15: ffffea0000add600
FS: 0000000000000000(0000) GS:ffff8880b9100000(0000) knlGS:0000000000000000
CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000000000 CR3: 000000000e734000 CR4: 00000000003506f0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
rcu_do_batch kernel/rcu/tree.c:2569 [inline]
rcu_core+0xafd/0x1830 kernel/rcu/tree.c:2843
handle_softirqs+0x2c4/0x970 kernel/softirq.c:554
__do_softirq kernel/softirq.c:588 [inline]
invoke_softirq kernel/softirq.c:428 [inline]
__irq_exit_rcu+0xf4/0x1c0 kernel/softirq.c:637
irq_exit_rcu+0x9/0x30 kernel/softirq.c:649
instr_sysvec_apic_timer_interrupt arch/x86/kernel/apic/apic.c:1043 [inline]
sysvec_apic_timer_interrupt+0xa6/0xc0 arch/x86/kernel/apic/apic.c:1043
asm_sysvec_apic_timer_interrupt+0x1a/0x20 arch/x86/include/asm/idtentry.h:702
RIP: 0010:console_flush_all+0x9f7/0xf50 kernel/printk/printk.c:3103
Code: 20 00 90 0f 0b 90 e9 f3 f9 ff ff e8 03 0f 20 00 e8 7e 4d 49 0a 4d 85 f6 74 c0 e8 f4 0e 20 00 fb 49 bd 00 00 00 00 00 fc ff df <43> 80 3c 2f 00 48 8b 5c 24 30 74 08 48 89 df e8 b5 64 88 00 4c 8b
RSP: 0000:ffffc90000067420 EFLAGS: 00000293
RAX: ffffffff8173f26c RBX: 0000000000000000 RCX: ffff8880176f0000
RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
RBP: ffffc900000675b0 R08: ffffffff8173f213 R09: 1ffffffff26e96f0
R10: dffffc0000000000 R11: fffffbfff26e96f1 R12: ffffffff8f139ee0
R13: dffffc0000000000 R14: 0000000000000200 R15: 1ffffffff1e273e7
console_unlock+0x13b/0x4d0 kernel/printk/printk.c:3173
vprintk_emit+0x7a1/0x900 kernel/printk/printk.c:2423
_printk+0xd5/0x120 kernel/printk/printk.c:2450
sock_register+0x1e0/0x2f0 net/socket.c:3238
vsock_init+0x12d/0x1b0 net/vmw_vsock/af_vsock.c:2510
do_one_initcall+0x248/0x880 init/main.c:1267
do_initcall_level+0x157/0x210 init/main.c:1329
do_initcalls+0x3f/0x80 init/main.c:1345
kernel_init_freeable+0x435/0x5d0 init/main.c:1578
kernel_init+0x1d/0x2b0 init/main.c:1467
ret_from_fork+0x4b/0x80 arch/x86/kernel/process.c:144
ret_from_fork_asm+0x1a/0x30 arch/x86/entry/entry_64.S:244
----------------
Code disassembly (best guess):
0: 20 00 and %al,(%rax)
2: 90 nop
3: 0f 0b ud2
5: 90 nop
6: e9 f3 f9 ff ff jmp 0xfffff9fe
b: e8 03 0f 20 00 call 0x200f13
10: e8 7e 4d 49 0a call 0xa494d93
15: 4d 85 f6 test %r14,%r14
18: 74 c0 je 0xffffffda
1a: e8 f4 0e 20 00 call 0x200f13
1f: fb sti
20: 49 bd 00 00 00 00 00 movabs $0xdffffc0000000000,%r13
27: fc ff df
* 2a: 43 80 3c 2f 00 cmpb $0x0,(%r15,%r13,1) <-- trapping instruction
2f: 48 8b 5c 24 30 mov 0x30(%rsp),%rbx
34: 74 08 je 0x3e
36: 48 89 df mov %rbx,%rdi
39: e8 b5 64 88 00 call 0x8864f3
3e: 4c rex.WR
3f: 8b .byte 0x8b