Warning: Permanently added '10.128.1.224' (ED25519) to the list of known hosts. 2025/07/28 23:23:20 ignoring optional flag "sandboxArg"="0" 2025/07/28 23:23:20 ignoring optional flag "type"="gce" 2025/07/28 23:23:20 parsed 1 programs [ 46.028963][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 46.028977][ T30] audit: type=1400 audit(1753745000.588:92): avc: denied { unlink } for pid=328 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2025/07/28 23:23:20 executed programs: 0 [ 46.079662][ T328] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 46.137231][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.144539][ T335] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.152318][ T335] device bridge_slave_0 entered promiscuous mode [ 46.159699][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.166963][ T335] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.174629][ T335] device bridge_slave_1 entered promiscuous mode [ 46.222383][ T335] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.229863][ T335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.237266][ T335] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.244352][ T335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.263530][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.271077][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.278966][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.286606][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.296411][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.304895][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.312144][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.321228][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.329486][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.336624][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.349141][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.358838][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.372564][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.383974][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.392265][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.400089][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.408179][ T335] device veth0_vlan entered promiscuous mode [ 46.418559][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.428089][ T335] device veth1_macvtap entered promiscuous mode [ 46.437533][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.447643][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.469019][ T346] FAULT_INJECTION: forcing a failure. [ 46.469019][ T346] name failslab, interval 1, probability 0, space 0, times 1 [ 46.482331][ T346] CPU: 0 PID: 346 Comm: syz-executor.0 Not tainted 5.15.189-syzkaller-1081268-ga71626bd56a5 #0 [ 46.493434][ T346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 46.503849][ T346] Call Trace: [ 46.507307][ T346] [ 46.510241][ T346] __dump_stack+0x21/0x30 [ 46.514602][ T346] dump_stack_lvl+0xee/0x150 [ 46.519303][ T346] ? show_regs_print_info+0x20/0x20 [ 46.524767][ T346] dump_stack+0x15/0x20 [ 46.529220][ T346] should_fail+0x3c1/0x510 [ 46.533649][ T346] __should_failslab+0xa4/0xe0 [ 46.538518][ T346] should_failslab+0x9/0x20 [ 46.543137][ T346] slab_pre_alloc_hook+0x3b/0xe0 [ 46.548312][ T346] ? anon_vma_fork+0x200/0x510 [ 46.553186][ T346] kmem_cache_alloc+0x44/0x260 [ 46.558605][ T346] anon_vma_fork+0x200/0x510 [ 46.563300][ T346] copy_mm+0x9d1/0x1390 [ 46.567469][ T346] ? copy_signal+0x600/0x600 [ 46.572348][ T346] ? __init_rwsem+0xfc/0x1d0 [ 46.576946][ T346] ? copy_signal+0x4cb/0x600 [ 46.581812][ T346] copy_process+0x115c/0x3210 [ 46.586505][ T346] ? __kasan_check_write+0x14/0x20 [ 46.591673][ T346] ? __pidfd_prepare+0x150/0x150 [ 46.596638][ T346] ? security_file_permission+0x83/0xa0 [ 46.602193][ T346] kernel_clone+0x23f/0x940 [ 46.606730][ T346] ? create_io_thread+0x130/0x130 [ 46.611854][ T346] ? __kasan_check_write+0x14/0x20 [ 46.616996][ T346] ? mutex_unlock+0x89/0x220 [ 46.621593][ T346] __x64_sys_clone+0x176/0x1d0 [ 46.626539][ T346] ? __kasan_check_write+0x14/0x20 [ 46.632002][ T346] ? __ia32_sys_vfork+0xf0/0xf0 [ 46.637036][ T346] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 46.643290][ T346] x64_sys_call+0x41f/0x9a0 [ 46.647999][ T346] do_syscall_64+0x4c/0xa0 [ 46.652522][ T346] ? clear_bhb_loop+0x50/0xa0 [ 46.657220][ T346] ? clear_bhb_loop+0x50/0xa0 [ 46.661921][ T346] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.668082][ T346] RIP: 0033:0x7fb42aaa8ae9 [ 46.672610][ T346] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.692633][ T346] RSP: 002b:00007fb42a62b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 46.701073][ T346] RAX: ffffffffffffffda RBX: 00007fb42abc7f80 RCX: 00007fb42aaa8ae9 [ 46.709205][ T346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c22a000 [ 46.717331][ T346] RBP: 00007fb42a62b120 R08: 0000000000000000 R09: 0000000000000000 [ 46.725584][ T346] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 46.733754][ T346] R13: 000000000000000b R14: 00007fb42abc7f80 R15: 00007ffea9f1b3e8 [ 46.741967][ T346] [ 46.754223][ T349] FAULT_INJECTION: forcing a failure. [ 46.754223][ T349] name failslab, interval 1, probability 0, space 0, times 0 [ 46.767298][ T349] CPU: 0 PID: 349 Comm: syz-executor.0 Not tainted 5.15.189-syzkaller-1081268-ga71626bd56a5 #0 [ 46.777752][ T349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 46.788008][ T349] Call Trace: [ 46.791412][ T349] [ 46.794353][ T349] __dump_stack+0x21/0x30 [ 46.798771][ T349] dump_stack_lvl+0xee/0x150 [ 46.803359][ T349] ? show_regs_print_info+0x20/0x20 [ 46.808794][ T349] dump_stack+0x15/0x20 [ 46.812956][ T349] should_fail+0x3c1/0x510 [ 46.817548][ T349] __should_failslab+0xa4/0xe0 [ 46.822334][ T349] should_failslab+0x9/0x20 [ 46.826841][ T349] slab_pre_alloc_hook+0x3b/0xe0 [ 46.831783][ T349] ? anon_vma_clone+0xc0/0x500 [ 46.836571][ T349] kmem_cache_alloc+0x44/0x260 [ 46.841425][ T349] anon_vma_clone+0xc0/0x500 [ 46.846017][ T349] anon_vma_fork+0x8c/0x510 [ 46.850526][ T349] copy_mm+0x9d1/0x1390 [ 46.854807][ T349] ? copy_signal+0x600/0x600 [ 46.859395][ T349] ? __init_rwsem+0xfc/0x1d0 [ 46.864088][ T349] ? copy_signal+0x4cb/0x600 [ 46.868798][ T349] copy_process+0x115c/0x3210 [ 46.873621][ T349] ? __kasan_check_write+0x14/0x20 [ 46.878732][ T349] ? __pidfd_prepare+0x150/0x150 [ 46.883789][ T349] ? security_file_permission+0x83/0xa0 [ 46.889380][ T349] kernel_clone+0x23f/0x940 [ 46.893885][ T349] ? create_io_thread+0x130/0x130 [ 46.898908][ T349] ? __kasan_check_write+0x14/0x20 [ 46.904018][ T349] ? mutex_unlock+0x89/0x220 [ 46.908608][ T349] __x64_sys_clone+0x176/0x1d0 [ 46.913371][ T349] ? __kasan_check_write+0x14/0x20 [ 46.918671][ T349] ? __ia32_sys_vfork+0xf0/0xf0 [ 46.923634][ T349] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 46.929726][ T349] x64_sys_call+0x41f/0x9a0 [ 46.934244][ T349] do_syscall_64+0x4c/0xa0 [ 46.938669][ T349] ? clear_bhb_loop+0x50/0xa0 [ 46.943353][ T349] ? clear_bhb_loop+0x50/0xa0 [ 46.948041][ T349] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.953938][ T349] RIP: 0033:0x7fb42aaa8ae9 [ 46.958362][ T349] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.978093][ T349] RSP: 002b:00007fb42a62b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 46.986625][ T349] RAX: ffffffffffffffda RBX: 00007fb42abc7f80 RCX: 00007fb42aaa8ae9 [ 46.995124][ T349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c22a000 [ 47.003482][ T349] RBP: 00007fb42a62b120 R08: 0000000000000000 R09: 0000000000000000 [ 47.011465][ T349] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 47.019649][ T349] R13: 000000000000000b R14: 00007fb42abc7f80 R15: 00007ffea9f1b3e8 [ 47.027719][ T349] [ 47.040693][ T351] FAULT_INJECTION: forcing a failure. [ 47.040693][ T351] name failslab, interval 1, probability 0, space 0, times 0 [ 47.053862][ T351] CPU: 1 PID: 351 Comm: syz-executor.0 Not tainted 5.15.189-syzkaller-1081268-ga71626bd56a5 #0 [ 47.064355][ T351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.074569][ T351] Call Trace: [ 47.077852][ T351] [ 47.080788][ T351] __dump_stack+0x21/0x30 [ 47.085213][ T351] dump_stack_lvl+0xee/0x150 [ 47.089901][ T351] ? show_regs_print_info+0x20/0x20 [ 47.095369][ T351] dump_stack+0x15/0x20 [ 47.099671][ T351] should_fail+0x3c1/0x510 [ 47.104216][ T351] __should_failslab+0xa4/0xe0 [ 47.108988][ T351] should_failslab+0x9/0x20 [ 47.113490][ T351] slab_pre_alloc_hook+0x3b/0xe0 [ 47.118573][ T351] ? anon_vma_fork+0xf2/0x510 [ 47.123271][ T351] kmem_cache_alloc+0x44/0x260 [ 47.128049][ T351] anon_vma_fork+0xf2/0x510 [ 47.132569][ T351] copy_mm+0x9d1/0x1390 [ 47.136896][ T351] ? copy_signal+0x600/0x600 [ 47.141495][ T351] ? __init_rwsem+0xfc/0x1d0 [ 47.146484][ T351] ? copy_signal+0x4cb/0x600 [ 47.151096][ T351] copy_process+0x115c/0x3210 [ 47.156111][ T351] ? __kasan_check_write+0x14/0x20 [ 47.161239][ T351] ? __pidfd_prepare+0x150/0x150 [ 47.166185][ T351] ? security_file_permission+0x83/0xa0 [ 47.171737][ T351] kernel_clone+0x23f/0x940 [ 47.176340][ T351] ? create_io_thread+0x130/0x130 [ 47.181383][ T351] ? __kasan_check_write+0x14/0x20 [ 47.186507][ T351] ? mutex_unlock+0x89/0x220 [ 47.191111][ T351] __x64_sys_clone+0x176/0x1d0 [ 47.195877][ T351] ? __kasan_check_write+0x14/0x20 [ 47.200991][ T351] ? __ia32_sys_vfork+0xf0/0xf0 [ 47.206044][ T351] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 47.212381][ T351] x64_sys_call+0x41f/0x9a0 [ 47.216975][ T351] do_syscall_64+0x4c/0xa0 [ 47.221486][ T351] ? clear_bhb_loop+0x50/0xa0 [ 47.226183][ T351] ? clear_bhb_loop+0x50/0xa0 [ 47.231007][ T351] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.236908][ T351] RIP: 0033:0x7fb42aaa8ae9 [ 47.241325][ T351] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.261028][ T351] RSP: 002b:00007fb42a62b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 47.269529][ T351] RAX: ffffffffffffffda RBX: 00007fb42abc7f80 RCX: 00007fb42aaa8ae9 [ 47.277884][ T351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c22a000 [ 47.285899][ T351] RBP: 00007fb42a62b120 R08: 0000000000000000 R09: 0000000000000000 [ 47.294151][ T351] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 47.302133][ T351] R13: 000000000000000b R14: 00007fb42abc7f80 R15: 00007ffea9f1b3e8 [ 47.310195][ T351] [ 47.322402][ T354] FAULT_INJECTION: forcing a failure. [ 47.322402][ T354] name failslab, interval 1, probability 0, space 0, times 0 [ 47.335323][ T354] CPU: 1 PID: 354 Comm: syz-executor.0 Not tainted 5.15.189-syzkaller-1081268-ga71626bd56a5 #0 [ 47.345942][ T354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.356134][ T354] Call Trace: [ 47.359544][ T354] [ 47.362478][ T354] __dump_stack+0x21/0x30 [ 47.366819][ T354] dump_stack_lvl+0xee/0x150 [ 47.371420][ T354] ? show_regs_print_info+0x20/0x20 [ 47.376620][ T354] dump_stack+0x15/0x20 [ 47.380773][ T354] should_fail+0x3c1/0x510 [ 47.385188][ T354] __should_failslab+0xa4/0xe0 [ 47.389957][ T354] should_failslab+0x9/0x20 [ 47.394577][ T354] slab_pre_alloc_hook+0x3b/0xe0 [ 47.399774][ T354] ? anon_vma_fork+0x200/0x510 [ 47.405497][ T354] kmem_cache_alloc+0x44/0x260 [ 47.410290][ T354] anon_vma_fork+0x200/0x510 [ 47.414889][ T354] copy_mm+0x9d1/0x1390 [ 47.419045][ T354] ? copy_signal+0x600/0x600 [ 47.423654][ T354] ? __init_rwsem+0xfc/0x1d0 [ 47.428249][ T354] ? copy_signal+0x4cb/0x600 [ 47.432847][ T354] copy_process+0x115c/0x3210 [ 47.437632][ T354] ? __kasan_check_write+0x14/0x20 [ 47.442829][ T354] ? __pidfd_prepare+0x150/0x150 [ 47.447765][ T354] ? security_file_permission+0x83/0xa0 [ 47.453529][ T354] kernel_clone+0x23f/0x940 [ 47.458055][ T354] ? create_io_thread+0x130/0x130 [ 47.463089][ T354] ? __kasan_check_write+0x14/0x20 [ 47.468387][ T354] ? mutex_unlock+0x89/0x220 [ 47.473008][ T354] __x64_sys_clone+0x176/0x1d0 [ 47.477792][ T354] ? __kasan_check_write+0x14/0x20 [ 47.482952][ T354] ? __ia32_sys_vfork+0xf0/0xf0 [ 47.487809][ T354] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 47.493885][ T354] x64_sys_call+0x41f/0x9a0 [ 47.498491][ T354] do_syscall_64+0x4c/0xa0 [ 47.503049][ T354] ? clear_bhb_loop+0x50/0xa0 [ 47.508033][ T354] ? clear_bhb_loop+0x50/0xa0 [ 47.512867][ T354] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.518871][ T354] RIP: 0033:0x7fb42aaa8ae9 [ 47.523530][ T354] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.543434][ T354] RSP: 002b:00007fb42a62b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 47.551863][ T354] RAX: ffffffffffffffda RBX: 00007fb42abc7f80 RCX: 00007fb42aaa8ae9 [ 47.563389][ T354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c22a000 [ 47.571376][ T354] RBP: 00007fb42a62b120 R08: 0000000000000000 R09: 0000000000000000 [ 47.579353][ T354] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 47.587331][ T354] R13: 000000000000000b R14: 00007fb42abc7f80 R15: 00007ffea9f1b3e8 [ 47.595425][ T354] [ 47.608360][ T356] FAULT_INJECTION: forcing a failure. [ 47.608360][ T356] name failslab, interval 1, probability 0, space 0, times 0 [ 47.621269][ T356] CPU: 1 PID: 356 Comm: syz-executor.0 Not tainted 5.15.189-syzkaller-1081268-ga71626bd56a5 #0 [ 47.631789][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.642056][ T356] Call Trace: [ 47.645341][ T356] [ 47.648398][ T356] __dump_stack+0x21/0x30 [ 47.652734][ T356] dump_stack_lvl+0xee/0x150 [ 47.657345][ T356] ? show_regs_print_info+0x20/0x20 [ 47.662668][ T356] dump_stack+0x15/0x20 [ 47.666882][ T356] should_fail+0x3c1/0x510 [ 47.671315][ T356] __should_failslab+0xa4/0xe0 [ 47.676082][ T356] should_failslab+0x9/0x20 [ 47.680655][ T356] slab_pre_alloc_hook+0x3b/0xe0 [ 47.685605][ T356] ? anon_vma_fork+0x200/0x510 [ 47.690379][ T356] kmem_cache_alloc+0x44/0x260 [ 47.695322][ T356] anon_vma_fork+0x200/0x510 [ 47.699917][ T356] copy_mm+0x9d1/0x1390 [ 47.704102][ T356] ? copy_signal+0x600/0x600 [ 47.708688][ T356] ? __init_rwsem+0xfc/0x1d0 [ 47.713367][ T356] ? copy_signal+0x4cb/0x600 [ 47.718052][ T356] copy_process+0x115c/0x3210 [ 47.722767][ T356] ? __kasan_check_write+0x14/0x20 [ 47.728074][ T356] ? __pidfd_prepare+0x150/0x150 [ 47.733113][ T356] ? security_file_permission+0x83/0xa0 [ 47.738688][ T356] kernel_clone+0x23f/0x940 [ 47.743204][ T356] ? create_io_thread+0x130/0x130 [ 47.748412][ T356] ? __kasan_check_write+0x14/0x20 [ 47.753781][ T356] ? mutex_unlock+0x89/0x220 [ 47.758708][ T356] __x64_sys_clone+0x176/0x1d0 [ 47.763540][ T356] ? __kasan_check_write+0x14/0x20 [ 47.769202][ T356] ? __ia32_sys_vfork+0xf0/0xf0 [ 47.774088][ T356] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 47.780215][ T356] x64_sys_call+0x41f/0x9a0 [ 47.784825][ T356] do_syscall_64+0x4c/0xa0 [ 47.789317][ T356] ? clear_bhb_loop+0x50/0xa0 [ 47.794134][ T356] ? clear_bhb_loop+0x50/0xa0 [ 47.798818][ T356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.804863][ T356] RIP: 0033:0x7fb42aaa8ae9 [ 47.809459][ T356] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.829954][ T356] RSP: 002b:00007fb42a62b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 47.838404][ T356] RAX: ffffffffffffffda RBX: 00007fb42abc7f80 RCX: 00007fb42aaa8ae9 [ 47.846513][ T356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c22a000 [ 47.854576][ T356] RBP: 00007fb42a62b120 R08: 0000000000000000 R09: 0000000000000000 [ 47.862576][ T356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 47.870733][ T356] R13: 000000000000000b R14: 00007fb42abc7f80 R15: 00007ffea9f1b3e8 [ 47.878714][ T356] [ 47.883258][ T356] ================================================================== [ 47.891433][ T356] BUG: KASAN: double-free or invalid-free in kfree+0xc4/0x270 [ 47.899172][ T356] [ 47.901498][ T356] CPU: 1 PID: 356 Comm: syz-executor.0 Not tainted 5.15.189-syzkaller-1081268-ga71626bd56a5 #0 [ 47.911959][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 47.922384][ T356] Call Trace: [ 47.925671][ T356] [ 47.928623][ T356] __dump_stack+0x21/0x30 [ 47.933044][ T356] dump_stack_lvl+0xee/0x150 [ 47.937638][ T356] ? show_regs_print_info+0x20/0x20 [ 47.942950][ T356] ? load_image+0x3a0/0x3a0 [ 47.947458][ T356] ? kmem_cache_free+0x100/0x320 [ 47.952395][ T356] print_address_description+0x7f/0x2c0 [ 47.958131][ T356] ? kfree+0xc4/0x270 [ 47.962124][ T356] kasan_report_invalid_free+0x58/0x90 [ 47.967633][ T356] ? kfree+0xc4/0x270 [ 47.971647][ T356] ____kasan_slab_free+0x13d/0x160 [ 47.976766][ T356] __kasan_slab_free+0x11/0x20 [ 47.981640][ T356] slab_free_freelist_hook+0xc2/0x190 [ 47.987462][ T356] ? anon_vma_name_free+0x15/0x20 [ 47.992632][ T356] kfree+0xc4/0x270 [ 47.996450][ T356] ? anon_vma_name_free+0x15/0x20 [ 48.001487][ T356] anon_vma_name_free+0x15/0x20 [ 48.006358][ T356] vm_area_free_no_check+0xa9/0x140 [ 48.011657][ T356] copy_mm+0xe77/0x1390 [ 48.015835][ T356] ? copy_signal+0x600/0x600 [ 48.020560][ T356] ? __init_rwsem+0xfc/0x1d0 [ 48.025389][ T356] ? copy_signal+0x4cb/0x600 [ 48.029994][ T356] copy_process+0x115c/0x3210 [ 48.034676][ T356] ? __kasan_check_write+0x14/0x20 [ 48.039919][ T356] ? __pidfd_prepare+0x150/0x150 [ 48.044865][ T356] ? security_file_permission+0x83/0xa0 [ 48.050539][ T356] kernel_clone+0x23f/0x940 [ 48.055103][ T356] ? create_io_thread+0x130/0x130 [ 48.060145][ T356] ? __kasan_check_write+0x14/0x20 [ 48.065271][ T356] ? mutex_unlock+0x89/0x220 [ 48.069982][ T356] __x64_sys_clone+0x176/0x1d0 [ 48.074757][ T356] ? __kasan_check_write+0x14/0x20 [ 48.079980][ T356] ? __ia32_sys_vfork+0xf0/0xf0 [ 48.085035][ T356] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 48.091120][ T356] x64_sys_call+0x41f/0x9a0 [ 48.095736][ T356] do_syscall_64+0x4c/0xa0 [ 48.100387][ T356] ? clear_bhb_loop+0x50/0xa0 [ 48.105089][ T356] ? clear_bhb_loop+0x50/0xa0 [ 48.109950][ T356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.115985][ T356] RIP: 0033:0x7fb42aaa8ae9 [ 48.120403][ T356] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.140115][ T356] RSP: 002b:00007fb42a62b078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 48.148537][ T356] RAX: ffffffffffffffda RBX: 00007fb42abc7f80 RCX: 00007fb42aaa8ae9 [ 48.156635][ T356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000c22a000 [ 48.164674][ T356] RBP: 00007fb42a62b120 R08: 0000000000000000 R09: 0000000000000000 [ 48.172909][ T356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 48.180986][ T356] R13: 000000000000000b R14: 00007fb42abc7f80 R15: 00007ffea9f1b3e8 [ 48.188965][ T356] [ 48.191982][ T356] [ 48.194397][ T356] Allocated by task 334: [ 48.198720][ T356] __kasan_slab_alloc+0xbd/0xf0 [ 48.203798][ T356] slab_post_alloc_hook+0x4f/0x2b0 [ 48.208921][ T356] kmem_cache_alloc+0xf7/0x260 [ 48.213692][ T356] vm_area_dup+0x26/0x210 [ 48.218110][ T356] copy_mm+0x93a/0x1390 [ 48.222352][ T356] copy_process+0x115c/0x3210 [ 48.227219][ T356] kernel_clone+0x23f/0x940 [ 48.231727][ T356] __x64_sys_clone+0x176/0x1d0 [ 48.236678][ T356] x64_sys_call+0x41f/0x9a0 [ 48.241270][ T356] do_syscall_64+0x4c/0xa0 [ 48.245687][ T356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.251580][ T356] [ 48.254002][ T356] The buggy address belongs to the object at ffff8881235d0250 [ 48.254002][ T356] which belongs to the cache vm_area_struct of size 232 [ 48.268539][ T356] The buggy address is located 88 bytes inside of [ 48.268539][ T356] 232-byte region [ffff8881235d0250, ffff8881235d0338) [ 48.281957][ T356] The buggy address belongs to the page: [ 48.288286][ T356] page:ffffea00048d7400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1235d0 [ 48.298535][ T356] flags: 0x4000000000000200(slab|zone=1) [ 48.304511][ T356] raw: 4000000000000200 0000000000000000 dead000000000122 ffff888100187380 [ 48.313257][ T356] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 48.322191][ T356] page dumped because: kasan: bad access detected [ 48.328781][ T356] page_owner tracks the page as allocated [ 48.334508][ T356] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 334, ts 46106076771, free_ts 39953406485 [ 48.350400][ T356] post_alloc_hook+0x192/0x1b0 [ 48.355264][ T356] prep_new_page+0x1c/0x110 [ 48.359785][ T356] get_page_from_freelist+0x2cc5/0x2d50 [ 48.366071][ T356] __alloc_pages+0x18f/0x440 [ 48.370734][ T356] new_slab+0xa1/0x4d0 [ 48.374921][ T356] ___slab_alloc+0x381/0x810 [ 48.379707][ T356] __slab_alloc+0x49/0x90 [ 48.384046][ T356] kmem_cache_alloc+0x138/0x260 [ 48.388901][ T356] vm_area_dup+0x26/0x210 [ 48.393266][ T356] copy_mm+0x93a/0x1390 [ 48.397424][ T356] copy_process+0x115c/0x3210 [ 48.402106][ T356] kernel_clone+0x23f/0x940 [ 48.406618][ T356] __x64_sys_clone+0x176/0x1d0 [ 48.411385][ T356] x64_sys_call+0x41f/0x9a0 [ 48.415885][ T356] do_syscall_64+0x4c/0xa0 [ 48.420339][ T356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.426251][ T356] page last free stack trace: [ 48.430927][ T356] free_unref_page_prepare+0x542/0x550 [ 48.436501][ T356] free_unref_page+0xa2/0x550 [ 48.441327][ T356] __put_page+0xad/0xe0 [ 48.445504][ T356] anon_pipe_buf_release+0x183/0x200 [ 48.450810][ T356] pipe_read+0x53d/0xfe0 [ 48.455323][ T356] vfs_read+0x68b/0xbe0 [ 48.459499][ T356] ksys_read+0x140/0x240 [ 48.463959][ T356] __x64_sys_read+0x7b/0x90 [ 48.468478][ T356] x64_sys_call+0x96d/0x9a0 [ 48.473188][ T356] do_syscall_64+0x4c/0xa0 [ 48.477628][ T356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.483636][ T356] [ 48.486019][ T356] Memory state around the buggy address: [ 48.491833][ T356] ffff8881235d0180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 48.500002][ T356] ffff8881235d0200: 00 00 fc fc fc fc fc fc fc fc 00 00 00 00 00 00 [ 48.508366][ T356] >ffff8881235d0280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 48.516438][ T356] ^ [ 48.521826][ T356] ffff8881235d0300: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc 00 [ 48.529900][ T356] ffff8881235d0380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 48.538252][ T356] ================================================================== [ 48.546331][ T356] Disabling lock debugging due to kernel taint [ 48.556749][ T30] audit: type=1400 audit(1753745003.108:93): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 48.578970][ T30] audit: type=1400 audit(1753745003.108:94): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.582855][ T335] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 48.606333][ T30] audit: type=1400 audit(1753745003.108:95): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.612361][ T335] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 48.612380][ T335] CPU: 1 PID: 335 Comm: syz-executor.0 Tainted: G B 5.15.189-syzkaller-1081268-ga71626bd56a5 #0 [ 48.612402][ T335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 48.612414][ T335] RIP: 0010:__rb_insert_augmented+0xa9/0x720 [ 48.633977][ T30] audit: type=1400 audit(1753745003.108:96): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 48.642222][ T335] Code: 3a ff 49 8b 07 a8 01 0f 85 53 06 00 00 4c 89 65 c8 48 89 45 d0 4c 8d 70 08 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 00 00 fc ff df <80> 3c 03 00 74 08 4c 89 f7 e8 79 c3 3a ff 4d 8b 26 4d 39 fc 74 34 [ 48.642242][ T335] RSP: 0018:ffffc90000af78c0 EFLAGS: 00010202 [ 48.642260][ T335] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: dffffc0000000000 [ 48.642274][ T335] RDX: ffffffff819af490 RSI: ffff88810cc78920 RDI: ffff88810dad34f8 [ 48.642288][ T335] RBP: ffffc90000af7920 R08: dffffc0000000000 R09: ffff88810dad3500 [ 48.654775][ T30] audit: type=1400 audit(1753745003.108:97): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.664625][ T335] R10: ffffed1021b5a6a2 R11: 1ffff11021b5a6a0 R12: ffff88810dad34f8 [ 48.664643][ T335] R13: 1ffff110246ba055 R14: 0000000000000008 R15: ffff8881235d02a8 [ 48.664657][ T335] FS: 00005555821c1480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 48.670792][ T30] audit: type=1400 audit(1753745003.108:98): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.691905][ T335] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.691923][ T335] CR2: 00007fb42b6f16be CR3: 00000001235c1000 CR4: 00000000003506a0 [ 48.691940][ T335] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.691952][ T335] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.712738][ T30] audit: type=1400 audit(1753745003.108:99): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 48.719158][ T335] Call Trace: [ 48.719167][ T335] [ 48.719174][ T335] ? clear_nonspinnable+0x60/0x60 [ 48.719201][ T335] ? anon_vma_interval_tree_iter_next+0x380/0x380 [ 48.884847][ T335] vma_interval_tree_insert_after+0x2a1/0x2b0 [ 48.891026][ T335] copy_mm+0xb1a/0x1390 [ 48.895194][ T335] ? copy_signal+0x600/0x600 [ 48.899791][ T335] ? __init_rwsem+0xfc/0x1d0 [ 48.904384][ T335] ? copy_signal+0x4cb/0x600 [ 48.909084][ T335] copy_process+0x115c/0x3210 [ 48.913791][ T335] ? __pidfd_prepare+0x150/0x150 [ 48.918735][ T335] kernel_clone+0x23f/0x940 [ 48.923241][ T335] ? do_user_addr_fault+0xa64/0x1180 [ 48.928531][ T335] ? create_io_thread+0x130/0x130 [ 48.933558][ T335] __x64_sys_clone+0x176/0x1d0 [ 48.938552][ T335] ? __ia32_sys_vfork+0xf0/0xf0 [ 48.943406][ T335] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 48.949569][ T335] x64_sys_call+0x41f/0x9a0 [ 48.954159][ T335] do_syscall_64+0x4c/0xa0 [ 48.958582][ T335] ? clear_bhb_loop+0x50/0xa0 [ 48.963259][ T335] ? clear_bhb_loop+0x50/0xa0 [ 48.967941][ T335] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.973921][ T335] RIP: 0033:0x7fb42aaa5b13 [ 48.978333][ T335] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 48.998227][ T335] RSP: 002b:00007ffea9f1b5f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 49.006948][ T335] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fb42aaa5b13 [ 49.015129][ T335] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 49.023229][ T335] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 49.031300][ T335] R10: 00005555821c1750 R11: 0000000000000246 R12: 0000000000000001 [ 49.039489][ T335] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 49.047649][ T335] [ 49.050681][ T335] Modules linked in: [ 49.055834][ T335] ---[ end trace 1cd3c36004968f7a ]--- [ 49.061494][ T335] RIP: 0010:__rb_insert_augmented+0xa9/0x720 [ 49.067595][ T335] Code: 3a ff 49 8b 07 a8 01 0f 85 53 06 00 00 4c 89 65 c8 48 89 45 d0 4c 8d 70 08 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 00 00 fc ff df <80> 3c 03 00 74 08 4c 89 f7 e8 79 c3 3a ff 4d 8b 26 4d 39 fc 74 34 [ 49.088334][ T335] RSP: 0018:ffffc90000af78c0 EFLAGS: 00010202 [ 49.094744][ T335] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: dffffc0000000000 [ 49.103205][ T335] RDX: ffffffff819af490 RSI: ffff88810cc78920 RDI: ffff88810dad34f8 [ 49.111548][ T335] RBP: ffffc90000af7920 R08: dffffc0000000000 R09: ffff88810dad3500 [ 49.119559][ T335] R10: ffffed1021b5a6a2 R11: 1ffff11021b5a6a0 R12: ffff88810dad34f8 [ 49.127556][ T335] R13: 1ffff110246ba055 R14: 0000000000000008 R15: ffff8881235d02a8 [ 49.135669][ T335] FS: 00005555821c1480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 49.144756][ T335] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.151673][ T335] CR2: 00007fb42b6f16be CR3: 00000001235c1000 CR4: 00000000003506a0 [ 49.160019][ T335] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.168591][ T335] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.176608][ T335] Kernel panic - not syncing: Fatal exception [ 49.182923][ T335] Kernel Offset: disabled [ 49.187260][ T335] Rebooting in 86400 seconds..