Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. 2026/03/22 11:24:37 ignoring optional flag "type"="gce" 2026/03/22 11:24:37 parsed 1 programs 2026/03/22 11:24:37 executed programs: 0 [ 36.275030][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.282128][ T326] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.289400][ T326] device bridge_slave_0 entered promiscuous mode [ 36.296185][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.303217][ T326] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.310431][ T326] device bridge_slave_1 entered promiscuous mode [ 36.344844][ T326] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.351982][ T326] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.359200][ T326] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.366222][ T326] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.381765][ T236] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.389078][ T236] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.396466][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.403877][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.412476][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.420613][ T236] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.427657][ T236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.436170][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.444560][ T236] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.451940][ T236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.462747][ T236] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.471835][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.484199][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.495492][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.503597][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.511022][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.519129][ T326] device veth0_vlan entered promiscuous mode [ 36.528340][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.537133][ T326] device veth1_macvtap entered promiscuous mode [ 36.545652][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.555220][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.573997][ T331] FAULT_INJECTION: forcing a failure. [ 36.573997][ T331] name failslab, interval 1, probability 0, space 0, times 1 [ 36.587442][ T331] CPU: 0 PID: 331 Comm: syz-executor.0 Not tainted syzkaller #0 [ 36.595079][ T331] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 36.605129][ T331] Call Trace: [ 36.608487][ T331] [ 36.611398][ T331] __dump_stack+0x21/0x30 [ 36.615718][ T331] dump_stack_lvl+0x110/0x170 [ 36.620455][ T331] ? show_regs_print_info+0x20/0x20 [ 36.625634][ T331] dump_stack+0x15/0x20 [ 36.629781][ T331] should_fail+0x3c1/0x510 [ 36.634187][ T331] __should_failslab+0xa4/0xe0 [ 36.638937][ T331] should_failslab+0x9/0x20 [ 36.643421][ T331] slab_pre_alloc_hook+0x3b/0xe0 [ 36.648337][ T331] ? anon_vma_fork+0xf2/0x510 [ 36.652989][ T331] kmem_cache_alloc+0x44/0x260 [ 36.657741][ T331] anon_vma_fork+0xf2/0x510 [ 36.662233][ T331] copy_mm+0x9de/0x13c0 [ 36.666363][ T331] ? copy_signal+0x600/0x600 [ 36.671103][ T331] ? __init_rwsem+0xfc/0x1d0 [ 36.675678][ T331] ? copy_signal+0x4cb/0x600 [ 36.680240][ T331] copy_process+0x117c/0x3250 [ 36.684891][ T331] ? __kasan_check_write+0x14/0x20 [ 36.690078][ T331] ? __pidfd_prepare+0x150/0x150 [ 36.695101][ T331] kernel_clone+0x233/0x960 [ 36.699581][ T331] ? create_io_thread+0x170/0x170 [ 36.704679][ T331] ? __kasan_check_write+0x14/0x20 [ 36.709777][ T331] ? mutex_unlock+0x8f/0x230 [ 36.714340][ T331] __x64_sys_clone+0x198/0x210 [ 36.719079][ T331] ? __kasan_check_write+0x14/0x20 [ 36.724167][ T331] ? __ia32_sys_vfork+0x130/0x130 [ 36.729186][ T331] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 36.735244][ T331] x64_sys_call+0x41f/0x9a0 [ 36.739751][ T331] do_syscall_64+0x4c/0xa0 [ 36.744160][ T331] ? clear_bhb_loop+0x50/0xa0 [ 36.748815][ T331] ? clear_bhb_loop+0x50/0xa0 [ 36.753462][ T331] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 36.759326][ T331] RIP: 0033:0x7f27cb7dd0e9 [ 36.763716][ T331] Code: 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 36.783300][ T331] RSP: 002b:00007f27cb771068 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 36.791792][ T331] RAX: ffffffffffffffda RBX: 00007f27cb90df80 RCX: 00007f27cb7dd0e9 [ 36.799744][ T331] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 36.807782][ T331] RBP: 00007f27cb771120 R08: 0000000000000000 R09: 0000000000000000 [ 36.815833][ T331] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 36.823781][ T331] R13: 000000000000000b R14: 00007f27cb90df80 R15: 00007ffd696eeae8 [ 36.831748][ T331] [ 36.842218][ T334] FAULT_INJECTION: forcing a failure. [ 36.842218][ T334] name failslab, interval 1, probability 0, space 0, times 0 [ 36.854993][ T334] CPU: 0 PID: 334 Comm: syz-executor.0 Not tainted syzkaller #0 [ 36.862625][ T334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 36.872996][ T334] Call Trace: [ 36.876262][ T334] [ 36.879185][ T334] __dump_stack+0x21/0x30 [ 36.883558][ T334] dump_stack_lvl+0x110/0x170 [ 36.888250][ T334] ? show_regs_print_info+0x20/0x20 [ 36.893435][ T334] dump_stack+0x15/0x20 [ 36.897572][ T334] should_fail+0x3c1/0x510 [ 36.901979][ T334] __should_failslab+0xa4/0xe0 [ 36.906802][ T334] should_failslab+0x9/0x20 [ 36.911291][ T334] slab_pre_alloc_hook+0x3b/0xe0 [ 36.916208][ T334] ? anon_vma_clone+0xc0/0x500 [ 36.920951][ T334] kmem_cache_alloc+0x44/0x260 [ 36.925687][ T334] anon_vma_clone+0xc0/0x500 [ 36.930250][ T334] anon_vma_fork+0x8c/0x510 [ 36.934723][ T334] copy_mm+0x9de/0x13c0 [ 36.938853][ T334] ? copy_signal+0x600/0x600 [ 36.943414][ T334] ? __init_rwsem+0xfc/0x1d0 [ 36.947988][ T334] ? copy_signal+0x4cb/0x600 [ 36.952547][ T334] copy_process+0x117c/0x3250 [ 36.957195][ T334] ? __kasan_check_write+0x14/0x20 [ 36.962277][ T334] ? __pidfd_prepare+0x150/0x150 [ 36.967190][ T334] kernel_clone+0x233/0x960 [ 36.971767][ T334] ? create_io_thread+0x170/0x170 [ 36.976782][ T334] ? __kasan_check_write+0x14/0x20 [ 36.982041][ T334] ? mutex_unlock+0x8f/0x230 [ 36.986611][ T334] __x64_sys_clone+0x198/0x210 [ 36.991353][ T334] ? __kasan_check_write+0x14/0x20 [ 36.996538][ T334] ? __ia32_sys_vfork+0x130/0x130 [ 37.001717][ T334] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 37.007885][ T334] x64_sys_call+0x41f/0x9a0 [ 37.012415][ T334] do_syscall_64+0x4c/0xa0 [ 37.016821][ T334] ? clear_bhb_loop+0x50/0xa0 [ 37.021480][ T334] ? clear_bhb_loop+0x50/0xa0 [ 37.026134][ T334] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.032032][ T334] RIP: 0033:0x7f27cb7dd0e9 [ 37.036452][ T334] Code: 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 37.056035][ T334] RSP: 002b:00007f27cb771068 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 37.064544][ T334] RAX: ffffffffffffffda RBX: 00007f27cb90df80 RCX: 00007f27cb7dd0e9 [ 37.072494][ T334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 37.080443][ T334] RBP: 00007f27cb771120 R08: 0000000000000000 R09: 0000000000000000 [ 37.088392][ T334] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 37.096342][ T334] R13: 000000000000000b R14: 00007f27cb90df80 R15: 00007ffd696eeae8 [ 37.104293][ T334] [ 37.115248][ T338] FAULT_INJECTION: forcing a failure. [ 37.115248][ T338] name failslab, interval 1, probability 0, space 0, times 0 [ 37.128363][ T338] CPU: 0 PID: 338 Comm: syz-executor.0 Not tainted syzkaller #0 [ 37.136073][ T338] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 37.146103][ T338] Call Trace: [ 37.149370][ T338] [ 37.152286][ T338] __dump_stack+0x21/0x30 [ 37.156604][ T338] dump_stack_lvl+0x110/0x170 [ 37.161275][ T338] ? show_regs_print_info+0x20/0x20 [ 37.166544][ T338] dump_stack+0x15/0x20 [ 37.170676][ T338] should_fail+0x3c1/0x510 [ 37.175249][ T338] __should_failslab+0xa4/0xe0 [ 37.180433][ T338] should_failslab+0x9/0x20 [ 37.184926][ T338] slab_pre_alloc_hook+0x3b/0xe0 [ 37.189854][ T338] ? anon_vma_clone+0xc0/0x500 [ 37.194600][ T338] kmem_cache_alloc+0x44/0x260 [ 37.199339][ T338] anon_vma_clone+0xc0/0x500 [ 37.203931][ T338] anon_vma_fork+0x8c/0x510 [ 37.208502][ T338] copy_mm+0x9de/0x13c0 [ 37.212634][ T338] ? copy_signal+0x600/0x600 [ 37.217199][ T338] ? __init_rwsem+0xfc/0x1d0 [ 37.221962][ T338] ? copy_signal+0x4cb/0x600 [ 37.226597][ T338] copy_process+0x117c/0x3250 [ 37.231265][ T338] ? __kasan_check_write+0x14/0x20 [ 37.236544][ T338] ? __pidfd_prepare+0x150/0x150 [ 37.241460][ T338] kernel_clone+0x233/0x960 [ 37.246087][ T338] ? create_io_thread+0x170/0x170 [ 37.251387][ T338] ? __kasan_check_write+0x14/0x20 [ 37.256494][ T338] ? mutex_unlock+0x8f/0x230 [ 37.261065][ T338] __x64_sys_clone+0x198/0x210 [ 37.265992][ T338] ? __kasan_check_write+0x14/0x20 [ 37.271341][ T338] ? __ia32_sys_vfork+0x130/0x130 [ 37.276356][ T338] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 37.282494][ T338] x64_sys_call+0x41f/0x9a0 [ 37.286984][ T338] do_syscall_64+0x4c/0xa0 [ 37.291385][ T338] ? clear_bhb_loop+0x50/0xa0 [ 37.296059][ T338] ? clear_bhb_loop+0x50/0xa0 [ 37.300716][ T338] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.306678][ T338] RIP: 0033:0x7f27cb7dd0e9 [ 37.311113][ T338] Code: 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 37.330730][ T338] RSP: 002b:00007f27cb771068 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 37.339132][ T338] RAX: ffffffffffffffda RBX: 00007f27cb90df80 RCX: 00007f27cb7dd0e9 [ 37.347102][ T338] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 37.355231][ T338] RBP: 00007f27cb771120 R08: 0000000000000000 R09: 0000000000000000 [ 37.363263][ T338] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 37.371248][ T338] R13: 000000000000000b R14: 00007f27cb90df80 R15: 00007ffd696eeae8 [ 37.379277][ T338] [ 37.389494][ T341] FAULT_INJECTION: forcing a failure. [ 37.389494][ T341] name failslab, interval 1, probability 0, space 0, times 0 [ 37.402236][ T341] CPU: 0 PID: 341 Comm: syz-executor.0 Not tainted syzkaller #0 [ 37.409863][ T341] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 37.419999][ T341] Call Trace: [ 37.423422][ T341] [ 37.426339][ T341] __dump_stack+0x21/0x30 [ 37.430735][ T341] dump_stack_lvl+0x110/0x170 [ 37.435492][ T341] ? show_regs_print_info+0x20/0x20 [ 37.440833][ T341] dump_stack+0x15/0x20 [ 37.445077][ T341] should_fail+0x3c1/0x510 [ 37.449498][ T341] __should_failslab+0xa4/0xe0 [ 37.454307][ T341] should_failslab+0x9/0x20 [ 37.458795][ T341] slab_pre_alloc_hook+0x3b/0xe0 [ 37.463717][ T341] ? anon_vma_fork+0xf2/0x510 [ 37.468395][ T341] kmem_cache_alloc+0x44/0x260 [ 37.473143][ T341] anon_vma_fork+0xf2/0x510 [ 37.477640][ T341] copy_mm+0x9de/0x13c0 [ 37.481779][ T341] ? copy_signal+0x600/0x600 [ 37.486531][ T341] ? __init_rwsem+0xfc/0x1d0 [ 37.491116][ T341] ? copy_signal+0x4cb/0x600 [ 37.495691][ T341] copy_process+0x117c/0x3250 [ 37.500360][ T341] ? __kasan_check_write+0x14/0x20 [ 37.505470][ T341] ? __pidfd_prepare+0x150/0x150 [ 37.510387][ T341] kernel_clone+0x233/0x960 [ 37.514901][ T341] ? create_io_thread+0x170/0x170 [ 37.519908][ T341] ? __kasan_check_write+0x14/0x20 [ 37.525014][ T341] ? mutex_unlock+0x8f/0x230 [ 37.529589][ T341] __x64_sys_clone+0x198/0x210 [ 37.534534][ T341] ? __kasan_check_write+0x14/0x20 [ 37.539720][ T341] ? __ia32_sys_vfork+0x130/0x130 [ 37.544726][ T341] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 37.550776][ T341] x64_sys_call+0x41f/0x9a0 [ 37.555262][ T341] do_syscall_64+0x4c/0xa0 [ 37.559655][ T341] ? clear_bhb_loop+0x50/0xa0 [ 37.564305][ T341] ? clear_bhb_loop+0x50/0xa0 [ 37.568957][ T341] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.574912][ T341] RIP: 0033:0x7f27cb7dd0e9 [ 37.579304][ T341] Code: 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 37.598972][ T341] RSP: 002b:00007f27cb771068 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 37.607549][ T341] RAX: ffffffffffffffda RBX: 00007f27cb90df80 RCX: 00007f27cb7dd0e9 [ 37.615612][ T341] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 37.623837][ T341] RBP: 00007f27cb771120 R08: 0000000000000000 R09: 0000000000000000 [ 37.632028][ T341] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 37.640084][ T341] R13: 000000000000000b R14: 00007f27cb90df80 R15: 00007ffd696eeae8 [ 37.648038][ T341] [ 37.660879][ T343] FAULT_INJECTION: forcing a failure. [ 37.660879][ T343] name failslab, interval 1, probability 0, space 0, times 0 [ 37.673740][ T343] CPU: 0 PID: 343 Comm: syz-executor.0 Not tainted syzkaller #0 [ 37.681357][ T343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 37.691408][ T343] Call Trace: [ 37.694665][ T343] [ 37.697573][ T343] __dump_stack+0x21/0x30 [ 37.701903][ T343] dump_stack_lvl+0x110/0x170 [ 37.706559][ T343] ? show_regs_print_info+0x20/0x20 [ 37.711923][ T343] dump_stack+0x15/0x20 [ 37.716067][ T343] should_fail+0x3c1/0x510 [ 37.720467][ T343] __should_failslab+0xa4/0xe0 [ 37.725223][ T343] should_failslab+0x9/0x20 [ 37.729985][ T343] slab_pre_alloc_hook+0x3b/0xe0 [ 37.735122][ T343] ? anon_vma_fork+0xf2/0x510 [ 37.739951][ T343] kmem_cache_alloc+0x44/0x260 [ 37.744710][ T343] anon_vma_fork+0xf2/0x510 [ 37.749286][ T343] copy_mm+0x9de/0x13c0 [ 37.753770][ T343] ? copy_signal+0x600/0x600 [ 37.758360][ T343] ? __init_rwsem+0xfc/0x1d0 [ 37.762935][ T343] ? copy_signal+0x4cb/0x600 [ 37.767505][ T343] copy_process+0x117c/0x3250 [ 37.772171][ T343] ? __kasan_check_write+0x14/0x20 [ 37.777263][ T343] ? __pidfd_prepare+0x150/0x150 [ 37.782186][ T343] kernel_clone+0x233/0x960 [ 37.786688][ T343] ? create_io_thread+0x170/0x170 [ 37.791710][ T343] ? __kasan_check_write+0x14/0x20 [ 37.797007][ T343] ? mutex_unlock+0x8f/0x230 [ 37.801586][ T343] __x64_sys_clone+0x198/0x210 [ 37.806337][ T343] ? __kasan_check_write+0x14/0x20 [ 37.811427][ T343] ? __ia32_sys_vfork+0x130/0x130 [ 37.816523][ T343] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 37.822573][ T343] x64_sys_call+0x41f/0x9a0 [ 37.827086][ T343] do_syscall_64+0x4c/0xa0 [ 37.831524][ T343] ? clear_bhb_loop+0x50/0xa0 [ 37.836199][ T343] ? clear_bhb_loop+0x50/0xa0 [ 37.840860][ T343] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 37.846837][ T343] RIP: 0033:0x7f27cb7dd0e9 [ 37.851285][ T343] Code: 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 37.870866][ T343] RSP: 002b:00007f27cb771068 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 37.879262][ T343] RAX: ffffffffffffffda RBX: 00007f27cb90df80 RCX: 00007f27cb7dd0e9 [ 37.887235][ T343] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 37.895388][ T343] RBP: 00007f27cb771120 R08: 0000000000000000 R09: 0000000000000000 [ 37.903348][ T343] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 37.911305][ T343] R13: 000000000000000b R14: 00007f27cb90df80 R15: 00007ffd696eeae8 [ 37.919257][ T343] [ 37.930250][ T345] FAULT_INJECTION: forcing a failure. [ 37.930250][ T345] name failslab, interval 1, probability 0, space 0, times 0 [ 37.943230][ T345] CPU: 1 PID: 345 Comm: syz-executor.0 Not tainted syzkaller #0 [ 37.950939][ T345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 37.960978][ T345] Call Trace: [ 37.964345][ T345] [ 37.967273][ T345] __dump_stack+0x21/0x30 [ 37.971625][ T345] dump_stack_lvl+0x110/0x170 [ 37.976293][ T345] ? show_regs_print_info+0x20/0x20 [ 37.981474][ T345] dump_stack+0x15/0x20 [ 37.985603][ T345] should_fail+0x3c1/0x510 [ 37.989995][ T345] __should_failslab+0xa4/0xe0 [ 37.994920][ T345] should_failslab+0x9/0x20 [ 37.999476][ T345] slab_pre_alloc_hook+0x3b/0xe0 [ 38.004484][ T345] ? anon_vma_clone+0xc0/0x500 [ 38.009238][ T345] kmem_cache_alloc+0x44/0x260 [ 38.013980][ T345] anon_vma_clone+0xc0/0x500 [ 38.018544][ T345] anon_vma_fork+0x8c/0x510 [ 38.023113][ T345] copy_mm+0x9de/0x13c0 [ 38.027248][ T345] ? copy_signal+0x600/0x600 [ 38.031817][ T345] ? __init_rwsem+0xfc/0x1d0 [ 38.036398][ T345] ? copy_signal+0x4cb/0x600 [ 38.040962][ T345] copy_process+0x117c/0x3250 [ 38.045615][ T345] ? __kasan_check_write+0x14/0x20 [ 38.050705][ T345] ? __pidfd_prepare+0x150/0x150 [ 38.055617][ T345] kernel_clone+0x233/0x960 [ 38.060099][ T345] ? create_io_thread+0x170/0x170 [ 38.065239][ T345] ? __kasan_check_write+0x14/0x20 [ 38.070345][ T345] ? mutex_unlock+0x8f/0x230 [ 38.074929][ T345] __x64_sys_clone+0x198/0x210 [ 38.079676][ T345] ? __kasan_check_write+0x14/0x20 [ 38.084775][ T345] ? __ia32_sys_vfork+0x130/0x130 [ 38.089873][ T345] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 38.095917][ T345] x64_sys_call+0x41f/0x9a0 [ 38.100397][ T345] do_syscall_64+0x4c/0xa0 [ 38.104793][ T345] ? clear_bhb_loop+0x50/0xa0 [ 38.109446][ T345] ? clear_bhb_loop+0x50/0xa0 [ 38.114102][ T345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.120006][ T345] RIP: 0033:0x7f27cb7dd0e9 [ 38.124441][ T345] Code: 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 38.144346][ T345] RSP: 002b:00007f27cb771068 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 38.152762][ T345] RAX: ffffffffffffffda RBX: 00007f27cb90df80 RCX: 00007f27cb7dd0e9 [ 38.160812][ T345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 38.168937][ T345] RBP: 00007f27cb771120 R08: 0000000000000000 R09: 0000000000000000 [ 38.176886][ T345] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 38.184834][ T345] R13: 000000000000000b R14: 00007f27cb90df80 R15: 00007ffd696eeae8 [ 38.192871][ T345] [ 38.204450][ T348] FAULT_INJECTION: forcing a failure. [ 38.204450][ T348] name failslab, interval 1, probability 0, space 0, times 0 [ 38.217340][ T348] CPU: 1 PID: 348 Comm: syz-executor.0 Not tainted syzkaller #0 [ 38.225042][ T348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 38.235148][ T348] Call Trace: [ 38.238418][ T348] [ 38.241346][ T348] __dump_stack+0x21/0x30 [ 38.245752][ T348] dump_stack_lvl+0x110/0x170 [ 38.250424][ T348] ? show_regs_print_info+0x20/0x20 [ 38.255703][ T348] dump_stack+0x15/0x20 [ 38.259836][ T348] should_fail+0x3c1/0x510 [ 38.264231][ T348] __should_failslab+0xa4/0xe0 [ 38.268973][ T348] should_failslab+0x9/0x20 [ 38.273458][ T348] slab_pre_alloc_hook+0x3b/0xe0 [ 38.278495][ T348] ? anon_vma_clone+0xc0/0x500 [ 38.283236][ T348] kmem_cache_alloc+0x44/0x260 [ 38.287982][ T348] anon_vma_clone+0xc0/0x500 [ 38.292551][ T348] anon_vma_fork+0x8c/0x510 [ 38.297041][ T348] copy_mm+0x9de/0x13c0 [ 38.301179][ T348] ? copy_signal+0x600/0x600 [ 38.305748][ T348] ? __init_rwsem+0xfc/0x1d0 [ 38.310314][ T348] ? copy_signal+0x4cb/0x600 [ 38.314877][ T348] copy_process+0x117c/0x3250 [ 38.319543][ T348] ? __kasan_check_write+0x14/0x20 [ 38.324911][ T348] ? __pidfd_prepare+0x150/0x150 [ 38.329845][ T348] kernel_clone+0x233/0x960 [ 38.334338][ T348] ? create_io_thread+0x170/0x170 [ 38.339426][ T348] ? __kasan_check_write+0x14/0x20 [ 38.344515][ T348] ? mutex_unlock+0x8f/0x230 [ 38.349171][ T348] __x64_sys_clone+0x198/0x210 [ 38.353934][ T348] ? __kasan_check_write+0x14/0x20 [ 38.359034][ T348] ? __ia32_sys_vfork+0x130/0x130 [ 38.364053][ T348] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 38.370098][ T348] x64_sys_call+0x41f/0x9a0 [ 38.374576][ T348] do_syscall_64+0x4c/0xa0 [ 38.379144][ T348] ? clear_bhb_loop+0x50/0xa0 [ 38.383793][ T348] ? clear_bhb_loop+0x50/0xa0 [ 38.388653][ T348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.394611][ T348] RIP: 0033:0x7f27cb7dd0e9 [ 38.399091][ T348] Code: 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 38.418759][ T348] RSP: 002b:00007f27cb771068 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 38.427153][ T348] RAX: ffffffffffffffda RBX: 00007f27cb90df80 RCX: 00007f27cb7dd0e9 [ 38.435187][ T348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 38.443239][ T348] RBP: 00007f27cb771120 R08: 0000000000000000 R09: 0000000000000000 [ 38.451185][ T348] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 38.459128][ T348] R13: 000000000000000b R14: 00007f27cb90df80 R15: 00007ffd696eeae8 [ 38.467073][ T348] [ 38.478461][ T351] FAULT_INJECTION: forcing a failure. [ 38.478461][ T351] name failslab, interval 1, probability 0, space 0, times 0 [ 38.491146][ T351] CPU: 1 PID: 351 Comm: syz-executor.0 Not tainted syzkaller #0 [ 38.498770][ T351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 38.508817][ T351] Call Trace: [ 38.512076][ T351] [ 38.514990][ T351] __dump_stack+0x21/0x30 [ 38.519308][ T351] dump_stack_lvl+0x110/0x170 [ 38.523970][ T351] ? show_regs_print_info+0x20/0x20 [ 38.529156][ T351] dump_stack+0x15/0x20 [ 38.533292][ T351] should_fail+0x3c1/0x510 [ 38.537800][ T351] __should_failslab+0xa4/0xe0 [ 38.542553][ T351] should_failslab+0x9/0x20 [ 38.547035][ T351] slab_pre_alloc_hook+0x3b/0xe0 [ 38.551959][ T351] ? anon_vma_clone+0xc0/0x500 [ 38.556695][ T351] kmem_cache_alloc+0x44/0x260 [ 38.561436][ T351] anon_vma_clone+0xc0/0x500 [ 38.566008][ T351] anon_vma_fork+0x8c/0x510 [ 38.570489][ T351] copy_mm+0x9de/0x13c0 [ 38.574619][ T351] ? copy_signal+0x600/0x600 [ 38.579285][ T351] ? __init_rwsem+0xfc/0x1d0 [ 38.583850][ T351] ? copy_signal+0x4cb/0x600 [ 38.588416][ T351] copy_process+0x117c/0x3250 [ 38.593084][ T351] ? __kasan_check_write+0x14/0x20 [ 38.598196][ T351] ? __pidfd_prepare+0x150/0x150 [ 38.603288][ T351] kernel_clone+0x233/0x960 [ 38.607778][ T351] ? create_io_thread+0x170/0x170 [ 38.612783][ T351] ? __kasan_check_write+0x14/0x20 [ 38.618484][ T351] ? mutex_unlock+0x8f/0x230 [ 38.623424][ T351] __x64_sys_clone+0x198/0x210 [ 38.628349][ T351] ? __kasan_check_write+0x14/0x20 [ 38.633444][ T351] ? __ia32_sys_vfork+0x130/0x130 [ 38.638462][ T351] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 38.644848][ T351] x64_sys_call+0x41f/0x9a0 [ 38.649423][ T351] do_syscall_64+0x4c/0xa0 [ 38.653821][ T351] ? clear_bhb_loop+0x50/0xa0 [ 38.658476][ T351] ? clear_bhb_loop+0x50/0xa0 [ 38.663128][ T351] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.669004][ T351] RIP: 0033:0x7f27cb7dd0e9 [ 38.673397][ T351] Code: 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 38.693165][ T351] RSP: 002b:00007f27cb771068 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 38.701561][ T351] RAX: ffffffffffffffda RBX: 00007f27cb90df80 RCX: 00007f27cb7dd0e9 [ 38.709689][ T351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 38.717637][ T351] RBP: 00007f27cb771120 R08: 0000000000000000 R09: 0000000000000000 [ 38.725586][ T351] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 38.733568][ T351] R13: 000000000000000b R14: 00007f27cb90df80 R15: 00007ffd696eeae8 [ 38.741534][ T351] [ 38.752929][ T354] FAULT_INJECTION: forcing a failure. [ 38.752929][ T354] name failslab, interval 1, probability 0, space 0, times 0 [ 38.765659][ T354] CPU: 0 PID: 354 Comm: syz-executor.0 Not tainted syzkaller #0 [ 38.773408][ T354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 38.783451][ T354] Call Trace: [ 38.786720][ T354] [ 38.789646][ T354] __dump_stack+0x21/0x30 [ 38.793962][ T354] dump_stack_lvl+0x110/0x170 [ 38.798715][ T354] ? show_regs_print_info+0x20/0x20 [ 38.803895][ T354] dump_stack+0x15/0x20 [ 38.808040][ T354] should_fail+0x3c1/0x510 [ 38.812432][ T354] __should_failslab+0xa4/0xe0 [ 38.817270][ T354] should_failslab+0x9/0x20 [ 38.821754][ T354] slab_pre_alloc_hook+0x3b/0xe0 [ 38.826673][ T354] ? anon_vma_fork+0xf2/0x510 [ 38.831334][ T354] kmem_cache_alloc+0x44/0x260 [ 38.836215][ T354] anon_vma_fork+0xf2/0x510 [ 38.840779][ T354] copy_mm+0x9de/0x13c0 [ 38.844912][ T354] ? copy_signal+0x600/0x600 [ 38.849474][ T354] ? __init_rwsem+0xfc/0x1d0 [ 38.854051][ T354] ? copy_signal+0x4cb/0x600 [ 38.858697][ T354] copy_process+0x117c/0x3250 [ 38.863347][ T354] ? __kasan_check_write+0x14/0x20 [ 38.868444][ T354] ? __pidfd_prepare+0x150/0x150 [ 38.873374][ T354] kernel_clone+0x233/0x960 [ 38.878116][ T354] ? create_io_thread+0x170/0x170 [ 38.883132][ T354] ? __kasan_check_write+0x14/0x20 [ 38.888321][ T354] ? mutex_unlock+0x8f/0x230 [ 38.892936][ T354] __x64_sys_clone+0x198/0x210 [ 38.897824][ T354] ? __kasan_check_write+0x14/0x20 [ 38.902970][ T354] ? __ia32_sys_vfork+0x130/0x130 [ 38.908076][ T354] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 38.914310][ T354] x64_sys_call+0x41f/0x9a0 [ 38.918796][ T354] do_syscall_64+0x4c/0xa0 [ 38.923327][ T354] ? clear_bhb_loop+0x50/0xa0 [ 38.928026][ T354] ? clear_bhb_loop+0x50/0xa0 [ 38.932741][ T354] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 38.938853][ T354] RIP: 0033:0x7f27cb7dd0e9 [ 38.943258][ T354] Code: 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 38.962950][ T354] RSP: 002b:00007f27cb771068 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 38.971349][ T354] RAX: ffffffffffffffda RBX: 00007f27cb90df80 RCX: 00007f27cb7dd0e9 [ 38.979307][ T354] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 38.987258][ T354] RBP: 00007f27cb771120 R08: 0000000000000000 R09: 0000000000000000 [ 38.995218][ T354] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 39.003172][ T354] R13: 000000000000000b R14: 00007f27cb90df80 R15: 00007ffd696eeae8 [ 39.011129][ T354] [ 39.021208][ T356] FAULT_INJECTION: forcing a failure. [ 39.021208][ T356] name failslab, interval 1, probability 0, space 0, times 0 [ 39.034210][ T356] CPU: 0 PID: 356 Comm: syz-executor.0 Not tainted syzkaller #0 [ 39.041828][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 39.051862][ T356] Call Trace: [ 39.055121][ T356] [ 39.058038][ T356] __dump_stack+0x21/0x30 [ 39.062354][ T356] dump_stack_lvl+0x110/0x170 [ 39.067017][ T356] ? show_regs_print_info+0x20/0x20 [ 39.072299][ T356] dump_stack+0x15/0x20 [ 39.076455][ T356] should_fail+0x3c1/0x510 [ 39.080864][ T356] __should_failslab+0xa4/0xe0 [ 39.085604][ T356] should_failslab+0x9/0x20 [ 39.090084][ T356] slab_pre_alloc_hook+0x3b/0xe0 [ 39.095002][ T356] ? anon_vma_fork+0xf2/0x510 [ 39.099659][ T356] kmem_cache_alloc+0x44/0x260 [ 39.104399][ T356] anon_vma_fork+0xf2/0x510 [ 39.108882][ T356] copy_mm+0x9de/0x13c0 [ 39.113013][ T356] ? copy_signal+0x600/0x600 [ 39.117672][ T356] ? __init_rwsem+0xfc/0x1d0 [ 39.122235][ T356] ? copy_signal+0x4cb/0x600 [ 39.126894][ T356] copy_process+0x117c/0x3250 [ 39.131562][ T356] ? __kasan_check_write+0x14/0x20 [ 39.137181][ T356] ? __pidfd_prepare+0x150/0x150 [ 39.142103][ T356] kernel_clone+0x233/0x960 [ 39.146587][ T356] ? create_io_thread+0x170/0x170 [ 39.151606][ T356] ? __kasan_check_write+0x14/0x20 [ 39.156692][ T356] ? mutex_unlock+0x8f/0x230 [ 39.161258][ T356] __x64_sys_clone+0x198/0x210 [ 39.165997][ T356] ? __kasan_check_write+0x14/0x20 [ 39.171088][ T356] ? __ia32_sys_vfork+0x130/0x130 [ 39.176111][ T356] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 39.182157][ T356] x64_sys_call+0x41f/0x9a0 [ 39.186836][ T356] do_syscall_64+0x4c/0xa0 [ 39.191248][ T356] ? clear_bhb_loop+0x50/0xa0 [ 39.195913][ T356] ? clear_bhb_loop+0x50/0xa0 [ 39.200576][ T356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 39.206555][ T356] RIP: 0033:0x7f27cb7dd0e9 [ 39.210958][ T356] Code: 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 39.230780][ T356] RSP: 002b:00007f27cb771068 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 39.239181][ T356] RAX: ffffffffffffffda RBX: 00007f27cb90df80 RCX: 00007f27cb7dd0e9 [ 39.247160][ T356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 39.255107][ T356] RBP: 00007f27cb771120 R08: 0000000000000000 R09: 0000000000000000 [ 39.263058][ T356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 39.271001][ T356] R13: 000000000000000b R14: 00007f27cb90df80 R15: 00007ffd696eeae8 [ 39.278960][ T356] [ 39.282217][ T356] ================================================================== [ 39.290272][ T356] BUG: KASAN: double-free or invalid-free in kfree+0xc4/0x270 [ 39.297714][ T356] [ 39.300021][ T356] CPU: 0 PID: 356 Comm: syz-executor.0 Not tainted syzkaller #0 [ 39.307642][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 39.317686][ T356] Call Trace: [ 39.320951][ T356] [ 39.323861][ T356] __dump_stack+0x21/0x30 [ 39.328346][ T356] dump_stack_lvl+0x110/0x170 [ 39.333105][ T356] ? show_regs_print_info+0x20/0x20 [ 39.338333][ T356] ? load_image+0x3e0/0x3e0 [ 39.342845][ T356] ? kmem_cache_free+0x100/0x320 [ 39.347763][ T356] print_address_description+0x7f/0x2c0 [ 39.353286][ T356] ? kfree+0xc4/0x270 [ 39.357247][ T356] kasan_report_invalid_free+0x58/0x90 [ 39.362684][ T356] ? kfree+0xc4/0x270 [ 39.366642][ T356] ____kasan_slab_free+0x13d/0x160 [ 39.371786][ T356] __kasan_slab_free+0x11/0x20 [ 39.376544][ T356] slab_free_freelist_hook+0xc2/0x190 [ 39.381898][ T356] ? anon_vma_name_free+0x15/0x20 [ 39.386899][ T356] kfree+0xc4/0x270 [ 39.390693][ T356] ? anon_vma_name_free+0x15/0x20 [ 39.395697][ T356] anon_vma_name_free+0x15/0x20 [ 39.400627][ T356] vm_area_free_no_check+0xa9/0x140 [ 39.406068][ T356] copy_mm+0xe90/0x13c0 [ 39.410208][ T356] ? copy_signal+0x600/0x600 [ 39.414785][ T356] ? __init_rwsem+0xfc/0x1d0 [ 39.419355][ T356] ? copy_signal+0x4cb/0x600 [ 39.424014][ T356] copy_process+0x117c/0x3250 [ 39.428685][ T356] ? __kasan_check_write+0x14/0x20 [ 39.433927][ T356] ? __pidfd_prepare+0x150/0x150 [ 39.438846][ T356] kernel_clone+0x233/0x960 [ 39.443446][ T356] ? create_io_thread+0x170/0x170 [ 39.448452][ T356] ? __kasan_check_write+0x14/0x20 [ 39.453539][ T356] ? mutex_unlock+0x8f/0x230 [ 39.458117][ T356] __x64_sys_clone+0x198/0x210 [ 39.462861][ T356] ? __kasan_check_write+0x14/0x20 [ 39.467949][ T356] ? __ia32_sys_vfork+0x130/0x130 [ 39.472954][ T356] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 39.478999][ T356] x64_sys_call+0x41f/0x9a0 [ 39.483481][ T356] do_syscall_64+0x4c/0xa0 [ 39.487877][ T356] ? clear_bhb_loop+0x50/0xa0 [ 39.492530][ T356] ? clear_bhb_loop+0x50/0xa0 [ 39.497192][ T356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 39.503078][ T356] RIP: 0033:0x7f27cb7dd0e9 [ 39.507475][ T356] Code: 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 d0 ff ff ff f7 d8 64 89 01 48 [ 39.527063][ T356] RSP: 002b:00007f27cb771068 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 39.535468][ T356] RAX: ffffffffffffffda RBX: 00007f27cb90df80 RCX: 00007f27cb7dd0e9 [ 39.543506][ T356] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000001000 [ 39.551458][ T356] RBP: 00007f27cb771120 R08: 0000000000000000 R09: 0000000000000000 [ 39.559412][ T356] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 39.567361][ T356] R13: 000000000000000b R14: 00007f27cb90df80 R15: 00007ffd696eeae8 [ 39.575402][ T356] [ 39.578406][ T356] [ 39.580715][ T356] Allocated by task 324: [ 39.584931][ T356] __kasan_slab_alloc+0xbd/0xf0 [ 39.589783][ T356] slab_post_alloc_hook+0x4f/0x2b0 [ 39.594873][ T356] kmem_cache_alloc+0xf7/0x260 [ 39.599611][ T356] vm_area_dup+0x26/0x210 [ 39.603925][ T356] copy_mm+0x947/0x13c0 [ 39.608053][ T356] copy_process+0x117c/0x3250 [ 39.612707][ T356] kernel_clone+0x233/0x960 [ 39.617188][ T356] __x64_sys_clone+0x198/0x210 [ 39.621929][ T356] x64_sys_call+0x41f/0x9a0 [ 39.626412][ T356] do_syscall_64+0x4c/0xa0 [ 39.630928][ T356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 39.636822][ T356] [ 39.639211][ T356] Last potentially related work creation: [ 39.644987][ T356] kasan_save_stack+0x3a/0x60 [ 39.649749][ T356] __kasan_record_aux_stack+0xd2/0x100 [ 39.655188][ T356] kasan_record_aux_stack_noalloc+0xb/0x10 [ 39.661091][ T356] call_rcu+0x10b/0xf80 [ 39.665225][ T356] vm_area_free_no_check+0x10e/0x140 [ 39.670486][ T356] vm_area_free+0x56/0x60 [ 39.674794][ T356] exit_mmap+0x4e6/0x8b0 [ 39.679101][ T356] __mmput+0x93/0x320 [ 39.683064][ T356] mmput+0x50/0x150 [ 39.686848][ T356] do_exit+0x9f2/0x27e0 [ 39.690984][ T356] do_group_exit+0x141/0x310 [ 39.695550][ T356] __x64_sys_exit_group+0x3f/0x40 [ 39.700562][ T356] x64_sys_call+0x832/0x9a0 [ 39.705051][ T356] do_syscall_64+0x4c/0xa0 [ 39.709452][ T356] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 39.715337][ T356] [ 39.717645][ T356] The buggy address belongs to the object at ffff88810d4f8818 [ 39.717645][ T356] which belongs to the cache vm_area_struct of size 232 [ 39.732031][ T356] The buggy address is located 88 bytes inside of [ 39.732031][ T356] 232-byte region [ffff88810d4f8818, ffff88810d4f8900) [ 39.745284][ T356] The buggy address belongs to the page: [ 39.751071][ T356] page:ffffea0004353e00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10d4f8 [ 39.761288][ T356] flags: 0x4000000000000200(slab|zone=1) [ 39.766941][ T356] raw: 4000000000000200 dead000000000100 dead000000000122 ffff888100187080 [ 39.775946][ T356] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 39.784508][ T356] page dumped because: kasan: bad access detected [ 39.790991][ T356] page_owner tracks the page as allocated [ 39.796690][ T356] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 72, ts 3470360560, free_ts 0 [ 39.811615][ T356] post_alloc_hook+0x192/0x1b0 [ 39.816448][ T356] prep_new_page+0x1c/0x110 [ 39.820941][ T356] get_page_from_freelist+0x2d3a/0x2dc0 [ 39.826560][ T356] __alloc_pages+0x1a2/0x460 [ 39.831130][ T356] new_slab+0xa1/0x4d0 [ 39.835180][ T356] ___slab_alloc+0x381/0x810 [ 39.839833][ T356] __slab_alloc+0x49/0x90 [ 39.844142][ T356] kmem_cache_alloc+0x138/0x260 [ 39.848969][ T356] vm_area_alloc+0x24/0x130 [ 39.853470][ T356] mmap_region+0xaa6/0x1710 [ 39.857953][ T356] do_mmap+0x812/0xf10 [ 39.861999][ T356] vm_mmap_pgoff+0x1ec/0x430 [ 39.866692][ T356] ksys_mmap_pgoff+0x161/0x1d0 [ 39.871526][ T356] __x64_sys_mmap+0xfa/0x110 [ 39.876095][ T356] x64_sys_call+0x83/0x9a0 [ 39.880576][ T356] do_syscall_64+0x4c/0xa0 [ 39.884980][ T356] page_owner free stack trace missing [ 39.890353][ T356] [ 39.892665][ T356] Memory state around the buggy address: [ 39.898272][ T356] ffff88810d4f8700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 39.906423][ T356] ffff88810d4f8780: 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc [ 39.914462][ T356] >ffff88810d4f8800: fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 39.922494][ T356] ^ [ 39.930182][ T356] ffff88810d4f8880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 39.938236][ T356] ffff88810d4f8900: fc fc fc fc fc fc fc fc 00 00 00 00 00 00 00 00 [ 39.946382][ T356] ================================================================== [ 39.954514][ T356] Disabling lock debugging due to kernel taint [ 39.966418][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 39.966430][ T30] audit: type=1400 audit(1774178681.527:88): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 39.970667][ T326] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 39.973459][ T30] audit: type=1400 audit(1774178681.527:89): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 39.994616][ T326] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 39.994636][ T326] CPU: 1 PID: 326 Comm: syz-executor.0 Tainted: G B syzkaller #0 [ 39.994650][ T326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 39.994658][ T326] RIP: 0010:__rb_insert_augmented+0xa9/0x720 [ 39.994680][ T326] Code: 38 ff 49 8b 07 a8 01 0f 85 53 06 00 00 4c 89 65 c8 48 89 45 d0 4c 8d 70 08 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 00 00 fc ff df <80> 3c 03 00 74 08 4c 89 f7 e8 a9 20 38 ff 4d 8b 26 4d 39 fc 74 34 [ 39.994698][ T326] RSP: 0018:ffffc90000a578c0 EFLAGS: 00010202 [ 40.021165][ T30] audit: type=1400 audit(1774178681.527:90): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.027550][ T326] [ 40.027555][ T326] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: dffffc0000000000 [ 40.036376][ T30] audit: type=1400 audit(1774178681.527:91): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 40.045198][ T326] RDX: ffffffff819c9ca0 RSI: ffff8881119b1aa8 RDI: ffff88810dd93180 [ 40.045217][ T326] RBP: ffffc90000a57920 R08: ffff88810dd93197 R09: ffff88810dd93188 [ 40.045226][ T326] R10: dffffc0000000000 R11: ffffed1021bb2633 R12: ffff88810dd93180 [ 40.045236][ T326] R13: 1ffff11021a9f10e R14: 0000000000000008 R15: ffff88810d4f8870 [ 40.045246][ T326] FS: 000055555d1fd480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 40.055791][ T30] audit: type=1400 audit(1774178681.527:92): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.061370][ T326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.061385][ T326] CR2: 00007f27cb90a020 CR3: 000000011f404000 CR4: 00000000003506a0 [ 40.061397][ T326] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.061405][ T326] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.061415][ T326] Call Trace: [ 40.081489][ T30] audit: type=1400 audit(1774178681.527:93): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.087211][ T326] [ 40.108466][ T30] audit: type=1400 audit(1774178681.527:94): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 40.110571][ T326] ? anon_vma_interval_tree_iter_next+0x380/0x380 [ 40.288385][ T326] vma_interval_tree_insert_after+0x2a1/0x2b0 [ 40.294444][ T326] copy_mm+0xb2d/0x13c0 [ 40.298778][ T326] ? copy_signal+0x600/0x600 [ 40.303356][ T326] ? __init_rwsem+0xfc/0x1d0 [ 40.307927][ T326] ? copy_signal+0x4cb/0x600 [ 40.312493][ T326] copy_process+0x117c/0x3250 [ 40.317273][ T326] ? pipe_read+0xac1/0x1010 [ 40.321757][ T326] ? pipe_wait_writable+0x580/0x580 [ 40.327061][ T326] ? __pidfd_prepare+0x150/0x150 [ 40.331997][ T326] kernel_clone+0x233/0x960 [ 40.336669][ T326] ? __kasan_check_write+0x14/0x20 [ 40.341872][ T326] ? create_io_thread+0x170/0x170 [ 40.347054][ T326] ? recalc_sigpending+0x1ac/0x230 [ 40.352165][ T326] __x64_sys_clone+0x198/0x210 [ 40.356931][ T326] ? __ia32_sys_vfork+0x130/0x130 [ 40.362039][ T326] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 40.368202][ T326] x64_sys_call+0x41f/0x9a0 [ 40.372715][ T326] do_syscall_64+0x4c/0xa0 [ 40.377120][ T326] ? clear_bhb_loop+0x50/0xa0 [ 40.381781][ T326] ? clear_bhb_loop+0x50/0xa0 [ 40.386432][ T326] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 40.392310][ T326] RIP: 0033:0x7f27cb809a62 [ 40.396715][ T326] Code: 89 e7 e8 d1 2e fa ff 45 31 c0 31 d2 31 f6 64 48 8b 04 25 10 00 00 00 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 66 89 c5 85 c0 75 3b 64 48 8b 04 25 10 00 00 [ 40.416439][ T326] RSP: 002b:00007ffd696eecd0 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 40.424840][ T326] RAX: ffffffffffffffda RBX: 00007ffd696eecd0 RCX: 00007f27cb809a62 [ 40.432966][ T326] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 40.441122][ T326] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000000 [ 40.449082][ T326] R10: 000055555d1fd750 R11: 0000000000000246 R12: 0000000000000000 [ 40.457216][ T326] R13: 0000000000000001 R14: 0000000000000000 R15: 0000000000000000 [ 40.465170][ T326] [ 40.468174][ T326] Modules linked in: [ 40.472640][ T326] ---[ end trace c0dadbee31e231f0 ]--- [ 40.478258][ T326] RIP: 0010:__rb_insert_augmented+0xa9/0x720 [ 40.484304][ T326] Code: 38 ff 49 8b 07 a8 01 0f 85 53 06 00 00 4c 89 65 c8 48 89 45 d0 4c 8d 70 08 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 00 00 fc ff df <80> 3c 03 00 74 08 4c 89 f7 e8 a9 20 38 ff 4d 8b 26 4d 39 fc 74 34 [ 40.504054][ T326] RSP: 0018:ffffc90000a578c0 EFLAGS: 00010202 [ 40.510127][ T326] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: dffffc0000000000 [ 40.518521][ T326] RDX: ffffffff819c9ca0 RSI: ffff8881119b1aa8 RDI: ffff88810dd93180 [ 40.526547][ T326] RBP: ffffc90000a57920 R08: ffff88810dd93197 R09: ffff88810dd93188 [ 40.534869][ T326] R10: dffffc0000000000 R11: ffffed1021bb2633 R12: ffff88810dd93180 [ 40.543011][ T326] R13: 1ffff11021a9f10e R14: 0000000000000008 R15: ffff88810d4f8870 [ 40.550994][ T326] FS: 000055555d1fd480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 40.560092][ T326] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 40.566752][ T326] CR2: 00007f27cb90a020 CR3: 000000011f404000 CR4: 00000000003506a0 [ 40.574869][ T326] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 40.583114][ T326] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 40.591166][ T326] Kernel panic - not syncing: Fatal exception [ 40.597671][ T326] Kernel Offset: disabled [ 40.601987][ T326] Rebooting in 86400 seconds..