Warning: Permanently added '10.128.10.2' (ED25519) to the list of known hosts. 2026/01/16 10:17:15 ignoring optional flag "type"="gce" 2026/01/16 10:17:15 parsed 1 programs [ 42.761062][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 42.761078][ T30] audit: type=1400 audit(1768558635.294:92): avc: denied { unlink } for pid=328 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" 2026/01/16 10:17:15 executed programs: 0 [ 42.842341][ T328] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 42.900770][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.907910][ T334] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.915447][ T334] device bridge_slave_0 entered promiscuous mode [ 42.922332][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.929371][ T334] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.936934][ T334] device bridge_slave_1 entered promiscuous mode [ 42.984696][ T334] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.991826][ T334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.999106][ T334] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.006225][ T334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.024485][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.032089][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.039585][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.047252][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.056627][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.065024][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.072242][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.081210][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.089437][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.096521][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.108068][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.117842][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.132121][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.143031][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.151213][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.158627][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.167025][ T334] device veth0_vlan entered promiscuous mode [ 43.177506][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.186821][ T334] device veth1_macvtap entered promiscuous mode [ 43.196334][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.206351][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.228542][ T345] FAULT_INJECTION: forcing a failure. [ 43.228542][ T345] name failslab, interval 1, probability 0, space 0, times 1 [ 43.250642][ T345] CPU: 0 PID: 345 Comm: syz-executor.0 Not tainted syzkaller #0 [ 43.258345][ T345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 43.268439][ T345] Call Trace: [ 43.271956][ T345] [ 43.274894][ T345] __dump_stack+0x21/0x30 [ 43.279271][ T345] dump_stack_lvl+0xee/0x150 [ 43.284233][ T345] ? show_regs_print_info+0x20/0x20 [ 43.289447][ T345] dump_stack+0x15/0x20 [ 43.293606][ T345] should_fail+0x3c1/0x510 [ 43.298045][ T345] __should_failslab+0xa4/0xe0 [ 43.302898][ T345] should_failslab+0x9/0x20 [ 43.307537][ T345] slab_pre_alloc_hook+0x3b/0xe0 [ 43.312489][ T345] ? anon_vma_clone+0xc0/0x500 [ 43.317342][ T345] kmem_cache_alloc+0x44/0x260 [ 43.322123][ T345] anon_vma_clone+0xc0/0x500 [ 43.326716][ T345] anon_vma_fork+0x8c/0x510 [ 43.331219][ T345] copy_mm+0x9d1/0x13a0 [ 43.335558][ T345] ? copy_signal+0x600/0x600 [ 43.340175][ T345] ? __init_rwsem+0xfc/0x1d0 [ 43.344855][ T345] ? copy_signal+0x4cb/0x600 [ 43.349461][ T345] copy_process+0x115c/0x3210 [ 43.354145][ T345] ? __kasan_check_write+0x14/0x20 [ 43.359490][ T345] ? __pidfd_prepare+0x150/0x150 [ 43.364430][ T345] ? security_file_permission+0x83/0xa0 [ 43.369984][ T345] kernel_clone+0x23f/0x940 [ 43.374496][ T345] ? create_io_thread+0x130/0x130 [ 43.379536][ T345] ? __kasan_check_write+0x14/0x20 [ 43.384672][ T345] ? mutex_unlock+0x89/0x220 [ 43.389529][ T345] __x64_sys_clone+0x176/0x1d0 [ 43.394571][ T345] ? __kasan_check_write+0x14/0x20 [ 43.399685][ T345] ? __ia32_sys_vfork+0xf0/0xf0 [ 43.404538][ T345] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 43.410610][ T345] x64_sys_call+0x41f/0x9a0 [ 43.415209][ T345] do_syscall_64+0x4c/0xa0 [ 43.419657][ T345] ? clear_bhb_loop+0x50/0xa0 [ 43.424417][ T345] ? clear_bhb_loop+0x50/0xa0 [ 43.429099][ T345] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 43.435268][ T345] RIP: 0033:0x7fec75892ae9 [ 43.439744][ T345] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.459357][ T345] RSP: 002b:00007fec75415078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 43.467814][ T345] RAX: ffffffffffffffda RBX: 00007fec759b1f80 RCX: 00007fec75892ae9 [ 43.475790][ T345] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 43.483953][ T345] RBP: 00007fec75415120 R08: 0000000000000000 R09: 0000000000000000 [ 43.491924][ T345] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 43.499910][ T345] R13: 000000000000000b R14: 00007fec759b1f80 R15: 00007fff3ed98ea8 [ 43.507893][ T345] [ 43.512622][ T30] audit: type=1400 audit(1768558636.044:93): avc: denied { sys_admin } for pid=344 comm="syz-executor.0" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 43.557870][ T349] FAULT_INJECTION: forcing a failure. [ 43.557870][ T349] name failslab, interval 1, probability 0, space 0, times 0 [ 43.570805][ T349] CPU: 1 PID: 349 Comm: syz-executor.0 Not tainted syzkaller #0 [ 43.578480][ T349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 43.588680][ T349] Call Trace: [ 43.592112][ T349] [ 43.595065][ T349] __dump_stack+0x21/0x30 [ 43.599424][ T349] dump_stack_lvl+0xee/0x150 [ 43.604048][ T349] ? show_regs_print_info+0x20/0x20 [ 43.609285][ T349] dump_stack+0x15/0x20 [ 43.613473][ T349] should_fail+0x3c1/0x510 [ 43.617913][ T349] __should_failslab+0xa4/0xe0 [ 43.622885][ T349] should_failslab+0x9/0x20 [ 43.627518][ T349] slab_pre_alloc_hook+0x3b/0xe0 [ 43.632766][ T349] ? anon_vma_fork+0xf2/0x510 [ 43.637680][ T349] kmem_cache_alloc+0x44/0x260 [ 43.642655][ T349] anon_vma_fork+0xf2/0x510 [ 43.647217][ T349] copy_mm+0x9d1/0x13a0 [ 43.651401][ T349] ? copy_signal+0x600/0x600 [ 43.656016][ T349] ? __init_rwsem+0xfc/0x1d0 [ 43.660648][ T349] ? copy_signal+0x4cb/0x600 [ 43.665454][ T349] copy_process+0x115c/0x3210 [ 43.670172][ T349] ? __kasan_check_write+0x14/0x20 [ 43.675442][ T349] ? __pidfd_prepare+0x150/0x150 [ 43.680426][ T349] ? security_file_permission+0x83/0xa0 [ 43.686108][ T349] kernel_clone+0x23f/0x940 [ 43.690662][ T349] ? create_io_thread+0x130/0x130 [ 43.695720][ T349] ? __kasan_check_write+0x14/0x20 [ 43.700950][ T349] ? mutex_unlock+0x89/0x220 [ 43.705922][ T349] __x64_sys_clone+0x176/0x1d0 [ 43.710716][ T349] ? __kasan_check_write+0x14/0x20 [ 43.715965][ T349] ? __ia32_sys_vfork+0xf0/0xf0 [ 43.720890][ T349] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 43.727097][ T349] x64_sys_call+0x41f/0x9a0 [ 43.731634][ T349] do_syscall_64+0x4c/0xa0 [ 43.736104][ T349] ? clear_bhb_loop+0x50/0xa0 [ 43.740804][ T349] ? clear_bhb_loop+0x50/0xa0 [ 43.745786][ T349] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 43.751714][ T349] RIP: 0033:0x7fec75892ae9 [ 43.756169][ T349] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 43.775807][ T349] RSP: 002b:00007fec75415078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 43.784258][ T349] RAX: ffffffffffffffda RBX: 00007fec759b1f80 RCX: 00007fec75892ae9 [ 43.792264][ T349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 43.800278][ T349] RBP: 00007fec75415120 R08: 0000000000000000 R09: 0000000000000000 [ 43.808306][ T349] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 43.816305][ T349] R13: 000000000000000b R14: 00007fec759b1f80 R15: 00007fff3ed98ea8 [ 43.824519][ T349] [ 43.828519][ T349] ------------[ cut here ]------------ [ 43.834809][ T349] refcount_t: underflow; use-after-free. [ 43.840852][ T349] WARNING: CPU: 0 PID: 349 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 43.850277][ T349] Modules linked in: [ 43.854472][ T349] CPU: 0 PID: 349 Comm: syz-executor.0 Not tainted syzkaller #0 [ 43.862765][ T349] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 43.873265][ T349] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 43.880388][ T349] Code: 04 01 48 c7 c7 80 0f 63 85 e8 bc c3 53 02 0f 0b eb c3 e8 d3 95 1c ff c6 05 5e e1 99 04 01 48 c7 c7 e0 0f 63 85 e8 a0 c3 53 02 <0f> 0b eb a7 e8 b7 95 1c ff c6 05 3f e1 99 04 01 48 c7 c7 20 0f 63 [ 43.917097][ T347] syz-executor.0 (347) used greatest stack depth: 21728 bytes left [ 43.925190][ T349] RSP: 0018:ffffc90000db7928 EFLAGS: 00010246 [ 43.931543][ T349] RAX: 5b98daa2e3279c00 RBX: 0000000000000003 RCX: ffff88810d79a780 [ 43.939575][ T349] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 43.948783][ T349] RBP: ffffc90000db7938 R08: dffffc0000000000 R09: ffffed103ee04e93 [ 43.957131][ T349] R10: ffffed103ee04e93 R11: 1ffff1103ee04e92 R12: 000000008120d12e [ 43.966025][ T349] R13: ffff88810ddf0668 R14: 0000000000000003 R15: ffff888120d12181 [ 43.974297][ T349] FS: 00007fec754156c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 43.983383][ T349] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 43.990023][ T349] CR2: 0000564b97370000 CR3: 0000000124e3c000 CR4: 00000000003506b0 [ 43.998294][ T349] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 44.006315][ T349] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 44.014343][ T349] Call Trace: [ 44.017643][ T349] [ 44.021202][ T349] vm_area_free_no_check+0x132/0x140 [ 44.026531][ T349] copy_mm+0xe7d/0x13a0 [ 44.030957][ T349] ? copy_signal+0x600/0x600 [ 44.035580][ T349] ? __init_rwsem+0xfc/0x1d0 [ 44.040331][ T349] ? copy_signal+0x4cb/0x600 [ 44.045218][ T349] copy_process+0x115c/0x3210 [ 44.050075][ T349] ? __kasan_check_write+0x14/0x20 [ 44.055337][ T349] ? __pidfd_prepare+0x150/0x150 [ 44.060607][ T349] ? security_file_permission+0x83/0xa0 [ 44.066277][ T349] kernel_clone+0x23f/0x940 [ 44.070841][ T349] ? create_io_thread+0x130/0x130 [ 44.075988][ T349] ? __kasan_check_write+0x14/0x20 [ 44.081311][ T349] ? mutex_unlock+0x89/0x220 [ 44.085930][ T349] __x64_sys_clone+0x176/0x1d0 [ 44.090767][ T349] ? __kasan_check_write+0x14/0x20 [ 44.095906][ T349] ? __ia32_sys_vfork+0xf0/0xf0 [ 44.101310][ T349] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 44.107646][ T349] x64_sys_call+0x41f/0x9a0 [ 44.112214][ T349] do_syscall_64+0x4c/0xa0 [ 44.116767][ T349] ? clear_bhb_loop+0x50/0xa0 [ 44.121619][ T349] ? clear_bhb_loop+0x50/0xa0 [ 44.126363][ T349] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 44.132449][ T349] RIP: 0033:0x7fec75892ae9 [ 44.137075][ T349] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.156817][ T349] RSP: 002b:00007fec75415078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 44.165705][ T349] RAX: ffffffffffffffda RBX: 00007fec759b1f80 RCX: 00007fec75892ae9 [ 44.173876][ T349] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 44.182382][ T349] RBP: 00007fec75415120 R08: 0000000000000000 R09: 0000000000000000 [ 44.190628][ T349] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 44.198710][ T349] R13: 000000000000000b R14: 00007fec759b1f80 R15: 00007fff3ed98ea8 [ 44.206773][ T349] [ 44.209855][ T349] ---[ end trace f4d14105537d57d1 ]--- [ 44.222668][ T351] FAULT_INJECTION: forcing a failure. [ 44.222668][ T351] name failslab, interval 1, probability 0, space 0, times 0 [ 44.235486][ T351] CPU: 0 PID: 351 Comm: syz-executor.0 Tainted: G W syzkaller #0 [ 44.244563][ T351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.254727][ T351] Call Trace: [ 44.258054][ T351] [ 44.261038][ T351] __dump_stack+0x21/0x30 [ 44.265377][ T351] dump_stack_lvl+0xee/0x150 [ 44.270062][ T351] ? show_regs_print_info+0x20/0x20 [ 44.275349][ T351] dump_stack+0x15/0x20 [ 44.279683][ T351] should_fail+0x3c1/0x510 [ 44.284246][ T351] __should_failslab+0xa4/0xe0 [ 44.289133][ T351] should_failslab+0x9/0x20 [ 44.293659][ T351] slab_pre_alloc_hook+0x3b/0xe0 [ 44.298606][ T351] ? anon_vma_fork+0xf2/0x510 [ 44.303288][ T351] kmem_cache_alloc+0x44/0x260 [ 44.308203][ T351] anon_vma_fork+0xf2/0x510 [ 44.312715][ T351] copy_mm+0x9d1/0x13a0 [ 44.317202][ T351] ? copy_signal+0x600/0x600 [ 44.321809][ T351] ? __init_rwsem+0xfc/0x1d0 [ 44.326420][ T351] ? copy_signal+0x4cb/0x600 [ 44.331134][ T351] copy_process+0x115c/0x3210 [ 44.336037][ T351] ? __kasan_check_write+0x14/0x20 [ 44.341171][ T351] ? __pidfd_prepare+0x150/0x150 [ 44.346158][ T351] ? security_file_permission+0x83/0xa0 [ 44.351796][ T351] kernel_clone+0x23f/0x940 [ 44.356350][ T351] ? create_io_thread+0x130/0x130 [ 44.361471][ T351] ? __kasan_check_write+0x14/0x20 [ 44.366603][ T351] ? mutex_unlock+0x89/0x220 [ 44.371212][ T351] __x64_sys_clone+0x176/0x1d0 [ 44.376033][ T351] ? __kasan_check_write+0x14/0x20 [ 44.381166][ T351] ? __ia32_sys_vfork+0xf0/0xf0 [ 44.386026][ T351] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 44.392097][ T351] x64_sys_call+0x41f/0x9a0 [ 44.396602][ T351] do_syscall_64+0x4c/0xa0 [ 44.401049][ T351] ? clear_bhb_loop+0x50/0xa0 [ 44.405828][ T351] ? clear_bhb_loop+0x50/0xa0 [ 44.410508][ T351] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 44.416611][ T351] RIP: 0033:0x7fec75892ae9 [ 44.421035][ T351] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.440639][ T351] RSP: 002b:00007fec75415078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 44.449054][ T351] RAX: ffffffffffffffda RBX: 00007fec759b1f80 RCX: 00007fec75892ae9 [ 44.457230][ T351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 44.465319][ T351] RBP: 00007fec75415120 R08: 0000000000000000 R09: 0000000000000000 [ 44.473293][ T351] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 44.481265][ T351] R13: 000000000000000b R14: 00007fec759b1f80 R15: 00007fff3ed98ea8 [ 44.489348][ T351] [ 44.503707][ T353] FAULT_INJECTION: forcing a failure. [ 44.503707][ T353] name failslab, interval 1, probability 0, space 0, times 0 [ 44.516405][ T353] CPU: 1 PID: 353 Comm: syz-executor.0 Tainted: G W syzkaller #0 [ 44.525579][ T353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.535966][ T353] Call Trace: [ 44.539349][ T353] [ 44.542282][ T353] __dump_stack+0x21/0x30 [ 44.546623][ T353] dump_stack_lvl+0xee/0x150 [ 44.551218][ T353] ? show_regs_print_info+0x20/0x20 [ 44.556512][ T353] dump_stack+0x15/0x20 [ 44.560861][ T353] should_fail+0x3c1/0x510 [ 44.565289][ T353] __should_failslab+0xa4/0xe0 [ 44.570203][ T353] should_failslab+0x9/0x20 [ 44.574755][ T353] slab_pre_alloc_hook+0x3b/0xe0 [ 44.579824][ T353] ? anon_vma_fork+0x200/0x510 [ 44.584628][ T353] kmem_cache_alloc+0x44/0x260 [ 44.589417][ T353] anon_vma_fork+0x200/0x510 [ 44.594126][ T353] copy_mm+0x9d1/0x13a0 [ 44.598326][ T353] ? copy_signal+0x600/0x600 [ 44.602950][ T353] ? __init_rwsem+0xfc/0x1d0 [ 44.607649][ T353] ? copy_signal+0x4cb/0x600 [ 44.612288][ T353] copy_process+0x115c/0x3210 [ 44.617000][ T353] ? __kasan_check_write+0x14/0x20 [ 44.622138][ T353] ? __pidfd_prepare+0x150/0x150 [ 44.627098][ T353] ? security_file_permission+0x83/0xa0 [ 44.632700][ T353] kernel_clone+0x23f/0x940 [ 44.637284][ T353] ? create_io_thread+0x130/0x130 [ 44.642605][ T353] ? __kasan_check_write+0x14/0x20 [ 44.647737][ T353] ? mutex_unlock+0x89/0x220 [ 44.652341][ T353] __x64_sys_clone+0x176/0x1d0 [ 44.657403][ T353] ? __kasan_check_write+0x14/0x20 [ 44.662528][ T353] ? __ia32_sys_vfork+0xf0/0xf0 [ 44.667409][ T353] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 44.673512][ T353] x64_sys_call+0x41f/0x9a0 [ 44.678027][ T353] do_syscall_64+0x4c/0xa0 [ 44.682454][ T353] ? clear_bhb_loop+0x50/0xa0 [ 44.687378][ T353] ? clear_bhb_loop+0x50/0xa0 [ 44.692081][ T353] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 44.698019][ T353] RIP: 0033:0x7fec75892ae9 [ 44.702454][ T353] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 44.722257][ T353] RSP: 002b:00007fec75415078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 44.730774][ T353] RAX: ffffffffffffffda RBX: 00007fec759b1f80 RCX: 00007fec75892ae9 [ 44.738878][ T353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 44.746863][ T353] RBP: 00007fec75415120 R08: 0000000000000000 R09: 0000000000000000 [ 44.754952][ T353] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 44.763033][ T353] R13: 000000000000000b R14: 00007fec759b1f80 R15: 00007fff3ed98ea8 [ 44.771030][ T353] [ 44.782647][ T355] FAULT_INJECTION: forcing a failure. [ 44.782647][ T355] name failslab, interval 1, probability 0, space 0, times 0 [ 44.795666][ T355] CPU: 1 PID: 355 Comm: syz-executor.0 Tainted: G W syzkaller #0 [ 44.804807][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.815011][ T355] Call Trace: [ 44.818384][ T355] [ 44.821326][ T355] __dump_stack+0x21/0x30 [ 44.825758][ T355] dump_stack_lvl+0xee/0x150 [ 44.830436][ T355] ? show_regs_print_info+0x20/0x20 [ 44.835727][ T355] dump_stack+0x15/0x20 [ 44.839998][ T355] should_fail+0x3c1/0x510 [ 44.844449][ T355] __should_failslab+0xa4/0xe0 [ 44.849264][ T355] should_failslab+0x9/0x20 [ 44.853780][ T355] slab_pre_alloc_hook+0x3b/0xe0 [ 44.858840][ T355] ? anon_vma_clone+0xc0/0x500 [ 44.863612][ T355] kmem_cache_alloc+0x44/0x260 [ 44.868489][ T355] anon_vma_clone+0xc0/0x500 [ 44.873175][ T355] anon_vma_fork+0x8c/0x510 [ 44.877778][ T355] copy_mm+0x9d1/0x13a0 [ 44.882015][ T355] ? copy_signal+0x600/0x600 [ 44.886634][ T355] ? __init_rwsem+0xfc/0x1d0 [ 44.891246][ T355] ? copy_signal+0x4cb/0x600 [ 44.895842][ T355] copy_process+0x115c/0x3210 [ 44.900543][ T355] ? __kasan_check_write+0x14/0x20 [ 44.905878][ T355] ? __pidfd_prepare+0x150/0x150 [ 44.910969][ T355] ? security_file_permission+0x83/0xa0 [ 44.916539][ T355] kernel_clone+0x23f/0x940 [ 44.921174][ T355] ? create_io_thread+0x130/0x130 [ 44.926256][ T355] ? __kasan_check_write+0x14/0x20 [ 44.931478][ T355] ? mutex_unlock+0x89/0x220 [ 44.936226][ T355] __x64_sys_clone+0x176/0x1d0 [ 44.941011][ T355] ? __kasan_check_write+0x14/0x20 [ 44.946286][ T355] ? __ia32_sys_vfork+0xf0/0xf0 [ 44.951236][ T355] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 44.957316][ T355] x64_sys_call+0x41f/0x9a0 [ 44.961859][ T355] do_syscall_64+0x4c/0xa0 [ 44.966298][ T355] ? clear_bhb_loop+0x50/0xa0 [ 44.971308][ T355] ? clear_bhb_loop+0x50/0xa0 [ 44.976100][ T355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 44.982086][ T355] RIP: 0033:0x7fec75892ae9 [ 44.986507][ T355] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.006306][ T355] RSP: 002b:00007fec75415078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 45.014740][ T355] RAX: ffffffffffffffda RBX: 00007fec759b1f80 RCX: 00007fec75892ae9 [ 45.022714][ T355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 45.030695][ T355] RBP: 00007fec75415120 R08: 0000000000000000 R09: 0000000000000000 [ 45.038828][ T355] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 45.046963][ T355] R13: 000000000000000b R14: 00007fec759b1f80 R15: 00007fff3ed98ea8 [ 45.055057][ T355] [ 45.080854][ T358] FAULT_INJECTION: forcing a failure. [ 45.080854][ T358] name failslab, interval 1, probability 0, space 0, times 0 [ 45.093932][ T358] CPU: 1 PID: 358 Comm: syz-executor.0 Tainted: G W syzkaller #0 [ 45.103100][ T358] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.113575][ T358] Call Trace: [ 45.116944][ T358] [ 45.119915][ T358] __dump_stack+0x21/0x30 [ 45.124379][ T358] dump_stack_lvl+0xee/0x150 [ 45.129115][ T358] ? show_regs_print_info+0x20/0x20 [ 45.134391][ T358] dump_stack+0x15/0x20 [ 45.138599][ T358] should_fail+0x3c1/0x510 [ 45.143050][ T358] __should_failslab+0xa4/0xe0 [ 45.147854][ T358] should_failslab+0x9/0x20 [ 45.152395][ T358] slab_pre_alloc_hook+0x3b/0xe0 [ 45.157362][ T358] ? anon_vma_fork+0x200/0x510 [ 45.162154][ T358] kmem_cache_alloc+0x44/0x260 [ 45.166958][ T358] anon_vma_fork+0x200/0x510 [ 45.171677][ T358] copy_mm+0x9d1/0x13a0 [ 45.176409][ T358] ? copy_signal+0x600/0x600 [ 45.181144][ T358] ? __init_rwsem+0xfc/0x1d0 [ 45.185882][ T358] ? copy_signal+0x4cb/0x600 [ 45.190507][ T358] copy_process+0x115c/0x3210 [ 45.195313][ T358] ? __kasan_check_write+0x14/0x20 [ 45.200463][ T358] ? __pidfd_prepare+0x150/0x150 [ 45.205434][ T358] ? security_file_permission+0x83/0xa0 [ 45.211028][ T358] kernel_clone+0x23f/0x940 [ 45.215611][ T358] ? create_io_thread+0x130/0x130 [ 45.220802][ T358] ? __kasan_check_write+0x14/0x20 [ 45.225949][ T358] ? mutex_unlock+0x89/0x220 [ 45.230703][ T358] __x64_sys_clone+0x176/0x1d0 [ 45.235508][ T358] ? __kasan_check_write+0x14/0x20 [ 45.240658][ T358] ? __ia32_sys_vfork+0xf0/0xf0 [ 45.245640][ T358] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 45.252219][ T358] x64_sys_call+0x41f/0x9a0 [ 45.256951][ T358] do_syscall_64+0x4c/0xa0 [ 45.261416][ T358] ? clear_bhb_loop+0x50/0xa0 [ 45.266128][ T358] ? clear_bhb_loop+0x50/0xa0 [ 45.270842][ T358] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 45.276830][ T358] RIP: 0033:0x7fec75892ae9 [ 45.281363][ T358] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.301041][ T358] RSP: 002b:00007fec75415078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 45.309492][ T358] RAX: ffffffffffffffda RBX: 00007fec759b1f80 RCX: 00007fec75892ae9 [ 45.317492][ T358] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 45.325495][ T358] RBP: 00007fec75415120 R08: 0000000000000000 R09: 0000000000000000 [ 45.333504][ T358] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 45.341511][ T358] R13: 000000000000000b R14: 00007fec759b1f80 R15: 00007fff3ed98ea8 [ 45.349607][ T358] [ 45.362802][ T361] FAULT_INJECTION: forcing a failure. [ 45.362802][ T361] name failslab, interval 1, probability 0, space 0, times 0 [ 45.379445][ T361] CPU: 1 PID: 361 Comm: syz-executor.0 Tainted: G W syzkaller #0 [ 45.388507][ T361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.398647][ T361] Call Trace: [ 45.401923][ T361] [ 45.404849][ T361] __dump_stack+0x21/0x30 [ 45.409183][ T361] dump_stack_lvl+0xee/0x150 [ 45.413779][ T361] ? show_regs_print_info+0x20/0x20 [ 45.418988][ T361] dump_stack+0x15/0x20 [ 45.423144][ T361] should_fail+0x3c1/0x510 [ 45.427737][ T361] __should_failslab+0xa4/0xe0 [ 45.432686][ T361] should_failslab+0x9/0x20 [ 45.437289][ T361] slab_pre_alloc_hook+0x3b/0xe0 [ 45.442223][ T361] ? anon_vma_fork+0xf2/0x510 [ 45.446899][ T361] kmem_cache_alloc+0x44/0x260 [ 45.451746][ T361] anon_vma_fork+0xf2/0x510 [ 45.456251][ T361] copy_mm+0x9d1/0x13a0 [ 45.460402][ T361] ? copy_signal+0x600/0x600 [ 45.465049][ T361] ? __init_rwsem+0xfc/0x1d0 [ 45.469660][ T361] ? copy_signal+0x4cb/0x600 [ 45.474277][ T361] copy_process+0x115c/0x3210 [ 45.479064][ T361] ? __kasan_check_write+0x14/0x20 [ 45.484181][ T361] ? __pidfd_prepare+0x150/0x150 [ 45.489124][ T361] ? security_file_permission+0x83/0xa0 [ 45.494671][ T361] kernel_clone+0x23f/0x940 [ 45.499175][ T361] ? create_io_thread+0x130/0x130 [ 45.504634][ T361] ? __kasan_check_write+0x14/0x20 [ 45.509747][ T361] ? mutex_unlock+0x89/0x220 [ 45.514513][ T361] __x64_sys_clone+0x176/0x1d0 [ 45.519385][ T361] ? __kasan_check_write+0x14/0x20 [ 45.524494][ T361] ? __ia32_sys_vfork+0xf0/0xf0 [ 45.529454][ T361] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 45.535537][ T361] x64_sys_call+0x41f/0x9a0 [ 45.540047][ T361] do_syscall_64+0x4c/0xa0 [ 45.544471][ T361] ? clear_bhb_loop+0x50/0xa0 [ 45.549268][ T361] ? clear_bhb_loop+0x50/0xa0 [ 45.553946][ T361] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 45.560025][ T361] RIP: 0033:0x7fec75892ae9 [ 45.564470][ T361] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.584519][ T361] RSP: 002b:00007fec75415078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 45.593052][ T361] RAX: ffffffffffffffda RBX: 00007fec759b1f80 RCX: 00007fec75892ae9 [ 45.601030][ T361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 45.609002][ T361] RBP: 00007fec75415120 R08: 0000000000000000 R09: 0000000000000000 [ 45.616992][ T361] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 45.625161][ T361] R13: 000000000000000b R14: 00007fec759b1f80 R15: 00007fff3ed98ea8 [ 45.633232][ T361] [ 45.649831][ T363] FAULT_INJECTION: forcing a failure. [ 45.649831][ T363] name failslab, interval 1, probability 0, space 0, times 0 [ 45.662625][ T363] CPU: 0 PID: 363 Comm: syz-executor.0 Tainted: G W syzkaller #0 [ 45.671686][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.681831][ T363] Call Trace: [ 45.685245][ T363] [ 45.688292][ T363] __dump_stack+0x21/0x30 [ 45.692848][ T363] dump_stack_lvl+0xee/0x150 [ 45.697783][ T363] ? show_regs_print_info+0x20/0x20 [ 45.703178][ T363] dump_stack+0x15/0x20 [ 45.707380][ T363] should_fail+0x3c1/0x510 [ 45.711865][ T363] __should_failslab+0xa4/0xe0 [ 45.716640][ T363] should_failslab+0x9/0x20 [ 45.721436][ T363] slab_pre_alloc_hook+0x3b/0xe0 [ 45.726402][ T363] ? anon_vma_fork+0xf2/0x510 [ 45.731169][ T363] kmem_cache_alloc+0x44/0x260 [ 45.735940][ T363] anon_vma_fork+0xf2/0x510 [ 45.740451][ T363] copy_mm+0x9d1/0x13a0 [ 45.744609][ T363] ? copy_signal+0x600/0x600 [ 45.749206][ T363] ? __init_rwsem+0xfc/0x1d0 [ 45.753811][ T363] ? copy_signal+0x4cb/0x600 [ 45.758413][ T363] copy_process+0x115c/0x3210 [ 45.763104][ T363] ? __kasan_check_write+0x14/0x20 [ 45.768231][ T363] ? __pidfd_prepare+0x150/0x150 [ 45.773186][ T363] ? security_file_permission+0x83/0xa0 [ 45.778967][ T363] kernel_clone+0x23f/0x940 [ 45.783584][ T363] ? create_io_thread+0x130/0x130 [ 45.788618][ T363] ? __kasan_check_write+0x14/0x20 [ 45.793736][ T363] ? mutex_unlock+0x89/0x220 [ 45.798333][ T363] __x64_sys_clone+0x176/0x1d0 [ 45.803141][ T363] ? __kasan_check_write+0x14/0x20 [ 45.808252][ T363] ? __ia32_sys_vfork+0xf0/0xf0 [ 45.813108][ T363] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 45.819203][ T363] x64_sys_call+0x41f/0x9a0 [ 45.823742][ T363] do_syscall_64+0x4c/0xa0 [ 45.828281][ T363] ? clear_bhb_loop+0x50/0xa0 [ 45.833088][ T363] ? clear_bhb_loop+0x50/0xa0 [ 45.837770][ T363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 45.843845][ T363] RIP: 0033:0x7fec75892ae9 [ 45.848275][ T363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 45.867898][ T363] RSP: 002b:00007fec75415078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 45.876404][ T363] RAX: ffffffffffffffda RBX: 00007fec759b1f80 RCX: 00007fec75892ae9 [ 45.884376][ T363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 45.892348][ T363] RBP: 00007fec75415120 R08: 0000000000000000 R09: 0000000000000000 [ 45.900499][ T363] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 45.908519][ T363] R13: 000000000000000b R14: 00007fec759b1f80 R15: 00007fff3ed98ea8 [ 45.916676][ T363] [ 45.922710][ T363] ================================================================== [ 45.930814][ T363] BUG: KASAN: double-free or invalid-free in kfree+0xc4/0x270 [ 45.938332][ T363] [ 45.940683][ T363] CPU: 1 PID: 363 Comm: syz-executor.0 Tainted: G W syzkaller #0 [ 45.949849][ T363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 45.959917][ T363] Call Trace: [ 45.963208][ T363] [ 45.966161][ T363] __dump_stack+0x21/0x30 [ 45.970516][ T363] dump_stack_lvl+0xee/0x150 [ 45.975226][ T363] ? show_regs_print_info+0x20/0x20 [ 45.980459][ T363] ? load_image+0x3a0/0x3a0 [ 45.984994][ T363] ? kmem_cache_free+0x100/0x320 [ 45.990008][ T363] print_address_description+0x7f/0x2c0 [ 45.995587][ T363] ? kfree+0xc4/0x270 [ 45.999673][ T363] kasan_report_invalid_free+0x58/0x90 [ 46.005238][ T363] ? kfree+0xc4/0x270 [ 46.009442][ T363] ____kasan_slab_free+0x13d/0x160 [ 46.014670][ T363] __kasan_slab_free+0x11/0x20 [ 46.019572][ T363] slab_free_freelist_hook+0xc2/0x190 [ 46.024985][ T363] ? anon_vma_name_free+0x15/0x20 [ 46.030049][ T363] kfree+0xc4/0x270 [ 46.033886][ T363] ? anon_vma_name_free+0x15/0x20 [ 46.038936][ T363] anon_vma_name_free+0x15/0x20 [ 46.043805][ T363] vm_area_free_no_check+0xa9/0x140 [ 46.049034][ T363] copy_mm+0xe7d/0x13a0 [ 46.053291][ T363] ? copy_signal+0x600/0x600 [ 46.057913][ T363] ? __init_rwsem+0xfc/0x1d0 [ 46.062530][ T363] ? copy_signal+0x4cb/0x600 [ 46.067140][ T363] copy_process+0x115c/0x3210 [ 46.071845][ T363] ? __kasan_check_write+0x14/0x20 [ 46.076973][ T363] ? __pidfd_prepare+0x150/0x150 [ 46.082042][ T363] ? security_file_permission+0x83/0xa0 [ 46.087697][ T363] kernel_clone+0x23f/0x940 [ 46.092217][ T363] ? create_io_thread+0x130/0x130 [ 46.097287][ T363] ? __kasan_check_write+0x14/0x20 [ 46.102415][ T363] ? mutex_unlock+0x89/0x220 [ 46.107022][ T363] __x64_sys_clone+0x176/0x1d0 [ 46.111802][ T363] ? __kasan_check_write+0x14/0x20 [ 46.117324][ T363] ? __ia32_sys_vfork+0xf0/0xf0 [ 46.122204][ T363] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 46.128395][ T363] x64_sys_call+0x41f/0x9a0 [ 46.132929][ T363] do_syscall_64+0x4c/0xa0 [ 46.137388][ T363] ? clear_bhb_loop+0x50/0xa0 [ 46.142084][ T363] ? clear_bhb_loop+0x50/0xa0 [ 46.146773][ T363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.152958][ T363] RIP: 0033:0x7fec75892ae9 [ 46.157846][ T363] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.177687][ T363] RSP: 002b:00007fec75415078 EFLAGS: 00000202 ORIG_RAX: 0000000000000038 [ 46.186376][ T363] RAX: ffffffffffffffda RBX: 00007fec759b1f80 RCX: 00007fec75892ae9 [ 46.194880][ T363] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 00000000738c0480 [ 46.202966][ T363] RBP: 00007fec75415120 R08: 0000000000000000 R09: 0000000000000000 [ 46.211068][ T363] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000002 [ 46.219055][ T363] R13: 000000000000000b R14: 00007fec759b1f80 R15: 00007fff3ed98ea8 [ 46.227233][ T363] [ 46.230270][ T363] [ 46.232607][ T363] Allocated by task 333: [ 46.236879][ T363] __kasan_slab_alloc+0xbd/0xf0 [ 46.241764][ T363] slab_post_alloc_hook+0x4f/0x2b0 [ 46.246891][ T363] kmem_cache_alloc+0xf7/0x260 [ 46.251913][ T363] vm_area_dup+0x26/0x210 [ 46.256282][ T363] copy_mm+0x93a/0x13a0 [ 46.260459][ T363] copy_process+0x115c/0x3210 [ 46.265256][ T363] kernel_clone+0x23f/0x940 [ 46.269780][ T363] __x64_sys_clone+0x176/0x1d0 [ 46.274567][ T363] x64_sys_call+0x41f/0x9a0 [ 46.279090][ T363] do_syscall_64+0x4c/0xa0 [ 46.283520][ T363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.289445][ T363] [ 46.291783][ T363] The buggy address belongs to the object at ffff888124f44818 [ 46.291783][ T363] which belongs to the cache vm_area_struct of size 232 [ 46.306232][ T363] The buggy address is located 88 bytes inside of [ 46.306232][ T363] 232-byte region [ffff888124f44818, ffff888124f44900) [ 46.319753][ T363] The buggy address belongs to the page: [ 46.325390][ T363] page:ffffea000493d100 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x124f44 [ 46.335923][ T363] flags: 0x4000000000000200(slab|zone=1) [ 46.341783][ T363] raw: 4000000000000200 0000000000000000 dead000000000122 ffff888100186c00 [ 46.350569][ T363] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 46.359157][ T363] page dumped because: kasan: bad access detected [ 46.365586][ T363] page_owner tracks the page as allocated [ 46.371310][ T363] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 333, ts 42868887050, free_ts 36604821026 [ 46.387394][ T363] post_alloc_hook+0x192/0x1b0 [ 46.392262][ T363] prep_new_page+0x1c/0x110 [ 46.396868][ T363] get_page_from_freelist+0x2cc5/0x2d50 [ 46.402423][ T363] __alloc_pages+0x18f/0x440 [ 46.407025][ T363] new_slab+0xa1/0x4d0 [ 46.411222][ T363] ___slab_alloc+0x381/0x810 [ 46.415910][ T363] __slab_alloc+0x49/0x90 [ 46.420262][ T363] kmem_cache_alloc+0x138/0x260 [ 46.425123][ T363] vm_area_dup+0x26/0x210 [ 46.429461][ T363] copy_mm+0x93a/0x13a0 [ 46.433626][ T363] copy_process+0x115c/0x3210 [ 46.438415][ T363] kernel_clone+0x23f/0x940 [ 46.442992][ T363] __x64_sys_clone+0x176/0x1d0 [ 46.447777][ T363] x64_sys_call+0x41f/0x9a0 [ 46.452445][ T363] do_syscall_64+0x4c/0xa0 [ 46.456883][ T363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.462852][ T363] page last free stack trace: [ 46.467535][ T363] free_unref_page_prepare+0x542/0x550 [ 46.473009][ T363] free_unref_page+0xa2/0x550 [ 46.477698][ T363] __put_page+0xad/0xe0 [ 46.481861][ T363] anon_pipe_buf_release+0x183/0x200 [ 46.487166][ T363] pipe_read+0x53d/0xfe0 [ 46.491422][ T363] vfs_read+0x68b/0xbe0 [ 46.495597][ T363] ksys_read+0x140/0x240 [ 46.499950][ T363] __x64_sys_read+0x7b/0x90 [ 46.504472][ T363] x64_sys_call+0x96d/0x9a0 [ 46.508984][ T363] do_syscall_64+0x4c/0xa0 [ 46.513413][ T363] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.519435][ T363] [ 46.521790][ T363] Memory state around the buggy address: [ 46.527528][ T363] ffff888124f44700: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 46.535734][ T363] ffff888124f44780: fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc [ 46.543823][ T363] >ffff888124f44800: fc fc fc 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.552030][ T363] ^ [ 46.560032][ T363] ffff888124f44880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 46.568205][ T363] ffff888124f44900: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 46.576269][ T363] ================================================================== [ 46.584418][ T363] Disabling lock debugging due to kernel taint [ 46.596905][ T30] audit: type=1400 audit(1768558639.124:94): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 46.619164][ T30] audit: type=1400 audit(1768558639.124:95): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.640599][ T30] audit: type=1400 audit(1768558639.124:96): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.661939][ T30] audit: type=1400 audit(1768558639.124:97): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 46.665569][ T334] general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] PREEMPT SMP KASAN [ 46.682807][ T30] audit: type=1400 audit(1768558639.124:98): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.694624][ T334] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 46.694641][ T334] CPU: 0 PID: 334 Comm: syz-executor.0 Tainted: G B W syzkaller #0 [ 46.715083][ T30] audit: type=1400 audit(1768558639.124:99): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.723511][ T334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.723525][ T334] RIP: 0010:__rb_insert_augmented+0xa9/0x720 [ 46.733920][ T30] audit: type=1400 audit(1768558639.124:100): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 46.756264][ T334] Code: 3a ff 49 8b 07 a8 01 0f 85 53 06 00 00 4c 89 65 c8 48 89 45 d0 4c 8d 70 08 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 00 00 fc ff df <80> 3c 03 00 74 08 4c 89 f7 e8 09 9a 3a ff 4d 8b 26 4d 39 fc 74 34 [ 46.756287][ T334] RSP: 0018:ffffc900009a78c0 EFLAGS: 00010202 [ 46.756307][ T334] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: dffffc0000000000 [ 46.756324][ T334] RDX: ffffffff819b0830 RSI: ffff8881099166a0 RDI: ffff88810d584ac0 [ 46.756340][ T334] RBP: ffffc900009a7920 R08: dffffc0000000000 R09: ffff88810d584ac8 [ 46.756356][ T334] R10: ffffed1021ab095b R11: 1ffff11021ab0959 R12: ffff88810d584ac0 [ 46.853974][ T334] R13: 1ffff110249e890e R14: 0000000000000008 R15: ffff888124f44870 [ 46.862180][ T334] FS: 000055555b7ec480(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 46.871140][ T334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.877726][ T334] CR2: 00007fec764db6be CR3: 0000000124f4b000 CR4: 00000000003506b0 [ 46.885715][ T334] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.893714][ T334] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.901702][ T334] Call Trace: [ 46.905027][ T334] [ 46.907959][ T334] ? clear_nonspinnable+0x60/0x60 [ 46.913086][ T334] ? anon_vma_interval_tree_iter_next+0x380/0x380 [ 46.919605][ T334] vma_interval_tree_insert_after+0x2a1/0x2b0 [ 46.925695][ T334] copy_mm+0xb20/0x13a0 [ 46.929913][ T334] ? copy_signal+0x600/0x600 [ 46.934511][ T334] ? __init_rwsem+0xfc/0x1d0 [ 46.939117][ T334] ? copy_signal+0x4cb/0x600 [ 46.943726][ T334] copy_process+0x115c/0x3210 [ 46.948503][ T334] ? __pidfd_prepare+0x150/0x150 [ 46.953504][ T334] kernel_clone+0x23f/0x940 [ 46.958036][ T334] ? do_user_addr_fault+0xa64/0x1180 [ 46.963350][ T334] ? create_io_thread+0x130/0x130 [ 46.968395][ T334] __x64_sys_clone+0x176/0x1d0 [ 46.973172][ T334] ? __ia32_sys_vfork+0xf0/0xf0 [ 46.978107][ T334] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 46.984171][ T334] x64_sys_call+0x41f/0x9a0 [ 46.988777][ T334] do_syscall_64+0x4c/0xa0 [ 46.993205][ T334] ? clear_bhb_loop+0x50/0xa0 [ 46.997887][ T334] ? clear_bhb_loop+0x50/0xa0 [ 47.002560][ T334] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.008632][ T334] RIP: 0033:0x7fec7588fb13 [ 47.013054][ T334] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 47.032658][ T334] RSP: 002b:00007fff3ed990b8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 47.041190][ T334] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fec7588fb13 [ 47.049158][ T334] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 47.057240][ T334] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 47.065403][ T334] R10: 000055555b7ec750 R11: 0000000000000246 R12: 0000000000000001 [ 47.073548][ T334] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 47.081740][ T334] [ 47.084764][ T334] Modules linked in: [ 47.089646][ T334] ---[ end trace f4d14105537d57d2 ]--- [ 47.095322][ T334] RIP: 0010:__rb_insert_augmented+0xa9/0x720 [ 47.101413][ T334] Code: 3a ff 49 8b 07 a8 01 0f 85 53 06 00 00 4c 89 65 c8 48 89 45 d0 4c 8d 70 08 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 00 00 fc ff df <80> 3c 03 00 74 08 4c 89 f7 e8 09 9a 3a ff 4d 8b 26 4d 39 fc 74 34 [ 47.121250][ T334] RSP: 0018:ffffc900009a78c0 EFLAGS: 00010202 [ 47.127758][ T334] RAX: dffffc0000000000 RBX: 0000000000000001 RCX: dffffc0000000000 [ 47.135919][ T334] RDX: ffffffff819b0830 RSI: ffff8881099166a0 RDI: ffff88810d584ac0 [ 47.144019][ T334] RBP: ffffc900009a7920 R08: dffffc0000000000 R09: ffff88810d584ac8 [ 47.152285][ T334] R10: ffffed1021ab095b R11: 1ffff11021ab0959 R12: ffff88810d584ac0 [ 47.160351][ T334] R13: 1ffff110249e890e R14: 0000000000000008 R15: ffff888124f44870 [ 47.168413][ T334] FS: 000055555b7ec480(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 47.177695][ T334] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.184491][ T334] CR2: 00007fec759ae000 CR3: 0000000124f4b000 CR4: 00000000003506a0 [ 47.192607][ T334] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.200682][ T334] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.208743][ T334] Kernel panic - not syncing: Fatal exception [ 47.215289][ T334] Kernel Offset: disabled [ 47.219709][ T334] Rebooting in 86400 seconds..