Warning: Permanently added '10.128.1.41' (ED25519) to the list of known hosts. 2025/08/06 02:12:41 ignoring optional flag "sandboxArg"="0" 2025/08/06 02:12:41 ignoring optional flag "type"="gce" 2025/08/06 02:12:41 parsed 1 programs 2025/08/06 02:12:41 executed programs: 0 [ 46.184932][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.192466][ T331] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.199822][ T331] device bridge_slave_0 entered promiscuous mode [ 46.207014][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.214079][ T331] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.221614][ T331] device bridge_slave_1 entered promiscuous mode [ 46.268018][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.275098][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.282938][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.290605][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.309924][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.317526][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.325537][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.333541][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.343313][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.351779][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.358826][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.367903][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.376364][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.383531][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.396640][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.406116][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.420386][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.432965][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.441567][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.449147][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.457680][ T331] device veth0_vlan entered promiscuous mode [ 46.467829][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.477390][ T331] device veth1_macvtap entered promiscuous mode [ 46.486941][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.497204][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.517918][ T342] FAULT_INJECTION: forcing a failure. [ 46.517918][ T342] name failslab, interval 1, probability 0, space 0, times 1 [ 46.530848][ T342] CPU: 1 PID: 342 Comm: syz-executor.0 Not tainted 5.15.189-syzkaller-1081280-gf32b52534f1d #0 [ 46.541650][ T342] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.552131][ T342] Call Trace: [ 46.555725][ T342] [ 46.558695][ T342] __dump_stack+0x21/0x30 [ 46.563154][ T342] dump_stack_lvl+0xee/0x150 [ 46.567866][ T342] ? show_regs_print_info+0x20/0x20 [ 46.573091][ T342] dump_stack+0x15/0x20 [ 46.577652][ T342] should_fail+0x3c1/0x510 [ 46.582176][ T342] __should_failslab+0xa4/0xe0 [ 46.587565][ T342] should_failslab+0x9/0x20 [ 46.592313][ T342] slab_pre_alloc_hook+0x3b/0xe0 [ 46.597676][ T342] ? anon_vma_fork+0xf2/0x510 [ 46.602471][ T342] kmem_cache_alloc+0x44/0x260 [ 46.607258][ T342] anon_vma_fork+0xf2/0x510 [ 46.611767][ T342] copy_mm+0x9d1/0x1390 [ 46.615921][ T342] ? copy_signal+0x600/0x600 [ 46.620503][ T342] ? __init_rwsem+0xfc/0x1d0 [ 46.625105][ T342] ? copy_signal+0x4cb/0x600 [ 46.629710][ T342] copy_process+0x115c/0x3210 [ 46.634396][ T342] ? __kasan_check_write+0x14/0x20 [ 46.639533][ T342] ? __pidfd_prepare+0x150/0x150 [ 46.644496][ T342] ? security_file_permission+0x83/0xa0 [ 46.650157][ T342] kernel_clone+0x23f/0x940 [ 46.654789][ T342] ? create_io_thread+0x130/0x130 [ 46.659915][ T342] ? __kasan_check_write+0x14/0x20 [ 46.665120][ T342] ? mutex_unlock+0x89/0x220 [ 46.669833][ T342] __x64_sys_clone+0x176/0x1d0 [ 46.674783][ T342] ? __kasan_check_write+0x14/0x20 [ 46.679992][ T342] ? __ia32_sys_vfork+0xf0/0xf0 [ 46.685193][ T342] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 46.691452][ T342] x64_sys_call+0x41f/0x9a0 [ 46.695975][ T342] do_syscall_64+0x4c/0xa0 [ 46.700412][ T342] ? clear_bhb_loop+0x50/0xa0 [ 46.705111][ T342] ? clear_bhb_loop+0x50/0xa0 [ 46.709907][ T342] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 46.716119][ T342] RIP: 0033:0x7f57e8858959 [ 46.720663][ T342] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 46.741640][ T342] RSP: 002b:00007f57e83db078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 46.750172][ T342] RAX: ffffffffffffffda RBX: 00007f57e8977f80 RCX: 00007f57e8858959 [ 46.758379][ T342] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 46.766444][ T342] RBP: 00007f57e83db120 R08: 0000000000000000 R09: 0000000000000000 [ 46.774679][ T342] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 46.783004][ T342] R13: 000000000000000b R14: 00007f57e8977f80 R15: 00007fff27ba69b8 [ 46.791100][ T342] [ 46.804556][ T346] FAULT_INJECTION: forcing a failure. [ 46.804556][ T346] name failslab, interval 1, probability 0, space 0, times 0 [ 46.817694][ T346] CPU: 0 PID: 346 Comm: syz-executor.0 Not tainted 5.15.189-syzkaller-1081280-gf32b52534f1d #0 [ 46.828438][ T346] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 46.839353][ T346] Call Trace: [ 46.842759][ T346] [ 46.845693][ T346] __dump_stack+0x21/0x30 [ 46.850029][ T346] dump_stack_lvl+0xee/0x150 [ 46.854630][ T346] ? show_regs_print_info+0x20/0x20 [ 46.860340][ T346] dump_stack+0x15/0x20 [ 46.864540][ T346] should_fail+0x3c1/0x510 [ 46.868976][ T346] __should_failslab+0xa4/0xe0 [ 46.873931][ T346] should_failslab+0x9/0x20 [ 46.878447][ T346] slab_pre_alloc_hook+0x3b/0xe0 [ 46.883391][ T346] ? anon_vma_fork+0xf2/0x510 [ 46.888084][ T346] kmem_cache_alloc+0x44/0x260 [ 46.893473][ T346] anon_vma_fork+0xf2/0x510 [ 46.898241][ T346] copy_mm+0x9d1/0x1390 [ 46.902656][ T346] ? copy_signal+0x600/0x600 [ 46.907349][ T346] ? __init_rwsem+0xfc/0x1d0 [ 46.912039][ T346] ? copy_signal+0x4cb/0x600 [ 46.916822][ T346] copy_process+0x115c/0x3210 [ 46.921533][ T346] ? __kasan_check_write+0x14/0x20 [ 46.926658][ T346] ? __pidfd_prepare+0x150/0x150 [ 46.931812][ T346] ? security_file_permission+0x83/0xa0 [ 46.937626][ T346] kernel_clone+0x23f/0x940 [ 46.942364][ T346] ? create_io_thread+0x130/0x130 [ 46.947498][ T346] ? __kasan_check_write+0x14/0x20 [ 46.952765][ T346] ? mutex_unlock+0x89/0x220 [ 46.957377][ T346] __x64_sys_clone+0x176/0x1d0 [ 46.962321][ T346] ? __kasan_check_write+0x14/0x20 [ 46.967450][ T346] ? __ia32_sys_vfork+0xf0/0xf0 [ 46.972318][ T346] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 46.978400][ T346] x64_sys_call+0x41f/0x9a0 [ 46.982916][ T346] do_syscall_64+0x4c/0xa0 [ 46.987340][ T346] ? clear_bhb_loop+0x50/0xa0 [ 46.992019][ T346] ? clear_bhb_loop+0x50/0xa0 [ 46.996845][ T346] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.003071][ T346] RIP: 0033:0x7f57e8858959 [ 47.007646][ T346] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.027752][ T346] RSP: 002b:00007f57e83db078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 47.036865][ T346] RAX: ffffffffffffffda RBX: 00007f57e8977f80 RCX: 00007f57e8858959 [ 47.045424][ T346] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 47.053863][ T346] RBP: 00007f57e83db120 R08: 0000000000000000 R09: 0000000000000000 [ 47.062282][ T346] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 47.070470][ T346] R13: 000000000000000b R14: 00007f57e8977f80 R15: 00007fff27ba69b8 [ 47.078802][ T346] [ 47.090504][ T348] FAULT_INJECTION: forcing a failure. [ 47.090504][ T348] name failslab, interval 1, probability 0, space 0, times 0 [ 47.103308][ T348] CPU: 0 PID: 348 Comm: syz-executor.0 Not tainted 5.15.189-syzkaller-1081280-gf32b52534f1d #0 [ 47.113936][ T348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.124088][ T348] Call Trace: [ 47.127390][ T348] [ 47.130327][ T348] __dump_stack+0x21/0x30 [ 47.134920][ T348] dump_stack_lvl+0xee/0x150 [ 47.139628][ T348] ? show_regs_print_info+0x20/0x20 [ 47.144844][ T348] dump_stack+0x15/0x20 [ 47.149011][ T348] should_fail+0x3c1/0x510 [ 47.153554][ T348] __should_failslab+0xa4/0xe0 [ 47.158592][ T348] should_failslab+0x9/0x20 [ 47.163211][ T348] slab_pre_alloc_hook+0x3b/0xe0 [ 47.168158][ T348] ? anon_vma_clone+0xc0/0x500 [ 47.173229][ T348] kmem_cache_alloc+0x44/0x260 [ 47.178000][ T348] anon_vma_clone+0xc0/0x500 [ 47.182596][ T348] anon_vma_fork+0x8c/0x510 [ 47.187118][ T348] copy_mm+0x9d1/0x1390 [ 47.191488][ T348] ? copy_signal+0x600/0x600 [ 47.196380][ T348] ? __init_rwsem+0xfc/0x1d0 [ 47.200983][ T348] ? copy_signal+0x4cb/0x600 [ 47.205681][ T348] copy_process+0x115c/0x3210 [ 47.210614][ T348] ? __kasan_check_write+0x14/0x20 [ 47.215783][ T348] ? __pidfd_prepare+0x150/0x150 [ 47.220733][ T348] ? security_file_permission+0x83/0xa0 [ 47.226301][ T348] kernel_clone+0x23f/0x940 [ 47.230995][ T348] ? create_io_thread+0x130/0x130 [ 47.236145][ T348] ? __kasan_check_write+0x14/0x20 [ 47.241356][ T348] ? mutex_unlock+0x89/0x220 [ 47.246069][ T348] __x64_sys_clone+0x176/0x1d0 [ 47.250843][ T348] ? __kasan_check_write+0x14/0x20 [ 47.256057][ T348] ? __ia32_sys_vfork+0xf0/0xf0 [ 47.261023][ T348] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 47.267162][ T348] x64_sys_call+0x41f/0x9a0 [ 47.271672][ T348] do_syscall_64+0x4c/0xa0 [ 47.276093][ T348] ? clear_bhb_loop+0x50/0xa0 [ 47.280774][ T348] ? clear_bhb_loop+0x50/0xa0 [ 47.285469][ T348] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.291565][ T348] RIP: 0033:0x7f57e8858959 [ 47.295983][ T348] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.316274][ T348] RSP: 002b:00007f57e83db078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 47.325039][ T348] RAX: ffffffffffffffda RBX: 00007f57e8977f80 RCX: 00007f57e8858959 [ 47.333882][ T348] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 47.342653][ T348] RBP: 00007f57e83db120 R08: 0000000000000000 R09: 0000000000000000 [ 47.350982][ T348] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 47.359134][ T348] R13: 000000000000000b R14: 00007f57e8977f80 R15: 00007fff27ba69b8 [ 47.367446][ T348] [ 47.392754][ T351] FAULT_INJECTION: forcing a failure. [ 47.392754][ T351] name failslab, interval 1, probability 0, space 0, times 0 [ 47.406250][ T351] CPU: 0 PID: 351 Comm: syz-executor.0 Not tainted 5.15.189-syzkaller-1081280-gf32b52534f1d #0 [ 47.417851][ T351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.428037][ T351] Call Trace: [ 47.431329][ T351] [ 47.434357][ T351] __dump_stack+0x21/0x30 [ 47.438869][ T351] dump_stack_lvl+0xee/0x150 [ 47.443569][ T351] ? show_regs_print_info+0x20/0x20 [ 47.448971][ T351] dump_stack+0x15/0x20 [ 47.453283][ T351] should_fail+0x3c1/0x510 [ 47.457716][ T351] __should_failslab+0xa4/0xe0 [ 47.462584][ T351] should_failslab+0x9/0x20 [ 47.467090][ T351] slab_pre_alloc_hook+0x3b/0xe0 [ 47.472029][ T351] ? anon_vma_fork+0x200/0x510 [ 47.476795][ T351] kmem_cache_alloc+0x44/0x260 [ 47.481724][ T351] anon_vma_fork+0x200/0x510 [ 47.486513][ T351] copy_mm+0x9d1/0x1390 [ 47.490823][ T351] ? copy_signal+0x600/0x600 [ 47.495419][ T351] ? __init_rwsem+0xfc/0x1d0 [ 47.500019][ T351] ? copy_signal+0x4cb/0x600 [ 47.504696][ T351] copy_process+0x115c/0x3210 [ 47.509695][ T351] ? __kasan_check_write+0x14/0x20 [ 47.514929][ T351] ? __pidfd_prepare+0x150/0x150 [ 47.520094][ T351] ? security_file_permission+0x83/0xa0 [ 47.525686][ T351] kernel_clone+0x23f/0x940 [ 47.530328][ T351] ? create_io_thread+0x130/0x130 [ 47.535599][ T351] ? __kasan_check_write+0x14/0x20 [ 47.540849][ T351] ? mutex_unlock+0x89/0x220 [ 47.545898][ T351] __x64_sys_clone+0x176/0x1d0 [ 47.551001][ T351] ? __kasan_check_write+0x14/0x20 [ 47.556409][ T351] ? __ia32_sys_vfork+0xf0/0xf0 [ 47.561539][ T351] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 47.567708][ T351] x64_sys_call+0x41f/0x9a0 [ 47.572681][ T351] do_syscall_64+0x4c/0xa0 [ 47.577258][ T351] ? clear_bhb_loop+0x50/0xa0 [ 47.582307][ T351] ? clear_bhb_loop+0x50/0xa0 [ 47.587276][ T351] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.593571][ T351] RIP: 0033:0x7f57e8858959 [ 47.598407][ T351] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.618865][ T351] RSP: 002b:00007f57e83db078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 47.627292][ T351] RAX: ffffffffffffffda RBX: 00007f57e8977f80 RCX: 00007f57e8858959 [ 47.635884][ T351] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 47.644666][ T351] RBP: 00007f57e83db120 R08: 0000000000000000 R09: 0000000000000000 [ 47.653031][ T351] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 47.661200][ T351] R13: 000000000000000b R14: 00007f57e8977f80 R15: 00007fff27ba69b8 [ 47.669283][ T351] [ 47.684787][ T353] FAULT_INJECTION: forcing a failure. [ 47.684787][ T353] name failslab, interval 1, probability 0, space 0, times 0 [ 47.697999][ T353] CPU: 1 PID: 353 Comm: syz-executor.0 Not tainted 5.15.189-syzkaller-1081280-gf32b52534f1d #0 [ 47.709040][ T353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 47.719361][ T353] Call Trace: [ 47.722667][ T353] [ 47.725752][ T353] __dump_stack+0x21/0x30 [ 47.730172][ T353] dump_stack_lvl+0xee/0x150 [ 47.734795][ T353] ? show_regs_print_info+0x20/0x20 [ 47.740266][ T353] dump_stack+0x15/0x20 [ 47.744518][ T353] should_fail+0x3c1/0x510 [ 47.748959][ T353] __should_failslab+0xa4/0xe0 [ 47.753731][ T353] should_failslab+0x9/0x20 [ 47.758475][ T353] slab_pre_alloc_hook+0x3b/0xe0 [ 47.763556][ T353] ? anon_vma_fork+0xf2/0x510 [ 47.768342][ T353] kmem_cache_alloc+0x44/0x260 [ 47.773394][ T353] anon_vma_fork+0xf2/0x510 [ 47.777968][ T353] copy_mm+0x9d1/0x1390 [ 47.782239][ T353] ? copy_signal+0x600/0x600 [ 47.787066][ T353] ? __init_rwsem+0xfc/0x1d0 [ 47.792045][ T353] ? copy_signal+0x4cb/0x600 [ 47.796786][ T353] copy_process+0x115c/0x3210 [ 47.801580][ T353] ? __kasan_check_write+0x14/0x20 [ 47.807059][ T353] ? __pidfd_prepare+0x150/0x150 [ 47.812245][ T353] ? security_file_permission+0x83/0xa0 [ 47.817822][ T353] kernel_clone+0x23f/0x940 [ 47.822677][ T353] ? create_io_thread+0x130/0x130 [ 47.828060][ T353] ? __kasan_check_write+0x14/0x20 [ 47.833274][ T353] ? mutex_unlock+0x89/0x220 [ 47.837877][ T353] __x64_sys_clone+0x176/0x1d0 [ 47.842741][ T353] ? __kasan_check_write+0x14/0x20 [ 47.847892][ T353] ? __ia32_sys_vfork+0xf0/0xf0 [ 47.852922][ T353] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 47.859236][ T353] x64_sys_call+0x41f/0x9a0 [ 47.863958][ T353] do_syscall_64+0x4c/0xa0 [ 47.868384][ T353] ? clear_bhb_loop+0x50/0xa0 [ 47.873069][ T353] ? clear_bhb_loop+0x50/0xa0 [ 47.877849][ T353] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 47.884043][ T353] RIP: 0033:0x7f57e8858959 [ 47.888479][ T353] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 47.908502][ T353] RSP: 002b:00007f57e83db078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 47.917232][ T353] RAX: ffffffffffffffda RBX: 00007f57e8977f80 RCX: 00007f57e8858959 [ 47.925300][ T353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 47.933564][ T353] RBP: 00007f57e83db120 R08: 0000000000000000 R09: 0000000000000000 [ 47.941572][ T353] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 47.949911][ T353] R13: 000000000000000b R14: 00007f57e8977f80 R15: 00007fff27ba69b8 [ 47.958078][ T353] [ 47.961858][ T353] ------------[ cut here ]------------ [ 47.967632][ T353] refcount_t: underflow; use-after-free. [ 47.974162][ T353] WARNING: CPU: 1 PID: 353 at lib/refcount.c:28 refcount_warn_saturate+0x120/0x1a0 [ 47.983694][ T353] Modules linked in: [ 47.987616][ T353] CPU: 1 PID: 353 Comm: syz-executor.0 Not tainted 5.15.189-syzkaller-1081280-gf32b52534f1d #0 [ 47.998267][ T353] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.008826][ T353] RIP: 0010:refcount_warn_saturate+0x120/0x1a0 [ 48.015321][ T353] Code: 04 01 48 c7 c7 a0 fb 62 85 e8 6c c4 50 02 0f 0b eb c3 e8 03 c7 1c ff c6 05 cf eb 99 04 01 48 c7 c7 00 fc 62 85 e8 50 c4 50 02 <0f> 0b eb a7 e8 e7 c6 1c ff c6 05 b0 eb 99 04 01 48 c7 c7 40 fb 62 [ 48.035278][ T353] RSP: 0018:ffffc90000e2f928 EFLAGS: 00010246 [ 48.041663][ T353] RAX: 2d354df66a57d900 RBX: 0000000000000003 RCX: ffff88810d3f13c0 [ 48.049850][ T353] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 48.058033][ T353] RBP: ffffc90000e2f938 R08: dffffc0000000000 R09: ffffed103ee065e8 [ 48.066608][ T353] R10: ffffed103ee065e8 R11: 1ffff1103ee065e7 R12: 0000000000000000 [ 48.074849][ T353] R13: ffff88810d2be1c8 R14: 0000000000000003 R15: ffff888109c2f181 [ 48.083708][ T353] FS: 00007f57e83db6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 48.093401][ T353] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.100261][ T353] CR2: 000055efa29c1c40 CR3: 0000000123901000 CR4: 00000000003506b0 [ 48.108331][ T353] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.116487][ T353] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.124731][ T353] Call Trace: [ 48.128145][ T353] [ 48.131154][ T353] vm_area_free_no_check+0x132/0x140 [ 48.136581][ T353] copy_mm+0xe77/0x1390 [ 48.140952][ T353] ? copy_signal+0x600/0x600 [ 48.145763][ T353] ? __init_rwsem+0xfc/0x1d0 [ 48.150749][ T353] ? copy_signal+0x4cb/0x600 [ 48.155510][ T353] copy_process+0x115c/0x3210 [ 48.160227][ T353] ? __kasan_check_write+0x14/0x20 [ 48.165630][ T353] ? __pidfd_prepare+0x150/0x150 [ 48.171121][ T353] ? security_file_permission+0x83/0xa0 [ 48.176730][ T353] kernel_clone+0x23f/0x940 [ 48.181494][ T353] ? create_io_thread+0x130/0x130 [ 48.186739][ T353] ? __kasan_check_write+0x14/0x20 [ 48.192133][ T353] ? mutex_unlock+0x89/0x220 [ 48.196960][ T353] __x64_sys_clone+0x176/0x1d0 [ 48.201882][ T353] ? __kasan_check_write+0x14/0x20 [ 48.207410][ T353] ? __ia32_sys_vfork+0xf0/0xf0 [ 48.212308][ T353] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 48.218398][ T353] x64_sys_call+0x41f/0x9a0 [ 48.222945][ T353] do_syscall_64+0x4c/0xa0 [ 48.227380][ T353] ? clear_bhb_loop+0x50/0xa0 [ 48.232241][ T353] ? clear_bhb_loop+0x50/0xa0 [ 48.237144][ T353] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.243640][ T353] RIP: 0033:0x7f57e8858959 [ 48.248326][ T353] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.268414][ T353] RSP: 002b:00007f57e83db078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 48.277370][ T353] RAX: ffffffffffffffda RBX: 00007f57e8977f80 RCX: 00007f57e8858959 [ 48.285847][ T353] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 48.294120][ T353] RBP: 00007f57e83db120 R08: 0000000000000000 R09: 0000000000000000 [ 48.303237][ T353] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 48.311748][ T353] R13: 000000000000000b R14: 00007f57e8977f80 R15: 00007fff27ba69b8 [ 48.320828][ T353] [ 48.324010][ T353] ---[ end trace 828cf281bcc16610 ]--- [ 48.337694][ T355] FAULT_INJECTION: forcing a failure. [ 48.337694][ T355] name failslab, interval 1, probability 0, space 0, times 0 [ 48.351270][ T355] CPU: 1 PID: 355 Comm: syz-executor.0 Tainted: G W 5.15.189-syzkaller-1081280-gf32b52534f1d #0 [ 48.363559][ T355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.373732][ T355] Call Trace: [ 48.377178][ T355] [ 48.380118][ T355] __dump_stack+0x21/0x30 [ 48.384570][ T355] dump_stack_lvl+0xee/0x150 [ 48.389326][ T355] ? show_regs_print_info+0x20/0x20 [ 48.394547][ T355] dump_stack+0x15/0x20 [ 48.398719][ T355] should_fail+0x3c1/0x510 [ 48.403289][ T355] __should_failslab+0xa4/0xe0 [ 48.408120][ T355] should_failslab+0x9/0x20 [ 48.412814][ T355] slab_pre_alloc_hook+0x3b/0xe0 [ 48.418028][ T355] ? anon_vma_fork+0x200/0x510 [ 48.423316][ T355] kmem_cache_alloc+0x44/0x260 [ 48.428229][ T355] anon_vma_fork+0x200/0x510 [ 48.433003][ T355] copy_mm+0x9d1/0x1390 [ 48.437374][ T355] ? copy_signal+0x600/0x600 [ 48.441986][ T355] ? __init_rwsem+0xfc/0x1d0 [ 48.446584][ T355] ? copy_signal+0x4cb/0x600 [ 48.451175][ T355] copy_process+0x115c/0x3210 [ 48.455870][ T355] ? __kasan_check_write+0x14/0x20 [ 48.461107][ T355] ? __pidfd_prepare+0x150/0x150 [ 48.466150][ T355] ? security_file_permission+0x83/0xa0 [ 48.472063][ T355] kernel_clone+0x23f/0x940 [ 48.476748][ T355] ? create_io_thread+0x130/0x130 [ 48.482036][ T355] ? __kasan_check_write+0x14/0x20 [ 48.487331][ T355] ? mutex_unlock+0x89/0x220 [ 48.491977][ T355] __x64_sys_clone+0x176/0x1d0 [ 48.496833][ T355] ? __kasan_check_write+0x14/0x20 [ 48.501964][ T355] ? __ia32_sys_vfork+0xf0/0xf0 [ 48.507069][ T355] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 48.513238][ T355] x64_sys_call+0x41f/0x9a0 [ 48.517780][ T355] do_syscall_64+0x4c/0xa0 [ 48.522199][ T355] ? clear_bhb_loop+0x50/0xa0 [ 48.527002][ T355] ? clear_bhb_loop+0x50/0xa0 [ 48.531857][ T355] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.537988][ T355] RIP: 0033:0x7f57e8858959 [ 48.542430][ T355] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.562555][ T355] RSP: 002b:00007f57e83db078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 48.571197][ T355] RAX: ffffffffffffffda RBX: 00007f57e8977f80 RCX: 00007f57e8858959 [ 48.579376][ T355] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 48.587472][ T355] RBP: 00007f57e83db120 R08: 0000000000000000 R09: 0000000000000000 [ 48.595576][ T355] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 48.603848][ T355] R13: 000000000000000b R14: 00007f57e8977f80 R15: 00007fff27ba69b8 [ 48.612048][ T355] [ 48.624340][ T357] FAULT_INJECTION: forcing a failure. [ 48.624340][ T357] name failslab, interval 1, probability 0, space 0, times 0 [ 48.637071][ T357] CPU: 1 PID: 357 Comm: syz-executor.0 Tainted: G W 5.15.189-syzkaller-1081280-gf32b52534f1d #0 [ 48.649457][ T357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.659659][ T357] Call Trace: [ 48.662946][ T357] [ 48.665912][ T357] __dump_stack+0x21/0x30 [ 48.670284][ T357] dump_stack_lvl+0xee/0x150 [ 48.675009][ T357] ? show_regs_print_info+0x20/0x20 [ 48.680228][ T357] dump_stack+0x15/0x20 [ 48.684399][ T357] should_fail+0x3c1/0x510 [ 48.688821][ T357] __should_failslab+0xa4/0xe0 [ 48.693765][ T357] should_failslab+0x9/0x20 [ 48.698297][ T357] slab_pre_alloc_hook+0x3b/0xe0 [ 48.703248][ T357] ? anon_vma_fork+0x200/0x510 [ 48.708119][ T357] kmem_cache_alloc+0x44/0x260 [ 48.712985][ T357] anon_vma_fork+0x200/0x510 [ 48.717694][ T357] copy_mm+0x9d1/0x1390 [ 48.721875][ T357] ? copy_signal+0x600/0x600 [ 48.726482][ T357] ? __init_rwsem+0xfc/0x1d0 [ 48.731215][ T357] ? copy_signal+0x4cb/0x600 [ 48.735898][ T357] copy_process+0x115c/0x3210 [ 48.740635][ T357] ? __kasan_check_write+0x14/0x20 [ 48.745860][ T357] ? __pidfd_prepare+0x150/0x150 [ 48.750902][ T357] ? security_file_permission+0x83/0xa0 [ 48.756479][ T357] kernel_clone+0x23f/0x940 [ 48.761106][ T357] ? create_io_thread+0x130/0x130 [ 48.766158][ T357] ? __kasan_check_write+0x14/0x20 [ 48.771396][ T357] ? mutex_unlock+0x89/0x220 [ 48.776097][ T357] __x64_sys_clone+0x176/0x1d0 [ 48.781051][ T357] ? __kasan_check_write+0x14/0x20 [ 48.786196][ T357] ? __ia32_sys_vfork+0xf0/0xf0 [ 48.791071][ T357] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 48.797266][ T357] x64_sys_call+0x41f/0x9a0 [ 48.801958][ T357] do_syscall_64+0x4c/0xa0 [ 48.806661][ T357] ? clear_bhb_loop+0x50/0xa0 [ 48.811471][ T357] ? clear_bhb_loop+0x50/0xa0 [ 48.816270][ T357] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 48.822191][ T357] RIP: 0033:0x7f57e8858959 [ 48.826820][ T357] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 48.847298][ T357] RSP: 002b:00007f57e83db078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 48.856002][ T357] RAX: ffffffffffffffda RBX: 00007f57e8977f80 RCX: 00007f57e8858959 [ 48.864107][ T357] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 48.872085][ T357] RBP: 00007f57e83db120 R08: 0000000000000000 R09: 0000000000000000 [ 48.880444][ T357] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 48.888508][ T357] R13: 000000000000000b R14: 00007f57e8977f80 R15: 00007fff27ba69b8 [ 48.896488][ T357] [ 48.906837][ T359] FAULT_INJECTION: forcing a failure. [ 48.906837][ T359] name failslab, interval 1, probability 0, space 0, times 0 [ 48.920192][ T359] CPU: 1 PID: 359 Comm: syz-executor.0 Tainted: G W 5.15.189-syzkaller-1081280-gf32b52534f1d #0 [ 48.932537][ T359] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 48.942837][ T359] Call Trace: [ 48.946129][ T359] [ 48.949059][ T359] __dump_stack+0x21/0x30 [ 48.953404][ T359] dump_stack_lvl+0xee/0x150 [ 48.958015][ T359] ? show_regs_print_info+0x20/0x20 [ 48.963341][ T359] dump_stack+0x15/0x20 [ 48.967528][ T359] should_fail+0x3c1/0x510 [ 48.972174][ T359] __should_failslab+0xa4/0xe0 [ 48.976951][ T359] should_failslab+0x9/0x20 [ 48.981746][ T359] slab_pre_alloc_hook+0x3b/0xe0 [ 48.986896][ T359] ? anon_vma_fork+0xf2/0x510 [ 48.991950][ T359] kmem_cache_alloc+0x44/0x260 [ 48.996986][ T359] anon_vma_fork+0xf2/0x510 [ 49.001644][ T359] copy_mm+0x9d1/0x1390 [ 49.005904][ T359] ? copy_signal+0x600/0x600 [ 49.010590][ T359] ? __init_rwsem+0xfc/0x1d0 [ 49.015208][ T359] ? copy_signal+0x4cb/0x600 [ 49.019917][ T359] copy_process+0x115c/0x3210 [ 49.024712][ T359] ? __kasan_check_write+0x14/0x20 [ 49.030101][ T359] ? __pidfd_prepare+0x150/0x150 [ 49.035143][ T359] ? security_file_permission+0x83/0xa0 [ 49.041000][ T359] kernel_clone+0x23f/0x940 [ 49.045521][ T359] ? create_io_thread+0x130/0x130 [ 49.050674][ T359] ? __kasan_check_write+0x14/0x20 [ 49.056167][ T359] ? mutex_unlock+0x89/0x220 [ 49.060809][ T359] __x64_sys_clone+0x176/0x1d0 [ 49.065594][ T359] ? __kasan_check_write+0x14/0x20 [ 49.070914][ T359] ? __ia32_sys_vfork+0xf0/0xf0 [ 49.075912][ T359] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 49.082517][ T359] x64_sys_call+0x41f/0x9a0 [ 49.087494][ T359] do_syscall_64+0x4c/0xa0 [ 49.092145][ T359] ? clear_bhb_loop+0x50/0xa0 [ 49.097036][ T359] ? clear_bhb_loop+0x50/0xa0 [ 49.102062][ T359] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.107970][ T359] RIP: 0033:0x7f57e8858959 [ 49.112405][ T359] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.132868][ T359] RSP: 002b:00007f57e83db078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 49.141503][ T359] RAX: ffffffffffffffda RBX: 00007f57e8977f80 RCX: 00007f57e8858959 [ 49.150055][ T359] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 49.158047][ T359] RBP: 00007f57e83db120 R08: 0000000000000000 R09: 0000000000000000 [ 49.166039][ T359] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 49.174022][ T359] R13: 000000000000000b R14: 00007f57e8977f80 R15: 00007fff27ba69b8 [ 49.182238][ T359] [ 49.194565][ T361] FAULT_INJECTION: forcing a failure. [ 49.194565][ T361] name failslab, interval 1, probability 0, space 0, times 0 [ 49.207537][ T361] CPU: 0 PID: 361 Comm: syz-executor.0 Tainted: G W 5.15.189-syzkaller-1081280-gf32b52534f1d #0 [ 49.219649][ T361] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.229969][ T361] Call Trace: [ 49.233368][ T361] [ 49.236304][ T361] __dump_stack+0x21/0x30 [ 49.240639][ T361] dump_stack_lvl+0xee/0x150 [ 49.245415][ T361] ? show_regs_print_info+0x20/0x20 [ 49.250618][ T361] dump_stack+0x15/0x20 [ 49.254771][ T361] should_fail+0x3c1/0x510 [ 49.259190][ T361] __should_failslab+0xa4/0xe0 [ 49.264142][ T361] should_failslab+0x9/0x20 [ 49.268665][ T361] slab_pre_alloc_hook+0x3b/0xe0 [ 49.273694][ T361] ? anon_vma_clone+0xc0/0x500 [ 49.278545][ T361] kmem_cache_alloc+0x44/0x260 [ 49.283464][ T361] anon_vma_clone+0xc0/0x500 [ 49.288477][ T361] anon_vma_fork+0x8c/0x510 [ 49.293263][ T361] copy_mm+0x9d1/0x1390 [ 49.297612][ T361] ? copy_signal+0x600/0x600 [ 49.302377][ T361] ? __init_rwsem+0xfc/0x1d0 [ 49.307189][ T361] ? copy_signal+0x4cb/0x600 [ 49.312066][ T361] copy_process+0x115c/0x3210 [ 49.316850][ T361] ? __kasan_check_write+0x14/0x20 [ 49.321977][ T361] ? __pidfd_prepare+0x150/0x150 [ 49.326935][ T361] ? security_file_permission+0x83/0xa0 [ 49.332672][ T361] kernel_clone+0x23f/0x940 [ 49.337309][ T361] ? create_io_thread+0x130/0x130 [ 49.342355][ T361] ? __kasan_check_write+0x14/0x20 [ 49.347687][ T361] ? mutex_unlock+0x89/0x220 [ 49.352293][ T361] __x64_sys_clone+0x176/0x1d0 [ 49.357088][ T361] ? __kasan_check_write+0x14/0x20 [ 49.362302][ T361] ? __ia32_sys_vfork+0xf0/0xf0 [ 49.367449][ T361] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 49.373629][ T361] x64_sys_call+0x41f/0x9a0 [ 49.378145][ T361] do_syscall_64+0x4c/0xa0 [ 49.382574][ T361] ? clear_bhb_loop+0x50/0xa0 [ 49.387442][ T361] ? clear_bhb_loop+0x50/0xa0 [ 49.392148][ T361] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.398056][ T361] RIP: 0033:0x7f57e8858959 [ 49.402592][ T361] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.423645][ T361] RSP: 002b:00007f57e83db078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 49.432236][ T361] RAX: ffffffffffffffda RBX: 00007f57e8977f80 RCX: 00007f57e8858959 [ 49.440437][ T361] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 49.448413][ T361] RBP: 00007f57e83db120 R08: 0000000000000000 R09: 0000000000000000 [ 49.456408][ T361] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 49.464381][ T361] R13: 000000000000000b R14: 00007f57e8977f80 R15: 00007fff27ba69b8 [ 49.472544][ T361] [ 49.495713][ T364] FAULT_INJECTION: forcing a failure. [ 49.495713][ T364] name failslab, interval 1, probability 0, space 0, times 0 [ 49.508736][ T364] CPU: 0 PID: 364 Comm: syz-executor.0 Tainted: G W 5.15.189-syzkaller-1081280-gf32b52534f1d #0 [ 49.520733][ T364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.531224][ T364] Call Trace: [ 49.534599][ T364] [ 49.537532][ T364] __dump_stack+0x21/0x30 [ 49.542252][ T364] dump_stack_lvl+0xee/0x150 [ 49.547131][ T364] ? show_regs_print_info+0x20/0x20 [ 49.552342][ T364] dump_stack+0x15/0x20 [ 49.556680][ T364] should_fail+0x3c1/0x510 [ 49.561353][ T364] __should_failslab+0xa4/0xe0 [ 49.566156][ T364] should_failslab+0x9/0x20 [ 49.570808][ T364] slab_pre_alloc_hook+0x3b/0xe0 [ 49.576019][ T364] ? anon_vma_fork+0xf2/0x510 [ 49.580711][ T364] kmem_cache_alloc+0x44/0x260 [ 49.585589][ T364] anon_vma_fork+0xf2/0x510 [ 49.590117][ T364] copy_mm+0x9d1/0x1390 [ 49.594309][ T364] ? copy_signal+0x600/0x600 [ 49.599004][ T364] ? __init_rwsem+0xfc/0x1d0 [ 49.603774][ T364] ? copy_signal+0x4cb/0x600 [ 49.608362][ T364] copy_process+0x115c/0x3210 [ 49.613133][ T364] ? __kasan_check_write+0x14/0x20 [ 49.618275][ T364] ? __pidfd_prepare+0x150/0x150 [ 49.623323][ T364] ? security_file_permission+0x83/0xa0 [ 49.628893][ T364] kernel_clone+0x23f/0x940 [ 49.633417][ T364] ? create_io_thread+0x130/0x130 [ 49.638551][ T364] ? __kasan_check_write+0x14/0x20 [ 49.643790][ T364] ? mutex_unlock+0x89/0x220 [ 49.648395][ T364] __x64_sys_clone+0x176/0x1d0 [ 49.653260][ T364] ? __kasan_check_write+0x14/0x20 [ 49.658590][ T364] ? __ia32_sys_vfork+0xf0/0xf0 [ 49.664065][ T364] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 49.670166][ T364] x64_sys_call+0x41f/0x9a0 [ 49.674682][ T364] do_syscall_64+0x4c/0xa0 [ 49.679104][ T364] ? clear_bhb_loop+0x50/0xa0 [ 49.683785][ T364] ? clear_bhb_loop+0x50/0xa0 [ 49.688466][ T364] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.694393][ T364] RIP: 0033:0x7f57e8858959 [ 49.698812][ T364] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 49.718756][ T364] RSP: 002b:00007f57e83db078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 49.727189][ T364] RAX: ffffffffffffffda RBX: 00007f57e8977f80 RCX: 00007f57e8858959 [ 49.735249][ T364] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 49.743400][ T364] RBP: 00007f57e83db120 R08: 0000000000000000 R09: 0000000000000000 [ 49.751380][ T364] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 49.759532][ T364] R13: 000000000000000b R14: 00007f57e8977f80 R15: 00007fff27ba69b8 [ 49.767684][ T364] [ 49.778402][ T366] FAULT_INJECTION: forcing a failure. [ 49.778402][ T366] name failslab, interval 1, probability 0, space 0, times 0 [ 49.791543][ T366] CPU: 1 PID: 366 Comm: syz-executor.0 Tainted: G W 5.15.189-syzkaller-1081280-gf32b52534f1d #0 [ 49.803476][ T366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 49.813958][ T366] Call Trace: [ 49.817272][ T366] [ 49.820240][ T366] __dump_stack+0x21/0x30 [ 49.824786][ T366] dump_stack_lvl+0xee/0x150 [ 49.829511][ T366] ? show_regs_print_info+0x20/0x20 [ 49.835138][ T366] dump_stack+0x15/0x20 [ 49.839345][ T366] should_fail+0x3c1/0x510 [ 49.843997][ T366] __should_failslab+0xa4/0xe0 [ 49.849152][ T366] should_failslab+0x9/0x20 [ 49.853662][ T366] slab_pre_alloc_hook+0x3b/0xe0 [ 49.858701][ T366] ? anon_vma_fork+0xf2/0x510 [ 49.863664][ T366] kmem_cache_alloc+0x44/0x260 [ 49.868459][ T366] anon_vma_fork+0xf2/0x510 [ 49.873072][ T366] copy_mm+0x9d1/0x1390 [ 49.877238][ T366] ? copy_signal+0x600/0x600 [ 49.881832][ T366] ? __init_rwsem+0xfc/0x1d0 [ 49.886536][ T366] ? copy_signal+0x4cb/0x600 [ 49.891159][ T366] copy_process+0x115c/0x3210 [ 49.895857][ T366] ? __kasan_check_write+0x14/0x20 [ 49.901099][ T366] ? __pidfd_prepare+0x150/0x150 [ 49.906257][ T366] ? security_file_permission+0x83/0xa0 [ 49.911949][ T366] kernel_clone+0x23f/0x940 [ 49.916465][ T366] ? create_io_thread+0x130/0x130 [ 49.921665][ T366] ? __kasan_check_write+0x14/0x20 [ 49.926823][ T366] ? mutex_unlock+0x89/0x220 [ 49.931674][ T366] __x64_sys_clone+0x176/0x1d0 [ 49.936488][ T366] ? __kasan_check_write+0x14/0x20 [ 49.941879][ T366] ? __ia32_sys_vfork+0xf0/0xf0 [ 49.946840][ T366] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 49.952918][ T366] x64_sys_call+0x41f/0x9a0 [ 49.957427][ T366] do_syscall_64+0x4c/0xa0 [ 49.961849][ T366] ? clear_bhb_loop+0x50/0xa0 [ 49.966564][ T366] ? clear_bhb_loop+0x50/0xa0 [ 49.971249][ T366] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 49.977247][ T366] RIP: 0033:0x7f57e8858959 [ 49.981687][ T366] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.001560][ T366] RSP: 002b:00007f57e83db078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 50.010359][ T366] RAX: ffffffffffffffda RBX: 00007f57e8977f80 RCX: 00007f57e8858959 [ 50.018420][ T366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 50.026569][ T366] RBP: 00007f57e83db120 R08: 0000000000000000 R09: 0000000000000000 [ 50.034543][ T366] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 50.043146][ T366] R13: 000000000000000b R14: 00007f57e8977f80 R15: 00007fff27ba69b8 [ 50.051273][ T366] [ 50.055147][ T366] ================================================================== [ 50.063497][ T366] BUG: KASAN: double-free or invalid-free in kfree+0xc4/0x270 [ 50.071535][ T366] [ 50.073984][ T366] CPU: 0 PID: 366 Comm: syz-executor.0 Tainted: G W 5.15.189-syzkaller-1081280-gf32b52534f1d #0 [ 50.085887][ T366] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.096174][ T366] Call Trace: [ 50.099475][ T366] [ 50.102495][ T366] __dump_stack+0x21/0x30 [ 50.106839][ T366] dump_stack_lvl+0xee/0x150 [ 50.111516][ T366] ? show_regs_print_info+0x20/0x20 [ 50.116967][ T366] ? load_image+0x3a0/0x3a0 [ 50.121573][ T366] ? kmem_cache_free+0x100/0x320 [ 50.126525][ T366] print_address_description+0x7f/0x2c0 [ 50.132089][ T366] ? kfree+0xc4/0x270 [ 50.136086][ T366] kasan_report_invalid_free+0x58/0x90 [ 50.141745][ T366] ? kfree+0xc4/0x270 [ 50.145972][ T366] ____kasan_slab_free+0x13d/0x160 [ 50.151181][ T366] __kasan_slab_free+0x11/0x20 [ 50.155975][ T366] slab_free_freelist_hook+0xc2/0x190 [ 50.161359][ T366] ? anon_vma_name_free+0x15/0x20 [ 50.166714][ T366] kfree+0xc4/0x270 [ 50.170641][ T366] ? anon_vma_name_free+0x15/0x20 [ 50.175694][ T366] anon_vma_name_free+0x15/0x20 [ 50.180643][ T366] vm_area_free_no_check+0xa9/0x140 [ 50.186021][ T366] copy_mm+0xe77/0x1390 [ 50.190307][ T366] ? copy_signal+0x600/0x600 [ 50.194992][ T366] ? __init_rwsem+0xfc/0x1d0 [ 50.199586][ T366] ? copy_signal+0x4cb/0x600 [ 50.204369][ T366] copy_process+0x115c/0x3210 [ 50.209092][ T366] ? __kasan_check_write+0x14/0x20 [ 50.214218][ T366] ? __pidfd_prepare+0x150/0x150 [ 50.219169][ T366] ? security_file_permission+0x83/0xa0 [ 50.224728][ T366] kernel_clone+0x23f/0x940 [ 50.229245][ T366] ? create_io_thread+0x130/0x130 [ 50.234272][ T366] ? __kasan_check_write+0x14/0x20 [ 50.239401][ T366] ? mutex_unlock+0x89/0x220 [ 50.244206][ T366] __x64_sys_clone+0x176/0x1d0 [ 50.248977][ T366] ? __kasan_check_write+0x14/0x20 [ 50.254416][ T366] ? __ia32_sys_vfork+0xf0/0xf0 [ 50.259471][ T366] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 50.265553][ T366] x64_sys_call+0x41f/0x9a0 [ 50.270146][ T366] do_syscall_64+0x4c/0xa0 [ 50.274560][ T366] ? clear_bhb_loop+0x50/0xa0 [ 50.279237][ T366] ? clear_bhb_loop+0x50/0xa0 [ 50.283914][ T366] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.289821][ T366] RIP: 0033:0x7f57e8858959 [ 50.294327][ T366] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 50.314457][ T366] RSP: 002b:00007f57e83db078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 50.322965][ T366] RAX: ffffffffffffffda RBX: 00007f57e8977f80 RCX: 00007f57e8858959 [ 50.331156][ T366] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 50.339334][ T366] RBP: 00007f57e83db120 R08: 0000000000000000 R09: 0000000000000000 [ 50.347330][ T366] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 50.355549][ T366] R13: 000000000000000b R14: 00007f57e8977f80 R15: 00007fff27ba69b8 [ 50.363633][ T366] [ 50.366986][ T366] [ 50.369341][ T366] Allocated by task 330: [ 50.373682][ T366] __kasan_slab_alloc+0xbd/0xf0 [ 50.378766][ T366] slab_post_alloc_hook+0x4f/0x2b0 [ 50.384132][ T366] kmem_cache_alloc+0xf7/0x260 [ 50.389536][ T366] vm_area_alloc+0x24/0x130 [ 50.394159][ T366] mmap_region+0x9b2/0x1800 [ 50.398853][ T366] do_mmap+0x76c/0xe40 [ 50.403026][ T366] vm_mmap_pgoff+0x1ce/0x410 [ 50.407626][ T366] vm_mmap+0x87/0xb0 [ 50.411775][ T366] elf_map+0x190/0x230 [ 50.415955][ T366] load_elf_binary+0x1082/0x2890 [ 50.420931][ T366] bprm_execve+0x795/0x1480 [ 50.425637][ T366] do_execveat_common+0x923/0xa80 [ 50.430775][ T366] __x64_sys_execve+0x92/0xb0 [ 50.435564][ T366] x64_sys_call+0x919/0x9a0 [ 50.440178][ T366] do_syscall_64+0x4c/0xa0 [ 50.444700][ T366] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.450777][ T366] [ 50.453216][ T366] The buggy address belongs to the object at ffff888109c2f128 [ 50.453216][ T366] which belongs to the cache vm_area_struct of size 232 [ 50.467813][ T366] The buggy address is located 88 bytes inside of [ 50.467813][ T366] 232-byte region [ffff888109c2f128, ffff888109c2f210) [ 50.481114][ T366] The buggy address belongs to the page: [ 50.486794][ T366] page:ffffea0004270bc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x109c2f [ 50.497469][ T366] flags: 0x4000000000000200(slab|zone=1) [ 50.503165][ T366] raw: 4000000000000200 0000000000000000 dead000000000122 ffff888100186600 [ 50.511755][ T366] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000 [ 50.520477][ T366] page dumped because: kasan: bad access detected [ 50.527185][ T366] page_owner tracks the page as allocated [ 50.533099][ T366] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 326, ts 46063003030, free_ts 46062897096 [ 50.549762][ T366] post_alloc_hook+0x192/0x1b0 [ 50.554651][ T366] prep_new_page+0x1c/0x110 [ 50.559195][ T366] get_page_from_freelist+0x2cc5/0x2d50 [ 50.565039][ T366] __alloc_pages+0x18f/0x440 [ 50.569765][ T366] new_slab+0xa1/0x4d0 [ 50.573961][ T366] ___slab_alloc+0x381/0x810 [ 50.578649][ T366] __slab_alloc+0x49/0x90 [ 50.583191][ T366] kmem_cache_alloc+0x138/0x260 [ 50.588231][ T366] vm_area_alloc+0x24/0x130 [ 50.593036][ T366] __install_special_mapping+0x35/0x370 [ 50.598695][ T366] _install_special_mapping+0x3c/0x50 [ 50.604572][ T366] map_vdso+0x1cf/0x2f0 [ 50.608804][ T366] arch_setup_additional_pages+0x117/0x130 [ 50.614933][ T366] load_elf_binary+0x1f66/0x2890 [ 50.620328][ T366] bprm_execve+0x795/0x1480 [ 50.624859][ T366] do_execveat_common+0x923/0xa80 [ 50.629980][ T366] page last free stack trace: [ 50.634667][ T366] free_unref_page_prepare+0x542/0x550 [ 50.640234][ T366] free_unref_page_list+0x134/0x9d0 [ 50.645587][ T366] release_pages+0xfda/0x1030 [ 50.650539][ T366] free_pages_and_swap_cache+0x86/0xa0 [ 50.656000][ T366] tlb_finish_mmu+0x175/0x300 [ 50.660683][ T366] setup_arg_pages+0x95f/0xae0 [ 50.665471][ T366] load_elf_binary+0xc02/0x2890 [ 50.670319][ T366] bprm_execve+0x795/0x1480 [ 50.674824][ T366] do_execveat_common+0x923/0xa80 [ 50.680063][ T366] __x64_sys_execve+0x92/0xb0 [ 50.684750][ T366] x64_sys_call+0x919/0x9a0 [ 50.689557][ T366] do_syscall_64+0x4c/0xa0 [ 50.694095][ T366] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 50.700211][ T366] [ 50.702538][ T366] Memory state around the buggy address: [ 50.708651][ T366] ffff888109c2f080: 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc [ 50.716966][ T366] ffff888109c2f100: fc fc fc fc fc 00 00 00 00 00 00 00 00 00 00 00 [ 50.725203][ T366] >ffff888109c2f180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 50.733432][ T366] ^ [ 50.737505][ T366] ffff888109c2f200: 00 00 fc fc fc fc fc fc fc fc 00 00 00 00 00 00 [ 50.745774][ T366] ffff888109c2f280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 50.753948][ T366] ================================================================== [ 50.762005][ T366] Disabling lock debugging due to kernel taint [ 50.774639][ T30] kauditd_printk_skb: 14 callbacks suppressed [ 50.774653][ T30] audit: type=1400 audit(1754446365.853:88): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 50.803307][ T30] audit: type=1400 audit(1754446365.853:89): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.813700][ T368] FAULT_INJECTION: forcing a failure. [ 50.813700][ T368] name failslab, interval 1, probability 0, space 0, times 0 [ 50.825078][ T30] audit: type=1400 audit(1754446365.853:90): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.838677][ T368] CPU: 0 PID: 368 Comm: syz-executor.0 Tainted: G B W 5.15.189-syzkaller-1081280-gf32b52534f1d #0 [ 50.859422][ T30] audit: type=1400 audit(1754446365.853:91): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 50.871078][ T368] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 50.871092][ T368] Call Trace: [ 50.871098][ T368] [ 50.871105][ T368] __dump_stack+0x21/0x30 [ 50.871131][ T368] dump_stack_lvl+0xee/0x150 [ 50.871147][ T368] ? show_regs_print_info+0x20/0x20 [ 50.871166][ T368] dump_stack+0x15/0x20 [ 50.871182][ T368] should_fail+0x3c1/0x510 [ 50.871200][ T368] __should_failslab+0xa4/0xe0 [ 50.871221][ T368] should_failslab+0x9/0x20 [ 50.871239][ T368] slab_pre_alloc_hook+0x3b/0xe0 [ 50.871260][ T368] ? anon_vma_fork+0xf2/0x510 [ 50.891897][ T30] audit: type=1400 audit(1754446365.853:92): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.901813][ T368] kmem_cache_alloc+0x44/0x260 [ 50.901847][ T368] anon_vma_fork+0xf2/0x510 [ 50.901870][ T368] copy_mm+0x9d1/0x1390 [ 50.901890][ T368] ? copy_signal+0x600/0x600 [ 50.906272][ T30] audit: type=1400 audit(1754446365.853:93): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.908109][ T368] ? __init_rwsem+0xfc/0x1d0 [ 50.912925][ T30] audit: type=1400 audit(1754446365.853:94): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 50.917274][ T368] ? copy_signal+0x4cb/0x600 [ 50.917301][ T368] copy_process+0x115c/0x3210 [ 51.050004][ T368] ? __kasan_check_write+0x14/0x20 [ 51.055249][ T368] ? __pidfd_prepare+0x150/0x150 [ 51.060216][ T368] ? security_file_permission+0x83/0xa0 [ 51.065769][ T368] kernel_clone+0x23f/0x940 [ 51.070286][ T368] ? create_io_thread+0x130/0x130 [ 51.075339][ T368] ? __kasan_check_write+0x14/0x20 [ 51.080453][ T368] ? mutex_unlock+0x89/0x220 [ 51.085066][ T368] __x64_sys_clone+0x176/0x1d0 [ 51.089840][ T368] ? __kasan_check_write+0x14/0x20 [ 51.095052][ T368] ? __ia32_sys_vfork+0xf0/0xf0 [ 51.099941][ T368] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 51.106030][ T368] x64_sys_call+0x41f/0x9a0 [ 51.110739][ T368] do_syscall_64+0x4c/0xa0 [ 51.115201][ T368] ? clear_bhb_loop+0x50/0xa0 [ 51.119997][ T368] ? clear_bhb_loop+0x50/0xa0 [ 51.124701][ T368] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.130733][ T368] RIP: 0033:0x7f57e8858959 [ 51.135653][ T368] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.155722][ T368] RSP: 002b:00007f57e83db078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 2025/08/06 02:12:46 executed programs: 12 [ 51.164395][ T368] RAX: ffffffffffffffda RBX: 00007f57e8977f80 RCX: 00007f57e8858959 [ 51.172750][ T368] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 51.181009][ T368] RBP: 00007f57e83db120 R08: 0000000000000000 R09: 0000000000000000 [ 51.189424][ T368] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 51.197680][ T368] R13: 000000000000000b R14: 00007f57e8977f80 R15: 00007fff27ba69b8 [ 51.206208][ T368] [ 51.223053][ T370] FAULT_INJECTION: forcing a failure. [ 51.223053][ T370] name failslab, interval 1, probability 0, space 0, times 0 [ 51.236089][ T370] CPU: 1 PID: 370 Comm: syz-executor.0 Tainted: G B W 5.15.189-syzkaller-1081280-gf32b52534f1d #0 [ 51.248132][ T370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.258499][ T370] Call Trace: [ 51.261925][ T370] [ 51.264969][ T370] __dump_stack+0x21/0x30 [ 51.269469][ T370] dump_stack_lvl+0xee/0x150 [ 51.274300][ T370] ? show_regs_print_info+0x20/0x20 [ 51.279939][ T370] dump_stack+0x15/0x20 [ 51.284135][ T370] should_fail+0x3c1/0x510 [ 51.288652][ T370] __should_failslab+0xa4/0xe0 [ 51.293599][ T370] should_failslab+0x9/0x20 [ 51.298498][ T370] slab_pre_alloc_hook+0x3b/0xe0 [ 51.303453][ T370] ? anon_vma_clone+0xc0/0x500 [ 51.308496][ T370] kmem_cache_alloc+0x44/0x260 [ 51.313358][ T370] anon_vma_clone+0xc0/0x500 [ 51.318202][ T370] anon_vma_fork+0x8c/0x510 [ 51.322826][ T370] copy_mm+0x9d1/0x1390 [ 51.326991][ T370] ? copy_signal+0x600/0x600 [ 51.331673][ T370] ? __init_rwsem+0xfc/0x1d0 [ 51.336276][ T370] ? copy_signal+0x4cb/0x600 [ 51.340867][ T370] copy_process+0x115c/0x3210 [ 51.345561][ T370] ? __kasan_check_write+0x14/0x20 [ 51.351095][ T370] ? __pidfd_prepare+0x150/0x150 [ 51.356485][ T370] ? security_file_permission+0x83/0xa0 [ 51.362047][ T370] kernel_clone+0x23f/0x940 [ 51.366587][ T370] ? create_io_thread+0x130/0x130 [ 51.372085][ T370] ? __kasan_check_write+0x14/0x20 [ 51.377311][ T370] ? mutex_unlock+0x89/0x220 [ 51.382067][ T370] __x64_sys_clone+0x176/0x1d0 [ 51.387124][ T370] ? __kasan_check_write+0x14/0x20 [ 51.392612][ T370] ? __ia32_sys_vfork+0xf0/0xf0 [ 51.397735][ T370] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 51.404184][ T370] x64_sys_call+0x41f/0x9a0 [ 51.408932][ T370] do_syscall_64+0x4c/0xa0 [ 51.413738][ T370] ? clear_bhb_loop+0x50/0xa0 [ 51.418776][ T370] ? clear_bhb_loop+0x50/0xa0 [ 51.423626][ T370] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.429556][ T370] RIP: 0033:0x7f57e8858959 [ 51.434003][ T370] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.453961][ T370] RSP: 002b:00007f57e83db078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 51.462711][ T370] RAX: ffffffffffffffda RBX: 00007f57e8977f80 RCX: 00007f57e8858959 [ 51.470919][ T370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 51.479435][ T370] RBP: 00007f57e83db120 R08: 0000000000000000 R09: 0000000000000000 [ 51.487862][ T370] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 51.496234][ T370] R13: 000000000000000b R14: 00007f57e8977f80 R15: 00007fff27ba69b8 [ 51.504357][ T370] [ 51.507688][ T370] general protection fault, probably for non-canonical address 0xdffffc1818000001: 0000 [#1] PREEMPT SMP KASAN [ 51.519909][ T370] KASAN: probably user-memory-access in range [0x000000c0c0000008-0x000000c0c000000f] [ 51.529638][ T370] CPU: 1 PID: 370 Comm: syz-executor.0 Tainted: G B W 5.15.189-syzkaller-1081280-gf32b52534f1d #0 [ 51.541645][ T370] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 51.551893][ T370] RIP: 0010:__rb_insert_augmented+0xa9/0x720 [ 51.557890][ T370] Code: 3a ff 49 8b 07 a8 01 0f 85 53 06 00 00 4c 89 65 c8 48 89 45 d0 4c 8d 70 08 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 00 00 fc ff df <80> 3c 03 00 74 08 4c 89 f7 e8 79 c3 3a ff 4d 8b 26 4d 39 fc 74 34 [ 51.578172][ T370] RSP: 0018:ffffc90000e9f8c0 EFLAGS: 00010202 [ 51.584256][ T370] RAX: dffffc0000000000 RBX: 0000001818000001 RCX: dffffc0000000000 [ 51.592360][ T370] RDX: ffffffff819af460 RSI: ffff88810cc066a0 RDI: ffff8881238d8058 [ 51.600618][ T370] RBP: ffffc90000e9f920 R08: dffffc0000000000 R09: ffff8881238d8060 [ 51.608965][ T370] R10: ffffed102471b00e R11: 1ffff1102471b00c R12: ffff888123de63d0 [ 51.617035][ T370] R13: 1ffff11021385e30 R14: 000000c0c0000008 R15: ffff888109c2f180 [ 51.625224][ T370] FS: 00007f57e83db6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 51.634180][ T370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.640865][ T370] CR2: 00007f57e83daff8 CR3: 0000000123dfb000 CR4: 00000000003506a0 [ 51.648954][ T370] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.657199][ T370] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.665443][ T370] Call Trace: [ 51.668947][ T370] [ 51.671883][ T370] ? clear_nonspinnable+0x60/0x60 [ 51.676920][ T370] ? anon_vma_interval_tree_iter_next+0x380/0x380 [ 51.683341][ T370] vma_interval_tree_insert_after+0x2a1/0x2b0 [ 51.689584][ T370] copy_mm+0xb1a/0x1390 [ 51.693758][ T370] ? copy_signal+0x600/0x600 [ 51.698354][ T370] ? __init_rwsem+0xfc/0x1d0 [ 51.703036][ T370] ? copy_signal+0x4cb/0x600 [ 51.707627][ T370] copy_process+0x115c/0x3210 [ 51.712505][ T370] ? __kasan_check_write+0x14/0x20 [ 51.717911][ T370] ? __pidfd_prepare+0x150/0x150 [ 51.722874][ T370] ? security_file_permission+0x83/0xa0 [ 51.728423][ T370] kernel_clone+0x23f/0x940 [ 51.733155][ T370] ? create_io_thread+0x130/0x130 [ 51.738410][ T370] ? __kasan_check_write+0x14/0x20 [ 51.743714][ T370] ? mutex_unlock+0x89/0x220 [ 51.748402][ T370] __x64_sys_clone+0x176/0x1d0 [ 51.753270][ T370] ? __kasan_check_write+0x14/0x20 [ 51.758582][ T370] ? __ia32_sys_vfork+0xf0/0xf0 [ 51.763999][ T370] ? fpregs_assert_state_consistent+0xb1/0xe0 [ 51.770157][ T370] x64_sys_call+0x41f/0x9a0 [ 51.774929][ T370] do_syscall_64+0x4c/0xa0 [ 51.779618][ T370] ? clear_bhb_loop+0x50/0xa0 [ 51.784402][ T370] ? clear_bhb_loop+0x50/0xa0 [ 51.789253][ T370] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 51.795328][ T370] RIP: 0033:0x7f57e8858959 [ 51.799753][ T370] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 51.820136][ T370] RSP: 002b:00007f57e83db078 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 51.828831][ T370] RAX: ffffffffffffffda RBX: 00007f57e8977f80 RCX: 00007f57e8858959 [ 51.837095][ T370] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000060000200 [ 51.845359][ T370] RBP: 00007f57e83db120 R08: 0000000000000000 R09: 0000000000000000 [ 51.853432][ T370] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000002 [ 51.861720][ T370] R13: 000000000000000b R14: 00007f57e8977f80 R15: 00007fff27ba69b8 [ 51.869807][ T370] [ 51.872842][ T370] Modules linked in: [ 51.877203][ T370] ---[ end trace 828cf281bcc16611 ]--- [ 51.882857][ T370] RIP: 0010:__rb_insert_augmented+0xa9/0x720 [ 51.889021][ T370] Code: 3a ff 49 8b 07 a8 01 0f 85 53 06 00 00 4c 89 65 c8 48 89 45 d0 4c 8d 70 08 4c 89 f3 48 c1 eb 03 48 b8 00 00 00 00 00 fc ff df <80> 3c 03 00 74 08 4c 89 f7 e8 79 c3 3a ff 4d 8b 26 4d 39 fc 74 34 [ 51.909777][ T370] RSP: 0018:ffffc90000e9f8c0 EFLAGS: 00010202 [ 51.916395][ T370] RAX: dffffc0000000000 RBX: 0000001818000001 RCX: dffffc0000000000 [ 51.924658][ T370] RDX: ffffffff819af460 RSI: ffff88810cc066a0 RDI: ffff8881238d8058 [ 51.932856][ T370] RBP: ffffc90000e9f920 R08: dffffc0000000000 R09: ffff8881238d8060 [ 51.941285][ T370] R10: ffffed102471b00e R11: 1ffff1102471b00c R12: ffff888123de63d0 [ 51.949666][ T370] R13: 1ffff11021385e30 R14: 000000c0c0000008 R15: ffff888109c2f180 [ 51.957743][ T370] FS: 00007f57e83db6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 51.966933][ T370] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.973854][ T370] CR2: 0000555557848430 CR3: 0000000123dfb000 CR4: 00000000003506b0 [ 51.982562][ T370] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.990913][ T370] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.999364][ T370] Kernel panic - not syncing: Fatal exception [ 52.005966][ T370] Kernel Offset: disabled [ 52.010309][ T370] Rebooting in 86400 seconds..