Warning: Permanently added '10.128.0.206' (ED25519) to the list of known hosts.
2025/09/08 19:57:42 parsed 1 programs
[ 70.889890][ T4269] cgroup: Unknown subsys name 'net'
[ 71.033663][ T4269] cgroup: Unknown subsys name 'rlimit'
[ 71.251223][ T1276] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.257927][ T1276] ieee802154 phy1 wpan1: encryption failed: -22
[ 72.591241][ T4269] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 74.241064][ T4282] chnl_net:caif_netlink_parms(): no params data found
[ 74.291613][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state
[ 74.298920][ T4282] bridge0: port 1(bridge_slave_0) entered disabled state
[ 74.307145][ T4282] device bridge_slave_0 entered promiscuous mode
[ 74.317154][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state
[ 74.324428][ T4282] bridge0: port 2(bridge_slave_1) entered disabled state
[ 74.332504][ T4282] device bridge_slave_1 entered promiscuous mode
[ 74.356003][ T4282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 74.367037][ T4282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 74.390572][ T4282] team0: Port device team_slave_0 added
[ 74.400557][ T4282] team0: Port device team_slave_1 added
[ 74.419690][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 74.426661][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 74.452705][ T4282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 74.465901][ T4282] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 74.474026][ T4282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 74.499970][ T4282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 74.531102][ T4282] device hsr_slave_0 entered promiscuous mode
[ 74.538176][ T4282] device hsr_slave_1 entered promiscuous mode
[ 74.629614][ T4282] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 74.640228][ T4282] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 74.650199][ T4282] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 74.660179][ T4282] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 74.686415][ T4282] bridge0: port 2(bridge_slave_1) entered blocking state
[ 74.693714][ T4282] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 74.701584][ T4282] bridge0: port 1(bridge_slave_0) entered blocking state
[ 74.708834][ T4282] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 74.751968][ T4282] 8021q: adding VLAN 0 to HW filter on device bond0
[ 74.764611][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 74.776321][ T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 74.785937][ T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 74.796489][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 74.810935][ T4282] 8021q: adding VLAN 0 to HW filter on device team0
[ 74.822417][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 74.831901][ T46] bridge0: port 1(bridge_slave_0) entered blocking state
[ 74.839037][ T46] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 74.858174][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 74.866746][ T46] bridge0: port 2(bridge_slave_1) entered blocking state
[ 74.873935][ T46] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 74.886186][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 74.897467][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 74.907901][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 74.921536][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 74.933127][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 74.945953][ T4282] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 75.096611][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 75.104520][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 75.117003][ T4282] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 75.134404][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 75.153034][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 75.161627][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 75.169696][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 75.181033][ T4282] device veth0_vlan entered promiscuous mode
[ 75.191608][ T4282] device veth1_vlan entered promiscuous mode
[ 75.211671][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 75.220490][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 75.231696][ T4282] device veth0_macvtap entered promiscuous mode
[ 75.242289][ T4282] device veth1_macvtap entered promiscuous mode
[ 75.257236][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 75.264756][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 75.273775][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 75.282293][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 75.291795][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 75.302790][ T4282] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 75.311345][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 75.320686][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 75.332081][ T4282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.342474][ T4282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.351439][ T4282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.360449][ T4282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 75.493486][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 77.086257][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.095379][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 77.110221][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 77.124022][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.132363][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 77.141368][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 77.639651][ T4348] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 77.650982][ T4348] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 77.661856][ T4348] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 77.670264][ T4348] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 77.679123][ T4348] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 77.686540][ T4348] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 78.370329][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/09/08 19:57:51 executed programs: 0
[ 78.619510][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 78.628285][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 78.635853][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 78.645043][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 78.653197][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 78.660737][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 78.789419][ T4367] chnl_net:caif_netlink_parms(): no params data found
[ 78.831246][ T4367] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.838588][ T4367] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.846835][ T4367] device bridge_slave_0 entered promiscuous mode
[ 78.855149][ T4367] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.862280][ T4367] bridge0: port 2(bridge_slave_1) entered disabled state
[ 78.870658][ T4367] device bridge_slave_1 entered promiscuous mode
[ 78.892433][ T4367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 78.903373][ T4367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 78.928244][ T4367] team0: Port device team_slave_0 added
[ 78.935336][ T4367] team0: Port device team_slave_1 added
[ 78.954525][ T4367] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 78.961807][ T4367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 78.988064][ T4367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 79.001736][ T4367] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 79.009222][ T4367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 79.035460][ T4367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 79.065555][ T4367] device hsr_slave_0 entered promiscuous mode
[ 79.072631][ T4367] device hsr_slave_1 entered promiscuous mode
[ 79.079885][ T4367] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 79.088049][ T4367] Cannot create hsr debugfs directory
[ 80.543254][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.621157][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 80.699098][ T4348] Bluetooth: hci0: command 0x0409 tx timeout
[ 81.415222][ T11] device hsr_slave_0 left promiscuous mode
[ 81.422666][ T11] device hsr_slave_1 left promiscuous mode
[ 81.431259][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 81.448872][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 81.460520][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 81.469325][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 81.477858][ T11] device bridge_slave_1 left promiscuous mode
[ 81.484862][ T11] bridge0: port 2(bridge_slave_1) entered disabled state
[ 81.498424][ T41] cfg80211: failed to load regulatory.db
[ 81.510284][ T11] device bridge_slave_0 left promiscuous mode
[ 81.516748][ T11] bridge0: port 1(bridge_slave_0) entered disabled state
[ 81.544843][ T11] device veth1_macvtap left promiscuous mode
[ 81.553891][ T11] device veth0_macvtap left promiscuous mode
[ 81.560119][ T11] device veth1_vlan left promiscuous mode
[ 81.566143][ T11] device veth0_vlan left promiscuous mode
[ 81.928894][ T11] team0 (unregistering): Port device team_slave_1 removed
[ 81.958684][ T11] team0 (unregistering): Port device team_slave_0 removed
[ 81.987517][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 82.020907][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 82.293152][ T11] bond0 (unregistering): Released all slaves
[ 82.404543][ T4367] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 82.413642][ T4367] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 82.425310][ T4367] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 82.435278][ T4367] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 82.512428][ T4367] 8021q: adding VLAN 0 to HW filter on device bond0
[ 82.524191][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 82.532637][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 82.543702][ T4367] 8021q: adding VLAN 0 to HW filter on device team0
[ 82.554466][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 82.563739][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 82.572490][ T40] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.579650][ T40] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 82.589086][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 82.612963][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 82.623282][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 82.632615][ T40] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.639897][ T40] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 82.649134][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 82.662018][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 82.674033][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 82.683524][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 82.693505][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 82.704298][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 82.714071][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 82.731621][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 82.740383][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 82.752734][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 82.762062][ T4321] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 82.770435][ T4348] Bluetooth: hci0: command 0x041b tx timeout
[ 82.780804][ T4367] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 82.992401][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 83.012902][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 83.060350][ T4367] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 83.095494][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 83.107742][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 83.152722][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 83.161409][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 83.172502][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 83.182134][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 83.193348][ T4367] device veth0_vlan entered promiscuous mode
[ 83.209280][ T4367] device veth1_vlan entered promiscuous mode
[ 83.240088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 83.249607][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 83.258486][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 83.268102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 83.279745][ T4367] device veth0_macvtap entered promiscuous mode
[ 83.295046][ T4367] device veth1_macvtap entered promiscuous mode
[ 83.313395][ T4367] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 83.321849][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 83.330584][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 83.339028][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 83.348086][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 83.388464][ T4367] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 83.396001][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 83.404676][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 83.415860][ T4367] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.425837][ T4367] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.435160][ T4367] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.445879][ T4367] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 83.555481][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.565214][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/09/08 19:57:56 executed programs: 2
[ 83.612238][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 83.612701][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 83.629172][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 83.639290][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 83.712091][ T4436] loop0: detected capacity change from 0 to 128
[ 83.724211][ T4436] VFS: Found a Xenix FS (block size = 1024) on device loop0
[ 83.743269][ T4436] ==================================================================
[ 83.751392][ T4436] BUG: KASAN: use-after-free in sysv_new_inode+0x10d9/0x1270
[ 83.758812][ T4436] Read of size 2 at addr ffff8880699311ce by task syz.0.17/4436
[ 83.766480][ T4436]
[ 83.768849][ T4436] CPU: 0 PID: 4436 Comm: syz.0.17 Not tainted syzkaller #0
[ 83.776631][ T4436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025
[ 83.786807][ T4436] Call Trace:
[ 83.790294][ T4436]
[ 83.793271][ T4436] dump_stack_lvl+0x168/0x22e
[ 83.798406][ T4436] ? __lock_acquire+0x7c50/0x7c50
[ 83.804443][ T4436] ? show_regs_print_info+0x12/0x12
[ 83.809689][ T4436] ? load_image+0x3b0/0x3b0
[ 83.814249][ T4436] ? _raw_spin_lock_irqsave+0xb0/0xf0
[ 83.819686][ T4436] ? __virt_addr_valid+0x188/0x540
[ 83.825102][ T4436] ? __virt_addr_valid+0x465/0x540
[ 83.830254][ T4436] ? sysv_new_inode+0x10d9/0x1270
[ 83.835316][ T4436] print_report+0xa8/0x210
[ 83.839772][ T4436] kasan_report+0x10b/0x140
[ 83.844299][ T4436] ? do_raw_spin_unlock+0x11d/0x230
[ 83.849536][ T4436] ? sysv_new_inode+0x10d9/0x1270
[ 83.854590][ T4436] sysv_new_inode+0x10d9/0x1270
[ 83.859620][ T4436] ? __d_add+0x4c0/0x810
[ 83.863866][ T4436] ? __lock_acquire+0x7c50/0x7c50
[ 83.868885][ T4436] ? sysv_free_inode+0x7e0/0x7e0
[ 83.873818][ T4436] ? _raw_spin_unlock+0x24/0x40
[ 83.878665][ T4436] ? __d_add+0x4ec/0x810
[ 83.883003][ T4436] ? sysv_inode_by_name+0xdd/0x140
[ 83.888108][ T4436] sysv_mknod+0x4a/0xd0
[ 83.892257][ T4436] ? sysv_lookup+0xe0/0xe0
[ 83.896659][ T4436] path_openat+0x1187/0x2e70
[ 83.901249][ T4436] ? do_filp_open+0x3c0/0x3c0
[ 83.905939][ T4436] do_filp_open+0x1c1/0x3c0
[ 83.910470][ T4436] ? vfs_tmpfile+0x480/0x480
[ 83.915104][ T4436] ? _raw_spin_unlock+0x24/0x40
[ 83.919961][ T4436] ? alloc_fd+0x58f/0x630
[ 83.924306][ T4436] do_sys_openat2+0x142/0x490
[ 83.929003][ T4436] ? do_sys_open+0xe0/0xe0
[ 83.933701][ T4436] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 83.940136][ T4436] ? lock_chain_count+0x20/0x20
[ 83.944994][ T4436] __x64_sys_openat+0x135/0x160
[ 83.949849][ T4436] do_syscall_64+0x4c/0xa0
[ 83.954261][ T4436] ? clear_bhb_loop+0x60/0xb0
[ 83.958946][ T4436] ? clear_bhb_loop+0x60/0xb0
[ 83.963637][ T4436] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 83.969532][ T4436] RIP: 0033:0x7f138478ebe9
[ 83.973950][ T4436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 83.993564][ T4436] RSP: 002b:00007ffd28e1d378 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 84.002064][ T4436] RAX: ffffffffffffffda RBX: 00007f13849c5fa0 RCX: 00007f138478ebe9
[ 84.010120][ T4436] RDX: 0000000000183042 RSI: 0000200000000740 RDI: ffffffffffffff9c
[ 84.018118][ T4436] RBP: 00007f1384811e19 R08: 0000000000000000 R09: 0000000000000000
[ 84.026214][ T4436] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000000
[ 84.034291][ T4436] R13: 00007f13849c5fa0 R14: 00007f13849c5fa0 R15: 0000000000000004
[ 84.042268][ T4436]
[ 84.045285][ T4436]
[ 84.047612][ T4436] The buggy address belongs to the physical page:
[ 84.054031][ T4436] page:ffffea0001a64c40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x69931
[ 84.064262][ T4436] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 84.071374][ T4436] raw: 00fff00000000000 ffffea0001a65148 ffffea0001a64c08 0000000000000000
[ 84.079980][ T4436] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 84.088598][ T4436] page dumped because: kasan: bad access detected
[ 84.095015][ T4436] page_owner tracks the page as freed
[ 84.100377][ T4436] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO), pid 4375, tgid 4375 (dhcpcd-run-hook), ts 80819352208, free_ts 80831100049
[ 84.119308][ T4436] post_alloc_hook+0x173/0x1a0
[ 84.124119][ T4436] get_page_from_freelist+0x1a26/0x1ac0
[ 84.129682][ T4436] __alloc_pages+0x1df/0x4e0
[ 84.134270][ T4436] __folio_alloc+0xe/0x30
[ 84.138613][ T4436] vma_alloc_folio+0x4a3/0x900
[ 84.143373][ T4436] handle_mm_fault+0x2242/0x3e70
[ 84.148306][ T4436] do_user_addr_fault+0x51f/0xb10
[ 84.153409][ T4436] exc_page_fault+0x60/0x100
[ 84.158009][ T4436] asm_exc_page_fault+0x22/0x30
[ 84.162869][ T4436] page last free stack trace:
[ 84.167645][ T4436] free_unref_page_prepare+0x8b4/0x9a0
[ 84.173123][ T4436] free_unref_page_list+0xbb/0x8e0
[ 84.178275][ T4436] release_pages+0x1f92/0x2200
[ 84.183096][ T4436] tlb_flush_mmu+0xff/0x210
[ 84.187621][ T4436] tlb_finish_mmu+0xbd/0x1c0
[ 84.192391][ T4436] exit_mmap+0x343/0x8e0
[ 84.196629][ T4436] __mmput+0x118/0x3c0
[ 84.200723][ T4436] exit_mm+0x1e6/0x2c0
[ 84.204801][ T4436] do_exit+0x8c1/0x2400
[ 84.208961][ T4436] do_group_exit+0x217/0x2d0
[ 84.213571][ T4436] __x64_sys_exit_group+0x3b/0x40
[ 84.218596][ T4436] do_syscall_64+0x4c/0xa0
[ 84.223092][ T4436] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 84.228983][ T4436]
[ 84.231312][ T4436] Memory state around the buggy address:
[ 84.237013][ T4436] ffff888069931080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 84.245066][ T4436] ffff888069931100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 84.253117][ T4436] >ffff888069931180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 84.261175][ T4436] ^
[ 84.267679][ T4436] ffff888069931200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 84.275750][ T4436] ffff888069931280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 84.283897][ T4436] ==================================================================
[ 84.295887][ T4436] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 84.303123][ T4436] CPU: 0 PID: 4436 Comm: syz.0.17 Not tainted syzkaller #0
[ 84.310686][ T4436] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025
[ 84.320830][ T4436] Call Trace:
[ 84.324200][ T4436]
[ 84.327143][ T4436] dump_stack_lvl+0x168/0x22e
[ 84.331828][ T4436] ? memcpy+0x3c/0x60
[ 84.335825][ T4436] ? show_regs_print_info+0x12/0x12
[ 84.341116][ T4436] ? load_image+0x3b0/0x3b0
[ 84.345638][ T4436] panic+0x2c9/0x710
[ 84.349541][ T4436] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 84.355704][ T4436] ? bpf_jit_dump+0xd0/0xd0
[ 84.360300][ T4436] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 84.366200][ T4436] ? _raw_spin_unlock+0x40/0x40
[ 84.371055][ T4436] check_panic_on_warn+0x80/0xa0
[ 84.375995][ T4436] ? sysv_new_inode+0x10d9/0x1270
[ 84.381285][ T4436] end_report+0x66/0x110
[ 84.385619][ T4436] kasan_report+0x118/0x140
[ 84.390210][ T4436] ? do_raw_spin_unlock+0x11d/0x230
[ 84.395499][ T4436] ? sysv_new_inode+0x10d9/0x1270
[ 84.400629][ T4436] sysv_new_inode+0x10d9/0x1270
[ 84.405501][ T4436] ? __d_add+0x4c0/0x810
[ 84.409750][ T4436] ? __lock_acquire+0x7c50/0x7c50
[ 84.414804][ T4436] ? sysv_free_inode+0x7e0/0x7e0
[ 84.419773][ T4436] ? _raw_spin_unlock+0x24/0x40
[ 84.424644][ T4436] ? __d_add+0x4ec/0x810
[ 84.428898][ T4436] ? sysv_inode_by_name+0xdd/0x140
[ 84.434032][ T4436] sysv_mknod+0x4a/0xd0
[ 84.438406][ T4436] ? sysv_lookup+0xe0/0xe0
[ 84.442838][ T4436] path_openat+0x1187/0x2e70
[ 84.447459][ T4436] ? do_filp_open+0x3c0/0x3c0
[ 84.452160][ T4436] do_filp_open+0x1c1/0x3c0
[ 84.456690][ T4436] ? vfs_tmpfile+0x480/0x480
[ 84.461301][ T4436] ? _raw_spin_unlock+0x24/0x40
[ 84.466169][ T4436] ? alloc_fd+0x58f/0x630
[ 84.470506][ T4436] do_sys_openat2+0x142/0x490
[ 84.475187][ T4436] ? do_sys_open+0xe0/0xe0
[ 84.479608][ T4436] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 84.485598][ T4436] ? lock_chain_count+0x20/0x20
[ 84.490459][ T4436] __x64_sys_openat+0x135/0x160
[ 84.495315][ T4436] do_syscall_64+0x4c/0xa0
[ 84.499817][ T4436] ? clear_bhb_loop+0x60/0xb0
[ 84.504501][ T4436] ? clear_bhb_loop+0x60/0xb0
[ 84.509179][ T4436] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 84.515102][ T4436] RIP: 0033:0x7f138478ebe9
[ 84.519693][ T4436] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 84.539314][ T4436] RSP: 002b:00007ffd28e1d378 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 84.547820][ T4436] RAX: ffffffffffffffda RBX: 00007f13849c5fa0 RCX: 00007f138478ebe9
[ 84.555808][ T4436] RDX: 0000000000183042 RSI: 0000200000000740 RDI: ffffffffffffff9c
[ 84.563798][ T4436] RBP: 00007f1384811e19 R08: 0000000000000000 R09: 0000000000000000
[ 84.571843][ T4436] R10: 0000000000000015 R11: 0000000000000246 R12: 0000000000000000
[ 84.579834][ T4436] R13: 00007f13849c5fa0 R14: 00007f13849c5fa0 R15: 0000000000000004
[ 84.587816][ T4436]
[ 84.591083][ T4436] Kernel Offset: disabled
[ 84.595407][ T4436] Rebooting in 86400 seconds..