Warning: Permanently added '10.128.1.104' (ED25519) to the list of known hosts.
2025/08/23 18:21:46 parsed 1 programs
[ 55.205183][ T4188] cgroup: Unknown subsys name 'net'
[ 55.308889][ T4188] cgroup: Unknown subsys name 'rlimit'
[ 56.538261][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 58.401473][ T151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 58.409520][ T151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 58.431860][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 58.447040][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 58.455586][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 58.465949][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 58.932550][ T4228] chnl_net:caif_netlink_parms(): no params data found
[ 58.995565][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state
[ 59.003858][ T4228] bridge0: port 1(bridge_slave_0) entered disabled state
[ 59.012385][ T4228] device bridge_slave_0 entered promiscuous mode
[ 59.022667][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state
[ 59.031268][ T4228] bridge0: port 2(bridge_slave_1) entered disabled state
[ 59.039454][ T4228] device bridge_slave_1 entered promiscuous mode
[ 59.068069][ T4228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 59.080005][ T4228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 59.111830][ T4228] team0: Port device team_slave_0 added
[ 59.119557][ T4228] team0: Port device team_slave_1 added
[ 59.144275][ T4228] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 59.151728][ T4228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 59.178267][ T4228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 59.191586][ T4228] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 59.198562][ T4228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 59.224903][ T4228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 59.264189][ T4228] device hsr_slave_0 entered promiscuous mode
[ 59.272306][ T4228] device hsr_slave_1 entered promiscuous mode
[ 59.391175][ T4228] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 59.408515][ T4228] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 59.418298][ T4228] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 59.427423][ T4228] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 59.528667][ T4228] 8021q: adding VLAN 0 to HW filter on device bond0
[ 59.548057][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 59.560385][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 59.572429][ T4228] 8021q: adding VLAN 0 to HW filter on device team0
[ 59.581976][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 59.593046][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 59.603425][ T151] bridge0: port 1(bridge_slave_0) entered blocking state
[ 59.610712][ T151] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 59.620750][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 59.640775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 59.650030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 59.658770][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 59.665907][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 59.673814][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 59.683397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 59.698492][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 59.708539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 59.717866][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 59.731669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 59.740699][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 59.749298][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 59.759085][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 59.770514][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 59.778861][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 59.789557][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 59.859530][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 59.867476][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 59.879557][ T4228] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 59.895060][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 59.905343][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 59.924143][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 59.933326][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 59.942507][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 59.951321][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 59.961661][ T4228] device veth0_vlan entered promiscuous mode
[ 59.972425][ T4228] device veth1_vlan entered promiscuous mode
[ 59.988234][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 59.996546][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 60.005909][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 60.015740][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 60.027543][ T4228] device veth0_macvtap entered promiscuous mode
[ 60.049169][ T4228] device veth1_macvtap entered promiscuous mode
[ 60.064140][ T4228] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 60.072045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 60.081600][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 60.089443][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 60.098836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 60.125863][ T4228] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 60.134863][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 60.143779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 60.154446][ T4228] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 60.164353][ T4228] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 60.173429][ T4228] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 60.182271][ T4228] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2025/08/23 18:21:54 executed programs: 0
[ 61.815444][ T4293] chnl_net:caif_netlink_parms(): no params data found
[ 61.873274][ T4293] bridge0: port 1(bridge_slave_0) entered blocking state
[ 61.880610][ T4293] bridge0: port 1(bridge_slave_0) entered disabled state
[ 61.888684][ T4293] device bridge_slave_0 entered promiscuous mode
[ 61.897639][ T4293] bridge0: port 2(bridge_slave_1) entered blocking state
[ 61.905072][ T4293] bridge0: port 2(bridge_slave_1) entered disabled state
[ 61.914238][ T4293] device bridge_slave_1 entered promiscuous mode
[ 61.940029][ T4293] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 61.953651][ T4293] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 61.984345][ T4293] team0: Port device team_slave_0 added
[ 61.993407][ T4293] team0: Port device team_slave_1 added
[ 62.015428][ T4293] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 62.023900][ T4293] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 62.050222][ T4293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 62.064110][ T4293] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 62.071242][ T4293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 62.098271][ T4293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 62.132165][ T4293] device hsr_slave_0 entered promiscuous mode
[ 62.138966][ T4293] device hsr_slave_1 entered promiscuous mode
[ 62.145553][ T4293] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 62.153823][ T4293] Cannot create hsr debugfs directory
[ 62.247204][ T4293] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 63.771192][ T4251] Bluetooth: hci0: command 0x0409 tx timeout
[ 65.665057][ T4293] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 65.756034][ T4293] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 65.816620][ T4293] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 65.851421][ T4251] Bluetooth: hci0: command 0x041b tx timeout
[ 66.029986][ T4293] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 66.042114][ T4293] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 66.051589][ T4293] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 66.060664][ T4293] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 66.117813][ T4293] 8021q: adding VLAN 0 to HW filter on device bond0
[ 66.133291][ T155] device hsr_slave_0 left promiscuous mode
[ 66.140036][ T155] device hsr_slave_1 left promiscuous mode
[ 66.147653][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 66.155336][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 66.164068][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 66.171875][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 66.179613][ T155] device bridge_slave_1 left promiscuous mode
[ 66.187095][ T155] bridge0: port 2(bridge_slave_1) entered disabled state
[ 66.199594][ T155] device bridge_slave_0 left promiscuous mode
[ 66.207147][ T155] bridge0: port 1(bridge_slave_0) entered disabled state
[ 66.224774][ T155] device veth1_macvtap left promiscuous mode
[ 66.231506][ T155] device veth0_macvtap left promiscuous mode
[ 66.237643][ T155] device veth1_vlan left promiscuous mode
[ 66.243696][ T155] device veth0_vlan left promiscuous mode
[ 66.389719][ T155] team0 (unregistering): Port device team_slave_1 removed
[ 66.404136][ T155] team0 (unregistering): Port device team_slave_0 removed
[ 66.416548][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 66.429283][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 66.481202][ T155] bond0 (unregistering): Released all slaves
[ 66.536922][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 66.544941][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 66.557607][ T4293] 8021q: adding VLAN 0 to HW filter on device team0
[ 66.567256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 66.576073][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 66.585058][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 66.592172][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 66.602569][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 66.615106][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 66.624116][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 66.633282][ T1437] bridge0: port 2(bridge_slave_1) entered blocking state
[ 66.640771][ T1437] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 66.654549][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 66.678612][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 66.688580][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 66.699034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 66.707940][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 66.716879][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 66.725599][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 66.734148][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 66.747243][ T4293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 66.759207][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 66.773708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 66.783025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 66.792000][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 66.880744][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 66.888276][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 66.901544][ T4293] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 66.917927][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 66.926837][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 66.945670][ T4293] device veth0_vlan entered promiscuous mode
[ 66.957690][ T4293] device veth1_vlan entered promiscuous mode
[ 66.965236][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 66.973882][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 66.982495][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 66.990908][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 66.999516][ T151] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 67.032929][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 67.042107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 67.051358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 67.062754][ T4293] device veth0_macvtap entered promiscuous mode
[ 67.074450][ T4293] device veth1_macvtap entered promiscuous mode
[ 67.093103][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 67.101669][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 67.110592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 67.118749][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 67.128804][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 67.142548][ T4293] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 67.150756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 67.159975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 67.172123][ T4293] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.181736][ T4293] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.191236][ T4293] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.199940][ T4293] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 67.270758][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 67.278901][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/08/23 18:22:00 executed programs: 2
[ 67.314606][ T1437] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 67.328223][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 67.337464][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 67.347194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 67.410511][ T4326] loop0: detected capacity change from 0 to 128
[ 67.502934][ T4326] VFS: Found a Xenix FS (block size = 1024) on device loop0
[ 67.523780][ T4326] ==================================================================
[ 67.532384][ T4326] BUG: KASAN: use-after-free in sysv_new_inode+0x10b4/0x1240
[ 67.539801][ T4326] Read of size 2 at addr ffff88806bfd91ce by task syz.0.17/4326
[ 67.547453][ T4326]
[ 67.549792][ T4326] CPU: 0 PID: 4326 Comm: syz.0.17 Not tainted 5.15.189-syzkaller #0
[ 67.557775][ T4326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 67.567859][ T4326] Call Trace:
[ 67.571156][ T4326]
[ 67.574093][ T4326] dump_stack_lvl+0x168/0x230
[ 67.578785][ T4326] ? show_regs_print_info+0x20/0x20
[ 67.584004][ T4326] ? load_image+0x3b0/0x3b0
[ 67.588560][ T4326] ? _raw_spin_lock_irqsave+0xb0/0xf0
[ 67.593952][ T4326] ? mutex_lock_io_nested+0x60/0x60
[ 67.599175][ T4326] print_address_description+0x60/0x2d0
[ 67.604748][ T4326] ? sysv_new_inode+0x10b4/0x1240
[ 67.609804][ T4326] kasan_report+0xdf/0x130
[ 67.614249][ T4326] ? sysv_new_inode+0x10b4/0x1240
[ 67.619310][ T4326] sysv_new_inode+0x10b4/0x1240
[ 67.624184][ T4326] ? __d_add+0x4b4/0x7f0
[ 67.628555][ T4326] ? __rwlock_init+0x140/0x140
[ 67.633330][ T4326] ? sysv_find_entry+0x554/0x5e0
[ 67.638272][ T4326] ? sysv_free_inode+0x7e0/0x7e0
[ 67.643238][ T4326] sysv_mknod+0x4a/0xd0
[ 67.647400][ T4326] ? sysv_lookup+0xe0/0xe0
[ 67.651816][ T4326] path_openat+0x11e1/0x2f30
[ 67.656440][ T4326] ? do_filp_open+0x3e0/0x3e0
[ 67.661130][ T4326] do_filp_open+0x1b3/0x3e0
[ 67.665634][ T4326] ? vfs_tmpfile+0x300/0x300
[ 67.670240][ T4326] ? _raw_spin_unlock+0x24/0x40
[ 67.675533][ T4326] ? alloc_fd+0x598/0x630
[ 67.679881][ T4326] do_sys_openat2+0x142/0x4a0
[ 67.684564][ T4326] ? __lock_acquire+0x7c60/0x7c60
[ 67.689747][ T4326] ? do_sys_open+0xe0/0xe0
[ 67.694170][ T4326] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 67.700272][ T4326] ? lock_chain_count+0x20/0x20
[ 67.705155][ T4326] ? vtime_user_exit+0x2dc/0x400
[ 67.710127][ T4326] __x64_sys_openat+0x135/0x160
[ 67.715005][ T4326] do_syscall_64+0x4c/0xa0
[ 67.719440][ T4326] ? clear_bhb_loop+0x30/0x80
[ 67.724116][ T4326] ? clear_bhb_loop+0x30/0x80
[ 67.728802][ T4326] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 67.734910][ T4326] RIP: 0033:0x7f695d485be9
[ 67.739329][ T4326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 67.759034][ T4326] RSP: 002b:00007ffec97497f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 67.767559][ T4326] RAX: ffffffffffffffda RBX: 00007f695d6acfa0 RCX: 00007f695d485be9
[ 67.775543][ T4326] RDX: 0000000000000042 RSI: 0000200000000440 RDI: ffffffffffffff9c
[ 67.783529][ T4326] RBP: 00007f695d508e19 R08: 0000000000000000 R09: 0000000000000000
[ 67.791508][ T4326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 67.799492][ T4326] R13: 00007f695d6acfa0 R14: 00007f695d6acfa0 R15: 0000000000000004
[ 67.807688][ T4326]
[ 67.810722][ T4326]
[ 67.813045][ T4326] The buggy address belongs to the page:
[ 67.818783][ T4326] page:ffffea0001aff640 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6bfd9
[ 67.828935][ T4326] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 67.836242][ T4326] raw: 00fff00000000000 ffffea0001aff188 ffffea0001aff4c8 0000000000000000
[ 67.844827][ T4326] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 67.853522][ T4326] page dumped because: kasan: bad access detected
[ 67.859952][ T4326] page_owner tracks the page as freed
[ 67.865318][ T4326] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 4326, ts 67398949609, free_ts 67408960513
[ 67.880946][ T4326] get_page_from_freelist+0x1b77/0x1c60
[ 67.886505][ T4326] __alloc_pages+0x1e1/0x470
[ 67.891097][ T4326] alloc_pages_vma+0x393/0x7c0
[ 67.895959][ T4326] handle_mm_fault+0x2382/0x43c0
[ 67.900897][ T4326] do_user_addr_fault+0x489/0xc80
[ 67.906009][ T4326] exc_page_fault+0x60/0x100
[ 67.910596][ T4326] asm_exc_page_fault+0x22/0x30
[ 67.915446][ T4326] page last free stack trace:
[ 67.920207][ T4326] free_unref_page_prepare+0x637/0x6c0
[ 67.925667][ T4326] free_unref_page_list+0x122/0x7e0
[ 67.930843][ T4250] Bluetooth: hci0: command 0x040f tx timeout
[ 67.936829][ T4326] release_pages+0x184b/0x1bb0
[ 67.936862][ T4326] tlb_finish_mmu+0x164/0x2e0
[ 67.936878][ T4326] unmap_region+0x315/0x360
[ 67.950817][ T4326] __do_munmap+0x9d3/0xdc0
[ 67.955332][ T4326] __vm_munmap+0x137/0x230
[ 67.959957][ T4326] __x64_sys_munmap+0x67/0x70
[ 67.964731][ T4326] do_syscall_64+0x4c/0xa0
[ 67.969150][ T4326] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 67.975068][ T4326]
[ 67.977396][ T4326] Memory state around the buggy address:
[ 67.983027][ T4326] ffff88806bfd9080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 67.991214][ T4326] ffff88806bfd9100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 67.999298][ T4326] >ffff88806bfd9180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 68.007370][ T4326] ^
[ 68.013803][ T4326] ffff88806bfd9200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 68.021863][ T4326] ffff88806bfd9280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 68.029912][ T4326] ==================================================================
[ 68.037952][ T4326] Disabling lock debugging due to kernel taint
[ 68.046402][ T4326] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 68.053632][ T4326] CPU: 1 PID: 4326 Comm: syz.0.17 Tainted: G B 5.15.189-syzkaller #0
[ 68.063113][ T4326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 68.073661][ T4326] Call Trace:
[ 68.076959][ T4326]
[ 68.079895][ T4326] dump_stack_lvl+0x168/0x230
[ 68.084584][ T4326] ? show_regs_print_info+0x20/0x20
[ 68.089789][ T4326] ? load_image+0x3b0/0x3b0
[ 68.094326][ T4326] panic+0x2c9/0x7f0
[ 68.098214][ T4326] ? bpf_jit_dump+0xd0/0xd0
[ 68.102697][ T4326] ? _raw_spin_unlock_irqrestore+0xf6/0x100
[ 68.108572][ T4326] ? _raw_spin_unlock+0x40/0x40
[ 68.113399][ T4326] ? sysv_new_inode+0x10b4/0x1240
[ 68.118416][ T4326] check_panic_on_warn+0x80/0xa0
[ 68.123358][ T4326] ? sysv_new_inode+0x10b4/0x1240
[ 68.128358][ T4326] end_report+0x6d/0xf0
[ 68.132522][ T4326] kasan_report+0x102/0x130
[ 68.137005][ T4326] ? sysv_new_inode+0x10b4/0x1240
[ 68.142014][ T4326] sysv_new_inode+0x10b4/0x1240
[ 68.147073][ T4326] ? __d_add+0x4b4/0x7f0
[ 68.151317][ T4326] ? __rwlock_init+0x140/0x140
[ 68.156082][ T4326] ? sysv_find_entry+0x554/0x5e0
[ 68.161020][ T4326] ? sysv_free_inode+0x7e0/0x7e0
[ 68.165947][ T4326] sysv_mknod+0x4a/0xd0
[ 68.170082][ T4326] ? sysv_lookup+0xe0/0xe0
[ 68.174491][ T4326] path_openat+0x11e1/0x2f30
[ 68.179066][ T4326] ? do_filp_open+0x3e0/0x3e0
[ 68.183728][ T4326] do_filp_open+0x1b3/0x3e0
[ 68.188234][ T4326] ? vfs_tmpfile+0x300/0x300
[ 68.192850][ T4326] ? _raw_spin_unlock+0x24/0x40
[ 68.197712][ T4326] ? alloc_fd+0x598/0x630
[ 68.202098][ T4326] do_sys_openat2+0x142/0x4a0
[ 68.206777][ T4326] ? __lock_acquire+0x7c60/0x7c60
[ 68.211826][ T4326] ? do_sys_open+0xe0/0xe0
[ 68.216273][ T4326] ? lockdep_hardirqs_on_prepare+0x3fc/0x760
[ 68.222254][ T4326] ? lock_chain_count+0x20/0x20
[ 68.227101][ T4326] ? vtime_user_exit+0x2dc/0x400
[ 68.232047][ T4326] __x64_sys_openat+0x135/0x160
[ 68.236908][ T4326] do_syscall_64+0x4c/0xa0
[ 68.241318][ T4326] ? clear_bhb_loop+0x30/0x80
[ 68.245986][ T4326] ? clear_bhb_loop+0x30/0x80
[ 68.250657][ T4326] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 68.256539][ T4326] RIP: 0033:0x7f695d485be9
[ 68.260955][ T4326] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 68.280584][ T4326] RSP: 002b:00007ffec97497f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 68.289080][ T4326] RAX: ffffffffffffffda RBX: 00007f695d6acfa0 RCX: 00007f695d485be9
[ 68.297226][ T4326] RDX: 0000000000000042 RSI: 0000200000000440 RDI: ffffffffffffff9c
[ 68.305229][ T4326] RBP: 00007f695d508e19 R08: 0000000000000000 R09: 0000000000000000
[ 68.313196][ T4326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 68.321300][ T4326] R13: 00007f695d6acfa0 R14: 00007f695d6acfa0 R15: 0000000000000004
[ 68.329283][ T4326]
[ 68.332392][ T4326] Kernel Offset: disabled
[ 68.336720][ T4326] Rebooting in 86400 seconds..