[ 81.749712][ T1108] cfg80211: failed to load regulatory.db
Warning: Permanently added '10.128.0.115' (ED25519) to the list of known hosts.
2026/07/10 07:22:23 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 90.566426][ T4525] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 94.008876][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.025817][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.034525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 94.066507][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.074458][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.083047][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 95.453441][ T4718] chnl_net:caif_netlink_parms(): no params data found
[ 95.521749][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.529085][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.537325][ T4718] device bridge_slave_0 entered promiscuous mode
[ 95.545660][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.553453][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.561675][ T4718] device bridge_slave_1 entered promiscuous mode
[ 95.580413][ T4718] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 95.591291][ T4718] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 95.613474][ T4718] team0: Port device team_slave_0 added
[ 95.621202][ T4718] team0: Port device team_slave_1 added
[ 95.638055][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 95.645627][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 95.672670][ T4718] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 95.685423][ T4718] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 95.692604][ T4718] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 95.719450][ T4718] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.747571][ T4718] device hsr_slave_0 entered promiscuous mode
[ 95.756303][ T4718] device hsr_slave_1 entered promiscuous mode
[ 96.255764][ T4718] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 96.276967][ T4718] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 96.287155][ T4718] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 96.298620][ T4718] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 96.442197][ T4718] 8021q: adding VLAN 0 to HW filter on device bond0
[ 96.483187][ T4718] 8021q: adding VLAN 0 to HW filter on device team0
[ 96.492679][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 96.501510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 96.520061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 96.531067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 96.540042][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.547480][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.558198][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 96.567582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 96.577760][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.585254][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.607503][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 96.616321][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 96.628759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 96.638966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 96.651555][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 96.660716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 96.672045][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 96.681352][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 96.691801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 96.732259][ T4718] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 96.747548][ T4718] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 96.757588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 96.775952][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 96.784484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 96.942358][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 96.951722][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 96.968660][ T4718] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 97.037843][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 97.046979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 97.061427][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 97.071286][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 97.084749][ T4718] device veth0_vlan entered promiscuous mode
[ 97.095144][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 97.102979][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 97.119194][ T4718] device veth1_vlan entered promiscuous mode
[ 97.149840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 97.166854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 97.185429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 97.197333][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 97.213589][ T4718] device veth0_macvtap entered promiscuous mode
[ 97.239139][ T4718] device veth1_macvtap entered promiscuous mode
[ 97.280153][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 97.306607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 97.315900][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 97.324469][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 97.347831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 97.368228][ T4718] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 97.379918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 97.396656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 97.424129][ T4718] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.445070][ T4718] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.453918][ T4718] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.485075][ T4718] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/07/10 07:22:34 executed programs: 0
[ 98.425792][ T4831] chnl_net:caif_netlink_parms(): no params data found
[ 98.568866][ T4831] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.576424][ T4831] bridge0: port 1(bridge_slave_0) entered disabled state
[ 98.584664][ T4831] device bridge_slave_0 entered promiscuous mode
[ 98.618042][ T4831] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.625370][ T4831] bridge0: port 2(bridge_slave_1) entered disabled state
[ 98.633687][ T4831] device bridge_slave_1 entered promiscuous mode
[ 98.688738][ T4831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 98.723077][ T4831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 98.777883][ T4831] team0: Port device team_slave_0 added
[ 98.790319][ T4831] team0: Port device team_slave_1 added
[ 98.828239][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.837797][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 98.870955][ T4831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.887755][ T4831] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.894741][ T4831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 98.954489][ T4831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.997986][ T4831] device hsr_slave_0 entered promiscuous mode
[ 99.004911][ T4831] device hsr_slave_1 entered promiscuous mode
[ 99.012227][ T4831] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 99.020696][ T4831] Cannot create hsr debugfs directory
[ 99.210752][ T4831] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 100.235202][ T4711] Bluetooth: hci0: command 0x0409 tx timeout
[ 101.854614][ T4831] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 101.912109][ T4831] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.001006][ T4831] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.135807][ T4831] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 102.148517][ T4831] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 102.169683][ T4831] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 102.179659][ T4831] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 102.282889][ T4831] 8021q: adding VLAN 0 to HW filter on device bond0
[ 102.300894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 102.310055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 102.315177][ T4324] Bluetooth: hci0: command 0x041b tx timeout
[ 102.322293][ T4831] 8021q: adding VLAN 0 to HW filter on device team0
[ 102.348730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 102.359113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 102.368671][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.375849][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 102.407053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 102.415709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 102.427530][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 102.437350][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.444583][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 102.453515][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 102.463346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 102.472974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 102.482859][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 102.500769][ T4346] device hsr_slave_0 left promiscuous mode
[ 102.507646][ T4346] device hsr_slave_1 left promiscuous mode
[ 102.514117][ T4346] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 102.522332][ T4346] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 102.536619][ T4346] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 102.544415][ T4346] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 102.556174][ T4346] device bridge_slave_1 left promiscuous mode
[ 102.562517][ T4346] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.573898][ T4346] device bridge_slave_0 left promiscuous mode
[ 102.582265][ T4346] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.598947][ T4346] device veth1_macvtap left promiscuous mode
[ 102.606774][ T4346] device veth0_macvtap left promiscuous mode
[ 102.612875][ T4346] device veth1_vlan left promiscuous mode
[ 102.620482][ T4346] device veth0_vlan left promiscuous mode
[ 102.744420][ T4346] team0 (unregistering): Port device team_slave_1 removed
[ 102.758768][ T4346] team0 (unregistering): Port device team_slave_0 removed
[ 102.770638][ T4346] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 102.784059][ T4346] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 102.837682][ T4346] bond0 (unregistering): Released all slaves
[ 102.880872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 102.889030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 102.898284][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 102.911716][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 102.920355][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 102.933166][ T4831] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 102.944796][ T4831] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 102.953152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 102.962035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 103.061048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 103.068806][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 103.080487][ T4831] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 103.097836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 103.106908][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 103.130581][ T4831] device veth0_vlan entered promiscuous mode
[ 103.144791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 103.154097][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 103.162610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 103.170852][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 103.180818][ T4831] device veth1_vlan entered promiscuous mode
[ 103.201840][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 103.210491][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 103.218769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 103.227538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 103.238237][ T4831] device veth0_macvtap entered promiscuous mode
[ 103.256342][ T4831] device veth1_macvtap entered promiscuous mode
[ 103.275269][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 103.282631][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 103.292328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 103.301673][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 103.311330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 103.324198][ T4831] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 103.333586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 103.343073][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 103.354404][ T4831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.364790][ T4831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.375425][ T4831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.384162][ T4831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.448491][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.462203][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.470020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2026/07/10 07:22:40 executed programs: 2
[ 103.493412][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.502789][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.511561][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 103.591088][ T5102] loop0: detected capacity change from 0 to 128
[ 103.606972][ T5102] =======================================================
[ 103.606972][ T5102] WARNING: The mand mount option has been deprecated and
[ 103.606972][ T5102] and is ignored by this kernel. Remove the mand
[ 103.606972][ T5102] option from the mount to silence this warning.
[ 103.606972][ T5102] =======================================================
[ 103.667315][ T5102] attempt to access beyond end of device
[ 103.667315][ T5102] loop0: rw=0, want=6491538, limit=128
[ 103.682827][ T5102] Buffer I/O error on dev loop0, logical block 3245768, async page read
[ 103.691843][ T5102] ==================================================================
[ 103.700187][ T5102] BUG: KASAN: use-after-free in sysv_new_inode+0x1105/0x1290
[ 103.707700][ T5102] Read of size 2 at addr ffff88805bc061ce by task syz.0.17/5102
[ 103.715458][ T5102]
[ 103.717978][ T5102] CPU: 0 PID: 5102 Comm: syz.0.17 Not tainted syzkaller #0
[ 103.725255][ T5102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 103.735527][ T5102] Call Trace:
[ 103.738845][ T5102]
[ 103.742016][ T5102] dump_stack_lvl+0x188/0x250
[ 103.746839][ T5102] ? show_regs_print_info+0x20/0x20
[ 103.752066][ T5102] ? load_image+0x410/0x410
[ 103.756843][ T5102] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 103.762422][ T5102] ? mutex_lock_io_nested+0x60/0x60
[ 103.767847][ T5102] print_address_description+0x60/0x2d0
[ 103.773442][ T5102] ? sysv_new_inode+0x1105/0x1290
[ 103.778516][ T5102] kasan_report+0xdf/0x130
[ 103.782974][ T5102] ? sysv_new_inode+0x1105/0x1290
[ 103.788026][ T5102] sysv_new_inode+0x1105/0x1290
[ 103.792917][ T5102] ? __rwlock_init+0x140/0x140
[ 103.797705][ T5102] ? sysv_find_entry+0x554/0x5e0
[ 103.802680][ T5102] ? sysv_free_inode+0x7e0/0x7e0
[ 103.807808][ T5102] ? __d_add+0x4cc/0x800
[ 103.812093][ T5102] sysv_mknod+0x4a/0xd0
[ 103.816275][ T5102] ? sysv_lookup+0xe0/0xe0
[ 103.820725][ T5102] path_openat+0x120a/0x2fb0
[ 103.825400][ T5102] ? do_filp_open+0x400/0x400
[ 103.830125][ T5102] do_filp_open+0x1df/0x400
[ 103.834675][ T5102] ? vfs_tmpfile+0x300/0x300
[ 103.839503][ T5102] ? _raw_spin_unlock+0x24/0x40
[ 103.844375][ T5102] ? alloc_fd+0x59e/0x650
[ 103.848743][ T5102] do_sys_openat2+0x14b/0x500
[ 103.853443][ T5102] ? __lock_acquire+0x7b50/0x7b50
[ 103.858495][ T5102] ? do_sys_open+0xe0/0xe0
[ 103.863109][ T5102] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 103.869124][ T5102] ? lock_chain_count+0x20/0x20
[ 103.874005][ T5102] __x64_sys_openat+0x135/0x160
[ 103.878969][ T5102] do_syscall_64+0x4c/0xa0
[ 103.883402][ T5102] ? clear_bhb_loop+0x30/0x80
[ 103.888116][ T5102] ? clear_bhb_loop+0x30/0x80
[ 103.892815][ T5102] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 103.898739][ T5102] RIP: 0033:0x7f5889569ef9
[ 103.903186][ T5102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 103.922910][ T5102] RSP: 002b:00007f5888bcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 103.931349][ T5102] RAX: ffffffffffffffda RBX: 00007f58897d4fa0 RCX: 00007f5889569ef9
[ 103.939345][ T5102] RDX: 0000000000183341 RSI: 0000200000000080 RDI: ffffffffffffff9c
[ 103.947338][ T5102] RBP: 00007f58895feee0 R08: 0000000000000000 R09: 0000000000000000
[ 103.955330][ T5102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 103.963408][ T5102] R13: 00007f58897d5038 R14: 00007f58897d4fa0 R15: 00007ffd727cae58
[ 103.971426][ T5102]
[ 103.974650][ T5102]
[ 103.976989][ T5102] The buggy address belongs to the page:
[ 103.982627][ T5102] page:ffffea00016f0180 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x5bc06
[ 103.992898][ T5102] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 104.000133][ T5102] raw: 00fff00000000000 ffffea00016f0288 ffffea00016f02c8 0000000000000000
[ 104.008743][ T5102] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 104.017604][ T5102] page dumped because: kasan: bad access detected
[ 104.024206][ T5102] page_owner tracks the page as freed
[ 104.029587][ T5102] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 4824, ts 97976333241, free_ts 98338829254
[ 104.045320][ T5102] get_page_from_freelist+0x24f6/0x2670
[ 104.050895][ T5102] __alloc_pages+0x1ee/0x480
[ 104.055588][ T5102] alloc_pages_vma+0x2bc/0x790
[ 104.060369][ T5102] handle_mm_fault+0x23be/0x4440
[ 104.065319][ T5102] do_user_addr_fault+0x494/0xc90
[ 104.070366][ T5102] exc_page_fault+0x60/0x100
[ 104.074971][ T5102] asm_exc_page_fault+0x22/0x30
[ 104.079843][ T5102] page last free stack trace:
[ 104.084532][ T5102] free_unref_page_prepare+0x637/0x6c0
[ 104.090010][ T5102] free_unref_page_list+0x119/0x830
[ 104.095226][ T5102] release_pages+0x185f/0x1bd0
[ 104.100008][ T5102] tlb_finish_mmu+0x1b4/0x370
[ 104.104713][ T5102] exit_mmap+0x3d0/0x640
[ 104.108974][ T5102] __mmput+0x115/0x390
[ 104.113060][ T5102] exit_mm+0x632/0x7b0
[ 104.117139][ T5102] do_exit+0x5b8/0x2110
[ 104.121306][ T5102] do_group_exit+0x12c/0x2f0
[ 104.125907][ T5102] __x64_sys_exit_group+0x3b/0x40
[ 104.130951][ T5102] do_syscall_64+0x4c/0xa0
[ 104.135409][ T5102] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 104.141511][ T5102]
[ 104.143942][ T5102] Memory state around the buggy address:
[ 104.150573][ T5102] ffff88805bc06080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 104.158831][ T5102] ffff88805bc06100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 104.166923][ T5102] >ffff88805bc06180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 104.175172][ T5102] ^
[ 104.181784][ T5102] ffff88805bc06200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 104.189953][ T5102] ffff88805bc06280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 104.198148][ T5102] ==================================================================
[ 104.206224][ T5102] Disabling lock debugging due to kernel taint
[ 104.222601][ T5102] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 104.229835][ T5102] CPU: 0 PID: 5102 Comm: syz.0.17 Tainted: G B syzkaller #0
[ 104.238643][ T5102] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 104.248723][ T5102] Call Trace:
[ 104.252008][ T5102]
[ 104.254936][ T5102] dump_stack_lvl+0x188/0x250
[ 104.259709][ T5102] ? show_regs_print_info+0x20/0x20
[ 104.264926][ T5102] ? load_image+0x410/0x410
[ 104.269431][ T5102] panic+0x2f8/0x850
[ 104.273331][ T5102] ? bpf_jit_dump+0xd0/0xd0
[ 104.277928][ T5102] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 104.283955][ T5102] ? _raw_spin_unlock+0x40/0x40
[ 104.288826][ T5102] ? sysv_new_inode+0x1105/0x1290
[ 104.293886][ T5102] check_panic_on_warn+0x80/0xa0
[ 104.298919][ T5102] ? sysv_new_inode+0x1105/0x1290
[ 104.304056][ T5102] end_report+0x6d/0xf0
[ 104.308220][ T5102] kasan_report+0x102/0x130
[ 104.312745][ T5102] ? sysv_new_inode+0x1105/0x1290
[ 104.317769][ T5102] sysv_new_inode+0x1105/0x1290
[ 104.322622][ T5102] ? __rwlock_init+0x140/0x140
[ 104.327399][ T5102] ? sysv_find_entry+0x554/0x5e0
[ 104.332422][ T5102] ? sysv_free_inode+0x7e0/0x7e0
[ 104.337356][ T5102] ? __d_add+0x4cc/0x800
[ 104.341599][ T5102] sysv_mknod+0x4a/0xd0
[ 104.345762][ T5102] ? sysv_lookup+0xe0/0xe0
[ 104.350265][ T5102] path_openat+0x120a/0x2fb0
[ 104.355066][ T5102] ? do_filp_open+0x400/0x400
[ 104.359762][ T5102] do_filp_open+0x1df/0x400
[ 104.364279][ T5102] ? vfs_tmpfile+0x300/0x300
[ 104.368894][ T5102] ? _raw_spin_unlock+0x24/0x40
[ 104.373748][ T5102] ? alloc_fd+0x59e/0x650
[ 104.378075][ T5102] do_sys_openat2+0x14b/0x500
[ 104.382755][ T5102] ? __lock_acquire+0x7b50/0x7b50
[ 104.387864][ T5102] ? do_sys_open+0xe0/0xe0
[ 104.392274][ T5102] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 104.398254][ T5102] ? lock_chain_count+0x20/0x20
[ 104.403102][ T5102] __x64_sys_openat+0x135/0x160
[ 104.407945][ T5102] do_syscall_64+0x4c/0xa0
[ 104.412376][ T5102] ? clear_bhb_loop+0x30/0x80
[ 104.417055][ T5102] ? clear_bhb_loop+0x30/0x80
[ 104.421735][ T5102] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 104.427623][ T5102] RIP: 0033:0x7f5889569ef9
[ 104.432056][ T5102] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 104.452023][ T5102] RSP: 002b:00007f5888bcd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 104.460543][ T5102] RAX: ffffffffffffffda RBX: 00007f58897d4fa0 RCX: 00007f5889569ef9
[ 104.468517][ T5102] RDX: 0000000000183341 RSI: 0000200000000080 RDI: ffffffffffffff9c
[ 104.477722][ T5102] RBP: 00007f58895feee0 R08: 0000000000000000 R09: 0000000000000000
[ 104.485698][ T5102] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 104.493864][ T5102] R13: 00007f58897d5038 R14: 00007f58897d4fa0 R15: 00007ffd727cae58
[ 104.502186][ T5102]
[ 104.505649][ T5102] Kernel Offset: disabled
[ 104.510053][ T5102] Rebooting in 86400 seconds..