Warning: Permanently added '10.128.0.186' (ED25519) to the list of known hosts.
2026/10/21 09:57:22 parsed 1 programs
2026/10/21 09:57:22 serving rpc on tcp://40137
Setting up swapspace version 1, size = 127995904 bytes
[ 114.062292][ T5939] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 118.283658][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state
[ 118.283784][ T6041] bridge0: port 1(bridge_slave_0) entered disabled state
[ 118.283876][ T6041] bridge_slave_0: entered allmulticast mode
[ 118.285856][ T6041] bridge_slave_0: entered promiscuous mode
[ 118.288592][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state
[ 118.288688][ T6041] bridge0: port 2(bridge_slave_1) entered disabled state
[ 118.288841][ T6041] bridge_slave_1: entered allmulticast mode
[ 118.290440][ T6041] bridge_slave_1: entered promiscuous mode
[ 118.349836][ T6041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 118.351910][ T6041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 118.375831][ T6041] team0: Port device team_slave_0 added
[ 118.377533][ T6041] team0: Port device team_slave_1 added
[ 118.398469][ T6041] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 118.398486][ T6041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 118.398508][ T6041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 118.399640][ T6041] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 118.399653][ T6041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 118.399676][ T6041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 118.441723][ T6041] hsr_slave_0: entered promiscuous mode
[ 118.442843][ T6041] hsr_slave_1: entered promiscuous mode
[ 118.897390][ T6041] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 118.903312][ T6041] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 118.904189][ T6041] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 118.930005][ T6041] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 118.931627][ T6041] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 118.949833][ T6041] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 118.950729][ T6041] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 118.973441][ T6041] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 119.012065][ T6041] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.012192][ T6041] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 119.012449][ T6041] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.012570][ T6041] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 119.087297][ T6041] 8021q: adding VLAN 0 to HW filter on device bond0
[ 119.101395][ T203] bridge0: port 1(bridge_slave_0) entered disabled state
[ 119.102070][ T203] bridge0: port 2(bridge_slave_1) entered disabled state
[ 119.126825][ T6041] 8021q: adding VLAN 0 to HW filter on device team0
[ 119.133590][ T203] bridge0: port 1(bridge_slave_0) entered blocking state
[ 119.133695][ T203] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 119.140394][ T3292] bridge0: port 2(bridge_slave_1) entered blocking state
[ 119.140496][ T3292] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 119.624305][ T6041] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 119.695402][ T6041] veth0_vlan: entered promiscuous mode
[ 119.703404][ T6041] veth1_vlan: entered promiscuous mode
[ 119.739921][ T6041] veth0_macvtap: entered promiscuous mode
[ 119.746901][ T6041] veth1_macvtap: entered promiscuous mode
[ 119.762550][ T6041] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 119.773974][ T6041] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 119.844535][ T35] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.844587][ T35] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.844613][ T35] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.844640][ T35] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 120.008513][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 120.089915][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 120.181888][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 120.303461][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 121.169473][ T4934] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 121.171376][ T4934] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 121.171959][ T4934] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 121.173349][ T4934] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 121.173975][ T4934] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 122.383914][ T35] bridge_slave_1: left allmulticast mode
[ 122.383941][ T35] bridge_slave_1: left promiscuous mode
[ 122.384188][ T35] bridge0: port 2(bridge_slave_1) entered disabled state
[ 122.399164][ T35] bridge_slave_0: left allmulticast mode
[ 122.399192][ T35] bridge_slave_0: left promiscuous mode
[ 122.399417][ T35] bridge0: port 1(bridge_slave_0) entered disabled state
[ 122.593500][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 122.608220][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 122.613499][ T35] bond0 (unregistering): Released all slaves
[ 122.651954][ T79] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 122.651990][ T79] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 122.721274][ T35] hsr_slave_0: left promiscuous mode
[ 122.733481][ T35] hsr_slave_1: left promiscuous mode
[ 122.736204][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 122.736226][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 122.740553][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 122.740575][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 122.763525][ T35] veth1_macvtap: left promiscuous mode
[ 122.763564][ T35] veth0_macvtap: left promiscuous mode
[ 122.763660][ T35] veth1_vlan: left promiscuous mode
[ 122.763723][ T35] veth0_vlan: left promiscuous mode
[ 123.076695][ T35] team0 (unregistering): Port device team_slave_1 removed
[ 123.100045][ T35] team0 (unregistering): Port device team_slave_0 removed
[ 123.262648][ T3292] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 123.262672][ T3292] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/10/21 09:57:38 executed programs: 0
[ 124.245196][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 124.249086][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 124.249748][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 124.250633][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 124.251537][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 125.389288][ T6246] bridge0: port 1(bridge_slave_0) entered blocking state
[ 125.389465][ T6246] bridge0: port 1(bridge_slave_0) entered disabled state
[ 125.389587][ T6246] bridge_slave_0: entered allmulticast mode
[ 125.391279][ T6246] bridge_slave_0: entered promiscuous mode
[ 125.423751][ T6246] bridge0: port 2(bridge_slave_1) entered blocking state
[ 125.423912][ T6246] bridge0: port 2(bridge_slave_1) entered disabled state
[ 125.424056][ T6246] bridge_slave_1: entered allmulticast mode
[ 125.446473][ T6246] bridge_slave_1: entered promiscuous mode
[ 125.482765][ T6246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 125.495747][ T6246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 125.533863][ T6246] team0: Port device team_slave_0 added
[ 125.543376][ T6246] team0: Port device team_slave_1 added
[ 125.575563][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 125.575582][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 125.575606][ T6246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 125.578386][ T6246] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 125.578402][ T6246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 125.578426][ T6246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 125.717393][ T6246] hsr_slave_0: entered promiscuous mode
[ 125.718373][ T6246] hsr_slave_1: entered promiscuous mode
[ 126.201895][ T6246] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 126.207343][ T6246] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 126.208474][ T6246] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 126.230148][ T6246] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 126.231309][ T6246] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 126.240712][ T6246] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 126.243785][ T6246] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 126.248220][ T6246] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 126.285318][ T4934] Bluetooth: hci0: command tx timeout
[ 126.443297][ T6246] 8021q: adding VLAN 0 to HW filter on device bond0
[ 126.467983][ T6246] 8021q: adding VLAN 0 to HW filter on device team0
[ 126.478338][ T79] bridge0: port 1(bridge_slave_0) entered blocking state
[ 126.478442][ T79] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 126.498245][ T79] bridge0: port 2(bridge_slave_1) entered blocking state
[ 126.498346][ T79] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 127.031862][ T6246] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 127.086329][ T6246] veth0_vlan: entered promiscuous mode
[ 127.095949][ T6246] veth1_vlan: entered promiscuous mode
[ 127.132552][ T6246] veth0_macvtap: entered promiscuous mode
[ 127.139853][ T6246] veth1_macvtap: entered promiscuous mode
[ 127.159362][ T6246] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 127.171383][ T6246] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 127.236367][ T203] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.236908][ T203] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.237205][ T203] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.237239][ T203] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 127.280861][ T203] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.280884][ T203] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.327818][ T203] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 127.327841][ T203] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 127.615085][ T5675] usb 1-1: new high-speed USB device number 2 using dummy_hcd
[ 127.765781][ T5675] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08
[ 127.769802][ T5675] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3
[ 127.769828][ T5675] usb 1-1: Product: syz
[ 127.769841][ T5675] usb 1-1: Manufacturer: syz
[ 127.769853][ T5675] usb 1-1: SerialNumber: syz
[ 127.878160][ T5675] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008
[ 128.364547][ T4934] Bluetooth: hci0: command tx timeout
[ 128.484105][ T9] usb 1-1: USB disconnect, device number 2
[ 129.095872][ T5675] usb 1-1: Service connection timeout for: 256
[ 129.095890][ T5675] ath9k_htc 1-1:1.0: ath9k_htc: Unable to initialize HTC services
[ 129.096710][ T5675] ath9k_htc: Failed to initialize the device
[ 129.097103][ T9] usb 1-1: ath9k_htc: USB layer deinitialized
[ 129.097449][ C1] ==================================================================
[ 129.097460][ C1] BUG: KASAN: slab-use-after-free in tasklet_action_common+0x103/0x490
[ 129.097497][ C1] Read of size 8 at addr ffff888032f6b158 by task ksoftirqd/1/23
[ 129.097511][ C1]
[ 129.097531][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full)
[ 129.097553][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 129.097571][ C1] Call Trace:
[ 129.097578][ C1]
[ 129.097590][ C1] dump_stack_lvl+0xe8/0x150
[ 129.097615][ C1] print_address_description+0x55/0x1e0
[ 129.097635][ C1] ? tasklet_action_common+0x103/0x490
[ 129.097654][ C1] print_report+0x58/0x70
[ 129.097675][ C1] kasan_report+0x117/0x150
[ 129.097699][ C1] ? tasklet_action_common+0x103/0x490
[ 129.097719][ C1] tasklet_action_common+0x103/0x490
[ 129.097745][ C1] handle_softirqs+0x226/0x860
[ 129.097761][ C1] ? __irq_exit_rcu+0xcb/0x220
[ 129.097783][ C1] __irq_exit_rcu+0xcb/0x220
[ 129.097803][ C1] irq_exit_rcu+0x9/0x30
[ 129.097820][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 129.097846][ C1]
[ 129.097850][ C1]
[ 129.097855][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 129.097871][ C1] RIP: 0010:finish_task_switch+0x413/0xc60
[ 129.097887][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 d7 61 56 0a e8 52 42 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[ 129.097907][ C1] RSP: 0018:ffffc900001d7aa0 EFLAGS: 00000206
[ 129.097926][ C1] RAX: 00000000008dcaf3 RBX: ffff8880b873cbe0 RCX: 8000000000000001
[ 129.097936][ C1] RDX: 0000000000000000 RSI: ffffffff8e41c2b1 RDI: ffffffff8c6dca80
[ 129.097946][ C1] RBP: ffffc900001d7af0 R08: ffffffff907a75bf R09: 1ffffffff20f4eb7
[ 129.097957][ C1] R10: dffffc0000000000 R11: fffffbfff20f4eb8 R12: ffff88801e688000
[ 129.097968][ C1] R13: ffff88801e688000 R14: dffffc0000000000 R15: 1ffff110170e797c
[ 129.097986][ C1] __schedule+0x17e5/0x5820
[ 129.098009][ C1] ? kvm_sched_clock_read+0x11/0x20
[ 129.098022][ C1] ? sched_clock+0x41/0x60
[ 129.098042][ C1] ? __pfx_sched_clock_cpu+0x10/0x10
[ 129.098064][ C1] ? __pfx___schedule+0x10/0x10
[ 129.098088][ C1] ? run_ksoftirqd+0x36/0x60
[ 129.098109][ C1] ? preempt_schedule_thunk+0x16/0x40
[ 129.098126][ C1] preempt_schedule_common+0x7f/0xd0
[ 129.098147][ C1] preempt_schedule_thunk+0x16/0x40
[ 129.098166][ C1] ? smpboot_thread_fn+0x6a7/0xb30
[ 129.098185][ C1] smpboot_thread_fn+0x6ac/0xb30
[ 129.098207][ C1] ? smpboot_thread_fn+0x4e/0xb30
[ 129.098231][ C1] kthread+0x38b/0x480
[ 129.098255][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 129.098276][ C1] ? __pfx_kthread+0x10/0x10
[ 129.098298][ C1] ret_from_fork+0x514/0xb70
[ 129.098315][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 129.098331][ C1] ? __switch_to+0xc78/0x1410
[ 129.098357][ C1] ? __pfx_kthread+0x10/0x10
[ 129.098381][ C1] ret_from_fork_asm+0x1a/0x30
[ 129.098411][ C1]
[ 129.098417][ C1]
[ 129.098421][ C1] Allocated by task 5675:
[ 129.098429][ C1] kasan_save_track+0x3e/0x80
[ 129.098445][ C1] __kasan_kmalloc+0x93/0xb0
[ 129.098460][ C1] __kmalloc_cache_noprof+0x31c/0x600
[ 129.098475][ C1] ath9k_init_wmi+0x4f/0x2b0
[ 129.098499][ C1] ath9k_htc_probe_device+0x1e5/0x2370
[ 129.098519][ C1] ath9k_htc_hw_init+0x32/0x70
[ 129.098537][ C1] ath9k_hif_usb_firmware_cb+0x214/0x4b0
[ 129.098558][ C1] request_firmware_work_func+0xf7/0x2d0
[ 129.098579][ C1] process_scheduled_works+0xc3d/0x1630
[ 129.098608][ C1] worker_thread+0xa47/0xfb0
[ 129.098625][ C1] kthread+0x38b/0x480
[ 129.098644][ C1] ret_from_fork+0x514/0xb70
[ 129.098657][ C1] ret_from_fork_asm+0x1a/0x30
[ 129.098681][ C1]
[ 129.098686][ C1] Freed by task 5675:
[ 129.098695][ C1] kasan_save_track+0x3e/0x80
[ 129.098710][ C1] kasan_save_free_info+0x40/0x50
[ 129.098730][ C1] __kasan_slab_free+0x5c/0x80
[ 129.098747][ C1] kfree+0x1c5/0x650
[ 129.098770][ C1] ath9k_htc_probe_device+0x11a9/0x2370
[ 129.098792][ C1] ath9k_htc_hw_init+0x32/0x70
[ 129.098812][ C1] ath9k_hif_usb_firmware_cb+0x214/0x4b0
[ 129.098836][ C1] request_firmware_work_func+0xf7/0x2d0
[ 129.098856][ C1] process_scheduled_works+0xc3d/0x1630
[ 129.098871][ C1] worker_thread+0xa47/0xfb0
[ 129.098888][ C1] kthread+0x38b/0x480
[ 129.098915][ C1] ret_from_fork+0x514/0xb70
[ 129.098928][ C1] ret_from_fork_asm+0x1a/0x30
[ 129.098951][ C1]
[ 129.098955][ C1] The buggy address belongs to the object at ffff888032f6b000
[ 129.098955][ C1] which belongs to the cache kmalloc-2k of size 2048
[ 129.098970][ C1] The buggy address is located 344 bytes inside of
[ 129.098970][ C1] freed 2048-byte region [ffff888032f6b000, ffff888032f6b800)
[ 129.098989][ C1]
[ 129.098993][ C1] The buggy address belongs to the physical page:
[ 129.099011][ C1] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x32f68
[ 129.099027][ C1] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 129.099042][ C1] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 129.099065][ C1] page_type: f5(slab)
[ 129.099080][ C1] raw: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122
[ 129.099094][ C1] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 129.099109][ C1] head: 00fff00000000040 ffff88801b042000 dead000000000100 dead000000000122
[ 129.099123][ C1] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 129.099136][ C1] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 129.099150][ C1] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008
[ 129.099159][ C1] page dumped because: kasan: bad access detected
[ 129.099172][ C1] page_owner tracks the page as allocated
[ 129.099179][ C1] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 203, tgid 203 (kworker/u8:6), ts 127967665812
[ 129.099208][ C1] post_alloc_hook+0x1f9/0x250
[ 129.099233][ C1] get_page_from_freelist+0x2209/0x2280
[ 129.099251][ C1] __alloc_frozen_pages_noprof+0x217/0x5a0
[ 129.099266][ C1] allocate_slab+0x7d/0x620
[ 129.099285][ C1] refill_objects+0x2d5/0x350
[ 129.099304][ C1] __pcs_replace_empty_main+0x2c8/0x6c0
[ 129.099324][ C1] __kmalloc_node_track_caller_noprof+0x543/0x720
[ 129.099348][ C1] __alloc_skb+0x2c1/0x7a0
[ 129.099362][ C1] mld_newpack+0x165/0xcb0
[ 129.099378][ C1] add_grec+0x119f/0x19d0
[ 129.099392][ C1] mld_send_initial_cr+0x288/0x550
[ 129.099415][ C1] ipv6_mc_dad_complete+0x87/0x410
[ 129.099439][ C1] addrconf_dad_completed+0x8af/0xe60
[ 129.099461][ C1] addrconf_dad_work+0xcf8/0x15c0
[ 129.099481][ C1] process_scheduled_works+0xc3d/0x1630
[ 129.099498][ C1] worker_thread+0xa47/0xfb0
[ 129.099516][ C1] page last free pid 6268 tgid 6268 ts 124939507899 stack trace:
[ 129.099529][ C1] __free_frozen_pages+0xc93/0xd90
[ 129.099551][ C1] __slab_free+0x274/0x2c0
[ 129.099564][ C1] qlist_free_all+0x99/0x100
[ 129.099578][ C1] kasan_quarantine_reduce+0x148/0x160
[ 129.099592][ C1] __kasan_slab_alloc+0x22/0x80
[ 129.099611][ C1] kmem_cache_alloc_noprof+0x2b4/0x600
[ 129.099636][ C1] __anon_vma_prepare+0xbe/0x4d0
[ 129.099659][ C1] do_pte_missing+0x2f18/0x34b0
[ 129.099683][ C1] handle_mm_fault+0x1a53/0x3750
[ 129.099704][ C1] do_user_addr_fault+0xb35/0x1480
[ 129.099721][ C1] exc_page_fault+0x6a/0xc0
[ 129.099737][ C1] asm_exc_page_fault+0x26/0x30
[ 129.099752][ C1]
[ 129.099756][ C1] Memory state around the buggy address:
[ 129.099764][ C1] ffff888032f6b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 129.099775][ C1] ffff888032f6b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 129.099786][ C1] >ffff888032f6b100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 129.099795][ C1] ^
[ 129.099805][ C1] ffff888032f6b180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 129.099816][ C1] ffff888032f6b200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 129.099825][ C1] ==================================================================
[ 129.099838][ C1] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 129.954581][ C1] CPU: 1 UID: 0 PID: 23 Comm: ksoftirqd/1 Not tainted syzkaller #0 PREEMPT(full)
[ 129.964394][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/07/2026
[ 129.974999][ C1] Call Trace:
[ 129.978989][ C1]
[ 129.982155][ C1] vpanic+0x56d/0xa60
[ 129.986428][ C1] ? __pfx_vpanic+0x10/0x10
[ 129.991056][ C1] panic+0xc5/0xd0
[ 129.994792][ C1] ? __pfx_panic+0x10/0x10
[ 129.999945][ C1] ? tasklet_action_common+0x103/0x490
[ 130.005899][ C1] ? rcu_is_watching+0x16/0xb0
[ 130.010961][ C1] ? tasklet_action_common+0x103/0x490
[ 130.016627][ C1] ? tasklet_action_common+0x103/0x490
[ 130.022300][ C1] check_panic_on_warn+0x89/0xb0
[ 130.028074][ C1] ? tasklet_action_common+0x103/0x490
[ 130.033646][ C1] end_report+0x73/0x170
[ 130.038367][ C1] ? tasklet_action_common+0x103/0x490
[ 130.044381][ C1] kasan_report+0x128/0x150
[ 130.049573][ C1] ? tasklet_action_common+0x103/0x490
[ 130.055502][ C1] tasklet_action_common+0x103/0x490
[ 130.061266][ C1] handle_softirqs+0x226/0x860
[ 130.066230][ C1] ? __irq_exit_rcu+0xcb/0x220
[ 130.071009][ C1] __irq_exit_rcu+0xcb/0x220
[ 130.075786][ C1] irq_exit_rcu+0x9/0x30
[ 130.080214][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0
[ 130.086334][ C1]
[ 130.089448][ C1]
[ 130.092395][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 130.099273][ C1] RIP: 0010:finish_task_switch+0x413/0xc60
[ 130.105363][ C1] Code: 04 00 00 41 c7 84 24 20 0e 00 00 00 00 00 00 0f 1f 44 00 00 49 83 c4 48 4c 89 e7 e8 d7 61 56 0a e8 52 42 3a 00 fb 4c 8b 65 c8 <49> 8d bc 24 18 17 00 00 48 89 f8 48 c1 e8 03 42 0f b6 04 30 84 c0
[ 130.126328][ C1] RSP: 0018:ffffc900001d7aa0 EFLAGS: 00000206
[ 130.132537][ C1] RAX: 00000000008dcaf3 RBX: ffff8880b873cbe0 RCX: 8000000000000001
[ 130.140946][ C1] RDX: 0000000000000000 RSI: ffffffff8e41c2b1 RDI: ffffffff8c6dca80
[ 130.149117][ C1] RBP: ffffc900001d7af0 R08: ffffffff907a75bf R09: 1ffffffff20f4eb7
[ 130.157316][ C1] R10: dffffc0000000000 R11: fffffbfff20f4eb8 R12: ffff88801e688000
[ 130.165723][ C1] R13: ffff88801e688000 R14: dffffc0000000000 R15: 1ffff110170e797c
[ 130.173993][ C1] __schedule+0x17e5/0x5820
[ 130.178545][ C1] ? kvm_sched_clock_read+0x11/0x20
[ 130.183941][ C1] ? sched_clock+0x41/0x60
[ 130.188478][ C1] ? __pfx_sched_clock_cpu+0x10/0x10
[ 130.194135][ C1] ? __pfx___schedule+0x10/0x10
[ 130.199191][ C1] ? run_ksoftirqd+0x36/0x60
[ 130.203920][ C1] ? preempt_schedule_thunk+0x16/0x40
[ 130.209409][ C1] preempt_schedule_common+0x7f/0xd0
[ 130.214825][ C1] preempt_schedule_thunk+0x16/0x40
[ 130.220223][ C1] ? smpboot_thread_fn+0x6a7/0xb30
[ 130.225439][ C1] smpboot_thread_fn+0x6ac/0xb30
[ 130.230536][ C1] ? smpboot_thread_fn+0x4e/0xb30
[ 130.235712][ C1] kthread+0x38b/0x480
[ 130.239974][ C1] ? __pfx_smpboot_thread_fn+0x10/0x10
[ 130.245449][ C1] ? __pfx_kthread+0x10/0x10
[ 130.250247][ C1] ret_from_fork+0x514/0xb70
[ 130.254854][ C1] ? __pfx_ret_from_fork+0x10/0x10
[ 130.260065][ C1] ? __switch_to+0xc78/0x1410
[ 130.264754][ C1] ? __pfx_kthread+0x10/0x10
[ 130.269443][ C1] ret_from_fork_asm+0x1a/0x30
[ 130.274222][ C1]
[ 130.277599][ C1] Kernel Offset: disabled
[ 130.281926][ C1] Rebooting in 86400 seconds..