Warning: Permanently added '10.128.0.121' (ED25519) to the list of known hosts.
2026/08/01 21:38:48 parsed 1 programs
2026/08/01 21:38:48 serving rpc on tcp://45379
[ 86.147207][ T5787] cgroup: Unknown subsys name 'net'
[ 86.283625][ T5787] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 88.227986][ T5787] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 91.748549][ T23] cfg80211: failed to load regulatory.db
[ 92.414501][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 92.422509][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 92.432770][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 92.445574][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 92.454929][ T5857] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 92.462315][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 92.781509][ T1308] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.800951][ T1308] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.837959][ T1288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.847368][ T1288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.179132][ T5867] chnl_net:caif_netlink_parms(): no params data found
[ 93.255525][ T5867] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.263366][ T5867] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.270756][ T5867] bridge_slave_0: entered allmulticast mode
[ 93.277986][ T5867] bridge_slave_0: entered promiscuous mode
[ 93.288093][ T5867] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.295395][ T5867] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.302580][ T5867] bridge_slave_1: entered allmulticast mode
[ 93.310424][ T5867] bridge_slave_1: entered promiscuous mode
[ 93.357713][ T5867] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 93.369512][ T5867] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 93.423518][ T5867] team0: Port device team_slave_0 added
[ 93.431985][ T5867] team0: Port device team_slave_1 added
[ 93.458806][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 93.466082][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 93.492203][ T5867] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 93.523408][ T5867] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 93.530481][ T5867] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 93.557098][ T5867] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 93.603593][ T5867] hsr_slave_0: entered promiscuous mode
[ 93.610122][ T5867] hsr_slave_1: entered promiscuous mode
[ 93.821501][ T5867] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 93.834164][ T5867] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 93.876582][ T5867] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 93.886935][ T5867] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 94.010485][ T5867] 8021q: adding VLAN 0 to HW filter on device bond0
[ 94.036173][ T5867] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.077946][ T1308] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.085345][ T1308] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.102077][ T49] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.109288][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.448406][ T5867] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 94.497923][ T5867] veth0_vlan: entered promiscuous mode
[ 94.517760][ T5867] veth1_vlan: entered promiscuous mode
[ 94.551077][ T5867] veth0_macvtap: entered promiscuous mode
[ 94.561463][ T5867] veth1_macvtap: entered promiscuous mode
[ 94.580881][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 94.594927][ T5867] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 94.610960][ T5867] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.620220][ T5867] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.629322][ T5867] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.640531][ T5867] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.798017][ T1006] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/08/01 21:39:00 executed programs: 0
[ 95.621745][ T5857] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 95.630088][ T5857] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 95.638600][ T5857] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 95.647941][ T5857] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 95.656923][ T5857] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 95.670903][ T5857] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 95.826783][ T5890] chnl_net:caif_netlink_parms(): no params data found
[ 95.906478][ T5890] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.913681][ T5890] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.921636][ T5890] bridge_slave_0: entered allmulticast mode
[ 95.929355][ T5890] bridge_slave_0: entered promiscuous mode
[ 95.938187][ T5890] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.945500][ T5890] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.952693][ T5890] bridge_slave_1: entered allmulticast mode
[ 95.960685][ T5890] bridge_slave_1: entered promiscuous mode
[ 95.996607][ T5890] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.008586][ T5890] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.045308][ T5890] team0: Port device team_slave_0 added
[ 96.053700][ T5890] team0: Port device team_slave_1 added
[ 96.083336][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.090656][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.116604][ T5890] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 96.129757][ T5890] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 96.136833][ T5890] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.163046][ T5890] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 96.212444][ T5890] hsr_slave_0: entered promiscuous mode
[ 96.218950][ T5890] hsr_slave_1: entered promiscuous mode
[ 96.226271][ T5890] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 96.234207][ T5890] Cannot create hsr debugfs directory
[ 97.307600][ T1006] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 97.755035][ T5857] Bluetooth: hci0: command tx timeout
[ 99.607482][ T1006] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.671396][ T1006] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.825822][ T5857] Bluetooth: hci0: command tx timeout
[ 100.560615][ T5890] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 100.571823][ T5890] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 100.606245][ T5890] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 100.618455][ T5890] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 100.726159][ T1006] hsr_slave_0: left promiscuous mode
[ 100.732816][ T1006] hsr_slave_1: left promiscuous mode
[ 100.740329][ T1006] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 100.748281][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 100.760241][ T1006] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 100.768058][ T1006] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 100.777569][ T1006] bridge_slave_1: left allmulticast mode
[ 100.783278][ T1006] bridge_slave_1: left promiscuous mode
[ 100.790979][ T1006] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.804182][ T1006] bridge_slave_0: left allmulticast mode
[ 100.811266][ T1006] bridge_slave_0: left promiscuous mode
[ 100.817696][ T1006] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.848525][ T1006] veth1_macvtap: left promiscuous mode
[ 100.856456][ T1006] veth0_macvtap: left promiscuous mode
[ 100.862219][ T1006] veth1_vlan: left promiscuous mode
[ 100.869060][ T1006] veth0_vlan: left promiscuous mode
[ 101.332930][ T1006] team0 (unregistering): Port device team_slave_1 removed
[ 101.369830][ T1006] team0 (unregistering): Port device team_slave_0 removed
[ 101.403363][ T1006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 101.439108][ T1006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 101.668387][ T1006] bond0 (unregistering): Released all slaves
[ 101.772112][ T5890] 8021q: adding VLAN 0 to HW filter on device bond0
[ 101.793385][ T5890] 8021q: adding VLAN 0 to HW filter on device team0
[ 101.807631][ T1288] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.814840][ T1288] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 101.849005][ T1288] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.856252][ T1288] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 101.904839][ T5857] Bluetooth: hci0: command tx timeout
[ 102.100606][ T5890] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 102.151666][ T5890] veth0_vlan: entered promiscuous mode
[ 102.163506][ T5890] veth1_vlan: entered promiscuous mode
[ 102.199486][ T5890] veth0_macvtap: entered promiscuous mode
[ 102.210644][ T5890] veth1_macvtap: entered promiscuous mode
[ 102.239090][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 102.254203][ T5890] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.276570][ T5890] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.285488][ T5890] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.295168][ T5890] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.303897][ T5890] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.382097][ T1288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.400976][ T1288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/08/01 21:39:07 executed programs: 2
[ 102.436970][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.446623][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.514034][ T5932] gadgetfs: bound to dummy_udc driver
[ 102.785996][ T173] gadgetfs: suspended from state 2
[ 102.810125][ T8] usb 1-1: new full-speed USB device number 2 using dummy_hcd
[ 102.819705][ T5890] ==================================================================
[ 102.827813][ T5890] BUG: KASAN: slab-use-after-free in __mutex_lock+0xfc/0xc80
[ 102.835234][ T5890] Read of size 8 at addr ffff888023afa460 by task syz-executor/5890
[ 102.843242][ T5890]
[ 102.845600][ T5890] CPU: 0 PID: 5890 Comm: syz-executor Not tainted syzkaller #0
[ 102.853170][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 102.863260][ T5890] Call Trace:
[ 102.866567][ T5890]
[ 102.869520][ T5890] dump_stack_lvl+0x18c/0x250
[ 102.874225][ T5890] ? __lock_acquire+0x7d80/0x7d80
[ 102.879287][ T5890] ? show_regs_print_info+0x20/0x20
[ 102.884518][ T5890] ? load_image+0x420/0x420
[ 102.889056][ T5890] ? __virt_addr_valid+0x10c/0x380
[ 102.894215][ T5890] ? __virt_addr_valid+0x10c/0x380
[ 102.899356][ T5890] ? __virt_addr_valid+0x10c/0x380
[ 102.904494][ T5890] print_report+0xa8/0x210
[ 102.908928][ T5890] ? __mutex_lock+0xfc/0xc80
[ 102.913551][ T5890] kasan_report+0x117/0x150
[ 102.918079][ T5890] ? tomoyo_check_open_permission+0x384/0x460
[ 102.924175][ T5890] ? __mutex_lock+0xfc/0xc80
[ 102.928801][ T5890] __mutex_lock+0xfc/0xc80
[ 102.933263][ T5890] ? end_current_label_crit_section+0x170/0x170
[ 102.939529][ T5890] ? ep_open+0x4e/0x270
[ 102.943703][ T5890] ? mutex_lock_nested+0x20/0x20
[ 102.948676][ T5890] ? apparmor_file_open+0x5ab/0x760
[ 102.953913][ T5890] ? apparmor_inode_getattr+0x2c0/0x2c0
[ 102.959501][ T5890] ? __rwlock_init+0x150/0x150
[ 102.964311][ T5890] ep_open+0x4e/0x270
[ 102.968325][ T5890] ? do_dentry_open+0x86f/0x14b0
[ 102.973298][ T5890] do_dentry_open+0x880/0x14b0
[ 102.978093][ T5890] ? ep_ioctl+0x1c0/0x1c0
[ 102.982465][ T5890] path_openat+0x284f/0x3270
[ 102.987095][ T5890] ? do_sys_openat2+0xda/0x1d0
[ 102.991887][ T5890] ? __x64_sys_openat+0x139/0x160
[ 102.996939][ T5890] ? verify_lock_unused+0x140/0x140
[ 103.002159][ T5890] ? do_filp_open+0x430/0x430
[ 103.006863][ T5890] do_filp_open+0x1f2/0x430
[ 103.011389][ T5890] ? vfs_tmpfile+0x620/0x620
[ 103.016028][ T5890] ? _raw_spin_unlock+0x28/0x40
[ 103.020930][ T5890] ? alloc_fd+0x590/0x640
[ 103.025313][ T5890] do_sys_openat2+0x134/0x1d0
[ 103.030018][ T5890] ? do_sys_open+0xe0/0xe0
[ 103.034494][ T5890] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 103.040515][ T5890] ? fsnotify_link_count+0xf0/0xf0
[ 103.045653][ T5890] ? lock_chain_count+0x20/0x20
[ 103.050529][ T5890] __x64_sys_openat+0x139/0x160
[ 103.055403][ T5890] do_syscall_64+0x55/0xb0
[ 103.059840][ T5890] ? clear_bhb_loop+0x40/0x90
[ 103.064537][ T5890] ? clear_bhb_loop+0x40/0x90
[ 103.069234][ T5890] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 103.075155][ T5890] RIP: 0033:0x7f6938f5e84e
[ 103.079604][ T5890] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 103.099269][ T5890] RSP: 002b:00007ffdddeeb688 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 103.107726][ T5890] RAX: ffffffffffffffda RBX: 000055557e0e0500 RCX: 00007f6938f5e84e
[ 103.115719][ T5890] RDX: 0000000000000000 RSI: 00007ffdddeeb7f0 RDI: ffffffffffffff9c
[ 103.123734][ T5890] RBP: 00007ffdddeeb7f0 R08: 0000000000000000 R09: 0000000000000000
[ 103.131769][ T5890] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdddeec8e0
[ 103.139763][ T5890] R13: 00007f693903445c R14: 000055557e0e04e8 R15: 0000000000000006
[ 103.147773][ T5890]
[ 103.150821][ T5890]
[ 103.153160][ T5890] Allocated by task 5932:
[ 103.157505][ T5890] kasan_set_track+0x4e/0x70
[ 103.162129][ T5890] __kasan_kmalloc+0x8f/0xa0
[ 103.166745][ T5890] gadgetfs_bind+0x25f/0x830
[ 103.171370][ T5890] gadget_bind_driver+0x2b3/0x770
[ 103.176435][ T5890] really_probe+0x247/0xae0
[ 103.180975][ T5890] __driver_probe_device+0x1f5/0x390
[ 103.186293][ T5890] driver_probe_device+0x4f/0x420
[ 103.191340][ T5890] __driver_attach+0x444/0x6d0
[ 103.196137][ T5890] bus_for_each_dev+0x235/0x2b0
[ 103.201025][ T5890] bus_add_driver+0x340/0x630
[ 103.205736][ T5890] driver_register+0x23a/0x310
[ 103.210522][ T5890] usb_gadget_register_driver_owner+0xf9/0x270
[ 103.216698][ T5890] dev_config+0xe49/0x1260
[ 103.221140][ T5890] vfs_write+0x299/0x9a0
[ 103.225414][ T5890] ksys_write+0x151/0x260
[ 103.229810][ T5890] do_syscall_64+0x55/0xb0
[ 103.234266][ T5890] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 103.240202][ T5890]
[ 103.242542][ T5890] Freed by task 173:
[ 103.246451][ T5890] kasan_set_track+0x4e/0x70
[ 103.251063][ T5890] kasan_save_free_info+0x28/0x40
[ 103.256114][ T5890] ____kasan_slab_free+0x126/0x1f0
[ 103.261258][ T5890] slab_free_freelist_hook+0x130/0x1a0
[ 103.266745][ T5890] __kmem_cache_free+0xba/0x1f0
[ 103.271679][ T5890] destroy_ep_files+0x280/0x340
[ 103.276569][ T5890] gadgetfs_unbind+0x109/0x2b0
[ 103.281381][ T5890] gadget_unbind_driver+0x1bf/0x3e0
[ 103.286619][ T5890] device_release_driver_internal+0x408/0x6f0
[ 103.292775][ T5890] driver_detach+0x1f3/0x2d0
[ 103.297400][ T5890] bus_remove_driver+0x221/0x2f0
[ 103.302405][ T5890] usb_gadget_unregister_driver+0x4e/0x70
[ 103.308185][ T5890] dev_release+0x86/0x200
[ 103.312543][ T5890] __fput+0x221/0x940
[ 103.316544][ T5890] delayed_fput+0x58/0x80
[ 103.320899][ T5890] process_scheduled_works+0xa60/0x1600
[ 103.326475][ T5890] worker_thread+0xa5e/0xfe0
[ 103.331094][ T5890] kthread+0x2fa/0x390
[ 103.335192][ T5890] ret_from_fork+0x48/0x80
[ 103.339646][ T5890] ret_from_fork_asm+0x11/0x20
[ 103.344436][ T5890]
[ 103.346779][ T5890] The buggy address belongs to the object at ffff888023afa400
[ 103.346779][ T5890] which belongs to the cache kmalloc-512 of size 512
[ 103.360855][ T5890] The buggy address is located 96 bytes inside of
[ 103.360855][ T5890] freed 512-byte region [ffff888023afa400, ffff888023afa600)
[ 103.374593][ T5890]
[ 103.376940][ T5890] The buggy address belongs to the physical page:
[ 103.383384][ T5890] page:ffffea00008ebe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x23af8
[ 103.393576][ T5890] head:ffffea00008ebe00 order:2 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 103.402528][ T5890] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 103.410527][ T5890] page_type: 0xffffffff()
[ 103.414890][ T5890] raw: 00fff00000000840 ffff888017c41c80 dead000000000122 0000000000000000
[ 103.423508][ T5890] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 103.432121][ T5890] page dumped because: kasan: bad access detected
[ 103.438578][ T5890] page_owner tracks the page as allocated
[ 103.444308][ T5890] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5932, tgid 5931 (syz.0.17), ts 102512897312, free_ts 102501796454
[ 103.466909][ T5890] post_alloc_hook+0x1c1/0x200
[ 103.471718][ T5890] get_page_from_freelist+0x2181/0x22a0
[ 103.477284][ T5890] __alloc_pages+0x1f0/0x460
[ 103.481904][ T5890] alloc_slab_page+0x5d/0x180
[ 103.486607][ T5890] new_slab+0x87/0x2d0
[ 103.490691][ T5890] ___slab_alloc+0xc5c/0x12f0
[ 103.495387][ T5890] __kmem_cache_alloc_node+0x11f/0x250
[ 103.500876][ T5890] kmalloc_trace+0x2a/0xe0
[ 103.505319][ T5890] gadgetfs_bind+0x25f/0x830
[ 103.509955][ T5890] gadget_bind_driver+0x2b3/0x770
[ 103.515023][ T5890] really_probe+0x247/0xae0
[ 103.519565][ T5890] __driver_probe_device+0x1f5/0x390
[ 103.524909][ T5890] driver_probe_device+0x4f/0x420
[ 103.529994][ T5890] __driver_attach+0x444/0x6d0
[ 103.534791][ T5890] bus_for_each_dev+0x235/0x2b0
[ 103.539671][ T5890] bus_add_driver+0x340/0x630
[ 103.544376][ T5890] page last free stack trace:
[ 103.549061][ T5890] free_unref_page_prepare+0x7d7/0x8f0
[ 103.554567][ T5890] free_unref_page+0x32/0x2e0
[ 103.559272][ T5890] __unfreeze_partials+0x1cf/0x210
[ 103.564404][ T5890] put_cpu_partial+0x17c/0x250
[ 103.569186][ T5890] __slab_free+0x319/0x400
[ 103.573620][ T5890] qlist_free_all+0x75/0xd0
[ 103.578148][ T5890] kasan_quarantine_reduce+0x143/0x160
[ 103.583637][ T5890] __kasan_slab_alloc+0x22/0x80
[ 103.588532][ T5890] slab_post_alloc_hook+0x6a/0x4d0
[ 103.593672][ T5890] kmem_cache_alloc+0x17e/0x2c0
[ 103.598567][ T5890] getname_flags+0xbb/0x500
[ 103.603095][ T5890] vfs_fstatat+0x111/0x1b0
[ 103.607532][ T5890] __x64_sys_newfstatat+0x149/0x1f0
[ 103.612755][ T5890] do_syscall_64+0x55/0xb0
[ 103.617202][ T5890] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 103.623117][ T5890]
[ 103.625461][ T5890] Memory state around the buggy address:
[ 103.631108][ T5890] ffff888023afa300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 103.639190][ T5890] ffff888023afa380: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 103.647265][ T5890] >ffff888023afa400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 103.655341][ T5890] ^
[ 103.662554][ T5890] ffff888023afa480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 103.670634][ T5890] ffff888023afa500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 103.678802][ T5890] ==================================================================
[ 103.735378][ T5890] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 103.742736][ T5890] CPU: 0 PID: 5890 Comm: syz-executor Not tainted syzkaller #0
[ 103.750319][ T5890] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026
[ 103.760409][ T5890] Call Trace:
[ 103.763723][ T5890]
[ 103.766684][ T5890] dump_stack_lvl+0x18c/0x250
[ 103.771396][ T5890] ? show_regs_print_info+0x20/0x20
[ 103.776618][ T5890] ? load_image+0x420/0x420
[ 103.781156][ T5890] panic+0x2ca/0x720
[ 103.785084][ T5890] ? bpf_jit_dump+0xd0/0xd0
[ 103.789621][ T5890] ? _raw_spin_unlock_irqrestore+0x111/0x120
[ 103.795642][ T5890] ? _raw_spin_unlock+0x40/0x40
[ 103.800527][ T5890] ? print_memory_metadata+0x314/0x400
[ 103.806014][ T5890] ? __mutex_lock+0xfc/0xc80
[ 103.810647][ T5890] check_panic_on_warn+0x84/0xa0
[ 103.815617][ T5890] ? __mutex_lock+0xfc/0xc80
[ 103.820238][ T5890] end_report+0x6f/0x130
[ 103.824512][ T5890] kasan_report+0x128/0x150
[ 103.829050][ T5890] ? tomoyo_check_open_permission+0x384/0x460
[ 103.835150][ T5890] ? __mutex_lock+0xfc/0xc80
[ 103.839764][ T5890] __mutex_lock+0xfc/0xc80
[ 103.844208][ T5890] ? end_current_label_crit_section+0x170/0x170
[ 103.850485][ T5890] ? ep_open+0x4e/0x270
[ 103.854664][ T5890] ? mutex_lock_nested+0x20/0x20
[ 103.859626][ T5890] ? apparmor_file_open+0x5ab/0x760
[ 103.864873][ T5890] ? apparmor_inode_getattr+0x2c0/0x2c0
[ 103.870438][ T5890] ? __rwlock_init+0x150/0x150
[ 103.875229][ T5890] ep_open+0x4e/0x270
[ 103.879231][ T5890] ? do_dentry_open+0x86f/0x14b0
[ 103.884200][ T5890] do_dentry_open+0x880/0x14b0
[ 103.888993][ T5890] ? ep_ioctl+0x1c0/0x1c0
[ 103.893346][ T5890] path_openat+0x284f/0x3270
[ 103.897966][ T5890] ? do_sys_openat2+0xda/0x1d0
[ 103.902755][ T5890] ? __x64_sys_openat+0x139/0x160
[ 103.907802][ T5890] ? verify_lock_unused+0x140/0x140
[ 103.913025][ T5890] ? do_filp_open+0x430/0x430
[ 103.917741][ T5890] do_filp_open+0x1f2/0x430
[ 103.922261][ T5890] ? vfs_tmpfile+0x620/0x620
[ 103.926882][ T5890] ? _raw_spin_unlock+0x28/0x40
[ 103.931766][ T5890] ? alloc_fd+0x590/0x640
[ 103.936130][ T5890] do_sys_openat2+0x134/0x1d0
[ 103.940829][ T5890] ? do_sys_open+0xe0/0xe0
[ 103.945273][ T5890] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 103.951274][ T5890] ? fsnotify_link_count+0xf0/0xf0
[ 103.956408][ T5890] ? lock_chain_count+0x20/0x20
[ 103.961288][ T5890] __x64_sys_openat+0x139/0x160
[ 103.966159][ T5890] do_syscall_64+0x55/0xb0
[ 103.970597][ T5890] ? clear_bhb_loop+0x40/0x90
[ 103.975305][ T5890] ? clear_bhb_loop+0x40/0x90
[ 103.980020][ T5890] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 103.985944][ T5890] RIP: 0033:0x7f6938f5e84e
[ 103.990383][ T5890] Code: 08 0f 85 a5 a8 ff ff 49 89 fb 48 89 f0 48 89 d7 48 89 ce 4c 89 c2 4d 89 ca 4c 8b 44 24 08 4c 8b 4c 24 10 4c 89 5c 24 08 0f 05 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 80 00 00 00 00 48 83 ec 08
[ 104.010010][ T5890] RSP: 002b:00007ffdddeeb688 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 104.018447][ T5890] RAX: ffffffffffffffda RBX: 000055557e0e0500 RCX: 00007f6938f5e84e
[ 104.026442][ T5890] RDX: 0000000000000000 RSI: 00007ffdddeeb7f0 RDI: ffffffffffffff9c
[ 104.034432][ T5890] RBP: 00007ffdddeeb7f0 R08: 0000000000000000 R09: 0000000000000000
[ 104.042420][ T5890] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffdddeec8e0
[ 104.050408][ T5890] R13: 00007f693903445c R14: 000055557e0e04e8 R15: 0000000000000006
[ 104.058407][ T5890]
[ 104.061999][ T5890] Kernel Offset: disabled
[ 104.066329][ T5890] Rebooting in 86400 seconds..