[ 24.979680][ T8] device bridge_slave_0 left promiscuous mode
[ 24.986037][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 24.995005][ T8] device bridge_slave_1 left promiscuous mode
[ 25.001148][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 25.008959][ T8] device bridge_slave_0 left promiscuous mode
[ 25.015283][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 25.023750][ T8] device veth1_macvtap left promiscuous mode
[ 25.030106][ T8] device veth0_vlan left promiscuous mode
[ 25.036229][ T8] device veth1_macvtap left promiscuous mode
[ 25.042279][ T8] device veth0_vlan left promiscuous mode
Warning: Permanently added '10.128.0.214' (ED25519) to the list of known hosts.
2026/10/11 18:50:20 parsed 1 programs
2026/10/11 18:50:20 serving rpc on tcp://34203
Setting up swapspace version 1, size = 127995904 bytes
[ 33.794956][ T28] kauditd_printk_skb: 32 callbacks suppressed
[ 33.794970][ T28] audit: type=1400 audit(1791744621.357:106): avc: denied { unlink } for pid=415 comm="syz-executor" name="swap-file" dev="sda1" ino=2027 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 33.871815][ T415] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 34.750966][ T425] bridge0: port 1(bridge_slave_0) entered blocking state
[ 34.769089][ T425] bridge0: port 1(bridge_slave_0) entered disabled state
[ 34.776857][ T425] device bridge_slave_0 entered promiscuous mode
[ 34.796316][ T425] bridge0: port 2(bridge_slave_1) entered blocking state
[ 34.803375][ T425] bridge0: port 2(bridge_slave_1) entered disabled state
[ 34.817917][ T425] device bridge_slave_1 entered promiscuous mode
[ 35.060744][ T28] audit: type=1401 audit(1791744622.617:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 35.070802][ T425] bridge0: port 2(bridge_slave_1) entered blocking state
[ 35.080759][ T425] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 35.088805][ T425] bridge0: port 1(bridge_slave_0) entered blocking state
[ 35.096572][ T425] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 35.154120][ T336] bridge0: port 1(bridge_slave_0) entered disabled state
[ 35.161936][ T336] bridge0: port 2(bridge_slave_1) entered disabled state
[ 35.170976][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 35.178883][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 35.203889][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 35.212604][ T336] bridge0: port 1(bridge_slave_0) entered blocking state
[ 35.219870][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 35.242893][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 35.256064][ T336] bridge0: port 2(bridge_slave_1) entered blocking state
[ 35.263142][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 35.278028][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 35.293464][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 35.306549][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 35.320220][ T425] device veth0_vlan entered promiscuous mode
[ 35.327089][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 35.335619][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 35.343342][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 35.358453][ T425] device veth1_macvtap entered promiscuous mode
[ 35.366156][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 35.383690][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 35.392261][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
2026/10/11 18:50:23 executed programs: 0
[ 35.617663][ T480] bridge0: port 1(bridge_slave_0) entered blocking state
[ 35.624859][ T480] bridge0: port 1(bridge_slave_0) entered disabled state
[ 35.632307][ T480] device bridge_slave_0 entered promiscuous mode
[ 35.646077][ T480] bridge0: port 2(bridge_slave_1) entered blocking state
[ 35.653161][ T480] bridge0: port 2(bridge_slave_1) entered disabled state
[ 35.660823][ T480] device bridge_slave_1 entered promiscuous mode
[ 35.727372][ T486] bridge0: port 1(bridge_slave_0) entered blocking state
[ 35.734586][ T486] bridge0: port 1(bridge_slave_0) entered disabled state
[ 35.742515][ T486] device bridge_slave_0 entered promiscuous mode
[ 35.751328][ T486] bridge0: port 2(bridge_slave_1) entered blocking state
[ 35.758461][ T486] bridge0: port 2(bridge_slave_1) entered disabled state
[ 35.766131][ T486] device bridge_slave_1 entered promiscuous mode
[ 35.807502][ T487] bridge0: port 1(bridge_slave_0) entered blocking state
[ 35.814801][ T487] bridge0: port 1(bridge_slave_0) entered disabled state
[ 35.822143][ T487] device bridge_slave_0 entered promiscuous mode
[ 35.845131][ T487] bridge0: port 2(bridge_slave_1) entered blocking state
[ 35.852451][ T487] bridge0: port 2(bridge_slave_1) entered disabled state
[ 35.860049][ T487] device bridge_slave_1 entered promiscuous mode
[ 35.901229][ T482] bridge0: port 1(bridge_slave_0) entered blocking state
[ 35.908598][ T482] bridge0: port 1(bridge_slave_0) entered disabled state
[ 35.916215][ T482] device bridge_slave_0 entered promiscuous mode
[ 35.923046][ T485] bridge0: port 1(bridge_slave_0) entered blocking state
[ 35.930210][ T485] bridge0: port 1(bridge_slave_0) entered disabled state
[ 35.938327][ T485] device bridge_slave_0 entered promiscuous mode
[ 35.948299][ T485] bridge0: port 2(bridge_slave_1) entered blocking state
[ 35.955405][ T485] bridge0: port 2(bridge_slave_1) entered disabled state
[ 35.962880][ T485] device bridge_slave_1 entered promiscuous mode
[ 35.978687][ T482] bridge0: port 2(bridge_slave_1) entered blocking state
[ 35.985838][ T482] bridge0: port 2(bridge_slave_1) entered disabled state
[ 35.993353][ T482] device bridge_slave_1 entered promiscuous mode
[ 36.164008][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 36.171732][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 36.200606][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 36.209170][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 36.217889][ T336] bridge0: port 1(bridge_slave_0) entered blocking state
[ 36.225825][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 36.234117][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 36.259071][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 36.267593][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 36.276277][ T336] bridge0: port 2(bridge_slave_1) entered blocking state
[ 36.283296][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 36.315350][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 36.323403][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 36.352763][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 36.376794][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 36.385559][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 36.393787][ T336] bridge0: port 1(bridge_slave_0) entered blocking state
[ 36.400981][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 36.408568][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 36.417927][ T336] bridge0: port 2(bridge_slave_1) entered blocking state
[ 36.425274][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 36.435471][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 36.443399][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 36.451770][ T336] bridge0: port 1(bridge_slave_0) entered blocking state
[ 36.458835][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 36.481381][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 36.489386][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 36.523888][ T480] device veth0_vlan entered promiscuous mode
[ 36.531471][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 36.539478][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 36.548269][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 36.557258][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 36.566103][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 36.573751][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 36.581999][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 36.591738][ T336] bridge0: port 1(bridge_slave_0) entered blocking state
[ 36.598953][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 36.606510][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 36.614793][ T336] bridge0: port 2(bridge_slave_1) entered blocking state
[ 36.621848][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 36.629389][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 36.637724][ T336] bridge0: port 2(bridge_slave_1) entered blocking state
[ 36.644824][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 36.652621][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 36.673151][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 36.685302][ T480] device veth1_macvtap entered promiscuous mode
[ 36.713229][ T487] device veth0_vlan entered promiscuous mode
[ 36.720843][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 36.729135][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 36.737464][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 36.745992][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 36.753719][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 36.763324][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 36.771923][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 36.780925][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 36.789381][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 36.798248][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 36.805773][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 36.814229][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 36.822917][ T336] bridge0: port 1(bridge_slave_0) entered blocking state
[ 36.830078][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 36.837538][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 36.845981][ T336] bridge0: port 2(bridge_slave_1) entered blocking state
[ 36.853789][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 36.874799][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 36.882649][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 36.891273][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 36.900028][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 36.908635][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 36.917114][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 36.926829][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 36.951155][ T485] device veth0_vlan entered promiscuous mode
[ 36.961934][ T28] audit: type=1400 audit(1791744624.517:108): avc: denied { mount } for pid=505 comm="syz.5.17" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1
[ 36.962453][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 36.988067][ T28] audit: type=1400 audit(1791744624.547:109): avc: denied { mount } for pid=505 comm="syz.5.17" name="/" dev="configfs" ino=13800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1
[ 36.995251][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 37.015988][ T28] audit: type=1400 audit(1791744624.547:110): avc: denied { search } for pid=505 comm="syz.5.17" name="/" dev="configfs" ino=13800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 37.032183][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 37.052169][ T28] audit: type=1400 audit(1791744624.547:111): avc: denied { write } for pid=505 comm="syz.5.17" name="usb_gadget" dev="configfs" ino=13801 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 37.053028][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 37.075349][ T28] audit: type=1400 audit(1791744624.547:112): avc: denied { add_name } for pid=505 comm="syz.5.17" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1
[ 37.083531][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 37.104110][ T28] audit: type=1400 audit(1791744624.547:113): avc: denied { create } for pid=505 comm="syz.5.17" name="g1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:configfs_t tclass=dir permissive=1
[ 37.112434][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 37.131748][ T28] audit: type=1400 audit(1791744624.577:114): avc: denied { read write } for pid=505 comm="syz.5.17" name="ttyGS0" dev="devtmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 37.140988][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 37.170173][ T28] audit: type=1400 audit(1791744624.577:115): avc: denied { open } for pid=505 comm="syz.5.17" path="/0/dev/ttyGS0" dev="devtmpfs" ino=572 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 37.193555][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 37.201631][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 37.209329][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 37.217338][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 37.224932][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 37.233006][ T486] device veth0_vlan entered promiscuous mode
[ 37.246957][ T485] device veth1_macvtap entered promiscuous mode
[ 37.256456][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 37.264879][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 37.273190][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 37.286494][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 37.295203][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 37.313898][ T482] device veth0_vlan entered promiscuous mode
[ 37.323848][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 37.332347][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 37.340686][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 37.349488][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 37.358123][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 37.366418][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 37.374660][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 37.382925][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 37.391429][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 37.399911][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 37.408535][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 37.416222][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 37.425559][ T486] device veth1_macvtap entered promiscuous mode
[ 37.436509][ T487] device veth1_macvtap entered promiscuous mode
[ 37.450676][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 37.458673][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 37.466673][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 37.475218][ T336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 37.488023][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 37.496331][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 37.517946][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 37.526462][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 37.536115][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 37.544559][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 37.553800][ T482] device veth1_macvtap entered promiscuous mode
[ 37.574752][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 37.582562][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 37.591396][ T363] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 37.599637][ T505] ==================================================================
[ 37.599651][ T505] BUG: KASAN: use-after-free in check_tty_count+0x1a8/0x330
[ 37.599690][ T505] Read of size 8 at addr ffff8881202fc910 by task syz.5.17/505
[ 37.599705][ T505]
[ 37.599710][ T505] CPU: 1 PID: 505 Comm: syz.5.17 Not tainted syzkaller #0
[ 37.599726][ T505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 37.599739][ T505] Call Trace:
[ 37.599744][ T505]
[ 37.599749][ T505] __dump_stack+0x21/0x24
[ 37.655467][ T505] dump_stack_lvl+0x110/0x170
[ 37.660159][ T505] ? __cfi_dump_stack_lvl+0x8/0x8
[ 37.665219][ T505] ? __kasan_record_aux_stack+0xb6/0xc0
[ 37.671102][ T505] ? filp_close+0x111/0x160
[ 37.675688][ T505] ? __x64_sys_close_range+0x7a/0x90
[ 37.681067][ T505] ? x64_sys_call+0x43b/0x9a0
[ 37.685949][ T505] ? check_tty_count+0x1a8/0x330
[ 37.690988][ T505] print_address_description+0x71/0x200
[ 37.696634][ T505] print_report+0x4a/0x60
[ 37.700979][ T505] kasan_report+0x122/0x150
[ 37.705479][ T505] ? check_tty_count+0x1a8/0x330
[ 37.710424][ T505] kasan_check_range+0x249/0x2a0
[ 37.715356][ T505] __kasan_check_read+0x11/0x20
[ 37.720214][ T505] check_tty_count+0x1a8/0x330
[ 37.724985][ T505] tty_release+0x88/0x11d0
[ 37.729413][ T505] ? task_work_add+0x2cb/0x330
[ 37.734167][ T505] ? __cfi_tty_release+0x10/0x10
[ 37.739092][ T505] __fput+0x1fd/0x8f0
[ 37.743092][ T505] ____fput+0x15/0x20
[ 37.747060][ T505] task_work_run+0x1e1/0x250
[ 37.751646][ T505] ? __cfi_task_work_run+0x10/0x10
[ 37.756753][ T505] ? __cfi___close_range+0x10/0x10
[ 37.761953][ T505] exit_to_user_mode_loop+0x9b/0xb0
[ 37.767433][ T505] exit_to_user_mode_prepare+0x87/0xd0
[ 37.772902][ T505] syscall_exit_to_user_mode+0x1a/0x30
[ 37.778358][ T505] do_syscall_64+0x58/0xa0
[ 37.782793][ T505] ? clear_bhb_loop+0x30/0x80
[ 37.787458][ T505] ? clear_bhb_loop+0x30/0x80
[ 37.792124][ T505] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 37.798010][ T505] RIP: 0033:0x7f3d8c79e159
[ 37.802478][ T505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 37.822419][ T505] RSP: 002b:00007ffc192536a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 37.830820][ T505] RAX: 0000000000000000 RBX: 00007f3d8ca27da0 RCX: 00007f3d8c79e159
[ 37.838886][ T505] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 37.846971][ T505] RBP: 00007f3d8ca27da0 R08: 00007f3d8ca26038 R09: 0000000000000000
[ 37.855035][ T505] R10: 000000000003fda0 R11: 0000000000000246 R12: 0000000000009382
[ 37.862998][ T505] R13: 00007f3d8ca25fac R14: 00000000000090b1 R15: 00007ffc192537b0
[ 37.871051][ T505]
[ 37.874195][ T505]
[ 37.876592][ T505] Allocated by task 506:
[ 37.880903][ T505] kasan_set_track+0x4b/0x70
[ 37.885484][ T505] kasan_save_alloc_info+0x1f/0x30
[ 37.890671][ T505] __kasan_kmalloc+0x95/0xb0
[ 37.895253][ T505] kmalloc_trace+0x40/0xb0
[ 37.899653][ T505] gserial_alloc_line_no_console+0x238/0x700
[ 37.905737][ T505] gserial_alloc_line+0x15/0x20
[ 37.910660][ T505] acm_alloc_instance+0x86/0xe0
[ 37.915498][ T505] usb_get_function_instance+0xf3/0x310
[ 37.921035][ T505] function_make+0x118/0x360
[ 37.925609][ T505] configfs_mkdir+0x518/0x9e0
[ 37.930589][ T505] vfs_mkdir+0x39c/0x580
[ 37.935584][ T505] do_mkdirat+0x174/0x4d0
[ 37.940878][ T505] __x64_sys_mkdirat+0x89/0xa0
[ 37.945909][ T505] x64_sys_call+0x73d/0x9a0
[ 37.950587][ T505] do_syscall_64+0x4c/0xa0
[ 37.955101][ T505] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 37.961000][ T505]
[ 37.963329][ T505] Freed by task 506:
[ 37.967278][ T505] kasan_set_track+0x4b/0x70
[ 37.971867][ T505] kasan_save_free_info+0x2b/0x40
[ 37.976940][ T505] ____kasan_slab_free+0x132/0x180
[ 37.982322][ T505] __kasan_slab_free+0x11/0x20
[ 37.987261][ T505] slab_free_freelist_hook+0xc2/0x190
[ 37.992972][ T505] __kmem_cache_free+0xb7/0x1b0
[ 37.997921][ T505] kfree+0x6f/0xf0
[ 38.001644][ T505] gserial_free_port+0x240/0x2d0
[ 38.006713][ T505] gserial_free_line+0x9b/0x1a0
[ 38.011788][ T505] acm_free_instance+0x39/0x60
[ 38.016570][ T505] usb_put_function_instance+0x9b/0xc0
[ 38.022052][ T505] acm_attr_release+0x15/0x20
[ 38.026722][ T505] config_item_put+0x166/0x210
[ 38.031490][ T505] configfs_rmdir+0x8c9/0x980
[ 38.036243][ T505] vfs_rmdir+0x381/0x4f0
[ 38.040486][ T505] do_rmdir+0x261/0x6b0
[ 38.044738][ T505] __x64_sys_rmdir+0x49/0x50
[ 38.049334][ T505] x64_sys_call+0x68e/0x9a0
[ 38.053835][ T505] do_syscall_64+0x4c/0xa0
[ 38.058243][ T505] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 38.064126][ T505]
[ 38.066434][ T505] The buggy address belongs to the object at ffff8881202fc800
[ 38.066434][ T505] which belongs to the cache kmalloc-1k of size 1024
[ 38.080739][ T505] The buggy address is located 272 bytes inside of
[ 38.080739][ T505] 1024-byte region [ffff8881202fc800, ffff8881202fcc00)
[ 38.094109][ T505]
[ 38.096618][ T505] The buggy address belongs to the physical page:
[ 38.103374][ T505] page:ffffea000480be00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1202f8
[ 38.113882][ T505] head:ffffea000480be00 order:3 compound_mapcount:0 compound_pincount:0
[ 38.122832][ T505] flags: 0x4000000000010200(slab|head|zone=1)
[ 38.129041][ T505] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043080
[ 38.137802][ T505] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 38.146659][ T505] page dumped because: kasan: bad access detected
[ 38.153191][ T505] page_owner tracks the page as allocated
[ 38.159188][ T505] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 415, tgid 415 (syz-executor), ts 36950883370, free_ts 36524182750
[ 38.181929][ T505] post_alloc_hook+0x1f5/0x210
[ 38.186704][ T505] prep_new_page+0x1c/0x110
[ 38.191196][ T505] get_page_from_freelist+0x2ca9/0x2d20
[ 38.196746][ T505] __alloc_pages+0x1fa/0x610
[ 38.201453][ T505] alloc_slab_page+0x6e/0xf0
[ 38.206054][ T505] new_slab+0x98/0x3e0
[ 38.210236][ T505] ___slab_alloc+0x70f/0xb70
[ 38.214851][ T505] __slab_alloc+0x5e/0xa0
[ 38.219263][ T505] __kmem_cache_alloc_node+0x204/0x2d0
[ 38.224739][ T505] __kmalloc_node_track_caller+0xa1/0x1e0
[ 38.230448][ T505] __alloc_skb+0x226/0x4a0
[ 38.234855][ T505] tcp_stream_alloc_skb+0x47/0x360
[ 38.239969][ T505] tcp_sendmsg_locked+0xcb7/0x39f0
[ 38.245069][ T505] tcp_sendmsg+0x2f/0x50
[ 38.249392][ T505] inet_sendmsg+0xb6/0xd0
[ 38.253733][ T505] sock_write_iter+0x2ea/0x3f0
[ 38.258491][ T505] page last free stack trace:
[ 38.263156][ T505] free_unref_page_prepare+0x81b/0x820
[ 38.268703][ T505] free_unref_page+0x93/0x530
[ 38.273396][ T505] __free_pages+0x67/0x100
[ 38.277812][ T505] __free_slab+0xc7/0x1a0
[ 38.282133][ T505] __unfreeze_partials+0x15a/0x190
[ 38.287230][ T505] put_cpu_partial+0xa9/0x100
[ 38.292136][ T505] __slab_free+0x1c4/0x280
[ 38.296538][ T505] ___cache_free+0xbf/0xd0
[ 38.300943][ T505] qlist_free_all+0xc6/0x140
[ 38.305527][ T505] kasan_quarantine_reduce+0x14a/0x170
[ 38.311131][ T505] __kasan_slab_alloc+0x24/0x80
[ 38.315976][ T505] slab_post_alloc_hook+0x4f/0x2d0
[ 38.321165][ T505] kmem_cache_alloc_node+0x179/0x330
[ 38.326437][ T505] __alloc_skb+0xe8/0x4a0
[ 38.330768][ T505] inet_netconf_notify_devconf+0x169/0x220
[ 38.336572][ T505] devinet_exit_net+0x1d2/0x220
[ 38.341512][ T505]
[ 38.343839][ T505] Memory state around the buggy address:
[ 38.349539][ T505] ffff8881202fc800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 38.357831][ T505] ffff8881202fc880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 38.365975][ T505] >ffff8881202fc900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 38.374109][ T505] ^
[ 38.378771][ T505] ffff8881202fc980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 38.386921][ T505] ffff8881202fca00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 38.395094][ T505] ==================================================================
[ 38.418805][ T505] Disabling lock debugging due to kernel taint
[ 38.432738][ T505] ------------[ cut here ]------------
[ 38.438288][ T505] WARNING: CPU: 0 PID: 505 at drivers/usb/gadget/function/u_serial.c:694 gs_close+0x17d/0x9b0
[ 38.448617][ T505] Modules linked in:
[ 38.452712][ T505] CPU: 0 PID: 505 Comm: syz.5.17 Tainted: G B syzkaller #0
[ 38.461386][ T505] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 38.471621][ T505] RIP: 0010:gs_close+0x17d/0x9b0
[ 38.476734][ T505] Code: fa 22 fe 41 ff cc 42 0f b6 04 2b 84 c0 0f 85 cf 06 00 00 48 8b 44 24 20 44 89 20 48 8b 5c 24 38 e9 cb 02 00 00 e8 e3 f9 22 fe <0f> 0b 48 8b 5c 24 38 e9 ba 02 00 00 e8 d2 f9 22 fe 49 8d bf a8 02
[ 38.496680][ T505] RSP: 0018:ffffc90000c47b60 EFLAGS: 00010093
[ 38.502741][ T505] RAX: ffffffff834e745d RBX: 1ffff1102405f91a RCX: ffff88812f788000
[ 38.510722][ T505] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 38.519016][ T505] RBP: ffffc90000c47c80 R08: 0000000000000003 R09: 0000000000000004
[ 38.527084][ T505] R10: dffffc0000000000 R11: fffff52000188f5c R12: 0000000000000000
[ 38.535399][ T505] R13: dffffc0000000000 R14: 1ffff92000188f74 R15: ffff8881202fc800
[ 38.543373][ T505] FS: 00005555839bb500(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 38.552313][ T505] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.558976][ T505] CR2: 00007fa5cf670050 CR3: 00000001109e2000 CR4: 00000000003506b0
[ 38.566950][ T505] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.574940][ T505] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.582919][ T505] Call Trace:
[ 38.586372][ T505]
[ 38.589319][ T505] ? __kasan_check_write+0x14/0x20
[ 38.594511][ T505] ? _raw_spin_lock+0x94/0xf0
[ 38.599198][ T505] ? __cfi__raw_spin_lock+0x10/0x10
[ 38.604394][ T505] ? __cfi_gs_close+0x10/0x10
[ 38.609104][ T505] ? _raw_spin_unlock+0x4c/0x70
[ 38.614117][ T505] ? fasync_remove_entry+0x19c/0x1d0
[ 38.619490][ T505] ? __cfi_gs_close+0x10/0x10
[ 38.624171][ T505] tty_release+0x32b/0x11d0
[ 38.628686][ T505] ? __cfi_tty_release+0x10/0x10
[ 38.633625][ T505] __fput+0x1fd/0x8f0
[ 38.637800][ T505] ____fput+0x15/0x20
[ 38.642308][ T505] task_work_run+0x1e1/0x250
[ 38.646907][ T505] ? __cfi_task_work_run+0x10/0x10
[ 38.652040][ T505] ? __cfi___close_range+0x10/0x10
[ 38.657149][ T505] exit_to_user_mode_loop+0x9b/0xb0
[ 38.662712][ T505] exit_to_user_mode_prepare+0x87/0xd0
[ 38.668207][ T505] syscall_exit_to_user_mode+0x1a/0x30
[ 38.673839][ T505] do_syscall_64+0x58/0xa0
[ 38.678248][ T505] ? clear_bhb_loop+0x30/0x80
[ 38.682914][ T505] ? clear_bhb_loop+0x30/0x80
[ 38.687593][ T505] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 38.693508][ T505] RIP: 0033:0x7f3d8c79e159
[ 38.697922][ T505] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 38.717714][ T505] RSP: 002b:00007ffc192536a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4
[ 38.726125][ T505] RAX: 0000000000000000 RBX: 00007f3d8ca27da0 RCX: 00007f3d8c79e159
[ 38.734281][ T505] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003
[ 38.742346][ T505] RBP: 00007f3d8ca27da0 R08: 00007f3d8ca26038 R09: 0000000000000000
[ 38.750399][ T505] R10: 000000000003fda0 R11: 0000000000000246 R12: 0000000000009382
[ 38.758369][ T505] R13: 00007f3d8ca25fac R14: 00000000000090b1 R15: 00007ffc192537b0
[ 38.766367][ T505]
[ 38.769396][ T505] ---[ end trace 0000000000000000 ]---
[ 38.776574][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 38.785783][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 38.788961][ T515] BUG: kernel NULL pointer dereference, address: 00000000000001c0
[ 38.794260][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 38.801645][ T515] #PF: supervisor write access in kernel mode
[ 38.801656][ T515] #PF: error_code(0x0002) - not-present page
[ 38.801665][ T515] PGD 115134067 P4D 115134067 PUD 0
[ 38.801686][ T515] Oops: 0002 [#1] PREEMPT SMP KASAN
[ 38.801700][ T515] CPU: 1 PID: 515 Comm: syz.2.22 Tainted: G B W syzkaller #0
[ 38.801717][ T515] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 38.801726][ T515] RIP: 0010:_raw_spin_lock_irq+0x9e/0xf0
[ 38.801754][ T515] Code: 44 24 20 00 00 00 00 48 89 df be 04 00 00 00 e8 d8 6c b5 fc 4c 89 f7 be 04 00 00 00 e8 cb 6c b5 fc 8b 44 24 20 b9 01 00 00 00 0f b1 0b 75 33 43 c6 44 27 04 f8 48 c7 04 24 0e 36 e0 45 4b c7
[ 38.810270][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 38.815747][ T515] RSP: 0018:ffffc90000d47460 EFLAGS: 00010097
[ 38.815765][ T515] RAX: 0000000000000000 RBX: 00000000000001c0 RCX: 0000000000000001
[ 38.815774][ T515] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000d47480
[ 38.815784][ T515] RBP: ffffc90000d474f0 R08: 0000000000000003 R09: 0000000000000004
[ 38.915618][ T515] R10: dffffc0000000000 R11: fffff520001a8e90 R12: dffffc0000000000
[ 38.923673][ T515] R13: dffffc0000000000 R14: ffffc90000d47480 R15: 1ffff920001a8e8c
[ 38.931651][ T515] FS: 00007fa5d066b6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 38.940666][ T515] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 38.947333][ T515] CR2: 00000000000001c0 CR3: 0000000114a6e000 CR4: 00000000003506a0
[ 38.955411][ T515] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 38.963543][ T515] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 38.971679][ T515] Call Trace:
[ 38.974952][ T515]
[ 38.977869][ T515] ? __cfi__raw_spin_lock_irq+0x10/0x10
[ 38.983421][ T515] ? _raw_spin_unlock_irqrestore+0x5a/0x80
[ 38.989222][ T515] ? __wake_up+0x12e/0x1a0
[ 38.993717][ T515] gs_close+0xad/0x9b0
[ 38.997860][ T515] ? __kasan_check_write+0x14/0x20
[ 39.003132][ T515] ? _raw_spin_lock+0x94/0xf0
[ 39.007799][ T515] ? __cfi__raw_spin_lock+0x10/0x10
[ 39.013269][ T515] ? __cfi_gs_close+0x10/0x10
[ 39.018043][ T515] ? _raw_spin_unlock+0x4c/0x70
[ 39.022894][ T515] ? fasync_remove_entry+0x19c/0x1d0
[ 39.028181][ T515] ? __cfi_gs_close+0x10/0x10
[ 39.032939][ T515] tty_release+0x32b/0x11d0
[ 39.037451][ T515] ? __cfi_mutex_unlock+0x10/0x10
[ 39.042472][ T515] ? kasan_check_range+0x249/0x2a0
[ 39.047590][ T515] tty_open+0x641/0x1040
[ 39.051909][ T515] ? __cfi_tty_open+0x10/0x10
[ 39.056570][ T515] chrdev_open+0x593/0x600
[ 39.060974][ T515] ? __cfi_chrdev_open+0x10/0x10
[ 39.065984][ T515] ? fsnotify_perm+0x3e9/0x5b0
[ 39.070924][ T515] do_dentry_open+0x885/0x11f0
[ 39.075695][ T515] ? __cfi_chrdev_open+0x10/0x10
[ 39.080627][ T515] vfs_open+0x73/0x80
[ 39.084603][ T515] path_openat+0x2699/0x2f30
[ 39.089368][ T515] ? slab_post_alloc_hook+0x4f/0x2d0
[ 39.094653][ T515] ? kmem_cache_alloc+0x166/0x320
[ 39.099668][ T515] ? getname_flags+0xba/0x510
[ 39.104333][ T515] ? do_sys_openat2+0xeb/0x820
[ 39.109105][ T515] ? do_filp_open+0x420/0x420
[ 39.113952][ T515] do_filp_open+0x1ee/0x420
[ 39.118446][ T515] ? __cfi_do_filp_open+0x10/0x10
[ 39.123652][ T515] ? alloc_fd+0x4c1/0x570
[ 39.127986][ T515] do_sys_openat2+0x15e/0x820
[ 39.132656][ T515] ? __se_sys_futex+0x136/0x310
[ 39.137504][ T515] ? do_sys_open+0xe0/0xe0
[ 39.141925][ T515] ? __this_cpu_preempt_check+0x13/0x20
[ 39.147552][ T515] ? xfd_validate_state+0x70/0x150
[ 39.152673][ T515] __x64_sys_openat+0x136/0x160
[ 39.157817][ T515] x64_sys_call+0x783/0x9a0
[ 39.162308][ T515] do_syscall_64+0x4c/0xa0
[ 39.166732][ T515] ? clear_bhb_loop+0x30/0x80
[ 39.171417][ T515] ? clear_bhb_loop+0x30/0x80
[ 39.176095][ T515] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 39.181985][ T515] RIP: 0033:0x7fa5cf79e159
[ 39.186476][ T515] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 39.206080][ T515] RSP: 002b:00007fa5d066b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 39.214488][ T515] RAX: ffffffffffffffda RBX: 00007fa5cfa25fa0 RCX: 00007fa5cf79e159
[ 39.222476][ T515] RDX: 0000000000000002 RSI: 0000200000000800 RDI: ffffffffffffff9c
[ 39.230439][ T515] RBP: 00007fa5cf83506b R08: 0000000000000000 R09: 0000000000000000
[ 39.238540][ T515] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 39.246609][ T515] R13: 00007fa5cfa26038 R14: 00007fa5cfa25fa0 R15: 00007ffc145a53a8
[ 39.254931][ T515]
[ 39.258078][ T515] Modules linked in:
[ 39.261982][ T515] CR2: 00000000000001c0
[ 39.266119][ T515] ---[ end trace 0000000000000000 ]---
[ 39.271643][ T515] RIP: 0010:_raw_spin_lock_irq+0x9e/0xf0
[ 39.277273][ T515] Code: 44 24 20 00 00 00 00 48 89 df be 04 00 00 00 e8 d8 6c b5 fc 4c 89 f7 be 04 00 00 00 e8 cb 6c b5 fc 8b 44 24 20 b9 01 00 00 00 0f b1 0b 75 33 43 c6 44 27 04 f8 48 c7 04 24 0e 36 e0 45 4b c7
[ 39.296867][ T515] RSP: 0018:ffffc90000d47460 EFLAGS: 00010097
[ 39.303013][ T515] RAX: 0000000000000000 RBX: 00000000000001c0 RCX: 0000000000000001
[ 39.311365][ T515] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000d47480
[ 39.319326][ T515] RBP: ffffc90000d474f0 R08: 0000000000000003 R09: 0000000000000004
[ 39.327478][ T515] R10: dffffc0000000000 R11: fffff520001a8e90 R12: dffffc0000000000
[ 39.335523][ T515] R13: dffffc0000000000 R14: ffffc90000d47480 R15: 1ffff920001a8e8c
[ 39.343483][ T515] FS: 00007fa5d066b6c0(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000
[ 39.352404][ T515] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 39.359068][ T515] CR2: 00000000000001c0 CR3: 0000000114a6e000 CR4: 00000000003506a0
[ 39.367026][ T515] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 39.375049][ T515] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 39.383019][ T515] Kernel panic - not syncing: Fatal exception
[ 39.389367][ T515] Kernel Offset: disabled
[ 39.393979][ T515] Rebooting in 86400 seconds..