Warning: Permanently added '10.128.1.228' (ED25519) to the list of known hosts.
2026/02/02 03:53:01 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 93.303862][ T4643] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 95.625951][ T4681] chnl_net:caif_netlink_parms(): no params data found
[ 95.682074][ T4681] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.689572][ T4681] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.697849][ T4681] device bridge_slave_0 entered promiscuous mode
[ 95.706501][ T4681] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.714028][ T4681] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.722303][ T4681] device bridge_slave_1 entered promiscuous mode
[ 95.749734][ T4681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 95.761550][ T4681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 95.791410][ T4681] team0: Port device team_slave_0 added
[ 95.800425][ T4681] team0: Port device team_slave_1 added
[ 95.823974][ T4681] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 95.831231][ T4681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 95.859469][ T4681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 95.872810][ T4681] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 95.880006][ T4681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 95.906432][ T4681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 95.943498][ T4681] device hsr_slave_0 entered promiscuous mode
[ 95.951123][ T4681] device hsr_slave_1 entered promiscuous mode
[ 96.602256][ T4681] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 96.612006][ T4681] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 96.622110][ T4681] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 96.632883][ T4681] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 96.698693][ T4681] 8021q: adding VLAN 0 to HW filter on device bond0
[ 96.712307][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 96.727928][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 96.740001][ T4681] 8021q: adding VLAN 0 to HW filter on device team0
[ 96.751173][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 96.761901][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 96.771914][ T155] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.779786][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 96.790289][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 96.816203][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 96.825926][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 96.835484][ T155] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.842993][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 96.857384][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 96.877962][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 96.887850][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 96.898583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 96.907829][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 96.917851][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 96.933561][ T4681] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 96.945639][ T4681] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 96.958510][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 96.969196][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 96.980118][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 96.991724][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 97.002399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 97.011811][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 97.153761][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 97.162914][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 97.177552][ T4681] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 97.207191][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 97.217143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 97.250423][ T4681] device veth0_vlan entered promiscuous mode
[ 97.257426][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 97.267749][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 97.279703][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 97.288102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 97.309151][ T4681] device veth1_vlan entered promiscuous mode
[ 97.347396][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 97.358359][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 97.369588][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 97.380258][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 97.393684][ T4681] device veth0_macvtap entered promiscuous mode
[ 97.414015][ T4681] device veth1_macvtap entered promiscuous mode
[ 97.433080][ T4681] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 97.443271][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 97.453206][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 97.462779][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 97.472910][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 97.487065][ T4681] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 97.515279][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 97.527607][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 97.539997][ T4681] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.550652][ T4681] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.560383][ T4681] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 97.570194][ T4681] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.084249][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.111181][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.137876][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 99.150595][ T4353] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.163375][ T4353] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.179212][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 99.419187][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/02/02 03:53:11 executed programs: 0
[ 100.023457][ T4870] chnl_net:caif_netlink_parms(): no params data found
[ 100.089729][ T4870] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.098669][ T4870] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.108659][ T4870] device bridge_slave_0 entered promiscuous mode
[ 100.118841][ T4870] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.127919][ T4870] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.137623][ T4870] device bridge_slave_1 entered promiscuous mode
[ 100.167917][ T4870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 100.180292][ T4870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 100.210277][ T4870] team0: Port device team_slave_0 added
[ 100.220882][ T4870] team0: Port device team_slave_1 added
[ 100.254859][ T4870] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 100.262634][ T4870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 100.290600][ T4870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 100.307311][ T4870] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 100.317224][ T4870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 100.348682][ T4870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 100.390547][ T4870] device hsr_slave_0 entered promiscuous mode
[ 100.400257][ T4870] device hsr_slave_1 entered promiscuous mode
[ 100.407837][ T4870] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 100.418404][ T4870] Cannot create hsr debugfs directory
[ 101.917307][ T4313] Bluetooth: hci0: command 0x0409 tx timeout
[ 102.283265][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.331335][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 102.392881][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.243982][ T4870] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 103.258507][ T4870] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 103.271370][ T4870] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 103.287131][ T4870] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 103.363440][ T4870] 8021q: adding VLAN 0 to HW filter on device bond0
[ 103.398179][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 103.406903][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 103.421798][ T4870] 8021q: adding VLAN 0 to HW filter on device team0
[ 103.447701][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 103.458991][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 103.469420][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.479318][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 103.504975][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 103.516346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 103.525674][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 103.535278][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.542551][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 103.550706][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 103.564204][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 103.589757][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 103.600954][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 103.609858][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 103.620175][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 103.629224][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 103.645847][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 103.654556][ T4389] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 103.668085][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 103.677623][ T4353] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 103.691069][ T4870] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 103.719036][ T9] device hsr_slave_0 left promiscuous mode
[ 103.728728][ T9] device hsr_slave_1 left promiscuous mode
[ 103.739511][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 103.752629][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 103.764540][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 103.772849][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 103.781035][ T9] device bridge_slave_1 left promiscuous mode
[ 103.787779][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 103.796759][ T9] device bridge_slave_0 left promiscuous mode
[ 103.804131][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 103.818473][ T9] device veth1_macvtap left promiscuous mode
[ 103.827884][ T9] device veth0_macvtap left promiscuous mode
[ 103.836185][ T9] device veth1_vlan left promiscuous mode
[ 103.843096][ T9] device veth0_vlan left promiscuous mode
[ 103.977737][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 103.989900][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 103.998763][ T4245] Bluetooth: hci0: command 0x041b tx timeout
[ 104.013644][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 104.030398][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 104.080761][ T9] bond0 (unregistering): Released all slaves
[ 104.240091][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 104.248295][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 104.261012][ T4870] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 104.282399][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 104.292765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 104.310112][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 104.319172][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 104.329665][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 104.338221][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 104.349811][ T4870] device veth0_vlan entered promiscuous mode
[ 104.364105][ T4870] device veth1_vlan entered promiscuous mode
[ 104.383772][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 104.392883][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 104.402430][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 104.412187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 104.422757][ T4870] device veth0_macvtap entered promiscuous mode
[ 104.435491][ T4870] device veth1_macvtap entered promiscuous mode
[ 104.450006][ T4870] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 104.458917][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 104.468550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 104.480425][ T4870] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 104.492326][ T4870] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.501362][ T4870] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.510475][ T4870] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.519879][ T4870] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 104.530174][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 104.539770][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 104.598645][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.614928][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.624256][ T4389] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 104.624569][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 104.641666][ T4389] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 104.658527][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 104.739199][ T5088] loop0: detected capacity change from 0 to 128
[ 104.832974][ T5088] attempt to access beyond end of device
[ 104.832974][ T5088] loop0: rw=0, want=6491538, limit=128
[ 104.859075][ T5088] Buffer I/O error on dev loop0, logical block 3245768, async page read
[ 104.871806][ T5088] ==================================================================
[ 104.880528][ T5088] BUG: KASAN: use-after-free in sysv_new_inode+0x1130/0x12c0
[ 104.888245][ T5088] Read of size 2 at addr ffff88806f6821ce by task syz.0.17/5088
[ 104.895993][ T5088]
[ 104.898583][ T5088] CPU: 1 PID: 5088 Comm: syz.0.17 Not tainted syzkaller #0
[ 104.906215][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 104.916839][ T5088] Call Trace:
[ 104.920594][ T5088]
[ 104.923977][ T5088] dump_stack_lvl+0x188/0x250
[ 104.929353][ T5088] ? show_regs_print_info+0x20/0x20
[ 104.934779][ T5088] ? load_image+0x400/0x400
[ 104.939919][ T5088] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 104.945589][ T5088] ? mutex_lock_io_nested+0x60/0x60
[ 104.952524][ T5088] print_address_description+0x60/0x2d0
[ 104.958650][ T5088] ? sysv_new_inode+0x1130/0x12c0
[ 104.964068][ T5088] kasan_report+0xdf/0x130
[ 104.968703][ T5088] ? sysv_new_inode+0x1130/0x12c0
[ 104.974648][ T5088] sysv_new_inode+0x1130/0x12c0
[ 104.979624][ T5088] ? from_kgid+0x169/0x690
[ 104.984419][ T5088] ? make_kgid+0x660/0x660
[ 104.989785][ T5088] ? sysv_free_inode+0x7e0/0x7e0
[ 104.995621][ T5088] ? generic_permission+0x292/0x510
[ 105.001293][ T5088] sysv_symlink+0x9b/0x150
[ 105.005877][ T5088] vfs_symlink+0x247/0x3d0
[ 105.010489][ T5088] do_symlinkat+0x1ab/0x6b0
[ 105.015014][ T5088] ? vfs_symlink+0x3d0/0x3d0
[ 105.020271][ T5088] ? getname_flags+0x1fe/0x500
[ 105.025782][ T5088] __x64_sys_symlink+0x7a/0x90
[ 105.031014][ T5088] do_syscall_64+0x4c/0xa0
[ 105.036230][ T5088] ? clear_bhb_loop+0x30/0x80
[ 105.041028][ T5088] ? clear_bhb_loop+0x30/0x80
[ 105.045740][ T5088] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 105.052179][ T5088] RIP: 0033:0x7f3a5f597ef9
[ 105.056969][ T5088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 105.078471][ T5088] RSP: 002b:00007f3a5ebfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[ 105.089165][ T5088] RAX: ffffffffffffffda RBX: 00007f3a5f802fa0 RCX: 00007f3a5f597ef9
[ 105.098050][ T5088] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000040
[ 105.107274][ T5088] RBP: 00007f3a5f62cee0 R08: 0000000000000000 R09: 0000000000000000
[ 105.117177][ T5088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 105.125833][ T5088] R13: 00007f3a5f803038 R14: 00007f3a5f802fa0 R15: 00007ffcfdd99928
[ 105.134383][ T5088]
[ 105.137600][ T5088]
[ 105.140021][ T5088] The buggy address belongs to the page:
[ 105.145833][ T5088] page:ffffea0001bda080 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6f682
[ 105.156355][ T5088] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 105.164462][ T5088] raw: 00fff00000000000 ffffea0000280b48 ffffea00016c0008 0000000000000000
[ 105.173238][ T5088] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 105.182291][ T5088] page dumped because: kasan: bad access detected
[ 105.189071][ T5088] page_owner tracks the page as freed
[ 105.194884][ T5088] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 5086, ts 104217235416, free_ts 104235859201
[ 105.211255][ T5088] get_page_from_freelist+0x1bbd/0x1ca0
[ 105.218304][ T5088] __alloc_pages+0x1ee/0x480
[ 105.223974][ T5088] alloc_pages_vma+0x393/0x7c0
[ 105.229544][ T5088] wp_page_copy+0x24b/0x2050
[ 105.235296][ T5088] handle_mm_fault+0x1f06/0x4410
[ 105.240447][ T5088] do_user_addr_fault+0x489/0xc80
[ 105.246452][ T5088] exc_page_fault+0x60/0x100
[ 105.251751][ T5088] asm_exc_page_fault+0x22/0x30
[ 105.256784][ T5088] page last free stack trace:
[ 105.261761][ T5088] free_unref_page_prepare+0x637/0x6c0
[ 105.267955][ T5088] free_unref_page_list+0x119/0x820
[ 105.273173][ T5088] release_pages+0x186c/0x1be0
[ 105.278088][ T5088] tlb_finish_mmu+0x176/0x300
[ 105.282960][ T5088] exit_mmap+0x3d0/0x640
[ 105.287399][ T5088] __mmput+0x115/0x3b0
[ 105.291479][ T5088] exit_mm+0x588/0x6e0
[ 105.296159][ T5088] do_exit+0x5a9/0x20c0
[ 105.300428][ T5088] do_group_exit+0x12e/0x300
[ 105.305038][ T5088] __x64_sys_exit_group+0x3b/0x40
[ 105.310161][ T5088] do_syscall_64+0x4c/0xa0
[ 105.314682][ T5088] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 105.321185][ T5088]
[ 105.323613][ T5088] Memory state around the buggy address:
[ 105.330465][ T5088] ffff88806f682080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 105.338914][ T5088] ffff88806f682100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 105.347511][ T5088] >ffff88806f682180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 105.355674][ T5088] ^
[ 105.362276][ T5088] ffff88806f682200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 105.370706][ T5088] ffff88806f682280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 105.379172][ T5088] ==================================================================
[ 105.389155][ T5088] Disabling lock debugging due to kernel taint
[ 105.405346][ T5088] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 105.412954][ T5088] CPU: 1 PID: 5088 Comm: syz.0.17 Tainted: G B syzkaller #0
[ 105.421651][ T5088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 105.432149][ T5088] Call Trace:
[ 105.435429][ T5088]
[ 105.438366][ T5088] dump_stack_lvl+0x188/0x250
[ 105.443589][ T5088] ? show_regs_print_info+0x20/0x20
[ 105.448783][ T5088] ? load_image+0x400/0x400
[ 105.453472][ T5088] panic+0x2e5/0x810
[ 105.457380][ T5088] ? bpf_jit_dump+0xd0/0xd0
[ 105.462225][ T5088] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 105.468611][ T5088] ? _raw_spin_unlock+0x40/0x40
[ 105.473564][ T5088] ? sysv_new_inode+0x1130/0x12c0
[ 105.479099][ T5088] check_panic_on_warn+0x80/0xa0
[ 105.484281][ T5088] ? sysv_new_inode+0x1130/0x12c0
[ 105.489298][ T5088] end_report+0x6d/0xf0
[ 105.493693][ T5088] kasan_report+0x102/0x130
[ 105.498355][ T5088] ? sysv_new_inode+0x1130/0x12c0
[ 105.503539][ T5088] sysv_new_inode+0x1130/0x12c0
[ 105.508409][ T5088] ? from_kgid+0x169/0x690
[ 105.512912][ T5088] ? make_kgid+0x660/0x660
[ 105.517327][ T5088] ? sysv_free_inode+0x7e0/0x7e0
[ 105.522473][ T5088] ? generic_permission+0x292/0x510
[ 105.528188][ T5088] sysv_symlink+0x9b/0x150
[ 105.532867][ T5088] vfs_symlink+0x247/0x3d0
[ 105.537637][ T5088] do_symlinkat+0x1ab/0x6b0
[ 105.542138][ T5088] ? vfs_symlink+0x3d0/0x3d0
[ 105.546968][ T5088] ? getname_flags+0x1fe/0x500
[ 105.551887][ T5088] __x64_sys_symlink+0x7a/0x90
[ 105.556631][ T5088] do_syscall_64+0x4c/0xa0
[ 105.561209][ T5088] ? clear_bhb_loop+0x30/0x80
[ 105.566093][ T5088] ? clear_bhb_loop+0x30/0x80
[ 105.570819][ T5088] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 105.576892][ T5088] RIP: 0033:0x7f3a5f597ef9
[ 105.581583][ T5088] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 105.604851][ T5088] RSP: 002b:00007f3a5ebfb028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058
[ 105.614469][ T5088] RAX: ffffffffffffffda RBX: 00007f3a5f802fa0 RCX: 00007f3a5f597ef9
[ 105.623226][ T5088] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000040
[ 105.631647][ T5088] RBP: 00007f3a5f62cee0 R08: 0000000000000000 R09: 0000000000000000
[ 105.639984][ T5088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 105.648311][ T5088] R13: 00007f3a5f803038 R14: 00007f3a5f802fa0 R15: 00007ffcfdd99928
[ 105.657087][ T5088]
[ 105.660761][ T5088] Kernel Offset: disabled
[ 105.666178][ T5088] Rebooting in 86400 seconds..