Warning: Permanently added '10.128.1.182' (ED25519) to the list of known hosts. 2026/04/21 13:09:56 parsed 1 programs [ 97.231020][ T1225] cfg80211: failed to load regulatory.db [ 97.433812][ T5846] cgroup: Unknown subsys name 'net' [ 97.531720][ T5846] cgroup: Unknown subsys name 'cpuset' [ 97.541386][ T5846] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 99.459075][ T5846] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 102.411061][ T5861] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 103.284722][ T5871] chnl_net:caif_netlink_parms(): no params data found [ 103.392612][ T5871] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.399941][ T5871] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.407609][ T5871] bridge_slave_0: entered allmulticast mode [ 103.415513][ T5871] bridge_slave_0: entered promiscuous mode [ 103.428250][ T5871] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.435474][ T5871] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.442813][ T5871] bridge_slave_1: entered allmulticast mode [ 103.450668][ T5871] bridge_slave_1: entered promiscuous mode [ 103.485523][ T5871] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.497856][ T5871] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.530834][ T5871] team0: Port device team_slave_0 added [ 103.539483][ T5871] team0: Port device team_slave_1 added [ 103.571666][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.578727][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.604758][ T5871] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.617921][ T5871] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.624917][ T5871] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 103.651071][ T5871] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.708124][ T5871] hsr_slave_0: entered promiscuous mode [ 103.714755][ T5871] hsr_slave_1: entered promiscuous mode [ 103.896435][ T5871] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.911364][ T5871] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 103.919515][ T5871] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.930043][ T5871] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 103.938095][ T5871] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.950022][ T5871] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 103.959417][ T5871] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.971467][ T5871] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 104.068413][ T5871] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.093323][ T5871] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.109100][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.117316][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.138455][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.145667][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.373496][ T5871] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.429932][ T5871] veth0_vlan: entered promiscuous mode [ 104.443672][ T5871] veth1_vlan: entered promiscuous mode [ 104.482246][ T5871] veth0_macvtap: entered promiscuous mode [ 104.493135][ T5871] veth1_macvtap: entered promiscuous mode [ 104.518878][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.537117][ T5871] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.556546][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.570475][ T72] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.580778][ T72] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.594892][ T72] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.786634][ T72] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.870120][ T72] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.975315][ T72] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.061956][ T72] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.577735][ T5163] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.585984][ T5163] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.595369][ T5163] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.605519][ T5163] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.614739][ T5163] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 106.933041][ T1120] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.941170][ T1120] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.983520][ T1120] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.991881][ T1120] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.730376][ T72] bridge_slave_1: left allmulticast mode [ 107.747072][ T72] bridge_slave_1: left promiscuous mode [ 107.759969][ T72] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.800348][ T72] bridge_slave_0: left allmulticast mode [ 107.807779][ T72] bridge_slave_0: left promiscuous mode [ 107.814287][ T72] bridge0: port 1(bridge_slave_0) entered disabled state 2026/04/21 13:10:12 executed programs: 0 [ 108.183571][ T5163] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 108.195200][ T5163] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 108.205939][ T5163] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 108.222775][ T5163] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 108.232379][ T5163] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 108.259626][ T72] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 108.276661][ T72] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 108.288266][ T72] bond0 (unregistering): Released all slaves [ 108.434794][ T72] hsr_slave_0: left promiscuous mode [ 108.441761][ T72] hsr_slave_1: left promiscuous mode [ 108.448805][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.457979][ T72] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.467320][ T72] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.474824][ T72] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.496607][ T72] veth1_macvtap: left promiscuous mode [ 108.503196][ T72] veth0_macvtap: left promiscuous mode [ 108.510693][ T72] veth1_vlan: left promiscuous mode [ 108.520660][ T72] veth0_vlan: left promiscuous mode [ 108.829791][ T72] team0 (unregistering): Port device team_slave_1 removed [ 108.846359][ T72] team0 (unregistering): Port device team_slave_0 removed [ 108.993851][ T5507] 8021q: adding VLAN 0 to HW filter on device eth1 [ 109.194988][ T5958] chnl_net:caif_netlink_parms(): no params data found [ 109.381433][ T5958] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.390524][ T5958] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.398128][ T5958] bridge_slave_0: entered allmulticast mode [ 109.406248][ T5958] bridge_slave_0: entered promiscuous mode [ 109.421095][ T5958] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.430193][ T5958] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.438291][ T5958] bridge_slave_1: entered allmulticast mode [ 109.455768][ T5958] bridge_slave_1: entered promiscuous mode [ 109.502617][ T5958] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.523289][ T5958] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.268083][ T50] Bluetooth: hci0: command tx timeout [ 110.315420][ T5507] 8021q: adding VLAN 0 to HW filter on device eth2 [ 110.339073][ T5958] team0: Port device team_slave_0 added [ 110.351516][ T5958] team0: Port device team_slave_1 added [ 110.401700][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.409511][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.436778][ T5958] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.465970][ T5958] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.475448][ T5958] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 110.502776][ T5958] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.637623][ T5958] hsr_slave_0: entered promiscuous mode [ 110.645467][ T5958] hsr_slave_1: entered promiscuous mode [ 111.642120][ T5958] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 111.654728][ T5958] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 111.668086][ T5958] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 111.686542][ T5958] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 111.694838][ T5958] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 111.708249][ T5958] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 111.716416][ T5958] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 111.728245][ T5958] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 111.912235][ T5958] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.941500][ T5958] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.957790][ T72] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.965045][ T72] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.988277][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.995543][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.319372][ T5958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 112.347886][ T50] Bluetooth: hci0: command tx timeout [ 112.396147][ T5958] veth0_vlan: entered promiscuous mode [ 112.413197][ T5958] veth1_vlan: entered promiscuous mode [ 112.466744][ T5958] veth0_macvtap: entered promiscuous mode [ 112.482111][ T5958] veth1_macvtap: entered promiscuous mode [ 112.510108][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.540701][ T5958] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 112.563400][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.586124][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.612697][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.629952][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.720707][ T1105] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.732116][ T1105] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.776103][ T1105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.786034][ T1105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.878894][ T6044] ================================================================== [ 112.887124][ T6044] BUG: KASAN: slab-out-of-bounds in cache_seq_start_rcu+0x3fe/0x420 [ 112.895170][ T6044] Read of size 8 at addr ffff88802ae92800 by task syz.0.17/6044 [ 112.902840][ T6044] [ 112.905303][ T6044] CPU: 1 UID: 0 PID: 6044 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 112.905339][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 112.905364][ T6044] Call Trace: [ 112.905374][ T6044] [ 112.905385][ T6044] dump_stack_lvl+0x100/0x190 [ 112.905419][ T6044] print_report+0x13d/0x4b0 [ 112.905459][ T6044] ? __virt_addr_valid+0x239/0x430 [ 112.905503][ T6044] ? cache_seq_start_rcu+0x3fe/0x420 [ 112.905528][ T6044] kasan_report+0xdf/0x1d0 [ 112.905558][ T6044] ? cache_seq_start_rcu+0x3fe/0x420 [ 112.905587][ T6044] cache_seq_start_rcu+0x3fe/0x420 [ 112.905616][ T6044] seq_read_iter+0x2c1/0x1270 [ 112.905651][ T6044] seq_read+0x33b/0x4c0 [ 112.905677][ T6044] ? __pfx_seq_read+0x10/0x10 [ 112.905706][ T6044] ? futex_hash+0x141/0x370 [ 112.905755][ T6044] ? __pfx_seq_read+0x10/0x10 [ 112.905781][ T6044] proc_reg_read+0x240/0x330 [ 112.905810][ T6044] ? __pfx_proc_reg_read+0x10/0x10 [ 112.905840][ T6044] vfs_read+0x1e4/0xb30 [ 112.905880][ T6044] ? __pfx_vfs_read+0x10/0x10 [ 112.905907][ T6044] ? do_futex+0x192/0x350 [ 112.905950][ T6044] ? __pfx_do_futex+0x10/0x10 [ 112.905976][ T6044] ? find_held_lock+0x2b/0x80 [ 112.906015][ T6044] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 112.906061][ T6044] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 112.906099][ T6044] ? __x64_sys_futex+0x34f/0x4d0 [ 112.906126][ T6044] ? __x64_sys_futex+0x358/0x4d0 [ 112.906155][ T6044] __x64_sys_pread64+0x1eb/0x250 [ 112.906186][ T6044] ? __pfx___x64_sys_pread64+0x10/0x10 [ 112.906219][ T6044] ? rcu_is_watching+0x12/0xc0 [ 112.906252][ T6044] do_syscall_64+0x10b/0xf80 [ 112.906289][ T6044] ? clear_bhb_loop+0x40/0x90 [ 112.906319][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 112.906353][ T6044] RIP: 0033:0x7f88b8d9c819 [ 112.906375][ T6044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 112.906405][ T6044] RSP: 002b:00007ffc567f4a98 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 112.906434][ T6044] RAX: ffffffffffffffda RBX: 00007f88b9015fa0 RCX: 00007f88b8d9c819 [ 112.906452][ T6044] RDX: 0000000000000566 RSI: 0000000000000000 RDI: 0000000000000003 [ 112.906468][ T6044] RBP: 00007f88b8e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 112.906484][ T6044] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000000 [ 112.906501][ T6044] R13: 00007f88b9015fac R14: 00007f88b9015fa0 R15: 00007f88b9015fa0 [ 112.906527][ T6044] [ 112.906535][ T6044] [ 113.154730][ T6044] Allocated by task 5958: [ 113.159100][ T6044] kasan_save_stack+0x30/0x50 [ 113.163828][ T6044] kasan_save_track+0x14/0x30 [ 113.168534][ T6044] __kasan_kmalloc+0xaa/0xb0 [ 113.173159][ T6044] __kmalloc_noprof+0x301/0x850 [ 113.178064][ T6044] cache_create_net+0xa2/0x1f0 [ 113.182870][ T6044] nfsd_export_init+0x62/0x250 [ 113.187679][ T6044] nfsd_net_init+0x69/0x3e0 [ 113.192227][ T6044] ops_init+0x1e2/0x5f0 [ 113.196415][ T6044] setup_net+0x118/0x3a0 [ 113.200691][ T6044] copy_net_ns+0x46f/0x7c0 [ 113.205141][ T6044] create_new_namespaces+0x3ea/0xac0 [ 113.210471][ T6044] unshare_nsproxy_namespaces+0xf2/0x220 [ 113.216145][ T6044] ksys_unshare+0x438/0xab0 [ 113.220694][ T6044] __x64_sys_unshare+0x31/0x40 [ 113.225504][ T6044] do_syscall_64+0x10b/0xf80 [ 113.230147][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.236071][ T6044] [ 113.238420][ T6044] The buggy address belongs to the object at ffff88802ae92000 [ 113.238420][ T6044] which belongs to the cache kmalloc-2k of size 2048 [ 113.252504][ T6044] The buggy address is located 0 bytes to the right of [ 113.252504][ T6044] allocated 2048-byte region [ffff88802ae92000, ffff88802ae92800) [ 113.267390][ T6044] [ 113.269760][ T6044] The buggy address belongs to the physical page: [ 113.276213][ T6044] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2ae90 [ 113.285131][ T6044] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 113.293771][ T6044] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 113.301376][ T6044] page_type: f5(slab) [ 113.305399][ T6044] raw: 00fff00000000040 ffff88813fe86000 dead000000000100 dead000000000122 [ 113.314058][ T6044] raw: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 113.322682][ T6044] head: 00fff00000000040 ffff88813fe86000 dead000000000100 dead000000000122 [ 113.331386][ T6044] head: 0000000000000000 0000000800080008 00000000f5000000 0000000000000000 [ 113.340088][ T6044] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 113.348799][ T6044] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 113.357495][ T6044] page dumped because: kasan: bad access detected [ 113.363962][ T6044] page_owner tracks the page as allocated [ 113.369698][ T6044] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5958, tgid 5958 (syz-executor), ts 108313513495, free_ts 108309100167 [ 113.391270][ T6044] post_alloc_hook+0x153/0x170 [ 113.396081][ T6044] get_page_from_freelist+0x11a6/0x33b0 [ 113.401680][ T6044] __alloc_frozen_pages_noprof+0x27c/0x2bc0 [ 113.407626][ T6044] new_slab+0xa6/0x6c0 [ 113.411760][ T6044] refill_objects+0x277/0x420 [ 113.416481][ T6044] __pcs_replace_empty_main+0x375/0x650 [ 113.422122][ T6044] __kmalloc_cache_noprof+0x493/0x6f0 [ 113.427549][ T6044] netdev_init+0x151/0x3c0 [ 113.432003][ T6044] ops_init+0x1e2/0x5f0 [ 113.436184][ T6044] setup_net+0x118/0x3a0 [ 113.440456][ T6044] copy_net_ns+0x46f/0x7c0 [ 113.444904][ T6044] create_new_namespaces+0x3ea/0xac0 [ 113.450233][ T6044] unshare_nsproxy_namespaces+0xf2/0x220 [ 113.455907][ T6044] ksys_unshare+0x438/0xab0 [ 113.460558][ T6044] __x64_sys_unshare+0x31/0x40 [ 113.465395][ T6044] do_syscall_64+0x10b/0xf80 [ 113.470048][ T6044] page last free pid 5958 tgid 5958 stack trace: [ 113.476426][ T6044] __free_frozen_pages+0x747/0x1040 [ 113.481772][ T6044] qlist_free_all+0x47/0xf0 [ 113.486334][ T6044] kasan_quarantine_reduce+0x1a0/0x1f0 [ 113.491846][ T6044] __kasan_slab_alloc+0x69/0x90 [ 113.496731][ T6044] kmem_cache_alloc_node_noprof+0x25a/0x6f0 [ 113.502676][ T6044] __alloc_skb+0x140/0x710 [ 113.507138][ T6044] netlink_ack+0x117/0xb80 [ 113.511593][ T6044] netlink_rcv_skb+0x333/0x420 [ 113.516397][ T6044] netlink_unicast+0x585/0x850 [ 113.521191][ T6044] netlink_sendmsg+0x8b0/0xda0 [ 113.525988][ T6044] __sys_sendto+0x468/0x4b0 [ 113.530627][ T6044] __x64_sys_sendto+0xe0/0x1c0 [ 113.535434][ T6044] do_syscall_64+0x10b/0xf80 [ 113.540066][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.546001][ T6044] [ 113.548352][ T6044] Memory state around the buggy address: [ 113.554010][ T6044] ffff88802ae92700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 113.562099][ T6044] ffff88802ae92780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 113.570278][ T6044] >ffff88802ae92800: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 113.578363][ T6044] ^ [ 113.582451][ T6044] ffff88802ae92880: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 113.590542][ T6044] ffff88802ae92900: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 113.598653][ T6044] ================================================================== [ 113.666970][ T6044] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 113.674247][ T6044] CPU: 0 UID: 0 PID: 6044 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 113.683418][ T6044] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 113.693608][ T6044] Call Trace: [ 113.696936][ T6044] [ 113.699919][ T6044] dump_stack_lvl+0x100/0x190 [ 113.704683][ T6044] vpanic+0x552/0x970 [ 113.708725][ T6044] ? __pfx_vpanic+0x10/0x10 [ 113.713295][ T6044] ? cache_seq_start_rcu+0x3fe/0x420 [ 113.718629][ T6044] panic+0xd1/0xe0 [ 113.722404][ T6044] ? __pfx_panic+0x10/0x10 [ 113.726912][ T6044] ? cache_seq_start_rcu+0x3fe/0x420 [ 113.732269][ T6044] ? preempt_schedule_common+0x42/0xc0 [ 113.737795][ T6044] ? check_panic_on_warn+0x1f/0x90 [ 113.742961][ T6044] check_panic_on_warn.cold+0x19/0x34 [ 113.748381][ T6044] end_report.part.0+0x3a/0x90 [ 113.753201][ T6044] kasan_report.cold+0xe/0x18 [ 113.758015][ T6044] ? cache_seq_start_rcu+0x3fe/0x420 [ 113.763344][ T6044] cache_seq_start_rcu+0x3fe/0x420 [ 113.768529][ T6044] seq_read_iter+0x2c1/0x1270 [ 113.773291][ T6044] seq_read+0x33b/0x4c0 [ 113.777486][ T6044] ? __pfx_seq_read+0x10/0x10 [ 113.782207][ T6044] ? futex_hash+0x141/0x370 [ 113.786785][ T6044] ? __pfx_seq_read+0x10/0x10 [ 113.791499][ T6044] proc_reg_read+0x240/0x330 [ 113.796234][ T6044] ? __pfx_proc_reg_read+0x10/0x10 [ 113.801410][ T6044] vfs_read+0x1e4/0xb30 [ 113.805606][ T6044] ? __pfx_vfs_read+0x10/0x10 [ 113.810318][ T6044] ? do_futex+0x192/0x350 [ 113.814688][ T6044] ? __pfx_do_futex+0x10/0x10 [ 113.819466][ T6044] ? find_held_lock+0x2b/0x80 [ 113.824181][ T6044] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 113.830642][ T6044] ? count_memcg_events_mm.constprop.0+0xfa/0x2a0 [ 113.837186][ T6044] ? __x64_sys_futex+0x34f/0x4d0 [ 113.842167][ T6044] ? __x64_sys_futex+0x358/0x4d0 [ 113.847142][ T6044] __x64_sys_pread64+0x1eb/0x250 [ 113.852122][ T6044] ? __pfx___x64_sys_pread64+0x10/0x10 [ 113.857621][ T6044] ? rcu_is_watching+0x12/0xc0 [ 113.862434][ T6044] do_syscall_64+0x10b/0xf80 [ 113.867072][ T6044] ? clear_bhb_loop+0x40/0x90 [ 113.871806][ T6044] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.877731][ T6044] RIP: 0033:0x7f88b8d9c819 [ 113.882288][ T6044] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 113.901946][ T6044] RSP: 002b:00007ffc567f4a98 EFLAGS: 00000246 ORIG_RAX: 0000000000000011 [ 113.910408][ T6044] RAX: ffffffffffffffda RBX: 00007f88b9015fa0 RCX: 00007f88b8d9c819 [ 113.918510][ T6044] RDX: 0000000000000566 RSI: 0000000000000000 RDI: 0000000000000003 [ 113.926681][ T6044] RBP: 00007f88b8e32c91 R08: 0000000000000000 R09: 0000000000000000 [ 113.934858][ T6044] R10: 0000000080000002 R11: 0000000000000246 R12: 0000000000000000 [ 113.942944][ T6044] R13: 00007f88b9015fac R14: 00007f88b9015fa0 R15: 00007f88b9015fa0 [ 113.950957][ T6044] [ 113.954426][ T6044] Kernel Offset: disabled [ 113.958760][ T6044] Rebooting in 86400 seconds..