Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts.
2026/06/19 22:00:08 parsed 1 programs
[ 106.484967][ T4526] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 108.712834][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.725850][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.743139][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 108.758427][ T4267] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 108.767762][ T4267] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 108.776120][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 110.472942][ T4714] chnl_net:caif_netlink_parms(): no params data found
[ 110.519008][ T4714] bridge0: port 1(bridge_slave_0) entered blocking state
[ 110.527303][ T4714] bridge0: port 1(bridge_slave_0) entered disabled state
[ 110.536249][ T4714] device bridge_slave_0 entered promiscuous mode
[ 110.565677][ T4714] bridge0: port 2(bridge_slave_1) entered blocking state
[ 110.572836][ T4714] bridge0: port 2(bridge_slave_1) entered disabled state
[ 110.581950][ T4714] device bridge_slave_1 entered promiscuous mode
[ 110.607069][ T4714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 110.637692][ T4714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 110.663551][ T4714] team0: Port device team_slave_0 added
[ 110.671790][ T4714] team0: Port device team_slave_1 added
[ 110.691919][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 110.699696][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 110.726607][ T4714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 110.739821][ T4714] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 110.747208][ T4714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 110.773686][ T4714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 110.824325][ T4714] device hsr_slave_0 entered promiscuous mode
[ 110.831733][ T4714] device hsr_slave_1 entered promiscuous mode
[ 111.428437][ T4714] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 111.444073][ T4714] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 111.476561][ T4714] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 111.486823][ T4714] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 111.589075][ T4714] 8021q: adding VLAN 0 to HW filter on device bond0
[ 111.627201][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 111.642020][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 111.666663][ T4714] 8021q: adding VLAN 0 to HW filter on device team0
[ 111.679800][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 111.692206][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 111.703322][ T4228] bridge0: port 1(bridge_slave_0) entered blocking state
[ 111.710531][ T4228] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 111.741464][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 111.764106][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 111.772926][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 111.785766][ T4228] bridge0: port 2(bridge_slave_1) entered blocking state
[ 111.793297][ T4228] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 111.801652][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 111.812191][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 111.822139][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 111.833022][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 111.886385][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 111.897211][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 111.910806][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 111.923778][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 111.932575][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 111.943625][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 111.952284][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 111.969768][ T4714] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 112.202031][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 112.212805][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 112.228840][ T4714] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 112.252377][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 112.265501][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 112.298381][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 112.309413][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 112.324667][ T4714] device veth0_vlan entered promiscuous mode
[ 112.334391][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 112.342662][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 112.356137][ T4714] device veth1_vlan entered promiscuous mode
[ 112.386103][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 112.397498][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 112.407834][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 112.418687][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 112.431177][ T4714] device veth0_macvtap entered promiscuous mode
[ 112.449293][ T4714] device veth1_macvtap entered promiscuous mode
[ 112.478687][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 112.487679][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 112.499017][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 112.508256][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 112.519200][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 112.532715][ T4714] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 112.543935][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 112.564070][ T4228] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 112.579951][ T4714] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.590943][ T4714] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.601214][ T4714] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 112.615288][ T4714] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/06/19 22:00:20 executed programs: 0
[ 113.938006][ T4808] chnl_net:caif_netlink_parms(): no params data found
[ 114.051757][ T4808] bridge0: port 1(bridge_slave_0) entered blocking state
[ 114.060087][ T4808] bridge0: port 1(bridge_slave_0) entered disabled state
[ 114.068672][ T4808] device bridge_slave_0 entered promiscuous mode
[ 114.077643][ T4808] bridge0: port 2(bridge_slave_1) entered blocking state
[ 114.084902][ T4808] bridge0: port 2(bridge_slave_1) entered disabled state
[ 114.093184][ T4808] device bridge_slave_1 entered promiscuous mode
[ 114.120104][ T4808] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 114.133611][ T4808] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 114.163645][ T4808] team0: Port device team_slave_0 added
[ 114.172494][ T4808] team0: Port device team_slave_1 added
[ 114.213913][ T4808] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 114.221203][ T4808] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 114.248630][ T4808] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 114.261663][ T4808] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 114.269501][ T4808] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 114.295914][ T4808] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 114.386684][ T4808] device hsr_slave_0 entered promiscuous mode
[ 114.403934][ T4808] device hsr_slave_1 entered promiscuous mode
[ 114.413518][ T4808] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 114.421214][ T4808] Cannot create hsr debugfs directory
[ 114.636178][ T4808] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 115.743427][ T4346] Bluetooth: hci0: command 0x0409 tx timeout
[ 117.563692][ T4808] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 117.633669][ T4808] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 117.708208][ T4808] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 117.829669][ T4808] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 117.837173][ T4701] Bluetooth: hci0: command 0x041b tx timeout
[ 117.873162][ T4808] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 117.886432][ T4808] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 117.907462][ T4808] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 118.012231][ T4808] 8021q: adding VLAN 0 to HW filter on device bond0
[ 118.030134][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 118.042206][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 118.055571][ T4808] 8021q: adding VLAN 0 to HW filter on device team0
[ 118.095808][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 118.108680][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 118.118240][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 118.125781][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 118.189777][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 118.199253][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 118.210833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 118.219666][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 118.226952][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 118.240519][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 118.250081][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 118.262185][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 118.273166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 118.284570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 118.296093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 118.312945][ T4808] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 118.327618][ T4808] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 118.344054][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 118.355540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 118.366150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 118.377700][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 118.387991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 118.403056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 118.539461][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 118.548811][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 118.570826][ T144] device hsr_slave_0 left promiscuous mode
[ 118.579459][ T144] device hsr_slave_1 left promiscuous mode
[ 118.588705][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 118.597797][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 118.608065][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 118.617231][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 118.626968][ T144] device bridge_slave_1 left promiscuous mode
[ 118.633542][ T144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 118.642576][ T144] device bridge_slave_0 left promiscuous mode
[ 118.652657][ T144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 118.666318][ T144] device veth1_macvtap left promiscuous mode
[ 118.672424][ T144] device veth0_macvtap left promiscuous mode
[ 118.682744][ T144] device veth1_vlan left promiscuous mode
[ 118.688853][ T144] device veth0_vlan left promiscuous mode
[ 118.943422][ T144] team0 (unregistering): Port device team_slave_1 removed
[ 118.961803][ T144] team0 (unregistering): Port device team_slave_0 removed
[ 118.981184][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 119.000475][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 119.087318][ T144] bond0 (unregistering): Released all slaves
[ 119.159388][ T4808] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 119.192335][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 119.202013][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 119.235094][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 119.247192][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 119.258989][ T4808] device veth0_vlan entered promiscuous mode
[ 119.266793][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 119.276029][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 119.290052][ T4808] device veth1_vlan entered promiscuous mode
[ 119.323075][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 119.332799][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 119.344754][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 119.356263][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 119.368831][ T4808] device veth0_macvtap entered promiscuous mode
[ 119.384814][ T4808] device veth1_macvtap entered promiscuous mode
[ 119.406114][ T4808] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 119.415322][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 119.426418][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 119.435583][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 119.446994][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 119.461816][ T4808] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 119.471308][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 119.507989][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 119.536773][ T4808] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.550866][ T4808] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.560488][ T4808] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.572713][ T4808] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 119.677686][ T4267] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.693150][ T4267] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.715312][ T416] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2026/06/19 22:00:26 executed programs: 2
[ 119.742891][ T416] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 119.752256][ T416] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 119.764896][ T4267] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 119.859654][ T5083] loop0: detected capacity change from 0 to 128
[ 119.913349][ T4701] Bluetooth: hci0: command 0x040f tx timeout
[ 119.922133][ T5083] VFS: Found a Xenix FS (block size = 1024) on device loop0
[ 119.941506][ T5083] ==================================================================
[ 119.949939][ T5083] BUG: KASAN: use-after-free in sysv_new_inode+0x1105/0x1290
[ 119.957635][ T5083] Read of size 2 at addr ffff88805e5ad1ce by task syz.0.17/5083
[ 119.965309][ T5083]
[ 119.968021][ T5083] CPU: 0 PID: 5083 Comm: syz.0.17 Not tainted syzkaller #0
[ 119.975245][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 119.985348][ T5083] Call Trace:
[ 119.988783][ T5083]
[ 119.991748][ T5083] dump_stack_lvl+0x188/0x250
[ 119.996468][ T5083] ? show_regs_print_info+0x20/0x20
[ 120.001706][ T5083] ? load_image+0x410/0x410
[ 120.006258][ T5083] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 120.011850][ T5083] ? mutex_lock_io_nested+0x60/0x60
[ 120.017661][ T5083] print_address_description+0x60/0x2d0
[ 120.023729][ T5083] ? sysv_new_inode+0x1105/0x1290
[ 120.029152][ T5083] kasan_report+0xdf/0x130
[ 120.033605][ T5083] ? sysv_new_inode+0x1105/0x1290
[ 120.038755][ T5083] sysv_new_inode+0x1105/0x1290
[ 120.043743][ T5083] ? __rwlock_init+0x140/0x140
[ 120.048719][ T5083] ? sysv_find_entry+0x554/0x5e0
[ 120.053874][ T5083] ? sysv_free_inode+0x7e0/0x7e0
[ 120.058887][ T5083] ? __d_add+0x4cc/0x800
[ 120.063583][ T5083] sysv_mknod+0x4a/0xd0
[ 120.068132][ T5083] ? sysv_lookup+0xe0/0xe0
[ 120.072854][ T5083] path_openat+0x120a/0x2fb0
[ 120.077529][ T5083] ? do_filp_open+0x400/0x400
[ 120.082295][ T5083] do_filp_open+0x1df/0x400
[ 120.086865][ T5083] ? vfs_tmpfile+0x300/0x300
[ 120.091537][ T5083] ? _raw_spin_unlock+0x24/0x40
[ 120.096713][ T5083] ? alloc_fd+0x59e/0x650
[ 120.101258][ T5083] do_sys_openat2+0x14b/0x500
[ 120.106094][ T5083] ? __lock_acquire+0x7b50/0x7b50
[ 120.111273][ T5083] ? do_sys_open+0xe0/0xe0
[ 120.115827][ T5083] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 120.122087][ T5083] ? lock_chain_count+0x20/0x20
[ 120.127529][ T5083] __x64_sys_openat+0x135/0x160
[ 120.132422][ T5083] do_syscall_64+0x4c/0xa0
[ 120.137611][ T5083] ? clear_bhb_loop+0x30/0x80
[ 120.142415][ T5083] ? clear_bhb_loop+0x30/0x80
[ 120.147539][ T5083] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 120.153678][ T5083] RIP: 0033:0x7f82cad0f379
[ 120.158337][ T5083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 120.178496][ T5083] RSP: 002b:00007f82ca373028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 120.187151][ T5083] RAX: ffffffffffffffda RBX: 00007f82caf4afa0 RCX: 00007f82cad0f379
[ 120.195342][ T5083] RDX: 0000000000000042 RSI: 0000200000000440 RDI: ffffffffffffff9c
[ 120.203347][ T5083] RBP: 00007f82cada2d68 R08: 0000000000000000 R09: 0000000000000000
[ 120.211355][ T5083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 120.219394][ T5083] R13: 00007f82caf4b038 R14: 00007f82caf4afa0 R15: 00007fff26500838
[ 120.227706][ T5083]
[ 120.230753][ T5083]
[ 120.233148][ T5083] The buggy address belongs to the page:
[ 120.238895][ T5083] page:ffffea0001796b40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x5e5ad
[ 120.249666][ T5083] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 120.256945][ T5083] raw: 00fff00000000000 ffffea000187cfc8 ffffea0001bd8788 0000000000000000
[ 120.265665][ T5083] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 120.274476][ T5083] page dumped because: kasan: bad access detected
[ 120.281105][ T5083] page_owner tracks the page as freed
[ 120.286627][ T5083] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 5063, ts 119016472133, free_ts 119065878363
[ 120.301783][ T5083] get_page_from_freelist+0x24f6/0x2670
[ 120.307392][ T5083] __alloc_pages+0x1ee/0x480
[ 120.312027][ T5083] alloc_pages_vma+0x2bc/0x790
[ 120.317215][ T5083] wp_page_copy+0x252/0x2090
[ 120.322036][ T5083] handle_mm_fault+0x1fbd/0x4440
[ 120.327273][ T5083] do_user_addr_fault+0x494/0xc90
[ 120.332433][ T5083] exc_page_fault+0x60/0x100
[ 120.337062][ T5083] asm_exc_page_fault+0x22/0x30
[ 120.342173][ T5083] page last free stack trace:
[ 120.346966][ T5083] free_unref_page_prepare+0x637/0x6c0
[ 120.352649][ T5083] free_unref_page_list+0x119/0x830
[ 120.358120][ T5083] release_pages+0x185f/0x1bd0
[ 120.363183][ T5083] tlb_finish_mmu+0x1b4/0x370
[ 120.368427][ T5083] exit_mmap+0x3d0/0x640
[ 120.372793][ T5083] __mmput+0x115/0x390
[ 120.377365][ T5083] exit_mm+0x632/0x7b0
[ 120.381840][ T5083] do_exit+0x5b8/0x2110
[ 120.386636][ T5083] do_group_exit+0x12c/0x2f0
[ 120.391280][ T5083] __x64_sys_exit_group+0x3b/0x40
[ 120.396367][ T5083] do_syscall_64+0x4c/0xa0
[ 120.400824][ T5083] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 120.406836][ T5083]
[ 120.409192][ T5083] Memory state around the buggy address:
[ 120.415244][ T5083] ffff88805e5ad080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 120.423337][ T5083] ffff88805e5ad100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 120.431613][ T5083] >ffff88805e5ad180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 120.439784][ T5083] ^
[ 120.446454][ T5083] ffff88805e5ad200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 120.455527][ T5083] ffff88805e5ad280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 120.463892][ T5083] ==================================================================
[ 120.472262][ T5083] Disabling lock debugging due to kernel taint
[ 120.503744][ T5083] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 120.511117][ T5083] CPU: 0 PID: 5083 Comm: syz.0.17 Tainted: G B syzkaller #0
[ 120.521045][ T5083] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 120.531671][ T5083] Call Trace:
[ 120.534989][ T5083]
[ 120.537952][ T5083] dump_stack_lvl+0x188/0x250
[ 120.542673][ T5083] ? show_regs_print_info+0x20/0x20
[ 120.548089][ T5083] ? load_image+0x410/0x410
[ 120.552812][ T5083] panic+0x2f8/0x850
[ 120.556975][ T5083] ? bpf_jit_dump+0xd0/0xd0
[ 120.561879][ T5083] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 120.567996][ T5083] ? _raw_spin_unlock+0x40/0x40
[ 120.572890][ T5083] ? sysv_new_inode+0x1105/0x1290
[ 120.577955][ T5083] check_panic_on_warn+0x80/0xa0
[ 120.582940][ T5083] ? sysv_new_inode+0x1105/0x1290
[ 120.588187][ T5083] end_report+0x6d/0xf0
[ 120.592526][ T5083] kasan_report+0x102/0x130
[ 120.597072][ T5083] ? sysv_new_inode+0x1105/0x1290
[ 120.602244][ T5083] sysv_new_inode+0x1105/0x1290
[ 120.607204][ T5083] ? __rwlock_init+0x140/0x140
[ 120.612088][ T5083] ? sysv_find_entry+0x554/0x5e0
[ 120.617243][ T5083] ? sysv_free_inode+0x7e0/0x7e0
[ 120.622232][ T5083] ? __d_add+0x4cc/0x800
[ 120.626527][ T5083] sysv_mknod+0x4a/0xd0
[ 120.630722][ T5083] ? sysv_lookup+0xe0/0xe0
[ 120.635180][ T5083] path_openat+0x120a/0x2fb0
[ 120.639823][ T5083] ? do_filp_open+0x400/0x400
[ 120.644812][ T5083] do_filp_open+0x1df/0x400
[ 120.649359][ T5083] ? vfs_tmpfile+0x300/0x300
[ 120.654428][ T5083] ? _raw_spin_unlock+0x24/0x40
[ 120.659499][ T5083] ? alloc_fd+0x59e/0x650
[ 120.663875][ T5083] do_sys_openat2+0x14b/0x500
[ 120.668725][ T5083] ? __lock_acquire+0x7b50/0x7b50
[ 120.674004][ T5083] ? do_sys_open+0xe0/0xe0
[ 120.678684][ T5083] ? lockdep_hardirqs_on_prepare+0x448/0x7c0
[ 120.684818][ T5083] ? lock_chain_count+0x20/0x20
[ 120.689723][ T5083] __x64_sys_openat+0x135/0x160
[ 120.694984][ T5083] do_syscall_64+0x4c/0xa0
[ 120.699646][ T5083] ? clear_bhb_loop+0x30/0x80
[ 120.704374][ T5083] ? clear_bhb_loop+0x30/0x80
[ 120.709268][ T5083] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 120.715212][ T5083] RIP: 0033:0x7f82cad0f379
[ 120.719928][ T5083] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 120.740006][ T5083] RSP: 002b:00007f82ca373028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 120.748586][ T5083] RAX: ffffffffffffffda RBX: 00007f82caf4afa0 RCX: 00007f82cad0f379
[ 120.756598][ T5083] RDX: 0000000000000042 RSI: 0000200000000440 RDI: ffffffffffffff9c
[ 120.764709][ T5083] RBP: 00007f82cada2d68 R08: 0000000000000000 R09: 0000000000000000
[ 120.773264][ T5083] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 120.781350][ T5083] R13: 00007f82caf4b038 R14: 00007f82caf4afa0 R15: 00007fff26500838
[ 120.789343][ T5083]
[ 120.792654][ T5083] Kernel Offset: disabled
[ 120.797005][ T5083] Rebooting in 86400 seconds..