Warning: Permanently added '10.128.1.79' (ED25519) to the list of known hosts.
2026/01/29 12:44:37 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 106.085349][ T4634] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 108.573409][ T4672] chnl_net:caif_netlink_parms(): no params data found
[ 108.632572][ T4672] bridge0: port 1(bridge_slave_0) entered blocking state
[ 108.639844][ T4672] bridge0: port 1(bridge_slave_0) entered disabled state
[ 108.648142][ T4672] device bridge_slave_0 entered promiscuous mode
[ 108.656841][ T4672] bridge0: port 2(bridge_slave_1) entered blocking state
[ 108.663997][ T4672] bridge0: port 2(bridge_slave_1) entered disabled state
[ 108.672349][ T4672] device bridge_slave_1 entered promiscuous mode
[ 108.699809][ T4672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 108.711357][ T4672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 108.741737][ T4672] team0: Port device team_slave_0 added
[ 108.750058][ T4672] team0: Port device team_slave_1 added
[ 108.774320][ T4672] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 108.781392][ T4672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 108.807807][ T4672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 108.820356][ T4672] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 108.827417][ T4672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 108.853403][ T4672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 108.892336][ T4672] device hsr_slave_0 entered promiscuous mode
[ 108.899369][ T4672] device hsr_slave_1 entered promiscuous mode
[ 109.571386][ T4672] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 109.598696][ T4672] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 109.628731][ T4672] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 109.638477][ T4672] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 109.779016][ T4672] 8021q: adding VLAN 0 to HW filter on device bond0
[ 109.800252][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 109.815048][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 109.838572][ T4672] 8021q: adding VLAN 0 to HW filter on device team0
[ 109.856651][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 109.866641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 109.876902][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 109.884007][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 109.894045][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 109.924647][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 109.941573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 109.952824][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 109.959999][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 109.983867][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 110.001575][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 110.015271][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 110.027762][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 110.045808][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 110.054303][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 110.064612][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 110.073337][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 110.084522][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 110.096765][ T4672] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 110.111321][ T4672] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 110.121304][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 110.130642][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 110.296148][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 110.303672][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 110.316910][ T4672] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 110.353891][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 110.364304][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 110.402382][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 110.411597][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 110.425716][ T4672] device veth0_vlan entered promiscuous mode
[ 110.434690][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 110.444083][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 110.456748][ T4672] device veth1_vlan entered promiscuous mode
[ 110.497237][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 110.506258][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 110.515276][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 110.524072][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 110.536834][ T4672] device veth0_macvtap entered promiscuous mode
[ 110.545891][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 110.577843][ T4672] device veth1_macvtap entered promiscuous mode
[ 110.600058][ T4672] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 110.607651][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 110.617394][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 110.630720][ T4672] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 110.640353][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 110.650882][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 110.683102][ T4672] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 110.693312][ T4672] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 110.703768][ T4672] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 110.720182][ T4672] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 111.219461][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.246090][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 111.267199][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 111.295803][ T1221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 111.304082][ T1221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 111.318210][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 113.147979][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/01/29 12:44:49 executed programs: 0
[ 113.671905][ T4858] chnl_net:caif_netlink_parms(): no params data found
[ 113.741005][ T4858] bridge0: port 1(bridge_slave_0) entered blocking state
[ 113.749687][ T4858] bridge0: port 1(bridge_slave_0) entered disabled state
[ 113.759596][ T4858] device bridge_slave_0 entered promiscuous mode
[ 113.769815][ T4858] bridge0: port 2(bridge_slave_1) entered blocking state
[ 113.778599][ T4858] bridge0: port 2(bridge_slave_1) entered disabled state
[ 113.788684][ T4858] device bridge_slave_1 entered promiscuous mode
[ 113.821015][ T4858] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 113.834058][ T4858] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 113.871293][ T4858] team0: Port device team_slave_0 added
[ 113.880276][ T4858] team0: Port device team_slave_1 added
[ 113.910772][ T4858] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 113.918254][ T4858] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 113.947105][ T4858] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 113.960022][ T4858] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 113.969614][ T4858] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 113.999637][ T4858] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 114.044291][ T4858] device hsr_slave_0 entered promiscuous mode
[ 114.052120][ T4858] device hsr_slave_1 entered promiscuous mode
[ 114.061572][ T4858] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 114.070644][ T4858] Cannot create hsr debugfs directory
[ 115.584824][ T4718] Bluetooth: hci0: command 0x0409 tx timeout
[ 116.260777][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.331337][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 116.407933][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 117.278341][ T4858] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 117.289473][ T4858] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 117.330818][ T4858] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 117.341615][ T4858] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 117.483038][ T4858] 8021q: adding VLAN 0 to HW filter on device bond0
[ 117.513141][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 117.522214][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 117.549957][ T4858] 8021q: adding VLAN 0 to HW filter on device team0
[ 117.559986][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 117.570333][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 117.579324][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 117.586552][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 117.596932][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 117.627238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 117.637691][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 117.646496][ T154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 117.653580][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 117.669741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 117.674952][ T5044] Bluetooth: hci0: command 0x041b tx timeout
[ 117.685539][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 117.725652][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 117.736976][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 117.746283][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 117.755862][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 117.765185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 117.773600][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 117.782904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 117.791532][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 117.802302][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 117.815325][ T4858] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 117.929305][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 117.937327][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 117.961639][ T4858] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 117.981310][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 117.990833][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 118.023683][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 118.033255][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 118.054736][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 118.062556][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 118.071193][ T4858] device veth0_vlan entered promiscuous mode
[ 118.083148][ T4858] device veth1_vlan entered promiscuous mode
[ 118.102997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 118.111534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 118.121272][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 118.130092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 118.141573][ T4858] device veth0_macvtap entered promiscuous mode
[ 118.163693][ T9] device hsr_slave_0 left promiscuous mode
[ 118.170433][ T9] device hsr_slave_1 left promiscuous mode
[ 118.177546][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 118.187098][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 118.194976][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 118.202419][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 118.211985][ T9] device bridge_slave_1 left promiscuous mode
[ 118.218680][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 118.230591][ T9] device bridge_slave_0 left promiscuous mode
[ 118.237012][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 118.251060][ T9] device veth1_macvtap left promiscuous mode
[ 118.257355][ T9] device veth0_macvtap left promiscuous mode
[ 118.263420][ T9] device veth1_vlan left promiscuous mode
[ 118.269526][ T9] device veth0_vlan left promiscuous mode
[ 118.432947][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 118.448929][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 118.460675][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 118.477807][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 118.536294][ T9] bond0 (unregistering): Released all slaves
[ 118.580559][ T4858] device veth1_macvtap entered promiscuous mode
[ 118.590620][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 118.598923][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 118.617688][ T4858] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 118.626356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 118.635582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 118.652359][ T4858] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 118.659997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 118.669818][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 118.682026][ T4858] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.691696][ T4858] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.700964][ T4858] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.711090][ T4858] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 118.768998][ T1221] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.796430][ T1221] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/01/29 12:44:54 executed programs: 2
[ 118.817898][ T412] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 118.829668][ T412] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 118.838582][ T412] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 118.848826][ T1221] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 119.122036][ T5095] loop0: detected capacity change from 0 to 32768
[ 119.138367][ T5095] =======================================================
[ 119.138367][ T5095] WARNING: The mand mount option has been deprecated and
[ 119.138367][ T5095] and is ignored by this kernel. Remove the mand
[ 119.138367][ T5095] option from the mount to silence this warning.
[ 119.138367][ T5095] =======================================================
[ 119.229624][ T5095] JBD2: Ignoring recovery information on journal
[ 119.271240][ T5095] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 119.371989][ T4858] ocfs2: Unmounting device (7,0) on (node local)
[ 119.755214][ T5041] Bluetooth: hci0: command 0x040f tx timeout
[ 119.796566][ T5100] loop0: detected capacity change from 0 to 32768
[ 119.839257][ T5100] JBD2: Ignoring recovery information on journal
[ 119.886285][ T5100] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode.
[ 119.928535][ T5100] ==================================================================
[ 119.937037][ T5100] BUG: KASAN: use-after-free in ocfs2_fault+0xda/0x3d0
[ 119.943950][ T5100] Read of size 8 at addr ffff888079c3fd00 by task syz.0.18/5100
[ 119.951704][ T5100]
[ 119.954092][ T5100] CPU: 0 PID: 5100 Comm: syz.0.18 Not tainted syzkaller #0
[ 119.961331][ T5100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 119.971979][ T5100] Call Trace:
[ 119.975820][ T5100]
[ 119.978883][ T5100] dump_stack_lvl+0x188/0x250
[ 119.983620][ T5100] ? show_regs_print_info+0x20/0x20
[ 119.988867][ T5100] ? load_image+0x400/0x400
[ 119.993410][ T5100] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 119.998945][ T5100] ? recalc_sigpending+0x1a0/0x230
[ 120.004210][ T5100] print_address_description+0x60/0x2d0
[ 120.009967][ T5100] ? ocfs2_fault+0xda/0x3d0
[ 120.015051][ T5100] kasan_report+0xdf/0x130
[ 120.019510][ T5100] ? ocfs2_fault+0xda/0x3d0
[ 120.024054][ T5100] ocfs2_fault+0xda/0x3d0
[ 120.028605][ T5100] ? ocfs2_mmap+0x250/0x250
[ 120.033310][ T5100] ? count_memcg_event_mm+0x324/0x370
[ 120.038863][ T5100] ? remove_device_exclusive_entry+0xa90/0xa90
[ 120.045077][ T5100] ? finish_task_switch+0x1e4/0x640
[ 120.050327][ T5100] __do_fault+0x141/0x330
[ 120.054697][ T5100] handle_mm_fault+0x2985/0x4410
[ 120.059700][ T5100] ? get_page+0xe0/0xe0
[ 120.063915][ T5100] ? follow_page_mask+0x5dc/0x12d0
[ 120.069332][ T5100] ? check_vma_flags+0x3f5/0x480
[ 120.074317][ T5100] __get_user_pages+0x94b/0x11e0
[ 120.079370][ T5100] ? populate_vma_page_range+0x290/0x290
[ 120.085047][ T5100] ? read_lock_is_recursive+0x10/0x10
[ 120.090571][ T5100] populate_vma_page_range+0x213/0x290
[ 120.096157][ T5100] __mm_populate+0x275/0x3b0
[ 120.100806][ T5100] ? check_vma_flags+0x480/0x480
[ 120.105794][ T5100] ? up_write+0x1bb/0x420
[ 120.110165][ T5100] vm_mmap_pgoff+0x212/0x2d0
[ 120.114793][ T5100] ? account_locked_vm+0xe0/0xe0
[ 120.119772][ T5100] ? __fget_files+0x40f/0x480
[ 120.124541][ T5100] ksys_mmap_pgoff+0x54b/0x790
[ 120.129481][ T5100] ? mmap_region+0x1650/0x1650
[ 120.134372][ T5100] ? lockdep_hardirqs_on+0x94/0x140
[ 120.139616][ T5100] do_syscall_64+0x4c/0xa0
[ 120.144073][ T5100] ? clear_bhb_loop+0x30/0x80
[ 120.148789][ T5100] ? clear_bhb_loop+0x30/0x80
[ 120.153503][ T5100] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 120.159439][ T5100] RIP: 0033:0x7fd9e9facef9
[ 120.163888][ T5100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 120.183542][ T5100] RSP: 002b:00007fd9e9610028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 120.191999][ T5100] RAX: ffffffffffffffda RBX: 00007fd9ea217fa0 RCX: 00007fd9e9facef9
[ 120.200007][ T5100] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000
[ 120.208016][ T5100] RBP: 00007fd9ea041ee0 R08: 0000000000000004 R09: 0000000000000000
[ 120.216023][ T5100] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000
[ 120.224025][ T5100] R13: 00007fd9ea218038 R14: 00007fd9ea217fa0 R15: 00007ffeab68ed78
[ 120.232055][ T5100]
[ 120.235264][ T5100]
[ 120.237656][ T5100] Allocated by task 5100:
[ 120.242007][ T5100] __kasan_slab_alloc+0x9c/0xd0
[ 120.246978][ T5100] slab_post_alloc_hook+0x4c/0x380
[ 120.252128][ T5100] kmem_cache_alloc+0x100/0x290
[ 120.257007][ T5100] vm_area_alloc+0x20/0xe0
[ 120.261452][ T5100] mmap_region+0xac0/0x1650
[ 120.265995][ T5100] do_mmap+0x819/0xe90
[ 120.270183][ T5100] vm_mmap_pgoff+0x1c1/0x2d0
[ 120.274800][ T5100] ksys_mmap_pgoff+0x54b/0x790
[ 120.279698][ T5100] do_syscall_64+0x4c/0xa0
[ 120.284156][ T5100] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 120.290074][ T5100]
[ 120.292420][ T5100] Freed by task 5103:
[ 120.296413][ T5100] kasan_set_track+0x4b/0x70
[ 120.301035][ T5100] kasan_set_free_info+0x1f/0x40
[ 120.306043][ T5100] ____kasan_slab_free+0xd5/0x110
[ 120.311099][ T5100] slab_free_freelist_hook+0xea/0x170
[ 120.316504][ T5100] kmem_cache_free+0x8f/0x210
[ 120.321295][ T5100] __do_munmap+0xc81/0xdf0
[ 120.325852][ T5100] mmap_region+0x8b4/0x1650
[ 120.330418][ T5100] do_mmap+0x819/0xe90
[ 120.334542][ T5100] vm_mmap_pgoff+0x1c1/0x2d0
[ 120.339191][ T5100] ksys_mmap_pgoff+0x54b/0x790
[ 120.344009][ T5100] do_syscall_64+0x4c/0xa0
[ 120.348462][ T5100] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 120.354594][ T5100]
[ 120.356958][ T5100] The buggy address belongs to the object at ffff888079c3fc60
[ 120.356958][ T5100] which belongs to the cache vm_area_struct of size 200
[ 120.371302][ T5100] The buggy address is located 160 bytes inside of
[ 120.371302][ T5100] 200-byte region [ffff888079c3fc60, ffff888079c3fd28)
[ 120.384614][ T5100] The buggy address belongs to the page:
[ 120.390289][ T5100] page:ffffea0001e70fc0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79c3f
[ 120.400569][ T5100] memcg:ffff88807c56d501
[ 120.404840][ T5100] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 120.412773][ T5100] raw: 00fff00000000200 ffffea000097a700 0000000500000005 ffff888140007a00
[ 120.421491][ T5100] raw: 0000000000000000 00000000800f000f 00000001ffffffff ffff88807c56d501
[ 120.430182][ T5100] page dumped because: kasan: bad access detected
[ 120.436726][ T5100] page_owner tracks the page as allocated
[ 120.442461][ T5100] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4389, ts 84473676565, free_ts 84463152231
[ 120.458634][ T5100] get_page_from_freelist+0x1bbd/0x1ca0
[ 120.464336][ T5100] __alloc_pages+0x1ee/0x480
[ 120.468965][ T5100] new_slab+0xc0/0x4b0
[ 120.473070][ T5100] ___slab_alloc+0x80a/0xdd0
[ 120.477694][ T5100] kmem_cache_alloc+0x195/0x290
[ 120.482580][ T5100] vm_area_dup+0x1e/0xb0
[ 120.486854][ T5100] __split_vma+0xb1/0x410
[ 120.491211][ T5100] __do_munmap+0x3fe/0xdf0
[ 120.495736][ T5100] mmap_region+0x8b4/0x1650
[ 120.500524][ T5100] do_mmap+0x819/0xe90
[ 120.504628][ T5100] vm_mmap_pgoff+0x1c1/0x2d0
[ 120.509243][ T5100] ksys_mmap_pgoff+0x54b/0x790
[ 120.514292][ T5100] do_syscall_64+0x4c/0xa0
[ 120.518739][ T5100] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 120.524841][ T5100] page last free stack trace:
[ 120.529541][ T5100] free_unref_page_prepare+0x637/0x6c0
[ 120.535133][ T5100] free_unref_page_list+0x119/0x820
[ 120.540365][ T5100] release_pages+0x186c/0x1be0
[ 120.545165][ T5100] tlb_finish_mmu+0x176/0x300
[ 120.549876][ T5100] exit_mmap+0x3d0/0x640
[ 120.554151][ T5100] __mmput+0x115/0x3b0
[ 120.558251][ T5100] exec_mmap+0x51d/0x610
[ 120.562688][ T5100] begin_new_exec+0x7e8/0x1160
[ 120.567531][ T5100] load_elf_binary+0x99c/0x28e0
[ 120.572406][ T5100] bprm_execve+0xaee/0x1840
[ 120.577167][ T5100] do_execveat_common+0x51e/0x6d0
[ 120.582224][ T5100] __x64_sys_execve+0x8e/0xa0
[ 120.586929][ T5100] do_syscall_64+0x4c/0xa0
[ 120.591387][ T5100] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 120.597303][ T5100]
[ 120.599653][ T5100] Memory state around the buggy address:
[ 120.605399][ T5100] ffff888079c3fc00: fb fb fb fb fc fc fc fc fc fc fc fc fa fb fb fb
[ 120.613478][ T5100] ffff888079c3fc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 120.621648][ T5100] >ffff888079c3fd00: fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb fb
[ 120.629733][ T5100] ^
[ 120.633815][ T5100] ffff888079c3fd80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 120.641894][ T5100] ffff888079c3fe00: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fa fb
[ 120.649985][ T5100] ==================================================================
[ 120.658073][ T5100] Disabling lock debugging due to kernel taint
[ 120.674982][ T5100] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 120.682233][ T5100] CPU: 0 PID: 5100 Comm: syz.0.18 Tainted: G B syzkaller #0
[ 120.690966][ T5100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 120.701143][ T5100] Call Trace:
[ 120.704560][ T5100]
[ 120.707662][ T5100] dump_stack_lvl+0x188/0x250
[ 120.712385][ T5100] ? show_regs_print_info+0x20/0x20
[ 120.717701][ T5100] ? load_image+0x400/0x400
[ 120.722214][ T5100] panic+0x2e5/0x810
[ 120.726112][ T5100] ? bpf_jit_dump+0xd0/0xd0
[ 120.730639][ T5100] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 120.736637][ T5100] ? _raw_spin_unlock+0x40/0x40
[ 120.741502][ T5100] ? ocfs2_fault+0xda/0x3d0
[ 120.746006][ T5100] check_panic_on_warn+0x80/0xa0
[ 120.750956][ T5100] ? ocfs2_fault+0xda/0x3d0
[ 120.755476][ T5100] end_report+0x6d/0xf0
[ 120.759762][ T5100] kasan_report+0x102/0x130
[ 120.764271][ T5100] ? ocfs2_fault+0xda/0x3d0
[ 120.768777][ T5100] ocfs2_fault+0xda/0x3d0
[ 120.773200][ T5100] ? ocfs2_mmap+0x250/0x250
[ 120.777706][ T5100] ? count_memcg_event_mm+0x324/0x370
[ 120.783077][ T5100] ? remove_device_exclusive_entry+0xa90/0xa90
[ 120.789232][ T5100] ? finish_task_switch+0x1e4/0x640
[ 120.794583][ T5100] __do_fault+0x141/0x330
[ 120.798933][ T5100] handle_mm_fault+0x2985/0x4410
[ 120.803962][ T5100] ? get_page+0xe0/0xe0
[ 120.808124][ T5100] ? follow_page_mask+0x5dc/0x12d0
[ 120.813354][ T5100] ? check_vma_flags+0x3f5/0x480
[ 120.818301][ T5100] __get_user_pages+0x94b/0x11e0
[ 120.823405][ T5100] ? populate_vma_page_range+0x290/0x290
[ 120.829149][ T5100] ? read_lock_is_recursive+0x10/0x10
[ 120.834537][ T5100] populate_vma_page_range+0x213/0x290
[ 120.840028][ T5100] __mm_populate+0x275/0x3b0
[ 120.844628][ T5100] ? check_vma_flags+0x480/0x480
[ 120.849599][ T5100] ? up_write+0x1bb/0x420
[ 120.853935][ T5100] vm_mmap_pgoff+0x212/0x2d0
[ 120.858551][ T5100] ? account_locked_vm+0xe0/0xe0
[ 120.863502][ T5100] ? __fget_files+0x40f/0x480
[ 120.868193][ T5100] ksys_mmap_pgoff+0x54b/0x790
[ 120.873070][ T5100] ? mmap_region+0x1650/0x1650
[ 120.877843][ T5100] ? lockdep_hardirqs_on+0x94/0x140
[ 120.883046][ T5100] do_syscall_64+0x4c/0xa0
[ 120.887690][ T5100] ? clear_bhb_loop+0x30/0x80
[ 120.892385][ T5100] ? clear_bhb_loop+0x30/0x80
[ 120.897081][ T5100] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 120.902985][ T5100] RIP: 0033:0x7fd9e9facef9
[ 120.907408][ T5100] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 120.927106][ T5100] RSP: 002b:00007fd9e9610028 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 120.935536][ T5100] RAX: ffffffffffffffda RBX: 00007fd9ea217fa0 RCX: 00007fd9e9facef9
[ 120.943536][ T5100] RDX: 0000000000000002 RSI: 0000000000b36000 RDI: 0000200000000000
[ 120.951536][ T5100] RBP: 00007fd9ea041ee0 R08: 0000000000000004 R09: 0000000000000000
[ 120.959523][ T5100] R10: 0000000000028011 R11: 0000000000000246 R12: 0000000000000000
[ 120.967504][ T5100] R13: 00007fd9ea218038 R14: 00007fd9ea217fa0 R15: 00007ffeab68ed78
[ 120.975602][ T5100]
[ 120.978902][ T5100] Kernel Offset: disabled
[ 120.983252][ T5100] Rebooting in 86400 seconds..