Warning: Permanently added '10.128.0.217' (ED25519) to the list of known hosts.
2026/10/06 02:07:19 parsed 1 programs
2026/10/06 02:07:19 serving rpc on tcp://37645
Setting up swapspace version 1, size = 127995904 bytes
[ 160.009316][ T6100] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 164.928247][ T4650] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 164.928275][ T4650] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 164.983518][ T4650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 164.983541][ T4650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 167.559331][ T6163] bridge0: port 1(bridge_slave_0) entered blocking state
[ 167.559540][ T6163] bridge0: port 1(bridge_slave_0) entered disabled state
[ 167.559767][ T6163] bridge_slave_0: entered allmulticast mode
[ 167.562821][ T6163] bridge_slave_0: entered promiscuous mode
[ 167.609487][ T6163] bridge0: port 2(bridge_slave_1) entered blocking state
[ 167.609659][ T6163] bridge0: port 2(bridge_slave_1) entered disabled state
[ 167.609799][ T6163] bridge_slave_1: entered allmulticast mode
[ 167.612010][ T6163] bridge_slave_1: entered promiscuous mode
[ 167.673263][ T6163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 167.676380][ T6163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 168.023695][ T6163] team0: Port device team_slave_0 added
[ 168.027886][ T6163] team0: Port device team_slave_1 added
[ 168.071671][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 168.071686][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 168.071705][ T6163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 168.073481][ T6163] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 168.073493][ T6163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 168.073515][ T6163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 168.337788][ T6163] hsr_slave_0: entered promiscuous mode
[ 168.338706][ T6163] hsr_slave_1: entered promiscuous mode
[ 170.426763][ T6163] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 170.472331][ T6163] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 170.475490][ T6163] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 170.511805][ T6163] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 170.521500][ T6163] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 170.564862][ T6163] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 170.567322][ T6163] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 170.615549][ T6163] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 170.766256][ T6163] 8021q: adding VLAN 0 to HW filter on device bond0
[ 170.805557][ T6163] 8021q: adding VLAN 0 to HW filter on device team0
[ 170.824337][ T1502] bridge0: port 1(bridge_slave_0) entered blocking state
[ 170.825674][ T1502] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 170.861552][ T1502] bridge0: port 2(bridge_slave_1) entered blocking state
[ 170.861796][ T1502] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 171.642991][ T6163] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 171.765735][ T6163] veth0_vlan: entered promiscuous mode
[ 171.787326][ T6163] veth1_vlan: entered promiscuous mode
[ 171.861460][ T6163] veth0_macvtap: entered promiscuous mode
[ 171.872064][ T6163] veth1_macvtap: entered promiscuous mode
[ 171.914387][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 171.948668][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 172.168819][ T1121] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 172.169305][ T5768] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 172.169355][ T5768] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 172.337615][ T1121] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 173.097304][ T47] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 173.624176][ T47] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 174.413070][ T47] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 174.872629][ T47] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 175.813432][ T4904] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 175.853111][ T47] bridge_slave_1: left allmulticast mode
[ 175.853150][ T47] bridge_slave_1: left promiscuous mode
[ 175.853449][ T47] bridge0: port 2(bridge_slave_1) entered disabled state
[ 175.868767][ T4904] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 175.870085][ T4904] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 175.888200][ T4904] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 175.891476][ T4904] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 176.070556][ T47] bridge_slave_0: left allmulticast mode
[ 176.070596][ T47] bridge_slave_0: left promiscuous mode
[ 176.070865][ T47] bridge0: port 1(bridge_slave_0) entered disabled state
[ 177.088341][ T47] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 177.168413][ T47] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 177.210192][ T47] bond0 (unregistering): Released all slaves
[ 177.687868][ T47] hsr_slave_0: left promiscuous mode
[ 177.729880][ T47] hsr_slave_1: left promiscuous mode
[ 177.731201][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 177.731233][ T47] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 177.770828][ T47] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 177.770858][ T47] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 177.849471][ T47] veth1_macvtap: left promiscuous mode
[ 177.852228][ T47] veth0_macvtap: left promiscuous mode
[ 177.852512][ T47] veth1_vlan: left promiscuous mode
[ 177.852705][ T47] veth0_vlan: left promiscuous mode
[ 178.598514][ T47] team0 (unregistering): Port device team_slave_1 removed
[ 178.638277][ T47] team0 (unregistering): Port device team_slave_0 removed
[ 178.841720][ T5250] 8021q: adding VLAN 0 to HW filter on device eth1
[ 179.746043][ T5250] 8021q: adding VLAN 0 to HW filter on device eth2
2026/10/06 02:07:46 executed programs: 0
[ 180.518034][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 180.548569][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 180.550372][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 180.556322][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 180.557066][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 181.032392][ T5250] 8021q: adding VLAN 0 to HW filter on device eth3
[ 181.881727][ T5250] 8021q: adding VLAN 0 to HW filter on device eth4
[ 182.146766][ T6442] bridge0: port 1(bridge_slave_0) entered blocking state
[ 182.147005][ T6442] bridge0: port 1(bridge_slave_0) entered disabled state
[ 182.147164][ T6442] bridge_slave_0: entered allmulticast mode
[ 182.170842][ T6442] bridge_slave_0: entered promiscuous mode
[ 182.174193][ T6442] bridge0: port 2(bridge_slave_1) entered blocking state
[ 182.174376][ T6442] bridge0: port 2(bridge_slave_1) entered disabled state
[ 182.174542][ T6442] bridge_slave_1: entered allmulticast mode
[ 182.177345][ T6442] bridge_slave_1: entered promiscuous mode
[ 182.264098][ T6442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 182.286192][ T6442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 182.419891][ T6442] team0: Port device team_slave_0 added
[ 182.425774][ T6442] team0: Port device team_slave_1 added
[ 182.485454][ T6442] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 182.485469][ T6442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 182.485488][ T6442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 182.487122][ T6442] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 182.487135][ T6442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 182.487154][ T6442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 182.616837][ T6442] hsr_slave_0: entered promiscuous mode
[ 182.626613][ T6442] hsr_slave_1: entered promiscuous mode
[ 182.687616][ T4904] Bluetooth: hci0: command tx timeout
[ 184.758326][ T4904] Bluetooth: hci0: command tx timeout
[ 184.883114][ T6442] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 184.917739][ T6442] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 184.923665][ T6442] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 184.953917][ T6442] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 184.955716][ T6442] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 185.012750][ T6442] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 185.014921][ T6442] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 185.054812][ T6442] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 185.290971][ T6442] 8021q: adding VLAN 0 to HW filter on device bond0
[ 185.342313][ T6442] 8021q: adding VLAN 0 to HW filter on device team0
[ 185.365885][ T47] bridge0: port 1(bridge_slave_0) entered blocking state
[ 185.366147][ T47] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 185.442805][ T1499] bridge0: port 2(bridge_slave_1) entered blocking state
[ 185.443044][ T1499] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 186.268577][ T6442] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 186.413484][ T6442] veth0_vlan: entered promiscuous mode
[ 186.456861][ T6442] veth1_vlan: entered promiscuous mode
[ 186.535839][ T6442] veth0_macvtap: entered promiscuous mode
[ 186.552237][ T6442] veth1_macvtap: entered promiscuous mode
[ 186.588938][ T6442] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 186.640425][ T6442] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 186.678796][ T47] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 186.680687][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 186.760547][ T4650] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 186.837875][ T4904] Bluetooth: hci0: command tx timeout
[ 186.958554][ T47] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 187.148150][ T1499] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 187.148178][ T1499] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 187.242062][ T4650] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 187.242085][ T4650] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/10/06 02:07:53 executed programs: 2
[ 187.626776][ T6605] printk: legacy console [ttyGS0] disabled
[ 187.665000][ T6602] ==================================================================
[ 187.665018][ T6602] BUG: KASAN: slab-use-after-free in tty_init_dev+0x244/0x4d0
[ 187.665059][ T6602] Write of size 8 at addr ffff88803c68c120 by task syz.0.17/6602
[ 187.665077][ T6602]
[ 187.665104][ T6602] CPU: 0 UID: 0 PID: 6602 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{
** replaying previous printk message **
[ 187.665104][ T6602] CPU: 0 UID: 0 PID: 6602 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 187.665130][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 187.665149][ T6602] Call Trace:
[ 187.665158][ T6602]
[ 187.665166][ T6602] dump_stack_lvl+0xe8/0x150
[ 187.665196][ T6602] print_address_description+0x55/0x1e0
[ 187.665228][ T6602] ? tty_init_dev+0x244/0x4d0
[ 187.665249][ T6602] print_report+0x58/0x70
[ 187.665282][ T6602] kasan_report+0x117/0x150
[ 187.665303][ T6602] ? tty_init_dev+0x244/0x4d0
[ 187.665332][ T6602] tty_init_dev+0x244/0x4d0
[ 187.665358][ T6602] tty_open+0x7e5/0xcd0
[ 187.665394][ T6602] ? __pfx_tty_open+0x10/0x10
[ 187.665424][ T6602] ? rt_spin_unlock+0x159/0x200
[ 187.665459][ T6602] ? rt_spin_unlock+0x165/0x200
[ 187.665486][ T6602] chrdev_open+0x4dc/0x600
[ 187.665513][ T6602] ? __pfx_chrdev_open+0x10/0x10
[ 187.665539][ T6602] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0
[ 187.665569][ T6602] ? __pfx_chrdev_open+0x10/0x10
[ 187.665597][ T6602] do_dentry_open+0x849/0x1420
[ 187.665621][ T6602] vfs_open+0x3b/0x350
[ 187.665638][ T6602] ? path_openat+0x142d/0x1d60
[ 187.665663][ T6602] path_openat+0x1448/0x1d60
[ 187.665695][ T6602] do_file_open+0x23e/0x4a0
[ 187.665738][ T6602] ? __pfx_do_file_open+0x10/0x10
[ 187.665775][ T6602] ? alloc_fd+0x654/0x6d0
[ 187.665799][ T6602] do_sys_openat2+0x115/0x200
[ 187.665821][ T6602] ? __pfx_do_sys_openat2+0x10/0x10
[ 187.665840][ T6602] ? exc_page_fault+0x6a/0xc0
[ 187.665863][ T6602] ? do_user_addr_fault+0xc4c/0x1340
[ 187.665886][ T6602] __x64_sys_openat+0x138/0x170
[ 187.665908][ T6602] do_syscall_64+0x166/0x520
[ 187.665931][ T6602] ? trace_irq_disable+0x3b/0x140
[ 187.665957][ T6602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 187.665978][ T6602] ? clear_bhb_loop+0x70/0xc0
[ 187.666001][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 187.666018][ T6602] RIP: 0033:0x7f68e1d8e0d9
[ 187.666050][ T6602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 187.666065][ T6602] RSP: 002b:00007f68e13cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 187.666090][ T6602] RAX: ffffffffffffffda RBX: 00007f68e2016090 RCX: 00007f68e1d8e0d9
[ 187.666104][ T6602] RDX: 0000000000000002 RSI: 0000200000000800 RDI: ffffffffffffff9c
[ 187.666118][ T6602] RBP: 00007f68e1e25024 R08: 0000000000000000 R09: 0000000000000000
[ 187.666130][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 187.666142][ T6602] R13: 00007f68e2016128 R14: 00007f68e2016090 R15: 00007ffd9a0d5b38
[ 187.666165][ T6602]
[ 187.666172][ T6602]
[ 187.666176][ T6602] Allocated by task 6601:
[ 187.666186][ T6602] kasan_save_track+0x3e/0x80
[ 187.666212][ T6602] __kasan_kmalloc+0x93/0xb0
[ 187.666226][ T6602] __kmalloc_cache_noprof+0x3d5/0x680
[ 187.666252][ T6602] gserial_alloc_line_no_console+0x23a/0x6e0
[ 187.666276][ T6602] gserial_alloc_line+0x18/0x90
[ 187.666296][ T6602] acm_alloc_instance+0xc7/0x140
[ 187.666322][ T6602] usb_get_function_instance+0xe3/0x2f0
[ 187.666344][ T6602] function_make+0x127/0x360
[ 187.666369][ T6602] configfs_mkdir+0x4f6/0x9e0
[ 187.666396][ T6602] vfs_mkdir+0x408/0x620
[ 187.666421][ T6602] filename_mkdirat+0x289/0x520
[ 187.666447][ T6602] __se_sys_mkdirat+0x35/0x150
[ 187.666472][ T6602] do_syscall_64+0x166/0x520
[ 187.666491][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 187.666510][ T6602]
[ 187.666516][ T6602] Freed by task 6605:
[ 187.666524][ T6602] kasan_save_track+0x3e/0x80
[ 187.666548][ T6602] kasan_save_free_info+0x40/0x50
[ 187.666567][ T6602] __kasan_slab_free+0x5c/0x80
[ 187.666591][ T6602] kfree+0x1c5/0x6d0
[ 187.666611][ T6602] gserial_free_port+0x248/0x2c0
[ 187.666632][ T6602] gserial_free_line+0xc3/0x1f0
[ 187.666652][ T6602] acm_free_instance+0x39/0x60
[ 187.666679][ T6602] usb_put_function_instance+0x95/0xc0
[ 187.666710][ T6602] config_item_release+0x13a/0x2d0
[ 187.666727][ T6602] configfs_rmdir+0x885/0x950
[ 187.666751][ T6602] vfs_rmdir+0x3e9/0x6b0
[ 187.666776][ T6602] filename_rmdir+0x292/0x520
[ 187.666802][ T6602] __se_sys_rmdir+0x2e/0x140
[ 187.666827][ T6602] do_syscall_64+0x166/0x520
[ 187.666846][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 187.666863][ T6602]
[ 187.666868][ T6602] The buggy address belongs to the object at ffff88803c68c000
[ 187.666868][ T6602] which belongs to the cache kmalloc-2k of size 2048
[ 187.666886][ T6602] The buggy address is located 288 bytes inside of
[ 187.666886][ T6602] freed 2048-byte region [ffff88803c68c000, ffff88803c68c800)
[ 187.666907][ T6602]
[ 187.666912][ T6602] The buggy address belongs to the physical page:
[ 187.666935][ T6602] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3c688
[ 187.666960][ T6602] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 187.666976][ T6602] flags: 0x80000000000040(head|node=0|zone=1)
[ 187.667000][ T6602] page_type: f5(slab)
[ 187.667020][ T6602] raw: 0080000000000040 ffff88813ffbe000 dead000000000100 dead000000000122
[ 187.667038][ T6602] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 187.667058][ T6602] head: 0080000000000040 ffff88813ffbe000 dead000000000100 dead000000000122
[ 187.667076][ T6602] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 187.667096][ T6602] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff
[ 187.667114][ T6602] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008
[ 187.667125][ T6602] page dumped because: kasan: bad access detected
[ 187.667141][ T6602] page_owner tracks the page as allocated
[ 187.667149][ T6602] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5710, tgid 5710 (kworker/0:4), ts 187228549705
[ 187.667183][ T6602] post_alloc_hook+0x1f9/0x250
[ 187.667211][ T6602] get_page_from_freelist+0x2591/0x2600
[ 187.667242][ T6602] __alloc_frozen_pages_noprof+0x230/0x5c0
[ 187.667273][ T6602] allocate_slab+0x7d/0x620
[ 187.667296][ T6602] refill_objects+0x2d8/0x350
[ 187.667320][ T6602] __pcs_replace_empty_main+0x339/0x690
[ 187.667340][ T6602] __kmalloc_node_track_caller_noprof+0x61e/0x7b0
[ 187.667371][ T6602] __alloc_skb+0x2c1/0x7a0
[ 187.667390][ T6602] mld_newpack+0x165/0xcb0
[ 187.667413][ T6602] add_grec+0x119f/0x19d0
[ 187.667435][ T6602] mld_send_initial_cr+0x288/0x550
[ 187.667456][ T6602] mld_dad_work+0x3d/0x480
[ 187.667477][ T6602] process_scheduled_works+0xc3d/0x1630
[ 187.667498][ T6602] worker_thread+0xa47/0xfb0
[ 187.667520][ T6602] kthread+0x38b/0x470
[ 187.667536][ T6602] ret_from_fork+0x514/0xb70
[ 187.667551][ T6602] page last free pid 6491 tgid 6491 ts 183343826595 stack trace:
[ 187.667565][ T6602] __free_frozen_pages+0xf8e/0x1070
[ 187.667587][ T6602] __slab_free+0x250/0x2a0
[ 187.667610][ T6602] qlist_free_all+0x99/0x100
[ 187.667666][ T6602] kasan_quarantine_reduce+0x148/0x160
[ 187.667690][ T6602] __kasan_slab_alloc+0x22/0x80
[ 187.667726][ T6602] __kmalloc_noprof+0x3b9/0x790
[ 187.667750][ T6602] tomoyo_realpath_from_path+0xef/0x640
[ 187.667766][ T6602] tomoyo_path_perm+0x283/0x560
[ 187.667787][ T6602] security_inode_getattr+0x12b/0x310
[ 187.667808][ T6602] __x64_sys_newfstat+0x133/0x270
[ 187.667826][ T6602] do_syscall_64+0x166/0x520
[ 187.667845][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 187.667862][ T6602]
[ 187.667867][ T6602] Memory state around the buggy address:
[ 187.667878][ T6602] ffff88803c68c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 187.667891][ T6602] ffff88803c68c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 187.667903][ T6602] >ffff88803c68c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 187.667913][ T6602] ^
[ 187.667923][ T6602] ffff88803c68c180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 187.667936][ T6602] ffff88803c68c200: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 187.667945][ T6602] ==================================================================
[ 187.703524][ T6602] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 188.497182][ T6602] CPU: 0 UID: 0 PID: 6602 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 188.506991][ T6602] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 188.517185][ T6602] Call Trace:
[ 188.520511][ T6602]
[ 188.523489][ T6602] vpanic+0x56d/0xa60
[ 188.527633][ T6602] ? rcu_is_watching+0x16/0xb0
[ 188.532478][ T6602] ? __pfx_vpanic+0x10/0x10
[ 188.537129][ T6602] panic+0xc5/0xd0
[ 188.540891][ T6602] ? __pfx_panic+0x10/0x10
[ 188.545338][ T6602] ? preempt_schedule_thunk+0x16/0x40
[ 188.550757][ T6602] ? tty_init_dev+0x244/0x4d0
[ 188.555612][ T6602] ? preempt_schedule_thunk+0x16/0x40
[ 188.561159][ T6602] ? tty_init_dev+0x244/0x4d0
[ 188.566003][ T6602] check_panic_on_warn+0x89/0xb0
[ 188.570994][ T6602] ? tty_init_dev+0x244/0x4d0
[ 188.575754][ T6602] end_report+0x73/0x170
[ 188.580063][ T6602] ? tty_init_dev+0x244/0x4d0
[ 188.584948][ T6602] kasan_report+0x128/0x150
[ 188.589494][ T6602] ? tty_init_dev+0x244/0x4d0
[ 188.594308][ T6602] tty_init_dev+0x244/0x4d0
[ 188.598938][ T6602] tty_open+0x7e5/0xcd0
[ 188.603139][ T6602] ? __pfx_tty_open+0x10/0x10
[ 188.608115][ T6602] ? rt_spin_unlock+0x159/0x200
[ 188.613019][ T6602] ? rt_spin_unlock+0x165/0x200
[ 188.617939][ T6602] chrdev_open+0x4dc/0x600
[ 188.622408][ T6602] ? __pfx_chrdev_open+0x10/0x10
[ 188.627382][ T6602] ? fsnotify_open_perm_and_set_mode+0x13b/0x6c0
[ 188.633753][ T6602] ? __pfx_chrdev_open+0x10/0x10
[ 188.638826][ T6602] do_dentry_open+0x849/0x1420
[ 188.643895][ T6602] vfs_open+0x3b/0x350
[ 188.648092][ T6602] ? path_openat+0x142d/0x1d60
[ 188.652894][ T6602] path_openat+0x1448/0x1d60
[ 188.657631][ T6602] do_file_open+0x23e/0x4a0
[ 188.662537][ T6602] ? __pfx_do_file_open+0x10/0x10
[ 188.667616][ T6602] ? alloc_fd+0x654/0x6d0
[ 188.672148][ T6602] do_sys_openat2+0x115/0x200
[ 188.676884][ T6602] ? __pfx_do_sys_openat2+0x10/0x10
[ 188.682148][ T6602] ? exc_page_fault+0x6a/0xc0
[ 188.686859][ T6602] ? do_user_addr_fault+0xc4c/0x1340
[ 188.692175][ T6602] __x64_sys_openat+0x138/0x170
[ 188.697059][ T6602] do_syscall_64+0x166/0x520
[ 188.701701][ T6602] ? trace_irq_disable+0x3b/0x140
[ 188.706757][ T6602] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 188.712975][ T6602] ? clear_bhb_loop+0x70/0xc0
[ 188.717788][ T6602] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 188.723816][ T6602] RIP: 0033:0x7f68e1d8e0d9
[ 188.728276][ T6602] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 188.747918][ T6602] RSP: 002b:00007f68e13cd028 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 188.756456][ T6602] RAX: ffffffffffffffda RBX: 00007f68e2016090 RCX: 00007f68e1d8e0d9
[ 188.764913][ T6602] RDX: 0000000000000002 RSI: 0000200000000800 RDI: ffffffffffffff9c
[ 188.772912][ T6602] RBP: 00007f68e1e25024 R08: 0000000000000000 R09: 0000000000000000
[ 188.780964][ T6602] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 188.788973][ T6602] R13: 00007f68e2016128 R14: 00007f68e2016090 R15: 00007ffd9a0d5b38
[ 188.797074][ T6602]
[ 188.800746][ T6602] Kernel Offset: disabled
[ 188.805100][ T6602] Rebooting in 86400 seconds..