Warning: Permanently added '10.128.1.179' (ED25519) to the list of known hosts. 2026/02/10 21:31:45 parsed 1 programs [ 101.134405][ T5825] cgroup: Unknown subsys name 'net' [ 101.254947][ T5825] cgroup: Unknown subsys name 'cpuset' [ 101.264690][ T5825] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 102.463126][ T917] cfg80211: failed to load regulatory.db [ 103.140162][ T5825] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 106.175697][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 106.309873][ T5846] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 106.318442][ T5846] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 106.326528][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 106.335803][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 106.351563][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.168610][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.176683][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.224437][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.233192][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.653239][ T5883] chnl_net:caif_netlink_parms(): no params data found [ 108.745420][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.754234][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.762326][ T5883] bridge_slave_0: entered allmulticast mode [ 108.770056][ T5883] bridge_slave_0: entered promiscuous mode [ 108.783781][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.791050][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 108.798206][ T5883] bridge_slave_1: entered allmulticast mode [ 108.806629][ T5883] bridge_slave_1: entered promiscuous mode [ 108.838653][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 108.852298][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 108.892210][ T5883] team0: Port device team_slave_0 added [ 108.902201][ T5883] team0: Port device team_slave_1 added [ 108.928586][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 108.936064][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 108.962913][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 108.976320][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 108.983369][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.009572][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 109.055788][ T5883] hsr_slave_0: entered promiscuous mode [ 109.062914][ T5883] hsr_slave_1: entered promiscuous mode [ 109.222820][ T5883] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 109.236775][ T5883] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 109.248127][ T5883] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 109.260454][ T5883] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 109.295944][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.303198][ T5883] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.311364][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.318496][ T5883] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.376308][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.397154][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.406101][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.425045][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.439880][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.447151][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.460251][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.467491][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.676126][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.723630][ T5883] veth0_vlan: entered promiscuous mode [ 109.737668][ T5883] veth1_vlan: entered promiscuous mode [ 109.772106][ T5883] veth0_macvtap: entered promiscuous mode [ 109.783782][ T5883] veth1_macvtap: entered promiscuous mode [ 109.803065][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.819725][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.837221][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.849691][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.861150][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.874866][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.053687][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.189380][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.342646][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.423323][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/02/10 21:32:00 executed programs: 0 [ 112.100517][ T5142] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 112.109399][ T5142] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 112.121911][ T5142] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 112.130099][ T5142] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 112.139352][ T5142] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 112.306655][ T5934] chnl_net:caif_netlink_parms(): no params data found [ 112.390471][ T5934] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.397778][ T5934] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.405310][ T5934] bridge_slave_0: entered allmulticast mode [ 112.413281][ T5934] bridge_slave_0: entered promiscuous mode [ 112.423035][ T5934] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.430240][ T5934] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.437815][ T5934] bridge_slave_1: entered allmulticast mode [ 112.446224][ T5934] bridge_slave_1: entered promiscuous mode [ 112.478564][ T5934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.491140][ T5934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.525558][ T5934] team0: Port device team_slave_0 added [ 112.534330][ T5934] team0: Port device team_slave_1 added [ 112.562835][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.569831][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.596324][ T5934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.610057][ T5934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.617583][ T5934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.643791][ T5934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 112.690248][ T5934] hsr_slave_0: entered promiscuous mode [ 112.696939][ T5934] hsr_slave_1: entered promiscuous mode [ 112.703548][ T5934] debugfs: 'hsr0' already exists in 'hsr' [ 112.709380][ T5934] Cannot create hsr debugfs directory [ 112.892511][ T12] bridge_slave_1: left allmulticast mode [ 112.898330][ T12] bridge_slave_1: left promiscuous mode [ 112.905906][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.918101][ T12] bridge_slave_0: left allmulticast mode [ 112.925181][ T12] bridge_slave_0: left promiscuous mode [ 112.931154][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.182987][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 113.196757][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 113.207252][ T12] bond0 (unregistering): Released all slaves [ 113.321233][ T12] hsr_slave_0: left promiscuous mode [ 113.336457][ T12] hsr_slave_1: left promiscuous mode [ 113.345320][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.353219][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.365531][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.373135][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.402559][ T12] veth1_macvtap: left promiscuous mode [ 113.408382][ T12] veth0_macvtap: left promiscuous mode [ 113.414577][ T12] veth1_vlan: left promiscuous mode [ 113.420464][ T12] veth0_vlan: left promiscuous mode [ 113.969381][ T12] team0 (unregistering): Port device team_slave_1 removed [ 114.008601][ T12] team0 (unregistering): Port device team_slave_0 removed [ 114.226057][ T5846] Bluetooth: hci0: command tx timeout [ 114.610008][ T5934] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 114.639978][ T5934] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 114.653326][ T5934] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 114.671423][ T5934] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.182113][ T5934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 115.295890][ T5934] 8021q: adding VLAN 0 to HW filter on device team0 [ 115.324186][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.331475][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.350094][ T1020] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.357362][ T1020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.721245][ T5934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.778691][ T5934] veth0_vlan: entered promiscuous mode [ 115.803597][ T5934] veth1_vlan: entered promiscuous mode [ 115.846279][ T5934] veth0_macvtap: entered promiscuous mode [ 115.859942][ T5934] veth1_macvtap: entered promiscuous mode [ 115.885660][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 115.905921][ T5934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 115.928615][ T1020] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.954731][ T1020] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.992233][ T1020] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.019911][ T1020] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.057645][ T1020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.075399][ T1020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.105911][ T1020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.120779][ T1020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.213043][ T5997] ================================================================== [ 116.221197][ T5997] BUG: KASAN: slab-use-after-free in __schedule+0xc56/0x5fa0 [ 116.228645][ T5997] Read of size 4 at addr ffff8880323c0d00 by task syz.0.17/5997 [ 116.236325][ T5997] [ 116.238716][ T5997] CPU: 1 UID: 0 PID: 5997 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 116.238759][ T5997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 116.238786][ T5997] Call Trace: [ 116.238795][ T5997] [ 116.238806][ T5997] dump_stack_lvl+0x100/0x190 [ 116.238851][ T5997] print_report+0x156/0x4c9 [ 116.238886][ T5997] ? __virt_addr_valid+0x81/0x620 [ 116.238908][ T5997] ? __phys_addr+0xe8/0x180 [ 116.238949][ T5997] ? __schedule+0xc56/0x5fa0 [ 116.238990][ T5997] kasan_report+0xdf/0x1a0 [ 116.239029][ T5997] ? __schedule+0xc56/0x5fa0 [ 116.239072][ T5997] kasan_check_range+0x10f/0x1e0 [ 116.239096][ T5997] __schedule+0xc56/0x5fa0 [ 116.239135][ T5997] ? __lock_acquire+0x4a5/0x2630 [ 116.239179][ T5997] ? do_raw_spin_lock+0x128/0x260 [ 116.239204][ T5997] ? __pfx___schedule+0x10/0x10 [ 116.239245][ T5997] ? rcu_is_watching+0x12/0xc0 [ 116.239271][ T5997] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 116.239313][ T5997] ? do_task_dead+0x19/0x100 [ 116.239341][ T5997] do_task_dead+0xca/0x100 [ 116.239369][ T5997] do_exit+0x1677/0x2a30 [ 116.239394][ T5997] ? __pfx_do_exit+0x10/0x10 [ 116.239415][ T5997] ? do_group_exit+0x1bd/0x2a0 [ 116.239439][ T5997] ? rcu_is_watching+0x12/0xc0 [ 116.239466][ T5997] do_group_exit+0xd5/0x2a0 [ 116.239491][ T5997] __x64_sys_exit_group+0x3e/0x50 [ 116.239515][ T5997] x64_sys_call+0x14fd/0x1510 [ 116.239538][ T5997] do_syscall_64+0xc9/0xf80 [ 116.239565][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.239591][ T5997] RIP: 0033:0x7fcab0b9bf79 [ 116.239615][ T5997] Code: Unable to access opcode bytes at 0x7fcab0b9bf4f. [ 116.239627][ T5997] RSP: 002b:00007ffd4b156288 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 116.239655][ T5997] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcab0b9bf79 [ 116.239677][ T5997] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 116.239692][ T5997] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007fcab0de4280 [ 116.239708][ T5997] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 116.239723][ T5997] R13: 00007fcab0de4280 R14: 0000000000000003 R15: 00007ffd4b156340 [ 116.239754][ T5997] [ 116.239762][ T5997] [ 116.449232][ T5997] Allocated by task 5934: [ 116.453658][ T5997] kasan_save_stack+0x30/0x50 [ 116.458361][ T5997] kasan_save_track+0x14/0x30 [ 116.463062][ T5997] __kasan_slab_alloc+0x89/0x90 [ 116.467932][ T5997] kmem_cache_alloc_noprof+0x2ad/0x780 [ 116.473411][ T5997] copy_process+0x72ff/0x79b0 [ 116.478110][ T5997] kernel_clone+0xfc/0x930 [ 116.482575][ T5997] __do_sys_clone+0xd9/0x120 [ 116.487193][ T5997] do_syscall_64+0xc9/0xf80 [ 116.491732][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.497643][ T5997] [ 116.499968][ T5997] Freed by task 5997: [ 116.503947][ T5997] kasan_save_stack+0x30/0x50 [ 116.508639][ T5997] kasan_save_track+0x14/0x30 [ 116.513332][ T5997] kasan_save_free_info+0x3b/0x70 [ 116.518364][ T5997] __kasan_slab_free+0x5f/0x80 [ 116.523158][ T5997] kmem_cache_free+0x143/0x720 [ 116.527945][ T5997] __mmput+0x379/0x410 [ 116.532040][ T5997] mmput+0x67/0x80 [ 116.535864][ T5997] do_exit+0x78a/0x2a30 [ 116.540044][ T5997] do_group_exit+0xd5/0x2a0 [ 116.544576][ T5997] __x64_sys_exit_group+0x3e/0x50 [ 116.549715][ T5997] x64_sys_call+0x14fd/0x1510 [ 116.554412][ T5997] do_syscall_64+0xc9/0xf80 [ 116.558940][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.564850][ T5997] [ 116.567177][ T5997] The buggy address belongs to the object at ffff8880323c0c40 [ 116.567177][ T5997] which belongs to the cache mm_struct of size 2968 [ 116.581161][ T5997] The buggy address is located 192 bytes inside of [ 116.581161][ T5997] freed 2968-byte region [ffff8880323c0c40, ffff8880323c17d8) [ 116.595063][ T5997] [ 116.597402][ T5997] The buggy address belongs to the physical page: [ 116.603838][ T5997] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x323c0 [ 116.612613][ T5997] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 116.621124][ T5997] memcg:ffff888033e87501 [ 116.625370][ T5997] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 116.633365][ T5997] page_type: f5(slab) [ 116.637354][ T5997] raw: 00fff00000000040 ffff88813fe30b40 ffffea0000c5da00 0000000000000005 [ 116.645958][ T5997] raw: 0000000000000000 00000000800a000a 00000000f5000000 ffff888033e87501 [ 116.654559][ T5997] head: 00fff00000000040 ffff88813fe30b40 ffffea0000c5da00 0000000000000005 [ 116.663262][ T5997] head: 0000000000000000 00000000800a000a 00000000f5000000 ffff888033e87501 [ 116.671946][ T5997] head: 00fff00000000003 ffffea0000c8f001 00000000ffffffff 00000000ffffffff [ 116.680649][ T5997] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 116.689344][ T5997] page dumped because: kasan: bad access detected [ 116.695857][ T5997] page_owner tracks the page as allocated [ 116.701577][ T5997] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5486, tgid 5486 (dhcpcd), ts 78293233507, free_ts 78166019155 [ 116.722518][ T5997] post_alloc_hook+0x1e1/0x250 [ 116.727311][ T5997] get_page_from_freelist+0xe3d/0x2e10 [ 116.732805][ T5997] __alloc_frozen_pages_noprof+0x26c/0x2410 [ 116.738717][ T5997] alloc_pages_mpol+0x1fb/0x550 [ 116.743595][ T5997] new_slab+0x2c4/0x440 [ 116.747761][ T5997] ___slab_alloc+0xda3/0x1ca0 [ 116.752447][ T5997] __slab_alloc.isra.0+0x63/0x110 [ 116.757482][ T5997] kmem_cache_alloc_noprof+0x4ec/0x780 [ 116.762963][ T5997] copy_process+0x72ff/0x79b0 [ 116.767660][ T5997] kernel_clone+0xfc/0x930 [ 116.772104][ T5997] __do_sys_clone+0xd9/0x120 [ 116.776718][ T5997] do_syscall_64+0xc9/0xf80 [ 116.781229][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.787218][ T5997] page last free pid 5655 tgid 5655 stack trace: [ 116.793545][ T5997] __free_frozen_pages+0x822/0x1130 [ 116.798758][ T5997] __put_partials+0x127/0x160 [ 116.803449][ T5997] qlist_free_all+0x47/0xe0 [ 116.807970][ T5997] kasan_quarantine_reduce+0x1a0/0x1f0 [ 116.813448][ T5997] __kasan_slab_alloc+0x69/0x90 [ 116.818321][ T5997] kmem_cache_alloc_noprof+0x2ad/0x780 [ 116.823804][ T5997] vm_area_dup+0x27/0x8e0 [ 116.828146][ T5997] __split_vma+0x18c/0xe30 [ 116.832578][ T5997] vms_gather_munmap_vmas+0x3aa/0x1320 [ 116.838046][ T5997] __mmap_region+0x46e/0x2820 [ 116.842842][ T5997] mmap_region+0x180/0x3e0 [ 116.847633][ T5997] do_mmap+0xc63/0x12f0 [ 116.851864][ T5997] vm_mmap_pgoff+0x29e/0x470 [ 116.856478][ T5997] ksys_mmap_pgoff+0x328/0x5b0 [ 116.861260][ T5997] __x64_sys_mmap+0x125/0x190 [ 116.865950][ T5997] do_syscall_64+0xc9/0xf80 [ 116.870468][ T5997] [ 116.872794][ T5997] Memory state around the buggy address: [ 116.878439][ T5997] ffff8880323c0c00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 116.886525][ T5997] ffff8880323c0c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.894784][ T5997] >ffff8880323c0d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.902860][ T5997] ^ [ 116.906939][ T5997] ffff8880323c0d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.915012][ T5997] ffff8880323c0e00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 116.923104][ T5997] ================================================================== [ 116.931178][ T5997] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 116.938377][ T5997] CPU: 1 UID: 0 PID: 5997 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 116.947508][ T5997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 116.957587][ T5997] Call Trace: [ 116.960879][ T5997] [ 116.963820][ T5997] dump_stack_lvl+0x100/0x190 [ 116.968520][ T5997] vpanic+0x20d/0x630 [ 116.972545][ T5997] panic+0xd1/0xd1 [ 116.976287][ T5997] ? __pfx_panic+0x10/0x10 [ 116.980719][ T5997] ? end_report.part.0+0x23/0x90 [ 116.985676][ T5997] ? rcu_is_watching+0x12/0xc0 [ 116.990460][ T5997] ? end_report.part.0+0x23/0x90 [ 116.995417][ T5997] ? check_panic_on_warn+0x1f/0x90 [ 117.000544][ T5997] check_panic_on_warn.cold+0x19/0x34 [ 117.006190][ T5997] end_report.part.0+0x3a/0x90 [ 117.010981][ T5997] kasan_report.cold+0xe/0x18 [ 117.015690][ T5997] ? __schedule+0xc56/0x5fa0 [ 117.020307][ T5997] kasan_check_range+0x10f/0x1e0 [ 117.025257][ T5997] __schedule+0xc56/0x5fa0 [ 117.029700][ T5997] ? __lock_acquire+0x4a5/0x2630 [ 117.034668][ T5997] ? do_raw_spin_lock+0x128/0x260 [ 117.039719][ T5997] ? __pfx___schedule+0x10/0x10 [ 117.044598][ T5997] ? rcu_is_watching+0x12/0xc0 [ 117.049376][ T5997] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 117.055212][ T5997] ? do_task_dead+0x19/0x100 [ 117.059818][ T5997] do_task_dead+0xca/0x100 [ 117.064250][ T5997] do_exit+0x1677/0x2a30 [ 117.068505][ T5997] ? __pfx_do_exit+0x10/0x10 [ 117.073135][ T5997] ? do_group_exit+0x1bd/0x2a0 [ 117.077931][ T5997] ? rcu_is_watching+0x12/0xc0 [ 117.082717][ T5997] do_group_exit+0xd5/0x2a0 [ 117.087232][ T5997] __x64_sys_exit_group+0x3e/0x50 [ 117.092270][ T5997] x64_sys_call+0x14fd/0x1510 [ 117.096980][ T5997] do_syscall_64+0xc9/0xf80 [ 117.101503][ T5997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.107408][ T5997] RIP: 0033:0x7fcab0b9bf79 [ 117.111832][ T5997] Code: Unable to access opcode bytes at 0x7fcab0b9bf4f. [ 117.118859][ T5997] RSP: 002b:00007ffd4b156288 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 117.127285][ T5997] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcab0b9bf79 [ 117.135265][ T5997] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 117.143244][ T5997] RBP: 0000000000000003 R08: 0000000000000000 R09: 00007fcab0de4280 [ 117.151222][ T5997] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 117.159206][ T5997] R13: 00007fcab0de4280 R14: 0000000000000003 R15: 00007ffd4b156340 [ 117.167197][ T5997] [ 118.310941][ T5997] Shutting down cpus with NMI [ 118.316297][ T5997] Kernel Offset: disabled [ 118.320639][ T5997] Rebooting in 86400 seconds..