Warning: Permanently added '10.128.1.37' (ED25519) to the list of known hosts.
2026/07/31 07:10:15 parsed 1 programs
2026/07/31 07:10:15 serving rpc on tcp://40727
[ 74.344335][ T4199] cgroup: Unknown subsys name 'net'
[ 74.478086][ T4199] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 76.087395][ T4199] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 78.905519][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.918655][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.931114][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 78.956492][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 78.965090][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 78.975194][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 80.042537][ T4281] chnl_net:caif_netlink_parms(): no params data found
[ 80.095295][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.103149][ T4281] bridge0: port 1(bridge_slave_0) entered disabled state
[ 80.111413][ T4281] device bridge_slave_0 entered promiscuous mode
[ 80.121328][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.128476][ T4281] bridge0: port 2(bridge_slave_1) entered disabled state
[ 80.136749][ T4281] device bridge_slave_1 entered promiscuous mode
[ 80.158956][ T4281] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 80.170533][ T4281] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 80.194507][ T4281] team0: Port device team_slave_0 added
[ 80.202404][ T4281] team0: Port device team_slave_1 added
[ 80.220833][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 80.227861][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 80.254458][ T4281] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 80.267607][ T4281] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 80.274977][ T4281] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 80.301171][ T4281] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 80.334704][ T4281] device hsr_slave_0 entered promiscuous mode
[ 80.343528][ T4281] device hsr_slave_1 entered promiscuous mode
[ 80.506104][ T4281] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 80.534971][ T4281] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 80.544737][ T4281] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 80.554354][ T4281] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 80.583288][ T4281] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.590655][ T4281] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 80.598646][ T4281] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.606202][ T4281] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 80.684457][ T4281] 8021q: adding VLAN 0 to HW filter on device bond0
[ 80.699588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 80.709740][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 80.719617][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 80.728661][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 80.743834][ T4281] 8021q: adding VLAN 0 to HW filter on device team0
[ 80.774925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 80.783671][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.790902][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 80.802981][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 80.812179][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.819290][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 80.860828][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 80.871581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 80.889684][ T4281] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 80.901301][ T4281] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 80.914359][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 80.923445][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 80.933404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 80.942439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 81.081064][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 81.089832][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 81.106821][ T4281] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 81.137193][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 81.146363][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 81.199311][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 81.208383][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 81.217737][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 81.225983][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 81.236629][ T4281] device veth0_vlan entered promiscuous mode
[ 81.253219][ T4281] device veth1_vlan entered promiscuous mode
[ 81.277093][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 81.286764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 81.295922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 81.308166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 81.323597][ T4281] device veth0_macvtap entered promiscuous mode
[ 81.337969][ T4281] device veth1_macvtap entered promiscuous mode
[ 81.357600][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 81.367211][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 81.377429][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 81.387633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 81.399055][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 81.412104][ T4281] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 81.423698][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 81.434485][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 81.448100][ T4281] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.458816][ T4281] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.469272][ T4281] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.482914][ T4281] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.636140][ T4281] syz-executor (4281) used greatest stack depth: 20176 bytes left
2026/07/31 07:10:25 executed programs: 0
[ 82.593697][ T4305] chnl_net:caif_netlink_parms(): no params data found
[ 82.653902][ T4305] bridge0: port 1(bridge_slave_0) entered blocking state
[ 82.661201][ T4305] bridge0: port 1(bridge_slave_0) entered disabled state
[ 82.669109][ T4305] device bridge_slave_0 entered promiscuous mode
[ 82.681371][ T4305] bridge0: port 2(bridge_slave_1) entered blocking state
[ 82.688597][ T4305] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.697551][ T4305] device bridge_slave_1 entered promiscuous mode
[ 82.725290][ T4305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 82.739405][ T4305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 82.773111][ T4305] team0: Port device team_slave_0 added
[ 82.782094][ T4305] team0: Port device team_slave_1 added
[ 82.808438][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 82.818123][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 82.847697][ T4305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 82.863335][ T4305] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 82.870432][ T4305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 82.900636][ T4305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 82.938616][ T4305] device hsr_slave_0 entered promiscuous mode
[ 82.945588][ T4305] device hsr_slave_1 entered promiscuous mode
[ 82.952464][ T4305] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 82.960525][ T4305] Cannot create hsr debugfs directory
[ 83.053690][ T4305] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 84.511246][ T4235] Bluetooth: hci0: command 0x0409 tx timeout
[ 86.107390][ T4305] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.557149][ T4305] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.602587][ T4278] Bluetooth: hci0: command 0x041b tx timeout
[ 86.658655][ T4305] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 86.764579][ T4305] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 86.777755][ T4305] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 86.793775][ T4305] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 86.803283][ T4305] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 86.872891][ T4305] 8021q: adding VLAN 0 to HW filter on device bond0
[ 86.885856][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 86.894837][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 86.927507][ T4305] 8021q: adding VLAN 0 to HW filter on device team0
[ 86.938535][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 86.950954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 86.959616][ T154] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.966763][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 86.992678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 87.001913][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 87.011467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 87.022617][ T154] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.029735][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.038629][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 87.048941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 87.071391][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 87.081246][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 87.091119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 87.103938][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 87.114135][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 87.123487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 87.132331][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 87.141467][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 87.152708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 87.172143][ T4305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 87.374160][ T1273] device hsr_slave_0 left promiscuous mode
[ 87.384144][ T1273] device hsr_slave_1 left promiscuous mode
[ 87.399863][ T1273] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 87.411295][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 87.422928][ T1273] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 87.432110][ T1273] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 87.442445][ T1273] device bridge_slave_1 left promiscuous mode
[ 87.449653][ T1273] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.469562][ T1273] device bridge_slave_0 left promiscuous mode
[ 87.476097][ T1273] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.504434][ T1273] device veth1_macvtap left promiscuous mode
[ 87.511499][ T1273] device veth0_macvtap left promiscuous mode
[ 87.517624][ T1273] device veth1_vlan left promiscuous mode
[ 87.524660][ T1273] device veth0_vlan left promiscuous mode
[ 87.744526][ T1273] team0 (unregistering): Port device team_slave_1 removed
[ 87.762701][ T1273] team0 (unregistering): Port device team_slave_0 removed
[ 87.776950][ T1273] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 87.792993][ T1273] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 87.852997][ T1273] bond0 (unregistering): Released all slaves
[ 87.926835][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 87.934731][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 87.948148][ T4305] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 87.977661][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 87.987460][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 88.012672][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 88.021581][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 88.032525][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 88.040723][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 88.050163][ T4305] device veth0_vlan entered promiscuous mode
[ 88.063012][ T4305] device veth1_vlan entered promiscuous mode
[ 88.094463][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 88.103178][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 88.112439][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 88.122702][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 88.134020][ T4305] device veth0_macvtap entered promiscuous mode
[ 88.144131][ T4305] device veth1_macvtap entered promiscuous mode
[ 88.159063][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 88.167954][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 88.177086][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 88.185801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 88.195407][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 88.212057][ T4305] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 88.220370][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 88.229328][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 88.242402][ T4305] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.252221][ T4305] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.262044][ T4305] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.270971][ T4305] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 88.325203][ T3066] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 88.336474][ T3066] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 88.344461][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 88.369886][ T3066] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 88.377940][ T3066] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 88.388197][ T3066] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 88.490253][ T4317] svc: failed to register nfsdv3 RPC service (errno 111).
[ 88.500141][ T4317] svc: failed to register nfsaclv3 RPC service (errno 111).
[ 88.589931][ T4305] ==================================================================
[ 88.598275][ T4305] BUG: KASAN: use-after-free in nfsd_shutdown_threads+0x89/0x1a0
[ 88.606076][ T4305] Write of size 4 at addr ffff88805de77050 by task syz-executor/4305
[ 88.614177][ T4305]
[ 88.616553][ T4305] CPU: 1 PID: 4305 Comm: syz-executor Not tainted syzkaller #0
[ 88.624306][ T4305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 88.634413][ T4305] Call Trace:
[ 88.637731][ T4305]
[ 88.640688][ T4305] dump_stack_lvl+0x188/0x250
[ 88.645412][ T4305] ? show_regs_print_info+0x20/0x20
[ 88.650653][ T4305] ? load_image+0x410/0x410
[ 88.655214][ T4305] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 88.660721][ T4305] ? rcu_lock_release+0x5/0x20
[ 88.665527][ T4305] print_address_description+0x60/0x2d0
[ 88.671117][ T4305] ? nfsd_shutdown_threads+0x89/0x1a0
[ 88.676558][ T4305] kasan_report+0xdf/0x130
[ 88.681016][ T4305] ? nfsd_shutdown_threads+0x89/0x1a0
[ 88.681475][ T13] Bluetooth: hci0: command 0x040f tx timeout
[ 88.686439][ T4305] kasan_check_range+0x235/0x290
[ 88.697489][ T4305] nfsd_shutdown_threads+0x89/0x1a0
[ 88.702823][ T4305] nfsd_umount+0x3e/0xc0
[ 88.707118][ T4305] deactivate_locked_super+0x93/0xf0
[ 88.712452][ T4305] cleanup_mnt+0x426/0x4d0
[ 88.716918][ T4305] task_work_run+0x125/0x1a0
[ 88.721557][ T4305] exit_to_user_mode_loop+0x10f/0x130
[ 88.726967][ T4305] exit_to_user_mode_prepare+0xee/0x180
[ 88.732682][ T4305] syscall_exit_to_user_mode+0x16/0x40
[ 88.738221][ T4305] do_syscall_64+0x58/0xa0
[ 88.742674][ T4305] ? clear_bhb_loop+0x30/0x80
[ 88.747379][ T4305] ? clear_bhb_loop+0x30/0x80
[ 88.752088][ T4305] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 88.758027][ T4305] RIP: 0033:0x7f0873ee0257
[ 88.762482][ T4305] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 88.782245][ T4305] RSP: 002b:00007ffd5c2682d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 88.790726][ T4305] RAX: 0000000000000000 RBX: 00007f0873f7545c RCX: 00007f0873ee0257
[ 88.798776][ T4305] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5c268390
[ 88.806853][ T4305] RBP: 00007ffd5c268390 R08: 00007ffd5c269390 R09: 00000000ffffffff
[ 88.814870][ T4305] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd5c269420
[ 88.822998][ T4305] R13: 00007f0873f7545c R14: 0000000000015945 R15: 00007ffd5c269460
[ 88.831022][ T4305]
[ 88.834107][ T4305]
[ 88.836452][ T4305] Allocated by task 4317:
[ 88.840803][ T4305] __kasan_kmalloc+0xaf/0xe0
[ 88.845450][ T4305] __svc_create+0x60/0x9d0
[ 88.849898][ T4305] svc_create_pooled+0x62f/0x810
[ 88.854864][ T4305] nfsd_create_serv+0x2f9/0x700
[ 88.859747][ T4305] nfsd_svc+0x132/0x9e0
[ 88.863933][ T4305] write_threads+0x2ea/0x350
[ 88.868552][ T4305] nfsctl_transaction_write+0x105/0x150
[ 88.874134][ T4305] vfs_write+0x304/0xd70
[ 88.878406][ T4305] ksys_write+0x153/0x260
[ 88.882766][ T4305] do_syscall_64+0x4c/0xa0
[ 88.887215][ T4305] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 88.893150][ T4305]
[ 88.895496][ T4305] Freed by task 4317:
[ 88.899498][ T4305] kasan_set_track+0x4b/0x70
[ 88.904139][ T4305] kasan_set_free_info+0x1f/0x40
[ 88.909111][ T4305] ____kasan_slab_free+0xd5/0x110
[ 88.914168][ T4305] slab_free_freelist_hook+0xec/0x170
[ 88.919655][ T4305] kfree+0xef/0x2a0
[ 88.923492][ T4305] nfsd_svc+0x7cf/0x9e0
[ 88.927674][ T4305] write_threads+0x2ea/0x350
[ 88.932303][ T4305] nfsctl_transaction_write+0x105/0x150
[ 88.937898][ T4305] vfs_write+0x304/0xd70
[ 88.942183][ T4305] ksys_write+0x153/0x260
[ 88.946543][ T4305] do_syscall_64+0x4c/0xa0
[ 88.950997][ T4305] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 88.956928][ T4305]
[ 88.959407][ T4305] The buggy address belongs to the object at ffff88805de77000
[ 88.959407][ T4305] which belongs to the cache kmalloc-512 of size 512
[ 88.973492][ T4305] The buggy address is located 80 bytes inside of
[ 88.973492][ T4305] 512-byte region [ffff88805de77000, ffff88805de77200)
[ 88.986974][ T4305] The buggy address belongs to the page:
[ 88.992650][ T4305] page:ffffea0001779d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5de74
[ 89.002949][ T4305] head:ffffea0001779d00 order:2 compound_mapcount:0 compound_pincount:0
[ 89.011303][ T4305] flags: 0xfff00000010200(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 89.019358][ T4305] raw: 00fff00000010200 0000000000000000 dead000000000122 ffff888016c41c80
[ 89.027979][ T4305] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000
[ 89.036887][ T4305] page dumped because: kasan: bad access detected
[ 89.043343][ T4305] page_owner tracks the page as allocated
[ 89.049080][ T4305] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 3066, ts 88396056176, free_ts 79476838313
[ 89.069610][ T4305] get_page_from_freelist+0x24f6/0x2670
[ 89.075201][ T4305] __alloc_pages+0x1ee/0x480
[ 89.079953][ T4305] new_slab+0xc0/0x4b0
[ 89.084059][ T4305] ___slab_alloc+0x807/0xdd0
[ 89.088688][ T4305] __kmalloc+0x11d/0x340
[ 89.092970][ T4305] fib6_info_alloc+0x2e/0xe0
[ 89.097594][ T4305] ip6_route_info_create+0x455/0x1220
[ 89.102998][ T4305] ip6_route_add+0x24/0x130
[ 89.107536][ T4305] addrconf_add_dev+0x295/0x3c0
[ 89.112434][ T4305] addrconf_init_auto_addrs+0x633/0xab0
[ 89.118013][ T4305] addrconf_notify+0xa6b/0xf20
[ 89.122815][ T4305] raw_notifier_call_chain+0xcb/0x160
[ 89.128220][ T4305] netdev_state_change+0xe0/0x160
[ 89.133275][ T4305] linkwatch_do_dev+0x10d/0x160
[ 89.138159][ T4305] __linkwatch_run_queue+0x4b1/0x7c0
[ 89.143475][ T4305] linkwatch_event+0x48/0x50
[ 89.148112][ T4305] page last free stack trace:
[ 89.152805][ T4305] free_unref_page_prepare+0x637/0x6c0
[ 89.158300][ T4305] free_unref_page+0x8f/0x2a0
[ 89.163120][ T4305] __vunmap+0x8e0/0xa80
[ 89.167333][ T4305] kcov_close+0x27/0x50
[ 89.171543][ T4305] __fput+0x212/0x8c0
[ 89.175757][ T4305] task_work_run+0x125/0x1a0
[ 89.180380][ T4305] do_exit+0x635/0x2110
[ 89.184568][ T4305] do_group_exit+0x12c/0x2f0
[ 89.189202][ T4305] get_signal+0x7eb/0x12e0
[ 89.193650][ T4305] arch_do_signal_or_restart+0xe6/0x12a0
[ 89.199412][ T4305] exit_to_user_mode_loop+0x9e/0x130
[ 89.205105][ T4305] exit_to_user_mode_prepare+0xee/0x180
[ 89.210817][ T4305] syscall_exit_to_user_mode+0x16/0x40
[ 89.216319][ T4305] do_syscall_64+0x58/0xa0
[ 89.220785][ T4305] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 89.226729][ T4305]
[ 89.229113][ T4305] Memory state around the buggy address:
[ 89.234784][ T4305] ffff88805de76f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 89.243165][ T4305] ffff88805de76f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 89.251259][ T4305] >ffff88805de77000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 89.259342][ T4305] ^
[ 89.266043][ T4305] ffff88805de77080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 89.274536][ T4305] ffff88805de77100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 89.282740][ T4305] ==================================================================
[ 89.290836][ T4305] Disabling lock debugging due to kernel taint
[ 89.391518][ T4305] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 89.398932][ T4305] CPU: 0 PID: 4305 Comm: syz-executor Tainted: G B syzkaller #0
[ 89.408003][ T4305] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026
[ 89.418095][ T4305] Call Trace:
[ 89.421408][ T4305]
[ 89.424363][ T4305] dump_stack_lvl+0x188/0x250
[ 89.429074][ T4305] ? show_regs_print_info+0x20/0x20
[ 89.434307][ T4305] ? load_image+0x410/0x410
[ 89.438850][ T4305] panic+0x2f8/0x850
[ 89.442790][ T4305] ? bpf_jit_dump+0xd0/0xd0
[ 89.447331][ T4305] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 89.453377][ T4305] ? _raw_spin_unlock+0x40/0x40
[ 89.458379][ T4305] ? nfsd_shutdown_threads+0x89/0x1a0
[ 89.463836][ T4305] check_panic_on_warn+0x80/0xa0
[ 89.468815][ T4305] ? nfsd_shutdown_threads+0x89/0x1a0
[ 89.474231][ T4305] end_report+0x6d/0xf0
[ 89.478425][ T4305] kasan_report+0x102/0x130
[ 89.482964][ T4305] ? nfsd_shutdown_threads+0x89/0x1a0
[ 89.488372][ T4305] kasan_check_range+0x235/0x290
[ 89.493344][ T4305] nfsd_shutdown_threads+0x89/0x1a0
[ 89.498636][ T4305] nfsd_umount+0x3e/0xc0
[ 89.502999][ T4305] deactivate_locked_super+0x93/0xf0
[ 89.508321][ T4305] cleanup_mnt+0x426/0x4d0
[ 89.513210][ T4305] task_work_run+0x125/0x1a0
[ 89.517841][ T4305] exit_to_user_mode_loop+0x10f/0x130
[ 89.523243][ T4305] exit_to_user_mode_prepare+0xee/0x180
[ 89.528829][ T4305] syscall_exit_to_user_mode+0x16/0x40
[ 89.534429][ T4305] do_syscall_64+0x58/0xa0
[ 89.538889][ T4305] ? clear_bhb_loop+0x30/0x80
[ 89.543601][ T4305] ? clear_bhb_loop+0x30/0x80
[ 89.548335][ T4305] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 89.554282][ T4305] RIP: 0033:0x7f0873ee0257
[ 89.558847][ T4305] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8
[ 89.578504][ T4305] RSP: 002b:00007ffd5c2682d8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6
[ 89.586956][ T4305] RAX: 0000000000000000 RBX: 00007f0873f7545c RCX: 00007f0873ee0257
[ 89.595353][ T4305] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd5c268390
[ 89.604119][ T4305] RBP: 00007ffd5c268390 R08: 00007ffd5c269390 R09: 00000000ffffffff
[ 89.613891][ T4305] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd5c269420
[ 89.622731][ T4305] R13: 00007f0873f7545c R14: 0000000000015945 R15: 00007ffd5c269460
[ 89.631262][ T4305]
[ 89.634509][ T4305] Kernel Offset: disabled
[ 89.638875][ T4305] Rebooting in 86400 seconds..