no interfaces have a carrier
[ 40.505177][ T5255] 8021q: adding VLAN 0 to HW filter on device bond0
[ 40.509191][ T5255] eql: remember to turn off Van-Jacobson compression on your slave devices
Starting crond: OK
Starting sshd: OK
syzkaller
Warning: Permanently added '10.128.1.93' (ED25519) to the list of known hosts.
2026/06/21 06:38:43 parsed 1 programs
2026/06/21 06:38:43 serving rpc on tcp://40095
syzkaller login: [ 69.621948][ T5601] cgroup: Unknown subsys name 'net'
[ 69.883459][ T5601] cgroup: Unknown subsys name 'cpuset'
[ 69.930551][ T5601] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 71.303564][ T5601] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 71.313113][ T1336] ieee802154 phy0 wpan0: encryption failed: -22
[ 71.313297][ T1336] ieee802154 phy1 wpan1: encryption failed: -22
[ 73.972046][ T5628] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 73.972291][ T4909] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 73.972594][ T4909] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 73.973404][ T4909] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 73.973833][ T4909] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 76.265623][ T107] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.265651][ T107] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 76.293475][ T107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 76.293494][ T107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 77.170438][ T5692] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.170535][ T5692] bridge0: port 1(bridge_slave_0) entered disabled state
[ 77.170628][ T5692] bridge_slave_0: entered allmulticast mode
[ 77.171637][ T5692] bridge_slave_0: entered promiscuous mode
[ 77.173261][ T5692] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.173359][ T5692] bridge0: port 2(bridge_slave_1) entered disabled state
[ 77.173445][ T5692] bridge_slave_1: entered allmulticast mode
[ 77.174332][ T5692] bridge_slave_1: entered promiscuous mode
[ 77.224820][ T5692] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 77.238301][ T5692] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 77.264479][ T5692] team0: Port device team_slave_0 added
[ 77.266166][ T5692] team0: Port device team_slave_1 added
[ 77.289744][ T5692] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 77.289754][ T5692] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 77.289772][ T5692] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 77.294477][ T5692] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 77.294518][ T5692] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 77.294592][ T5692] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 77.381854][ T5692] hsr_slave_0: entered promiscuous mode
[ 77.382565][ T5692] hsr_slave_1: entered promiscuous mode
[ 77.495023][ T5692] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 77.523028][ T5692] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 77.524788][ T5692] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 77.572775][ T5692] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 77.573562][ T5692] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 77.613367][ T5692] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 77.614077][ T5692] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 77.652098][ T5692] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 77.871097][ T5692] bridge0: port 2(bridge_slave_1) entered blocking state
[ 77.871194][ T5692] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 77.871376][ T5692] bridge0: port 1(bridge_slave_0) entered blocking state
[ 77.871433][ T5692] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 77.937730][ T5692] 8021q: adding VLAN 0 to HW filter on device bond0
[ 77.970594][ T155] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.010596][ T155] bridge0: port 2(bridge_slave_1) entered disabled state
[ 78.256415][ T5692] 8021q: adding VLAN 0 to HW filter on device team0
[ 78.266069][ T1453] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.266405][ T1453] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 78.282102][ T1453] bridge0: port 2(bridge_slave_1) entered blocking state
[ 78.282153][ T1453] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 78.536414][ T5692] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 78.571243][ T5692] veth0_vlan: entered promiscuous mode
[ 78.575506][ T5692] veth1_vlan: entered promiscuous mode
[ 78.601722][ T5692] veth0_macvtap: entered promiscuous mode
[ 78.604869][ T5692] veth1_macvtap: entered promiscuous mode
[ 78.622630][ T5692] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 78.628115][ T5692] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 78.645933][ T155] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.646073][ T155] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.646198][ T155] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 78.646768][ T155] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/06/21 06:38:57 executed programs: 0
[ 79.270134][ T4909] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 79.271385][ T4909] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 79.272021][ T4909] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 79.273722][ T4909] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 79.274883][ T4909] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 80.099572][ T5732] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.099693][ T5732] bridge0: port 1(bridge_slave_0) entered disabled state
[ 80.099791][ T5732] bridge_slave_0: entered allmulticast mode
[ 80.122060][ T5732] bridge_slave_0: entered promiscuous mode
[ 80.124552][ T5732] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.124655][ T5732] bridge0: port 2(bridge_slave_1) entered disabled state
[ 80.124737][ T5732] bridge_slave_1: entered allmulticast mode
[ 80.125678][ T5732] bridge_slave_1: entered promiscuous mode
[ 80.167247][ T5732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 80.169694][ T5732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 80.199935][ T5732] team0: Port device team_slave_0 added
[ 80.206414][ T5732] team0: Port device team_slave_1 added
[ 80.227017][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 80.227028][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 80.227057][ T5732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 80.228021][ T5732] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 80.228032][ T5732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 80.228050][ T5732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 80.323797][ T5732] hsr_slave_0: entered promiscuous mode
[ 80.324404][ T5732] hsr_slave_1: entered promiscuous mode
[ 80.324821][ T5732] debugfs: 'hsr0' already exists in 'hsr'
[ 80.324845][ T5732] Cannot create hsr debugfs directory
[ 80.601614][ T5732] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.141588][ T5732] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.310708][ T4909] Bluetooth: hci0: command tx timeout
[ 81.550922][ T821] cfg80211: failed to load regulatory.db
[ 81.731624][ T5732] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.961825][ T5732] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 82.270882][ T43] bridge_slave_1: left allmulticast mode
[ 82.270904][ T43] bridge_slave_1: left promiscuous mode
[ 82.271046][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 82.390802][ T43] bridge_slave_0: left allmulticast mode
[ 82.390822][ T43] bridge_slave_0: left promiscuous mode
[ 82.390960][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.000754][ T43] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 83.080729][ T43] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 83.101339][ T43] bond0 (unregistering): Released all slaves
[ 83.148553][ T5732] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 83.163224][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim0
[ 83.164260][ T5732] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 83.202476][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim1
[ 83.203145][ T5732] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 83.243294][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim2
[ 83.244025][ T5732] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 83.272193][ T5732] 8021q: adding VLAN 0 to HW filter on device netdevsim3
[ 83.321590][ T5732] 8021q: adding VLAN 0 to HW filter on device bond0
[ 83.330039][ T5732] 8021q: adding VLAN 0 to HW filter on device team0
[ 83.344943][ T155] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.345010][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 83.349233][ T1471] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.349313][ T1471] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 83.390216][ T4909] Bluetooth: hci0: command tx timeout
[ 83.680290][ T43] hsr_slave_0: left promiscuous mode
[ 83.700273][ T43] hsr_slave_1: left promiscuous mode
[ 83.701473][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 83.701488][ T43] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 83.740853][ T43] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 83.740881][ T43] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 83.800697][ T43] veth1_macvtap: left promiscuous mode
[ 83.800761][ T43] veth0_macvtap: left promiscuous mode
[ 83.800851][ T43] veth1_vlan: left promiscuous mode
[ 83.800927][ T43] veth0_vlan: left promiscuous mode
[ 84.370652][ T43] team0 (unregistering): Port device team_slave_1 removed
[ 84.410655][ T43] team0 (unregistering): Port device team_slave_0 removed
[ 84.614179][ T5732] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 84.646484][ T5732] veth0_vlan: entered promiscuous mode
[ 84.656381][ T5732] veth1_vlan: entered promiscuous mode
[ 84.677448][ T5732] veth0_macvtap: entered promiscuous mode
[ 84.685659][ T5732] veth1_macvtap: entered promiscuous mode
[ 84.699423][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 84.711089][ T5732] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 84.715385][ T5668] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.715602][ T1453] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.715649][ T1453] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.715684][ T1453] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.879838][ T1471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.879857][ T1471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 84.909445][ T5668] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 84.909465][ T5668] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/06/21 06:39:02 executed programs: 2
[ 85.155846][ T5766] loop0: detected capacity change from 0 to 32768
[ 85.208289][ C0] ==================================================================
[ 85.208305][ C0] BUG: KASAN: slab-use-after-free in lbmIODone+0x130e/0x16b0
[ 85.208345][ C0] Read of size 4 at addr ffff888031fafc08 by task kworker/u8:2/43
[ 85.208363][ C0]
[ 85.208382][ C0] CPU: 0 UID: 0 PID: 43 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 85.208407][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 85.208417][ C0] Workqueue: netns cleanup_net
[ 85.208444][ C0] Call Trace:
[ 85.208450][ C0]
[ 85.208456][ C0] dump_stack_lvl+0xe8/0x150
[ 85.208475][ C0] print_address_description+0x55/0x1e0
[ 85.208494][ C0] ? lbmIODone+0x130e/0x16b0
[ 85.208507][ C0] print_report+0x58/0x70
[ 85.208523][ C0] kasan_report+0x117/0x150
[ 85.208546][ C0] ? lbmIODone+0x130e/0x16b0
[ 85.208563][ C0] lbmIODone+0x130e/0x16b0
[ 85.208590][ C0] ? sbitmap_queue_wake_up+0x1a3/0xa20
[ 85.208611][ C0] ? blkg_put+0x22/0x240
[ 85.208634][ C0] ? blkg_put+0x18d/0x240
[ 85.208663][ C0] ? bio_endio+0x980/0x9d0
[ 85.208680][ C0] blk_update_request+0x57b/0xe50
[ 85.208701][ C0] blk_mq_end_request+0x3e/0x70
[ 85.208718][ C0] blk_done_softirq+0x10a/0x160
[ 85.208734][ C0] handle_softirqs+0x1d9/0x6c0
[ 85.208760][ C0] __local_bh_enable_ip+0x170/0x2b0
[ 85.208783][ C0] batadv_tt_local_table_free+0x37c/0x440
[ 85.208805][ C0] ? batadv_tt_local_table_free+0x9c/0x440
[ 85.208828][ C0] batadv_tt_free+0x6e/0x9b0
[ 85.208848][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 85.208873][ C0] ? batadv_mcast_free+0x1bd/0x1e0
[ 85.208892][ C0] ? batadv_bla_free+0x169/0x1b0
[ 85.208910][ C0] batadv_mesh_free+0x87/0x130
[ 85.208925][ C0] batadv_meshif_free+0x15/0x20
[ 85.208941][ C0] ? __pfx_batadv_meshif_free+0x10/0x10
[ 85.208957][ C0] netdev_run_todo+0xeff/0x10d0
[ 85.208979][ C0] ? __pfx_netdev_run_todo+0x10/0x10
[ 85.208997][ C0] ? unregister_netdevice_queue+0x17d/0x340
[ 85.209018][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 85.209039][ C0] ? batadv_meshif_destroy_netlink+0x392/0x470
[ 85.209060][ C0] default_device_exit_batch+0x966/0x9e0
[ 85.209078][ C0] ? __pfx_default_device_exit_batch+0x10/0x10
[ 85.209094][ C0] ? mutex_lock_nested+0x152/0x1d0
[ 85.209116][ C0] ? __pfx_default_device_exit_batch+0x10/0x10
[ 85.209131][ C0] ops_undo_list+0x4b4/0x8d0
[ 85.209147][ C0] ? __pfx_ops_undo_list+0x10/0x10
[ 85.209165][ C0] ? idr_destroy+0x21b/0x2a0
[ 85.209188][ C0] ? rt_spin_unlock+0x160/0x200
[ 85.209208][ C0] cleanup_net+0x575/0x810
[ 85.209224][ C0] ? __pfx_cleanup_net+0x10/0x10
[ 85.209238][ C0] ? lock_acquire+0x5f/0x350
[ 85.209258][ C0] ? rcu_is_watching+0x15/0xb0
[ 85.209282][ C0] ? process_scheduled_works+0xa20/0x14e0
[ 85.209304][ C0] process_scheduled_works+0xa8e/0x14e0
[ 85.209334][ C0] ? __pfx_process_scheduled_works+0x10/0x10
[ 85.209355][ C0] ? do_raw_spin_lock+0x12b/0x2f0
[ 85.209372][ C0] ? assign_work+0x3cf/0x5d0
[ 85.209395][ C0] worker_thread+0xa47/0xfb0
[ 85.209421][ C0] ? __kthread_parkme+0x71/0x1f0
[ 85.209448][ C0] kthread+0x388/0x470
[ 85.209467][ C0] ? __pfx_worker_thread+0x10/0x10
[ 85.209489][ C0] ? __pfx_kthread+0x10/0x10
[ 85.209505][ C0] ret_from_fork+0x514/0xb70
[ 85.209523][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 85.209539][ C0] ? __switch_to+0xc89/0x1420
[ 85.209564][ C0] ? __pfx_kthread+0x10/0x10
[ 85.209579][ C0] ret_from_fork_asm+0x1a/0x30
[ 85.209604][ C0]
[ 85.209609][ C0]
[ 85.209612][ C0] Allocated by task 5766:
[ 85.209619][ C0] kasan_save_track+0x3e/0x80
[ 85.209635][ C0] __kasan_kmalloc+0x93/0xb0
[ 85.209652][ C0] __kmalloc_cache_noprof+0x3a2/0x690
[ 85.209675][ C0] lmLogInit+0x3e5/0x1a20
[ 85.209696][ C0] lmLogOpen+0x4e3/0xf90
[ 85.209717][ C0] jfs_mount_rw+0xf3/0x670
[ 85.209739][ C0] jfs_fill_super+0x769/0xda0
[ 85.209755][ C0] get_tree_bdev_flags+0x430/0x4f0
[ 85.209776][ C0] vfs_get_tree+0x92/0x2a0
[ 85.209796][ C0] do_new_mount+0x319/0xdc0
[ 85.209811][ C0] __se_sys_mount+0x31d/0x420
[ 85.209826][ C0] do_syscall_64+0x174/0x580
[ 85.209839][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.209853][ C0]
[ 85.209856][ C0] Freed by task 5732:
[ 85.209862][ C0] kasan_save_track+0x3e/0x80
[ 85.209878][ C0] kasan_save_free_info+0x40/0x50
[ 85.209900][ C0] __kasan_slab_free+0x5c/0x80
[ 85.209917][ C0] kfree+0x1c5/0x6c0
[ 85.209931][ C0] lmLogShutdown+0x456/0x850
[ 85.209942][ C0] lmLogClose+0x28c/0x530
[ 85.209953][ C0] jfs_umount+0x2da/0x3b0
[ 85.209974][ C0] jfs_put_super+0x8c/0x190
[ 85.209989][ C0] generic_shutdown_super+0x13d/0x2d0
[ 85.210007][ C0] kill_block_super+0x44/0x90
[ 85.210029][ C0] deactivate_locked_super+0xbc/0x130
[ 85.210047][ C0] cleanup_mnt+0x3d3/0x460
[ 85.210066][ C0] task_work_run+0x1d9/0x270
[ 85.210082][ C0] exit_to_user_mode_loop+0x1fa/0x730
[ 85.210099][ C0] do_syscall_64+0x353/0x580
[ 85.210112][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 85.210148][ C0]
[ 85.210153][ C0] The buggy address belongs to the object at ffff888031fafc00
[ 85.210153][ C0] which belongs to the cache kmalloc-256 of size 256
[ 85.210172][ C0] The buggy address is located 8 bytes inside of
[ 85.210172][ C0] freed 256-byte region [ffff888031fafc00, ffff888031fafd00)
[ 85.210195][ C0]
[ 85.210200][ C0] The buggy address belongs to the physical page:
[ 85.210219][ C0] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31fae
[ 85.210239][ C0] head: order:1 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 85.210256][ C0] flags: 0x80000000000040(head|node=0|zone=1)
[ 85.210276][ C0] page_type: f5(slab)
[ 85.210297][ C0] raw: 0080000000000040 ffff88801a011b40 dead000000000100 dead000000000122
[ 85.210316][ C0] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 85.210336][ C0] head: 0080000000000040 ffff88801a011b40 dead000000000100 dead000000000122
[ 85.210355][ C0] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000
[ 85.210375][ C0] head: 0080000000000001 ffffffffffffff81 00000000ffffffff 00000000ffffffff
[ 85.210393][ C0] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000002
[ 85.210405][ C0] page dumped because: kasan: bad access detected
[ 85.210418][ C0] page_owner tracks the page as allocated
[ 85.210426][ C0] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4960, tgid 4960 (udevd), ts 84884275189, free_ts 84560579599
[ 85.210463][ C0] post_alloc_hook+0x1f9/0x250
[ 85.210486][ C0] get_page_from_freelist+0x262a/0x26a0
[ 85.210515][ C0] __alloc_frozen_pages_noprof+0x18d/0x380
[ 85.210543][ C0] allocate_slab+0x74/0x5d0
[ 85.210573][ C0] refill_objects+0x32b/0x3c0
[ 85.210604][ C0] __pcs_replace_empty_main+0x335/0x6a0
[ 85.210637][ C0] __kmalloc_cache_noprof+0x44a/0x690
[ 85.210668][ C0] smk_fetch+0x95/0x140
[ 85.210695][ C0] smack_d_instantiate+0x89c/0x990
[ 85.210718][ C0] security_d_instantiate+0x106/0x1d0
[ 85.210748][ C0] d_splice_alias_ops+0x72/0x440
[ 85.210779][ C0] __lookup_slow+0x1fb/0x2f0
[ 85.210803][ C0] lookup_slow+0x53/0x70
[ 85.210826][ C0] link_path_walk+0xd2a/0x1910
[ 85.210849][ C0] path_openat+0x23c/0x3850
[ 85.210877][ C0] do_file_open+0x23e/0x4a0
[ 85.210904][ C0] page last free pid 20 tgid 20 stack trace:
[ 85.210916][ C0] __free_frozen_pages+0x10e7/0x11c0
[ 85.210940][ C0] rcu_cpu_kthread+0x950/0x1480
[ 85.210967][ C0] smpboot_thread_fn+0x57c/0xa80
[ 85.210998][ C0] kthread+0x388/0x470
[ 85.211018][ C0] ret_from_fork+0x514/0xb70
[ 85.211038][ C0] ret_from_fork_asm+0x1a/0x30
[ 85.211081][ C0]
[ 85.211086][ C0] Memory state around the buggy address:
[ 85.211098][ C0] ffff888031fafb00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 85.211113][ C0] ffff888031fafb80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 85.211127][ C0] >ffff888031fafc00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 85.211138][ C0] ^
[ 85.211149][ C0] ffff888031fafc80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 85.211167][ C0] ffff888031fafd00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 85.211175][ C0] ==================================================================
[ 85.225091][ C0] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 85.225153][ C0] CPU: 0 UID: 0 PID: 43 Comm: kworker/u8:2 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 85.225212][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026
[ 85.225261][ C0] Workqueue: netns cleanup_net
[ 85.225361][ C0] Call Trace:
[ 85.225382][ C0]
[ 85.225405][ C0] vpanic+0x56c/0xa60
[ 85.225498][ C0] ? __pfx_vpanic+0x10/0x10
[ 85.225565][ C0] ? __pfx___schedule+0x10/0x10
[ 85.225664][ C0] panic+0xc5/0xd0
[ 85.225736][ C0] ? __pfx_panic+0x10/0x10
[ 85.225809][ C0] ? preempt_schedule_common+0x82/0xd0
[ 85.225904][ C0] ? lbmIODone+0x130e/0x16b0
[ 85.225957][ C0] check_panic_on_warn+0x89/0xb0
[ 85.226022][ C0] ? lbmIODone+0x130e/0x16b0
[ 85.226073][ C0] end_report+0x73/0x170
[ 85.226147][ C0] ? lbmIODone+0x130e/0x16b0
[ 85.226196][ C0] kasan_report+0x128/0x150
[ 85.226280][ C0] ? lbmIODone+0x130e/0x16b0
[ 85.226346][ C0] lbmIODone+0x130e/0x16b0
[ 85.226399][ C0] ? sbitmap_queue_wake_up+0x1a3/0xa20
[ 85.226467][ C0] ? blkg_put+0x22/0x240
[ 85.226555][ C0] ? blkg_put+0x18d/0x240
[ 85.226675][ C0] ? bio_endio+0x980/0x9d0
[ 85.226754][ C0] blk_update_request+0x57b/0xe50
[ 85.226839][ C0] blk_mq_end_request+0x3e/0x70
[ 85.226904][ C0] blk_done_softirq+0x10a/0x160
[ 85.226967][ C0] handle_softirqs+0x1d9/0x6c0
[ 85.227062][ C0] __local_bh_enable_ip+0x170/0x2b0
[ 85.227142][ C0] batadv_tt_local_table_free+0x37c/0x440
[ 85.227219][ C0] ? batadv_tt_local_table_free+0x9c/0x440
[ 85.227303][ C0] batadv_tt_free+0x6e/0x9b0
[ 85.227377][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80
[ 85.227474][ C0] ? batadv_mcast_free+0x1bd/0x1e0
[ 85.227547][ C0] ? batadv_bla_free+0x169/0x1b0
[ 85.227614][ C0] batadv_mesh_free+0x87/0x130
[ 85.227688][ C0] batadv_meshif_free+0x15/0x20
[ 85.227742][ C0] ? __pfx_batadv_meshif_free+0x10/0x10
[ 85.227804][ C0] netdev_run_todo+0xeff/0x10d0
[ 85.227881][ C0] ? __pfx_netdev_run_todo+0x10/0x10
[ 85.227947][ C0] ? unregister_netdevice_queue+0x17d/0x340
[ 85.228033][ C0] ? __pfx_unregister_netdevice_queue+0x10/0x10
[ 85.228109][ C0] ? batadv_meshif_destroy_netlink+0x392/0x470
[ 85.228170][ C0] default_device_exit_batch+0x966/0x9e0
[ 85.228242][ C0] ? __pfx_default_device_exit_batch+0x10/0x10
[ 85.228305][ C0] ? mutex_lock_nested+0x152/0x1d0
[ 85.228373][ C0] ? __pfx_default_device_exit_batch+0x10/0x10
[ 85.228395][ C0] ops_undo_list+0x4b4/0x8d0
[ 85.228420][ C0] ? __pfx_ops_undo_list+0x10/0x10
[ 85.228442][ C0] ? idr_destroy+0x21b/0x2a0
[ 85.228476][ C0] ? rt_spin_unlock+0x160/0x200
[ 85.228506][ C0] cleanup_net+0x575/0x810
[ 85.228530][ C0] ? __pfx_cleanup_net+0x10/0x10
[ 85.228551][ C0] ? lock_acquire+0x5f/0x350
[ 85.228581][ C0] ? rcu_is_watching+0x15/0xb0
[ 85.228615][ C0] ? process_scheduled_works+0xa20/0x14e0
[ 85.228647][ C0] process_scheduled_works+0xa8e/0x14e0
[ 85.228701][ C0] ? __pfx_process_scheduled_works+0x10/0x10
[ 85.228733][ C0] ? do_raw_spin_lock+0x12b/0x2f0
[ 85.228759][ C0] ? assign_work+0x3cf/0x5d0
[ 85.228792][ C0] worker_thread+0xa47/0xfb0
[ 85.228832][ C0] ? __kthread_parkme+0x71/0x1f0
[ 85.228871][ C0] kthread+0x388/0x470
[ 85.228894][ C0] ? __pfx_worker_thread+0x10/0x10
[ 85.228926][ C0] ? __pfx_kthread+0x10/0x10
[ 85.228948][ C0] ret_from_fork+0x514/0xb70
[ 85.228975][ C0] ? __pfx_ret_from_fork+0x10/0x10
[ 85.228999][ C0] ? __switch_to+0xc89/0x1420
[ 85.229036][ C0] ? __pfx_kthread+0x10/0x10
[ 85.229059][ C0] ret_from_fork_asm+0x1a/0x30
[ 85.229095][ C0]
[ 85.229698][ C0] Kernel Offset: disabled