Warning: Permanently added '10.128.0.148' (ED25519) to the list of known hosts.
2026/10/26 09:01:51 parsed 1 programs
2026/10/26 09:01:51 serving rpc on tcp://43981
[ 79.592078][ T5794] cgroup: Unknown subsys name 'net'
[ 79.722554][ T5794] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 81.091923][ T5794] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 82.793999][ T5811] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 82.932852][ T5816] (null): rxe_set_mtu: Set mtu to 1024
[ 82.941556][ T5816] rxe_eth0 speed is unknown, defaulting to 1000
[ 82.949764][ T5816] rxe_eth0 speed is unknown, defaulting to 1000
[ 82.964800][ T5816] rxe_eth0 speed is unknown, defaulting to 1000
[ 83.108853][ T5816] infiniband rxe0: set active
[ 83.115239][ T5816] infiniband rxe0: added rxe_eth0
[ 83.125322][ T2134] rxe_eth0 speed is unknown, defaulting to 1000
[ 83.172208][ T5816] RDS/IB: rxe0: added
[ 83.177012][ T5816] smc: adding ib device rxe0 with port count 1
[ 83.183328][ T5816] smc: ib device rxe0 port 1 has pnetid
[ 83.190457][ T2134] rxe_eth0 speed is unknown, defaulting to 1000
[ 83.201081][ T5816] rxe_eth0 speed is unknown, defaulting to 1000
[ 83.383525][ T5816] rxe_eth0 speed is unknown, defaulting to 1000
[ 83.808589][ T5816] chnl_net:caif_netlink_parms(): no params data found
[ 83.865768][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.873598][ T5816] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.881565][ T5816] bridge_slave_0: entered allmulticast mode
[ 83.888498][ T5816] bridge_slave_0: entered promiscuous mode
[ 83.897824][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.904926][ T5816] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.912690][ T5816] bridge_slave_1: entered allmulticast mode
[ 83.919895][ T5816] bridge_slave_1: entered promiscuous mode
[ 83.941222][ T5816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 83.952447][ T5816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 83.976765][ T5816] team0: Port device team_slave_0 added
[ 83.984219][ T5816] team0: Port device team_slave_1 added
[ 84.004407][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 84.011645][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 84.037679][ T5816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 84.050453][ T5816] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 84.057487][ T5816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 84.083637][ T5816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 84.118356][ T5816] hsr_slave_0: entered promiscuous mode
[ 84.125453][ T5816] hsr_slave_1: entered promiscuous mode
[ 84.237854][ T5816] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 84.250005][ T5816] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 84.259210][ T5816] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 84.269525][ T5816] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 84.293904][ T5816] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.301210][ T5816] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.309437][ T5816] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.316585][ T5816] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.371540][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0
[ 84.389408][ T3551] bridge0: port 1(bridge_slave_0) entered disabled state
[ 84.398269][ T3551] bridge0: port 2(bridge_slave_1) entered disabled state
[ 84.413414][ T5816] 8021q: adding VLAN 0 to HW filter on device team0
[ 84.427157][ T3521] bridge0: port 1(bridge_slave_0) entered blocking state
[ 84.434460][ T3521] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 84.452067][ T3551] bridge0: port 2(bridge_slave_1) entered blocking state
[ 84.459275][ T3551] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 84.621531][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 84.657972][ T5816] veth0_vlan: entered promiscuous mode
[ 84.670137][ T5816] veth1_vlan: entered promiscuous mode
[ 84.697927][ T5816] veth0_macvtap: entered promiscuous mode
[ 84.708454][ T5816] veth1_macvtap: entered promiscuous mode
[ 84.727135][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 84.742670][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 84.754860][ T5816] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.764309][ T5816] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.773246][ T5816] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.784081][ T5816] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 84.921574][ T5816] syz-executor (5816) used greatest stack depth: 20904 bytes left
[ 84.929827][ T3551] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 84.951335][ T5852] rxe_eth0 speed is unknown, defaulting to 1000
[ 85.141226][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 85.151138][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 85.159161][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 85.167629][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 85.176481][ T5859] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 85.183853][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 85.213661][ T5857] rxe_eth0 speed is unknown, defaulting to 1000
[ 85.552866][ T5864] rxe_eth0 speed is unknown, defaulting to 1000
[ 85.797513][ T5869] rxe_eth0 speed is unknown, defaulting to 1000
[ 86.061421][ T5874] rxe_eth0 speed is unknown, defaulting to 1000
[ 86.201498][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.216549][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.245084][ T3431] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 86.252957][ T3431] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 86.350278][ T5879] rxe_eth0 speed is unknown, defaulting to 1000
[ 86.513716][ T5883] rxe_eth0 speed is unknown, defaulting to 1000
[ 86.794069][ T5886] rxe_eth0 speed is unknown, defaulting to 1000
[ 86.988246][ T9] cfg80211: failed to load regulatory.db
[ 87.109509][ T5891] rxe_eth0 speed is unknown, defaulting to 1000
[ 87.670877][ T5897] rxe_eth0 speed is unknown, defaulting to 1000
[ 87.833954][ T3551] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 88.123630][ T5902] rxe_eth0 speed is unknown, defaulting to 1000
[ 88.361418][ T5907] rxe_eth0 speed is unknown, defaulting to 1000
[ 88.621819][ T5912] rxe_eth0 speed is unknown, defaulting to 1000
[ 88.824440][ T5917] rxe_eth0 speed is unknown, defaulting to 1000
2026/10/26 09:02:02 executed programs: 0
[ 89.320967][ T5859] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 89.329927][ T5859] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 89.338067][ T5859] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 89.348371][ T5859] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 89.356646][ T5859] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 89.363964][ T5859] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 89.396419][ T5922] rxe_eth0 speed is unknown, defaulting to 1000
[ 89.567524][ T5922] chnl_net:caif_netlink_parms(): no params data found
[ 89.620786][ T5922] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.628608][ T5922] bridge0: port 1(bridge_slave_0) entered disabled state
[ 89.636028][ T5922] bridge_slave_0: entered allmulticast mode
[ 89.642829][ T5922] bridge_slave_0: entered promiscuous mode
[ 89.651156][ T5922] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.658663][ T5922] bridge0: port 2(bridge_slave_1) entered disabled state
[ 89.666203][ T5922] bridge_slave_1: entered allmulticast mode
[ 89.672939][ T5922] bridge_slave_1: entered promiscuous mode
[ 89.696096][ T5922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 89.709116][ T5922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 89.736189][ T5922] team0: Port device team_slave_0 added
[ 89.743638][ T5922] team0: Port device team_slave_1 added
[ 89.763172][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 89.770251][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 89.798461][ T5922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 89.810601][ T5922] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 89.817632][ T5922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 89.843573][ T5922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 89.881243][ T5922] hsr_slave_0: entered promiscuous mode
[ 89.887850][ T5922] hsr_slave_1: entered promiscuous mode
[ 89.894898][ T5922] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 89.902877][ T5922] Cannot create hsr debugfs directory
[ 89.950132][ T3551] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.038782][ T3551] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 90.941165][ T3551] hsr_slave_0: left promiscuous mode
[ 90.948346][ T3551] hsr_slave_1: left promiscuous mode
[ 90.955219][ T3551] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 90.962699][ T3551] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 90.973536][ T3551] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 90.981116][ T3551] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 90.989731][ T3551] bridge_slave_1: left allmulticast mode
[ 90.995511][ T3551] bridge_slave_1: left promiscuous mode
[ 91.002157][ T3551] bridge0: port 2(bridge_slave_1) entered disabled state
[ 91.041049][ T3551] bridge_slave_0: left allmulticast mode
[ 91.048660][ T3551] bridge_slave_0: left promiscuous mode
[ 91.054346][ T3551] bridge0: port 1(bridge_slave_0) entered disabled state
[ 91.077141][ T3551] veth1_macvtap: left promiscuous mode
[ 91.082908][ T3551] veth0_macvtap: left promiscuous mode
[ 91.089585][ T3551] veth1_vlan: left promiscuous mode
[ 91.095507][ T3551] veth0_vlan: left promiscuous mode
[ 91.387556][ T5859] Bluetooth: hci0: command tx timeout
[ 91.484010][ T3551] team0 (unregistering): Port device team_slave_1 removed
[ 91.518234][ T3551] team0 (unregistering): Port device team_slave_0 removed
[ 91.546967][ T3551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 91.581234][ T3551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 91.791580][ T3551] bond0 (unregistering): Released all slaves
[ 91.873516][ T5922] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 91.885814][ T5922] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 91.902893][ T5922] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 91.921172][ T5922] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 92.006012][ T5922] 8021q: adding VLAN 0 to HW filter on device bond0
[ 92.025747][ T5922] 8021q: adding VLAN 0 to HW filter on device team0
[ 92.039477][ T3431] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.046624][ T3431] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 92.060948][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.068138][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 92.308254][ T5922] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 92.369501][ T5922] veth0_vlan: entered promiscuous mode
[ 92.399485][ T5922] veth1_vlan: entered promiscuous mode
[ 92.462085][ T5922] veth0_macvtap: entered promiscuous mode
[ 92.491006][ T5922] veth1_macvtap: entered promiscuous mode
[ 92.531260][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 92.545723][ T5922] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 92.558413][ T5922] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.567804][ T5922] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.576977][ T5922] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.586023][ T5922] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.643005][ T3431] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.656882][ T3431] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.680194][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 92.688694][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 92.731007][ T5963] ==================================================================
[ 92.739107][ T5963] BUG: KASAN: slab-use-after-free in snapshot_ctr+0x5cc/0x1340
[ 92.746664][ T5963] Read of size 8 at addr ffff88802aa87b98 by task syz.0.17/5963
[ 92.754284][ T5963]
[ 92.756608][ T5963] CPU: 1 PID: 5963 Comm: syz.0.17 Not tainted syzkaller #0
[ 92.763791][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 92.773845][ T5963] Call Trace:
[ 92.777116][ T5963]
[ 92.780040][ T5963] dump_stack_lvl+0x18c/0x250
[ 92.784725][ T5963] ? __lock_acquire+0x7eb0/0x7eb0
[ 92.789749][ T5963] ? show_regs_print_info+0x20/0x20
[ 92.794948][ T5963] ? load_image+0x420/0x420
[ 92.799448][ T5963] ? __virt_addr_valid+0x10c/0x380
[ 92.804565][ T5963] ? __virt_addr_valid+0x10c/0x380
[ 92.809688][ T5963] ? __virt_addr_valid+0x10c/0x380
[ 92.814793][ T5963] print_report+0xa8/0x210
[ 92.819202][ T5963] ? snapshot_ctr+0x5cc/0x1340
[ 92.823963][ T5963] kasan_report+0x117/0x150
[ 92.828466][ T5963] ? snapshot_ctr+0x5cc/0x1340
[ 92.833227][ T5963] snapshot_ctr+0x5cc/0x1340
[ 92.837816][ T5963] ? dm_snap_cow+0x40/0x40
[ 92.842234][ T5963] ? dm_split_args+0x505/0x5b0
[ 92.846991][ T5963] dm_table_add_target+0x575/0xbc0
[ 92.852102][ T5963] table_load+0x2eb/0x7e0
[ 92.856440][ T5963] ? dev_wait+0x2f0/0x2f0
[ 92.860769][ T5963] ? __might_fault+0xaa/0x120
[ 92.865437][ T5963] ? __might_fault+0xc6/0x120
[ 92.870128][ T5963] ? __might_fault+0xaa/0x120
[ 92.874812][ T5963] ? dev_wait+0x2f0/0x2f0
[ 92.879149][ T5963] dm_ctl_ioctl+0x975/0xd00
[ 92.883646][ T5963] ? dev_wait+0x2f0/0x2f0
[ 92.887995][ T5963] ? dm_poll+0x120/0x120
[ 92.892241][ T5963] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 92.898248][ T5963] ? bpf_lsm_file_ioctl+0x9/0x10
[ 92.903195][ T5963] ? security_file_ioctl+0x80/0xa0
[ 92.908299][ T5963] ? dm_poll+0x120/0x120
[ 92.912542][ T5963] __se_sys_ioctl+0xfd/0x170
[ 92.917136][ T5963] do_syscall_64+0x55/0xb0
[ 92.921550][ T5963] ? clear_bhb_loop+0x40/0x90
[ 92.926223][ T5963] ? clear_bhb_loop+0x40/0x90
[ 92.930897][ T5963] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 92.936801][ T5963] RIP: 0033:0x7fd760f9f559
[ 92.941231][ T5963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 92.960834][ T5963] RSP: 002b:00007fff84c030a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 92.969241][ T5963] RAX: ffffffffffffffda RBX: 00007fd761225fa0 RCX: 00007fd760f9f559
[ 92.977205][ T5963] RDX: 0000200000000500 RSI: 00000000c138fd09 RDI: 0000000000000003
[ 92.985172][ T5963] RBP: 00007fd761036b20 R08: 0000000000000000 R09: 0000000000000000
[ 92.993135][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 93.001106][ T5963] R13: 00007fd761225fac R14: 00007fd761225fa0 R15: 00007fd761225fa0
[ 93.009076][ T5963]
[ 93.012083][ T5963]
[ 93.014417][ T5963] Allocated by task 5963:
[ 93.018737][ T5963] kasan_set_track+0x4e/0x70
[ 93.023328][ T5963] __kasan_kmalloc+0x8f/0xa0
[ 93.027908][ T5963] dm_get_table_device+0x248/0x670
[ 93.033017][ T5963] dm_get_device+0x4b9/0x9e0
[ 93.037601][ T5963] snapshot_ctr+0x2b3/0x1340
[ 93.042187][ T5963] dm_table_add_target+0x575/0xbc0
[ 93.047285][ T5963] table_load+0x2eb/0x7e0
[ 93.051606][ T5963] dm_ctl_ioctl+0x975/0xd00
[ 93.056117][ T5963] __se_sys_ioctl+0xfd/0x170
[ 93.060698][ T5963] do_syscall_64+0x55/0xb0
[ 93.065126][ T5963] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 93.071021][ T5963]
[ 93.073329][ T5963] Freed by task 5963:
[ 93.077298][ T5963] kasan_set_track+0x4e/0x70
[ 93.081883][ T5963] kasan_save_free_info+0x28/0x40
[ 93.086900][ T5963] ____kasan_slab_free+0x126/0x1f0
[ 93.092005][ T5963] slab_free_freelist_hook+0x154/0x240
[ 93.097454][ T5963] __kmem_cache_free+0xba/0x1f0
[ 93.102292][ T5963] dm_put_table_device+0x20e/0x240
[ 93.107398][ T5963] dm_get_device+0x7ca/0x9e0
[ 93.111979][ T5963] snapshot_ctr+0x472/0x1340
[ 93.116568][ T5963] dm_table_add_target+0x575/0xbc0
[ 93.121690][ T5963] table_load+0x2eb/0x7e0
[ 93.126012][ T5963] dm_ctl_ioctl+0x975/0xd00
[ 93.130504][ T5963] __se_sys_ioctl+0xfd/0x170
[ 93.135086][ T5963] do_syscall_64+0x55/0xb0
[ 93.139670][ T5963] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 93.145556][ T5963]
[ 93.147868][ T5963] The buggy address belongs to the object at ffff88802aa87b80
[ 93.147868][ T5963] which belongs to the cache kmalloc-64 of size 64
[ 93.161756][ T5963] The buggy address is located 24 bytes inside of
[ 93.161756][ T5963] freed 64-byte region [ffff88802aa87b80, ffff88802aa87bc0)
[ 93.175368][ T5963]
[ 93.177678][ T5963] The buggy address belongs to the physical page:
[ 93.184085][ T5963] page:ffffea0000aaa1c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2aa87
[ 93.194229][ T5963] anon flags: 0xfff00000000800(slab|node=0|zone=1|lastcpupid=0x7ff)
[ 93.202202][ T5963] page_type: 0xffffffff()
[ 93.206537][ T5963] raw: 00fff00000000800 ffff888018c41640 ffffea00006fe480 dead000000000005
[ 93.215107][ T5963] raw: 0000000000000000 0000000080200020 00000001ffffffff 0000000000000000
[ 93.223702][ T5963] page dumped because: kasan: bad access detected
[ 93.230103][ T5963] page_owner tracks the page as allocated
[ 93.235815][ T5963] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 1, tgid 1 (swapper/0), ts 18142952831, free_ts 0
[ 93.252476][ T5963] post_alloc_hook+0x1c1/0x200
[ 93.257232][ T5963] get_page_from_freelist+0x2181/0x22a0
[ 93.262768][ T5963] __alloc_pages+0x1f0/0x460
[ 93.267348][ T5963] alloc_page_interleave+0x24/0x1e0
[ 93.272536][ T5963] alloc_slab_page+0x5d/0x180
[ 93.277201][ T5963] new_slab+0x87/0x2d0
[ 93.281272][ T5963] ___slab_alloc+0xc5c/0x12f0
[ 93.285936][ T5963] __kmem_cache_alloc_node+0x122/0x260
[ 93.291380][ T5963] kmalloc_trace+0x2a/0xe0
[ 93.295790][ T5963] media_devnode_create+0x60/0x380
[ 93.300893][ T5963] __video_register_device+0x3e37/0x4780
[ 93.306516][ T5963] vivid_create_devnodes+0x1124/0x2c20
[ 93.311971][ T5963] vivid_probe+0x4e28/0x6570
[ 93.316552][ T5963] platform_probe+0x13b/0x1c0
[ 93.321216][ T5963] really_probe+0x24a/0xae0
[ 93.325718][ T5963] __driver_probe_device+0x1f5/0x390
[ 93.330995][ T5963] page_owner free stack trace missing
[ 93.336363][ T5963]
[ 93.338684][ T5963] Memory state around the buggy address:
[ 93.344333][ T5963] ffff88802aa87a80: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[ 93.352394][ T5963] ffff88802aa87b00: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[ 93.360444][ T5963] >ffff88802aa87b80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 93.368492][ T5963] ^
[ 93.373328][ T5963] ffff88802aa87c00: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc
[ 93.381376][ T5963] ffff88802aa87c80: 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc fc
[ 93.389432][ T5963] ==================================================================
[ 93.414074][ T5963] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 93.421302][ T5963] CPU: 1 PID: 5963 Comm: syz.0.17 Not tainted syzkaller #0
[ 93.428512][ T5963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026
[ 93.438582][ T5963] Call Trace:
[ 93.441877][ T5963]
[ 93.444804][ T5963] dump_stack_lvl+0x18c/0x250
[ 93.449478][ T5963] ? show_regs_print_info+0x20/0x20
[ 93.454670][ T5963] ? load_image+0x420/0x420
[ 93.459193][ T5963] panic+0x2ca/0x720
[ 93.463079][ T5963] ? bpf_jit_dump+0xd0/0xd0
[ 93.467571][ T5963] ? _raw_spin_unlock_irqrestore+0x111/0x120
[ 93.473541][ T5963] ? _raw_spin_unlock+0x40/0x40
[ 93.478379][ T5963] ? print_memory_metadata+0x314/0x400
[ 93.483829][ T5963] ? snapshot_ctr+0x5cc/0x1340
[ 93.488592][ T5963] check_panic_on_warn+0x84/0xa0
[ 93.493525][ T5963] ? snapshot_ctr+0x5cc/0x1340
[ 93.498285][ T5963] end_report+0x6f/0x130
[ 93.502607][ T5963] kasan_report+0x128/0x150
[ 93.507103][ T5963] ? snapshot_ctr+0x5cc/0x1340
[ 93.511870][ T5963] snapshot_ctr+0x5cc/0x1340
[ 93.516457][ T5963] ? dm_snap_cow+0x40/0x40
[ 93.520868][ T5963] ? dm_split_args+0x505/0x5b0
[ 93.525626][ T5963] dm_table_add_target+0x575/0xbc0
[ 93.530732][ T5963] table_load+0x2eb/0x7e0
[ 93.535052][ T5963] ? dev_wait+0x2f0/0x2f0
[ 93.539368][ T5963] ? __might_fault+0xaa/0x120
[ 93.544033][ T5963] ? __might_fault+0xc6/0x120
[ 93.548697][ T5963] ? __might_fault+0xaa/0x120
[ 93.553362][ T5963] ? dev_wait+0x2f0/0x2f0
[ 93.557678][ T5963] dm_ctl_ioctl+0x975/0xd00
[ 93.562175][ T5963] ? dev_wait+0x2f0/0x2f0
[ 93.566492][ T5963] ? dm_poll+0x120/0x120
[ 93.570765][ T5963] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0
[ 93.576754][ T5963] ? bpf_lsm_file_ioctl+0x9/0x10
[ 93.581693][ T5963] ? security_file_ioctl+0x80/0xa0
[ 93.586796][ T5963] ? dm_poll+0x120/0x120
[ 93.591032][ T5963] __se_sys_ioctl+0xfd/0x170
[ 93.595617][ T5963] do_syscall_64+0x55/0xb0
[ 93.600029][ T5963] ? clear_bhb_loop+0x40/0x90
[ 93.604696][ T5963] ? clear_bhb_loop+0x40/0x90
[ 93.609364][ T5963] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 93.615249][ T5963] RIP: 0033:0x7fd760f9f559
[ 93.619658][ T5963] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 93.639255][ T5963] RSP: 002b:00007fff84c030a8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010
[ 93.647659][ T5963] RAX: ffffffffffffffda RBX: 00007fd761225fa0 RCX: 00007fd760f9f559
[ 93.655622][ T5963] RDX: 0000200000000500 RSI: 00000000c138fd09 RDI: 0000000000000003
[ 93.663582][ T5963] RBP: 00007fd761036b20 R08: 0000000000000000 R09: 0000000000000000
[ 93.671573][ T5963] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 93.679535][ T5963] R13: 00007fd761225fac R14: 00007fd761225fa0 R15: 00007fd761225fa0
[ 93.687505][ T5963]
[ 93.690759][ T5963] Kernel Offset: disabled
[ 93.695072][ T5963] Rebooting in 86400 seconds..