Warning: Permanently added '10.128.0.98' (ED25519) to the list of known hosts. 2025/09/16 14:03:09 parsed 1 programs [ 55.427976][ T4189] cgroup: Unknown subsys name 'net' [ 55.562244][ T4189] cgroup: Unknown subsys name 'rlimit' [ 56.795170][ T4189] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 59.486791][ T4239] chnl_net:caif_netlink_parms(): no params data found [ 59.563905][ T4239] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.572745][ T4239] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.581403][ T4239] device bridge_slave_0 entered promiscuous mode [ 59.592444][ T4239] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.600187][ T4239] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.608431][ T4239] device bridge_slave_1 entered promiscuous mode [ 59.630517][ T4239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.641873][ T4239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.669652][ T4239] team0: Port device team_slave_0 added [ 59.677684][ T4239] team0: Port device team_slave_1 added [ 59.697593][ T4239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.704699][ T4239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.731427][ T4239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.743972][ T4239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.751065][ T4239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.777162][ T4239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.813517][ T4239] device hsr_slave_0 entered promiscuous mode [ 59.820362][ T4239] device hsr_slave_1 entered promiscuous mode [ 59.915926][ T4239] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.925607][ T4239] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.937856][ T4239] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.947198][ T4239] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.051890][ T4239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.065519][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 60.082120][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.095082][ T4239] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.112639][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 60.122437][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.135589][ T432] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.143028][ T432] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.154260][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 60.162810][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 60.171838][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.180497][ T432] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.187603][ T432] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.208900][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 60.218525][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 60.227655][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 60.240816][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.249670][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 60.259073][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.267691][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 60.276192][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.284907][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 60.293843][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.303396][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.314712][ T4239] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.385752][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.393358][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.404621][ T4239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.419837][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.429774][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.445958][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.454810][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.464525][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.472344][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.481706][ T4239] device veth0_vlan entered promiscuous mode [ 60.493075][ T4239] device veth1_vlan entered promiscuous mode [ 60.509328][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.517346][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.526206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.534765][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.545158][ T4239] device veth0_macvtap entered promiscuous mode [ 60.555711][ T4239] device veth1_macvtap entered promiscuous mode [ 60.570141][ T4239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.578085][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.586224][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.594787][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.603455][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.616416][ T4239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.639714][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.648453][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.659336][ T4239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.668782][ T4239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.677635][ T4239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.686355][ T4239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.112988][ T432] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.122085][ T432] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.134807][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 61.148817][ T432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.157273][ T432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.180349][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/09/16 14:03:17 executed programs: 0 [ 61.715711][ T4296] chnl_net:caif_netlink_parms(): no params data found [ 61.781066][ T4296] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.788345][ T4296] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.796455][ T4296] device bridge_slave_0 entered promiscuous mode [ 61.808193][ T4296] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.815426][ T4296] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.823749][ T4296] device bridge_slave_1 entered promiscuous mode [ 61.850564][ T4296] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.862019][ T4296] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.895563][ T4296] team0: Port device team_slave_0 added [ 61.903321][ T4296] team0: Port device team_slave_1 added [ 61.925885][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.932925][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.960572][ T4296] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.978272][ T4296] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.985233][ T4296] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.014158][ T4296] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.053771][ T4296] device hsr_slave_0 entered promiscuous mode [ 62.062857][ T4296] device hsr_slave_1 entered promiscuous mode [ 62.070004][ T4296] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.080540][ T4296] Cannot create hsr debugfs directory [ 62.174295][ T4296] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 63.638208][ T4203] Bluetooth: hci0: command 0x0409 tx timeout [ 65.414163][ T4296] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.717811][ T4265] Bluetooth: hci0: command 0x041b tx timeout [ 66.242546][ T4296] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.303297][ T4296] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.393747][ T4296] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.404001][ T4296] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.413842][ T4296] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.423561][ T4296] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.471286][ T4296] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.492777][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.500568][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.511386][ T4296] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.532626][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.541494][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.550325][ T1278] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.557439][ T1278] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.565870][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.577803][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.586432][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.595666][ T1278] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.602790][ T1278] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.612282][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.634600][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.645420][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.654443][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.663157][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.684617][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.693583][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.704386][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.713398][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.723957][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.733169][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.751557][ T4296] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.834860][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.843180][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.854096][ T4296] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.871449][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.880467][ T1278] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.909284][ T4296] device veth0_vlan entered promiscuous mode [ 66.915896][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.925321][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.933986][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.942195][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.963744][ T4296] device veth1_vlan entered promiscuous mode [ 66.979436][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.988542][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.996472][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.005480][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.026232][ T4296] device veth0_macvtap entered promiscuous mode [ 67.036412][ T9] device hsr_slave_0 left promiscuous mode [ 67.044942][ T9] device hsr_slave_1 left promiscuous mode [ 67.052291][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.060207][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.069280][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 67.076670][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.084527][ T9] device bridge_slave_1 left promiscuous mode [ 67.091518][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.103558][ T9] device bridge_slave_0 left promiscuous mode [ 67.110939][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.126848][ T9] device veth1_macvtap left promiscuous mode [ 67.133273][ T9] device veth0_macvtap left promiscuous mode [ 67.139701][ T9] device veth1_vlan left promiscuous mode [ 67.145630][ T9] device veth0_vlan left promiscuous mode [ 67.274874][ T9] team0 (unregistering): Port device team_slave_1 removed [ 67.288835][ T9] team0 (unregistering): Port device team_slave_0 removed [ 67.301129][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.315127][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.363707][ T9] bond0 (unregistering): Released all slaves [ 67.412870][ T4296] device veth1_macvtap entered promiscuous mode [ 67.429757][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.437150][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.445440][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.454098][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.462959][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.473866][ T4296] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.483189][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.492481][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.510257][ T4296] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.519046][ T4296] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.528718][ T4296] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.537645][ T4296] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.591937][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.616760][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.622266][ T432] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 2025/09/16 14:03:23 executed programs: 2 [ 67.638727][ T432] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.648968][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 67.658415][ T432] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 67.709217][ T4314] loop0: detected capacity change from 0 to 2048 [ 67.759389][ T4314] ======================================================= [ 67.759389][ T4314] WARNING: The mand mount option has been deprecated and [ 67.759389][ T4314] and is ignored by this kernel. Remove the mand [ 67.759389][ T4314] option from the mount to silence this warning. [ 67.759389][ T4314] ======================================================= [ 67.799853][ T4268] Bluetooth: hci0: command 0x040f tx timeout [ 67.808005][ T4314] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 67.829245][ T4314] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 68.081968][ T4296] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 68.102771][ T4296] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 68.122426][ T4296] ================================================================== [ 68.130694][ T4296] BUG: KASAN: use-after-free in crc_itu_t+0x1ad/0x280 [ 68.137470][ T4296] Read of size 1 at addr ffff88805fefb000 by task syz-executor/4296 [ 68.145443][ T4296] [ 68.147772][ T4296] CPU: 1 PID: 4296 Comm: syz-executor Not tainted syzkaller #0 [ 68.155308][ T4296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 68.165380][ T4296] Call Trace: [ 68.168655][ T4296] [ 68.171580][ T4296] dump_stack_lvl+0x168/0x230 [ 68.176263][ T4296] ? show_regs_print_info+0x20/0x20 [ 68.181478][ T4296] ? load_image+0x3b0/0x3b0 [ 68.185996][ T4296] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 68.191373][ T4296] print_address_description+0x60/0x2d0 [ 68.196924][ T4296] ? crc_itu_t+0x1ad/0x280 [ 68.201353][ T4296] kasan_report+0xdf/0x130 [ 68.205811][ T4296] ? crc_itu_t+0x1ad/0x280 [ 68.210322][ T4296] crc_itu_t+0x1ad/0x280 [ 68.214565][ T4296] udf_sync_fs+0x194/0x350 [ 68.218983][ T4296] ? udf_put_super+0x160/0x160 [ 68.223753][ T4296] ? cpumask_next+0xb3/0xd0 [ 68.228278][ T4296] ? get_nr_dirty_inodes+0x248/0x2d0 [ 68.233576][ T4296] sync_filesystem+0xe6/0x220 [ 68.238304][ T4296] generic_shutdown_super+0x6b/0x300 [ 68.243680][ T4296] kill_block_super+0x7c/0xe0 [ 68.248356][ T4296] deactivate_locked_super+0x93/0xf0 [ 68.253638][ T4296] cleanup_mnt+0x418/0x4d0 [ 68.258056][ T4296] ? lockdep_hardirqs_on+0x94/0x140 [ 68.263264][ T4296] task_work_run+0x125/0x1a0 [ 68.267858][ T4296] do_exit+0x61e/0x20a0 [ 68.272018][ T4296] ? put_task_struct+0x80/0x80 [ 68.276781][ T4296] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 68.282771][ T4296] ? lock_chain_count+0x20/0x20 [ 68.287653][ T4296] do_group_exit+0x12e/0x300 [ 68.292259][ T4296] __x64_sys_exit_group+0x3b/0x40 [ 68.297287][ T4296] do_syscall_64+0x4c/0xa0 [ 68.301706][ T4296] ? clear_bhb_loop+0x30/0x80 [ 68.306393][ T4296] ? clear_bhb_loop+0x30/0x80 [ 68.311069][ T4296] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.317008][ T4296] RIP: 0033:0x7f63d2408ba9 [ 68.321420][ T4296] Code: Unable to access opcode bytes at RIP 0x7f63d2408b7f. [ 68.328866][ T4296] RSP: 002b:00007ffe1a9e5f08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 68.337277][ T4296] RAX: ffffffffffffffda RBX: 00007f63d248bc77 RCX: 00007f63d2408ba9 [ 68.345265][ T4296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 68.353238][ T4296] RBP: 0000000000000010 R08: 00007ffe1a9e3ca6 R09: 00007ffe1a9e71c0 [ 68.361217][ T4296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1a9e71c0 [ 68.369282][ T4296] R13: 00007f63d248bc05 R14: 000055558b69f4a8 R15: 00007ffe1a9e8290 [ 68.377274][ T4296] [ 68.380287][ T4296] [ 68.382600][ T4296] The buggy address belongs to the page: [ 68.388231][ T4296] page:ffffea00017fbec0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x5fefb [ 68.398394][ T4296] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 68.405506][ T4296] raw: 00fff00000000000 ffffea0001a37ec8 ffffea000186f988 0000000000000000 [ 68.414090][ T4296] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 68.422707][ T4296] page dumped because: kasan: bad access detected [ 68.429124][ T4296] page_owner tracks the page as freed [ 68.434587][ T4296] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 4296, ts 67686179299, free_ts 68119222913 [ 68.449280][ T4296] get_page_from_freelist+0x1b77/0x1c60 [ 68.454835][ T4296] __alloc_pages+0x1e1/0x470 [ 68.459421][ T4296] alloc_pages_vma+0x393/0x7c0 [ 68.464187][ T4296] wp_page_copy+0x235/0x1fd0 [ 68.468769][ T4296] handle_mm_fault+0x1eca/0x43c0 [ 68.473697][ T4296] do_user_addr_fault+0x489/0xc80 [ 68.478714][ T4296] exc_page_fault+0x60/0x100 [ 68.483305][ T4296] asm_exc_page_fault+0x22/0x30 [ 68.488151][ T4296] page last free stack trace: [ 68.492810][ T4296] free_unref_page_prepare+0x637/0x6c0 [ 68.498266][ T4296] free_unref_page_list+0x122/0x7e0 [ 68.503461][ T4296] release_pages+0x184b/0x1bb0 [ 68.508246][ T4296] tlb_finish_mmu+0x164/0x2e0 [ 68.512922][ T4296] exit_mmap+0x3a6/0x5f0 [ 68.517176][ T4296] __mmput+0x115/0x3b0 [ 68.521250][ T4296] exit_mm+0x567/0x6c0 [ 68.525328][ T4296] do_exit+0x5a1/0x20a0 [ 68.529480][ T4296] do_group_exit+0x12e/0x300 [ 68.534065][ T4296] __x64_sys_exit_group+0x3b/0x40 [ 68.539087][ T4296] do_syscall_64+0x4c/0xa0 [ 68.543499][ T4296] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.549478][ T4296] [ 68.551802][ T4296] Memory state around the buggy address: [ 68.557416][ T4296] ffff88805fefaf00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 68.565467][ T4296] ffff88805fefaf80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 68.573519][ T4296] >ffff88805fefb000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 68.581572][ T4296] ^ [ 68.585631][ T4296] ffff88805fefb080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 68.593683][ T4296] ffff88805fefb100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 68.601738][ T4296] ================================================================== [ 68.609794][ T4296] Disabling lock debugging due to kernel taint [ 68.621882][ T4296] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 68.629108][ T4296] CPU: 1 PID: 4296 Comm: syz-executor Tainted: G B syzkaller #0 [ 68.638037][ T4296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 68.648087][ T4296] Call Trace: [ 68.651358][ T4296] [ 68.654270][ T4296] dump_stack_lvl+0x168/0x230 [ 68.658932][ T4296] ? show_regs_print_info+0x20/0x20 [ 68.664119][ T4296] ? load_image+0x3b0/0x3b0 [ 68.668617][ T4296] panic+0x2c9/0x7f0 [ 68.672604][ T4296] ? bpf_jit_dump+0xd0/0xd0 [ 68.677102][ T4296] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 68.682979][ T4296] ? _raw_spin_unlock+0x40/0x40 [ 68.687814][ T4296] ? crc_itu_t+0x1ad/0x280 [ 68.692299][ T4296] check_panic_on_warn+0x80/0xa0 [ 68.697225][ T4296] ? crc_itu_t+0x1ad/0x280 [ 68.701633][ T4296] end_report+0x6d/0xf0 [ 68.705774][ T4296] kasan_report+0x102/0x130 [ 68.710259][ T4296] ? crc_itu_t+0x1ad/0x280 [ 68.714656][ T4296] crc_itu_t+0x1ad/0x280 [ 68.718880][ T4296] udf_sync_fs+0x194/0x350 [ 68.723283][ T4296] ? udf_put_super+0x160/0x160 [ 68.728027][ T4296] ? cpumask_next+0xb3/0xd0 [ 68.732600][ T4296] ? get_nr_dirty_inodes+0x248/0x2d0 [ 68.737872][ T4296] sync_filesystem+0xe6/0x220 [ 68.742552][ T4296] generic_shutdown_super+0x6b/0x300 [ 68.747843][ T4296] kill_block_super+0x7c/0xe0 [ 68.752502][ T4296] deactivate_locked_super+0x93/0xf0 [ 68.757777][ T4296] cleanup_mnt+0x418/0x4d0 [ 68.762178][ T4296] ? lockdep_hardirqs_on+0x94/0x140 [ 68.767385][ T4296] task_work_run+0x125/0x1a0 [ 68.771969][ T4296] do_exit+0x61e/0x20a0 [ 68.776108][ T4296] ? put_task_struct+0x80/0x80 [ 68.780854][ T4296] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 68.786816][ T4296] ? lock_chain_count+0x20/0x20 [ 68.791650][ T4296] do_group_exit+0x12e/0x300 [ 68.796227][ T4296] __x64_sys_exit_group+0x3b/0x40 [ 68.801235][ T4296] do_syscall_64+0x4c/0xa0 [ 68.805658][ T4296] ? clear_bhb_loop+0x30/0x80 [ 68.810314][ T4296] ? clear_bhb_loop+0x30/0x80 [ 68.814972][ T4296] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 68.820848][ T4296] RIP: 0033:0x7f63d2408ba9 [ 68.825246][ T4296] Code: Unable to access opcode bytes at RIP 0x7f63d2408b7f. [ 68.832589][ T4296] RSP: 002b:00007ffe1a9e5f08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 68.840987][ T4296] RAX: ffffffffffffffda RBX: 00007f63d248bc77 RCX: 00007f63d2408ba9 [ 68.848942][ T4296] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 68.856897][ T4296] RBP: 0000000000000010 R08: 00007ffe1a9e3ca6 R09: 00007ffe1a9e71c0 [ 68.864852][ T4296] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe1a9e71c0 [ 68.872895][ T4296] R13: 00007f63d248bc05 R14: 000055558b69f4a8 R15: 00007ffe1a9e8290 [ 68.880865][ T4296] [ 68.884064][ T4296] Kernel Offset: disabled [ 68.888383][ T4296] Rebooting in 86400 seconds..