Starting crond: [ 9.287981][ T3992] eql: remember to turn off Van-Jacobson compression on your slave devices OK [ 9.326292][ T9] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.334034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready Starting sshd: OK syzkaller Warning: Permanently added '10.128.1.64' (ED25519) to the list of known hosts. 1970/01/01 00:00:33 parsed 1 programs syzkaller login: [ 34.163046][ T4338] cgroup: Unknown subsys name 'net' [ 34.393499][ T4338] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 34.673525][ T4338] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 39.695711][ T4388] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.697496][ T4388] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.698956][ T4388] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.700625][ T4388] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.702518][ T4388] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.703854][ T4388] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 40.009605][ T1572] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.011360][ T1572] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.013150][ T1572] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 40.022337][ T1572] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 40.023761][ T1572] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 40.025387][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 40.246098][ T4425] chnl_net:caif_netlink_parms(): no params data found [ 40.266028][ T4425] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.267489][ T4425] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.269194][ T4425] device bridge_slave_0 entered promiscuous mode [ 40.271633][ T4425] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.272945][ T4425] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.274530][ T4425] device bridge_slave_1 entered promiscuous mode [ 40.280707][ T4425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 40.283429][ T4425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 40.290338][ T4425] team0: Port device team_slave_0 added [ 40.292509][ T4425] team0: Port device team_slave_1 added [ 40.297409][ T4425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 40.298657][ T4425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.304692][ T4425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 40.307403][ T4425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 40.308671][ T4425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 40.313838][ T4425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 40.352049][ T4425] device hsr_slave_0 entered promiscuous mode [ 40.391864][ T4425] device hsr_slave_1 entered promiscuous mode [ 40.474277][ T4425] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 40.511906][ T4425] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 40.564700][ T4425] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 40.631513][ T4425] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 40.693501][ T4425] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.694879][ T4425] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.696413][ T4425] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.697766][ T4425] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.714047][ T4425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 40.717933][ T1572] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 40.720138][ T1572] bridge0: port 1(bridge_slave_0) entered disabled state [ 40.722171][ T1572] bridge0: port 2(bridge_slave_1) entered disabled state [ 40.726635][ T4425] 8021q: adding VLAN 0 to HW filter on device team0 [ 40.730536][ T1572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 40.735689][ T1572] bridge0: port 1(bridge_slave_0) entered blocking state [ 40.736991][ T1572] bridge0: port 1(bridge_slave_0) entered forwarding state [ 40.749260][ T1572] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 40.751762][ T1572] bridge0: port 2(bridge_slave_1) entered blocking state [ 40.753031][ T1572] bridge0: port 2(bridge_slave_1) entered forwarding state [ 40.759536][ T1572] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 40.761374][ T1572] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 40.765015][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 40.768214][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 40.771345][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 40.774556][ T4425] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 40.829456][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 40.831528][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 40.835186][ T4425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 40.843124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 40.848873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 40.851151][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 40.852834][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 40.855608][ T4425] device veth0_vlan entered promiscuous mode [ 40.858777][ T4425] device veth1_vlan entered promiscuous mode [ 40.872764][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 40.874636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 40.876344][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 40.878807][ T4425] device veth0_macvtap entered promiscuous mode [ 40.883017][ T4425] device veth1_macvtap entered promiscuous mode [ 40.888287][ T4425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 40.889646][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 40.892914][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 40.896236][ T4425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 40.897716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 40.910346][ T4425] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.913182][ T4425] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.914737][ T4425] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 40.916347][ T4425] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 41.763345][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:41 executed programs: 0 [ 41.825974][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 41.827746][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 41.829185][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 41.831459][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 41.832867][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 41.834158][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 41.873829][ T4445] chnl_net:caif_netlink_parms(): no params data found [ 41.888886][ T4445] bridge0: port 1(bridge_slave_0) entered blocking state [ 41.890205][ T4445] bridge0: port 1(bridge_slave_0) entered disabled state [ 41.892297][ T4445] device bridge_slave_0 entered promiscuous mode [ 41.894515][ T4445] bridge0: port 2(bridge_slave_1) entered blocking state [ 41.895855][ T4445] bridge0: port 2(bridge_slave_1) entered disabled state [ 41.897497][ T4445] device bridge_slave_1 entered promiscuous mode [ 41.903620][ T4445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 41.906115][ T4445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 41.912967][ T4445] team0: Port device team_slave_0 added [ 41.914879][ T4445] team0: Port device team_slave_1 added [ 41.919718][ T4445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 41.921276][ T4445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.925945][ T4445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 41.928706][ T4445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 41.929962][ T4445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 41.935351][ T4445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 41.981872][ T4445] device hsr_slave_0 entered promiscuous mode [ 42.020987][ T4445] device hsr_slave_1 entered promiscuous mode [ 42.060888][ T4445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 42.062375][ T4445] Cannot create hsr debugfs directory [ 43.851024][ T47] Bluetooth: hci0: command 0x0409 tx timeout [ 44.041648][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.931059][ T47] Bluetooth: hci0: command 0x041b tx timeout [ 46.061811][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 46.142310][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 47.161541][ T4445] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 47.263318][ T4445] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 47.374399][ T4445] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 47.494697][ T4445] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 47.611689][ T4445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 47.615129][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 47.616702][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.619246][ T4445] 8021q: adding VLAN 0 to HW filter on device team0 [ 47.654257][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 47.656016][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.657692][ T4452] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.658913][ T4452] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.660528][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 47.663515][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 47.665131][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.666940][ T4452] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.668202][ T4452] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.671823][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 47.674552][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 47.677251][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 47.679053][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 47.680830][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 47.683710][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 47.685469][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 47.688090][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 47.689785][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.694005][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 47.695701][ T4452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.698057][ T4445] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 48.000780][ T47] Bluetooth: hci0: command 0x040f tx timeout [ 48.035838][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 48.037444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 48.040481][ T4445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 48.047030][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.048785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.054420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.056067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.057757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.059159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.061486][ T4445] device veth0_vlan entered promiscuous mode [ 48.093295][ T4445] device veth1_vlan entered promiscuous mode [ 48.098906][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 48.102267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 48.103885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.105510][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.108568][ T4445] device veth0_macvtap entered promiscuous mode [ 48.111103][ T4445] device veth1_macvtap entered promiscuous mode [ 48.115843][ T4445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 48.117684][ T4445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.119745][ T4445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 48.122175][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 48.123855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.125350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 48.127026][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.129375][ T4445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 48.131926][ T4445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 48.133971][ T4445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 48.412620][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 48.414496][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.417088][ T4445] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.418634][ T4445] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.420225][ T4445] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.422124][ T4445] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 48.442441][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 48.444958][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 48.446721][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 48.506003][ T11] device hsr_slave_0 left promiscuous mode [ 48.551092][ T11] device hsr_slave_1 left promiscuous mode [ 48.630847][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 48.632299][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 48.634001][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 48.635315][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 48.636935][ T11] device bridge_slave_1 left promiscuous mode [ 48.638386][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.671351][ T11] device bridge_slave_0 left promiscuous mode [ 48.672558][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.820921][ T11] device veth1_macvtap left promiscuous mode [ 48.822158][ T11] device veth0_macvtap left promiscuous mode [ 48.823289][ T11] device veth1_vlan left promiscuous mode [ 48.824397][ T11] device veth0_vlan left promiscuous mode [ 50.080801][ T47] Bluetooth: hci0: command 0x0419 tx timeout [ 50.991846][ T11] team0 (unregistering): Port device team_slave_1 removed [ 51.172331][ T11] team0 (unregistering): Port device team_slave_0 removed [ 51.372941][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 51.571138][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 53.161548][ T11] bond0 (unregistering): Released all slaves [ 53.480849][ T1573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 53.482548][ T1573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 53.483917][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 53.543105][ T4505] loop0: detected capacity change from 0 to 2048 [ 53.547550][ T4505] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=3932051, location=3932051 [ 53.552184][ T4505] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 53.561284][ T4505] "syz.0.17" (4505) uses obsolete ecb(arc4) skcipher [ 53.600953][ T4445] ================================================================== [ 53.602475][ T4445] BUG: KASAN: use-after-free in udf_close_lvid+0x4d0/0x784 [ 53.603802][ T4445] Write of size 1 at addr ffff0001634cc610 by task syz-executor/4445 [ 53.605221][ T4445] [ 53.605644][ T4445] CPU: 0 PID: 4445 Comm: syz-executor Not tainted syzkaller #0 [ 53.607089][ T4445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 53.608973][ T4445] Call trace: [ 53.609551][ T4445] dump_backtrace+0x1c0/0x1ec [ 53.610398][ T4445] show_stack+0x2c/0x3c [ 53.611183][ T4445] __dump_stack+0x30/0x40 [ 53.612015][ T4445] dump_stack_lvl+0xf4/0x15c [ 53.612895][ T4445] print_address_description+0x88/0x218 [ 53.614004][ T4445] print_report+0x50/0x68 [ 53.614873][ T4445] kasan_report+0xa8/0xfc [ 53.615729][ T4445] __asan_report_store1_noabort+0x2c/0x38 [ 53.616871][ T4445] udf_close_lvid+0x4d0/0x784 [ 53.617809][ T4445] udf_put_super+0xb8/0x148 [ 53.618652][ T4445] generic_shutdown_super+0x130/0x324 [ 53.619684][ T4445] kill_block_super+0x70/0xdc [ 53.620579][ T4445] deactivate_locked_super+0xac/0x120 [ 53.621596][ T4445] deactivate_super+0xe4/0x104 [ 53.622500][ T4445] cleanup_mnt+0x390/0x418 [ 53.623330][ T4445] __cleanup_mnt+0x20/0x30 [ 53.624204][ T4445] task_work_run+0x1ec/0x278 [ 53.625144][ T4445] do_notify_resume+0x1fa0/0x2aa4 [ 53.626170][ T4445] el0_svc+0x98/0x128 [ 53.626996][ T4445] el0t_64_sync_handler+0x84/0xf0 [ 53.628014][ T4445] el0t_64_sync+0x18c/0x190 [ 53.628950][ T4445] [ 53.629428][ T4445] The buggy address belongs to the physical page: [ 53.630736][ T4445] page:0000000096bd024c refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1a34cc [ 53.632761][ T4445] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 53.634169][ T4445] raw: 05ffc00000000000 fffffc00058d3308 fffffc00058d3308 0000000000000000 [ 53.635843][ T4445] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 53.637534][ T4445] page dumped because: kasan: bad access detected [ 53.638777][ T4445] [ 53.639227][ T4445] Memory state around the buggy address: [ 53.640344][ T4445] ffff0001634cc500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 53.641931][ T4445] ffff0001634cc580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 53.643476][ T4445] >ffff0001634cc600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 53.645049][ T4445] ^ [ 53.645949][ T4445] ffff0001634cc680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 53.647798][ T4445] ffff0001634cc700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 53.649450][ T4445] ================================================================== [ 53.680811][ T4445] Disabling lock debugging due to kernel taint