Warning: Permanently added '10.128.1.122' (ED25519) to the list of known hosts. 2025/12/09 08:07:38 parsed 1 programs [ 92.812726][ T4640] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 95.370211][ T4687] chnl_net:caif_netlink_parms(): no params data found [ 95.431362][ T4687] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.438796][ T4687] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.446932][ T4687] device bridge_slave_0 entered promiscuous mode [ 95.455616][ T4687] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.462861][ T4687] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.471263][ T4687] device bridge_slave_1 entered promiscuous mode [ 95.497298][ T4687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.508788][ T4687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.536371][ T4687] team0: Port device team_slave_0 added [ 95.545653][ T4687] team0: Port device team_slave_1 added [ 95.568273][ T4687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.575470][ T4687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.601803][ T4687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.614299][ T4687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.621528][ T4687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.647537][ T4687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.680003][ T4687] device hsr_slave_0 entered promiscuous mode [ 95.686925][ T4687] device hsr_slave_1 entered promiscuous mode [ 96.287938][ T4687] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.298534][ T4687] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.308389][ T4687] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.319787][ T4687] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 96.386519][ T4687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.400782][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 96.408914][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 96.426256][ T4687] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.436926][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 96.446712][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 96.455778][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.462927][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.505366][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 96.514054][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 96.525784][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 96.534265][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.541430][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.550013][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.559718][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.569658][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.579697][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.614158][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.626523][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.636016][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.644511][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.655563][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.669882][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.685842][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.696553][ T4687] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.863349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.871414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.883594][ T4687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.930354][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.952404][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.994069][ T4687] device veth0_vlan entered promiscuous mode [ 97.002830][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.012129][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.043577][ T4687] device veth1_vlan entered promiscuous mode [ 97.051697][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.061547][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.070352][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.104121][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.112951][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.123427][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.134564][ T4687] device veth0_macvtap entered promiscuous mode [ 97.170300][ T4687] device veth1_macvtap entered promiscuous mode [ 97.196480][ T4687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.204033][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.213035][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.221608][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.231473][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.244677][ T4687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.255317][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.264241][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.276433][ T4687] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.285872][ T4687] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.294777][ T4687] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.304166][ T4687] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.639465][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.656869][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.685007][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.694250][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.705063][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.721064][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 99.239775][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/09 08:07:47 executed programs: 0 [ 99.631026][ T4869] chnl_net:caif_netlink_parms(): no params data found [ 99.688537][ T4869] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.695947][ T4869] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.703971][ T4869] device bridge_slave_0 entered promiscuous mode [ 99.712872][ T4869] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.720333][ T4869] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.728778][ T4869] device bridge_slave_1 entered promiscuous mode [ 99.755750][ T4869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.767318][ T4869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.797498][ T4869] team0: Port device team_slave_0 added [ 99.806600][ T4869] team0: Port device team_slave_1 added [ 99.828122][ T4869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.835376][ T4869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.862101][ T4869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.874508][ T4869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.882032][ T4869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.908689][ T4869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.947446][ T4869] device hsr_slave_0 entered promiscuous mode [ 99.954852][ T4869] device hsr_slave_1 entered promiscuous mode [ 99.962534][ T4869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.970705][ T4869] Cannot create hsr debugfs directory [ 101.535573][ T4319] Bluetooth: hci0: command 0x0409 tx timeout [ 101.690094][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.781184][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.867101][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.638815][ T4869] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.648348][ T4869] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.658091][ T4869] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.675998][ T4869] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.733249][ T4869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.746280][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 102.754200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 102.778307][ T4869] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.787727][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 102.796428][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 102.805132][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.812353][ T4221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.827951][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 102.838422][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 102.847729][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 102.857744][ T4221] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.865282][ T4221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.873365][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 102.882700][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 102.910410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 102.920709][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 102.930244][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 102.943668][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 102.954305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 102.967931][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 102.976518][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 103.000300][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 103.009040][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 103.020192][ T4869] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 103.109562][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 103.117550][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 103.134958][ T4869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.148671][ T144] device hsr_slave_0 left promiscuous mode [ 103.154888][ T144] device hsr_slave_1 left promiscuous mode [ 103.162419][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.169970][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.178582][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.186380][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.194205][ T144] device bridge_slave_1 left promiscuous mode [ 103.200933][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.209348][ T144] device bridge_slave_0 left promiscuous mode [ 103.215948][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.226588][ T144] device veth1_macvtap left promiscuous mode [ 103.232696][ T144] device veth0_macvtap left promiscuous mode [ 103.239284][ T144] device veth1_vlan left promiscuous mode [ 103.245057][ T144] device veth0_vlan left promiscuous mode [ 103.368540][ T144] team0 (unregistering): Port device team_slave_1 removed [ 103.379606][ T144] team0 (unregistering): Port device team_slave_0 removed [ 103.393901][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.409226][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.454712][ T144] bond0 (unregistering): Released all slaves [ 103.527632][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 103.536483][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 103.556621][ T4869] device veth0_vlan entered promiscuous mode [ 103.563068][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 103.571613][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 103.580133][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 103.588079][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 103.601111][ T4869] device veth1_vlan entered promiscuous mode [ 103.618311][ T4320] Bluetooth: hci0: command 0x041b tx timeout [ 103.637377][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 103.645646][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 103.654255][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 103.663159][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 103.674248][ T4869] device veth0_macvtap entered promiscuous mode [ 103.685442][ T4869] device veth1_macvtap entered promiscuous mode [ 103.708414][ T4869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.717003][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 103.725120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 103.733648][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 103.742885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 103.754513][ T4869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.762716][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 103.772226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 103.783788][ T4869] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.794443][ T4869] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.803482][ T4869] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.812465][ T4869] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.872319][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.884841][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.896317][ T145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 103.920873][ T145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.929555][ T145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.941435][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 104.024526][ T5086] loop0: detected capacity change from 0 to 2048 [ 104.076407][ T5086] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 104.092817][ T5086] UDF-fs: Scanning with blocksize 512 failed [ 104.104020][ T5086] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 104.200026][ T4869] UDF-fs: error (device loop0): udf_read_inode: (ino 833) failed !bh [ 104.236737][ T4869] UDF-fs: error (device loop0): udf_read_inode: (ino 833) failed !bh [ 106.708365][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.790850][ T4869] ================================================================== [ 106.799106][ T4869] BUG: KASAN: use-after-free in udf_close_lvid+0x674/0x990 [ 106.806403][ T4869] Write of size 1 at addr ffff88808a595098 by task syz-executor/4869 [ 106.814444][ T4869] [ 106.816848][ T4869] CPU: 0 PID: 4869 Comm: syz-executor Not tainted syzkaller #0 [ 106.824370][ T4869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 106.834531][ T4869] Call Trace: [ 106.837809][ T4869] [ 106.840733][ T4869] dump_stack_lvl+0x168/0x230 [ 106.845622][ T4869] ? show_regs_print_info+0x20/0x20 [ 106.850917][ T4869] ? load_image+0x3b0/0x3b0 [ 106.855495][ T4869] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 106.860976][ T4869] ? mutex_lock_io_nested+0x60/0x60 [ 106.866222][ T4869] ? do_raw_spin_lock+0x11d/0x280 [ 106.871322][ T4869] print_address_description+0x60/0x2d0 [ 106.876865][ T4869] ? udf_close_lvid+0x674/0x990 [ 106.881879][ T4869] kasan_report+0xdf/0x130 [ 106.886279][ T4869] ? udf_close_lvid+0x674/0x990 [ 106.891236][ T4869] udf_close_lvid+0x674/0x990 [ 106.895896][ T4869] ? fsnotify_sb_delete+0x477/0x4e0 [ 106.901293][ T4869] ? hook_inode_free_security+0xa0/0xa0 [ 106.907097][ T4869] ? udf_open_lvid+0x5a0/0x5a0 [ 106.912159][ T4869] ? iput+0x333/0x8a0 [ 106.916146][ T4869] ? clear_inode+0x150/0x150 [ 106.921067][ T4869] udf_put_super+0xc8/0x160 [ 106.926146][ T4869] ? udf_free_in_core_inode+0x20/0x20 [ 106.932063][ T4869] generic_shutdown_super+0x130/0x300 [ 106.937974][ T4869] kill_block_super+0x7c/0xe0 [ 106.942941][ T4869] deactivate_locked_super+0x93/0xf0 [ 106.948769][ T4869] cleanup_mnt+0x418/0x4d0 [ 106.953904][ T4869] ? lockdep_hardirqs_on+0x94/0x140 [ 106.959225][ T4869] task_work_run+0x125/0x1a0 [ 106.963813][ T4869] do_exit+0x61e/0x20a0 [ 106.967965][ T4869] ? put_task_struct+0x80/0x80 [ 106.972738][ T4869] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 106.978803][ T4869] ? lock_chain_count+0x20/0x20 [ 106.983941][ T4869] do_group_exit+0x12e/0x300 [ 106.988718][ T4869] __x64_sys_exit_group+0x3b/0x40 [ 106.993919][ T4869] do_syscall_64+0x4c/0xa0 [ 106.998328][ T4869] ? clear_bhb_loop+0x30/0x80 [ 107.002991][ T4869] ? clear_bhb_loop+0x30/0x80 [ 107.007690][ T4869] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.013705][ T4869] RIP: 0033:0x7eff9ed44be9 [ 107.018185][ T4869] Code: Unable to access opcode bytes at RIP 0x7eff9ed44bbf. [ 107.025664][ T4869] RSP: 002b:00007ffc69bccd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 107.034160][ T4869] RAX: ffffffffffffffda RBX: 00007eff9edc7c2a RCX: 00007eff9ed44be9 [ 107.042123][ T4869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 107.050078][ T4869] RBP: 0000000000000005 R08: 00007ffc69bcab27 R09: 00007ffc69bce040 [ 107.058040][ T4869] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc69bce040 [ 107.066004][ T4869] R13: 00007eff9edc7c05 R14: 00000000000196e0 R15: 00007ffc69bcf110 [ 107.074067][ T4869] [ 107.077096][ T4869] [ 107.079495][ T4869] The buggy address belongs to the page: [ 107.085548][ T4869] page:ffffea0002296540 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x8a595 [ 107.095678][ T4869] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 107.102805][ T4869] raw: 00fff00000000000 ffffea0002296548 ffffea0002296548 0000000000000000 [ 107.111459][ T4869] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 107.120019][ T4869] page dumped because: kasan: bad access detected [ 107.126445][ T4869] page_owner info is not present (never set?) [ 107.132495][ T4869] [ 107.134884][ T4869] Memory state around the buggy address: [ 107.140493][ T4869] ffff88808a594f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 107.148971][ T4869] ffff88808a595000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 107.157075][ T4869] >ffff88808a595080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 107.165229][ T4869] ^ [ 107.170071][ T4869] ffff88808a595100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 107.178404][ T4869] ffff88808a595180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 107.186588][ T4869] ================================================================== [ 107.194811][ T4869] Disabling lock debugging due to kernel taint [ 107.204068][ T4869] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 107.211305][ T4869] CPU: 0 PID: 4869 Comm: syz-executor Tainted: G B syzkaller #0 [ 107.220306][ T4869] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.230346][ T4869] Call Trace: [ 107.233957][ T4869] [ 107.236871][ T4869] dump_stack_lvl+0x168/0x230 [ 107.241613][ T4869] ? show_regs_print_info+0x20/0x20 [ 107.246801][ T4869] ? load_image+0x3b0/0x3b0 [ 107.251298][ T4869] panic+0x2c9/0x7f0 [ 107.255183][ T4869] ? bpf_jit_dump+0xd0/0xd0 [ 107.259773][ T4869] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 107.265645][ T4869] ? _raw_spin_unlock+0x40/0x40 [ 107.270471][ T4869] ? udf_close_lvid+0x674/0x990 [ 107.275335][ T4869] check_panic_on_warn+0x80/0xa0 [ 107.280264][ T4869] ? udf_close_lvid+0x674/0x990 [ 107.285096][ T4869] end_report+0x6d/0xf0 [ 107.289349][ T4869] kasan_report+0x102/0x130 [ 107.294022][ T4869] ? udf_close_lvid+0x674/0x990 [ 107.299081][ T4869] udf_close_lvid+0x674/0x990 [ 107.303753][ T4869] ? fsnotify_sb_delete+0x477/0x4e0 [ 107.308941][ T4869] ? hook_inode_free_security+0xa0/0xa0 [ 107.314688][ T4869] ? udf_open_lvid+0x5a0/0x5a0 [ 107.319643][ T4869] ? iput+0x333/0x8a0 [ 107.323782][ T4869] ? clear_inode+0x150/0x150 [ 107.328355][ T4869] udf_put_super+0xc8/0x160 [ 107.332848][ T4869] ? udf_free_in_core_inode+0x20/0x20 [ 107.338290][ T4869] generic_shutdown_super+0x130/0x300 [ 107.343644][ T4869] kill_block_super+0x7c/0xe0 [ 107.348384][ T4869] deactivate_locked_super+0x93/0xf0 [ 107.353767][ T4869] cleanup_mnt+0x418/0x4d0 [ 107.358354][ T4869] ? lockdep_hardirqs_on+0x94/0x140 [ 107.363601][ T4869] task_work_run+0x125/0x1a0 [ 107.368184][ T4869] do_exit+0x61e/0x20a0 [ 107.372333][ T4869] ? put_task_struct+0x80/0x80 [ 107.377248][ T4869] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 107.383227][ T4869] ? lock_chain_count+0x20/0x20 [ 107.388073][ T4869] do_group_exit+0x12e/0x300 [ 107.392664][ T4869] __x64_sys_exit_group+0x3b/0x40 [ 107.397796][ T4869] do_syscall_64+0x4c/0xa0 [ 107.402202][ T4869] ? clear_bhb_loop+0x30/0x80 [ 107.406965][ T4869] ? clear_bhb_loop+0x30/0x80 [ 107.411626][ T4869] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.417493][ T4869] RIP: 0033:0x7eff9ed44be9 [ 107.421889][ T4869] Code: Unable to access opcode bytes at RIP 0x7eff9ed44bbf. [ 107.429236][ T4869] RSP: 002b:00007ffc69bccd88 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 107.437724][ T4869] RAX: ffffffffffffffda RBX: 00007eff9edc7c2a RCX: 00007eff9ed44be9 [ 107.445683][ T4869] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 107.453632][ T4869] RBP: 0000000000000005 R08: 00007ffc69bcab27 R09: 00007ffc69bce040 [ 107.461877][ T4869] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc69bce040 [ 107.469989][ T4869] R13: 00007eff9edc7c05 R14: 00000000000196e0 R15: 00007ffc69bcf110 [ 107.478136][ T4869] [ 107.481404][ T4869] Kernel Offset: disabled [ 107.485909][ T4869] Rebooting in 86400 seconds..