Warning: Permanently added '10.128.1.184' (ED25519) to the list of known hosts.
2026/03/07 05:35:25 parsed 1 programs
Setting up swapspace version 1, size = 127995904 bytes
[ 91.916321][ T4597] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 93.149017][ T4609] chnl_net:caif_netlink_parms(): no params data found
[ 93.183493][ T4609] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.190706][ T4609] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.198453][ T4609] device bridge_slave_0 entered promiscuous mode
[ 93.206773][ T4609] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.213849][ T4609] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.222011][ T4609] device bridge_slave_1 entered promiscuous mode
[ 93.239711][ T4609] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 93.250311][ T4609] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 93.271178][ T4609] team0: Port device team_slave_0 added
[ 93.278252][ T4609] team0: Port device team_slave_1 added
[ 93.294230][ T4609] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 93.301365][ T4609] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 93.327293][ T4609] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 93.339457][ T4609] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 93.346445][ T4609] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 93.372362][ T4609] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 93.398140][ T4609] device hsr_slave_0 entered promiscuous mode
[ 93.404637][ T4609] device hsr_slave_1 entered promiscuous mode
[ 93.823436][ T4609] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 93.835442][ T4609] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 93.846689][ T4609] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 93.856352][ T4609] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 93.878996][ T4609] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.886198][ T4609] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.893551][ T4609] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.900665][ T4609] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 93.948275][ T4609] 8021q: adding VLAN 0 to HW filter on device bond0
[ 93.962021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 93.971671][ T144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.980717][ T144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.989206][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready
[ 94.004836][ T4609] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.017046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 94.029302][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.036414][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.056227][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 94.067093][ T444] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.074271][ T444] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.086185][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 94.094986][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 94.115413][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 94.124109][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 94.134256][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 94.251863][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 94.262055][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 94.275152][ T4609] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 94.294298][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 94.304307][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 94.323938][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 94.333836][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 94.344232][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 94.353644][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 94.365168][ T4609] device veth0_vlan entered promiscuous mode
[ 94.378503][ T4609] device veth1_vlan entered promiscuous mode
[ 94.400954][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 94.410366][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 94.422819][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 94.432036][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 94.446267][ T4609] device veth0_macvtap entered promiscuous mode
[ 94.458003][ T4609] device veth1_macvtap entered promiscuous mode
[ 94.474330][ T4609] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 94.484705][ T4609] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 94.493795][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 94.502253][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 94.510759][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 94.519849][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 94.529486][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 94.538722][ T444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 94.551936][ T4609] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.561860][ T4609] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.570952][ T4609] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.581340][ T4609] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.675163][ T444] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 94.894368][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.912573][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.933991][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 94.949074][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.959197][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.967813][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 97.324085][ T444] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.439654][ T444] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.510436][ T444] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 100.172656][ T444] device hsr_slave_0 left promiscuous mode
[ 100.186347][ T444] device hsr_slave_1 left promiscuous mode
[ 100.203849][ T444] batman_adv: batadv0: Interface deactivated: batadv_slave_0
2026/03/07 05:35:36 executed programs: 0
[ 100.220733][ T444] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 100.236337][ T444] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 100.252994][ T444] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 100.264128][ T444] device bridge_slave_1 left promiscuous mode
[ 100.279562][ T444] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.288854][ T444] device bridge_slave_0 left promiscuous mode
[ 100.295095][ T444] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.311101][ T444] device veth1_macvtap left promiscuous mode
[ 100.318543][ T444] device veth0_macvtap left promiscuous mode
[ 100.324735][ T444] device veth1_vlan left promiscuous mode
[ 100.330956][ T444] device veth0_vlan left promiscuous mode
[ 100.436449][ T444] team0 (unregistering): Port device team_slave_1 removed
[ 100.447748][ T444] team0 (unregistering): Port device team_slave_0 removed
[ 100.460098][ T444] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 100.472382][ T444] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 100.514750][ T444] bond0 (unregistering): Released all slaves
[ 100.690498][ T5045] chnl_net:caif_netlink_parms(): no params data found
[ 100.766749][ T5045] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.773900][ T5045] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.784936][ T5045] device bridge_slave_0 entered promiscuous mode
[ 100.794051][ T5045] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.803601][ T5045] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.813060][ T5045] device bridge_slave_1 entered promiscuous mode
[ 100.849556][ T5045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 100.887244][ T5045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 100.944898][ T5045] team0: Port device team_slave_0 added
[ 100.960783][ T5045] team0: Port device team_slave_1 added
[ 100.984357][ T5045] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 100.991847][ T5045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 101.019079][ T5045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 101.031418][ T5045] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 101.055641][ T5045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 101.095718][ T5045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 101.160064][ T5045] device hsr_slave_0 entered promiscuous mode
[ 101.167089][ T5045] device hsr_slave_1 entered promiscuous mode
[ 101.704117][ T5045] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 101.729173][ T5045] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 101.739153][ T5045] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 101.749634][ T5045] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 101.843897][ T5045] 8021q: adding VLAN 0 to HW filter on device bond0
[ 101.873831][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 101.882499][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 101.894706][ T5045] 8021q: adding VLAN 0 to HW filter on device team0
[ 101.906199][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 101.917626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 101.936261][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.943396][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 101.968065][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 101.977537][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 101.988059][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 101.998861][ T9] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.006068][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 102.016934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 102.030136][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 102.039647][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 102.050719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 102.074991][ T5045] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 102.105600][ T5045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 102.126031][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 102.135484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 102.146080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 102.154872][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 102.167034][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 102.177113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 102.185974][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 102.194704][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 102.335731][ T4251] Bluetooth: hci0: command 0x0409 tx timeout
[ 102.358975][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 102.376062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 102.389553][ T5045] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 102.419743][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 102.428651][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 102.460432][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 102.470893][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 102.485322][ T5045] device veth0_vlan entered promiscuous mode
[ 102.499113][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 102.529027][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 102.577478][ T5045] device veth1_vlan entered promiscuous mode
[ 102.636518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 102.644676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 102.653409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 102.669293][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 102.680202][ T5045] device veth0_macvtap entered promiscuous mode
[ 102.692683][ T5045] device veth1_macvtap entered promiscuous mode
[ 102.723710][ T5045] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 102.731318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 102.740553][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 102.750246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 102.761915][ T5045] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.770417][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 102.779855][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 102.799561][ T5045] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.810092][ T5045] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.819509][ T5045] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.829729][ T5045] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.945077][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 102.961094][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 102.970452][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 103.004128][ T146] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.013700][ T146] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.023192][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 103.117274][ T5165] loop0: detected capacity change from 0 to 2048
[ 103.211008][ T5165] UDF-fs: error (device loop0): udf_process_sequence: Primary Volume Descriptor not found!
[ 103.240235][ T5165] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 103.618380][ T5045] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0
[ 103.641514][ T5045] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0
[ 103.660574][ T5045] ==================================================================
[ 103.669087][ T5045] BUG: KASAN: use-after-free in crc_itu_t+0x1b2/0x280
[ 103.675895][ T5045] Read of size 1 at addr ffff8880794d3000 by task syz-executor/5045
[ 103.683888][ T5045]
[ 103.686239][ T5045] CPU: 0 PID: 5045 Comm: syz-executor Not tainted syzkaller #0
[ 103.693788][ T5045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 103.703864][ T5045] Call Trace:
[ 103.707165][ T5045]
[ 103.710100][ T5045] dump_stack_lvl+0x188/0x250
[ 103.714797][ T5045] ? show_regs_print_info+0x20/0x20
[ 103.720022][ T5045] ? load_image+0x400/0x400
[ 103.724666][ T5045] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 103.730276][ T5045] print_address_description+0x60/0x2d0
[ 103.735845][ T5045] ? crc_itu_t+0x1b2/0x280
[ 103.740276][ T5045] kasan_report+0xdf/0x130
[ 103.744712][ T5045] ? crc_itu_t+0x1b2/0x280
[ 103.749233][ T5045] crc_itu_t+0x1b2/0x280
[ 103.753493][ T5045] udf_sync_fs+0x1ac/0x380
[ 103.757932][ T5045] ? udf_put_super+0x160/0x160
[ 103.762705][ T5045] ? cpumask_next+0xb3/0xd0
[ 103.767216][ T5045] ? get_nr_dirty_inodes+0x248/0x2d0
[ 103.772518][ T5045] sync_filesystem+0xe6/0x220
[ 103.777226][ T5045] generic_shutdown_super+0x6b/0x300
[ 103.782529][ T5045] kill_block_super+0x7c/0xe0
[ 103.787219][ T5045] deactivate_locked_super+0x93/0xf0
[ 103.792514][ T5045] cleanup_mnt+0x42d/0x4e0
[ 103.797028][ T5045] ? lockdep_hardirqs_on+0x94/0x140
[ 103.802236][ T5045] task_work_run+0x125/0x1a0
[ 103.806838][ T5045] do_exit+0x626/0x20c0
[ 103.811004][ T5045] ? put_task_struct+0x80/0x80
[ 103.815781][ T5045] ? lock_chain_count+0x20/0x20
[ 103.820816][ T5045] do_group_exit+0x12e/0x300
[ 103.825431][ T5045] __x64_sys_exit_group+0x3b/0x40
[ 103.830463][ T5045] do_syscall_64+0x4c/0xa0
[ 103.834890][ T5045] ? clear_bhb_loop+0x30/0x80
[ 103.839588][ T5045] ? clear_bhb_loop+0x30/0x80
[ 103.844278][ T5045] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 103.850188][ T5045] RIP: 0033:0x7f963e650ef9
[ 103.854618][ T5045] Code: Unable to access opcode bytes at RIP 0x7f963e650ecf.
[ 103.862071][ T5045] RSP: 002b:00007ffd709a9c08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 103.870501][ T5045] RAX: ffffffffffffffda RBX: 00007f963e6e53ad RCX: 00007f963e650ef9
[ 103.878921][ T5045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[ 103.886906][ T5045] RBP: 0000000000000010 R08: 0000000000000000 R09: 00007f963e6e533b
[ 103.894887][ T5045] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd709aaec0
[ 103.902870][ T5045] R13: 00007f963e6e533b R14: 000055556f5e84e8 R15: 00007ffd709abf90
[ 103.910870][ T5045]
[ 103.913901][ T5045]
[ 103.916222][ T5045] The buggy address belongs to the page:
[ 103.921857][ T5045] page:ffffea0001e534c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x794d3
[ 103.932010][ T5045] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 103.939154][ T5045] raw: 00fff00000000000 ffffea0000b1e608 ffffea0000aa4f08 0000000000000000
[ 103.947752][ T5045] raw: 0000000000000000 00000000000c0000 00000000ffffffff 0000000000000000
[ 103.956340][ T5045] page dumped because: kasan: bad access detected
[ 103.962769][ T5045] page_owner tracks the page as freed
[ 103.968143][ T5045] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 4445, ts 79503912845, free_ts 97316739204
[ 103.985605][ T5045] get_page_from_freelist+0x1bbd/0x1ca0
[ 103.991227][ T5045] __alloc_pages+0x1ee/0x480
[ 103.995824][ T5045] new_slab+0xc0/0x4b0
[ 103.999902][ T5045] ___slab_alloc+0x80a/0xdd0
[ 104.004498][ T5045] kmem_cache_alloc_bulk+0x141/0x3c0
[ 104.009788][ T5045] __alloc_skb+0x537/0x750
[ 104.014227][ T5045] __napi_alloc_skb+0x151/0x2d0
[ 104.019086][ T5045] page_to_skb+0x26a/0xcf0
[ 104.023512][ T5045] receive_buf+0x14db/0x58e0
[ 104.028108][ T5045] virtnet_poll+0x571/0xf40
[ 104.032620][ T5045] __napi_poll+0xc0/0x430
[ 104.036956][ T5045] net_rx_action+0x4d4/0xa10
[ 104.041563][ T5045] handle_softirqs+0x339/0x830
[ 104.046338][ T5045] __irq_exit_rcu+0x13b/0x230
[ 104.051028][ T5045] irq_exit_rcu+0x5/0x20
[ 104.055478][ T5045] common_interrupt+0xb5/0xd0
[ 104.060162][ T5045] page last free stack trace:
[ 104.064831][ T5045] free_unref_page_prepare+0x637/0x6c0
[ 104.070301][ T5045] free_unref_page_list+0x119/0x820
[ 104.075508][ T5045] release_pages+0x186c/0x1be0
[ 104.080281][ T5045] tlb_finish_mmu+0x176/0x300
[ 104.084965][ T5045] setup_arg_pages+0x91e/0xa90
[ 104.089733][ T5045] load_elf_binary+0xc12/0x28e0
[ 104.094680][ T5045] bprm_execve+0xaee/0x1840
[ 104.099198][ T5045] do_execveat_common+0x51e/0x6d0
[ 104.104234][ T5045] __x64_sys_execve+0x8e/0xa0
[ 104.108920][ T5045] do_syscall_64+0x4c/0xa0
[ 104.113347][ T5045] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 104.119264][ T5045]
[ 104.121605][ T5045] Memory state around the buggy address:
[ 104.127234][ T5045] ffff8880794d2f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 104.135298][ T5045] ffff8880794d2f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 104.143459][ T5045] >ffff8880794d3000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 104.151530][ T5045] ^
[ 104.155607][ T5045] ffff8880794d3080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 104.163748][ T5045] ffff8880794d3100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 104.171905][ T5045] ==================================================================
[ 104.180061][ T5045] Disabling lock debugging due to kernel taint
[ 104.197170][ T5045] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 104.204477][ T5045] CPU: 0 PID: 5045 Comm: syz-executor Tainted: G B syzkaller #0
[ 104.213421][ T5045] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 104.223462][ T5045] Call Trace:
[ 104.226725][ T5045]
[ 104.229636][ T5045] dump_stack_lvl+0x188/0x250
[ 104.234293][ T5045] ? show_regs_print_info+0x20/0x20
[ 104.239470][ T5045] ? load_image+0x400/0x400
[ 104.244075][ T5045] panic+0x2e5/0x810
[ 104.248069][ T5045] ? bpf_jit_dump+0xd0/0xd0
[ 104.252558][ T5045] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 104.258607][ T5045] ? _raw_spin_unlock+0x40/0x40
[ 104.263454][ T5045] ? crc_itu_t+0x1b2/0x280
[ 104.267864][ T5045] check_panic_on_warn+0x80/0xa0
[ 104.272791][ T5045] ? crc_itu_t+0x1b2/0x280
[ 104.277188][ T5045] end_report+0x6d/0xf0
[ 104.281329][ T5045] kasan_report+0x102/0x130
[ 104.285816][ T5045] ? crc_itu_t+0x1b2/0x280
[ 104.290222][ T5045] crc_itu_t+0x1b2/0x280
[ 104.294464][ T5045] udf_sync_fs+0x1ac/0x380
[ 104.298868][ T5045] ? udf_put_super+0x160/0x160
[ 104.303616][ T5045] ? cpumask_next+0xb3/0xd0
[ 104.308097][ T5045] ? get_nr_dirty_inodes+0x248/0x2d0
[ 104.313380][ T5045] sync_filesystem+0xe6/0x220
[ 104.318148][ T5045] generic_shutdown_super+0x6b/0x300
[ 104.323424][ T5045] kill_block_super+0x7c/0xe0
[ 104.328084][ T5045] deactivate_locked_super+0x93/0xf0
[ 104.333490][ T5045] cleanup_mnt+0x42d/0x4e0
[ 104.338022][ T5045] ? lockdep_hardirqs_on+0x94/0x140
[ 104.343401][ T5045] task_work_run+0x125/0x1a0
[ 104.347985][ T5045] do_exit+0x626/0x20c0
[ 104.352129][ T5045] ? put_task_struct+0x80/0x80
[ 104.356885][ T5045] ? lock_chain_count+0x20/0x20
[ 104.361746][ T5045] do_group_exit+0x12e/0x300
[ 104.366323][ T5045] __x64_sys_exit_group+0x3b/0x40
[ 104.371337][ T5045] do_syscall_64+0x4c/0xa0
[ 104.375739][ T5045] ? clear_bhb_loop+0x30/0x80
[ 104.380403][ T5045] ? clear_bhb_loop+0x30/0x80
[ 104.385064][ T5045] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 104.390941][ T5045] RIP: 0033:0x7f963e650ef9
[ 104.395371][ T5045] Code: Unable to access opcode bytes at RIP 0x7f963e650ecf.
[ 104.402718][ T5045] RSP: 002b:00007ffd709a9c08 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 104.411121][ T5045] RAX: ffffffffffffffda RBX: 00007f963e6e53ad RCX: 00007f963e650ef9
[ 104.419190][ T5045] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[ 104.427153][ T5045] RBP: 0000000000000010 R08: 0000000000000000 R09: 00007f963e6e533b
[ 104.435099][ T5045] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd709aaec0
[ 104.443049][ T5045] R13: 00007f963e6e533b R14: 000055556f5e84e8 R15: 00007ffd709abf90
[ 104.451011][ T5045]
[ 104.454334][ T5045] Kernel Offset: disabled
[ 104.458645][ T5045] Rebooting in 86400 seconds..