Warning: Permanently added '10.128.1.220' (ED25519) to the list of known hosts.
2026/05/10 04:09:52 parsed 1 programs
[ 89.655909][ T4660] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 92.109792][ T4705] chnl_net:caif_netlink_parms(): no params data found
[ 92.168269][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.175852][ T4705] bridge0: port 1(bridge_slave_0) entered disabled state
[ 92.184101][ T4705] device bridge_slave_0 entered promiscuous mode
[ 92.194147][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.201664][ T4705] bridge0: port 2(bridge_slave_1) entered disabled state
[ 92.211244][ T4705] device bridge_slave_1 entered promiscuous mode
[ 92.239366][ T4705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 92.251349][ T4705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 92.281964][ T4705] team0: Port device team_slave_0 added
[ 92.289922][ T4705] team0: Port device team_slave_1 added
[ 92.315136][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 92.322115][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 92.349841][ T4705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 92.363345][ T4705] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 92.371733][ T4705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 92.400398][ T4705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 92.438598][ T4705] device hsr_slave_0 entered promiscuous mode
[ 92.445704][ T4705] device hsr_slave_1 entered promiscuous mode
[ 92.681191][ T9] ODEBUG: Out of memory. ODEBUG disabled
[ 93.050511][ T4705] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 93.060379][ T4705] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 93.071655][ T4705] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 93.081141][ T4705] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 93.102231][ T4705] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.109360][ T4705] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.117180][ T4705] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.124360][ T4705] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 93.134673][ T144] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.143692][ T144] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.196620][ T4705] 8021q: adding VLAN 0 to HW filter on device bond0
[ 93.211604][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 93.219667][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 93.230362][ T4705] 8021q: adding VLAN 0 to HW filter on device team0
[ 93.242678][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 93.252240][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 93.262085][ T144] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.269209][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 93.318638][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 93.328241][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 93.339686][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.346823][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.357022][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 93.372512][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 93.381773][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 93.392065][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 93.401173][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 93.410334][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 93.419331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 93.428330][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 93.437455][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 93.446232][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 93.455201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 93.473157][ T4705] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 93.642471][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 93.650847][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 93.664620][ T4705] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 93.698537][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 93.708424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 93.726990][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 93.736451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 93.746858][ T4705] device veth0_vlan entered promiscuous mode
[ 93.757187][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 93.767061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 93.778460][ T4705] device veth1_vlan entered promiscuous mode
[ 93.819450][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 93.829237][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 93.839517][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 93.849654][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 93.860415][ T4705] device veth0_macvtap entered promiscuous mode
[ 93.891737][ T4705] device veth1_macvtap entered promiscuous mode
[ 93.909063][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 93.917060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 93.926312][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 93.934346][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 93.944612][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 93.956538][ T4705] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 93.966185][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 93.975225][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 93.985402][ T4705] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.994204][ T4705] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.003913][ T4705] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.013520][ T4705] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.482361][ T4356] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.494938][ T4356] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.523878][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 94.550426][ T4356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 94.558901][ T4356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 94.575512][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
2026/05/10 04:10:01 executed programs: 0
[ 95.937239][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 95.964685][ T4855] chnl_net:caif_netlink_parms(): no params data found
[ 96.022544][ T4855] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.029760][ T4855] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.040681][ T4855] device bridge_slave_0 entered promiscuous mode
[ 96.049359][ T4855] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.059162][ T4855] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.067738][ T4855] device bridge_slave_1 entered promiscuous mode
[ 96.091784][ T4855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.103088][ T4855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.130000][ T4855] team0: Port device team_slave_0 added
[ 96.138660][ T4855] team0: Port device team_slave_1 added
[ 96.159923][ T4855] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.167092][ T4855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.193522][ T4855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 96.209065][ T4855] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 96.216874][ T4855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.245971][ T4855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 96.284669][ T4855] device hsr_slave_0 entered promiscuous mode
[ 96.292851][ T4855] device hsr_slave_1 entered promiscuous mode
[ 96.301374][ T4855] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 96.309407][ T4855] Cannot create hsr debugfs directory
[ 97.814945][ T4201] Bluetooth: hci0: command 0x0409 tx timeout
[ 99.338739][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.388771][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.459424][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.904958][ T4251] Bluetooth: hci0: command 0x041b tx timeout
[ 100.321321][ T4855] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 100.330461][ T4855] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 100.349871][ T4855] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 100.358449][ T4855] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 100.408005][ T4855] 8021q: adding VLAN 0 to HW filter on device bond0
[ 100.419902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 100.427809][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 100.437546][ T4855] 8021q: adding VLAN 0 to HW filter on device team0
[ 100.447728][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 100.457790][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 100.466552][ T1444] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.473635][ T1444] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 100.481930][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 100.498879][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 100.507877][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 100.517893][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.525044][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 100.535596][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 100.559023][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 100.568218][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 100.577370][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 100.592558][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 100.603105][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 100.611987][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 100.623935][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 100.632432][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 100.654392][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 100.662875][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 100.674224][ T9] device hsr_slave_0 left promiscuous mode
[ 100.680654][ T9] device hsr_slave_1 left promiscuous mode
[ 100.687130][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 100.694606][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 100.703530][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 100.711160][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 100.719079][ T9] device bridge_slave_1 left promiscuous mode
[ 100.725430][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.733557][ T9] device bridge_slave_0 left promiscuous mode
[ 100.741191][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.751184][ T9] device veth1_macvtap left promiscuous mode
[ 100.757346][ T9] device veth0_macvtap left promiscuous mode
[ 100.763511][ T9] device veth1_vlan left promiscuous mode
[ 100.769366][ T9] device veth0_vlan left promiscuous mode
[ 100.873321][ T9] team0 (unregistering): Port device team_slave_1 removed
[ 100.883961][ T9] team0 (unregistering): Port device team_slave_0 removed
[ 100.894674][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 100.908480][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 100.952395][ T9] bond0 (unregistering): Released all slaves
[ 100.989141][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 101.071791][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 101.079715][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 101.091859][ T4855] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 101.118036][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 101.127281][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 101.139372][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 101.148754][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 101.157375][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 101.165428][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 101.174210][ T4855] device veth0_vlan entered promiscuous mode
[ 101.189288][ T4855] device veth1_vlan entered promiscuous mode
[ 101.208880][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 101.217202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 101.226012][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 101.234378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 101.244716][ T4855] device veth0_macvtap entered promiscuous mode
[ 101.256166][ T4855] device veth1_macvtap entered promiscuous mode
[ 101.269594][ T4855] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 101.278102][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 101.286507][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 101.294371][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 101.303160][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 101.314326][ T4855] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 101.326900][ T4855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.336749][ T4855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.346191][ T4855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.355238][ T4855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.367854][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 101.376578][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 101.436442][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.444774][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.452759][ T4356] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2026/05/10 04:10:07 executed programs: 2
[ 101.478915][ T4356] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.487696][ T4356] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.499755][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 101.578496][ T5122] loop0: detected capacity change from 0 to 2048
[ 101.645872][ T5122] =======================================================
[ 101.645872][ T5122] WARNING: The mand mount option has been deprecated and
[ 101.645872][ T5122] and is ignored by this kernel. Remove the mand
[ 101.645872][ T5122] option from the mount to silence this warning.
[ 101.645872][ T5122] =======================================================
[ 101.717721][ T5122] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d
[ 101.741903][ T5122] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000)
[ 101.959109][ T4855] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0
[ 101.976676][ T4855] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0
[ 101.986454][ T4251] Bluetooth: hci0: command 0x040f tx timeout
[ 101.999149][ T4855] ==================================================================
[ 102.007505][ T4855] BUG: KASAN: use-after-free in crc_itu_t+0x1b2/0x280
[ 102.014385][ T4855] Read of size 1 at addr ffff88807bba7000 by task syz-executor/4855
[ 102.022536][ T4855]
[ 102.024868][ T4855] CPU: 1 PID: 4855 Comm: syz-executor Not tainted syzkaller #0
[ 102.032492][ T4855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 102.042648][ T4855] Call Trace:
[ 102.045934][ T4855]
[ 102.048872][ T4855] dump_stack_lvl+0x188/0x250
[ 102.053742][ T4855] ? show_regs_print_info+0x20/0x20
[ 102.058942][ T4855] ? load_image+0x400/0x400
[ 102.063441][ T4855] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 102.068910][ T4855] print_address_description+0x60/0x2d0
[ 102.074472][ T4855] ? crc_itu_t+0x1b2/0x280
[ 102.078992][ T4855] kasan_report+0xdf/0x130
[ 102.083513][ T4855] ? crc_itu_t+0x1b2/0x280
[ 102.087931][ T4855] crc_itu_t+0x1b2/0x280
[ 102.092179][ T4855] udf_sync_fs+0x1ac/0x380
[ 102.096710][ T4855] ? udf_put_super+0x160/0x160
[ 102.101586][ T4855] ? cpumask_next+0xb3/0xd0
[ 102.106374][ T4855] ? get_nr_dirty_inodes+0x248/0x2d0
[ 102.111759][ T4855] sync_filesystem+0xe6/0x220
[ 102.116616][ T4855] generic_shutdown_super+0x6b/0x300
[ 102.121920][ T4855] kill_block_super+0x7c/0xe0
[ 102.126610][ T4855] deactivate_locked_super+0x93/0xf0
[ 102.131937][ T4855] cleanup_mnt+0x42d/0x4e0
[ 102.136512][ T4855] ? lockdep_hardirqs_on+0x94/0x140
[ 102.141737][ T4855] task_work_run+0x125/0x1a0
[ 102.146348][ T4855] do_exit+0x626/0x20c0
[ 102.150517][ T4855] ? put_task_struct+0x80/0x80
[ 102.155308][ T4855] ? lock_chain_count+0x20/0x20
[ 102.160241][ T4855] do_group_exit+0x12e/0x300
[ 102.164923][ T4855] __x64_sys_exit_group+0x3b/0x40
[ 102.169931][ T4855] do_syscall_64+0x4c/0xa0
[ 102.174336][ T4855] ? clear_bhb_loop+0x30/0x80
[ 102.179281][ T4855] ? clear_bhb_loop+0x30/0x80
[ 102.184243][ T4855] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 102.190162][ T4855] RIP: 0033:0x7f06eee22379
[ 102.194601][ T4855] Code: Unable to access opcode bytes at RIP 0x7f06eee2234f.
[ 102.202072][ T4855] RSP: 002b:00007fffebbc3f38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 102.210772][ T4855] RAX: ffffffffffffffda RBX: 00007f06eeeb5235 RCX: 00007f06eee22379
[ 102.218783][ T4855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[ 102.226942][ T4855] RBP: 0000000000000010 R08: 0000000000000000 R09: 00007f06eeeb51c3
[ 102.234906][ T4855] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffebbc51f0
[ 102.242875][ T4855] R13: 00007f06eeeb51c3 R14: 000055559161b4e8 R15: 00007fffebbc62c0
[ 102.251367][ T4855]
[ 102.254475][ T4855]
[ 102.256793][ T4855] The buggy address belongs to the page:
[ 102.262410][ T4855] page:ffffea0001eee9c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7bba7
[ 102.272634][ T4855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 102.279768][ T4855] raw: 00fff00000000000 ffffea00005ee1c8 ffffea00008e5b88 0000000000000000
[ 102.288335][ T4855] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000
[ 102.296988][ T4855] page dumped because: kasan: bad access detected
[ 102.303393][ T4855] page_owner tracks the page as freed
[ 102.308749][ T4855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x500dc0(GFP_USER|__GFP_ZERO|__GFP_ACCOUNT), pid 5104, ts 99881917066, free_ts 99884163958
[ 102.324537][ T4855] get_page_from_freelist+0x1bbd/0x1ca0
[ 102.330077][ T4855] __alloc_pages+0x1ee/0x480
[ 102.334659][ T4855] __pmd_alloc+0xa6/0x750
[ 102.338975][ T4855] copy_page_range+0x2bf8/0x3230
[ 102.343984][ T4855] copy_mm+0xc86/0x13f0
[ 102.348216][ T4855] copy_process+0x17eb/0x3e20
[ 102.352966][ T4855] kernel_clone+0x23f/0x990
[ 102.357738][ T4855] __x64_sys_clone+0x19a/0x210
[ 102.362683][ T4855] do_syscall_64+0x4c/0xa0
[ 102.367332][ T4855] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 102.373314][ T4855] page last free stack trace:
[ 102.378162][ T4855] free_unref_page_prepare+0x637/0x6c0
[ 102.383643][ T4855] free_unref_page_list+0x119/0x820
[ 102.388847][ T4855] release_pages+0x186c/0x1be0
[ 102.393785][ T4855] tlb_finish_mmu+0x1b4/0x370
[ 102.398460][ T4855] exit_mmap+0x3d0/0x640
[ 102.402915][ T4855] __mmput+0x115/0x3b0
[ 102.406984][ T4855] exit_mm+0x588/0x6e0
[ 102.411038][ T4855] do_exit+0x5a9/0x20c0
[ 102.415179][ T4855] do_group_exit+0x12e/0x300
[ 102.419934][ T4855] __x64_sys_exit_group+0x3b/0x40
[ 102.425030][ T4855] do_syscall_64+0x4c/0xa0
[ 102.429433][ T4855] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 102.435347][ T4855]
[ 102.437655][ T4855] Memory state around the buggy address:
[ 102.443358][ T4855] ffff88807bba6f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 102.451404][ T4855] ffff88807bba6f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 102.459459][ T4855] >ffff88807bba7000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 102.467508][ T4855] ^
[ 102.471647][ T4855] ffff88807bba7080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 102.479800][ T4855] ffff88807bba7100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 102.487845][ T4855] ==================================================================
[ 102.495902][ T4855] Disabling lock debugging due to kernel taint
[ 102.518076][ T4855] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 102.525347][ T4855] CPU: 0 PID: 4855 Comm: syz-executor Tainted: G B syzkaller #0
[ 102.534466][ T4855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 102.544528][ T4855] Call Trace:
[ 102.547810][ T4855]
[ 102.550741][ T4855] dump_stack_lvl+0x188/0x250
[ 102.555508][ T4855] ? show_regs_print_info+0x20/0x20
[ 102.560690][ T4855] ? load_image+0x400/0x400
[ 102.565178][ T4855] panic+0x2e5/0x810
[ 102.569063][ T4855] ? bpf_jit_dump+0xd0/0xd0
[ 102.573552][ T4855] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 102.579603][ T4855] ? _raw_spin_unlock+0x40/0x40
[ 102.584456][ T4855] ? crc_itu_t+0x1b2/0x280
[ 102.588858][ T4855] check_panic_on_warn+0x80/0xa0
[ 102.593784][ T4855] ? crc_itu_t+0x1b2/0x280
[ 102.598268][ T4855] end_report+0x6d/0xf0
[ 102.602423][ T4855] kasan_report+0x102/0x130
[ 102.606921][ T4855] ? crc_itu_t+0x1b2/0x280
[ 102.611508][ T4855] crc_itu_t+0x1b2/0x280
[ 102.615733][ T4855] udf_sync_fs+0x1ac/0x380
[ 102.620144][ T4855] ? udf_put_super+0x160/0x160
[ 102.624900][ T4855] ? cpumask_next+0xb3/0xd0
[ 102.629384][ T4855] ? get_nr_dirty_inodes+0x248/0x2d0
[ 102.634655][ T4855] sync_filesystem+0xe6/0x220
[ 102.639322][ T4855] generic_shutdown_super+0x6b/0x300
[ 102.644601][ T4855] kill_block_super+0x7c/0xe0
[ 102.649274][ T4855] deactivate_locked_super+0x93/0xf0
[ 102.654891][ T4855] cleanup_mnt+0x42d/0x4e0
[ 102.659335][ T4855] ? lockdep_hardirqs_on+0x94/0x140
[ 102.664532][ T4855] task_work_run+0x125/0x1a0
[ 102.669209][ T4855] do_exit+0x626/0x20c0
[ 102.673363][ T4855] ? put_task_struct+0x80/0x80
[ 102.678120][ T4855] ? lock_chain_count+0x20/0x20
[ 102.682972][ T4855] do_group_exit+0x12e/0x300
[ 102.687667][ T4855] __x64_sys_exit_group+0x3b/0x40
[ 102.692766][ T4855] do_syscall_64+0x4c/0xa0
[ 102.697275][ T4855] ? clear_bhb_loop+0x30/0x80
[ 102.701953][ T4855] ? clear_bhb_loop+0x30/0x80
[ 102.706629][ T4855] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 102.712514][ T4855] RIP: 0033:0x7f06eee22379
[ 102.716915][ T4855] Code: Unable to access opcode bytes at RIP 0x7f06eee2234f.
[ 102.724360][ T4855] RSP: 002b:00007fffebbc3f38 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7
[ 102.732771][ T4855] RAX: ffffffffffffffda RBX: 00007f06eeeb5235 RCX: 00007f06eee22379
[ 102.740730][ T4855] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001
[ 102.748686][ T4855] RBP: 0000000000000010 R08: 0000000000000000 R09: 00007f06eeeb51c3
[ 102.756651][ T4855] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fffebbc51f0
[ 102.764609][ T4855] R13: 00007f06eeeb51c3 R14: 000055559161b4e8 R15: 00007fffebbc62c0
[ 102.772571][ T4855]
[ 102.776006][ T4855] Kernel Offset: disabled
[ 102.780327][ T4855] Rebooting in 86400 seconds..