Warning: Permanently added '10.128.1.167' (ED25519) to the list of known hosts. 2025/10/01 12:27:44 parsed 1 programs [ 93.975160][ T4727] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 95.982505][ T4759] chnl_net:caif_netlink_parms(): no params data found [ 96.042788][ T4759] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.051131][ T4759] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.060007][ T4759] device bridge_slave_0 entered promiscuous mode [ 96.069377][ T4759] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.077288][ T4759] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.085801][ T4759] device bridge_slave_1 entered promiscuous mode [ 96.112286][ T4759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.124373][ T4759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.153467][ T4759] team0: Port device team_slave_0 added [ 96.161770][ T4759] team0: Port device team_slave_1 added [ 96.186236][ T4759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.193905][ T4759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.221432][ T4759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.233915][ T4759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.241538][ T4759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.270166][ T4759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.307205][ T4759] device hsr_slave_0 entered promiscuous mode [ 96.315461][ T4759] device hsr_slave_1 entered promiscuous mode [ 96.848662][ T4759] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 96.867479][ T4759] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 96.888902][ T4759] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 96.909162][ T4759] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 97.055153][ T4759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 97.070730][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 97.083451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 97.101753][ T4759] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.115042][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 97.126252][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 97.136968][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.145543][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.157254][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 97.188393][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 97.199526][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 97.211280][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.218621][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.250904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 97.287138][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 97.316865][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 97.327603][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 97.345357][ T4759] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 97.358210][ T4759] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.372957][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 97.383423][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 97.395737][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 97.406250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 97.416013][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 97.426109][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 97.436861][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 97.452134][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 97.576107][ T4759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 97.587676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 97.596993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 97.619626][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 97.630022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 97.662357][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 97.672227][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 97.683586][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 97.693311][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 97.706855][ T4759] device veth0_vlan entered promiscuous mode [ 97.733296][ T4759] device veth1_vlan entered promiscuous mode [ 97.758068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 97.770201][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 97.781868][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 97.792888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 97.805076][ T4759] device veth0_macvtap entered promiscuous mode [ 97.825947][ T4759] device veth1_macvtap entered promiscuous mode [ 97.844794][ T4759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.856037][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 97.865746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 97.875397][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.887865][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.900516][ T4759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.911401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.924410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 97.936211][ T4759] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.947594][ T4759] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.958316][ T4759] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.969115][ T4759] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.727767][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.749011][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.754150][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 99.765821][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.770628][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 99.797901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.325886][ T1233] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/10/01 12:27:53 executed programs: 0 [ 100.714795][ T4947] chnl_net:caif_netlink_parms(): no params data found [ 100.776065][ T4947] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.787106][ T4947] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.798014][ T4947] device bridge_slave_0 entered promiscuous mode [ 100.807931][ T4947] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.815850][ T4947] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.824907][ T4947] device bridge_slave_1 entered promiscuous mode [ 100.849052][ T4947] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.861946][ T4947] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.899607][ T4947] team0: Port device team_slave_0 added [ 100.908361][ T4947] team0: Port device team_slave_1 added [ 100.933662][ T4947] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.941317][ T4947] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.970343][ T4947] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.985764][ T4947] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.994486][ T4947] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.025360][ T4947] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.063300][ T4947] device hsr_slave_0 entered promiscuous mode [ 101.073253][ T4947] device hsr_slave_1 entered promiscuous mode [ 101.082645][ T4947] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.094116][ T4947] Cannot create hsr debugfs directory [ 102.505563][ T1233] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.585051][ T1233] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.626634][ T4436] Bluetooth: hci0: command 0x0409 tx timeout [ 102.645441][ T1233] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.579857][ T4947] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.591345][ T4947] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.635079][ T4947] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.646746][ T4947] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.765998][ T4947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.790385][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 103.807971][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 103.827214][ T4947] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.878166][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 103.889581][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 103.899232][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.906906][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.917182][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 103.927943][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 103.937901][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.946545][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.955836][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 103.968439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 103.980964][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 104.031020][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 104.041750][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 104.052153][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 104.062068][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 104.073745][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 104.085783][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 104.095193][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 104.105687][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 104.118046][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 104.133663][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 104.255143][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 104.263889][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 104.277969][ T4947] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.314196][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 104.325357][ T1200] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 104.342563][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 104.352573][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 104.362547][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 104.371245][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 104.382875][ T4947] device veth0_vlan entered promiscuous mode [ 104.403247][ T4947] device veth1_vlan entered promiscuous mode [ 104.421884][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 104.432114][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 104.442092][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 104.452202][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 104.465269][ T4947] device veth0_macvtap entered promiscuous mode [ 104.479699][ T4947] device veth1_macvtap entered promiscuous mode [ 104.507257][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.521990][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.534897][ T4947] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.544120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 104.553640][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 104.563168][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 104.573996][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 104.589380][ T4947] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.605088][ T4947] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.621930][ T4947] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.634466][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 104.645267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 104.659152][ T1233] device hsr_slave_0 left promiscuous mode [ 104.667619][ T1233] device hsr_slave_1 left promiscuous mode [ 104.674715][ T1233] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.686112][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.695345][ T1233] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.707564][ T1233] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.733080][ T1233] device bridge_slave_1 left promiscuous mode [ 104.737549][ T4419] Bluetooth: hci0: command 0x041b tx timeout [ 104.747159][ T1233] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.771536][ T1233] device bridge_slave_0 left promiscuous mode [ 104.783852][ T1233] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.798822][ T1233] device veth1_macvtap left promiscuous mode [ 104.807365][ T1233] device veth0_macvtap left promiscuous mode [ 104.815274][ T1233] device veth1_vlan left promiscuous mode [ 104.823113][ T1233] device veth0_vlan left promiscuous mode [ 104.959861][ T1233] team0 (unregistering): Port device team_slave_1 removed [ 104.975054][ T1233] team0 (unregistering): Port device team_slave_0 removed [ 104.991967][ T1233] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 105.012199][ T1233] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 105.065482][ T1233] bond0 (unregistering): Released all slaves [ 105.151849][ T4947] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.163628][ T4947] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.175568][ T4947] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.191217][ T4947] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.269395][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.284101][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.310091][ T1200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.313592][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 105.327695][ T1200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.363596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 105.435410][ T5173] loop0: detected capacity change from 0 to 2048 [ 105.489140][ T5173] ======================================================= [ 105.489140][ T5173] WARNING: The mand mount option has been deprecated and [ 105.489140][ T5173] and is ignored by this kernel. Remove the mand [ 105.489140][ T5173] option from the mount to silence this warning. [ 105.489140][ T5173] ======================================================= [ 105.572786][ T5173] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 105.617581][ T5173] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) 2025/10/01 12:27:59 executed programs: 3 [ 105.874684][ T4947] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 105.921800][ T4947] UDF-fs: error (device loop0): udf_verify_fi: directory (ino 1376) has entry at pos 0 with incorrect tag 0 [ 105.944420][ T4947] ================================================================== [ 105.957390][ T4947] BUG: KASAN: use-after-free in crc_itu_t+0x1ad/0x280 [ 105.964891][ T4947] Read of size 1 at addr ffff888077874000 by task syz-executor/4947 [ 105.973467][ T4947] [ 105.976376][ T4947] CPU: 1 PID: 4947 Comm: syz-executor Not tainted syzkaller #0 [ 105.986492][ T4947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 106.001035][ T4947] Call Trace: [ 106.005276][ T4947] [ 106.009015][ T4947] dump_stack_lvl+0x168/0x230 [ 106.015544][ T4947] ? show_regs_print_info+0x20/0x20 [ 106.021291][ T4947] ? load_image+0x3b0/0x3b0 [ 106.026236][ T4947] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 106.032254][ T4947] print_address_description+0x60/0x2d0 [ 106.038117][ T4947] ? crc_itu_t+0x1ad/0x280 [ 106.042717][ T4947] kasan_report+0xdf/0x130 [ 106.048426][ T4947] ? crc_itu_t+0x1ad/0x280 [ 106.053486][ T4947] crc_itu_t+0x1ad/0x280 [ 106.058058][ T4947] udf_sync_fs+0x194/0x350 [ 106.062947][ T4947] ? udf_put_super+0x160/0x160 [ 106.068591][ T4947] ? cpumask_next+0xb3/0xd0 [ 106.073756][ T4947] ? get_nr_dirty_inodes+0x248/0x2d0 [ 106.079766][ T4947] sync_filesystem+0xe6/0x220 [ 106.084457][ T4947] generic_shutdown_super+0x6b/0x300 [ 106.090033][ T4947] kill_block_super+0x7c/0xe0 [ 106.095086][ T4947] deactivate_locked_super+0x93/0xf0 [ 106.100992][ T4947] cleanup_mnt+0x418/0x4d0 [ 106.106725][ T4947] ? lockdep_hardirqs_on+0x94/0x140 [ 106.112835][ T4947] task_work_run+0x125/0x1a0 [ 106.118805][ T4947] do_exit+0x61e/0x20a0 [ 106.124569][ T4947] ? put_task_struct+0x80/0x80 [ 106.130117][ T4947] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 106.136708][ T4947] ? lock_chain_count+0x20/0x20 [ 106.142033][ T4947] do_group_exit+0x12e/0x300 [ 106.148046][ T4947] __x64_sys_exit_group+0x3b/0x40 [ 106.153782][ T4947] do_syscall_64+0x4c/0xa0 [ 106.159737][ T4947] ? clear_bhb_loop+0x30/0x80 [ 106.164413][ T4947] ? clear_bhb_loop+0x30/0x80 [ 106.169310][ T4947] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.175615][ T4947] RIP: 0033:0x7f24618ccba9 [ 106.180300][ T4947] Code: Unable to access opcode bytes at RIP 0x7f24618ccb7f. [ 106.188190][ T4947] RSP: 002b:00007ffd1500cd18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 106.197701][ T4947] RAX: ffffffffffffffda RBX: 00007f246194fc77 RCX: 00007f24618ccba9 [ 106.206302][ T4947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 106.214886][ T4947] RBP: 0000000000000010 R08: 00007ffd1500aab6 R09: 00007ffd1500dfd0 [ 106.224218][ T4947] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1500dfd0 [ 106.233341][ T4947] R13: 00007f246194fc05 R14: 0000555563df54a8 R15: 00007ffd1500f0a0 [ 106.242823][ T4947] [ 106.247448][ T4947] [ 106.250216][ T4947] Allocated by task 4759: [ 106.255347][ T4947] __kasan_kmalloc+0xb5/0xf0 [ 106.260731][ T4947] sctp_inet6addr_event+0x37b/0x730 [ 106.266901][ T4947] atomic_notifier_call_chain+0x15d/0x280 [ 106.272897][ T4947] ipv6_add_addr+0xb30/0xde0 [ 106.277744][ T4947] add_addr+0x83/0x2c0 [ 106.282161][ T4947] add_v4_addrs+0x6f9/0xbf0 [ 106.287603][ T4947] addrconf_init_auto_addrs+0x37d/0xa80 [ 106.294584][ T4947] addrconf_notify+0xa6b/0xf00 [ 106.301299][ T4947] raw_notifier_call_chain+0xcb/0x160 [ 106.307804][ T4947] __dev_notify_flags+0x178/0x2d0 [ 106.315277][ T4947] dev_change_flags+0xe3/0x1a0 [ 106.321359][ T4947] do_setlink+0xc01/0x3980 [ 106.329705][ T4947] rtnl_newlink+0x1419/0x17d0 [ 106.342048][ T4947] rtnetlink_rcv_msg+0x9b9/0xe60 [ 106.353217][ T4947] netlink_rcv_skb+0x1e0/0x430 [ 106.368908][ T4947] netlink_unicast+0x774/0x920 [ 106.395174][ T4947] netlink_sendmsg+0x8ab/0xbc0 [ 106.404818][ T4947] __sys_sendto+0x423/0x580 [ 106.412530][ T4947] __x64_sys_sendto+0xda/0xf0 [ 106.422016][ T4947] do_syscall_64+0x4c/0xa0 [ 106.429584][ T4947] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 106.439204][ T4947] [ 106.443608][ T4947] Freed by task 13: [ 106.450418][ T4947] kasan_set_track+0x4b/0x70 [ 106.459024][ T4947] kasan_set_free_info+0x1f/0x40 [ 106.467101][ T4947] ____kasan_slab_free+0xd5/0x110 [ 106.475388][ T4947] slab_free_freelist_hook+0xea/0x170 [ 106.484233][ T4947] kmem_cache_free_bulk+0x38b/0x490 [ 106.491847][ T4947] kfree_rcu_work+0x2e3/0x7a0 [ 106.499826][ T4947] process_one_work+0x863/0x1000 [ 106.510938][ T4947] worker_thread+0xaa8/0x12a0 [ 106.519947][ T4947] kthread+0x436/0x520 [ 106.527163][ T4947] ret_from_fork+0x1f/0x30 [ 106.533404][ T4947] [ 106.536870][ T4947] Last potentially related work creation: [ 106.544210][ T4947] kasan_save_stack+0x35/0x60 [ 106.551965][ T4947] kasan_record_aux_stack+0xb8/0x100 [ 106.559304][ T4947] kvfree_call_rcu+0x10a/0x7c0 [ 106.565738][ T4947] sctp_inet6addr_event+0x698/0x730 [ 106.571784][ T4947] atomic_notifier_call_chain+0x15d/0x280 [ 106.578319][ T4947] addrconf_ifdown+0xdf4/0x1970 [ 106.583900][ T4947] addrconf_notify+0x445/0xf00 [ 106.589741][ T4947] raw_notifier_call_chain+0xcb/0x160 [ 106.598775][ T4947] dev_close_many+0x28d/0x400 [ 106.604810][ T4947] unregister_netdevice_many+0x472/0x18f0 [ 106.612797][ T4947] sit_exit_batch_net+0x498/0x4e0 [ 106.620884][ T4947] cleanup_net+0x77b/0xb80 [ 106.628204][ T4947] process_one_work+0x863/0x1000 [ 106.637205][ T4947] worker_thread+0xaa8/0x12a0 [ 106.643544][ T4947] kthread+0x436/0x520 [ 106.651226][ T4947] ret_from_fork+0x1f/0x30 [ 106.658654][ T4947] [ 106.661767][ T4947] The buggy address belongs to the object at ffff888077874000 [ 106.661767][ T4947] which belongs to the cache kmalloc-64 of size 64 [ 106.685592][ T4947] The buggy address is located 0 bytes inside of [ 106.685592][ T4947] 64-byte region [ffff888077874000, ffff888077874040) [ 106.708699][ T4947] The buggy address belongs to the page: [ 106.718065][ T4947] page:ffffea0001de1d00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77874 [ 106.736353][ T4947] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 106.747139][ T4947] raw: 00fff00000000200 ffffea0000a506c0 0000001300000013 ffff888016841640 [ 106.761031][ T4947] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 106.772384][ T4947] page dumped because: kasan: bad access detected [ 106.782426][ T4947] page_owner tracks the page as allocated [ 106.794734][ T4947] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 4240, ts 61007907530, free_ts 60866290093 [ 106.824372][ T4947] get_page_from_freelist+0x1b77/0x1c60 [ 106.833494][ T4947] __alloc_pages+0x1e1/0x470 [ 106.839819][ T4947] new_slab+0xc0/0x4b0 [ 106.844464][ T4947] ___slab_alloc+0x81e/0xdf0 [ 106.849816][ T4947] kmem_cache_alloc_trace+0x1a5/0x2a0 [ 106.858020][ T4947] dccp_feat_entry_new+0x169/0x3d0 [ 106.864933][ T4947] __feat_register_sp+0x20b/0x410 [ 106.871814][ T4947] dccp_feat_init+0xbe0/0xde0 [ 106.878480][ T4947] dccp_v4_init_sock+0x19/0x80 [ 106.884758][ T4947] inet_create+0xc0c/0xef0 [ 106.890485][ T4947] __sock_create+0x47b/0x900 [ 106.901164][ T4947] inet_ctl_sock_create+0x97/0x1e0 [ 106.908052][ T4947] ops_init+0x357/0x600 [ 106.913582][ T4947] setup_net+0x38d/0x9f0 [ 106.918220][ T4947] copy_net_ns+0x348/0x5b0 [ 106.923809][ T4947] create_new_namespaces+0x3d3/0x6f0 [ 106.930083][ T4947] page last free stack trace: [ 106.935280][ T4947] free_unref_page_prepare+0x637/0x6c0 [ 106.942350][ T4947] free_unref_page+0x94/0x280 [ 106.947483][ T4947] __vunmap+0x8ab/0xa40 [ 106.954251][ T4947] kcov_close+0x27/0x50 [ 106.961624][ T4947] __fput+0x234/0x930 [ 106.966802][ T4947] task_work_run+0x125/0x1a0 [ 106.972535][ T4947] do_exit+0x61e/0x20a0 [ 106.977993][ T4947] do_group_exit+0x12e/0x300 [ 106.983396][ T4947] get_signal+0x6ca/0x12c0 [ 106.989381][ T4947] arch_do_signal_or_restart+0xc1/0x1300 [ 106.996896][ T4947] exit_to_user_mode_loop+0x9e/0x130 [ 107.003985][ T4947] exit_to_user_mode_prepare+0xee/0x180 [ 107.015794][ T4947] syscall_exit_to_user_mode+0x16/0x40 [ 107.024453][ T4947] do_syscall_64+0x58/0xa0 [ 107.029879][ T4947] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.040424][ T4947] [ 107.042962][ T4947] Memory state around the buggy address: [ 107.049730][ T4947] ffff888077873f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.061147][ T4947] ffff888077873f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 107.070930][ T4947] >ffff888077874000: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 107.081070][ T4947] ^ [ 107.086037][ T4947] ffff888077874080: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 107.099302][ T4947] ffff888077874100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 107.109558][ T4947] ================================================================== [ 107.120160][ T4947] Disabling lock debugging due to kernel taint [ 107.129846][ T4416] Bluetooth: hci0: command 0x040f tx timeout [ 107.132818][ T4947] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 107.147190][ T4947] CPU: 0 PID: 4947 Comm: syz-executor Tainted: G B syzkaller #0 [ 107.161739][ T4947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 107.173687][ T4947] Call Trace: [ 107.177151][ T4947] [ 107.180249][ T4947] dump_stack_lvl+0x168/0x230 [ 107.185369][ T4947] ? show_regs_print_info+0x20/0x20 [ 107.191318][ T4947] ? load_image+0x3b0/0x3b0 [ 107.199612][ T4947] panic+0x2c9/0x7f0 [ 107.207974][ T4947] ? bpf_jit_dump+0xd0/0xd0 [ 107.214413][ T4947] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 107.222356][ T4947] ? _raw_spin_unlock+0x40/0x40 [ 107.228778][ T4947] ? crc_itu_t+0x1ad/0x280 [ 107.235660][ T4947] check_panic_on_warn+0x80/0xa0 [ 107.242608][ T4947] ? crc_itu_t+0x1ad/0x280 [ 107.248944][ T4947] end_report+0x6d/0xf0 [ 107.254006][ T4947] kasan_report+0x102/0x130 [ 107.259109][ T4947] ? crc_itu_t+0x1ad/0x280 [ 107.264325][ T4947] crc_itu_t+0x1ad/0x280 [ 107.269498][ T4947] udf_sync_fs+0x194/0x350 [ 107.275491][ T4947] ? udf_put_super+0x160/0x160 [ 107.280885][ T4947] ? cpumask_next+0xb3/0xd0 [ 107.285573][ T4947] ? get_nr_dirty_inodes+0x248/0x2d0 [ 107.291066][ T4947] sync_filesystem+0xe6/0x220 [ 107.296930][ T4947] generic_shutdown_super+0x6b/0x300 [ 107.303865][ T4947] kill_block_super+0x7c/0xe0 [ 107.309840][ T4947] deactivate_locked_super+0x93/0xf0 [ 107.316845][ T4947] cleanup_mnt+0x418/0x4d0 [ 107.322482][ T4947] ? lockdep_hardirqs_on+0x94/0x140 [ 107.328639][ T4947] task_work_run+0x125/0x1a0 [ 107.333944][ T4947] do_exit+0x61e/0x20a0 [ 107.339066][ T4947] ? put_task_struct+0x80/0x80 [ 107.345102][ T4947] ? lockdep_hardirqs_on_prepare+0x3fc/0x760 [ 107.352088][ T4947] ? lock_chain_count+0x20/0x20 [ 107.359934][ T4947] do_group_exit+0x12e/0x300 [ 107.366072][ T4947] __x64_sys_exit_group+0x3b/0x40 [ 107.372162][ T4947] do_syscall_64+0x4c/0xa0 [ 107.377164][ T4947] ? clear_bhb_loop+0x30/0x80 [ 107.383488][ T4947] ? clear_bhb_loop+0x30/0x80 [ 107.390106][ T4947] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.398261][ T4947] RIP: 0033:0x7f24618ccba9 [ 107.403571][ T4947] Code: Unable to access opcode bytes at RIP 0x7f24618ccb7f. [ 107.415815][ T4947] RSP: 002b:00007ffd1500cd18 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 107.428268][ T4947] RAX: ffffffffffffffda RBX: 00007f246194fc77 RCX: 00007f24618ccba9 [ 107.437899][ T4947] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 107.450184][ T4947] RBP: 0000000000000010 R08: 00007ffd1500aab6 R09: 00007ffd1500dfd0 [ 107.462190][ T4947] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1500dfd0 [ 107.472727][ T4947] R13: 00007f246194fc05 R14: 0000555563df54a8 R15: 00007ffd1500f0a0 [ 107.483426][ T4947] [ 107.487020][ T4947] Kernel Offset: disabled [ 107.491723][ T4947] Rebooting in 86400 seconds..