Warning: Permanently added '10.128.0.69' (ED25519) to the list of known hosts.
2025/11/03 10:12:33 parsed 1 programs
[ 89.725316][ T5797] cgroup: Unknown subsys name 'net'
[ 89.893030][ T5797] cgroup: Unknown subsys name 'rlimit'
[ 91.655455][ T5797] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 92.265812][ T23] cfg80211: failed to load regulatory.db
[ 94.248902][ T5826] chnl_net:caif_netlink_parms(): no params data found
[ 94.334222][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.341671][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.349529][ T5826] bridge_slave_0: entered allmulticast mode
[ 94.358039][ T5826] bridge_slave_0: entered promiscuous mode
[ 94.368335][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.375649][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.382851][ T5826] bridge_slave_1: entered allmulticast mode
[ 94.390122][ T5826] bridge_slave_1: entered promiscuous mode
[ 94.424870][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.439072][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.497966][ T5826] team0: Port device team_slave_0 added
[ 94.506754][ T5826] team0: Port device team_slave_1 added
[ 94.534944][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 94.541921][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 94.568134][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.582085][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.589400][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 94.615422][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.672354][ T5826] hsr_slave_0: entered promiscuous mode
[ 94.679264][ T5826] hsr_slave_1: entered promiscuous mode
[ 94.872891][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 94.886960][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 94.907811][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 94.919002][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 94.964311][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.971999][ T5826] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.980193][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.987401][ T5826] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.058923][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0
[ 95.079180][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 95.089400][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.115859][ T5826] 8021q: adding VLAN 0 to HW filter on device team0
[ 95.130439][ T34] bridge0: port 1(bridge_slave_0) entered blocking state
[ 95.137675][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 95.157746][ T48] bridge0: port 2(bridge_slave_1) entered blocking state
[ 95.165434][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 95.419920][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 95.461717][ T5826] veth0_vlan: entered promiscuous mode
[ 95.479055][ T5826] veth1_vlan: entered promiscuous mode
[ 95.510581][ T5826] veth0_macvtap: entered promiscuous mode
[ 95.520701][ T5826] veth1_macvtap: entered promiscuous mode
[ 95.539565][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 95.556792][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 95.569983][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.579186][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.588207][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.598430][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 95.770796][ T34] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.021254][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.029843][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 96.065429][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 96.073314][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 97.318584][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 97.326751][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 97.335397][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 97.344664][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 97.352566][ T5875] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 97.360486][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 98.326534][ T34] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/11/03 10:12:45 executed programs: 0
[ 99.172925][ T5104] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 99.182800][ T5104] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 99.191480][ T5104] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 99.200478][ T5104] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 99.208879][ T5104] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 99.217263][ T5104] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 99.391822][ T5901] chnl_net:caif_netlink_parms(): no params data found
[ 99.471405][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.478691][ T5901] bridge0: port 1(bridge_slave_0) entered disabled state
[ 99.486494][ T5901] bridge_slave_0: entered allmulticast mode
[ 99.493729][ T5901] bridge_slave_0: entered promiscuous mode
[ 99.502284][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.509886][ T5901] bridge0: port 2(bridge_slave_1) entered disabled state
[ 99.517333][ T5901] bridge_slave_1: entered allmulticast mode
[ 99.525318][ T5901] bridge_slave_1: entered promiscuous mode
[ 99.558454][ T5901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 99.570516][ T5901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 99.607387][ T5901] team0: Port device team_slave_0 added
[ 99.617285][ T5901] team0: Port device team_slave_1 added
[ 99.648730][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 99.655935][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 99.682590][ T5901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 99.695237][ T5901] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 99.702229][ T5901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 99.728647][ T5901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 99.776182][ T5901] hsr_slave_0: entered promiscuous mode
[ 99.783062][ T5901] hsr_slave_1: entered promiscuous mode
[ 99.790224][ T5901] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 99.798762][ T5901] Cannot create hsr debugfs directory
[ 100.616544][ T34] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 100.690991][ T34] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 101.304576][ T5875] Bluetooth: hci0: command tx timeout
[ 101.662054][ T34] hsr_slave_0: left promiscuous mode
[ 101.668775][ T34] hsr_slave_1: left promiscuous mode
[ 101.678510][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 101.686177][ T34] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 101.699810][ T34] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 101.707540][ T34] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 101.718043][ T34] bridge_slave_1: left allmulticast mode
[ 101.723841][ T34] bridge_slave_1: left promiscuous mode
[ 101.730461][ T34] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.747606][ T34] bridge_slave_0: left allmulticast mode
[ 101.753333][ T34] bridge_slave_0: left promiscuous mode
[ 101.761671][ T34] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.803123][ T34] veth1_macvtap: left promiscuous mode
[ 101.809673][ T34] veth0_macvtap: left promiscuous mode
[ 101.818371][ T34] veth1_vlan: left promiscuous mode
[ 101.824291][ T34] veth0_vlan: left promiscuous mode
[ 102.242647][ T34] team0 (unregistering): Port device team_slave_1 removed
[ 102.281223][ T34] team0 (unregistering): Port device team_slave_0 removed
[ 102.316036][ T34] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 102.351328][ T34] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 102.762026][ T34] bond0 (unregistering): Released all slaves
[ 102.867156][ T5901] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 102.880497][ T5901] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 102.891810][ T5901] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 102.914302][ T5901] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 103.024166][ T5901] 8021q: adding VLAN 0 to HW filter on device bond0
[ 103.046372][ T5901] 8021q: adding VLAN 0 to HW filter on device team0
[ 103.066525][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.073746][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 103.092660][ T48] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.099900][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 103.356762][ T5901] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 103.390879][ T5875] Bluetooth: hci0: command tx timeout
[ 103.428616][ T5901] veth0_vlan: entered promiscuous mode
[ 103.450600][ T5901] veth1_vlan: entered promiscuous mode
[ 103.518349][ T5901] veth0_macvtap: entered promiscuous mode
[ 103.536878][ T5901] veth1_macvtap: entered promiscuous mode
[ 103.576565][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 103.595083][ T5901] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 103.608034][ T5901] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.617592][ T5901] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.628838][ T5901] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.637880][ T5901] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.705526][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.713382][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.748044][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 103.756461][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 103.867631][ T5947] block nbd0: shutting down sockets
[ 103.909457][ T5947] block nbd0: reconnected socket
[ 103.909614][ T5875] block nbd0: Receive control failed (result -32)
[ 103.925845][ T5875] block nbd0: shutting down sockets
[ 103.961840][ T5875] ==================================================================
[ 103.969970][ T5875] BUG: KASAN: slab-use-after-free in recv_work+0x1b03/0x1bf0
[ 103.977497][ T5875] Write of size 4 at addr ffff88807724a278 by task kworker/u5:2/5875
[ 103.985607][ T5875]
[ 103.987985][ T5875] CPU: 0 PID: 5875 Comm: kworker/u5:2 Not tainted syzkaller #0
[ 103.995668][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 104.005767][ T5875] Workqueue: nbd0-recv recv_work
[ 104.010766][ T5875] Call Trace:
[ 104.014069][ T5875]
[ 104.017044][ T5875] dump_stack_lvl+0x16c/0x230
[ 104.021769][ T5875] ? __lock_acquire+0x7c80/0x7c80
[ 104.026833][ T5875] ? show_regs_print_info+0x20/0x20
[ 104.032078][ T5875] ? load_image+0x3b0/0x3b0
[ 104.036629][ T5875] ? _raw_spin_lock_irqsave+0xb4/0xf0
[ 104.042032][ T5875] ? __virt_addr_valid+0x18c/0x540
[ 104.047173][ T5875] ? __virt_addr_valid+0x469/0x540
[ 104.052308][ T5875] print_report+0xac/0x220
[ 104.056751][ T5875] ? recv_work+0x1b03/0x1bf0
[ 104.061349][ T5875] kasan_report+0x117/0x150
[ 104.065868][ T5875] ? recv_work+0x1b03/0x1bf0
[ 104.070555][ T5875] kasan_check_range+0x288/0x290
[ 104.075512][ T5875] recv_work+0x1b03/0x1bf0
[ 104.079950][ T5875] ? backend_show+0xb0/0xb0
[ 104.084563][ T5875] ? _raw_spin_unlock_irq+0x23/0x50
[ 104.089789][ T5875] ? process_scheduled_works+0x957/0x15b0
[ 104.095544][ T5875] ? process_scheduled_works+0x957/0x15b0
[ 104.101318][ T5875] process_scheduled_works+0xa45/0x15b0
[ 104.107000][ T5875] ? assign_work+0x400/0x400
[ 104.111620][ T5875] ? assign_work+0x39e/0x400
[ 104.116235][ T5875] worker_thread+0xa55/0xfc0
[ 104.120846][ T5875] ? _raw_spin_unlock_irqrestore+0xae/0x110
[ 104.126791][ T5875] ? _raw_spin_unlock+0x40/0x40
[ 104.131652][ T5875] ? _raw_spin_unlock_irqrestore+0x86/0x110
[ 104.137868][ T5875] kthread+0x2fa/0x390
[ 104.141964][ T5875] ? pr_cont_work+0x560/0x560
[ 104.146678][ T5875] ? kthread_blkcg+0xd0/0xd0
[ 104.151296][ T5875] ret_from_fork+0x48/0x80
[ 104.155735][ T5875] ? kthread_blkcg+0xd0/0xd0
[ 104.160336][ T5875] ret_from_fork_asm+0x11/0x20
[ 104.165153][ T5875]
[ 104.168187][ T5875]
[ 104.170525][ T5875] Allocated by task 5947:
[ 104.174861][ T5875] kasan_set_track+0x4e/0x70
[ 104.179564][ T5875] __kasan_kmalloc+0x8f/0xa0
[ 104.184167][ T5875] nbd_alloc_and_init_config+0x88/0x260
[ 104.189731][ T5875] nbd_genl_connect+0x9d8/0x18e0
[ 104.194717][ T5875] genl_family_rcv_msg_doit+0x209/0x2f0
[ 104.200300][ T5875] genl_rcv_msg+0x60b/0x790
[ 104.204839][ T5875] netlink_rcv_skb+0x216/0x480
[ 104.209618][ T5875] genl_rcv+0x28/0x40
[ 104.213709][ T5875] netlink_unicast+0x751/0x8d0
[ 104.218582][ T5875] netlink_sendmsg+0x8c1/0xbe0
[ 104.223373][ T5875] ____sys_sendmsg+0x5bf/0x950
[ 104.228154][ T5875] ___sys_sendmsg+0x220/0x290
[ 104.232849][ T5875] __se_sys_sendmsg+0x1a5/0x270
[ 104.237719][ T5875] do_syscall_64+0x55/0xb0
[ 104.242148][ T5875] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 104.248063][ T5875]
[ 104.250399][ T5875] Freed by task 5875:
[ 104.254574][ T5875] kasan_set_track+0x4e/0x70
[ 104.259178][ T5875] kasan_save_free_info+0x2e/0x50
[ 104.264223][ T5875] ____kasan_slab_free+0x126/0x1e0
[ 104.269370][ T5875] slab_free_freelist_hook+0x130/0x1b0
[ 104.274851][ T5875] __kmem_cache_free+0xba/0x1f0
[ 104.279735][ T5875] nbd_config_put+0x57e/0x770
[ 104.284492][ T5875] recv_work+0x1aed/0x1bf0
[ 104.288918][ T5875] process_scheduled_works+0xa45/0x15b0
[ 104.294567][ T5875] worker_thread+0xa55/0xfc0
[ 104.299180][ T5875] kthread+0x2fa/0x390
[ 104.303252][ T5875] ret_from_fork+0x48/0x80
[ 104.307826][ T5875] ret_from_fork_asm+0x11/0x20
[ 104.312620][ T5875]
[ 104.314966][ T5875] The buggy address belongs to the object at ffff88807724a200
[ 104.314966][ T5875] which belongs to the cache kmalloc-256 of size 256
[ 104.329066][ T5875] The buggy address is located 120 bytes inside of
[ 104.329066][ T5875] freed 256-byte region [ffff88807724a200, ffff88807724a300)
[ 104.343050][ T5875]
[ 104.345384][ T5875] The buggy address belongs to the physical page:
[ 104.351809][ T5875] page:ffffea0001dc9280 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7724a
[ 104.361980][ T5875] head:ffffea0001dc9280 order:1 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 104.370944][ T5875] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 104.378941][ T5875] page_type: 0xffffffff()
[ 104.383290][ T5875] raw: 00fff00000000840 ffff888017841b40 dead000000000122 0000000000000000
[ 104.391904][ T5875] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 104.400503][ T5875] page dumped because: kasan: bad access detected
[ 104.406948][ T5875] page_owner tracks the page as allocated
[ 104.412674][ T5875] page last allocated via order 1, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5901, tgid 5901 (syz-executor), ts 103788179082, free_ts 103771414875
[ 104.435618][ T5875] post_alloc_hook+0x1cd/0x210
[ 104.440413][ T5875] get_page_from_freelist+0x195c/0x19f0
[ 104.445996][ T5875] __alloc_pages+0x1e3/0x460
[ 104.450615][ T5875] alloc_slab_page+0x5d/0x170
[ 104.455488][ T5875] new_slab+0x87/0x2e0
[ 104.459571][ T5875] ___slab_alloc+0xc6d/0x1300
[ 104.464268][ T5875] __kmem_cache_alloc_node+0x1a2/0x260
[ 104.469749][ T5875] __kmalloc_node_track_caller+0xa2/0x230
[ 104.475506][ T5875] kmemdup+0x2b/0x70
[ 104.479413][ T5875] ip6t_register_table+0x28a/0x7b0
[ 104.484530][ T5875] ip6table_mangle_table_init+0x41/0x60
[ 104.490090][ T5875] xt_find_table_lock+0x306/0x3e0
[ 104.495125][ T5875] xt_request_find_table_lock+0x26/0x100
[ 104.500774][ T5875] do_ip6t_get_ctl+0x729/0x1150
[ 104.505633][ T5875] nf_getsockopt+0x262/0x280
[ 104.510237][ T5875] ipv6_getsockopt+0x216/0x2c0
[ 104.515020][ T5875] page last free stack trace:
[ 104.519699][ T5875] free_unref_page_prepare+0x7ce/0x8e0
[ 104.525173][ T5875] free_unref_page+0x32/0x2e0
[ 104.529889][ T5875] __unfreeze_partials+0x1cf/0x210
[ 104.535018][ T5875] put_cpu_partial+0x17c/0x250
[ 104.539800][ T5875] __slab_free+0x31d/0x410
[ 104.544233][ T5875] qlist_free_all+0x75/0xe0
[ 104.548750][ T5875] kasan_quarantine_reduce+0x143/0x160
[ 104.554244][ T5875] __kasan_slab_alloc+0x22/0x80
[ 104.559117][ T5875] slab_post_alloc_hook+0x6e/0x4d0
[ 104.564268][ T5875] kmem_cache_alloc+0x11e/0x2e0
[ 104.569135][ T5875] getname_kernel+0x5a/0x2f0
[ 104.573744][ T5875] kern_path+0x1d/0x50
[ 104.577835][ T5875] tomoyo_mount_permission+0x774/0x970
[ 104.583318][ T5875] security_sb_mount+0x87/0xc0
[ 104.588098][ T5875] path_mount+0xbc/0xfe0
[ 104.592360][ T5875] __se_sys_mount+0x2da/0x3c0
[ 104.597134][ T5875]
[ 104.599465][ T5875] Memory state around the buggy address:
[ 104.605214][ T5875] ffff88807724a100: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 104.613306][ T5875] ffff88807724a180: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 104.621472][ T5875] >ffff88807724a200: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 104.629570][ T5875] ^
[ 104.637761][ T5875] ffff88807724a280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 104.645888][ T5875] ffff88807724a300: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 104.653974][ T5875] ==================================================================
[ 104.673854][ T5875] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 104.681148][ T5875] CPU: 0 PID: 5875 Comm: kworker/u5:2 Not tainted syzkaller #0
[ 104.688796][ T5875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025
[ 104.698861][ T5875] Workqueue: nbd0-recv recv_work
[ 104.703819][ T5875] Call Trace:
[ 104.707194][ T5875]
[ 104.710137][ T5875] dump_stack_lvl+0x16c/0x230
[ 104.714832][ T5875] ? show_regs_print_info+0x20/0x20
[ 104.720068][ T5875] ? load_image+0x3b0/0x3b0
[ 104.724593][ T5875] panic+0x2c0/0x710
[ 104.728503][ T5875] ? bpf_jit_dump+0xd0/0xd0
[ 104.733025][ T5875] ? _raw_spin_unlock_irqrestore+0xfa/0x110
[ 104.738936][ T5875] ? _raw_spin_unlock+0x40/0x40
[ 104.743800][ T5875] ? print_memory_metadata+0x314/0x400
[ 104.749300][ T5875] ? recv_work+0x1b03/0x1bf0
[ 104.753922][ T5875] check_panic_on_warn+0x84/0xa0
[ 104.758930][ T5875] ? recv_work+0x1b03/0x1bf0
[ 104.763534][ T5875] end_report+0x6f/0x140
[ 104.767791][ T5875] kasan_report+0x128/0x150
[ 104.772399][ T5875] ? recv_work+0x1b03/0x1bf0
[ 104.777094][ T5875] kasan_check_range+0x288/0x290
[ 104.782077][ T5875] recv_work+0x1b03/0x1bf0
[ 104.786514][ T5875] ? backend_show+0xb0/0xb0
[ 104.791037][ T5875] ? _raw_spin_unlock_irq+0x23/0x50
[ 104.796248][ T5875] ? process_scheduled_works+0x957/0x15b0
[ 104.801985][ T5875] ? process_scheduled_works+0x957/0x15b0
[ 104.807720][ T5875] process_scheduled_works+0xa45/0x15b0
[ 104.813306][ T5875] ? assign_work+0x400/0x400
[ 104.817921][ T5875] ? assign_work+0x39e/0x400
[ 104.822529][ T5875] worker_thread+0xa55/0xfc0
[ 104.827135][ T5875] ? _raw_spin_unlock_irqrestore+0xae/0x110
[ 104.833038][ T5875] ? _raw_spin_unlock+0x40/0x40
[ 104.837903][ T5875] ? _raw_spin_unlock_irqrestore+0x86/0x110
[ 104.843819][ T5875] kthread+0x2fa/0x390
[ 104.847904][ T5875] ? pr_cont_work+0x560/0x560
[ 104.852646][ T5875] ? kthread_blkcg+0xd0/0xd0
[ 104.857508][ T5875] ret_from_fork+0x48/0x80
[ 104.861936][ T5875] ? kthread_blkcg+0xd0/0xd0
[ 104.866545][ T5875] ret_from_fork_asm+0x11/0x20
[ 104.871357][ T5875]
[ 104.874658][ T5875] Kernel Offset: disabled
[ 104.878988][ T5875] Rebooting in 86400 seconds..