[ 76.322781][ T7] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.232' (ED25519) to the list of known hosts. 2024/10/05 07:08:13 ignoring optional flag "sandboxArg"="0" 2024/10/05 07:08:13 ignoring optional flag "type"="gce" 2024/10/05 07:08:13 parsed 1 programs [ 82.689798][ T3980] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 84.828808][ T4026] chnl_net:caif_netlink_parms(): no params data found [ 84.890033][ T4026] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.897254][ T4026] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.906543][ T4026] device bridge_slave_0 entered promiscuous mode [ 84.915275][ T4026] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.923569][ T4026] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.932823][ T4026] device bridge_slave_1 entered promiscuous mode [ 84.959777][ T4026] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 84.972637][ T4026] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.014079][ T4026] team0: Port device team_slave_0 added [ 85.023192][ T4026] team0: Port device team_slave_1 added [ 85.046858][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.053870][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.081320][ T4026] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.093933][ T4026] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.102085][ T4026] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.129345][ T4026] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.168587][ T4026] device hsr_slave_0 entered promiscuous mode [ 85.175464][ T4026] device hsr_slave_1 entered promiscuous mode [ 85.792511][ T4026] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.802369][ T4026] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.813123][ T4026] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.823242][ T4026] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.889468][ T4026] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.905179][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 85.916056][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 85.935512][ T4026] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.949794][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 85.965032][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 85.974104][ T637] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.981228][ T637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.001835][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 86.010539][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 86.019237][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 86.037377][ T637] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.044514][ T637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.053376][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 86.062184][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 86.072058][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 86.082084][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 86.091389][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 86.126643][ T4026] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 86.138396][ T4026] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.150756][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 86.159953][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 86.170037][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 86.179916][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 86.189354][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 86.198020][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 86.241807][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 86.315493][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 86.334374][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 86.363719][ T4026] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.384947][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 86.396731][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 86.432239][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 86.443733][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 86.453868][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 86.463062][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 86.494102][ T4026] device veth0_vlan entered promiscuous mode [ 86.507208][ T4026] device veth1_vlan entered promiscuous mode [ 86.532107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 86.542451][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 86.551246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 86.559754][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 86.571816][ T4026] device veth0_macvtap entered promiscuous mode [ 86.589322][ T4026] device veth1_macvtap entered promiscuous mode [ 86.628643][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.638448][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 86.648405][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 86.659316][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.669995][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.698057][ T4026] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.707232][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.718200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.730082][ T4026] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.741112][ T4026] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.749807][ T4026] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.759288][ T4026] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.338276][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.362174][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.392792][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.407850][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.423749][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.438623][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2024/10/05 07:08:21 executed programs: 0 [ 88.097580][ T4174] chnl_net:caif_netlink_parms(): no params data found [ 88.181718][ T4174] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.188965][ T4174] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.211295][ T4174] device bridge_slave_0 entered promiscuous mode [ 88.229129][ T4174] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.246577][ T4174] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.255695][ T4174] device bridge_slave_1 entered promiscuous mode [ 88.316045][ T4174] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.332964][ T4174] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.374132][ T4174] team0: Port device team_slave_0 added [ 88.382943][ T4174] team0: Port device team_slave_1 added [ 88.416556][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.424175][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.466973][ T4174] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.485074][ T4174] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.493367][ T4174] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.520443][ T4174] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.557436][ T4174] device hsr_slave_0 entered promiscuous mode [ 88.565711][ T4174] device hsr_slave_1 entered promiscuous mode [ 88.572710][ T4174] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.580766][ T4174] Cannot create hsr debugfs directory [ 88.692767][ T4174] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.920448][ T1078] Bluetooth: hci0: command 0x0409 tx timeout [ 91.306262][ T4174] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.355351][ T4174] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.405862][ T4174] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.478617][ T4174] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.487851][ T4174] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.496658][ T4174] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.516171][ T4174] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.571751][ T4174] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.584128][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.592208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.602855][ T4174] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.623741][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.632545][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.641529][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.648636][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.657578][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.667256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.675938][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 91.685968][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.693156][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.708215][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 91.719061][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 91.731986][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 91.742669][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 91.752016][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 91.771394][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 91.780823][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 91.791965][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 91.800569][ T637] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 91.812855][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 91.821813][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 91.833005][ T4174] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 91.913434][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 91.922119][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 91.946185][ T4174] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.963579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 91.972879][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 91.998205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 92.000667][ T3666] Bluetooth: hci0: command 0x041b tx timeout [ 92.008381][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 92.021281][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 92.029046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 92.037800][ T4174] device veth0_vlan entered promiscuous mode [ 92.057984][ T4174] device veth1_vlan entered promiscuous mode [ 92.075092][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 92.083476][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 92.092633][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 92.101733][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 92.116404][ T4174] device veth0_macvtap entered promiscuous mode [ 92.127827][ T4174] device veth1_macvtap entered promiscuous mode [ 92.149440][ T4174] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.160341][ T4174] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.173473][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.182425][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 92.191386][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 92.199194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 92.207791][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 92.230383][ T3602] device hsr_slave_0 left promiscuous mode [ 92.236597][ T3602] device hsr_slave_1 left promiscuous mode [ 92.243714][ T3602] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.251220][ T3602] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.258738][ T3602] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.266627][ T3602] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.274331][ T3602] device bridge_slave_1 left promiscuous mode [ 92.280788][ T3602] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.288876][ T3602] device bridge_slave_0 left promiscuous mode [ 92.295624][ T3602] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.306010][ T3602] device veth1_macvtap left promiscuous mode [ 92.312352][ T3602] device veth0_macvtap left promiscuous mode [ 92.318368][ T3602] device veth1_vlan left promiscuous mode [ 92.324335][ T3602] device veth0_vlan left promiscuous mode [ 92.445091][ T3602] team0 (unregistering): Port device team_slave_1 removed [ 92.456475][ T3602] team0 (unregistering): Port device team_slave_0 removed [ 92.468059][ T3602] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.480309][ T3602] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 92.527057][ T3602] bond0 (unregistering): Released all slaves [ 92.585564][ T4174] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.600085][ T4174] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.609063][ T4174] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.619343][ T4174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.628350][ T4174] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.638569][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 92.647479][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 92.703201][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.717580][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.730902][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.731083][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.742675][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2024/10/05 07:08:26 executed programs: 2 [ 92.770080][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.032301][ T4414] loop0: detected capacity change from 0 to 32768 [ 93.081271][ T4414] ======================================================= [ 93.081271][ T4414] WARNING: The mand mount option has been deprecated and [ 93.081271][ T4414] and is ignored by this kernel. Remove the mand [ 93.081271][ T4414] option from the mount to silence this warning. [ 93.081271][ T4414] ======================================================= [ 93.117894][ T4414] XFS: noattr2 mount option is deprecated. [ 93.126381][ T4414] xfs: Unknown parameter 'mtpt' [ 93.339349][ T4414] loop0: detected capacity change from 0 to 2048 [ 93.461074][ T4414] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 93.468907][ T4414] UDF-fs: Scanning with blocksize 512 failed [ 93.484454][ T4414] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 93.636381][ T4174] UDF-fs: error (device loop0): udf_read_inode: (ino 817) failed !bh [ 93.647629][ T4174] UDF-fs: error (device loop0): udf_read_inode: (ino 817) failed !bh [ 97.405573][ T4174] ================================================================== [ 97.413795][ T4174] BUG: KASAN: use-after-free in crc_itu_t+0x218/0x2a0 [ 97.420559][ T4174] Read of size 1 at addr ffff88805f306000 by task syz-executor/4174 [ 97.428513][ T4174] [ 97.430821][ T4174] CPU: 1 PID: 4174 Comm: syz-executor Not tainted 5.15.167-syzkaller #0 [ 97.439138][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 97.449193][ T4174] Call Trace: [ 97.452468][ T4174] [ 97.455386][ T4174] dump_stack_lvl+0x1e3/0x2d0 [ 97.460056][ T4174] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 97.465682][ T4174] ? _printk+0xd1/0x120 [ 97.469831][ T4174] ? __wake_up_klogd+0xcc/0x100 [ 97.474669][ T4174] ? panic+0x860/0x860 [ 97.478745][ T4174] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 97.484193][ T4174] print_address_description+0x63/0x3b0 [ 97.489722][ T4174] ? crc_itu_t+0x218/0x2a0 [ 97.494120][ T4174] kasan_report+0x16b/0x1c0 [ 97.498606][ T4174] ? crc_itu_t+0x218/0x2a0 [ 97.503005][ T4174] ? pvclock_gtod_unregister_notifier+0x50/0x50 [ 97.509230][ T4174] crc_itu_t+0x218/0x2a0 [ 97.513467][ T4174] udf_sync_fs+0x1ce/0x380 [ 97.518043][ T4174] ? udf_put_super+0x160/0x160 [ 97.522794][ T4174] ? get_nr_dirty_inodes+0x25f/0x2e0 [ 97.528079][ T4174] sync_filesystem+0xe8/0x220 [ 97.532743][ T4174] generic_shutdown_super+0x6e/0x2c0 [ 97.538043][ T4174] kill_block_super+0x7a/0xe0 [ 97.542711][ T4174] deactivate_locked_super+0xa0/0x110 [ 97.548072][ T4174] cleanup_mnt+0x44e/0x500 [ 97.552470][ T4174] ? lockdep_hardirqs_on+0x94/0x130 [ 97.557651][ T4174] task_work_run+0x129/0x1a0 [ 97.562259][ T4174] do_exit+0x6a3/0x2480 [ 97.566405][ T4174] ? put_task_struct+0x80/0x80 [ 97.571152][ T4174] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 97.577117][ T4174] ? vtime_user_exit+0x2d1/0x400 [ 97.582040][ T4174] do_group_exit+0x144/0x310 [ 97.586619][ T4174] __x64_sys_exit_group+0x3b/0x40 [ 97.591623][ T4174] do_syscall_64+0x3b/0xb0 [ 97.596020][ T4174] ? clear_bhb_loop+0x15/0x70 [ 97.600680][ T4174] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.606555][ T4174] RIP: 0033:0x7f9eb063eeb9 [ 97.610954][ T4174] Code: Unable to access opcode bytes at RIP 0x7f9eb063ee8f. [ 97.618643][ T4174] RSP: 002b:00007ffe3884aae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 97.627036][ T4174] RAX: ffffffffffffffda RBX: 00007f9eb06ac801 RCX: 00007f9eb063eeb9 [ 97.634994][ T4174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 97.642943][ T4174] RBP: 0000000000000005 R08: 00007ffe38848887 R09: 00007ffe3884bda0 [ 97.650894][ T4174] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe3884bda0 [ 97.658843][ T4174] R13: 00007f9eb06ac7dc R14: 0000000000016a67 R15: 00007ffe3884ce60 [ 97.666807][ T4174] [ 97.669804][ T4174] [ 97.672113][ T4174] The buggy address belongs to the page: [ 97.677728][ T4174] page:ffffea00017cc180 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x5f306 [ 97.687868][ T4174] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 97.694965][ T4174] raw: 00fff00000000000 ffffea0001a7b008 ffffea00019f5108 0000000000000000 [ 97.703526][ T4174] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 97.712086][ T4174] page dumped because: kasan: bad access detected [ 97.718566][ T4174] page_owner tracks the page as freed [ 97.723916][ T4174] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 4414, ts 92903104063, free_ts 93229452798 [ 97.738472][ T4174] get_page_from_freelist+0x322a/0x33c0 [ 97.744006][ T4174] __alloc_pages+0x272/0x700 [ 97.748576][ T4174] alloc_pages_vma+0x39a/0x800 [ 97.753323][ T4174] shmem_alloc_and_acct_page+0x4d1/0xd10 [ 97.758936][ T4174] shmem_getpage_gfp+0x17b1/0x3190 [ 97.764216][ T4174] shmem_write_begin+0xce/0x1a0 [ 97.769044][ T4174] generic_perform_write+0x2bf/0x5b0 [ 97.774306][ T4174] __generic_file_write_iter+0x243/0x4f0 [ 97.779918][ T4174] generic_file_write_iter+0xa7/0x1b0 [ 97.785272][ T4174] vfs_write+0xacd/0xe50 [ 97.789497][ T4174] ksys_write+0x1a2/0x2c0 [ 97.793805][ T4174] do_syscall_64+0x3b/0xb0 [ 97.798202][ T4174] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 97.804076][ T4174] page last free stack trace: [ 97.808731][ T4174] free_unref_page_prepare+0xc34/0xcf0 [ 97.814190][ T4174] free_unref_page_list+0x1f7/0x8e0 [ 97.819368][ T4174] release_pages+0x1bb9/0x1f40 [ 97.824115][ T4174] __pagevec_release+0x80/0xf0 [ 97.828858][ T4174] shmem_undo_range+0x67a/0x1b50 [ 97.833775][ T4174] shmem_evict_inode+0x21b/0xa00 [ 97.838701][ T4174] evict+0x529/0x930 [ 97.842596][ T4174] __dentry_kill+0x436/0x650 [ 97.847167][ T4174] dentry_kill+0xbb/0x290 [ 97.851476][ T4174] dput+0xd8/0x1a0 [ 97.855182][ T4174] __fput+0x636/0x8e0 [ 97.859158][ T4174] task_work_run+0x129/0x1a0 [ 97.863746][ T4174] exit_to_user_mode_loop+0x106/0x130 [ 97.869109][ T4174] exit_to_user_mode_prepare+0xb1/0x140 [ 97.874640][ T4174] syscall_exit_to_user_mode+0x5d/0x240 [ 97.880172][ T4174] do_syscall_64+0x47/0xb0 [ 97.884572][ T4174] [ 97.886900][ T4174] Memory state around the buggy address: [ 97.892516][ T4174] ffff88805f305f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 97.900552][ T4174] ffff88805f305f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 97.908594][ T4174] >ffff88805f306000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 97.916628][ T4174] ^ [ 97.920681][ T4174] ffff88805f306080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 97.928737][ T4174] ffff88805f306100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 97.936896][ T4174] ================================================================== [ 97.944936][ T4174] Disabling lock debugging due to kernel taint [ 97.955824][ T4174] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 97.963032][ T4174] CPU: 0 PID: 4174 Comm: syz-executor Tainted: G B 5.15.167-syzkaller #0 [ 97.972742][ T4174] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 97.982775][ T4174] Call Trace: [ 97.986038][ T4174] [ 97.988968][ T4174] dump_stack_lvl+0x1e3/0x2d0 [ 97.993629][ T4174] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 97.999238][ T4174] ? panic+0x860/0x860 [ 98.003285][ T4174] ? preempt_schedule_common+0xa6/0xd0 [ 98.008722][ T4174] ? preempt_schedule+0xd9/0xe0 [ 98.013550][ T4174] panic+0x318/0x860 [ 98.017427][ T4174] ? check_panic_on_warn+0x1d/0xa0 [ 98.022517][ T4174] ? fb_is_primary_device+0xd0/0xd0 [ 98.027779][ T4174] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 98.033751][ T4174] ? _raw_spin_unlock+0x40/0x40 [ 98.038581][ T4174] ? print_memory_metadata+0xe2/0x140 [ 98.043934][ T4174] check_panic_on_warn+0x7e/0xa0 [ 98.048858][ T4174] ? crc_itu_t+0x218/0x2a0 [ 98.053267][ T4174] end_report+0x6d/0xf0 [ 98.057424][ T4174] kasan_report+0x18e/0x1c0 [ 98.061924][ T4174] ? crc_itu_t+0x218/0x2a0 [ 98.066341][ T4174] ? pvclock_gtod_unregister_notifier+0x50/0x50 [ 98.072585][ T4174] crc_itu_t+0x218/0x2a0 [ 98.076833][ T4174] udf_sync_fs+0x1ce/0x380 [ 98.081233][ T4174] ? udf_put_super+0x160/0x160 [ 98.086329][ T4174] ? get_nr_dirty_inodes+0x25f/0x2e0 [ 98.091594][ T4174] sync_filesystem+0xe8/0x220 [ 98.096250][ T4174] generic_shutdown_super+0x6e/0x2c0 [ 98.101522][ T4174] kill_block_super+0x7a/0xe0 [ 98.106178][ T4174] deactivate_locked_super+0xa0/0x110 [ 98.111532][ T4174] cleanup_mnt+0x44e/0x500 [ 98.115927][ T4174] ? lockdep_hardirqs_on+0x94/0x130 [ 98.121104][ T4174] task_work_run+0x129/0x1a0 [ 98.125676][ T4174] do_exit+0x6a3/0x2480 [ 98.130292][ T4174] ? put_task_struct+0x80/0x80 [ 98.135038][ T4174] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 98.140996][ T4174] ? vtime_user_exit+0x2d1/0x400 [ 98.145919][ T4174] do_group_exit+0x144/0x310 [ 98.150489][ T4174] __x64_sys_exit_group+0x3b/0x40 [ 98.155501][ T4174] do_syscall_64+0x3b/0xb0 [ 98.159897][ T4174] ? clear_bhb_loop+0x15/0x70 [ 98.164558][ T4174] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 98.170431][ T4174] RIP: 0033:0x7f9eb063eeb9 [ 98.174831][ T4174] Code: Unable to access opcode bytes at RIP 0x7f9eb063ee8f. [ 98.182175][ T4174] RSP: 002b:00007ffe3884aae8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 98.190581][ T4174] RAX: ffffffffffffffda RBX: 00007f9eb06ac801 RCX: 00007f9eb063eeb9 [ 98.198546][ T4174] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000001 [ 98.206580][ T4174] RBP: 0000000000000005 R08: 00007ffe38848887 R09: 00007ffe3884bda0 [ 98.214528][ T4174] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffe3884bda0 [ 98.222482][ T4174] R13: 00007f9eb06ac7dc R14: 0000000000016a67 R15: 00007ffe3884ce60 [ 98.230437][ T4174] [ 98.233511][ T4174] Kernel Offset: disabled [ 98.238086][ T4174] Rebooting in 86400 seconds..