Warning: Permanently added '10.128.1.161' (ED25519) to the list of known hosts. 2026/01/05 01:14:58 parsed 1 programs [ 71.063789][ T4186] cgroup: Unknown subsys name 'net' [ 71.201062][ T4186] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.487020][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.493602][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.725982][ T4186] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 75.044234][ T4221] chnl_net:caif_netlink_parms(): no params data found [ 75.111352][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.119247][ T4221] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.128023][ T4221] device bridge_slave_0 entered promiscuous mode [ 75.138437][ T4221] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.146015][ T4221] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.154664][ T4221] device bridge_slave_1 entered promiscuous mode [ 75.184714][ T4221] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.196971][ T4221] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.232171][ T4221] team0: Port device team_slave_0 added [ 75.240316][ T4221] team0: Port device team_slave_1 added [ 75.266960][ T4221] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.275664][ T4221] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.302437][ T4221] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.316725][ T4221] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.323714][ T4221] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.350386][ T4221] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.391812][ T4221] device hsr_slave_0 entered promiscuous mode [ 75.398823][ T4221] device hsr_slave_1 entered promiscuous mode [ 75.537204][ T4221] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 75.550385][ T4221] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 75.562444][ T4221] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 75.573859][ T4221] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 75.607987][ T4221] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.615306][ T4221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.623430][ T4221] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.630603][ T4221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.691940][ T4221] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.708147][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.721597][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.731428][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.740089][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 75.754789][ T4221] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.767814][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 75.777789][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.785042][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.804663][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 75.814785][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.821891][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.844857][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 75.855250][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 75.864763][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 75.879768][ T4221] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 75.891901][ T4221] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 75.901904][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 75.911212][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 76.031983][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 76.040294][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 76.056290][ T4221] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.080070][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 76.090756][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 76.124572][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 76.133832][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 76.146391][ T4221] device veth0_vlan entered promiscuous mode [ 76.156427][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 76.164961][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 76.190683][ T4221] device veth1_vlan entered promiscuous mode [ 76.213410][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 76.223261][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 76.232389][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 76.242730][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 76.254352][ T4221] device veth0_macvtap entered promiscuous mode [ 76.264659][ T4221] device veth1_macvtap entered promiscuous mode [ 76.284792][ T4221] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 76.292520][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 76.301354][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 76.310487][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 76.319866][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 76.332942][ T4221] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 76.343144][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 76.352246][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 76.365594][ T4221] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.375324][ T4221] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.384475][ T4221] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.393210][ T4221] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 76.586836][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.231770][ T155] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.244028][ T155] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.253426][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.278582][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.287030][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.297220][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2026/01/05 01:15:08 executed programs: 0 [ 78.332180][ T4283] chnl_net:caif_netlink_parms(): no params data found [ 78.380009][ T4283] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.387175][ T4283] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.395905][ T4283] device bridge_slave_0 entered promiscuous mode [ 78.404176][ T4283] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.411510][ T4283] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.420550][ T4283] device bridge_slave_1 entered promiscuous mode [ 78.445048][ T4283] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.457991][ T4283] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.483298][ T4283] team0: Port device team_slave_0 added [ 78.491485][ T4283] team0: Port device team_slave_1 added [ 78.511233][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.518455][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.545789][ T4283] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.558143][ T4283] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.565290][ T4283] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.591565][ T4283] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.623277][ T4283] device hsr_slave_0 entered promiscuous mode [ 78.631029][ T4283] device hsr_slave_1 entered promiscuous mode [ 78.637959][ T4283] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.645915][ T4283] Cannot create hsr debugfs directory [ 79.401712][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.284726][ T4260] Bluetooth: hci0: command 0x0409 tx timeout [ 81.759330][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.876801][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.368935][ T4234] Bluetooth: hci0: command 0x041b tx timeout [ 82.819690][ T4283] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.832712][ T4283] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.842593][ T4283] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.852610][ T4283] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.942986][ T4283] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.957160][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.966954][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.983492][ T4283] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.995209][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.004246][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.012749][ T411] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.019904][ T411] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.030397][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.041260][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.051392][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.060252][ T411] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.067379][ T411] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.092439][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 83.108031][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 83.116945][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 83.128025][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 83.136953][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 83.165625][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 83.174576][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 83.186190][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 83.195110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 83.206757][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 83.216095][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 83.228860][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 83.346646][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 83.354801][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 83.369441][ T4283] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.406906][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 83.416240][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.432574][ T9] device hsr_slave_0 left promiscuous mode [ 83.439890][ T9] device hsr_slave_1 left promiscuous mode [ 83.446828][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 83.454825][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 83.463019][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.470876][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.480202][ T9] device bridge_slave_1 left promiscuous mode [ 83.487701][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.502436][ T9] device bridge_slave_0 left promiscuous mode [ 83.510123][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.529449][ T9] device veth1_macvtap left promiscuous mode [ 83.535989][ T9] device veth0_macvtap left promiscuous mode [ 83.542416][ T9] device veth1_vlan left promiscuous mode [ 83.549118][ T9] device veth0_vlan left promiscuous mode [ 83.709399][ T9] team0 (unregistering): Port device team_slave_1 removed [ 83.723033][ T9] team0 (unregistering): Port device team_slave_0 removed [ 83.738705][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 83.753709][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 83.815256][ T9] bond0 (unregistering): Released all slaves [ 83.890357][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.898919][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.909319][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.918069][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.929876][ T4283] device veth0_vlan entered promiscuous mode [ 83.944801][ T4283] device veth1_vlan entered promiscuous mode [ 83.971549][ T4283] device veth0_macvtap entered promiscuous mode [ 83.980293][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.989090][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.997713][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.007896][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.016712][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.027475][ T4283] device veth1_macvtap entered promiscuous mode [ 84.047358][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.059117][ T4283] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.070860][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.080162][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.089513][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.100881][ T411] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.112204][ T4283] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.121211][ T4283] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.130081][ T4283] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.139102][ T4283] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.212978][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.221778][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.234000][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.257553][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.266324][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.277953][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.339513][ T4342] loop0: detected capacity change from 0 to 2048 [ 84.387141][ T4342] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=27485, location=27485 [ 84.415848][ T4342] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 84.444399][ T4260] Bluetooth: hci0: command 0x040f tx timeout [ 84.741235][ T4283] ================================================================== [ 84.749546][ T4283] BUG: KASAN: use-after-free in udf_close_lvid+0x674/0x990 [ 84.756819][ T4283] Write of size 1 at addr ffff8881699beff8 by task syz-executor/4283 [ 84.764921][ T4283] [ 84.767296][ T4283] CPU: 1 PID: 4283 Comm: syz-executor Not tainted syzkaller #0 [ 84.774871][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 84.784976][ T4283] Call Trace: [ 84.788301][ T4283] [ 84.791265][ T4283] dump_stack_lvl+0x168/0x230 [ 84.795991][ T4283] ? show_regs_print_info+0x20/0x20 [ 84.801230][ T4283] ? load_image+0x3b0/0x3b0 [ 84.805818][ T4283] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 84.811255][ T4283] ? mutex_lock_io_nested+0x60/0x60 [ 84.816628][ T4283] print_address_description+0x60/0x2d0 [ 84.822215][ T4283] ? udf_close_lvid+0x674/0x990 [ 84.827099][ T4283] kasan_report+0xdf/0x130 [ 84.831557][ T4283] ? udf_close_lvid+0x674/0x990 [ 84.836450][ T4283] udf_close_lvid+0x674/0x990 [ 84.841180][ T4283] ? udf_open_lvid+0x5a0/0x5a0 [ 84.846098][ T4283] ? iput+0x333/0x8a0 [ 84.850123][ T4283] ? clear_inode+0x150/0x150 [ 84.854753][ T4283] udf_put_super+0xc8/0x160 [ 84.859335][ T4283] ? udf_free_in_core_inode+0x20/0x20 [ 84.864843][ T4283] generic_shutdown_super+0x130/0x300 [ 84.870261][ T4283] kill_block_super+0x7c/0xe0 [ 84.874977][ T4283] deactivate_locked_super+0x93/0xf0 [ 84.880333][ T4283] cleanup_mnt+0x418/0x4d0 [ 84.884782][ T4283] ? lockdep_hardirqs_on+0x94/0x140 [ 84.890021][ T4283] task_work_run+0x125/0x1a0 [ 84.894841][ T4283] exit_to_user_mode_loop+0x10f/0x130 [ 84.900265][ T4283] exit_to_user_mode_prepare+0xee/0x180 [ 84.905852][ T4283] syscall_exit_to_user_mode+0x16/0x40 [ 84.911358][ T4283] do_syscall_64+0x58/0xa0 [ 84.916115][ T4283] ? clear_bhb_loop+0x30/0x80 [ 84.920856][ T4283] ? clear_bhb_loop+0x30/0x80 [ 84.925865][ T4283] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.931827][ T4283] RIP: 0033:0x7f692677ba77 [ 84.936385][ T4283] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 84.956305][ T4283] RSP: 002b:00007ffe9573b488 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 84.964857][ T4283] RAX: 0000000000000000 RBX: 00007f69267fed7d RCX: 00007f692677ba77 [ 84.972873][ T4283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9573b540 [ 84.980886][ T4283] RBP: 00007ffe9573b540 R08: 0000000000000000 R09: 0000000000000000 [ 84.989101][ T4283] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe9573c5d0 [ 84.997113][ T4283] R13: 00007f69267fed7d R14: 0000000000014a48 R15: 00007ffe9573c610 [ 85.005401][ T4283] [ 85.008454][ T4283] [ 85.010807][ T4283] The buggy address belongs to the page: [ 85.016475][ T4283] page:ffffea0005a66f80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1699be [ 85.027165][ T4283] flags: 0x57ff00000000000(node=1|zone=2|lastcpupid=0x7ff) [ 85.034439][ T4283] raw: 057ff00000000000 ffffea0005a66f88 ffffea0005a66f88 0000000000000000 [ 85.043335][ T4283] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 85.052040][ T4283] page dumped because: kasan: bad access detected [ 85.058611][ T4283] page_owner info is not present (never set?) [ 85.064802][ T4283] [ 85.067154][ T4283] Memory state around the buggy address: [ 85.072809][ T4283] ffff8881699bee80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 85.081180][ T4283] ffff8881699bef00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 85.089370][ T4283] >ffff8881699bef80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 85.097586][ T4283] ^ [ 85.105600][ T4283] ffff8881699bf000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 85.113858][ T4283] ffff8881699bf080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 85.122082][ T4283] ================================================================== [ 85.130292][ T4283] Disabling lock debugging due to kernel taint [ 85.150729][ T4283] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 85.158179][ T4283] CPU: 1 PID: 4283 Comm: syz-executor Tainted: G B syzkaller #0 [ 85.167146][ T4283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 85.177349][ T4283] Call Trace: [ 85.180664][ T4283] [ 85.183628][ T4283] dump_stack_lvl+0x168/0x230 [ 85.188340][ T4283] ? show_regs_print_info+0x20/0x20 [ 85.193660][ T4283] ? load_image+0x3b0/0x3b0 [ 85.198201][ T4283] panic+0x2c9/0x7f0 [ 85.202133][ T4283] ? bpf_jit_dump+0xd0/0xd0 [ 85.206688][ T4283] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 85.212615][ T4283] ? _raw_spin_unlock+0x40/0x40 [ 85.217496][ T4283] ? udf_close_lvid+0x674/0x990 [ 85.222385][ T4283] check_panic_on_warn+0x80/0xa0 [ 85.227359][ T4283] ? udf_close_lvid+0x674/0x990 [ 85.232249][ T4283] end_report+0x6d/0xf0 [ 85.236433][ T4283] kasan_report+0x102/0x130 [ 85.241059][ T4283] ? udf_close_lvid+0x674/0x990 [ 85.245945][ T4283] udf_close_lvid+0x674/0x990 [ 85.250662][ T4283] ? udf_open_lvid+0x5a0/0x5a0 [ 85.255461][ T4283] ? iput+0x333/0x8a0 [ 85.259562][ T4283] ? clear_inode+0x150/0x150 [ 85.264195][ T4283] udf_put_super+0xc8/0x160 [ 85.268752][ T4283] ? udf_free_in_core_inode+0x20/0x20 [ 85.274153][ T4283] generic_shutdown_super+0x130/0x300 [ 85.279557][ T4283] kill_block_super+0x7c/0xe0 [ 85.284268][ T4283] deactivate_locked_super+0x93/0xf0 [ 85.289586][ T4283] cleanup_mnt+0x418/0x4d0 [ 85.294030][ T4283] ? lockdep_hardirqs_on+0x94/0x140 [ 85.299264][ T4283] task_work_run+0x125/0x1a0 [ 85.303933][ T4283] exit_to_user_mode_loop+0x10f/0x130 [ 85.309335][ T4283] exit_to_user_mode_prepare+0xee/0x180 [ 85.314915][ T4283] syscall_exit_to_user_mode+0x16/0x40 [ 85.320406][ T4283] do_syscall_64+0x58/0xa0 [ 85.324854][ T4283] ? clear_bhb_loop+0x30/0x80 [ 85.329559][ T4283] ? clear_bhb_loop+0x30/0x80 [ 85.334268][ T4283] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 85.340200][ T4283] RIP: 0033:0x7f692677ba77 [ 85.344642][ T4283] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 85.364273][ T4283] RSP: 002b:00007ffe9573b488 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 85.372726][ T4283] RAX: 0000000000000000 RBX: 00007f69267fed7d RCX: 00007f692677ba77 [ 85.380725][ T4283] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffe9573b540 [ 85.388725][ T4283] RBP: 00007ffe9573b540 R08: 0000000000000000 R09: 0000000000000000 [ 85.396737][ T4283] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffe9573c5d0 [ 85.404742][ T4283] R13: 00007f69267fed7d R14: 0000000000014a48 R15: 00007ffe9573c610 [ 85.412852][ T4283] [ 85.416112][ T4283] Kernel Offset: disabled [ 85.420465][ T4283] Rebooting in 86400 seconds..