[ 9.355118][ T3992] eql: remember to turn off Van-Jacobson compression on your slave devices Starting crond: [ 9.382679][ T39] gvnic 0000:00:00.0 enp0s0: Device link is up. [ 9.388360][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): enp0s0: link becomes ready OK Starting sshd: OK syzkaller Warning: Permanently added '10.128.0.45' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://44615 syzkaller login: [ 32.056210][ T4338] cgroup: Unknown subsys name 'net' [ 32.271944][ T4338] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.536295][ T4338] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 36.596303][ T4347] chnl_net:caif_netlink_parms(): no params data found [ 36.613293][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.614459][ T4347] bridge0: port 1(bridge_slave_0) entered disabled state [ 36.615819][ T4347] device bridge_slave_0 entered promiscuous mode [ 36.617965][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.619030][ T4347] bridge0: port 2(bridge_slave_1) entered disabled state [ 36.620658][ T4347] device bridge_slave_1 entered promiscuous mode [ 36.627142][ T4347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 36.629561][ T4347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 36.636232][ T4347] team0: Port device team_slave_0 added [ 36.637800][ T4347] team0: Port device team_slave_1 added [ 36.642968][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 36.644004][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.647858][ T4347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 36.650783][ T4347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 36.651776][ T4347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 36.655391][ T4347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 36.700462][ T4347] device hsr_slave_0 entered promiscuous mode [ 36.749473][ T4347] device hsr_slave_1 entered promiscuous mode [ 36.832460][ T4347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 36.890880][ T4347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 36.931056][ T4347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 36.970725][ T4347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 37.017733][ T4347] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.018931][ T4347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.020139][ T4347] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.021144][ T4347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.036041][ T4347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 37.039216][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 37.041752][ T1573] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.043625][ T1573] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.045397][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 37.051631][ T4347] 8021q: adding VLAN 0 to HW filter on device team0 [ 37.054472][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 37.056172][ T1573] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.057220][ T1573] bridge0: port 1(bridge_slave_0) entered forwarding state [ 37.060034][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 37.061412][ T1573] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.062474][ T1573] bridge0: port 2(bridge_slave_1) entered forwarding state [ 37.069141][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 37.071237][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 37.074315][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 37.076848][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 37.079642][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 37.082205][ T4347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 37.133784][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 37.134936][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 37.137875][ T4347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 37.143926][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 37.150397][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 37.152039][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 37.153339][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 37.155380][ T4347] device veth0_vlan entered promiscuous mode [ 37.159065][ T4347] device veth1_vlan entered promiscuous mode [ 37.166876][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 37.168275][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 37.170593][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.172789][ T4347] device veth0_macvtap entered promiscuous mode [ 37.174942][ T4347] device veth1_macvtap entered promiscuous mode [ 37.181982][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 37.183205][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.185064][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 37.187766][ T4347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 37.188922][ T1573] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 37.191896][ T4347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.193144][ T4347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.194353][ T4347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.195597][ T4347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 37.550850][ T39] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 37.820715][ T4380] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 37.822155][ T4380] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 37.823321][ T4380] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 37.824703][ T4380] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 37.826078][ T4380] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 37.827139][ T4380] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 37.951344][ T248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.952713][ T248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.954561][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.961360][ T248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.962539][ T248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.963944][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:00:38 executed programs: 0 [ 38.848866][ T47] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.850546][ T47] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.851785][ T47] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.853109][ T47] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.854329][ T47] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.855433][ T47] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.897563][ T4427] chnl_net:caif_netlink_parms(): no params data found [ 38.913184][ T4427] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.914312][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.915684][ T4427] device bridge_slave_0 entered promiscuous mode [ 38.918064][ T4427] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.919181][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.921055][ T4427] device bridge_slave_1 entered promiscuous mode [ 38.927841][ T4427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.930931][ T4427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.937167][ T4427] team0: Port device team_slave_0 added [ 38.938810][ T4427] team0: Port device team_slave_1 added [ 38.944661][ T4427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.945636][ T4427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.950182][ T4427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.952341][ T4427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.953412][ T4427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.956849][ T4427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.000503][ T4427] device hsr_slave_0 entered promiscuous mode [ 39.039562][ T4427] device hsr_slave_1 entered promiscuous mode [ 39.089347][ T4427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.090611][ T4427] Cannot create hsr debugfs directory [ 40.590526][ T39] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 40.889599][ T4380] Bluetooth: hci0: command 0x0409 tx timeout [ 42.969265][ T4380] Bluetooth: hci0: command 0x041b tx timeout [ 42.980497][ T39] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.071223][ T39] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.103120][ T4427] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.201111][ T4427] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.291183][ T4427] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 44.330348][ T4427] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 44.372740][ T39] device hsr_slave_0 left promiscuous mode [ 44.419467][ T39] device hsr_slave_1 left promiscuous mode [ 44.509353][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 44.510476][ T39] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 44.512164][ T39] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 44.513309][ T39] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 44.514589][ T39] device bridge_slave_1 left promiscuous mode [ 44.515823][ T39] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.550088][ T39] device bridge_slave_0 left promiscuous mode [ 44.551113][ T39] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.679511][ T39] device veth1_macvtap left promiscuous mode [ 44.680524][ T39] device veth0_macvtap left promiscuous mode [ 44.681513][ T39] device veth1_vlan left promiscuous mode [ 44.682445][ T39] device veth0_vlan left promiscuous mode [ 45.059262][ T4380] Bluetooth: hci0: command 0x040f tx timeout [ 46.880472][ T39] team0 (unregistering): Port device team_slave_1 removed [ 47.040158][ T39] team0 (unregistering): Port device team_slave_0 removed [ 47.129366][ T4380] Bluetooth: hci0: command 0x0419 tx timeout [ 47.219782][ T39] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 47.429782][ T39] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.000085][ T39] bond0 (unregistering): Released all slaves [ 49.310422][ T4427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 49.314345][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 49.315818][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.318076][ T4427] 8021q: adding VLAN 0 to HW filter on device team0 [ 49.322708][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 49.324255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.325628][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.326604][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.327873][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 49.330674][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.332122][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.333126][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.334399][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 49.336606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 49.339186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 49.342421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 49.343985][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 49.345450][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 49.347731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 49.349211][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 49.355775][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 49.357212][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.360383][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 49.361837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.364001][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 49.417638][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 49.418875][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 49.423251][ T4427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 49.429130][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.430971][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.436288][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.438025][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.439746][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.441159][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.443274][ T4427] device veth0_vlan entered promiscuous mode [ 49.446348][ T4427] device veth1_vlan entered promiscuous mode [ 49.454152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 49.455739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 49.457111][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.458505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.461373][ T4427] device veth0_macvtap entered promiscuous mode [ 49.463617][ T4427] device veth1_macvtap entered promiscuous mode [ 49.468250][ T4427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 49.470257][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 49.471737][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.473055][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.474433][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.477012][ T4427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 49.478161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.480547][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.482865][ T4427] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.484150][ T4427] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.485398][ T4427] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.486673][ T4427] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 49.510113][ T4514] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.511406][ T4514] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.513278][ T4514] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 49.521816][ T248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 49.523023][ T248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 49.524280][ T248] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 49.579840][ T4521] loop0: detected capacity change from 0 to 1024 [ 49.581481][ T4521] EXT4-fs: inline encryption not supported [ 49.582408][ T4521] EXT4-fs: Ignoring removed bh option [ 49.598492][ T4521] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 49.733808][ T4521] ================================================================== [ 49.735038][ T4521] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x83c/0x15f4 [ 49.736141][ T4521] Read of size 18446744073709551600 at addr ffff0000e90a02b8 by task syz.0.17/4521 [ 49.737397][ T4521] [ 49.737736][ T4521] CPU: 1 PID: 4521 Comm: syz.0.17 Not tainted syzkaller #0 [ 49.738725][ T4521] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/02/2026 [ 49.740078][ T4521] Call trace: [ 49.740559][ T4521] dump_backtrace+0x1c4/0x1f0 [ 49.741217][ T4521] show_stack+0x2c/0x3c [ 49.741804][ T4521] __dump_stack+0x30/0x40 [ 49.742423][ T4521] dump_stack_lvl+0xf4/0x15c [ 49.743044][ T4521] print_address_description+0x88/0x218 [ 49.743887][ T4521] print_report+0x50/0x68 [ 49.744586][ T4521] kasan_report+0xa8/0xfc [ 49.745211][ T4521] kasan_check_range+0x258/0x290 [ 49.745953][ T4521] memmove+0x48/0x90 [ 49.746566][ T4521] ext4_xattr_set_entry+0x83c/0x15f4 [ 49.747340][ T4521] ext4_xattr_ibody_set+0x208/0x604 [ 49.748064][ T4521] ext4_destroy_inline_data_nolock+0x1c8/0x4a8 [ 49.748974][ T4521] ext4_try_to_write_inline_data+0x5d4/0x11a0 [ 49.749900][ T4521] ext4_write_begin+0x234/0x12d4 [ 49.750638][ T4521] generic_perform_write+0x240/0x508 [ 49.751521][ T4521] ext4_buffered_write_iter+0x2c0/0x520 [ 49.752292][ T4521] ext4_file_write_iter+0x188/0x1500 [ 49.753087][ T4521] vfs_write+0x3c8/0x7c8 [ 49.753673][ T4521] __arm64_sys_pwrite64+0x178/0x210 [ 49.754478][ T4521] invoke_syscall+0x98/0x290 [ 49.755161][ T4521] el0_svc_common+0x13c/0x258 [ 49.755825][ T4521] do_el0_svc+0x5c/0x134 [ 49.756387][ T4521] el0_svc+0x58/0x128 [ 49.756933][ T4521] el0t_64_sync_handler+0x84/0xf0 [ 49.757624][ T4521] el0t_64_sync+0x18c/0x190 [ 49.758244][ T4521] [ 49.758558][ T4521] The buggy address belongs to the physical page: [ 49.759470][ T4521] page:000000002095fb01 refcount:3 mapcount:1 mapping:0000000028d78a6b index:0x2 pfn:0x1290a0 [ 49.760897][ T4521] memcg:ffff0000d4cfe000 [ 49.761517][ T4521] aops:def_blk_aops ino:700000 [ 49.762222][ T4521] flags: 0x5ffd6000002205e(referenced|uptodate|dirty|lru|workingset|private|mappedtodisk|node=0|zone=2|lastcpupid=0x7ff) [ 49.763933][ T4521] raw: 05ffd6000002205e fffffc0003a54488 ffff0000df058208 ffff0000c049ca18 [ 49.765132][ T4521] raw: 0000000000000002 ffff0000c0628658 0000000300000000 ffff0000d4cfe000 [ 49.766298][ T4521] page dumped because: kasan: bad access detected [ 49.767152][ T4521] [ 49.767455][ T4521] Memory state around the buggy address: [ 49.768200][ T4521] ffff0000e90a0180: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.769297][ T4521] ffff0000e90a0200: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.770397][ T4521] >ffff0000e90a0280: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.771451][ T4521] ^ [ 49.772302][ T4521] ffff0000e90a0300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.773393][ T4521] ffff0000e90a0380: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 49.774467][ T4521] ================================================================== [ 49.776318][ T4521] Disabling lock debugging due to kernel taint [ 49.788285][ T4427] EXT4-fs (loop0): unmounting filesystem.