Warning: Permanently added '10.128.1.16' (ED25519) to the list of known hosts. 2025/12/22 08:15:30 parsed 1 programs [ 89.430922][ T5777] cgroup: Unknown subsys name 'net' [ 89.544636][ T5777] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 91.219355][ T5777] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.125757][ T27] cfg80211: failed to load regulatory.db [ 94.051289][ T5804] chnl_net:caif_netlink_parms(): no params data found [ 94.140377][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.149060][ T5804] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.156627][ T5804] bridge_slave_0: entered allmulticast mode [ 94.163657][ T5804] bridge_slave_0: entered promiscuous mode [ 94.177157][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.184542][ T5804] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.191736][ T5804] bridge_slave_1: entered allmulticast mode [ 94.199033][ T5804] bridge_slave_1: entered promiscuous mode [ 94.235904][ T5804] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.248376][ T5804] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 94.289122][ T5804] team0: Port device team_slave_0 added [ 94.297439][ T5804] team0: Port device team_slave_1 added [ 94.333178][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 94.340212][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.366364][ T5804] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 94.379528][ T5804] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 94.386581][ T5804] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 94.412730][ T5804] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 94.458233][ T5804] hsr_slave_0: entered promiscuous mode [ 94.465107][ T5804] hsr_slave_1: entered promiscuous mode [ 94.631694][ T5804] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.644954][ T5804] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.656459][ T5804] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.667149][ T5804] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.717416][ T5804] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.724825][ T5804] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.732794][ T5804] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.740138][ T5804] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.811418][ T5804] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.837126][ T3488] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.845814][ T3488] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.863706][ T5804] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.882689][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.889910][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.903276][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.910479][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.133781][ T5804] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.179904][ T5804] veth0_vlan: entered promiscuous mode [ 95.199603][ T5804] veth1_vlan: entered promiscuous mode [ 95.242280][ T5804] veth0_macvtap: entered promiscuous mode [ 95.252960][ T5804] veth1_macvtap: entered promiscuous mode [ 95.273540][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.289964][ T5804] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.301976][ T5804] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.311765][ T5804] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.320672][ T5804] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.329752][ T5804] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.487540][ T5804] syz-executor (5804) used greatest stack depth: 19856 bytes left [ 95.516570][ T1089] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.680387][ T5830] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.690026][ T5830] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.700997][ T5830] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.709755][ T5830] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.718181][ T5830] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.726563][ T5830] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.278010][ T3459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.298244][ T3459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.343067][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.355075][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.942922][ T1089] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2025/12/22 08:15:41 executed programs: 0 [ 98.348822][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.357438][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.368410][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.377400][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.385701][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.393156][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.564883][ T5883] chnl_net:caif_netlink_parms(): no params data found [ 98.638199][ T5883] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.645627][ T5883] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.652918][ T5883] bridge_slave_0: entered allmulticast mode [ 98.660708][ T5883] bridge_slave_0: entered promiscuous mode [ 98.669259][ T5883] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.676818][ T5883] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.684183][ T5883] bridge_slave_1: entered allmulticast mode [ 98.691331][ T5883] bridge_slave_1: entered promiscuous mode [ 98.724007][ T5883] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.737281][ T5883] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.776920][ T5883] team0: Port device team_slave_0 added [ 98.785907][ T5883] team0: Port device team_slave_1 added [ 98.816061][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 98.823058][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.849928][ T5883] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 98.862514][ T5883] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 98.870820][ T5883] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 98.897126][ T5883] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 98.944367][ T5883] hsr_slave_0: entered promiscuous mode [ 98.951104][ T5883] hsr_slave_1: entered promiscuous mode [ 98.958044][ T5883] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 98.966157][ T5883] Cannot create hsr debugfs directory [ 100.417090][ T1089] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.435707][ T5084] Bluetooth: hci0: command tx timeout [ 100.480250][ T1089] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.443550][ T5883] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.456078][ T5883] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.472557][ T5883] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.494483][ T1089] hsr_slave_0: left promiscuous mode [ 101.501407][ T1089] hsr_slave_1: left promiscuous mode [ 101.511101][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.519150][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.530401][ T1089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.539173][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.551716][ T1089] bridge_slave_1: left allmulticast mode [ 101.557848][ T1089] bridge_slave_1: left promiscuous mode [ 101.564535][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.580981][ T1089] bridge_slave_0: left allmulticast mode [ 101.586791][ T1089] bridge_slave_0: left promiscuous mode [ 101.592592][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.630495][ T1089] veth1_macvtap: left promiscuous mode [ 101.638912][ T1089] veth0_macvtap: left promiscuous mode [ 101.645078][ T1089] veth1_vlan: left promiscuous mode [ 101.650724][ T1089] veth0_vlan: left promiscuous mode [ 102.079007][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 102.121514][ T1089] team0 (unregistering): Port device team_slave_0 removed [ 102.158183][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.197152][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.514506][ T5084] Bluetooth: hci0: command tx timeout [ 102.535080][ T1089] bond0 (unregistering): Released all slaves [ 102.628783][ T5883] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.729063][ T5883] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.760291][ T5883] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.776520][ T3459] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.783744][ T3459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.797949][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.805190][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.070748][ T5883] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.148733][ T5883] veth0_vlan: entered promiscuous mode [ 103.180512][ T5883] veth1_vlan: entered promiscuous mode [ 103.233515][ T5883] veth0_macvtap: entered promiscuous mode [ 103.247808][ T5883] veth1_macvtap: entered promiscuous mode [ 103.288144][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.303199][ T5883] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.329398][ T5883] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.338754][ T5883] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.348857][ T5883] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.357835][ T5883] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.470629][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.479036][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/22 08:15:46 executed programs: 2 [ 103.512800][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.521692][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.583948][ T5930] syz.0.17[5930]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 103.613891][ T5930] loop0: detected capacity change from 0 to 2048 [ 103.636928][ T5930] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.930893][ T5883] ================================================================== [ 103.939026][ T5883] BUG: KASAN: use-after-free in udf_unlink+0x5e3/0x6d0 [ 103.945972][ T5883] Read of size 4 at addr ffff8880b11ee7d0 by task syz-executor/5883 [ 103.953997][ T5883] [ 103.956382][ T5883] CPU: 0 PID: 5883 Comm: syz-executor Not tainted syzkaller #0 [ 103.963966][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 103.974087][ T5883] Call Trace: [ 103.977409][ T5883] [ 103.980394][ T5883] dump_stack_lvl+0x16c/0x230 [ 103.985128][ T5883] ? __lock_acquire+0x7c80/0x7c80 [ 103.990206][ T5883] ? show_regs_print_info+0x20/0x20 [ 103.995460][ T5883] ? load_image+0x3b0/0x3b0 [ 104.000032][ T5883] ? __virt_addr_valid+0x469/0x540 [ 104.005196][ T5883] print_report+0xac/0x220 [ 104.009667][ T5883] ? udf_unlink+0x5e3/0x6d0 [ 104.014217][ T5883] kasan_report+0x117/0x150 [ 104.018769][ T5883] ? udf_unlink+0x5e3/0x6d0 [ 104.023328][ T5883] udf_unlink+0x5e3/0x6d0 [ 104.027711][ T5883] ? udf_link+0x4e0/0x4e0 [ 104.032098][ T5883] ? down_write+0x162/0x1f0 [ 104.036647][ T5883] ? down_read_killable+0x340/0x340 [ 104.041884][ T5883] ? bpf_lsm_inode_unlink+0x9/0x10 [ 104.047024][ T5883] ? security_inode_unlink+0xcf/0x110 [ 104.052420][ T5883] vfs_unlink+0x389/0x600 [ 104.056785][ T5883] do_unlinkat+0x328/0x570 [ 104.061236][ T5883] ? fsnotify_link_count+0xf0/0xf0 [ 104.066373][ T5883] ? getname_flags+0x20a/0x500 [ 104.071165][ T5883] __x64_sys_unlink+0x49/0x50 [ 104.075861][ T5883] do_syscall_64+0x55/0xb0 [ 104.080294][ T5883] ? clear_bhb_loop+0x40/0x90 [ 104.085003][ T5883] ? clear_bhb_loop+0x40/0x90 [ 104.089714][ T5883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.095629][ T5883] RIP: 0033:0x7f5640b8ecf7 [ 104.100072][ T5883] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.119695][ T5883] RSP: 002b:00007ffdb9c1b858 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 104.128139][ T5883] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5640b8ecf7 [ 104.136134][ T5883] RDX: 00007ffdb9c1b880 RSI: 00007ffdb9c1b910 RDI: 00007ffdb9c1b910 [ 104.144130][ T5883] RBP: 00007ffdb9c1b910 R08: 0000000000000000 R09: 0000000000000000 [ 104.152120][ T5883] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffdb9c1ca00 [ 104.160117][ T5883] R13: 00007f5640c13d7d R14: 00000000000195c2 R15: 00007ffdb9c1ebc0 [ 104.168209][ T5883] [ 104.171246][ T5883] [ 104.173584][ T5883] The buggy address belongs to the physical page: [ 104.180045][ T5883] page:ffffea0002c47b80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0xb11ee [ 104.190218][ T5883] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 104.197384][ T5883] page_type: 0xffffffff() [ 104.201736][ T5883] raw: 00fff00000000000 ffffea0002c47b88 ffffea0002c47b88 0000000000000000 [ 104.210336][ T5883] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 104.218937][ T5883] page dumped because: kasan: bad access detected [ 104.225370][ T5883] page_owner info is not present (never set?) [ 104.231442][ T5883] [ 104.233784][ T5883] Memory state around the buggy address: [ 104.239428][ T5883] ffff8880b11ee680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 104.247506][ T5883] ffff8880b11ee700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 104.255606][ T5883] >ffff8880b11ee780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 104.263689][ T5883] ^ [ 104.270381][ T5883] ffff8880b11ee800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 104.278461][ T5883] ffff8880b11ee880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 104.286537][ T5883] ================================================================== [ 104.313171][ T5883] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 104.320737][ T5883] CPU: 0 PID: 5883 Comm: syz-executor Not tainted syzkaller #0 [ 104.328772][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 104.338868][ T5883] Call Trace: [ 104.342184][ T5883] [ 104.345161][ T5883] dump_stack_lvl+0x16c/0x230 [ 104.349900][ T5883] ? show_regs_print_info+0x20/0x20 [ 104.355176][ T5883] ? load_image+0x3b0/0x3b0 [ 104.359755][ T5883] panic+0x2c0/0x710 [ 104.363699][ T5883] ? bpf_jit_dump+0xd0/0xd0 [ 104.368249][ T5883] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 104.374191][ T5883] ? _raw_spin_unlock+0x40/0x40 [ 104.379080][ T5883] ? print_memory_metadata+0x314/0x400 [ 104.384595][ T5883] ? udf_unlink+0x5e3/0x6d0 [ 104.389175][ T5883] check_panic_on_warn+0x84/0xa0 [ 104.394158][ T5883] ? udf_unlink+0x5e3/0x6d0 [ 104.398705][ T5883] end_report+0x6f/0x140 [ 104.402994][ T5883] kasan_report+0x128/0x150 [ 104.407537][ T5883] ? udf_unlink+0x5e3/0x6d0 [ 104.412094][ T5883] udf_unlink+0x5e3/0x6d0 [ 104.416480][ T5883] ? udf_link+0x4e0/0x4e0 [ 104.420866][ T5883] ? down_write+0x162/0x1f0 [ 104.425410][ T5883] ? down_read_killable+0x340/0x340 [ 104.430734][ T5883] ? bpf_lsm_inode_unlink+0x9/0x10 [ 104.435885][ T5883] ? security_inode_unlink+0xcf/0x110 [ 104.441306][ T5883] vfs_unlink+0x389/0x600 [ 104.445680][ T5883] do_unlinkat+0x328/0x570 [ 104.450145][ T5883] ? fsnotify_link_count+0xf0/0xf0 [ 104.455296][ T5883] ? getname_flags+0x20a/0x500 [ 104.460113][ T5883] __x64_sys_unlink+0x49/0x50 [ 104.464823][ T5883] do_syscall_64+0x55/0xb0 [ 104.469275][ T5883] ? clear_bhb_loop+0x40/0x90 [ 104.474005][ T5883] ? clear_bhb_loop+0x40/0x90 [ 104.478738][ T5883] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 104.484680][ T5883] RIP: 0033:0x7f5640b8ecf7 [ 104.489129][ T5883] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 104.508765][ T5883] RSP: 002b:00007ffdb9c1b858 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 104.517200][ T5883] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f5640b8ecf7 [ 104.525218][ T5883] RDX: 00007ffdb9c1b880 RSI: 00007ffdb9c1b910 RDI: 00007ffdb9c1b910 [ 104.533546][ T5883] RBP: 00007ffdb9c1b910 R08: 0000000000000000 R09: 0000000000000000 [ 104.541520][ T5883] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffdb9c1ca00 [ 104.549495][ T5883] R13: 00007f5640c13d7d R14: 00000000000195c2 R15: 00007ffdb9c1ebc0 [ 104.557484][ T5883] [ 104.561194][ T5883] Kernel Offset: disabled [ 104.565577][ T5883] Rebooting in 86400 seconds..