Warning: Permanently added '10.128.0.131' (ED25519) to the list of known hosts. 2026/06/21 07:15:39 parsed 1 programs 2026/06/21 07:15:39 serving rpc on tcp://37351 [ 72.788391][ T5784] cgroup: Unknown subsys name 'net' [ 72.892001][ T5784] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 74.262507][ T5784] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 77.129341][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 77.198489][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.206237][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.213510][ T5829] bridge_slave_0: entered allmulticast mode [ 77.220551][ T5829] bridge_slave_0: entered promiscuous mode [ 77.231402][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.239280][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.246535][ T5829] bridge_slave_1: entered allmulticast mode [ 77.253230][ T5829] bridge_slave_1: entered promiscuous mode [ 77.288287][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.299308][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.323389][ T5829] team0: Port device team_slave_0 added [ 77.332316][ T5829] team0: Port device team_slave_1 added [ 77.358884][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.365878][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.391839][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.404271][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.411311][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.437287][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.480432][ T5829] hsr_slave_0: entered promiscuous mode [ 77.486807][ T5829] hsr_slave_1: entered promiscuous mode [ 77.639928][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.651617][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.661779][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.671811][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.705443][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.712900][ T5829] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.720787][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.727943][ T5829] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.779237][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.798297][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.807953][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.822675][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.834415][ T2939] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.841614][ T2939] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.854897][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.862059][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.059160][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.103407][ T5829] veth0_vlan: entered promiscuous mode [ 78.114151][ T5829] veth1_vlan: entered promiscuous mode [ 78.150632][ T5829] veth0_macvtap: entered promiscuous mode [ 78.160724][ T5829] veth1_macvtap: entered promiscuous mode [ 78.184441][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.205820][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.219944][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.230836][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.239693][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.248565][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.461770][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.483157][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.521887][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.531227][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.654716][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.676161][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.683997][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.693327][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.702493][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.711031][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.719041][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2026/06/21 07:15:49 executed programs: 0 [ 80.766862][ T5089] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.775027][ T5089] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.782745][ T5089] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.792695][ T5089] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.801591][ T5089] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.809315][ T5089] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.868726][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.952087][ T5888] chnl_net:caif_netlink_parms(): no params data found [ 81.004822][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.012141][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.019523][ T5888] bridge_slave_0: entered allmulticast mode [ 81.027051][ T5888] bridge_slave_0: entered promiscuous mode [ 81.036021][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.043146][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.051683][ T5888] bridge_slave_1: entered allmulticast mode [ 81.058806][ T5888] bridge_slave_1: entered promiscuous mode [ 81.081654][ T5888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.092794][ T5888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.118808][ T5888] team0: Port device team_slave_0 added [ 81.128120][ T5888] team0: Port device team_slave_1 added [ 81.149123][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.156198][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.182134][ T5888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.194241][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.201409][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.227500][ T5888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.263622][ T5888] hsr_slave_0: entered promiscuous mode [ 81.270517][ T5888] hsr_slave_1: entered promiscuous mode [ 81.277440][ T5888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.285482][ T5888] Cannot create hsr debugfs directory [ 82.886435][ T51] Bluetooth: hci0: command tx timeout [ 83.395039][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.468477][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.370188][ T5888] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.380872][ T5888] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.402424][ T5888] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.412771][ T5888] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.503894][ T5888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.549677][ T5888] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.562473][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.569663][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.584209][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.591389][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.627072][ T12] hsr_slave_0: left promiscuous mode [ 84.633119][ T12] hsr_slave_1: left promiscuous mode [ 84.639391][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 84.649133][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 84.657592][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 84.665194][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 84.672803][ T12] bridge_slave_1: left allmulticast mode [ 84.679105][ T12] bridge_slave_1: left promiscuous mode [ 84.684897][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 84.697001][ T12] bridge_slave_0: left allmulticast mode [ 84.702667][ T12] bridge_slave_0: left promiscuous mode [ 84.709847][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.729476][ T12] veth1_macvtap: left promiscuous mode [ 84.735422][ T12] veth0_macvtap: left promiscuous mode [ 84.740993][ T12] veth1_vlan: left promiscuous mode [ 84.747241][ T12] veth0_vlan: left promiscuous mode [ 84.967396][ T51] Bluetooth: hci0: command tx timeout [ 85.132355][ T12] team0 (unregistering): Port device team_slave_1 removed [ 85.163742][ T12] team0 (unregistering): Port device team_slave_0 removed [ 85.194398][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.231902][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.420016][ T12] bond0 (unregistering): Released all slaves [ 85.541853][ T5888] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.710323][ T5888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.753265][ T5888] veth0_vlan: entered promiscuous mode [ 85.774883][ T5888] veth1_vlan: entered promiscuous mode [ 85.810074][ T5888] veth0_macvtap: entered promiscuous mode [ 85.820827][ T5888] veth1_macvtap: entered promiscuous mode [ 85.843310][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.856599][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.870509][ T5888] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.879750][ T5888] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.888489][ T5888] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.897378][ T5888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.987798][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.004536][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.041958][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.050604][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.125427][ T5927] syz.0.17[5927]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 86.142986][ T5927] loop0: detected capacity change from 0 to 512 [ 86.166158][ T5927] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 86.180576][ T5927] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 86.199069][ T5927] EXT4-fs (loop0): 1 truncate cleaned up [ 86.207322][ T5927] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 86.240379][ T5927] ================================================================== [ 86.248487][ T5927] BUG: KASAN: slab-use-after-free in ext4_read_inline_data+0x1c0/0x2a0 [ 86.256769][ T5927] Read of size 68 at addr ffff888079a86c80 by task syz.0.17/5927 [ 86.264491][ T5927] [ 86.266818][ T5927] CPU: 0 PID: 5927 Comm: syz.0.17 Not tainted syzkaller #0 [ 86.273994][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 86.284051][ T5927] Call Trace: [ 86.287316][ T5927] [ 86.290242][ T5927] dump_stack_lvl+0x18c/0x250 [ 86.294927][ T5927] ? __lock_acquire+0x7d80/0x7d80 [ 86.299972][ T5927] ? show_regs_print_info+0x20/0x20 [ 86.305181][ T5927] ? load_image+0x420/0x420 [ 86.309667][ T5927] ? __virt_addr_valid+0x10c/0x380 [ 86.314762][ T5927] ? __virt_addr_valid+0x10c/0x380 [ 86.319858][ T5927] ? __virt_addr_valid+0x10c/0x380 [ 86.324962][ T5927] print_report+0xa8/0x210 [ 86.329371][ T5927] ? ext4_read_inline_data+0x1c0/0x2a0 [ 86.334819][ T5927] kasan_report+0x117/0x150 [ 86.339309][ T5927] ? ext4_read_inline_data+0x1c0/0x2a0 [ 86.344759][ T5927] kasan_check_range+0x241/0x290 [ 86.349693][ T5927] ? ext4_read_inline_data+0x1c0/0x2a0 [ 86.355153][ T5927] __asan_memcpy+0x29/0x70 [ 86.359563][ T5927] ext4_read_inline_data+0x1c0/0x2a0 [ 86.364840][ T5927] ext4_convert_inline_data_nolock+0x138/0x730 [ 86.370990][ T5927] ? ext4_add_dirent_to_inline+0xef/0x400 [ 86.376705][ T5927] ? ext4_add_dirent_to_inline+0x400/0x400 [ 86.382508][ T5927] ? ext4_get_inode_loc+0xc6/0xf0 [ 86.387532][ T5927] ext4_try_add_inline_entry+0x73c/0xa70 [ 86.393161][ T5927] ? ext4_da_write_inline_data_begin+0xf80/0xf80 [ 86.399492][ T5927] ext4_add_entry+0x5cc/0xd90 [ 86.404168][ T5927] ? ext4_inc_count+0x1b0/0x1b0 [ 86.409015][ T5927] ? __ext4_mark_inode_dirty+0x4c4/0x6d0 [ 86.414641][ T5927] ? ext4_init_new_dir+0x47c/0x550 [ 86.419746][ T5927] ext4_mkdir+0x524/0xc90 [ 86.424074][ T5927] ? ext4_symlink+0x940/0x940 [ 86.428744][ T5927] ? inode_permission+0xf3/0x480 [ 86.433674][ T5927] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 86.438690][ T5927] ? security_inode_mkdir+0xb7/0x100 [ 86.443972][ T5927] vfs_mkdir+0x2a5/0x470 [ 86.448212][ T5927] do_mkdirat+0x1dc/0x450 [ 86.452532][ T5927] ? vfs_mkdir+0x470/0x470 [ 86.456942][ T5927] __x64_sys_mkdirat+0x89/0xa0 [ 86.461700][ T5927] do_syscall_64+0x55/0xb0 [ 86.466107][ T5927] ? clear_bhb_loop+0x40/0x90 [ 86.470774][ T5927] ? clear_bhb_loop+0x40/0x90 [ 86.475440][ T5927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.481357][ T5927] RIP: 0033:0x7f76c7f9bcc7 [ 86.485771][ T5927] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 86.505370][ T5927] RSP: 002b:00007ffd1c5c14f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 86.513779][ T5927] RAX: ffffffffffffffda RBX: 00007ffd1c5c1580 RCX: 00007f76c7f9bcc7 [ 86.521739][ T5927] RDX: 00000000000001ff RSI: 0000200000000080 RDI: 00000000ffffff9c [ 86.529700][ T5927] RBP: 0000200000000140 R08: 0000200000000080 R09: 0000000000000000 [ 86.537663][ T5927] R10: 0000200000000140 R11: 0000000000000246 R12: 0000200000000080 [ 86.545626][ T5927] R13: 00007ffd1c5c1540 R14: 0000000000000000 R15: 0000000000000000 [ 86.553592][ T5927] [ 86.556598][ T5927] [ 86.558907][ T5927] Allocated by task 5143: [ 86.563221][ T5927] kasan_set_track+0x4e/0x70 [ 86.567805][ T5927] __kasan_kmalloc+0x8f/0xa0 [ 86.572386][ T5927] __kmalloc+0xb7/0x240 [ 86.576533][ T5927] tomoyo_realpath_from_path+0xe6/0x5c0 [ 86.582073][ T5927] tomoyo_path_perm+0x282/0x560 [ 86.586912][ T5927] security_inode_getattr+0xd3/0x120 [ 86.592191][ T5927] __x64_sys_newfstat+0x12c/0x250 [ 86.597212][ T5927] do_syscall_64+0x55/0xb0 [ 86.601624][ T5927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.607512][ T5927] [ 86.609822][ T5927] Freed by task 5143: [ 86.613787][ T5927] kasan_set_track+0x4e/0x70 [ 86.618368][ T5927] kasan_save_free_info+0x28/0x40 [ 86.623383][ T5927] ____kasan_slab_free+0x126/0x1f0 [ 86.628485][ T5927] slab_free_freelist_hook+0x130/0x1a0 [ 86.633933][ T5927] __kmem_cache_free+0xba/0x1f0 [ 86.638775][ T5927] tomoyo_realpath_from_path+0x587/0x5c0 [ 86.644400][ T5927] tomoyo_path_perm+0x282/0x560 [ 86.649238][ T5927] security_inode_getattr+0xd3/0x120 [ 86.654519][ T5927] __x64_sys_newfstat+0x12c/0x250 [ 86.659538][ T5927] do_syscall_64+0x55/0xb0 [ 86.663949][ T5927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 86.669840][ T5927] [ 86.672153][ T5927] The buggy address belongs to the object at ffff888079a86000 [ 86.672153][ T5927] which belongs to the cache kmalloc-4k of size 4096 [ 86.686195][ T5927] The buggy address is located 3200 bytes inside of [ 86.686195][ T5927] freed 4096-byte region [ffff888079a86000, ffff888079a87000) [ 86.700155][ T5927] [ 86.702465][ T5927] The buggy address belongs to the physical page: [ 86.708878][ T5927] page:ffffea0001e6a000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x79a80 [ 86.719023][ T5927] head:ffffea0001e6a000 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 86.727946][ T5927] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 86.735912][ T5927] page_type: 0xffffffff() [ 86.740245][ T5927] raw: 00fff00000000840 ffff888017c42140 dead000000000122 0000000000000000 [ 86.748818][ T5927] raw: 0000000000000000 0000000000040004 00000001ffffffff 0000000000000000 [ 86.757385][ T5927] page dumped because: kasan: bad access detected [ 86.763883][ T5927] page_owner tracks the page as allocated [ 86.769583][ T5927] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5143, tgid 5143 (udevd), ts 78856878592, free_ts 77266302374 [ 86.790932][ T5927] post_alloc_hook+0x1c1/0x200 [ 86.795696][ T5927] get_page_from_freelist+0x2181/0x22a0 [ 86.801228][ T5927] __alloc_pages+0x1f0/0x460 [ 86.805804][ T5927] alloc_slab_page+0x5d/0x180 [ 86.810470][ T5927] new_slab+0x87/0x2d0 [ 86.814528][ T5927] ___slab_alloc+0xc5c/0x12f0 [ 86.819199][ T5927] __kmem_cache_alloc_node+0x11f/0x250 [ 86.824646][ T5927] __kmalloc+0xa7/0x240 [ 86.828795][ T5927] tomoyo_realpath_from_path+0xe6/0x5c0 [ 86.834332][ T5927] tomoyo_check_open_permission+0x224/0x460 [ 86.840210][ T5927] security_file_open+0x62/0xa0 [ 86.845050][ T5927] do_dentry_open+0x32b/0x14b0 [ 86.849812][ T5927] path_openat+0x284f/0x3270 [ 86.854385][ T5927] do_filp_open+0x1f2/0x430 [ 86.858875][ T5927] do_sys_openat2+0x134/0x1d0 [ 86.863541][ T5927] __x64_sys_openat+0x139/0x160 [ 86.868381][ T5927] page last free stack trace: [ 86.873037][ T5927] free_unref_page_prepare+0x7d7/0x8f0 [ 86.878491][ T5927] free_unref_page+0x32/0x2e0 [ 86.883162][ T5927] __unfreeze_partials+0x1cf/0x210 [ 86.888265][ T5927] put_cpu_partial+0x17c/0x250 [ 86.893017][ T5927] __slab_free+0x319/0x400 [ 86.897421][ T5927] qlist_free_all+0x75/0xd0 [ 86.901924][ T5927] kasan_quarantine_reduce+0x143/0x160 [ 86.907373][ T5927] __kasan_slab_alloc+0x22/0x80 [ 86.912213][ T5927] slab_post_alloc_hook+0x6a/0x4d0 [ 86.917315][ T5927] kmem_cache_alloc_node+0x1af/0x310 [ 86.922594][ T5927] __alloc_skb+0x103/0x2c0 [ 86.926999][ T5927] inet6_netconf_notify_devconf+0x10f/0x1d0 [ 86.932882][ T5927] addrconf_ifdown+0x155c/0x18a0 [ 86.937809][ T5927] addrconf_notify+0x6c6/0x1010 [ 86.942650][ T5927] notifier_call_chain+0x18f/0x380 [ 86.947759][ T5927] unregister_netdevice_many_notify+0x1037/0x1910 [ 86.954167][ T5927] [ 86.956481][ T5927] Memory state around the buggy address: [ 86.962097][ T5927] ffff888079a86b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.970147][ T5927] ffff888079a86c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.978195][ T5927] >ffff888079a86c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.986242][ T5927] ^ [ 86.990292][ T5927] ffff888079a86d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.998341][ T5927] ffff888079a86d80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.006391][ T5927] ================================================================== [ 87.036990][ T5927] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 87.044905][ T5927] CPU: 1 PID: 5927 Comm: syz.0.17 Not tainted syzkaller #0 [ 87.052112][ T5927] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 87.062183][ T5927] Call Trace: [ 87.065475][ T5927] [ 87.068417][ T5927] dump_stack_lvl+0x18c/0x250 [ 87.073110][ T5927] ? show_regs_print_info+0x20/0x20 [ 87.078306][ T5927] ? load_image+0x420/0x420 [ 87.082794][ T5927] panic+0x2ca/0x720 [ 87.086679][ T5927] ? bpf_jit_dump+0xd0/0xd0 [ 87.091170][ T5927] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 87.097144][ T5927] ? _raw_spin_unlock+0x40/0x40 [ 87.101981][ T5927] ? print_memory_metadata+0x314/0x400 [ 87.107422][ T5927] ? ext4_read_inline_data+0x1c0/0x2a0 [ 87.112865][ T5927] check_panic_on_warn+0x84/0xa0 [ 87.117788][ T5927] ? ext4_read_inline_data+0x1c0/0x2a0 [ 87.123226][ T5927] end_report+0x6f/0x130 [ 87.127456][ T5927] kasan_report+0x128/0x150 [ 87.131954][ T5927] ? ext4_read_inline_data+0x1c0/0x2a0 [ 87.137409][ T5927] kasan_check_range+0x241/0x290 [ 87.142338][ T5927] ? ext4_read_inline_data+0x1c0/0x2a0 [ 87.147821][ T5927] __asan_memcpy+0x29/0x70 [ 87.152233][ T5927] ext4_read_inline_data+0x1c0/0x2a0 [ 87.157510][ T5927] ext4_convert_inline_data_nolock+0x138/0x730 [ 87.163657][ T5927] ? ext4_add_dirent_to_inline+0xef/0x400 [ 87.169374][ T5927] ? ext4_add_dirent_to_inline+0x400/0x400 [ 87.175173][ T5927] ? ext4_get_inode_loc+0xc6/0xf0 [ 87.180190][ T5927] ext4_try_add_inline_entry+0x73c/0xa70 [ 87.185822][ T5927] ? ext4_da_write_inline_data_begin+0xf80/0xf80 [ 87.192146][ T5927] ext4_add_entry+0x5cc/0xd90 [ 87.196818][ T5927] ? ext4_inc_count+0x1b0/0x1b0 [ 87.201662][ T5927] ? __ext4_mark_inode_dirty+0x4c4/0x6d0 [ 87.207289][ T5927] ? ext4_init_new_dir+0x47c/0x550 [ 87.212394][ T5927] ext4_mkdir+0x524/0xc90 [ 87.216723][ T5927] ? ext4_symlink+0x940/0x940 [ 87.221394][ T5927] ? inode_permission+0xf3/0x480 [ 87.226323][ T5927] ? bpf_lsm_inode_mkdir+0x9/0x10 [ 87.231346][ T5927] ? security_inode_mkdir+0xb7/0x100 [ 87.236628][ T5927] vfs_mkdir+0x2a5/0x470 [ 87.240864][ T5927] do_mkdirat+0x1dc/0x450 [ 87.245183][ T5927] ? vfs_mkdir+0x470/0x470 [ 87.249588][ T5927] __x64_sys_mkdirat+0x89/0xa0 [ 87.254346][ T5927] do_syscall_64+0x55/0xb0 [ 87.258753][ T5927] ? clear_bhb_loop+0x40/0x90 [ 87.263420][ T5927] ? clear_bhb_loop+0x40/0x90 [ 87.268085][ T5927] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 87.273972][ T5927] RIP: 0033:0x7f76c7f9bcc7 [ 87.278378][ T5927] Code: 00 66 90 48 89 f2 b9 00 01 00 00 48 89 fe bf 9c ff ff ff e9 db f7 ff ff 66 2e 0f 1f 84 00 00 00 00 00 90 b8 02 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 87.297978][ T5927] RSP: 002b:00007ffd1c5c14f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000102 [ 87.306382][ T5927] RAX: ffffffffffffffda RBX: 00007ffd1c5c1580 RCX: 00007f76c7f9bcc7 [ 87.314348][ T5927] RDX: 00000000000001ff RSI: 0000200000000080 RDI: 00000000ffffff9c [ 87.322309][ T5927] RBP: 0000200000000140 R08: 0000200000000080 R09: 0000000000000000 [ 87.330272][ T5927] R10: 0000200000000140 R11: 0000000000000246 R12: 0000200000000080 [ 87.338230][ T5927] R13: 00007ffd1c5c1540 R14: 0000000000000000 R15: 0000000000000000 [ 87.346199][ T5927] [ 87.349336][ T5927] Kernel Offset: disabled [ 87.353643][ T5927] Rebooting in 86400 seconds..