Warning: Permanently added '10.128.0.203' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://33955 [ 31.456145][ T4340] cgroup: Unknown subsys name 'net' [ 31.751477][ T4340] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.037361][ T4340] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 36.837599][ T1738] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.839865][ T1738] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.842822][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 36.848062][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 36.849746][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 36.851242][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 37.728982][ T4405] chnl_net:caif_netlink_parms(): no params data found [ 37.745788][ T4405] bridge0: port 1(bridge_slave_0) entered blocking state [ 37.747051][ T4405] bridge0: port 1(bridge_slave_0) entered disabled state [ 37.749034][ T4405] device bridge_slave_0 entered promiscuous mode [ 37.751368][ T4405] bridge0: port 2(bridge_slave_1) entered blocking state [ 37.752614][ T4405] bridge0: port 2(bridge_slave_1) entered disabled state [ 37.754106][ T4405] device bridge_slave_1 entered promiscuous mode [ 37.760702][ T4405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 37.763213][ T4405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 37.770626][ T4405] team0: Port device team_slave_0 added [ 37.772356][ T4405] team0: Port device team_slave_1 added [ 37.777506][ T4405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 37.779863][ T4405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.784469][ T4405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 37.787360][ T4405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 37.788698][ T4405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 37.793045][ T4405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 37.849784][ T4405] device hsr_slave_0 entered promiscuous mode [ 37.889411][ T4405] device hsr_slave_1 entered promiscuous mode [ 37.979716][ T4405] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.027345][ T4405] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.089261][ T4405] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.129929][ T4405] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.195843][ T4405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.199771][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.201653][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.205276][ T4405] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.208022][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.210176][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.212089][ T485] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.213426][ T485] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.215161][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.226418][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.228096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.233138][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.234423][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.237287][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.240262][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.244341][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.246358][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.247970][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.250688][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.252382][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.265638][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.267220][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.270107][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.271916][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.274451][ T4405] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 38.330058][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 38.331514][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 38.334658][ T4405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 38.347703][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 38.354612][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 38.356434][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 38.357929][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 38.361289][ T4405] device veth0_vlan entered promiscuous mode [ 38.364387][ T4405] device veth1_vlan entered promiscuous mode [ 38.371923][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 38.373582][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 38.375244][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 38.377613][ T4405] device veth0_macvtap entered promiscuous mode [ 38.380377][ T4405] device veth1_macvtap entered promiscuous mode [ 38.385154][ T4405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 38.386423][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 38.388114][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 38.390844][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 38.393591][ T4405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 38.394887][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 38.396490][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.712298][ T4405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.713821][ T4405] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.715374][ T4405] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.716985][ T4405] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 38.905218][ T4434] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.906959][ T4434] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.908401][ T4434] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.910895][ T4434] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.912392][ T4434] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.913738][ T4434] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 1970/01/01 00:00:39 executed programs: 0 [ 39.405140][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 39.406827][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 39.408216][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 39.410189][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 39.412116][ T48] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 39.413452][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 39.626096][ T4442] chnl_net:caif_netlink_parms(): no params data found [ 39.641497][ T4442] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.642758][ T4442] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.644297][ T4442] device bridge_slave_0 entered promiscuous mode [ 39.646258][ T4442] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.647553][ T4442] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.649805][ T4442] device bridge_slave_1 entered promiscuous mode [ 39.656410][ T4442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.659359][ T4442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.666067][ T4442] team0: Port device team_slave_0 added [ 39.668050][ T4442] team0: Port device team_slave_1 added [ 39.673452][ T4442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.674758][ T4442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.679453][ T4442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.681985][ T4442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.683155][ T4442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.687435][ T4442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.739988][ T4442] device hsr_slave_0 entered promiscuous mode [ 39.778749][ T4442] device hsr_slave_1 entered promiscuous mode [ 39.818556][ T4442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 39.819955][ T4442] Cannot create hsr debugfs directory [ 40.080805][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.449065][ T4434] Bluetooth: hci1: command 0x0409 tx timeout [ 42.849683][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.528501][ T4434] Bluetooth: hci1: command 0x041b tx timeout [ 44.279659][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.370508][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 45.422641][ T4442] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 45.560554][ T4442] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 45.608518][ T4434] Bluetooth: hci1: command 0x040f tx timeout [ 45.661800][ T4442] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.742399][ T4442] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.860962][ T4442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.864497][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.866084][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.868765][ T4442] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.903767][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.905606][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.907258][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.908431][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.910302][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.913072][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.914724][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.916282][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.917589][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.920724][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.923464][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.926088][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.927982][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.930020][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.932503][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.934226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.936900][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.940140][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.942939][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.944641][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.993388][ T4442] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 46.041002][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 46.042444][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 46.045409][ T4442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 46.052265][ T9] device hsr_slave_0 left promiscuous mode [ 46.079806][ T9] device hsr_slave_1 left promiscuous mode [ 46.188550][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 46.189852][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 46.191580][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 46.192833][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 46.194266][ T9] device bridge_slave_1 left promiscuous mode [ 46.195835][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.239213][ T9] device bridge_slave_0 left promiscuous mode [ 46.240410][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.408754][ T9] device veth1_macvtap left promiscuous mode [ 46.410023][ T9] device veth0_macvtap left promiscuous mode [ 46.411157][ T9] device veth1_vlan left promiscuous mode [ 46.412267][ T9] device veth0_vlan left promiscuous mode [ 47.688546][ T4434] Bluetooth: hci1: command 0x0419 tx timeout [ 48.609708][ T9] team0 (unregistering): Port device team_slave_1 removed [ 48.769374][ T9] team0 (unregistering): Port device team_slave_0 removed [ 48.939365][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 49.148866][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 50.719347][ T9] bond0 (unregistering): Released all slaves [ 51.030466][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.032236][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.035804][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.037521][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.039522][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.041097][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.043435][ T4442] device veth0_vlan entered promiscuous mode [ 51.046525][ T4442] device veth1_vlan entered promiscuous mode [ 51.054264][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 51.055948][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 51.057407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.060102][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.065881][ T4442] device veth0_macvtap entered promiscuous mode [ 51.068276][ T4442] device veth1_macvtap entered promiscuous mode [ 51.073927][ T4442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 51.075213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 51.076907][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.079009][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.080703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.083903][ T4442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 51.085226][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.086942][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.090688][ T4442] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.092223][ T4442] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.093706][ T4442] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.095242][ T4442] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 51.114750][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.116895][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.119823][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 51.124917][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 51.126215][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 51.127493][ T485] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 51.176917][ T4541] loop0: detected capacity change from 0 to 128 [ 51.180253][ T4541] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 51.186180][ T4541] syz.0.17: attempt to access beyond end of device [ 51.186180][ T4541] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 51.188673][ T4541] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 51.190569][ T4541] ================================================================== [ 51.191977][ T4541] BUG: KASAN: use-after-free in sysv_new_inode+0xdb0/0xf38 [ 51.193192][ T4541] Read of size 2 at addr ffff0000ebd231ce by task syz.0.17/4541 [ 51.194439][ T4541] [ 51.194838][ T4541] CPU: 1 PID: 4541 Comm: syz.0.17 Not tainted syzkaller #0 [ 51.196023][ T4541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2026 [ 51.197679][ T4541] Call trace: [ 51.198206][ T4541] dump_backtrace+0x1c4/0x1f0 [ 51.199006][ T4541] show_stack+0x2c/0x3c [ 51.199713][ T4541] __dump_stack+0x30/0x40 [ 51.200450][ T4541] dump_stack_lvl+0xf4/0x15c [ 51.201273][ T4541] print_address_description+0x88/0x218 [ 51.202209][ T4541] print_report+0x50/0x68 [ 51.203026][ T4541] kasan_report+0xa8/0xfc [ 51.203822][ T4541] __asan_report_load2_noabort+0x2c/0x38 [ 51.204884][ T4541] sysv_new_inode+0xdb0/0xf38 [ 51.205744][ T4541] sysv_mkdir+0x44/0x138 [ 51.206497][ T4541] vfs_mkdir+0x314/0x4d8 [ 51.207221][ T4541] do_mkdirat+0x1b8/0x3ec [ 51.207963][ T4541] __arm64_sys_mkdirat+0x90/0xa8 [ 51.208857][ T4541] invoke_syscall+0x98/0x290 [ 51.209708][ T4541] el0_svc_common+0x13c/0x258 [ 51.210568][ T4541] do_el0_svc+0x5c/0x134 [ 51.211329][ T4541] el0_svc+0x58/0x128 [ 51.212026][ T4541] el0t_64_sync_handler+0x84/0xf0 [ 51.212927][ T4541] el0t_64_sync+0x18c/0x190 [ 51.213682][ T4541] [ 51.214103][ T4541] The buggy address belongs to the physical page: [ 51.215203][ T4541] page:000000008c9e8086 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x12bd23 [ 51.216993][ T4541] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 51.218255][ T4541] raw: 05ffc00000000000 dead000000000100 dead000000000122 0000000000000000 [ 51.219713][ T4541] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 51.221264][ T4541] page dumped because: kasan: bad access detected [ 51.222409][ T4541] [ 51.222815][ T4541] Memory state around the buggy address: [ 51.223784][ T4541] ffff0000ebd23080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.225150][ T4541] ffff0000ebd23100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.226564][ T4541] >ffff0000ebd23180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.227986][ T4541] ^ [ 51.229105][ T4541] ffff0000ebd23200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.230512][ T4541] ffff0000ebd23280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.231900][ T4541] ================================================================== [ 51.235261][ T4541] Disabling lock debugging due to kernel taint [ 51.236530][ T4541] unable to read i-node block [ 51.237396][ T4541] syz.0.17: attempt to access beyond end of device [ 51.237396][ T4541] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 51.240127][ T4541] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 51.241666][ T4541] sysv_free_block: flc_count > flc_size [ 51.242569][ T4541] sysv_free_inode: unable to read inode block on device loop0