Warning: Permanently added '10.128.0.107' (ED25519) to the list of known hosts. 1970/01/01 00:00:30 parsed 1 programs 1970/01/01 00:00:30 serving rpc on tcp://36883 [ 31.842451][ T4339] cgroup: Unknown subsys name 'net' [ 32.059617][ T4339] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 32.340411][ T4339] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 37.814030][ T1638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.815437][ T1638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.817500][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 37.827413][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 37.828821][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 37.830407][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 38.155445][ T4399] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 38.157084][ T4399] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 38.158455][ T4399] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 38.159950][ T4399] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 38.161392][ T4399] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 38.162742][ T4399] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 38.436826][ T4430] chnl_net:caif_netlink_parms(): no params data found [ 38.455001][ T4430] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.456325][ T4430] bridge0: port 1(bridge_slave_0) entered disabled state [ 38.459015][ T4430] device bridge_slave_0 entered promiscuous mode [ 38.461397][ T4430] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.462618][ T4430] bridge0: port 2(bridge_slave_1) entered disabled state [ 38.464129][ T4430] device bridge_slave_1 entered promiscuous mode [ 38.472826][ T4430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 38.475384][ T4430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 38.482348][ T4430] team0: Port device team_slave_0 added [ 38.484057][ T4430] team0: Port device team_slave_1 added [ 38.490264][ T4430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 38.491507][ T4430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.496469][ T4430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 38.500248][ T4430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 38.501496][ T4430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 38.505989][ T4430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 38.538169][ T4430] device hsr_slave_0 entered promiscuous mode [ 38.577241][ T4430] device hsr_slave_1 entered promiscuous mode [ 38.660479][ T4430] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 38.708645][ T4430] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 38.750990][ T4430] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 38.788531][ T4430] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 38.878031][ T4430] 8021q: adding VLAN 0 to HW filter on device bond0 [ 38.881498][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 38.883357][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 38.888395][ T4430] 8021q: adding VLAN 0 to HW filter on device team0 [ 38.890907][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 38.892446][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 38.894143][ T39] bridge0: port 1(bridge_slave_0) entered blocking state [ 38.895410][ T39] bridge0: port 1(bridge_slave_0) entered forwarding state [ 38.897730][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 38.900666][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 38.902369][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 38.903879][ T39] bridge0: port 2(bridge_slave_1) entered blocking state [ 38.905091][ T39] bridge0: port 2(bridge_slave_1) entered forwarding state [ 38.910180][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 38.921907][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 38.924743][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 38.926857][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 38.928617][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 38.931365][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 38.933092][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 38.935851][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 38.937832][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 38.940842][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 38.942527][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 38.946004][ T4430] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 39.008057][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 39.009911][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 39.013414][ T4430] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 39.019186][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 39.020832][ T39] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 39.026352][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 39.028456][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 39.030638][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 39.032027][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 39.033862][ T4430] device veth0_vlan entered promiscuous mode [ 39.036882][ T4430] device veth1_vlan entered promiscuous mode [ 39.042681][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 39.044195][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 39.045730][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 39.047999][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 39.050317][ T4430] device veth0_macvtap entered promiscuous mode [ 39.052524][ T4430] device veth1_macvtap entered promiscuous mode [ 39.058060][ T4430] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 39.059469][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 39.061034][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 39.062511][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 39.064149][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 39.068166][ T4430] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 39.069486][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 39.071131][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 39.080023][ T4430] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.081549][ T4430] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.082947][ T4430] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 39.084291][ T4430] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:00:39 executed programs: 0 [ 39.287932][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 39.289631][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 39.291172][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 39.292719][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 39.294155][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 39.295465][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 39.507037][ T4449] chnl_net:caif_netlink_parms(): no params data found [ 39.563128][ T4449] bridge0: port 1(bridge_slave_0) entered blocking state [ 39.564417][ T4449] bridge0: port 1(bridge_slave_0) entered disabled state [ 39.566110][ T4449] device bridge_slave_0 entered promiscuous mode [ 39.568331][ T4449] bridge0: port 2(bridge_slave_1) entered blocking state [ 39.569630][ T4449] bridge0: port 2(bridge_slave_1) entered disabled state [ 39.571103][ T4449] device bridge_slave_1 entered promiscuous mode [ 39.577143][ T4449] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 39.580194][ T4449] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 39.586065][ T4449] team0: Port device team_slave_0 added [ 39.588194][ T4449] team0: Port device team_slave_1 added [ 39.593118][ T4449] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 39.594181][ T4449] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.598614][ T4449] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 39.908891][ T4449] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 39.910130][ T4449] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 39.914970][ T4449] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 39.957709][ T4449] device hsr_slave_0 entered promiscuous mode [ 40.027660][ T4449] device hsr_slave_1 entered promiscuous mode [ 40.066667][ T4449] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 40.068079][ T4449] Cannot create hsr debugfs directory [ 40.288224][ T4449] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 41.366797][ T4399] Bluetooth: hci0: command 0x0409 tx timeout [ 42.397377][ T4449] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 43.446912][ T4399] Bluetooth: hci0: command 0x041b tx timeout [ 44.447645][ T4449] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.548938][ T4449] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 44.812535][ T4449] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 44.890354][ T4449] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 44.971316][ T4449] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 45.027515][ T4449] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 45.106028][ T4449] 8021q: adding VLAN 0 to HW filter on device bond0 [ 45.109609][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.111184][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.114191][ T4449] 8021q: adding VLAN 0 to HW filter on device team0 [ 45.116784][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.118493][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.120072][ T4458] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.121314][ T4458] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.122718][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.125218][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.127926][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.129447][ T4458] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.130733][ T4458] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.170347][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 45.172927][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 45.175565][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 45.178382][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 45.180033][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 45.183152][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 45.184884][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 45.187804][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.189604][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.192151][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.193768][ T4458] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.196112][ T4449] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 45.219435][ T9] device hsr_slave_0 left promiscuous mode [ 45.246873][ T9] device hsr_slave_1 left promiscuous mode [ 45.336697][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 45.338087][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 45.339735][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 45.341045][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 45.343352][ T9] device bridge_slave_1 left promiscuous mode [ 45.344809][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.387146][ T9] device bridge_slave_0 left promiscuous mode [ 45.388297][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.526681][ T4399] Bluetooth: hci0: command 0x040f tx timeout [ 45.536838][ T9] device veth1_macvtap left promiscuous mode [ 45.538019][ T9] device veth0_macvtap left promiscuous mode [ 45.539108][ T9] device veth1_vlan left promiscuous mode [ 45.540209][ T9] device veth0_vlan left promiscuous mode [ 47.616638][ T4399] Bluetooth: hci0: command 0x0419 tx timeout [ 47.657730][ T9] team0 (unregistering): Port device team_slave_1 removed [ 47.827268][ T9] team0 (unregistering): Port device team_slave_0 removed [ 48.006961][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 48.217038][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 49.758231][ T9] bond0 (unregistering): Released all slaves [ 50.105842][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 50.107569][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 50.110576][ T4449] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 50.116071][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.119037][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.125196][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.127093][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.128839][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.130955][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.135132][ T4449] device veth0_vlan entered promiscuous mode [ 50.138909][ T4449] device veth1_vlan entered promiscuous mode [ 50.144836][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 50.146431][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 50.148555][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.150213][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.153143][ T4449] device veth0_macvtap entered promiscuous mode [ 50.155505][ T4449] device veth1_macvtap entered promiscuous mode [ 50.161322][ T4449] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 50.162680][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 50.164284][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.165817][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.167703][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.170496][ T4449] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 50.171799][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.173516][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.175992][ T4449] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.178294][ T4449] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.179814][ T4449] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.181263][ T4449] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 50.201815][ T1638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.203283][ T1638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.205319][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 50.212053][ T1638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 50.213492][ T1638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 50.214800][ T1638] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 50.260769][ T4467] loop0: detected capacity change from 0 to 128 [ 50.269094][ T4467] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 50.271736][ T4467] syz.0.17: attempt to access beyond end of device [ 50.271736][ T4467] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 50.274080][ T4467] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 50.275645][ T4467] ================================================================== [ 50.277134][ T4467] BUG: KASAN: use-after-free in sysv_new_inode+0xdb0/0xf38 [ 50.278539][ T4467] Read of size 2 at addr ffff0000ee2621ce by task syz.0.17/4467 [ 50.280031][ T4467] [ 50.280489][ T4467] CPU: 1 PID: 4467 Comm: syz.0.17 Not tainted syzkaller #0 [ 50.281858][ T4467] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/07/2026 [ 50.283597][ T4467] Call trace: [ 50.284155][ T4467] dump_backtrace+0x1c4/0x1f0 [ 50.284970][ T4467] show_stack+0x2c/0x3c [ 50.285685][ T4467] __dump_stack+0x30/0x40 [ 50.286427][ T4467] dump_stack_lvl+0xf4/0x15c [ 50.287196][ T4467] print_address_description+0x88/0x218 [ 50.288137][ T4467] print_report+0x50/0x68 [ 50.288903][ T4467] kasan_report+0xa8/0xfc [ 50.289664][ T4467] __asan_report_load2_noabort+0x2c/0x38 [ 50.290631][ T4467] sysv_new_inode+0xdb0/0xf38 [ 50.291461][ T4467] sysv_mknod+0x5c/0x104 [ 50.292226][ T4467] vfs_mknod+0x3c4/0x44c [ 50.292987][ T4467] do_mknodat+0x324/0x558 [ 50.293740][ T4467] __arm64_sys_mknodat+0xb4/0xd0 [ 50.294603][ T4467] invoke_syscall+0x98/0x290 [ 50.295426][ T4467] el0_svc_common+0x13c/0x258 [ 50.296249][ T4467] do_el0_svc+0x5c/0x134 [ 50.296972][ T4467] el0_svc+0x58/0x128 [ 50.297678][ T4467] el0t_64_sync_handler+0x84/0xf0 [ 50.298552][ T4467] el0t_64_sync+0x18c/0x190 [ 50.299319][ T4467] [ 50.299720][ T4467] The buggy address belongs to the physical page: [ 50.300812][ T4467] page:00000000498ad62d refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x12e262 [ 50.302625][ T4467] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 50.303925][ T4467] raw: 05ffc00000000000 fffffc0003a4ec88 fffffc0003a4f348 0000000000000000 [ 50.305462][ T4467] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 50.306988][ T4467] page dumped because: kasan: bad access detected [ 50.308066][ T4467] [ 50.308474][ T4467] Memory state around the buggy address: [ 50.309490][ T4467] ffff0000ee262080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 50.310934][ T4467] ffff0000ee262100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 50.312340][ T4467] >ffff0000ee262180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 50.313749][ T4467] ^ [ 50.314828][ T4467] ffff0000ee262200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 50.316272][ T4467] ffff0000ee262280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 50.317670][ T4467] ================================================================== [ 50.321723][ T4467] Disabling lock debugging due to kernel taint [ 50.322888][ T4467] unable to read i-node block [ 50.323754][ T4467] syz.0.17: attempt to access beyond end of device [ 50.323754][ T4467] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 50.326015][ T4467] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 50.328074][ T4467] sysv_free_inode: unable to read inode block on device loop0 [ 50.334208][ T4449] sysv_free_block: flc_count > flc_size [ 50.335175][ T4449] sysv_free_block: flc_count > flc_size [ 50.336148][ T4449] sysv_free_block: flc_count > flc_size [ 50.339147][ T4449] sysv_free_block: flc_count > flc_size [ 50.340146][ T4449] sysv_free_block: flc_count > flc_size [ 50.341205][ T4449] sysv_free_block: flc_count > flc_size [ 50.342285][ T4449] sysv_free_block: flc_count > flc_size [ 50.343221][ T4449] sysv_free_block: flc_count > flc_size [ 50.344178][ T4449] sysv_free_block: flc_count > flc_size [ 50.345104][ T4449] sysv_free_block: flc_count > flc_size [ 50.346141][ T4449] sysv_free_inode: inode 0,1,2 or nonexistent inode