Warning: Permanently added '10.128.1.172' (ED25519) to the list of known hosts. [ 1031.612378][ T4284] chnl_net:caif_netlink_parms(): no params data found [ 1031.643694][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1031.645771][ T4284] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.648443][ T4284] device bridge_slave_0 entered promiscuous mode [ 1031.652682][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1031.654759][ T4284] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.657126][ T4284] device bridge_slave_1 entered promiscuous mode [ 1031.669629][ T4284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1031.673676][ T4284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1031.687054][ T4284] team0: Port device team_slave_0 added [ 1031.690698][ T4284] team0: Port device team_slave_1 added [ 1031.702791][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1031.704559][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.711442][ T4284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1031.715614][ T4284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1031.717380][ T4284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1031.724259][ T4284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1031.781800][ T4284] device hsr_slave_0 entered promiscuous mode [ 1031.820108][ T4284] device hsr_slave_1 entered promiscuous mode [ 1031.921729][ T4284] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1031.972048][ T4284] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1032.032712][ T4284] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1032.072190][ T4284] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1032.144120][ T4284] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.146172][ T4284] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.148397][ T4284] bridge0: port 1(bridge_slave_0) entered blocking state [ 1032.150387][ T4284] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1032.185485][ T4284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1032.195233][ T4284] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.200415][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 1032.203597][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 1032.207413][ T4023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1032.213459][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 1032.221731][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 1032.224341][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 1032.226341][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1032.242772][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 1032.245455][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 1032.248095][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 1032.250738][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 1032.255992][ T4284] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1032.259198][ T4284] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 1032.262622][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 1032.273147][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 1032.275192][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 1032.282948][ T4284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1032.295862][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 1032.308312][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 1032.312191][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 1032.314634][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 1032.319102][ T4284] device veth0_vlan entered promiscuous mode [ 1032.325941][ T4284] device veth1_vlan entered promiscuous mode [ 1032.337540][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 1032.340175][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 1032.342686][ T14] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 1032.347178][ T4284] device veth0_macvtap entered promiscuous mode [ 1032.351726][ T4284] device veth1_macvtap entered promiscuous mode [ 1032.362187][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1032.364563][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 1032.367649][ T4293] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 1032.372649][ T4284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1032.374896][ T4023] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 1032.379171][ T4284] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.382979][ T4284] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.385286][ T4284] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.387569][ T4284] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1032.426616][ T4265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.428838][ T4265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.431720][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 1032.444579][ T4265] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1032.446670][ T4265] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1032.451937][ T4292] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready executing program [ 1032.466726][ T4297] loop0: detected capacity change from 0 to 128 [ 1032.471025][ T4297] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 1032.474334][ T4297] syz-executor258: attempt to access beyond end of device [ 1032.474334][ T4297] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 1032.478149][ T4297] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 1032.482264][ T4297] syz-executor258: attempt to access beyond end of device [ 1032.482264][ T4297] loop0: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 1032.485989][ T4297] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 1032.488218][ T4297] syz-executor258: attempt to access beyond end of device [ 1032.488218][ T4297] loop0: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 1032.492388][ T4297] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 1032.494642][ T4297] syz-executor258: attempt to access beyond end of device [ 1032.494642][ T4297] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 1032.498332][ T4297] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 1032.501020][ T4297] syz-executor258: attempt to access beyond end of device [ 1032.501020][ T4297] loop0: rw=0, sector=6491542, nr_sectors = 2 limit=128 [ 1032.504569][ T4297] Buffer I/O error on dev loop0, logical block 3245771, async page read [ 1032.506732][ T4297] syz-executor258: attempt to access beyond end of device [ 1032.506732][ T4297] loop0: rw=0, sector=17668342, nr_sectors = 2 limit=128 [ 1032.510467][ T4297] Buffer I/O error on dev loop0, logical block 8834171, async page read [ 1032.512650][ T4297] syz-executor258: attempt to access beyond end of device [ 1032.512650][ T4297] loop0: rw=0, sector=26932834, nr_sectors = 2 limit=128 [ 1032.516360][ T4297] Buffer I/O error on dev loop0, logical block 13466417, async page read [ 1032.518570][ T4297] syz-executor258: attempt to access beyond end of device [ 1032.518570][ T4297] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 1032.522511][ T4297] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 1032.524975][ T4297] syz-executor258: attempt to access beyond end of device [ 1032.524975][ T4297] loop0: rw=0, sector=6491548, nr_sectors = 2 limit=128 [ 1032.528612][ T4297] Buffer I/O error on dev loop0, logical block 3245774, async page read [ 1032.531015][ T4297] syz-executor258: attempt to access beyond end of device [ 1032.531015][ T4297] loop0: rw=0, sector=17669878, nr_sectors = 2 limit=128 [ 1032.534716][ T4297] Buffer I/O error on dev loop0, logical block 8834939, async page read [ 1089.397291][ T4284] sysv_free_block: flc_count > flc_size [ 1089.399044][ T4284] sysv_free_block: flc_count > flc_size [ 1089.400566][ T4284] sysv_free_block: flc_count > flc_size [ 1089.401985][ T4284] sysv_free_block: flc_count > flc_size [ 1089.403399][ T4284] sysv_free_block: flc_count > flc_size [ 1089.404816][ T4284] sysv_free_block: flc_count > flc_size [ 1089.406289][ T4284] sysv_free_block: flc_count > flc_size [ 1089.407695][ T4284] sysv_free_block: flc_count > flc_size [ 1089.409112][ T4284] sysv_free_block: flc_count > flc_size [ 1089.410568][ T4284] sysv_free_block: flc_count > flc_size [ 1089.412128][ T4284] sysv_free_inode: inode 0,1,2 or nonexistent inode executing program [ 1089.835206][ T4300] loop0: detected capacity change from 0 to 128 [ 1089.841274][ T4300] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 1089.848058][ T4300] syz-executor258: attempt to access beyond end of device [ 1089.848058][ T4300] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 1089.851792][ T4300] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 1089.854286][ T4300] syz-executor258: attempt to access beyond end of device [ 1089.854286][ T4300] loop0: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 1089.857920][ T4300] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 1089.860463][ T4300] syz-executor258: attempt to access beyond end of device [ 1089.860463][ T4300] loop0: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 1089.864204][ T4300] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 1089.866422][ T4300] syz-executor258: attempt to access beyond end of device [ 1089.866422][ T4300] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 1089.871340][ T4300] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 1089.873594][ T4300] syz-executor258: attempt to access beyond end of device [ 1089.873594][ T4300] loop0: rw=0, sector=6491542, nr_sectors = 2 limit=128 [ 1089.877361][ T4300] Buffer I/O error on dev loop0, logical block 3245771, async page read [ 1089.879616][ T4300] syz-executor258: attempt to access beyond end of device [ 1089.879616][ T4300] loop0: rw=0, sector=17668342, nr_sectors = 2 limit=128 [ 1089.883534][ T4300] Buffer I/O error on dev loop0, logical block 8834171, async page read [ 1089.886246][ T4300] syz-executor258: attempt to access beyond end of device [ 1089.886246][ T4300] loop0: rw=0, sector=26932834, nr_sectors = 2 limit=128 [ 1089.890028][ T4300] Buffer I/O error on dev loop0, logical block 13466417, async page read [ 1089.892299][ T4300] syz-executor258: attempt to access beyond end of device [ 1089.892299][ T4300] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 1089.895863][ T4300] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 1089.898177][ T4300] syz-executor258: attempt to access beyond end of device [ 1089.898177][ T4300] loop0: rw=0, sector=6491548, nr_sectors = 2 limit=128 [ 1089.902004][ T4300] Buffer I/O error on dev loop0, logical block 3245774, async page read [ 1089.904165][ T4300] syz-executor258: attempt to access beyond end of device [ 1089.904165][ T4300] loop0: rw=0, sector=17669878, nr_sectors = 2 limit=128 [ 1089.907861][ T4300] Buffer I/O error on dev loop0, logical block 8834939, async page read [ 1146.562326][ T4284] sysv_free_block: flc_count > flc_size [ 1146.563918][ T4284] sysv_free_block: flc_count > flc_size [ 1146.565332][ T4284] sysv_free_block: flc_count > flc_size [ 1146.566756][ T4284] sysv_free_block: flc_count > flc_size [ 1146.568202][ T4284] sysv_free_block: flc_count > flc_size [ 1146.569562][ T4284] sysv_free_block: flc_count > flc_size [ 1146.571206][ T4284] sysv_free_block: flc_count > flc_size [ 1146.572624][ T4284] sysv_free_block: flc_count > flc_size [ 1146.574037][ T4284] sysv_free_block: flc_count > flc_size [ 1146.575416][ T4284] sysv_free_block: flc_count > flc_size [ 1146.576836][ T4284] sysv_free_inode: inode 0,1,2 or nonexistent inode executing program [ 1147.072987][ T4309] loop0: detected capacity change from 0 to 128 [ 1147.076236][ T4309] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 1147.078984][ T4309] syz-executor258: attempt to access beyond end of device [ 1147.078984][ T4309] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 1147.090018][ T4309] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 1147.092447][ T4309] syz-executor258: attempt to access beyond end of device [ 1147.092447][ T4309] loop0: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 1147.096247][ T4309] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 1147.098629][ T4309] syz-executor258: attempt to access beyond end of device [ 1147.098629][ T4309] loop0: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 1147.102897][ T4309] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 1147.105302][ T4309] syz-executor258: attempt to access beyond end of device [ 1147.105302][ T4309] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 1147.109065][ T4309] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 1147.112095][ T4309] syz-executor258: attempt to access beyond end of device [ 1147.112095][ T4309] loop0: rw=0, sector=6491542, nr_sectors = 2 limit=128 [ 1147.115666][ T4309] Buffer I/O error on dev loop0, logical block 3245771, async page read [ 1147.117811][ T4309] syz-executor258: attempt to access beyond end of device [ 1147.117811][ T4309] loop0: rw=0, sector=17668342, nr_sectors = 2 limit=128 [ 1147.121620][ T4309] Buffer I/O error on dev loop0, logical block 8834171, async page read [ 1147.123965][ T4309] syz-executor258: attempt to access beyond end of device [ 1147.123965][ T4309] loop0: rw=0, sector=26932834, nr_sectors = 2 limit=128 [ 1147.128057][ T4309] Buffer I/O error on dev loop0, logical block 13466417, async page read [ 1147.130442][ T4309] syz-executor258: attempt to access beyond end of device [ 1147.130442][ T4309] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 1147.134225][ T4309] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 1147.136607][ T4309] syz-executor258: attempt to access beyond end of device [ 1147.136607][ T4309] loop0: rw=0, sector=6491548, nr_sectors = 2 limit=128 [ 1147.140569][ T4309] Buffer I/O error on dev loop0, logical block 3245774, async page read [ 1147.142870][ T4309] syz-executor258: attempt to access beyond end of device [ 1147.142870][ T4309] loop0: rw=0, sector=17669878, nr_sectors = 2 limit=128 [ 1147.146638][ T4309] Buffer I/O error on dev loop0, logical block 8834939, async page read [ 1204.078361][ T4284] sysv_free_block: flc_count > flc_size [ 1204.080124][ T4284] sysv_free_block: flc_count > flc_size [ 1204.081585][ T4284] sysv_free_block: flc_count > flc_size [ 1204.083059][ T4284] sysv_free_block: flc_count > flc_size [ 1204.084586][ T4284] sysv_free_block: flc_count > flc_size [ 1204.085983][ T4284] sysv_free_block: flc_count > flc_size [ 1204.087385][ T4284] sysv_free_block: flc_count > flc_size [ 1204.088776][ T4284] sysv_free_block: flc_count > flc_size [ 1204.091174][ T4284] sysv_free_block: flc_count > flc_size [ 1204.092593][ T4284] sysv_free_block: flc_count > flc_size [ 1204.094078][ T4284] sysv_free_inode: inode 0,1,2 or nonexistent inode executing program [ 1204.585754][ T4312] loop0: detected capacity change from 0 to 128 [ 1204.592725][ T4312] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 1204.595985][ T4312] syz-executor258: attempt to access beyond end of device [ 1204.595985][ T4312] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 1204.600207][ T4312] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 1204.602762][ T4312] syz-executor258: attempt to access beyond end of device [ 1204.602762][ T4312] loop0: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 1204.606486][ T4312] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 1204.608949][ T4312] syz-executor258: attempt to access beyond end of device [ 1204.608949][ T4312] loop0: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 1204.613386][ T4312] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 1204.615569][ T4312] syz-executor258: attempt to access beyond end of device [ 1204.615569][ T4312] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 1204.619104][ T4312] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 1204.621752][ T4312] syz-executor258: attempt to access beyond end of device [ 1204.621752][ T4312] loop0: rw=0, sector=6491542, nr_sectors = 2 limit=128 [ 1204.625189][ T4312] Buffer I/O error on dev loop0, logical block 3245771, async page read [ 1204.627414][ T4312] syz-executor258: attempt to access beyond end of device [ 1204.627414][ T4312] loop0: rw=0, sector=17668342, nr_sectors = 2 limit=128 [ 1204.631389][ T4312] Buffer I/O error on dev loop0, logical block 8834171, async page read [ 1204.633586][ T4312] syz-executor258: attempt to access beyond end of device [ 1204.633586][ T4312] loop0: rw=0, sector=26932834, nr_sectors = 2 limit=128 [ 1204.637133][ T4312] Buffer I/O error on dev loop0, logical block 13466417, async page read [ 1204.639257][ T4312] syz-executor258: attempt to access beyond end of device [ 1204.639257][ T4312] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 1204.643206][ T4312] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 1204.645609][ T4312] syz-executor258: attempt to access beyond end of device [ 1204.645609][ T4312] loop0: rw=0, sector=6491548, nr_sectors = 2 limit=128 [ 1204.649387][ T4312] Buffer I/O error on dev loop0, logical block 3245774, async page read [ 1204.651736][ T4312] syz-executor258: attempt to access beyond end of device [ 1204.651736][ T4312] loop0: rw=0, sector=17669878, nr_sectors = 2 limit=128 [ 1204.655504][ T4312] Buffer I/O error on dev loop0, logical block 8834939, async page read [ 1248.144100][ T4312] unable to read i-node block [ 1248.145497][ T4312] syz-executor258: attempt to access beyond end of device [ 1248.145497][ T4312] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 1248.149066][ T4312] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 1248.151279][ T4312] syz-executor258: attempt to access beyond end of device [ 1248.151279][ T4312] loop0: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 1248.154798][ T4312] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 1248.156922][ T4312] syz-executor258: attempt to access beyond end of device [ 1248.156922][ T4312] loop0: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 1248.160571][ T4312] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 1248.162734][ T4312] syz-executor258: attempt to access beyond end of device [ 1248.162734][ T4312] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 1248.166221][ T4312] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 1248.168385][ T4312] sysv_free_inode: unable to read inode block on device loop0 [ 1261.842282][ T4284] sysv_free_block: flc_count > flc_size [ 1261.843842][ T4284] sysv_free_block: flc_count > flc_size [ 1261.845222][ T4284] sysv_free_block: flc_count > flc_size [ 1261.846610][ T4284] sysv_free_block: flc_count > flc_size [ 1261.848001][ T4284] sysv_free_block: flc_count > flc_size [ 1261.849348][ T4284] sysv_free_block: flc_count > flc_size [ 1261.850927][ T4284] sysv_free_block: flc_count > flc_size [ 1261.852319][ T4284] sysv_free_block: flc_count > flc_size [ 1261.853704][ T4284] sysv_free_block: flc_count > flc_size [ 1261.855130][ T4284] sysv_free_block: flc_count > flc_size [ 1261.856594][ T4284] sysv_free_inode: inode 0,1,2 or nonexistent inode executing program [ 1262.329612][ T4322] loop0: detected capacity change from 0 to 128 [ 1262.332447][ T4322] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 1262.335157][ T4322] syz-executor258: attempt to access beyond end of device [ 1262.335157][ T4322] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 1262.338932][ T4322] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 1262.342007][ T4322] syz-executor258: attempt to access beyond end of device [ 1262.342007][ T4322] loop0: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 1262.345728][ T4322] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 1262.347927][ T4322] syz-executor258: attempt to access beyond end of device [ 1262.347927][ T4322] loop0: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 1262.351965][ T4322] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 1262.354130][ T4322] syz-executor258: attempt to access beyond end of device [ 1262.354130][ T4322] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 1262.357586][ T4322] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 1262.360002][ T4322] syz-executor258: attempt to access beyond end of device [ 1262.360002][ T4322] loop0: rw=0, sector=6491542, nr_sectors = 2 limit=128 [ 1262.363567][ T4322] Buffer I/O error on dev loop0, logical block 3245771, async page read [ 1262.365652][ T4322] syz-executor258: attempt to access beyond end of device [ 1262.365652][ T4322] loop0: rw=0, sector=17668342, nr_sectors = 2 limit=128 [ 1262.369119][ T4322] Buffer I/O error on dev loop0, logical block 8834171, async page read [ 1262.371389][ T4322] syz-executor258: attempt to access beyond end of device [ 1262.371389][ T4322] loop0: rw=0, sector=26932834, nr_sectors = 2 limit=128 [ 1262.374842][ T4322] Buffer I/O error on dev loop0, logical block 13466417, async page read [ 1262.376971][ T4322] syz-executor258: attempt to access beyond end of device [ 1262.376971][ T4322] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 1262.380587][ T4322] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 1262.382795][ T4322] syz-executor258: attempt to access beyond end of device [ 1262.382795][ T4322] loop0: rw=0, sector=6491548, nr_sectors = 2 limit=128 [ 1262.386516][ T4322] Buffer I/O error on dev loop0, logical block 3245774, async page read [ 1262.388780][ T4322] syz-executor258: attempt to access beyond end of device [ 1262.388780][ T4322] loop0: rw=0, sector=17669878, nr_sectors = 2 limit=128 [ 1262.392447][ T4322] Buffer I/O error on dev loop0, logical block 8834939, async page read [ 1319.567314][ T4284] sysv_free_block: flc_count > flc_size [ 1319.568798][ T4284] sysv_free_block: flc_count > flc_size [ 1319.570442][ T4284] sysv_free_block: flc_count > flc_size [ 1319.571946][ T4284] sysv_free_block: flc_count > flc_size [ 1319.573341][ T4284] sysv_free_block: flc_count > flc_size [ 1319.574767][ T4284] sysv_free_block: flc_count > flc_size [ 1319.576251][ T4284] sysv_free_block: flc_count > flc_size [ 1319.577737][ T4284] sysv_free_block: flc_count > flc_size [ 1319.579130][ T4284] sysv_free_block: flc_count > flc_size [ 1319.580664][ T4284] sysv_free_block: flc_count > flc_size [ 1319.582168][ T4284] sysv_free_inode: inode 0,1,2 or nonexistent inode executing program [ 1320.076972][ T4325] loop0: detected capacity change from 0 to 128 [ 1320.081226][ T4325] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 1320.086516][ T4325] syz-executor258: attempt to access beyond end of device [ 1320.086516][ T4325] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 1320.091503][ T4325] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 1320.093814][ T4325] syz-executor258: attempt to access beyond end of device [ 1320.093814][ T4325] loop0: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 1320.097633][ T4325] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 1320.100001][ T4325] syz-executor258: attempt to access beyond end of device [ 1320.100001][ T4325] loop0: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 1320.103951][ T4325] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 1320.106388][ T4325] syz-executor258: attempt to access beyond end of device [ 1320.106388][ T4325] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 1320.110300][ T4325] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 1320.112588][ T4325] syz-executor258: attempt to access beyond end of device [ 1320.112588][ T4325] loop0: rw=0, sector=6491542, nr_sectors = 2 limit=128 [ 1320.116375][ T4325] Buffer I/O error on dev loop0, logical block 3245771, async page read [ 1320.118671][ T4325] syz-executor258: attempt to access beyond end of device [ 1320.118671][ T4325] loop0: rw=0, sector=17668342, nr_sectors = 2 limit=128 [ 1320.122586][ T4325] Buffer I/O error on dev loop0, logical block 8834171, async page read [ 1320.124964][ T4325] syz-executor258: attempt to access beyond end of device [ 1320.124964][ T4325] loop0: rw=0, sector=26932834, nr_sectors = 2 limit=128 [ 1320.128651][ T4325] Buffer I/O error on dev loop0, logical block 13466417, async page read [ 1320.131047][ T4325] syz-executor258: attempt to access beyond end of device [ 1320.131047][ T4325] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 1320.134722][ T4325] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 1320.137117][ T4325] syz-executor258: attempt to access beyond end of device [ 1320.137117][ T4325] loop0: rw=0, sector=6491548, nr_sectors = 2 limit=128 [ 1320.141048][ T4325] Buffer I/O error on dev loop0, logical block 3245774, async page read [ 1320.143374][ T4325] syz-executor258: attempt to access beyond end of device [ 1320.143374][ T4325] loop0: rw=0, sector=17669878, nr_sectors = 2 limit=128 [ 1320.147188][ T4325] Buffer I/O error on dev loop0, logical block 8834939, async page read [ 1377.338387][ T4284] sysv_free_block: flc_count > flc_size [ 1377.340018][ T4284] sysv_free_block: flc_count > flc_size [ 1377.341407][ T4284] sysv_free_block: flc_count > flc_size [ 1377.342788][ T4284] sysv_free_block: flc_count > flc_size [ 1377.344183][ T4284] sysv_free_block: flc_count > flc_size [ 1377.345582][ T4284] sysv_free_block: flc_count > flc_size [ 1377.346950][ T4284] sysv_free_block: flc_count > flc_size [ 1377.348322][ T4284] sysv_free_block: flc_count > flc_size [ 1377.349843][ T4284] sysv_free_block: flc_count > flc_size [ 1377.351237][ T4284] sysv_free_block: flc_count > flc_size [ 1377.352674][ T4284] sysv_free_inode: inode 0,1,2 or nonexistent inode executing program [ 1377.827655][ T4334] loop0: detected capacity change from 0 to 128 [ 1377.830962][ T4334] VFS: Found a Xenix FS (block size = 1024) on device loop0 [ 1377.837455][ T4334] syz-executor258: attempt to access beyond end of device [ 1377.837455][ T4334] loop0: rw=0, sector=6491536, nr_sectors = 2 limit=128 [ 1377.841409][ T4334] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 1377.843647][ T4334] syz-executor258: attempt to access beyond end of device [ 1377.843647][ T4334] loop0: rw=0, sector=17666806, nr_sectors = 2 limit=128 [ 1377.847337][ T4334] Buffer I/O error on dev loop0, logical block 8833403, async page read [ 1377.849630][ T4334] syz-executor258: attempt to access beyond end of device [ 1377.849630][ T4334] loop0: rw=0, sector=26539618, nr_sectors = 2 limit=128 [ 1377.853407][ T4334] Buffer I/O error on dev loop0, logical block 13269809, async page read [ 1377.855704][ T4334] syz-executor258: attempt to access beyond end of device [ 1377.855704][ T4334] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 1377.859366][ T4334] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 1377.861804][ T4334] syz-executor258: attempt to access beyond end of device [ 1377.861804][ T4334] loop0: rw=0, sector=6491542, nr_sectors = 2 limit=128 [ 1377.865434][ T4334] Buffer I/O error on dev loop0, logical block 3245771, async page read [ 1377.867655][ T4334] syz-executor258: attempt to access beyond end of device [ 1377.867655][ T4334] loop0: rw=0, sector=17668342, nr_sectors = 2 limit=128 [ 1377.871358][ T4334] Buffer I/O error on dev loop0, logical block 8834171, async page read [ 1377.873595][ T4334] syz-executor258: attempt to access beyond end of device [ 1377.873595][ T4334] loop0: rw=0, sector=26932834, nr_sectors = 2 limit=128 [ 1377.877354][ T4334] Buffer I/O error on dev loop0, logical block 13466417, async page read [ 1377.879615][ T4334] syz-executor258: attempt to access beyond end of device [ 1377.879615][ T4334] loop0: rw=0, sector=16147212, nr_sectors = 2 limit=128 [ 1377.883415][ T4334] Buffer I/O error on dev loop0, logical block 8073606, async page read [ 1377.885895][ T4334] syz-executor258: attempt to access beyond end of device [ 1377.885895][ T4334] loop0: rw=0, sector=6491548, nr_sectors = 2 limit=128 [ 1377.889566][ T4334] Buffer I/O error on dev loop0, logical block 3245774, async page read [ 1377.891908][ T4334] syz-executor258: attempt to access beyond end of device [ 1377.891908][ T4334] loop0: rw=0, sector=17669878, nr_sectors = 2 limit=128 [ 1377.895825][ T4334] Buffer I/O error on dev loop0, logical block 8834939, async page read [ 1420.899775][ T4334] ================================================================== [ 1420.901997][ T4334] BUG: KASAN: use-after-free in sysv_new_inode+0xd8c/0xf04 [ 1420.903947][ T4334] Read of size 2 at addr ffff0000e00081ce by task syz-executor258/4334 [ 1420.906118][ T4334] [ 1420.906679][ T4334] CPU: 1 PID: 4334 Comm: syz-executor258 Not tainted 6.1.90-syzkaller #0 [ 1420.908915][ T4334] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/27/2024 [ 1420.911621][ T4334] Call trace: [ 1420.912482][ T4334] dump_backtrace+0x1c8/0x1f4 [ 1420.913704][ T4334] show_stack+0x2c/0x3c [ 1420.914824][ T4334] dump_stack_lvl+0x108/0x170 [ 1420.916101][ T4334] print_report+0x174/0x4c0 [ 1420.917340][ T4334] kasan_report+0xd4/0x130 [ 1420.918501][ T4334] __asan_report_load2_noabort+0x2c/0x38 [ 1420.919995][ T4334] sysv_new_inode+0xd8c/0xf04 [ 1420.921255][ T4334] sysv_mknod+0x5c/0x100 [ 1420.922353][ T4334] sysv_create+0x38/0x4c [ 1420.923481][ T4334] path_openat+0xeac/0x2548 [ 1420.924620][ T4334] do_filp_open+0x1bc/0x3cc [ 1420.925767][ T4334] do_sys_openat2+0x128/0x3d8 [ 1420.926975][ T4334] __arm64_sys_openat+0x1f0/0x240 [ 1420.928317][ T4334] invoke_syscall+0x98/0x2c0 [ 1420.929509][ T4334] el0_svc_common+0x138/0x258 [ 1420.930761][ T4334] do_el0_svc+0x64/0x218 [ 1420.931888][ T4334] el0_svc+0x58/0x168 [ 1420.932897][ T4334] el0t_64_sync_handler+0x84/0xf0 [ 1420.934267][ T4334] el0t_64_sync+0x18c/0x190 [ 1420.935517][ T4334] [ 1420.936143][ T4334] The buggy address belongs to the physical page: [ 1420.937830][ T4334] page:00000000e2a5887f refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x120008 [ 1420.940601][ T4334] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 1420.942489][ T4334] raw: 05ffc00000000000 dead000000000100 dead000000000122 0000000000000000 [ 1420.944788][ T4334] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 1420.947026][ T4334] page dumped because: kasan: bad access detected [ 1420.948723][ T4334] [ 1420.949321][ T4334] Memory state around the buggy address: [ 1420.950784][ T4334] ffff0000e0008080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1420.952844][ T4334] ffff0000e0008100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1420.954948][ T4334] >ffff0000e0008180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1420.956993][ T4334] ^ [ 1420.958597][ T4334] ffff0000e0008200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1420.960740][ T4334] ffff0000e0008280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 1420.962907][ T4334] ================================================================== [ 1420.965191][ T4334] Disabling lock debugging due to kernel taint