Warning: Permanently added '10.128.0.41' (ED25519) to the list of known hosts. 2026/04/13 04:19:40 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 95.391866][ T4599] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 97.351574][ T4633] chnl_net:caif_netlink_parms(): no params data found [ 97.410708][ T4633] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.418159][ T4633] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.426624][ T4633] device bridge_slave_0 entered promiscuous mode [ 97.435662][ T4633] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.443030][ T4633] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.452132][ T4633] device bridge_slave_1 entered promiscuous mode [ 97.479819][ T4633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 97.492969][ T4633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 97.529906][ T4633] team0: Port device team_slave_0 added [ 97.538159][ T4633] team0: Port device team_slave_1 added [ 97.563262][ T4633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 97.572448][ T4633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.600510][ T4633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 97.617078][ T4633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 97.624150][ T4633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 97.656193][ T4633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 97.704422][ T4633] device hsr_slave_0 entered promiscuous mode [ 97.712188][ T4633] device hsr_slave_1 entered promiscuous mode [ 98.313470][ T4633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 98.324609][ T4633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 98.339755][ T4633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 98.351613][ T4633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 98.384362][ T4633] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.391870][ T4633] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.399561][ T4633] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.406947][ T4633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.425980][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.434167][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.488072][ T4633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.504088][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 98.517487][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 98.529743][ T4633] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.543331][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 98.556615][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 98.565984][ T155] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.573276][ T155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.597419][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 98.609150][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 98.620067][ T155] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.627806][ T155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.638961][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 98.649323][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 98.658982][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 98.674026][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 98.699876][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 98.716335][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 98.731535][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 98.740968][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 98.751897][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 98.764716][ T4633] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 98.777816][ T4633] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 98.788749][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 98.799913][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 98.917379][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 98.925836][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 98.942549][ T4633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.976757][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 98.986208][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 99.008365][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 99.018809][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 99.031529][ T4633] device veth0_vlan entered promiscuous mode [ 99.053251][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 99.062940][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 99.077364][ T4633] device veth1_vlan entered promiscuous mode [ 99.119595][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 99.128876][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 99.137803][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 99.148521][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 99.161018][ T4633] device veth0_macvtap entered promiscuous mode [ 99.185583][ T4633] device veth1_macvtap entered promiscuous mode [ 99.204843][ T4633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.213927][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 99.223952][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 99.234240][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 99.244021][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 99.257015][ T4633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.264336][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 99.273684][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 99.299382][ T4633] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.309724][ T4633] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.319764][ T4633] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.328814][ T4633] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.416828][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.433309][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.456525][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.515084][ T4307] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.526478][ T4307] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.540198][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 101.941349][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/04/13 04:19:50 executed programs: 0 [ 102.431773][ T4823] chnl_net:caif_netlink_parms(): no params data found [ 102.492620][ T4823] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.500731][ T4823] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.510153][ T4823] device bridge_slave_0 entered promiscuous mode [ 102.519453][ T4823] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.527360][ T4823] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.536431][ T4823] device bridge_slave_1 entered promiscuous mode [ 102.571296][ T4823] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.583608][ T4823] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.614474][ T4823] team0: Port device team_slave_0 added [ 102.624101][ T4823] team0: Port device team_slave_1 added [ 102.656214][ T4823] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 102.664852][ T4823] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.694778][ T4823] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.712500][ T4823] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.720910][ T4823] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.751490][ T4823] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.800560][ T4823] device hsr_slave_0 entered promiscuous mode [ 102.812041][ T4823] device hsr_slave_1 entered promiscuous mode [ 102.820059][ T4823] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 102.832707][ T4823] Cannot create hsr debugfs directory [ 103.901761][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 103.943356][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.006969][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.305748][ T4951] Bluetooth: hci0: command 0x0409 tx timeout [ 104.799378][ T4823] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 104.838953][ T4823] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 104.848884][ T4823] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 104.862923][ T4823] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.963500][ T4823] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.009074][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 105.019455][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 105.030899][ T4823] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.044658][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 105.054197][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 105.065944][ T1482] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.073369][ T1482] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.085154][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 105.120722][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 105.130831][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 105.142695][ T1482] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.150804][ T1482] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.163084][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 105.174024][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 105.186084][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 105.196561][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 105.229306][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 105.238386][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 105.249606][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 105.298476][ T4823] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 105.310481][ T4823] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.326758][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 105.335642][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 105.347962][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 105.358798][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 105.373725][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 105.557483][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 105.568682][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 105.583191][ T4823] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.634789][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 105.644598][ T1482] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 105.677138][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 105.687692][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 105.700902][ T4823] device veth0_vlan entered promiscuous mode [ 105.709622][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 105.720347][ T4307] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 105.735232][ T4823] device veth1_vlan entered promiscuous mode [ 105.773177][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 105.782315][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 105.794135][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 105.804539][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 105.818581][ T4823] device veth0_macvtap entered promiscuous mode [ 105.867965][ T4823] device veth1_macvtap entered promiscuous mode [ 105.892651][ T4823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.908199][ T4823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.923829][ T4823] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.935222][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 105.944227][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 105.955863][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 105.968677][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 105.982418][ T4823] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.994645][ T4823] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.008635][ T4823] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.022250][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 106.048276][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 106.065881][ T144] device hsr_slave_0 left promiscuous mode [ 106.073967][ T144] device hsr_slave_1 left promiscuous mode [ 106.081275][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.091645][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.101531][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.112446][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.123339][ T144] device bridge_slave_1 left promiscuous mode [ 106.132856][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.142717][ T144] device bridge_slave_0 left promiscuous mode [ 106.152358][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.168167][ T144] device veth1_macvtap left promiscuous mode [ 106.175563][ T144] device veth0_macvtap left promiscuous mode [ 106.181934][ T144] device veth1_vlan left promiscuous mode [ 106.188263][ T144] device veth0_vlan left promiscuous mode [ 106.327856][ T144] team0 (unregistering): Port device team_slave_1 removed [ 106.343122][ T144] team0 (unregistering): Port device team_slave_0 removed [ 106.356650][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.370581][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.385347][ T4249] Bluetooth: hci0: command 0x041b tx timeout [ 106.424499][ T144] bond0 (unregistering): Released all slaves [ 106.470189][ T4823] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.480720][ T4823] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.490754][ T4823] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.502119][ T4823] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.603817][ T4307] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.616089][ T4307] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.628607][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 106.657548][ T155] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.674312][ T155] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.683571][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 106.751322][ T5042] loop0: detected capacity change from 0 to 128 [ 106.829297][ T5042] attempt to access beyond end of device [ 106.829297][ T5042] loop0: rw=0, want=6491538, limit=128 [ 106.845487][ T5042] Buffer I/O error on dev loop0, logical block 3245768, async page read [ 106.870715][ T5042] ================================================================== [ 106.879905][ T5042] BUG: KASAN: use-after-free in sysv_new_inode+0x1130/0x12c0 [ 106.889014][ T5042] Read of size 2 at addr ffff8880603bc1ce by task syz.0.17/5042 [ 106.897536][ T5042] [ 106.900716][ T5042] CPU: 1 PID: 5042 Comm: syz.0.17 Not tainted syzkaller #0 [ 106.909334][ T5042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 106.920060][ T5042] Call Trace: [ 106.923756][ T5042] [ 106.927303][ T5042] dump_stack_lvl+0x188/0x250 [ 106.932327][ T5042] ? show_regs_print_info+0x20/0x20 [ 106.937743][ T5042] ? load_image+0x400/0x400 [ 106.942448][ T5042] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 106.948305][ T5042] ? mutex_lock_io_nested+0x60/0x60 [ 106.953532][ T5042] print_address_description+0x60/0x2d0 [ 106.959188][ T5042] ? sysv_new_inode+0x1130/0x12c0 [ 106.964310][ T5042] kasan_report+0xdf/0x130 [ 106.968956][ T5042] ? sysv_new_inode+0x1130/0x12c0 [ 106.974186][ T5042] sysv_new_inode+0x1130/0x12c0 [ 106.979352][ T5042] ? from_kgid+0x169/0x690 [ 106.983900][ T5042] ? make_kgid+0x660/0x660 [ 106.988447][ T5042] ? sysv_free_inode+0x7e0/0x7e0 [ 106.993498][ T5042] ? generic_permission+0x292/0x510 [ 106.999004][ T5042] sysv_symlink+0x9b/0x150 [ 107.003971][ T5042] vfs_symlink+0x247/0x3d0 [ 107.008454][ T5042] do_symlinkat+0x1ab/0x6b0 [ 107.013585][ T5042] ? vfs_symlink+0x3d0/0x3d0 [ 107.018292][ T5042] ? getname_flags+0x1fe/0x500 [ 107.023569][ T5042] __x64_sys_symlink+0x7a/0x90 [ 107.028361][ T5042] do_syscall_64+0x4c/0xa0 [ 107.032897][ T5042] ? clear_bhb_loop+0x30/0x80 [ 107.037685][ T5042] ? clear_bhb_loop+0x30/0x80 [ 107.043028][ T5042] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.049149][ T5042] RIP: 0033:0x7f5543011ef9 [ 107.053596][ T5042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.074063][ T5042] RSP: 002b:00007f5542675028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 107.082728][ T5042] RAX: ffffffffffffffda RBX: 00007f554327cfa0 RCX: 00007f5543011ef9 [ 107.090802][ T5042] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000040 [ 107.098986][ T5042] RBP: 00007f55430a6ee0 R08: 0000000000000000 R09: 0000000000000000 [ 107.107661][ T5042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.115692][ T5042] R13: 00007f554327d038 R14: 00007f554327cfa0 R15: 00007fff860505e8 [ 107.124188][ T5042] [ 107.127319][ T5042] [ 107.129821][ T5042] The buggy address belongs to the page: [ 107.135462][ T5042] page:ffffea000180ef00 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x603bc [ 107.146337][ T5042] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 107.153703][ T5042] raw: 00fff00000000000 ffffea0001a927c8 ffffea00018066c8 0000000000000000 [ 107.162514][ T5042] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 107.171218][ T5042] page dumped because: kasan: bad access detected [ 107.177866][ T5042] page_owner tracks the page as freed [ 107.183419][ T5042] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 4954, ts 104380566247, free_ts 104385766444 [ 107.200009][ T5042] get_page_from_freelist+0x1bbd/0x1ca0 [ 107.206578][ T5042] __alloc_pages+0x1ee/0x480 [ 107.211538][ T5042] alloc_pages_vma+0x393/0x7c0 [ 107.217830][ T5042] handle_mm_fault+0x23be/0x4410 [ 107.223234][ T5042] do_user_addr_fault+0x489/0xc80 [ 107.229317][ T5042] exc_page_fault+0x60/0x100 [ 107.234276][ T5042] asm_exc_page_fault+0x22/0x30 [ 107.239153][ T5042] page last free stack trace: [ 107.243949][ T5042] free_unref_page_prepare+0x637/0x6c0 [ 107.249515][ T5042] free_unref_page_list+0x119/0x820 [ 107.254824][ T5042] release_pages+0x186c/0x1be0 [ 107.260387][ T5042] tlb_finish_mmu+0x176/0x300 [ 107.265257][ T5042] exit_mmap+0x3d0/0x640 [ 107.269604][ T5042] __mmput+0x115/0x3b0 [ 107.273779][ T5042] exit_mm+0x588/0x6e0 [ 107.278128][ T5042] do_exit+0x5a9/0x20c0 [ 107.282492][ T5042] do_group_exit+0x12e/0x300 [ 107.287604][ T5042] __x64_sys_exit_group+0x3b/0x40 [ 107.292748][ T5042] do_syscall_64+0x4c/0xa0 [ 107.297801][ T5042] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.304260][ T5042] [ 107.306587][ T5042] Memory state around the buggy address: [ 107.312247][ T5042] ffff8880603bc080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 107.320605][ T5042] ffff8880603bc100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 107.329038][ T5042] >ffff8880603bc180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 107.337331][ T5042] ^ [ 107.344720][ T5042] ffff8880603bc200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 107.353521][ T5042] ffff8880603bc280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 107.362333][ T5042] ================================================================== [ 107.371754][ T5042] Disabling lock debugging due to kernel taint [ 107.391001][ T5042] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 107.400196][ T5042] CPU: 1 PID: 5042 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 107.410175][ T5042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 107.421226][ T5042] Call Trace: [ 107.424735][ T5042] [ 107.428179][ T5042] dump_stack_lvl+0x188/0x250 [ 107.433175][ T5042] ? show_regs_print_info+0x20/0x20 [ 107.439277][ T5042] ? load_image+0x400/0x400 [ 107.444161][ T5042] panic+0x2e5/0x810 [ 107.449023][ T5042] ? bpf_jit_dump+0xd0/0xd0 [ 107.454465][ T5042] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 107.461639][ T5042] ? _raw_spin_unlock+0x40/0x40 [ 107.467301][ T5042] ? sysv_new_inode+0x1130/0x12c0 [ 107.473624][ T5042] check_panic_on_warn+0x80/0xa0 [ 107.478878][ T5042] ? sysv_new_inode+0x1130/0x12c0 [ 107.484276][ T5042] end_report+0x6d/0xf0 [ 107.488824][ T5042] kasan_report+0x102/0x130 [ 107.494184][ T5042] ? sysv_new_inode+0x1130/0x12c0 [ 107.501114][ T5042] sysv_new_inode+0x1130/0x12c0 [ 107.506676][ T5042] ? from_kgid+0x169/0x690 [ 107.511514][ T5042] ? make_kgid+0x660/0x660 [ 107.516437][ T5042] ? sysv_free_inode+0x7e0/0x7e0 [ 107.521570][ T5042] ? generic_permission+0x292/0x510 [ 107.527399][ T5042] sysv_symlink+0x9b/0x150 [ 107.532815][ T5042] vfs_symlink+0x247/0x3d0 [ 107.538067][ T5042] do_symlinkat+0x1ab/0x6b0 [ 107.543389][ T5042] ? vfs_symlink+0x3d0/0x3d0 [ 107.549003][ T5042] ? getname_flags+0x1fe/0x500 [ 107.554677][ T5042] __x64_sys_symlink+0x7a/0x90 [ 107.560421][ T5042] do_syscall_64+0x4c/0xa0 [ 107.568910][ T5042] ? clear_bhb_loop+0x30/0x80 [ 107.574290][ T5042] ? clear_bhb_loop+0x30/0x80 [ 107.579793][ T5042] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 107.586336][ T5042] RIP: 0033:0x7f5543011ef9 [ 107.591868][ T5042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 107.615895][ T5042] RSP: 002b:00007f5542675028 EFLAGS: 00000246 ORIG_RAX: 0000000000000058 [ 107.626472][ T5042] RAX: ffffffffffffffda RBX: 00007f554327cfa0 RCX: 00007f5543011ef9 [ 107.635484][ T5042] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000200000000040 [ 107.644598][ T5042] RBP: 00007f55430a6ee0 R08: 0000000000000000 R09: 0000000000000000 [ 107.656650][ T5042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.666104][ T5042] R13: 00007f554327d038 R14: 00007f554327cfa0 R15: 00007fff860505e8 [ 107.676397][ T5042] [ 107.680986][ T5042] Kernel Offset: disabled [ 107.685661][ T5042] Rebooting in 86400 seconds..