Warning: Permanently added '10.128.0.56' (ED25519) to the list of known hosts.
2026/01/07 17:14:11 parsed 1 programs
[ 114.839790][ T5786] cgroup: Unknown subsys name 'net'
[ 114.996608][ T5786] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 117.846089][ T5786] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 123.514466][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 123.539216][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 123.623378][ T2939] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 123.640300][ T2939] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 126.053534][ T5841] chnl_net:caif_netlink_parms(): no params data found
[ 126.352922][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state
[ 126.369907][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state
[ 126.385334][ T5841] bridge_slave_0: entered allmulticast mode
[ 126.412556][ T5841] bridge_slave_0: entered promiscuous mode
[ 126.435387][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state
[ 126.450207][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state
[ 126.464800][ T5841] bridge_slave_1: entered allmulticast mode
[ 126.485825][ T5841] bridge_slave_1: entered promiscuous mode
[ 126.564963][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 126.585433][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 126.659946][ T5841] team0: Port device team_slave_0 added
[ 126.674923][ T5841] team0: Port device team_slave_1 added
[ 126.746273][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 126.756357][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 126.813558][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 126.845330][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 126.855189][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 126.902822][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 127.004091][ T5841] hsr_slave_0: entered promiscuous mode
[ 127.012765][ T5841] hsr_slave_1: entered promiscuous mode
[ 127.354668][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 127.386764][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 127.402981][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 127.419574][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 127.637505][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0
[ 127.691594][ T5841] 8021q: adding VLAN 0 to HW filter on device team0
[ 127.738858][ T59] bridge0: port 1(bridge_slave_0) entered blocking state
[ 127.754266][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 127.782444][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 127.796916][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 128.215278][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 128.319080][ T5841] veth0_vlan: entered promiscuous mode
[ 128.358095][ T5841] veth1_vlan: entered promiscuous mode
[ 128.437924][ T5841] veth0_macvtap: entered promiscuous mode
[ 128.453443][ T5841] veth1_macvtap: entered promiscuous mode
[ 128.505768][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 128.538335][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 128.559127][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.572905][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.587670][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.600851][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 128.940193][ T2939] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 128.992182][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 129.009079][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 129.032910][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 129.047014][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 129.063775][ T51] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 129.084941][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 130.963499][ T2939] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/01/07 17:14:32 executed programs: 0
[ 131.860791][ T5083] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 131.874286][ T5083] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 131.888077][ T5083] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 131.900994][ T5083] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 131.919907][ T5083] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 131.934626][ T5083] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 132.259957][ T5889] chnl_net:caif_netlink_parms(): no params data found
[ 132.426173][ T5889] bridge0: port 1(bridge_slave_0) entered blocking state
[ 132.437055][ T5889] bridge0: port 1(bridge_slave_0) entered disabled state
[ 132.449222][ T5889] bridge_slave_0: entered allmulticast mode
[ 132.464598][ T5889] bridge_slave_0: entered promiscuous mode
[ 132.477296][ T5889] bridge0: port 2(bridge_slave_1) entered blocking state
[ 132.489755][ T5889] bridge0: port 2(bridge_slave_1) entered disabled state
[ 132.502639][ T5889] bridge_slave_1: entered allmulticast mode
[ 132.514756][ T5889] bridge_slave_1: entered promiscuous mode
[ 132.588166][ T5889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 132.612780][ T5889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 132.679767][ T5889] team0: Port device team_slave_0 added
[ 132.697600][ T5889] team0: Port device team_slave_1 added
[ 132.769265][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 132.786428][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 132.844426][ T5889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 132.876184][ T5889] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 132.891559][ T5889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 132.931718][ T5889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 133.024182][ T5889] hsr_slave_0: entered promiscuous mode
[ 133.033965][ T5889] hsr_slave_1: entered promiscuous mode
[ 133.044566][ T5889] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 133.059403][ T5889] Cannot create hsr debugfs directory
[ 133.200473][ T1280] ieee802154 phy0 wpan0: encryption failed: -22
[ 133.220580][ T1280] ieee802154 phy1 wpan1: encryption failed: -22
[ 133.276620][ T2939] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 133.393042][ T2939] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 133.982444][ T5083] Bluetooth: hci0: command tx timeout
[ 134.546110][ T5889] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 134.560062][ T5889] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 134.575767][ T5889] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 134.594557][ T5889] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 134.697245][ T2939] hsr_slave_0: left promiscuous mode
[ 134.708187][ T2939] hsr_slave_1: left promiscuous mode
[ 134.723138][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 134.733644][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 134.749987][ T2939] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 134.762344][ T2939] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 134.774242][ T2939] bridge_slave_1: left allmulticast mode
[ 134.785072][ T2939] bridge_slave_1: left promiscuous mode
[ 134.796773][ T2939] bridge0: port 2(bridge_slave_1) entered disabled state
[ 134.824192][ T2939] bridge_slave_0: left allmulticast mode
[ 134.833022][ T2939] bridge_slave_0: left promiscuous mode
[ 134.845945][ T2939] bridge0: port 1(bridge_slave_0) entered disabled state
[ 134.879730][ T2939] veth1_macvtap: left promiscuous mode
[ 134.890614][ T2939] veth0_macvtap: left promiscuous mode
[ 134.899362][ T2939] veth1_vlan: left promiscuous mode
[ 134.910363][ T2939] veth0_vlan: left promiscuous mode
[ 135.715368][ T2939] team0 (unregistering): Port device team_slave_1 removed
[ 135.798071][ T2939] team0 (unregistering): Port device team_slave_0 removed
[ 135.859460][ T2939] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 135.917677][ T2939] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 136.061434][ T5083] Bluetooth: hci0: command tx timeout
[ 136.526027][ T2939] bond0 (unregistering): Released all slaves
[ 136.729485][ T5889] 8021q: adding VLAN 0 to HW filter on device bond0
[ 136.810042][ T5889] 8021q: adding VLAN 0 to HW filter on device team0
[ 136.832788][ T59] bridge0: port 1(bridge_slave_0) entered blocking state
[ 136.843335][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 136.901876][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 136.911003][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 137.465650][ T5889] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 137.687452][ T5889] veth0_vlan: entered promiscuous mode
[ 137.769326][ T5889] veth1_vlan: entered promiscuous mode
[ 137.925492][ T5889] veth0_macvtap: entered promiscuous mode
[ 137.990158][ T5889] veth1_macvtap: entered promiscuous mode
[ 138.085595][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 138.115314][ T5889] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 138.140941][ T5083] Bluetooth: hci0: command tx timeout
[ 138.192290][ T5889] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 138.206127][ T5889] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 138.217591][ T5889] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 138.230276][ T5889] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 138.468614][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 138.494317][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 138.588784][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 138.600356][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2026/01/07 17:14:39 executed programs: 2
[ 138.724229][ T5935] syz.0.17[5935]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 138.752319][ T5935] loop0: detected capacity change from 0 to 128
[ 138.811475][ T5935] VFS: Found a Xenix FS (block size = 1024) on device loop0
[ 138.909105][ T5935] syz.0.17: attempt to access beyond end of device
[ 138.909105][ T5935] loop0: rw=2049, sector=6491536, nr_sectors = 2 limit=128
[ 138.934186][ T5935] Buffer I/O error on dev loop0, logical block 3245768, lost async page write
[ 138.983705][ T5889] sysv_free_block: flc_count > flc_size
[ 138.992292][ T5889] sysv_free_block: flc_count > flc_size
[ 139.002182][ T5889] sysv_free_block: flc_count > flc_size
[ 139.012627][ T5889] sysv_free_block: flc_count > flc_size
[ 139.020221][ T5889] sysv_free_block: flc_count > flc_size
[ 139.029198][ T5889] sysv_free_block: flc_count > flc_size
[ 139.040070][ T5889] sysv_free_block: flc_count > flc_size
[ 139.046793][ T5889] sysv_free_block: flc_count > flc_size
[ 139.055301][ T5889] sysv_free_block: flc_count > flc_size
[ 139.063440][ T5889] sysv_free_block: flc_count > flc_size
[ 139.072430][ T5889] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 139.136246][ T5936] loop0: detected capacity change from 0 to 128
[ 139.153363][ T5936] VFS: Found a Xenix FS (block size = 1024) on device loop0
[ 139.186013][ T5936] syz.0.18: attempt to access beyond end of device
[ 139.186013][ T5936] loop0: rw=2049, sector=6491536, nr_sectors = 2 limit=128
[ 139.205749][ T5936] Buffer I/O error on dev loop0, logical block 3245768, lost async page write
[ 139.226846][ T5889] sysv_free_block: flc_count > flc_size
[ 139.235658][ T5889] sysv_free_block: flc_count > flc_size
[ 139.244768][ T5889] sysv_free_block: flc_count > flc_size
[ 139.255215][ T5889] sysv_free_block: flc_count > flc_size
[ 139.265162][ T5889] sysv_free_block: flc_count > flc_size
[ 139.274482][ T5889] sysv_free_block: flc_count > flc_size
[ 139.282123][ T5889] sysv_free_block: flc_count > flc_size
[ 139.289614][ T5889] sysv_free_block: flc_count > flc_size
[ 139.297949][ T5889] sysv_free_block: flc_count > flc_size
[ 139.307222][ T5889] sysv_free_block: flc_count > flc_size
[ 139.318799][ T5889] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 139.416436][ T5939] loop0: detected capacity change from 0 to 128
[ 139.435110][ T5939] VFS: Found a Xenix FS (block size = 1024) on device loop0
[ 139.487986][ T5939] syz.0.19: attempt to access beyond end of device
[ 139.487986][ T5939] loop0: rw=2049, sector=6491536, nr_sectors = 2 limit=128
[ 139.512905][ T5939] Buffer I/O error on dev loop0, logical block 3245768, lost async page write
[ 139.538797][ T5889] sysv_free_block: flc_count > flc_size
[ 139.553933][ T5889] sysv_free_block: flc_count > flc_size
[ 139.563700][ T5889] sysv_free_block: flc_count > flc_size
[ 139.572077][ T5889] sysv_free_block: flc_count > flc_size
[ 139.579387][ T5889] sysv_free_block: flc_count > flc_size
[ 139.595626][ T5889] sysv_free_block: flc_count > flc_size
[ 139.604548][ T5889] sysv_free_block: flc_count > flc_size
[ 139.618144][ T5889] sysv_free_block: flc_count > flc_size
[ 139.632839][ T5889] sysv_free_block: flc_count > flc_size
[ 139.644064][ T5889] sysv_free_block: flc_count > flc_size
[ 139.659073][ T5889] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 139.777727][ T5941] loop0: detected capacity change from 0 to 128
[ 139.798918][ T5941] VFS: Found a Xenix FS (block size = 1024) on device loop0
[ 139.841047][ T5941] syz.0.20: attempt to access beyond end of device
[ 139.841047][ T5941] loop0: rw=2049, sector=6491536, nr_sectors = 2 limit=128
[ 139.859633][ T5941] Buffer I/O error on dev loop0, logical block 3245768, lost async page write
[ 139.911054][ T5889] sysv_free_block: flc_count > flc_size
[ 139.939441][ T5889] sysv_free_block: flc_count > flc_size
[ 139.949029][ T5889] sysv_free_block: flc_count > flc_size
[ 139.962094][ T5889] sysv_free_block: flc_count > flc_size
[ 139.969755][ T5889] sysv_free_block: flc_count > flc_size
[ 139.987149][ T5889] sysv_free_block: flc_count > flc_size
[ 139.997860][ T5889] sysv_free_block: flc_count > flc_size
[ 140.008292][ T5889] sysv_free_block: flc_count > flc_size
[ 140.016262][ T5889] sysv_free_block: flc_count > flc_size
[ 140.027456][ T5889] sysv_free_block: flc_count > flc_size
[ 140.036301][ T5889] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 140.108070][ T5944] loop0: detected capacity change from 0 to 128
[ 140.124206][ T5944] VFS: Found a Xenix FS (block size = 1024) on device loop0
[ 140.167635][ T5944] syz.0.21: attempt to access beyond end of device
[ 140.167635][ T5944] loop0: rw=2049, sector=6491536, nr_sectors = 2 limit=128
[ 140.192128][ T5944] Buffer I/O error on dev loop0, logical block 3245768, lost async page write
[ 140.219393][ T5889] sysv_free_block: flc_count > flc_size
[ 140.228990][ T5083] Bluetooth: hci0: command tx timeout
[ 140.238984][ T5889] sysv_free_block: flc_count > flc_size
[ 140.247791][ T5889] sysv_free_block: flc_count > flc_size
[ 140.260535][ T5889] sysv_free_block: flc_count > flc_size
[ 140.269604][ T5889] sysv_free_block: flc_count > flc_size
[ 140.289183][ T5889] sysv_free_block: flc_count > flc_size
[ 140.301997][ T5889] sysv_free_block: flc_count > flc_size
[ 140.309524][ T5889] sysv_free_block: flc_count > flc_size
[ 140.317488][ T5889] sysv_free_block: flc_count > flc_size
[ 140.326035][ T5889] sysv_free_block: flc_count > flc_size
[ 140.337036][ T5889] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 140.388333][ T5945] loop0: detected capacity change from 0 to 128
[ 140.404464][ T5945] VFS: Found a Xenix FS (block size = 1024) on device loop0
[ 140.443045][ T5945] syz.0.22: attempt to access beyond end of device
[ 140.443045][ T5945] loop0: rw=2049, sector=6491536, nr_sectors = 2 limit=128
[ 140.472566][ T5945] Buffer I/O error on dev loop0, logical block 3245768, lost async page write
[ 140.498402][ T5889] sysv_free_block: flc_count > flc_size
[ 140.520703][ T5889] sysv_free_block: flc_count > flc_size
[ 140.539296][ T5889] sysv_free_block: flc_count > flc_size
[ 140.565819][ T5889] sysv_free_block: flc_count > flc_size
[ 140.575557][ T5889] sysv_free_block: flc_count > flc_size
[ 140.595018][ T5889] sysv_free_block: flc_count > flc_size
[ 140.605868][ T5889] sysv_free_block: flc_count > flc_size
[ 140.619227][ T5889] sysv_free_block: flc_count > flc_size
[ 140.629869][ T5889] sysv_free_block: flc_count > flc_size
[ 140.648999][ T5889] sysv_free_block: flc_count > flc_size
[ 140.663778][ T5889] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 140.744793][ T5947] loop0: detected capacity change from 0 to 128
[ 140.760912][ T5947] VFS: Found a Xenix FS (block size = 1024) on device loop0
[ 140.828334][ T5947] syz.0.23: attempt to access beyond end of device
[ 140.828334][ T5947] loop0: rw=2049, sector=6491536, nr_sectors = 2 limit=128
[ 140.856244][ T5947] Buffer I/O error on dev loop0, logical block 3245768, lost async page write
[ 140.887410][ T5889] sysv_free_block: flc_count > flc_size
[ 140.901824][ T5889] sysv_free_block: flc_count > flc_size
[ 140.911017][ T5889] sysv_free_block: flc_count > flc_size
[ 140.920391][ T5889] sysv_free_block: flc_count > flc_size
[ 140.933855][ T5889] sysv_free_block: flc_count > flc_size
[ 140.962133][ T5889] sysv_free_block: flc_count > flc_size
[ 140.976632][ T5889] sysv_free_block: flc_count > flc_size
[ 140.988025][ T5889] sysv_free_block: flc_count > flc_size
[ 141.002807][ T5889] sysv_free_block: flc_count > flc_size
[ 141.012334][ T5889] sysv_free_block: flc_count > flc_size
[ 141.028815][ T5889] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 141.220884][ T5949] loop0: detected capacity change from 0 to 128
[ 141.239712][ T5949] VFS: Found a Xenix FS (block size = 1024) on device loop0
[ 141.303608][ T5949] syz.0.25: attempt to access beyond end of device
[ 141.303608][ T5949] loop0: rw=2049, sector=6491536, nr_sectors = 2 limit=128
[ 141.343235][ T5949] Buffer I/O error on dev loop0, logical block 3245768, lost async page write
[ 141.374048][ T5889] sysv_free_block: flc_count > flc_size
[ 141.392526][ T5889] sysv_free_block: flc_count > flc_size
[ 141.403997][ T5889] sysv_free_block: flc_count > flc_size
[ 141.412813][ T5889] sysv_free_block: flc_count > flc_size
[ 141.424409][ T5889] sysv_free_block: flc_count > flc_size
[ 141.433704][ T5889] sysv_free_block: flc_count > flc_size
[ 141.445256][ T5889] sysv_free_block: flc_count > flc_size
[ 141.458934][ T5889] sysv_free_block: flc_count > flc_size
[ 141.466703][ T5889] sysv_free_block: flc_count > flc_size
[ 141.474853][ T5889] sysv_free_block: flc_count > flc_size
[ 141.486465][ T5889] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 141.547719][ T5950] loop0: detected capacity change from 0 to 128
[ 141.564488][ T5950] VFS: Found a Xenix FS (block size = 1024) on device loop0
[ 141.586333][ T5950] unable to read i-node block
[ 141.597556][ T5950] syz.0.26: attempt to access beyond end of device
[ 141.597556][ T5950] loop0: rw=2049, sector=6491536, nr_sectors = 2 limit=128
[ 141.625644][ T5950] Buffer I/O error on dev loop0, logical block 3245768, lost async page write
[ 141.645163][ T5950] sysv_free_inode: unable to read inode block on device loop0
[ 141.675492][ T5889] sysv_free_block: flc_count > flc_size
[ 141.684818][ T5889] sysv_free_block: flc_count > flc_size
[ 141.693007][ T5889] sysv_free_block: flc_count > flc_size
[ 141.704827][ T5889] sysv_free_block: flc_count > flc_size
[ 141.715026][ T5889] sysv_free_block: flc_count > flc_size
[ 141.733974][ T5889] sysv_free_block: flc_count > flc_size
[ 141.748265][ T5889] sysv_free_block: flc_count > flc_size
[ 141.764677][ T5889] sysv_free_block: flc_count > flc_size
[ 141.772601][ T5889] sysv_free_block: flc_count > flc_size
[ 141.787737][ T5889] sysv_free_block: flc_count > flc_size
[ 141.811770][ T5889] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 141.947609][ T5952] loop0: detected capacity change from 0 to 128
[ 141.968911][ T5952] VFS: Found a Xenix FS (block size = 1024) on device loop0
[ 141.997931][ T5952] unable to read i-node block
[ 142.006922][ T5952] syz.0.28: attempt to access beyond end of device
[ 142.006922][ T5952] loop0: rw=2049, sector=6491536, nr_sectors = 2 limit=128
[ 142.027044][ T5952] Buffer I/O error on dev loop0, logical block 3245768, lost async page write
[ 142.045194][ T5952] sysv_free_inode: unable to read inode block on device loop0
[ 142.079562][ T5889] sysv_free_block: flc_count > flc_size
[ 142.096993][ T5889] sysv_free_block: flc_count > flc_size
[ 142.105178][ T5889] sysv_free_block: flc_count > flc_size
[ 142.114918][ T5889] sysv_free_block: flc_count > flc_size
[ 142.136602][ T5889] sysv_free_block: flc_count > flc_size
[ 142.148775][ T5889] sysv_free_block: flc_count > flc_size
[ 142.159423][ T5889] sysv_free_block: flc_count > flc_size
[ 142.172989][ T5889] sysv_free_block: flc_count > flc_size
[ 142.185976][ T5889] sysv_free_block: flc_count > flc_size
[ 142.202286][ T5889] sysv_free_block: flc_count > flc_size
[ 142.212480][ T5889] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 142.284077][ T5953] loop0: detected capacity change from 0 to 128
[ 142.299857][ T5953] VFS: Found a Xenix FS (block size = 1024) on device loop0
[ 142.324530][ T5953] unable to read i-node block
[ 142.333002][ T5953] sysv_free_inode: unable to read inode block on device loop0
[ 142.364798][ T5889] sysv_free_block: flc_count > flc_size
[ 142.374934][ T5889] sysv_free_block: flc_count > flc_size
[ 142.389536][ T5889] sysv_free_block: flc_count > flc_size
[ 142.399507][ T5889] sysv_free_block: flc_count > flc_size
[ 142.422347][ T5889] sysv_free_block: flc_count > flc_size
[ 142.431612][ T5889] sysv_free_block: flc_count > flc_size
[ 142.440060][ T5889] sysv_free_block: flc_count > flc_size
[ 142.453025][ T5889] sysv_free_block: flc_count > flc_size
[ 142.471574][ T5889] sysv_free_block: flc_count > flc_size
[ 142.480826][ T5889] sysv_free_block: flc_count > flc_size
[ 142.489501][ T5889] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 142.569099][ T5954] loop0: detected capacity change from 0 to 128
[ 142.584503][ T5954] VFS: Found a Xenix FS (block size = 1024) on device loop0
[ 142.599885][ T5954] unable to read i-node block
[ 142.607814][ T5954] sysv_free_inode: unable to read inode block on device loop0
[ 142.639577][ T5889] sysv_free_block: flc_count > flc_size
[ 142.652246][ T5889] sysv_free_block: flc_count > flc_size
[ 142.665949][ T5889] sysv_free_block: flc_count > flc_size
[ 142.680492][ T5889] sysv_free_block: flc_count > flc_size
[ 142.693924][ T5889] sysv_free_block: flc_count > flc_size
[ 142.715682][ T5889] sysv_free_block: flc_count > flc_size
[ 142.729036][ T5889] sysv_free_block: flc_count > flc_size
[ 142.746717][ T5889] sysv_free_block: flc_count > flc_size
[ 142.755213][ T5889] sysv_free_block: flc_count > flc_size
[ 142.767661][ T5889] sysv_free_block: flc_count > flc_size
[ 142.777488][ T5889] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 142.856642][ T5955] loop0: detected capacity change from 0 to 128
[ 142.873585][ T5955] VFS: Found a Xenix FS (block size = 1024) on device loop0
[ 142.944772][ T5889] sysv_free_block: flc_count > flc_size
[ 142.955287][ T5889] sysv_free_block: flc_count > flc_size
[ 142.979758][ T5889] sysv_free_block: flc_count > flc_size
[ 142.989919][ T5889] sysv_free_block: flc_count > flc_size
[ 143.000276][ T5889] sysv_free_block: flc_count > flc_size
[ 143.009483][ T5889] sysv_free_block: flc_count > flc_size
[ 143.019708][ T5889] sysv_free_block: flc_count > flc_size
[ 143.033609][ T5889] sysv_free_block: flc_count > flc_size
[ 143.042878][ T5889] sysv_free_block: flc_count > flc_size
[ 143.056865][ T5889] sysv_free_block: flc_count > flc_size
[ 143.075483][ T5889] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 143.129367][ T5956] loop0: detected capacity change from 0 to 128
[ 143.153778][ T5956] VFS: Found a Xenix FS (block size = 1024) on device loop0
[ 143.172793][ T5956] unable to read i-node block
[ 143.182233][ T5956] sysv_free_inode: unable to read inode block on device loop0
[ 143.209425][ T5889] sysv_free_block: flc_count > flc_size
[ 143.222552][ T5889] sysv_free_block: flc_count > flc_size
[ 143.232822][ T5889] sysv_free_block: flc_count > flc_size
[ 143.240593][ T5889] sysv_free_block: flc_count > flc_size
[ 143.260212][ T5889] sysv_free_block: flc_count > flc_size
[ 143.271077][ T5889] sysv_free_block: flc_count > flc_size
[ 143.279248][ T5889] sysv_free_block: flc_count > flc_size
[ 143.287037][ T5889] sysv_free_block: flc_count > flc_size
[ 143.297112][ T5889] sysv_free_block: flc_count > flc_size
[ 143.309662][ T5889] sysv_free_block: flc_count > flc_size
[ 143.334593][ T5889] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 143.398526][ T5957] loop0: detected capacity change from 0 to 128
[ 143.416583][ T5957] VFS: Found a Xenix FS (block size = 1024) on device loop0
[ 143.448118][ T5957] unable to read i-node block
[ 143.456754][ T5957] sysv_free_inode: unable to read inode block on device loop0
[ 143.488638][ T5889] sysv_free_block: flc_count > flc_size
[ 143.497867][ T5889] sysv_free_block: flc_count > flc_size
[ 143.513052][ T5889] sysv_free_block: flc_count > flc_size
[ 143.524434][ T5889] sysv_free_block: flc_count > flc_size
[ 143.539463][ T5889] sysv_free_block: flc_count > flc_size
[ 143.547937][ T5889] sysv_free_block: flc_count > flc_size
[ 143.562600][ T5889] sysv_free_block: flc_count > flc_size
[ 143.573847][ T5889] sysv_free_block: flc_count > flc_size
[ 143.584958][ T5889] sysv_free_block: flc_count > flc_size
[ 143.596995][ T5889] sysv_free_block: flc_count > flc_size
[ 143.612119][ T5889] sysv_free_inode: inode 0,1,2 or nonexistent inode
[ 143.683658][ T5958] loop0: detected capacity change from 0 to 128
[ 143.702876][ T5958] VFS: Found a Xenix FS (block size = 1024) on device loop0
[ 143.719517][ T5958] ==================================================================
[ 143.737790][ T5958] BUG: KASAN: use-after-free in sysv_new_inode+0x10c5/0x1270
[ 143.752849][ T5958] Read of size 2 at addr ffff88805efd31ce by task syz.0.34/5958
[ 143.768501][ T5958]
[ 143.777494][ T5958] CPU: 0 PID: 5958 Comm: syz.0.34 Not tainted syzkaller #0
[ 143.788660][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 143.803350][ T5958] Call Trace:
[ 143.810728][ T5958]
[ 143.818529][ T5958] dump_stack_lvl+0x16c/0x230
[ 143.824168][ T5958] ? __lock_acquire+0x7c80/0x7c80
[ 143.834404][ T5958] ? show_regs_print_info+0x20/0x20
[ 143.843860][ T5958] ? load_image+0x3b0/0x3b0
[ 143.849835][ T5958] ? __virt_addr_valid+0x469/0x540
[ 143.861893][ T5958] print_report+0xac/0x220
[ 143.870060][ T5958] ? sysv_new_inode+0x10c5/0x1270
[ 143.876637][ T5958] kasan_report+0x117/0x150
[ 143.883290][ T5958] ? sysv_new_inode+0x10c5/0x1270
[ 143.890103][ T5958] sysv_new_inode+0x10c5/0x1270
[ 143.903111][ T5958] ? __lock_acquire+0x7c80/0x7c80
[ 143.910447][ T5958] ? do_raw_spin_lock+0x121/0x2c0
[ 143.920936][ T5958] ? sysv_free_inode+0x7e0/0x7e0
[ 143.928948][ T5958] ? _raw_spin_unlock+0x28/0x40
[ 143.935922][ T5958] ? __d_add+0x4ec/0x810
[ 143.942901][ T5958] ? sysv_inode_by_name+0xe1/0x140
[ 143.948527][ T5958] sysv_mknod+0x4e/0xe0
[ 143.955496][ T5958] ? sysv_lookup+0xe0/0xe0
[ 143.962956][ T5958] path_openat+0x1277/0x3190
[ 143.967954][ T5958] ? do_filp_open+0x3d0/0x3d0
[ 143.977199][ T5958] do_filp_open+0x1c5/0x3d0
[ 143.982616][ T5958] ? vfs_tmpfile+0x490/0x490
[ 143.989648][ T5958] ? _raw_spin_unlock+0x28/0x40
[ 143.996802][ T5958] ? alloc_fd+0x58f/0x630
[ 144.004075][ T5958] do_sys_openat2+0x12c/0x1c0
[ 144.013565][ T5958] ? do_sys_open+0xe0/0xe0
[ 144.023875][ T5958] ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 144.033024][ T5958] ? lock_chain_count+0x20/0x20
[ 144.043815][ T5958] __x64_sys_openat+0x139/0x160
[ 144.055591][ T5958] do_syscall_64+0x55/0xb0
[ 144.065406][ T5958] ? clear_bhb_loop+0x40/0x90
[ 144.073602][ T5958] ? clear_bhb_loop+0x40/0x90
[ 144.081526][ T5958] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 144.094638][ T5958] RIP: 0033:0x7ff0ee18f749
[ 144.103011][ T5958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 144.140647][ T5958] RSP: 002b:00007ffd62deb9d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 144.152493][ T5958] RAX: ffffffffffffffda RBX: 00007ff0ee3e5fa0 RCX: 00007ff0ee18f749
[ 144.171373][ T5958] RDX: 0000000000000d40 RSI: 0000200000000040 RDI: ffffffffffffff9c
[ 144.185485][ T5958] RBP: 00007ff0ee213f91 R08: 0000000000000000 R09: 0000000000000000
[ 144.203697][ T5958] R10: 00000000000000d2 R11: 0000000000000246 R12: 0000000000000000
[ 144.213500][ T5958] R13: 00007ff0ee3e5fa0 R14: 00007ff0ee3e5fa0 R15: 0000000000000004
[ 144.224383][ T5958]
[ 144.234296][ T5958]
[ 144.237655][ T5958] The buggy address belongs to the physical page:
[ 144.249938][ T5958] page:ffffea00017bf4c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x5efd3
[ 144.268346][ T5958] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 144.279194][ T5958] page_type: 0xffffffff()
[ 144.287197][ T5958] raw: 00fff00000000000 ffffea00017bf508 ffffea00017bf488 0000000000000000
[ 144.306666][ T5958] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 144.327627][ T5958] page dumped because: kasan: bad access detected
[ 144.337595][ T5958] page_owner tracks the page as freed
[ 144.350531][ T5958] page last allocated via order 0, migratetype Movable, gfp_mask 0x8(__GFP_MOVABLE), pid 1, tgid 1 (swapper/0), ts 27722065903, free_ts 29664337205
[ 144.382096][ T5958] post_alloc_hook+0x1cd/0x210
[ 144.396355][ T5958] split_map_pages+0x27b/0x4d0
[ 144.412211][ T5958] isolate_freepages_range+0x3e0/0x430
[ 144.426047][ T5958] alloc_contig_range+0x5b2/0x860
[ 144.433298][ T5958] alloc_contig_pages+0x47c/0x580
[ 144.439348][ T5958] debug_vm_pgtable_alloc_huge_page+0xbf/0x110
[ 144.451157][ T5958] init_args+0x724/0x9b0
[ 144.455721][ T5958] debug_vm_pgtable+0xc1/0x410
[ 144.466668][ T5958] do_one_initcall+0x1fd/0x750
[ 144.474813][ T5958] do_initcall_level+0x137/0x1f0
[ 144.490456][ T5958] do_initcalls+0x69/0xd0
[ 144.497582][ T5958] kernel_init_freeable+0x3d2/0x570
[ 144.511728][ T5958] kernel_init+0x1d/0x1c0
[ 144.517203][ T5958] ret_from_fork+0x48/0x80
[ 144.524245][ T5958] ret_from_fork_asm+0x11/0x20
[ 144.533961][ T5958] page last free stack trace:
[ 144.546344][ T5958] free_unref_page_prepare+0x7ce/0x8e0
[ 144.552758][ T5958] free_unref_page+0x32/0x2e0
[ 144.564279][ T5958] free_contig_range+0xa1/0x160
[ 144.575117][ T5958] destroy_args+0x80/0x850
[ 144.581877][ T5958] debug_vm_pgtable+0x3cc/0x410
[ 144.593492][ T5958] do_one_initcall+0x1fd/0x750
[ 144.612270][ T5958] do_initcall_level+0x137/0x1f0
[ 144.623841][ T5958] do_initcalls+0x69/0xd0
[ 144.633930][ T5958] kernel_init_freeable+0x3d2/0x570
[ 144.647683][ T5958] kernel_init+0x1d/0x1c0
[ 144.660455][ T5958] ret_from_fork+0x48/0x80
[ 144.668973][ T5958] ret_from_fork_asm+0x11/0x20
[ 144.685932][ T5958]
[ 144.688394][ T5958] Memory state around the buggy address:
[ 144.696139][ T5958] ffff88805efd3080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 144.717633][ T5958] ffff88805efd3100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 144.735680][ T5958] >ffff88805efd3180: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 144.762026][ T5958] ^
[ 144.773787][ T5958] ffff88805efd3200: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 144.790782][ T5958] ffff88805efd3280: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 144.804858][ T5958] ==================================================================
[ 144.824622][ T5958] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 144.840724][ T5958] CPU: 0 PID: 5958 Comm: syz.0.34 Not tainted syzkaller #0
[ 144.853327][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 144.877491][ T5958] Call Trace:
[ 144.882248][ T5958]
[ 144.889091][ T5958] dump_stack_lvl+0x16c/0x230
[ 144.899313][ T5958] ? show_regs_print_info+0x20/0x20
[ 144.914368][ T5958] ? load_image+0x3b0/0x3b0
[ 144.922712][ T5958] panic+0x2c0/0x710
[ 144.928533][ T5958] ? bpf_jit_dump+0xd0/0xd0
[ 144.936198][ T5958] ? _raw_spin_unlock_irqrestore+0xfa/0x110
[ 144.952384][ T5958] ? _raw_spin_unlock+0x40/0x40
[ 144.966989][ T5958] ? print_memory_metadata+0x314/0x400
[ 144.976562][ T5958] ? sysv_new_inode+0x10c5/0x1270
[ 144.991986][ T5958] check_panic_on_warn+0x84/0xa0
[ 144.998309][ T5958] ? sysv_new_inode+0x10c5/0x1270
[ 145.023558][ T5958] end_report+0x6f/0x140
[ 145.033303][ T5958] kasan_report+0x128/0x150
[ 145.042539][ T5958] ? sysv_new_inode+0x10c5/0x1270
[ 145.050396][ T5958] sysv_new_inode+0x10c5/0x1270
[ 145.061661][ T5958] ? __lock_acquire+0x7c80/0x7c80
[ 145.073308][ T5958] ? do_raw_spin_lock+0x121/0x2c0
[ 145.084822][ T5958] ? sysv_free_inode+0x7e0/0x7e0
[ 145.096272][ T5958] ? _raw_spin_unlock+0x28/0x40
[ 145.106970][ T5958] ? __d_add+0x4ec/0x810
[ 145.111988][ T5958] ? sysv_inode_by_name+0xe1/0x140
[ 145.127861][ T5958] sysv_mknod+0x4e/0xe0
[ 145.136804][ T5958] ? sysv_lookup+0xe0/0xe0
[ 145.145362][ T5958] path_openat+0x1277/0x3190
[ 145.155497][ T5958] ? do_filp_open+0x3d0/0x3d0
[ 145.164993][ T5958] do_filp_open+0x1c5/0x3d0
[ 145.172847][ T5958] ? vfs_tmpfile+0x490/0x490
[ 145.187642][ T5958] ? _raw_spin_unlock+0x28/0x40
[ 145.196344][ T5958] ? alloc_fd+0x58f/0x630
[ 145.206136][ T5958] do_sys_openat2+0x12c/0x1c0
[ 145.215039][ T5958] ? do_sys_open+0xe0/0xe0
[ 145.223997][ T5958] ? lockdep_hardirqs_on_prepare+0x400/0x760
[ 145.234842][ T5958] ? lock_chain_count+0x20/0x20
[ 145.248359][ T5958] __x64_sys_openat+0x139/0x160
[ 145.262985][ T5958] do_syscall_64+0x55/0xb0
[ 145.269318][ T5958] ? clear_bhb_loop+0x40/0x90
[ 145.280922][ T5958] ? clear_bhb_loop+0x40/0x90
[ 145.294568][ T5958] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 145.311878][ T5958] RIP: 0033:0x7ff0ee18f749
[ 145.320144][ T5958] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 145.366109][ T5958] RSP: 002b:00007ffd62deb9d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 145.381389][ T5958] RAX: ffffffffffffffda RBX: 00007ff0ee3e5fa0 RCX: 00007ff0ee18f749
[ 145.393133][ T5958] RDX: 0000000000000d40 RSI: 0000200000000040 RDI: ffffffffffffff9c
[ 145.411115][ T5958] RBP: 00007ff0ee213f91 R08: 0000000000000000 R09: 0000000000000000
[ 145.430682][ T5958] R10: 00000000000000d2 R11: 0000000000000246 R12: 0000000000000000
[ 145.450507][ T5958] R13: 00007ff0ee3e5fa0 R14: 00007ff0ee3e5fa0 R15: 0000000000000004
[ 145.466805][ T5958]
[ 145.472331][ T5958] Kernel Offset: disabled
[ 145.484808][ T5958] Rebooting in 86400 seconds..