Warning: Permanently added '10.128.0.152' (ED25519) to the list of known hosts. 2026/05/27 21:58:18 parsed 1 programs [ 85.962301][ T10] cfg80211: failed to load regulatory.db [ 87.452989][ T5640] cgroup: Unknown subsys name 'net' [ 87.613963][ T5640] cgroup: Unknown subsys name 'cpuset' [ 87.623067][ T5640] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 89.142039][ T5640] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.016031][ T5652] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.503868][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.511588][ T5672] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.518752][ T5672] bridge_slave_0: entered allmulticast mode [ 93.526614][ T5672] bridge_slave_0: entered promiscuous mode [ 93.536957][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.544394][ T5672] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.551573][ T5672] bridge_slave_1: entered allmulticast mode [ 93.558979][ T5672] bridge_slave_1: entered promiscuous mode [ 93.591504][ T5672] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 93.603593][ T5672] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 93.636265][ T5672] team0: Port device team_slave_0 added [ 93.644396][ T5672] team0: Port device team_slave_1 added [ 93.673885][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 93.680869][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.706796][ T5672] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 93.719594][ T5672] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 93.726530][ T5672] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 93.752574][ T5672] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.802071][ T5672] hsr_slave_0: entered promiscuous mode [ 93.808785][ T5672] hsr_slave_1: entered promiscuous mode [ 93.978229][ T5672] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.991793][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 94.000182][ T5672] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.010645][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 94.018853][ T5672] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.032327][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 94.041469][ T5672] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.051803][ T5672] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 94.081922][ T5672] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.089513][ T5672] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.097193][ T5672] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.104395][ T5672] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.170218][ T5672] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.192635][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.200800][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.217450][ T5672] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.233216][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.240389][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.255053][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.262202][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.658808][ T5672] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.713971][ T5672] veth0_vlan: entered promiscuous mode [ 94.727763][ T5672] veth1_vlan: entered promiscuous mode [ 94.764102][ T5672] veth0_macvtap: entered promiscuous mode [ 94.775143][ T5672] veth1_macvtap: entered promiscuous mode [ 94.795562][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.811145][ T5672] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.827181][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.836863][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.848986][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.860192][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.013801][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.098904][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.187176][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.262784][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.743774][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.752073][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.782440][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.790989][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.771061][ T5740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.778822][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.790966][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.799505][ T5740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.807266][ T5740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 97.664940][ T48] bridge_slave_1: left allmulticast mode [ 97.670873][ T48] bridge_slave_1: left promiscuous mode [ 97.678426][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.694184][ T48] bridge_slave_0: left allmulticast mode [ 97.700622][ T48] bridge_slave_0: left promiscuous mode [ 97.707192][ T48] bridge0: port 1(bridge_slave_0) entered disabled state 2026/05/27 21:58:33 executed programs: 0 [ 98.052259][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.071846][ T5740] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.081648][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.082335][ T5740] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.099533][ T5740] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.100012][ T48] bond0 (unregistering): Released all slaves [ 98.107970][ T5740] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.121778][ T5740] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.205862][ T48] hsr_slave_0: left promiscuous mode [ 98.223363][ T48] hsr_slave_1: left promiscuous mode [ 98.239568][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.253028][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.274188][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.282823][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.300045][ T48] veth1_macvtap: left promiscuous mode [ 98.305793][ T48] veth0_macvtap: left promiscuous mode [ 98.314449][ T48] veth1_vlan: left promiscuous mode [ 98.320233][ T48] veth0_vlan: left promiscuous mode [ 98.651408][ T48] team0 (unregistering): Port device team_slave_1 removed [ 98.691673][ T48] team0 (unregistering): Port device team_slave_0 removed [ 98.830782][ T5287] 8021q: adding VLAN 0 to HW filter on device eth1 [ 99.972067][ T5287] 8021q: adding VLAN 0 to HW filter on device eth2 [ 100.013281][ T5762] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.024336][ T5762] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.032240][ T5762] bridge_slave_0: entered allmulticast mode [ 100.047760][ T5762] bridge_slave_0: entered promiscuous mode [ 100.065695][ T5762] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.096303][ T5762] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.120533][ T5762] bridge_slave_1: entered allmulticast mode [ 100.144407][ T5762] bridge_slave_1: entered promiscuous mode [ 100.201868][ T5740] Bluetooth: hci0: command tx timeout [ 100.325426][ T5762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.384275][ T5762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.449010][ T5762] team0: Port device team_slave_0 added [ 100.458514][ T5762] team0: Port device team_slave_1 added [ 100.578339][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.595389][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.622003][ T5762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.635065][ T5762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.643040][ T5762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 100.670121][ T5762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.777303][ T5762] hsr_slave_0: entered promiscuous mode [ 100.784095][ T5762] hsr_slave_1: entered promiscuous mode [ 100.793055][ T5287] 8021q: adding VLAN 0 to HW filter on device eth3 [ 101.550292][ T5762] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.562399][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 101.570526][ T5762] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.582215][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 101.590166][ T5762] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.600890][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 101.609322][ T5762] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.621589][ T5762] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 101.727780][ T5762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.757523][ T5762] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.776806][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.784076][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.804983][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.812892][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.279313][ T5740] Bluetooth: hci0: command tx timeout [ 102.377963][ T5762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.442644][ T5762] veth0_vlan: entered promiscuous mode [ 102.456988][ T5762] veth1_vlan: entered promiscuous mode [ 102.499595][ T5762] veth0_macvtap: entered promiscuous mode [ 102.512916][ T5762] veth1_macvtap: entered promiscuous mode [ 102.541699][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.563603][ T5762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.583966][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.612078][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.623114][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.644384][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.742691][ T135] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.765515][ T135] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.821140][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.830898][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.929949][ T5883] loop0: detected capacity change from 0 to 128 [ 102.938448][ T5883] ======================================================= [ 102.938448][ T5883] WARNING: The mand mount option has been deprecated and [ 102.938448][ T5883] and is ignored by this kernel. Remove the mand [ 102.938448][ T5883] option from the mount to silence this warning. [ 102.938448][ T5883] ======================================================= [ 102.997208][ T5883] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 103.016287][ T5883] hpfs: filesystem error: improperly stopped [ 103.026244][ T5883] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 103.034124][ T5883] hpfs: You really don't want any checks? You are crazy... [ 103.059135][ T5883] hpfs: Code page index out of array [ 103.065313][ T5883] hpfs: code page support is disabled [ 103.072122][ T5883] hpfs: filesystem error: map_dirent: not a directory [ 103.078949][ T5883] [ 103.085390][ T5883] hpfs: hpfs_map_4sectors(): unaligned read [ 103.091379][ T5883] hpfs: filesystem error: unable to find root dir [ 103.100795][ T5883] ================================================================== [ 103.108882][ T5883] BUG: KASAN: slab-use-after-free in hpfs_bplus_lookup+0x4f4/0x880 [ 103.116800][ T5883] Read of size 4 at addr ffff88807346e008 by task syz.0.17/5883 [ 103.124438][ T5883] [ 103.126795][ T5883] CPU: 1 UID: 0 PID: 5883 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 103.126820][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 103.126832][ T5883] Call Trace: [ 103.126841][ T5883] [ 103.126850][ T5883] dump_stack_lvl+0xe8/0x150 [ 103.126876][ T5883] print_address_description+0x55/0x1e0 [ 103.126899][ T5883] ? hpfs_bplus_lookup+0x4f4/0x880 [ 103.126922][ T5883] print_report+0x58/0x70 [ 103.126941][ T5883] kasan_report+0x117/0x150 [ 103.126962][ T5883] ? hpfs_bplus_lookup+0x4f4/0x880 [ 103.126994][ T5883] hpfs_bplus_lookup+0x4f4/0x880 [ 103.127024][ T5883] ? __pfx_hpfs_bplus_lookup+0x10/0x10 [ 103.127049][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.127076][ T5883] ? hpfs_get_block+0x98/0x6e0 [ 103.127109][ T5883] hpfs_bmap+0x230/0x4e0 [ 103.127140][ T5883] ? __pfx_hpfs_bmap+0x10/0x10 [ 103.127170][ T5883] ? __page_table_check_zero+0x6a/0x3e0 [ 103.127201][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.127226][ T5883] ? __page_table_check_zero+0x397/0x3e0 [ 103.127258][ T5883] hpfs_get_block+0xa8/0x6e0 [ 103.127290][ T5883] do_mpage_readpage+0x801/0x1980 [ 103.127332][ T5883] mpage_readahead+0x3f9/0x810 [ 103.127362][ T5883] ? __pfx_mpage_readahead+0x10/0x10 [ 103.127386][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.127421][ T5883] ? __pfx_hpfs_get_block+0x10/0x10 [ 103.127452][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.127477][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.127502][ T5883] ? blk_start_plug+0x6e/0x1b0 [ 103.127530][ T5883] read_pages+0x193/0x5a0 [ 103.127562][ T5883] ? __pfx_read_pages+0x10/0x10 [ 103.127592][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.127616][ T5883] ? filemap_add_folio+0x356/0x530 [ 103.127651][ T5883] page_cache_ra_unbounded+0x794/0xa10 [ 103.127690][ T5883] page_cache_ra_order+0xae4/0xe80 [ 103.127721][ T5883] ? blk_cgroup_congested+0x1f4/0x210 [ 103.127749][ T5883] ? inode_to_bdi+0x69/0xf0 [ 103.127778][ T5883] filemap_get_pages+0x4c0/0x1ef0 [ 103.127807][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.127832][ T5883] ? __lock_acquire+0x6b5/0x2cf0 [ 103.127858][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.127894][ T5883] ? __pfx_filemap_get_pages+0x10/0x10 [ 103.127925][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.127951][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.127980][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.128009][ T5883] filemap_read+0x447/0x1230 [ 103.128037][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.128061][ T5883] ? is_bpf_text_address+0x292/0x2b0 [ 103.128083][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.128107][ T5883] ? is_bpf_text_address+0x26/0x2b0 [ 103.128131][ T5883] ? __kernel_text_address+0xd/0x30 [ 103.128168][ T5883] ? __pfx_filemap_read+0x10/0x10 [ 103.128209][ T5883] ? __kmalloc_cache_noprof+0x31c/0x660 [ 103.128240][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.128265][ T5883] ? generic_file_read_iter+0x8f/0x510 [ 103.128294][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.128319][ T5883] ? __asan_memset+0x22/0x50 [ 103.128345][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.128370][ T5883] ? iov_iter_kvec+0xb8/0x180 [ 103.128396][ T5883] __kernel_read+0x504/0x9b0 [ 103.128429][ T5883] ? __pfx___kernel_read+0x10/0x10 [ 103.128472][ T5883] integrity_kernel_read+0x89/0xd0 [ 103.128507][ T5883] ? __pfx_integrity_kernel_read+0x10/0x10 [ 103.128539][ T5883] ? __kmalloc_cache_noprof+0x31c/0x660 [ 103.128570][ T5883] ? ima_calc_file_hash+0x40f/0x860 [ 103.128594][ T5883] ? __kmalloc_cache_noprof+0x15b/0x660 [ 103.128633][ T5883] ima_calc_file_hash+0x446/0x860 [ 103.128661][ T5883] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 103.128703][ T5883] ? generic_fillattr+0x590/0x9a0 [ 103.128733][ T5883] ima_collect_measurement+0x51d/0x9c0 [ 103.128764][ T5883] ? __pfx_ima_collect_measurement+0x10/0x10 [ 103.128795][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.128824][ T5883] ? __mutex_lock+0x319/0x1550 [ 103.128863][ T5883] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 103.128905][ T5883] process_measurement+0x12cd/0x1c80 [ 103.128937][ T5883] ? __pfx_process_measurement+0x10/0x10 [ 103.128965][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.128989][ T5883] ? tomoyo_check_open_permission+0x38e/0x470 [ 103.129019][ T5883] ? tomoyo_check_open_permission+0x1d3/0x470 [ 103.129067][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.129095][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.129121][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.129150][ T5883] ima_file_check+0xe1/0x130 [ 103.129173][ T5883] ? do_dentry_open+0xd33/0x13a0 [ 103.129199][ T5883] ? __pfx_ima_file_check+0x10/0x10 [ 103.129226][ T5883] security_file_post_open+0xb3/0x260 [ 103.129256][ T5883] path_openat+0x2e4d/0x3860 [ 103.129294][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.129320][ T5883] ? __pfx_stack_trace_save+0x10/0x10 [ 103.129354][ T5883] ? stack_depot_save_flags+0x33/0x810 [ 103.129383][ T5883] ? __pfx_path_openat+0x10/0x10 [ 103.129413][ T5883] ? __x64_sys_open+0x11e/0x150 [ 103.129440][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.129464][ T5883] ? __lock_acquire+0x6b5/0x2cf0 [ 103.129492][ T5883] do_file_open+0x23e/0x4a0 [ 103.129526][ T5883] ? __pfx_do_file_open+0x10/0x10 [ 103.129568][ T5883] ? _raw_spin_unlock+0x28/0x50 [ 103.129599][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.129623][ T5883] ? alloc_fd+0x64b/0x6c0 [ 103.129659][ T5883] do_sys_openat2+0x113/0x200 [ 103.129684][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 103.129709][ T5883] ? __se_sys_futex+0x3a8/0x450 [ 103.129735][ T5883] ? __pfx_do_sys_openat2+0x10/0x10 [ 103.129762][ T5883] ? __pfx___se_sys_futex+0x10/0x10 [ 103.129786][ T5883] ? rcu_is_watching+0x15/0xb0 [ 103.129813][ T5883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.129835][ T5883] __x64_sys_open+0x11e/0x150 [ 103.129862][ T5883] do_syscall_64+0x174/0x580 [ 103.129883][ T5883] ? trace_irq_disable+0x3b/0x140 [ 103.129918][ T5883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.129939][ T5883] RIP: 0033:0x7f68b7b9ce59 [ 103.129958][ T5883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 103.129975][ T5883] RSP: 002b:00007ffc0a8245f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 103.129997][ T5883] RAX: ffffffffffffffda RBX: 00007f68b7e15fa0 RCX: 00007f68b7b9ce59 [ 103.130012][ T5883] RDX: 0000000000000002 RSI: 0000000000080540 RDI: 0000200000000080 [ 103.130026][ T5883] RBP: 00007f68b7c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 103.130039][ T5883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.130051][ T5883] R13: 00007f68b7e15fac R14: 00007f68b7e15fa0 R15: 00007f68b7e15fa0 [ 103.130076][ T5883] [ 103.130083][ T5883] [ 103.776827][ T5883] Allocated by task 5378: [ 103.781141][ T5883] kasan_save_track+0x3e/0x80 [ 103.785820][ T5883] __kasan_slab_alloc+0x6c/0x80 [ 103.790676][ T5883] kmem_cache_alloc_noprof+0x2bc/0x650 [ 103.796133][ T5883] vm_area_dup+0x2b/0x680 [ 103.800461][ T5883] dup_mmap+0x8b4/0x1da0 [ 103.804699][ T5883] copy_mm+0x13b/0x4a0 [ 103.808755][ T5883] copy_process+0x1f1c/0x4440 [ 103.813418][ T5883] kernel_clone+0x2d7/0x940 [ 103.817913][ T5883] __x64_sys_clone+0x1b6/0x230 [ 103.822671][ T5883] do_syscall_64+0x174/0x580 [ 103.827248][ T5883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.833125][ T5883] [ 103.835428][ T5883] Freed by task 15: [ 103.839212][ T5883] kasan_save_track+0x3e/0x80 [ 103.843883][ T5883] kasan_save_free_info+0x46/0x50 [ 103.848897][ T5883] __kasan_slab_free+0x5c/0x80 [ 103.853660][ T5883] slab_free_after_rcu_debug+0x12a/0x220 [ 103.859282][ T5883] rcu_core+0x7cd/0x1070 [ 103.863513][ T5883] handle_softirqs+0x22a/0x840 [ 103.868263][ T5883] run_ksoftirqd+0x36/0x60 [ 103.872669][ T5883] smpboot_thread_fn+0x541/0xa50 [ 103.877598][ T5883] kthread+0x389/0x470 [ 103.881662][ T5883] ret_from_fork+0x514/0xb70 [ 103.886242][ T5883] ret_from_fork_asm+0x1a/0x30 [ 103.890997][ T5883] [ 103.893309][ T5883] Last potentially related work creation: [ 103.899003][ T5883] kasan_save_stack+0x3e/0x60 [ 103.903680][ T5883] kasan_record_aux_stack+0xbd/0xd0 [ 103.908870][ T5883] kmem_cache_free+0x44f/0x650 [ 103.913634][ T5883] tear_down_vmas+0x312/0x520 [ 103.918317][ T5883] exit_mmap+0x4b6/0x9e0 [ 103.922556][ T5883] __mmput+0x118/0x430 [ 103.926611][ T5883] exec_mmap+0x3b4/0x440 [ 103.930851][ T5883] begin_new_exec+0x134a/0x2480 [ 103.935698][ T5883] load_elf_binary+0xa47/0x2980 [ 103.940535][ T5883] bprm_execve+0x94a/0x1510 [ 103.945036][ T5883] do_execveat_common+0x50d/0x690 [ 103.950058][ T5883] __x64_sys_execve+0x97/0xc0 [ 103.954733][ T5883] do_syscall_64+0x174/0x580 [ 103.959311][ T5883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.965201][ T5883] [ 103.967509][ T5883] The buggy address belongs to the object at ffff88807346e000 [ 103.967509][ T5883] which belongs to the cache vm_area_struct of size 256 [ 103.981814][ T5883] The buggy address is located 8 bytes inside of [ 103.981814][ T5883] freed 256-byte region [ffff88807346e000, ffff88807346e100) [ 103.995446][ T5883] [ 103.997761][ T5883] The buggy address belongs to the physical page: [ 104.004156][ T5883] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x7346e [ 104.012908][ T5883] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 104.020005][ T5883] page_type: f5(slab) [ 104.023976][ T5883] raw: 00fff00000000000 ffff88801beecb40 dead000000000100 dead000000000122 [ 104.032545][ T5883] raw: 0000000000000000 00000008000c000c 00000000f5000000 0000000000000000 [ 104.041110][ T5883] page dumped because: kasan: bad access detected [ 104.047505][ T5883] page_owner tracks the page as allocated [ 104.053201][ T5883] page last allocated via order 0, migratetype Unmovable, gfp_mask 0xd2cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5378, tgid 5378 (sshd), ts 75793681241, free_ts 75773178442 [ 104.073258][ T5883] post_alloc_hook+0x22d/0x280 [ 104.078031][ T5883] get_page_from_freelist+0x2593/0x2610 [ 104.083580][ T5883] __alloc_frozen_pages_noprof+0x18d/0x380 [ 104.089388][ T5883] allocate_slab+0x77/0x660 [ 104.093883][ T5883] refill_objects+0x339/0x3d0 [ 104.098550][ T5883] __pcs_replace_empty_main+0x321/0x720 [ 104.104090][ T5883] kmem_cache_alloc_noprof+0x37d/0x650 [ 104.109555][ T5883] vm_area_dup+0x2b/0x680 [ 104.113888][ T5883] dup_mmap+0x8b4/0x1da0 [ 104.118127][ T5883] copy_mm+0x13b/0x4a0 [ 104.122188][ T5883] copy_process+0x1f1c/0x4440 [ 104.126856][ T5883] kernel_clone+0x2d7/0x940 [ 104.131350][ T5883] __x64_sys_clone+0x1b6/0x230 [ 104.136109][ T5883] do_syscall_64+0x174/0x580 [ 104.140688][ T5883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.146570][ T5883] page last free pid 15 tgid 15 stack trace: [ 104.152528][ T5883] __free_frozen_pages+0xc1c/0xd30 [ 104.157639][ T5883] tlb_remove_table_rcu+0x85/0x100 [ 104.162759][ T5883] rcu_core+0x7cd/0x1070 [ 104.166992][ T5883] handle_softirqs+0x22a/0x840 [ 104.171744][ T5883] run_ksoftirqd+0x36/0x60 [ 104.176157][ T5883] smpboot_thread_fn+0x541/0xa50 [ 104.181095][ T5883] kthread+0x389/0x470 [ 104.185162][ T5883] ret_from_fork+0x514/0xb70 [ 104.189740][ T5883] ret_from_fork_asm+0x1a/0x30 [ 104.194502][ T5883] [ 104.196807][ T5883] Memory state around the buggy address: [ 104.202424][ T5883] ffff88807346df00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 104.210482][ T5883] ffff88807346df80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 104.218533][ T5883] >ffff88807346e000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.226580][ T5883] ^ [ 104.230897][ T5883] ffff88807346e080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 104.238943][ T5883] ffff88807346e100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 104.246985][ T5883] ================================================================== [ 104.269930][ T5883] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 104.277182][ T5883] CPU: 0 UID: 0 PID: 5883 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 104.286305][ T5883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 104.296375][ T5883] Call Trace: [ 104.299665][ T5883] [ 104.302603][ T5883] vpanic+0x56c/0xa60 [ 104.306607][ T5883] ? __pfx_vpanic+0x10/0x10 [ 104.311131][ T5883] panic+0xc5/0xd0 [ 104.314858][ T5883] ? __pfx_panic+0x10/0x10 [ 104.319274][ T5883] ? preempt_schedule_thunk+0x16/0x30 [ 104.324658][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.330287][ T5883] ? preempt_schedule_thunk+0x16/0x30 [ 104.335663][ T5883] ? hpfs_bplus_lookup+0x4f4/0x880 [ 104.340774][ T5883] check_panic_on_warn+0x89/0xb0 [ 104.345716][ T5883] ? hpfs_bplus_lookup+0x4f4/0x880 [ 104.350824][ T5883] end_report+0x73/0x170 [ 104.355056][ T5883] ? hpfs_bplus_lookup+0x4f4/0x880 [ 104.360164][ T5883] kasan_report+0x128/0x150 [ 104.364663][ T5883] ? hpfs_bplus_lookup+0x4f4/0x880 [ 104.369772][ T5883] hpfs_bplus_lookup+0x4f4/0x880 [ 104.374715][ T5883] ? __pfx_hpfs_bplus_lookup+0x10/0x10 [ 104.380175][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.385809][ T5883] ? hpfs_get_block+0x98/0x6e0 [ 104.390576][ T5883] hpfs_bmap+0x230/0x4e0 [ 104.394823][ T5883] ? __pfx_hpfs_bmap+0x10/0x10 [ 104.399586][ T5883] ? __page_table_check_zero+0x6a/0x3e0 [ 104.405136][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.410769][ T5883] ? __page_table_check_zero+0x397/0x3e0 [ 104.416408][ T5883] hpfs_get_block+0xa8/0x6e0 [ 104.421002][ T5883] do_mpage_readpage+0x801/0x1980 [ 104.426052][ T5883] mpage_readahead+0x3f9/0x810 [ 104.430820][ T5883] ? __pfx_mpage_readahead+0x10/0x10 [ 104.436105][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.441748][ T5883] ? __pfx_hpfs_get_block+0x10/0x10 [ 104.446948][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.452577][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.458205][ T5883] ? blk_start_plug+0x6e/0x1b0 [ 104.462969][ T5883] read_pages+0x193/0x5a0 [ 104.467302][ T5883] ? __pfx_read_pages+0x10/0x10 [ 104.472161][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.477789][ T5883] ? filemap_add_folio+0x356/0x530 [ 104.482903][ T5883] page_cache_ra_unbounded+0x794/0xa10 [ 104.488378][ T5883] page_cache_ra_order+0xae4/0xe80 [ 104.493506][ T5883] ? blk_cgroup_congested+0x1f4/0x210 [ 104.498883][ T5883] ? inode_to_bdi+0x69/0xf0 [ 104.503393][ T5883] filemap_get_pages+0x4c0/0x1ef0 [ 104.508421][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.514045][ T5883] ? __lock_acquire+0x6b5/0x2cf0 [ 104.518983][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.524633][ T5883] ? __pfx_filemap_get_pages+0x10/0x10 [ 104.530100][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.535741][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.541373][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.547006][ T5883] filemap_read+0x447/0x1230 [ 104.551599][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.557228][ T5883] ? is_bpf_text_address+0x292/0x2b0 [ 104.562507][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.568134][ T5883] ? is_bpf_text_address+0x26/0x2b0 [ 104.573334][ T5883] ? __kernel_text_address+0xd/0x30 [ 104.578545][ T5883] ? __pfx_filemap_read+0x10/0x10 [ 104.583584][ T5883] ? __kmalloc_cache_noprof+0x31c/0x660 [ 104.589137][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.594772][ T5883] ? generic_file_read_iter+0x8f/0x510 [ 104.600236][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.605872][ T5883] ? __asan_memset+0x22/0x50 [ 104.610463][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.616091][ T5883] ? iov_iter_kvec+0xb8/0x180 [ 104.620768][ T5883] __kernel_read+0x504/0x9b0 [ 104.625368][ T5883] ? __pfx___kernel_read+0x10/0x10 [ 104.630493][ T5883] integrity_kernel_read+0x89/0xd0 [ 104.635607][ T5883] ? __pfx_integrity_kernel_read+0x10/0x10 [ 104.641415][ T5883] ? __kmalloc_cache_noprof+0x31c/0x660 [ 104.646962][ T5883] ? ima_calc_file_hash+0x40f/0x860 [ 104.652158][ T5883] ? __kmalloc_cache_noprof+0x15b/0x660 [ 104.657708][ T5883] ima_calc_file_hash+0x446/0x860 [ 104.662736][ T5883] ? __pfx_ima_calc_file_hash+0x10/0x10 [ 104.668300][ T5883] ? generic_fillattr+0x590/0x9a0 [ 104.673326][ T5883] ima_collect_measurement+0x51d/0x9c0 [ 104.678792][ T5883] ? __pfx_ima_collect_measurement+0x10/0x10 [ 104.684783][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.690418][ T5883] ? __mutex_lock+0x319/0x1550 [ 104.695211][ T5883] ? __pfx_ima_get_hash_algo+0x10/0x10 [ 104.700697][ T5883] process_measurement+0x12cd/0x1c80 [ 104.705993][ T5883] ? __pfx_process_measurement+0x10/0x10 [ 104.711625][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.717255][ T5883] ? tomoyo_check_open_permission+0x38e/0x470 [ 104.723326][ T5883] ? tomoyo_check_open_permission+0x1d3/0x470 [ 104.729419][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.735055][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.740686][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.746322][ T5883] ima_file_check+0xe1/0x130 [ 104.750909][ T5883] ? do_dentry_open+0xd33/0x13a0 [ 104.755846][ T5883] ? __pfx_ima_file_check+0x10/0x10 [ 104.761052][ T5883] security_file_post_open+0xb3/0x260 [ 104.766429][ T5883] path_openat+0x2e4d/0x3860 [ 104.771030][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.776665][ T5883] ? __pfx_stack_trace_save+0x10/0x10 [ 104.782046][ T5883] ? stack_depot_save_flags+0x33/0x810 [ 104.787507][ T5883] ? __pfx_path_openat+0x10/0x10 [ 104.792450][ T5883] ? __x64_sys_open+0x11e/0x150 [ 104.797305][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.802934][ T5883] ? __lock_acquire+0x6b5/0x2cf0 [ 104.807875][ T5883] do_file_open+0x23e/0x4a0 [ 104.812390][ T5883] ? __pfx_do_file_open+0x10/0x10 [ 104.817431][ T5883] ? _raw_spin_unlock+0x28/0x50 [ 104.822295][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.827925][ T5883] ? alloc_fd+0x64b/0x6c0 [ 104.832258][ T5883] do_sys_openat2+0x113/0x200 [ 104.836935][ T5883] ? srso_alias_return_thunk+0x5/0xfbef5 [ 104.842569][ T5883] ? __se_sys_futex+0x3a8/0x450 [ 104.847423][ T5883] ? __pfx_do_sys_openat2+0x10/0x10 [ 104.852625][ T5883] ? __pfx___se_sys_futex+0x10/0x10 [ 104.857829][ T5883] ? rcu_is_watching+0x15/0xb0 [ 104.862598][ T5883] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.868665][ T5883] __x64_sys_open+0x11e/0x150 [ 104.873346][ T5883] do_syscall_64+0x174/0x580 [ 104.877935][ T5883] ? trace_irq_disable+0x3b/0x140 [ 104.882968][ T5883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.888859][ T5883] RIP: 0033:0x7f68b7b9ce59 [ 104.893270][ T5883] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 104.912875][ T5883] RSP: 002b:00007ffc0a8245f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000002 [ 104.921296][ T5883] RAX: ffffffffffffffda RBX: 00007f68b7e15fa0 RCX: 00007f68b7b9ce59 [ 104.929270][ T5883] RDX: 0000000000000002 RSI: 0000000000080540 RDI: 0000200000000080 [ 104.937231][ T5883] RBP: 00007f68b7c32d6f R08: 0000000000000000 R09: 0000000000000000 [ 104.945193][ T5883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 104.953164][ T5883] R13: 00007f68b7e15fac R14: 00007f68b7e15fa0 R15: 00007f68b7e15fa0 [ 104.961150][ T5883] [ 104.964431][ T5883] Kernel Offset: disabled [ 104.968740][ T5883] Rebooting in 86400 seconds..