Warning: Permanently added '[localhost]:30294' (ED25519) to the list of known hosts.
2026/02/23 00:32:59 parsed 1 programs
syzkaller login: [ 87.638780][ T5304] cgroup: Unknown subsys name 'net'
[ 87.673348][ T5304] cgroup: Unknown subsys name 'cpuset'
[ 87.678970][ T5304] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 89.510112][ T5304] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 95.221523][ T5321] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 95.225690][ T5321] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 95.229383][ T5321] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 95.233368][ T5321] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 95.236920][ T5321] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 95.554755][ T5320] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 96.966109][ T1352] cfg80211: failed to load regulatory.db
[ 101.062210][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.065912][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.113517][ T127] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.117029][ T127] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.894646][ T5392] chnl_net:caif_netlink_parms(): no params data found
[ 101.963054][ T5392] bridge0: port 1(bridge_slave_0) entered blocking state
[ 101.967106][ T5392] bridge0: port 1(bridge_slave_0) entered disabled state
[ 101.970526][ T5392] bridge_slave_0: entered allmulticast mode
[ 101.974314][ T5392] bridge_slave_0: entered promiscuous mode
[ 101.981449][ T5392] bridge0: port 2(bridge_slave_1) entered blocking state
[ 101.984713][ T5392] bridge0: port 2(bridge_slave_1) entered disabled state
[ 101.987353][ T5392] bridge_slave_1: entered allmulticast mode
[ 101.990546][ T5392] bridge_slave_1: entered promiscuous mode
[ 102.016103][ T5392] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 102.022522][ T5392] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 102.046173][ T5392] team0: Port device team_slave_0 added
[ 102.051098][ T5392] team0: Port device team_slave_1 added
[ 102.071707][ T5392] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 102.074677][ T5392] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 102.087017][ T5392] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 102.112363][ T5392] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 102.115608][ T5392] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 102.127094][ T5392] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 102.168426][ T5392] hsr_slave_0: entered promiscuous mode
[ 102.171916][ T5392] hsr_slave_1: entered promiscuous mode
[ 102.326702][ T5392] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 102.336982][ T5392] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 102.344782][ T5392] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 102.353276][ T5392] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 102.446591][ T5392] 8021q: adding VLAN 0 to HW filter on device bond0
[ 102.486475][ T5392] 8021q: adding VLAN 0 to HW filter on device team0
[ 102.497851][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.501047][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 102.516924][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.520026][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 102.687949][ T5392] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 102.724376][ T5392] veth0_vlan: entered promiscuous mode
[ 102.732578][ T5392] veth1_vlan: entered promiscuous mode
[ 102.757230][ T5392] veth0_macvtap: entered promiscuous mode
[ 102.764277][ T5392] veth1_macvtap: entered promiscuous mode
[ 102.778079][ T5392] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 102.788469][ T5392] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 102.799644][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.804968][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.808719][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 102.822033][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 103.031643][ T127] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.070741][ T127] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.098622][ T127] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 103.137064][ T127] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/02/23 00:33:17 executed programs: 0
[ 103.683391][ T4662] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 103.688316][ T4662] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 103.692545][ T4662] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 103.695877][ T4662] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 103.699108][ T4662] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 103.874867][ T5418] chnl_net:caif_netlink_parms(): no params data found
[ 103.971442][ T5418] bridge0: port 1(bridge_slave_0) entered blocking state
[ 103.974527][ T5418] bridge0: port 1(bridge_slave_0) entered disabled state
[ 103.977490][ T5418] bridge_slave_0: entered allmulticast mode
[ 103.981818][ T5418] bridge_slave_0: entered promiscuous mode
[ 103.986490][ T5418] bridge0: port 2(bridge_slave_1) entered blocking state
[ 103.989613][ T5418] bridge0: port 2(bridge_slave_1) entered disabled state
[ 103.993263][ T5418] bridge_slave_1: entered allmulticast mode
[ 103.996967][ T5418] bridge_slave_1: entered promiscuous mode
[ 104.028528][ T5418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 104.035347][ T5418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 104.061145][ T5418] team0: Port device team_slave_0 added
[ 104.065566][ T5418] team0: Port device team_slave_1 added
[ 104.090931][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 104.094068][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 104.105619][ T5418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 104.112668][ T5418] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 104.117156][ T5418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 104.128970][ T5418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 104.192988][ T5418] hsr_slave_0: entered promiscuous mode
[ 104.196372][ T5418] hsr_slave_1: entered promiscuous mode
[ 104.199171][ T5418] debugfs: 'hsr0' already exists in 'hsr'
[ 104.204225][ T5418] Cannot create hsr debugfs directory
[ 105.537115][ T127] bridge_slave_1: left allmulticast mode
[ 105.546842][ T127] bridge_slave_1: left promiscuous mode
[ 105.549849][ T127] bridge0: port 2(bridge_slave_1) entered disabled state
[ 105.586336][ T127] bridge_slave_0: left allmulticast mode
[ 105.589003][ T127] bridge_slave_0: left promiscuous mode
[ 105.600499][ T127] bridge0: port 1(bridge_slave_0) entered disabled state
[ 105.763537][ T5321] Bluetooth: hci0: command tx timeout
[ 105.872471][ T127] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 105.880800][ T127] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 105.891555][ T127] bond0 (unregistering): Released all slaves
[ 105.963941][ T127] hsr_slave_0: left promiscuous mode
[ 105.973724][ T127] hsr_slave_1: left promiscuous mode
[ 105.980810][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 105.983735][ T127] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 105.987415][ T127] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 105.991514][ T127] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 106.024748][ T127] veth1_macvtap: left promiscuous mode
[ 106.027420][ T127] veth0_macvtap: left promiscuous mode
[ 106.031406][ T127] veth1_vlan: left promiscuous mode
[ 106.033887][ T127] veth0_vlan: left promiscuous mode
[ 106.249435][ T127] team0 (unregistering): Port device team_slave_1 removed
[ 106.264596][ T127] team0 (unregistering): Port device team_slave_0 removed
[ 106.696741][ T5418] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 106.707671][ T5418] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 106.794741][ T5418] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 106.834068][ T5418] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 107.015781][ T5418] 8021q: adding VLAN 0 to HW filter on device bond0
[ 107.053964][ T5418] 8021q: adding VLAN 0 to HW filter on device team0
[ 107.063165][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 107.066810][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 107.087906][ T127] bridge0: port 2(bridge_slave_1) entered blocking state
[ 107.091122][ T127] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 107.393501][ T5418] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 107.457240][ T5418] veth0_vlan: entered promiscuous mode
[ 107.474491][ T5418] veth1_vlan: entered promiscuous mode
[ 107.518677][ T5418] veth0_macvtap: entered promiscuous mode
[ 107.542373][ T5418] veth1_macvtap: entered promiscuous mode
[ 107.565270][ T5418] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 107.581082][ T5418] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 107.621366][ T127] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.628081][ T127] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.644208][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.648246][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.753773][ T127] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.757260][ T127] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.822007][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.826488][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.840385][ T5321] Bluetooth: hci0: command tx timeout
[ 107.917117][ T5463] loop0: detected capacity change from 0 to 512
[ 107.965920][ T5463] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[ 107.996730][ T5463] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 108.026456][ T5463] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 108.040674][ T5463] EXT4-fs (loop0): 1 truncate cleaned up
[ 108.044065][ T5463] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 108.075832][ T5463] ==================================================================
[ 108.079276][ T5463] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x9c1/0x1e20
[ 108.083091][ T5463] Read of size 18446744073709551540 at addr ffff88801cbba070 by task syz.0.17/5463
[ 108.088119][ T5463]
[ 108.089187][ T5463] CPU: 0 UID: 0 PID: 5463 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 108.089197][ T5463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 108.089202][ T5463] Call Trace:
[ 108.089207][ T5463]
[ 108.089212][ T5463] dump_stack_lvl+0xe8/0x150
[ 108.089298][ T5463] print_report+0xba/0x230
[ 108.089307][ T5463] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 108.089315][ T5463] kasan_report+0x117/0x150
[ 108.089323][ T5463] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 108.089329][ T5463] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 108.089334][ T5463] kasan_check_range+0x264/0x2c0
[ 108.089340][ T5463] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 108.089346][ T5463] __asan_memmove+0x29/0x70
[ 108.089354][ T5463] ext4_xattr_set_entry+0x9c1/0x1e20
[ 108.089363][ T5463] ext4_xattr_block_set+0x878/0x2ad0
[ 108.089370][ T5463] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 108.089402][ T5463] ? __pfx_ext4_xattr_block_set+0x10/0x10
[ 108.089411][ T5463] ? _raw_spin_unlock+0x28/0x50
[ 108.089498][ T5463] ? ext4_xattr_ibody_set+0x554/0x6a0
[ 108.089506][ T5463] ext4_xattr_set_handle+0xe05/0x14c0
[ 108.089515][ T5463] ? __pfx_ext4_xattr_set_handle+0x10/0x10
[ 108.089523][ T5463] ext4_xattr_set+0x255/0x340
[ 108.089530][ T5463] ? __pfx_ext4_xattr_set+0x10/0x10
[ 108.089536][ T5463] ? __pfx_evm_protect_xattr+0x10/0x10
[ 108.089725][ T5463] ? __pfx_ext4_xattr_trusted_set+0x10/0x10
[ 108.089732][ T5463] __vfs_setxattr+0x43c/0x480
[ 108.089742][ T5463] __vfs_setxattr_noperm+0x12d/0x660
[ 108.089750][ T5463] vfs_setxattr+0x163/0x360
[ 108.089758][ T5463] ? __pfx_vfs_setxattr+0x10/0x10
[ 108.089767][ T5463] filename_setxattr+0x296/0x630
[ 108.089775][ T5463] ? __pfx_filename_setxattr+0x10/0x10
[ 108.089783][ T5463] ? do_getname+0x151/0x250
[ 108.089791][ T5463] path_setxattrat+0x3eb/0x440
[ 108.089801][ T5463] ? __pfx_path_setxattrat+0x10/0x10
[ 108.089809][ T5463] ? do_futex+0x395/0x420
[ 108.089843][ T5463] ? do_sys_truncate+0x173/0x1c0
[ 108.089855][ T5463] ? __pfx___se_sys_futex+0x10/0x10
[ 108.089867][ T5463] __x64_sys_lsetxattr+0xbf/0xe0
[ 108.089879][ T5463] do_syscall_64+0x14d/0xf80
[ 108.089893][ T5463] ? trace_irq_disable+0x3b/0x150
[ 108.089906][ T5463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.089918][ T5463] ? clear_bhb_loop+0x40/0x90
[ 108.089929][ T5463] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.089936][ T5463] RIP: 0033:0x7f055e19c629
[ 108.089944][ T5463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 108.089949][ T5463] RSP: 002b:00007ffef939a1c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[ 108.089957][ T5463] RAX: ffffffffffffffda RBX: 00007f055e415fa0 RCX: 00007f055e19c629
[ 108.089962][ T5463] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000200000000100
[ 108.089966][ T5463] RBP: 00007f055e232b39 R08: 0000000000000000 R09: 0000000000000000
[ 108.089970][ T5463] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000
[ 108.089974][ T5463] R13: 00007f055e415fac R14: 00007f055e415fa0 R15: 00007f055e415fa0
[ 108.089981][ T5463]
[ 108.089983][ T5463]
[ 108.223917][ T5463] Allocated by task 5463:
[ 108.225926][ T5463] kasan_save_track+0x3e/0x80
[ 108.227967][ T5463] __kasan_kmalloc+0x93/0xb0
[ 108.230126][ T5463] __kmalloc_node_track_caller_noprof+0x4db/0x7b0
[ 108.233010][ T5463] kmemdup_noprof+0x2b/0x70
[ 108.235085][ T5463] ext4_xattr_block_set+0x787/0x2ad0
[ 108.237499][ T5463] ext4_xattr_set_handle+0xe05/0x14c0
[ 108.239922][ T5463] ext4_xattr_set+0x255/0x340
[ 108.241971][ T5463] __vfs_setxattr+0x43c/0x480
[ 108.243869][ T5463] __vfs_setxattr_noperm+0x12d/0x660
[ 108.246212][ T5463] vfs_setxattr+0x163/0x360
[ 108.248331][ T5463] filename_setxattr+0x296/0x630
[ 108.250607][ T5463] path_setxattrat+0x3eb/0x440
[ 108.252803][ T5463] __x64_sys_lsetxattr+0xbf/0xe0
[ 108.255093][ T5463] do_syscall_64+0x14d/0xf80
[ 108.257221][ T5463] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.259896][ T5463]
[ 108.261036][ T5463] The buggy address belongs to the object at ffff88801cbba000
[ 108.261036][ T5463] which belongs to the cache kmalloc-1k of size 1024
[ 108.267223][ T5463] The buggy address is located 112 bytes inside of
[ 108.267223][ T5463] 1024-byte region [ffff88801cbba000, ffff88801cbba400)
[ 108.273212][ T5463]
[ 108.274351][ T5463] The buggy address belongs to the physical page:
[ 108.277287][ T5463] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1cbb8
[ 108.281221][ T5463] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 108.285000][ T5463] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 108.288389][ T5463] page_type: f5(slab)
[ 108.290238][ T5463] raw: 00fff00000000040 ffff88801a841dc0 dead000000000122 0000000000000000
[ 108.294054][ T5463] raw: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 108.297739][ T5463] head: 00fff00000000040 ffff88801a841dc0 dead000000000122 0000000000000000
[ 108.301429][ T5463] head: 0000000000000000 0000000000080008 00000000f5000000 0000000000000000
[ 108.305220][ T5463] head: 00fff00000000002 ffffea000072ee01 00000000ffffffff 00000000ffffffff
[ 108.309141][ T5463] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 108.312952][ T5463] page dumped because: kasan: bad access detected
[ 108.315844][ T5463] page_owner tracks the page as allocated
[ 108.318447][ T5463] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5463, tgid 5463 (syz.0.17), ts 108014286892, free_ts 106810126459
[ 108.327759][ T5463] post_alloc_hook+0x231/0x280
[ 108.329991][ T5463] get_page_from_freelist+0x24dc/0x2580
[ 108.332382][ T5463] __alloc_frozen_pages_noprof+0x18d/0x380
[ 108.334807][ T5463] allocate_slab+0x77/0x660
[ 108.336690][ T5463] refill_objects+0x331/0x3c0
[ 108.338614][ T5463] __pcs_replace_empty_main+0x2b9/0x620
[ 108.340845][ T5463] __kmalloc_noprof+0x474/0x760
[ 108.342865][ T5463] __alloc_workqueue+0xff/0x1e90
[ 108.344931][ T5463] alloc_workqueue_noprof+0xe3/0x210
[ 108.347266][ T5463] ext4_fill_super+0x4a5d/0x6320
[ 108.349602][ T5463] get_tree_bdev_flags+0x431/0x4f0
[ 108.351912][ T5463] vfs_get_tree+0x92/0x2a0
[ 108.353937][ T5463] do_new_mount+0x341/0xd30
[ 108.355950][ T5463] __se_sys_mount+0x31d/0x420
[ 108.358111][ T5463] do_syscall_64+0x14d/0xf80
[ 108.360036][ T5463] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.362497][ T5463] page last free pid 127 tgid 127 stack trace:
[ 108.365124][ T5463] __free_frozen_pages+0xc2b/0xdb0
[ 108.367244][ T5463] __slab_free+0x263/0x2b0
[ 108.369119][ T5463] qlist_free_all+0x97/0x100
[ 108.371067][ T5463] kasan_quarantine_reduce+0x148/0x160
[ 108.373356][ T5463] __kasan_slab_alloc+0x22/0x80
[ 108.375632][ T5463] __kmalloc_cache_noprof+0x2ba/0x660
[ 108.378143][ T5463] gro_cells_destroy+0x357/0x430
[ 108.380453][ T5463] ip6gre_dev_free+0x19/0x30
[ 108.382592][ T5463] netdev_run_todo+0xc1f/0xde0
[ 108.384858][ T5463] ops_undo_list+0x3d8/0x940
[ 108.386983][ T5463] cleanup_net+0x56b/0x800
[ 108.389078][ T5463] process_scheduled_works+0xb02/0x1830
[ 108.391486][ T5463] worker_thread+0xa50/0xfc0
[ 108.393617][ T5463] kthread+0x388/0x470
[ 108.395508][ T5463] ret_from_fork+0x51e/0xb90
[ 108.397644][ T5463] ret_from_fork_asm+0x1a/0x30
[ 108.399781][ T5463]
[ 108.400845][ T5463] Memory state around the buggy address:
[ 108.403353][ T5463] ffff88801cbb9f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 108.406960][ T5463] ffff88801cbb9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 108.410504][ T5463] >ffff88801cbba000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 108.413908][ T5463] ^
[ 108.417314][ T5463] ffff88801cbba080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 108.420813][ T5463] ffff88801cbba100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 108.424433][ T5463] ==================================================================
[ 108.456701][ T5463] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 108.459968][ T5463] CPU: 0 UID: 0 PID: 5463 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 108.464055][ T5463] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2 04/01/2014
[ 108.468632][ T5463] Call Trace:
[ 108.470194][ T5463]
[ 108.471565][ T5463] vpanic+0x56c/0xa60
[ 108.473449][ T5463] ? __pfx_vpanic+0x10/0x10
[ 108.475587][ T5463] panic+0xc5/0xd0
[ 108.477360][ T5463] ? __pfx_panic+0x10/0x10
[ 108.479425][ T5463] ? preempt_schedule_thunk+0x16/0x30
[ 108.481885][ T5463] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 108.484394][ T5463] ? preempt_schedule_thunk+0x16/0x30
[ 108.486919][ T5463] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 108.489420][ T5463] check_panic_on_warn+0x89/0xb0
[ 108.491657][ T5463] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 108.494204][ T5463] end_report+0x73/0x180
[ 108.496189][ T5463] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 108.498682][ T5463] kasan_report+0x128/0x150
[ 108.500779][ T5463] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 108.503235][ T5463] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 108.505664][ T5463] kasan_check_range+0x264/0x2c0
[ 108.507710][ T5463] ? ext4_xattr_set_entry+0x9c1/0x1e20
[ 108.509966][ T5463] __asan_memmove+0x29/0x70
[ 108.511848][ T5463] ext4_xattr_set_entry+0x9c1/0x1e20
[ 108.514264][ T5463] ext4_xattr_block_set+0x878/0x2ad0
[ 108.516755][ T5463] ? __pfx_do_raw_spin_lock+0x10/0x10
[ 108.519125][ T5463] ? __pfx_ext4_xattr_block_set+0x10/0x10
[ 108.521753][ T5463] ? _raw_spin_unlock+0x28/0x50
[ 108.523996][ T5463] ? ext4_xattr_ibody_set+0x554/0x6a0
[ 108.526405][ T5463] ext4_xattr_set_handle+0xe05/0x14c0
[ 108.528830][ T5463] ? __pfx_ext4_xattr_set_handle+0x10/0x10
[ 108.531380][ T5463] ext4_xattr_set+0x255/0x340
[ 108.533525][ T5463] ? __pfx_ext4_xattr_set+0x10/0x10
[ 108.535828][ T5463] ? __pfx_evm_protect_xattr+0x10/0x10
[ 108.538234][ T5463] ? __pfx_ext4_xattr_trusted_set+0x10/0x10
[ 108.540933][ T5463] __vfs_setxattr+0x43c/0x480
[ 108.543121][ T5463] __vfs_setxattr_noperm+0x12d/0x660
[ 108.545607][ T5463] vfs_setxattr+0x163/0x360
[ 108.547701][ T5463] ? __pfx_vfs_setxattr+0x10/0x10
[ 108.550001][ T5463] filename_setxattr+0x296/0x630
[ 108.552261][ T5463] ? __pfx_filename_setxattr+0x10/0x10
[ 108.554736][ T5463] ? do_getname+0x151/0x250
[ 108.556831][ T5463] path_setxattrat+0x3eb/0x440
[ 108.559056][ T5463] ? __pfx_path_setxattrat+0x10/0x10
[ 108.561468][ T5463] ? do_futex+0x395/0x420
[ 108.563414][ T5463] ? do_sys_truncate+0x173/0x1c0
[ 108.565694][ T5463] ? __pfx___se_sys_futex+0x10/0x10
[ 108.568091][ T5463] __x64_sys_lsetxattr+0xbf/0xe0
[ 108.570318][ T5463] do_syscall_64+0x14d/0xf80
[ 108.572381][ T5463] ? trace_irq_disable+0x3b/0x150
[ 108.574597][ T5463] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.577312][ T5463] ? clear_bhb_loop+0x40/0x90
[ 108.579429][ T5463] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 108.582027][ T5463] RIP: 0033:0x7f055e19c629
[ 108.583980][ T5463] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 108.592327][ T5463] RSP: 002b:00007ffef939a1c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[ 108.596144][ T5463] RAX: ffffffffffffffda RBX: 00007f055e415fa0 RCX: 00007f055e19c629
[ 108.599590][ T5463] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000200000000100
[ 108.603222][ T5463] RBP: 00007f055e232b39 R08: 0000000000000000 R09: 0000000000000000
[ 108.606846][ T5463] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000
[ 108.610419][ T5463] R13: 00007f055e415fac R14: 00007f055e415fa0 R15: 00007f055e415fa0
[ 108.614015][ T5463]
[ 108.615936][ T5463] Kernel Offset: disabled
[ 108.617925][ T5463] Rebooting in 86400 seconds..
VM DIAGNOSIS:
00:33:22 Registers:
info registers vcpu 0
CPU#0
RAX=000000000000007a RBX=000000000000007a RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc9000387ed90
R8 =ffff888034d38237 R9 =1ffff110069a7046 R10=dffffc0000000000 R11=ffffffff85417e70
R12=dffffc0000000000 R13=ffffffff9a2bba62 R14=ffffffff9a5d3c60 R15=0000000000000000
RIP=ffffffff85417eec RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055556b576500 ffffffff 00c00000
GS =0000 ffff88808ca5b000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000f000 CR3=00000000126c7000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 307a79732f74656e 2f70756f7267637a
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef939a616
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffef939a616 00007ffef939a61c
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f055e23319f
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f055e2331df
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f055e233343
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f055e2331d1
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 6379656b00657461 69746e6174736e69 246c746379656b00 7974697275636573
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000000000004c
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000001 0000000000000000 0000000000000000 000000000000004c
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000