Warning: Permanently added '10.128.0.86' (ED25519) to the list of known hosts.
2026/03/04 04:39:02 parsed 1 programs
[ 75.253762][ T5772] cgroup: Unknown subsys name 'net'
[ 75.391903][ T5772] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 76.962197][ T5772] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 78.912983][ T5790] chnl_net:caif_netlink_parms(): no params data found
[ 78.980346][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state
[ 78.987881][ T5790] bridge0: port 1(bridge_slave_0) entered disabled state
[ 78.995473][ T5790] bridge_slave_0: entered allmulticast mode
[ 79.002365][ T5790] bridge_slave_0: entered promiscuous mode
[ 79.014385][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.021737][ T5790] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.029186][ T5790] bridge_slave_1: entered allmulticast mode
[ 79.036236][ T5790] bridge_slave_1: entered promiscuous mode
[ 79.063628][ T5790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 79.074992][ T5790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 79.103949][ T5790] team0: Port device team_slave_0 added
[ 79.116141][ T5790] team0: Port device team_slave_1 added
[ 79.138250][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 79.145227][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 79.171145][ T5790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 79.184852][ T5790] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 79.191820][ T5790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 79.218368][ T5790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 79.265678][ T5790] hsr_slave_0: entered promiscuous mode
[ 79.272063][ T5790] hsr_slave_1: entered promiscuous mode
[ 79.422909][ T5790] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 79.434573][ T5790] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 79.445116][ T5790] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 79.454262][ T5790] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 79.482574][ T5790] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.489910][ T5790] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 79.497687][ T5790] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.504937][ T5790] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.560203][ T5790] 8021q: adding VLAN 0 to HW filter on device bond0
[ 79.582068][ T3480] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.591985][ T3480] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.608431][ T5790] 8021q: adding VLAN 0 to HW filter on device team0
[ 79.623029][ T3491] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.630237][ T3491] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 79.642661][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.649862][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 79.840705][ T5790] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 79.883199][ T5790] veth0_vlan: entered promiscuous mode
[ 79.894765][ T5790] veth1_vlan: entered promiscuous mode
[ 79.926011][ T5790] veth0_macvtap: entered promiscuous mode
[ 79.935688][ T5790] veth1_macvtap: entered promiscuous mode
[ 79.953138][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 79.969373][ T5790] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 79.983029][ T5790] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 79.992071][ T5790] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.003945][ T5790] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.012997][ T5790] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 80.139432][ T5790] syz-executor (5790) used greatest stack depth: 20176 bytes left
[ 80.175997][ T3491] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 81.975518][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 81.984003][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 81.991983][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 82.000524][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 82.008200][ T5852] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 82.015618][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 82.292654][ T3480] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 82.300753][ T3480] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 82.332585][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 82.341887][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 82.717031][ T3491] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2026/03/04 04:39:12 executed programs: 0
[ 83.190596][ T5082] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 83.199337][ T5082] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 83.208476][ T5082] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 83.217591][ T5082] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 83.226134][ T5082] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3
[ 83.233543][ T5082] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 83.361440][ T5874] chnl_net:caif_netlink_parms(): no params data found
[ 83.422050][ T5874] bridge0: port 1(bridge_slave_0) entered blocking state
[ 83.429406][ T5874] bridge0: port 1(bridge_slave_0) entered disabled state
[ 83.436696][ T5874] bridge_slave_0: entered allmulticast mode
[ 83.443497][ T5874] bridge_slave_0: entered promiscuous mode
[ 83.451359][ T5874] bridge0: port 2(bridge_slave_1) entered blocking state
[ 83.458572][ T5874] bridge0: port 2(bridge_slave_1) entered disabled state
[ 83.465926][ T5874] bridge_slave_1: entered allmulticast mode
[ 83.472750][ T5874] bridge_slave_1: entered promiscuous mode
[ 83.498127][ T5874] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 83.509892][ T5874] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 83.538391][ T5874] team0: Port device team_slave_0 added
[ 83.546247][ T5874] team0: Port device team_slave_1 added
[ 83.569293][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 83.576292][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 83.604915][ T5874] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 83.617933][ T5874] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 83.625253][ T5874] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 83.651388][ T5874] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 83.688509][ T5874] hsr_slave_0: entered promiscuous mode
[ 83.694893][ T5874] hsr_slave_1: entered promiscuous mode
[ 83.701078][ T5874] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 83.709762][ T5874] Cannot create hsr debugfs directory
[ 85.027684][ T3491] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 85.096934][ T3491] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 85.267224][ T5852] Bluetooth: hci0: command tx timeout
[ 85.949094][ T3491] hsr_slave_0: left promiscuous mode
[ 85.955502][ T3491] hsr_slave_1: left promiscuous mode
[ 85.961813][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 85.971642][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 85.980982][ T3491] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 85.991538][ T3491] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 85.999726][ T3491] bridge_slave_1: left allmulticast mode
[ 86.007599][ T3491] bridge_slave_1: left promiscuous mode
[ 86.013858][ T3491] bridge0: port 2(bridge_slave_1) entered disabled state
[ 86.026665][ T3491] bridge_slave_0: left allmulticast mode
[ 86.032340][ T3491] bridge_slave_0: left promiscuous mode
[ 86.041475][ T3491] bridge0: port 1(bridge_slave_0) entered disabled state
[ 86.067261][ T3491] veth1_macvtap: left promiscuous mode
[ 86.072936][ T3491] veth0_macvtap: left promiscuous mode
[ 86.078707][ T3491] veth1_vlan: left promiscuous mode
[ 86.084398][ T3491] veth0_vlan: left promiscuous mode
[ 86.448380][ T3491] team0 (unregistering): Port device team_slave_1 removed
[ 86.478793][ T3491] team0 (unregistering): Port device team_slave_0 removed
[ 86.512854][ T3491] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 86.541677][ T3491] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 86.643057][ T42] cfg80211: failed to load regulatory.db
[ 86.736714][ T3491] bond0 (unregistering): Released all slaves
[ 86.827442][ T5874] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 86.837077][ T5874] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 86.847827][ T5874] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 86.858897][ T5874] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 86.949417][ T5874] 8021q: adding VLAN 0 to HW filter on device bond0
[ 86.969795][ T5874] 8021q: adding VLAN 0 to HW filter on device team0
[ 86.986932][ T1044] bridge0: port 1(bridge_slave_0) entered blocking state
[ 86.994114][ T1044] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 87.014152][ T11] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.021312][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 87.058562][ T5874] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 87.069566][ T5874] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 87.238335][ T5874] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 87.349701][ T5852] Bluetooth: hci0: command tx timeout
[ 87.367037][ T5874] veth0_vlan: entered promiscuous mode
[ 87.378908][ T5874] veth1_vlan: entered promiscuous mode
[ 87.423673][ T5874] veth0_macvtap: entered promiscuous mode
[ 87.439320][ T5874] veth1_macvtap: entered promiscuous mode
[ 87.464549][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 87.477575][ T5874] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 87.494413][ T5874] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.503723][ T5874] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.512550][ T5874] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.521715][ T5874] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 87.578596][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.590331][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.611575][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 87.621163][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 87.662057][ T5914] syz.0.17[5914]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set
[ 87.683815][ T5914] loop0: detected capacity change from 0 to 1024
[ 87.692036][ T5914] =======================================================
[ 87.692036][ T5914] WARNING: The mand mount option has been deprecated and
[ 87.692036][ T5914] and is ignored by this kernel. Remove the mand
[ 87.692036][ T5914] option from the mount to silence this warning.
[ 87.692036][ T5914] =======================================================
[ 87.768966][ T5914] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none.
[ 87.790652][ T5914] ==================================================================
[ 87.798844][ T5914] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x94b/0x1e90
[ 87.806613][ T5914] Read of size 18446744073709551588 at addr ffff8880254b7040 by task syz.0.17/5914
[ 87.815934][ T5914]
[ 87.818290][ T5914] CPU: 1 PID: 5914 Comm: syz.0.17 Not tainted syzkaller #0
[ 87.825503][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 87.835591][ T5914] Call Trace:
[ 87.838899][ T5914]
[ 87.841847][ T5914] dump_stack_lvl+0x18c/0x250
[ 87.846558][ T5914] ? read_lock_is_recursive+0x20/0x20
[ 87.851963][ T5914] ? show_regs_print_info+0x20/0x20
[ 87.857192][ T5914] ? load_image+0x400/0x400
[ 87.861722][ T5914] ? _raw_spin_lock_irqsave+0xc0/0x100
[ 87.867206][ T5914] ? __virt_addr_valid+0x18c/0x540
[ 87.872352][ T5914] ? __virt_addr_valid+0x469/0x540
[ 87.877496][ T5914] print_report+0xa8/0x210
[ 87.881946][ T5914] ? ext4_xattr_set_entry+0x94b/0x1e90
[ 87.887453][ T5914] kasan_report+0x117/0x150
[ 87.891991][ T5914] ? ext4_xattr_set_entry+0x94b/0x1e90
[ 87.897468][ T5914] ? ext4_xattr_set_entry+0x94b/0x1e90
[ 87.902942][ T5914] kasan_check_range+0x241/0x290
[ 87.907891][ T5914] ? ext4_xattr_set_entry+0x94b/0x1e90
[ 87.913375][ T5914] __asan_memmove+0x29/0x70
[ 87.917918][ T5914] ext4_xattr_set_entry+0x94b/0x1e90
[ 87.923230][ T5914] ext4_xattr_block_set+0xae8/0x32b0
[ 87.928528][ T5914] ? ext4_destroy_inode+0x200/0x200
[ 87.933747][ T5914] ? proc_nr_inodes+0x230/0x230
[ 87.938607][ T5914] ? do_raw_spin_unlock+0x121/0x230
[ 87.943821][ T5914] ? _raw_spin_unlock+0x28/0x40
[ 87.948682][ T5914] ? ext4_xattr_block_find+0x350/0x350
[ 87.954158][ T5914] ? ext4_xattr_ibody_set+0x50d/0x6a0
[ 87.959552][ T5914] ext4_xattr_set_handle+0x1280/0x14c0
[ 87.965033][ T5914] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0
[ 87.971033][ T5914] ? __ext4_journal_start_sb+0x259/0x560
[ 87.976782][ T5914] ext4_xattr_set+0x252/0x340
[ 87.981482][ T5914] ? end_current_label_crit_section+0x170/0x170
[ 87.987743][ T5914] ? ext4_xattr_set_credits+0x2f0/0x2f0
[ 87.993312][ T5914] ? posix_xattr_acl+0x93/0xb0
[ 87.998081][ T5914] ? ext4_xattr_trusted_get+0x40/0x40
[ 88.003469][ T5914] __vfs_setxattr+0x431/0x470
[ 88.008168][ T5914] __vfs_setxattr_noperm+0x12d/0x5e0
[ 88.013477][ T5914] vfs_setxattr+0x16b/0x2f0
[ 88.018001][ T5914] ? xattr_permission+0x470/0x470
[ 88.023042][ T5914] ? __mnt_want_write+0x223/0x2a0
[ 88.028085][ T5914] ? path_setxattr+0x3a1/0x5d0
[ 88.032865][ T5914] path_setxattr+0x3f3/0x5d0
[ 88.037471][ T5914] ? simple_xattrs_free+0x150/0x150
[ 88.042696][ T5914] ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 88.048688][ T5914] ? lock_chain_count+0x20/0x20
[ 88.053552][ T5914] __x64_sys_lsetxattr+0xb8/0xd0
[ 88.058503][ T5914] do_syscall_64+0x55/0xa0
[ 88.062935][ T5914] ? clear_bhb_loop+0x40/0x90
[ 88.067625][ T5914] ? clear_bhb_loop+0x40/0x90
[ 88.072351][ T5914] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 88.078261][ T5914] RIP: 0033:0x7f023219c799
[ 88.082694][ T5914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 88.102311][ T5914] RSP: 002b:00007ffceba6d8e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[ 88.110739][ T5914] RAX: ffffffffffffffda RBX: 00007f0232415fa0 RCX: 00007f023219c799
[ 88.118720][ T5914] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0
[ 88.126699][ T5914] RBP: 00007f0232232bd9 R08: 0000000000000000 R09: 0000000000000000
[ 88.134680][ T5914] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000
[ 88.142673][ T5914] R13: 00007f0232415fac R14: 00007f0232415fa0 R15: 00007f0232415fa0
[ 88.150658][ T5914]
[ 88.153681][ T5914]
[ 88.156013][ T5914] Allocated by task 5914:
[ 88.160341][ T5914] kasan_set_track+0x4e/0x70
[ 88.164941][ T5914] __kasan_kmalloc+0x8f/0xa0
[ 88.169543][ T5914] __kmalloc_node_track_caller+0xb2/0x230
[ 88.175275][ T5914] kmemdup+0x2b/0x70
[ 88.179176][ T5914] ext4_xattr_block_set+0x9ea/0x32b0
[ 88.184470][ T5914] ext4_xattr_set_handle+0x1280/0x14c0
[ 88.189935][ T5914] ext4_xattr_set+0x252/0x340
[ 88.194621][ T5914] __vfs_setxattr+0x431/0x470
[ 88.199309][ T5914] __vfs_setxattr_noperm+0x12d/0x5e0
[ 88.204605][ T5914] vfs_setxattr+0x16b/0x2f0
[ 88.209119][ T5914] path_setxattr+0x3f3/0x5d0
[ 88.213731][ T5914] __x64_sys_lsetxattr+0xb8/0xd0
[ 88.218676][ T5914] do_syscall_64+0x55/0xa0
[ 88.223110][ T5914] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 88.229031][ T5914]
[ 88.231361][ T5914] The buggy address belongs to the object at ffff8880254b7000
[ 88.231361][ T5914] which belongs to the cache kmalloc-1k of size 1024
[ 88.245426][ T5914] The buggy address is located 64 bytes inside of
[ 88.245426][ T5914] 1024-byte region [ffff8880254b7000, ffff8880254b7400)
[ 88.258712][ T5914]
[ 88.261037][ T5914] The buggy address belongs to the physical page:
[ 88.267456][ T5914] page:ffffea0000952c00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x254b0
[ 88.277619][ T5914] head:ffffea0000952c00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 88.286550][ T5914] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff)
[ 88.294531][ T5914] page_type: 0xffffffff()
[ 88.298876][ T5914] raw: 00fff00000000840 ffff888017c41dc0 dead000000000122 0000000000000000
[ 88.307464][ T5914] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 88.316052][ T5914] page dumped because: kasan: bad access detected
[ 88.322461][ T5914] page_owner tracks the page as allocated
[ 88.328174][ T5914] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5874, tgid 5874 (syz-executor), ts 87646641749, free_ts 87633149775
[ 88.350930][ T5914] post_alloc_hook+0x1c1/0x200
[ 88.355712][ T5914] get_page_from_freelist+0x1951/0x19e0
[ 88.361263][ T5914] __alloc_pages+0x1f0/0x460
[ 88.365852][ T5914] alloc_slab_page+0x5d/0x160
[ 88.370534][ T5914] new_slab+0x87/0x2d0
[ 88.374618][ T5914] ___slab_alloc+0xc5d/0x12f0
[ 88.379311][ T5914] __kmem_cache_alloc_node+0x19e/0x250
[ 88.384785][ T5914] __kmalloc+0xa4/0x230
[ 88.388962][ T5914] ipt_alloc_initial_table+0x6e/0x610
[ 88.394341][ T5914] iptable_filter_table_init+0x1c/0xb0
[ 88.399810][ T5914] xt_find_table_lock+0x306/0x3e0
[ 88.404839][ T5914] xt_request_find_table_lock+0x26/0x100
[ 88.410474][ T5914] do_ipt_get_ctl+0x717/0x1200
[ 88.415242][ T5914] nf_getsockopt+0x262/0x280
[ 88.419836][ T5914] ip_getsockopt+0x19f/0x230
[ 88.424431][ T5914] do_sock_getsockopt+0x379/0x450
[ 88.429469][ T5914] page last free stack trace:
[ 88.434141][ T5914] free_unref_page_prepare+0x7b2/0x8c0
[ 88.439610][ T5914] free_unref_page+0x32/0x2e0
[ 88.444298][ T5914] __slab_free+0x35a/0x400
[ 88.448720][ T5914] qlist_free_all+0x75/0xd0
[ 88.453237][ T5914] kasan_quarantine_reduce+0x143/0x160
[ 88.458713][ T5914] __kasan_slab_alloc+0x22/0x80
[ 88.463598][ T5914] slab_post_alloc_hook+0x6e/0x4b0
[ 88.468723][ T5914] __kmem_cache_alloc_node+0x13a/0x250
[ 88.474194][ T5914] kmalloc_trace+0x2a/0xe0
[ 88.478624][ T5914] alloc_fs_context+0x61/0x7c0
[ 88.483392][ T5914] do_new_mount+0x10f/0xa40
[ 88.487895][ T5914] __se_sys_mount+0x2e7/0x3d0
[ 88.492578][ T5914] do_syscall_64+0x55/0xa0
[ 88.497008][ T5914] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 88.502916][ T5914]
[ 88.505245][ T5914] Memory state around the buggy address:
[ 88.510878][ T5914] ffff8880254b6f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 88.518945][ T5914] ffff8880254b6f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 88.527013][ T5914] >ffff8880254b7000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 88.535073][ T5914] ^
[ 88.541222][ T5914] ffff8880254b7080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 88.549282][ T5914] ffff8880254b7100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 88.557343][ T5914] ==================================================================
[ 88.604529][ T5914] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 88.611776][ T5914] CPU: 1 PID: 5914 Comm: syz.0.17 Not tainted syzkaller #0
[ 88.619007][ T5914] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 88.629081][ T5914] Call Trace:
[ 88.632380][ T5914]
[ 88.635335][ T5914] dump_stack_lvl+0x18c/0x250
[ 88.640045][ T5914] ? show_regs_print_info+0x20/0x20
[ 88.645270][ T5914] ? load_image+0x400/0x400
[ 88.649807][ T5914] panic+0x2dc/0x730
[ 88.653738][ T5914] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20
[ 88.659915][ T5914] ? bpf_jit_dump+0xd0/0xd0
[ 88.664449][ T5914] ? _raw_spin_unlock_irqrestore+0x111/0x120
[ 88.670459][ T5914] ? _raw_spin_unlock+0x40/0x40
[ 88.675318][ T5914] ? ext4_xattr_set_entry+0x94b/0x1e90
[ 88.680806][ T5914] check_panic_on_warn+0x84/0xa0
[ 88.685779][ T5914] ? ext4_xattr_set_entry+0x94b/0x1e90
[ 88.691250][ T5914] end_report+0x6f/0x130
[ 88.695503][ T5914] kasan_report+0x128/0x150
[ 88.700013][ T5914] ? ext4_xattr_set_entry+0x94b/0x1e90
[ 88.705492][ T5914] ? ext4_xattr_set_entry+0x94b/0x1e90
[ 88.710961][ T5914] kasan_check_range+0x241/0x290
[ 88.715906][ T5914] ? ext4_xattr_set_entry+0x94b/0x1e90
[ 88.721406][ T5914] __asan_memmove+0x29/0x70
[ 88.725936][ T5914] ext4_xattr_set_entry+0x94b/0x1e90
[ 88.731243][ T5914] ext4_xattr_block_set+0xae8/0x32b0
[ 88.736539][ T5914] ? ext4_destroy_inode+0x200/0x200
[ 88.741762][ T5914] ? proc_nr_inodes+0x230/0x230
[ 88.746631][ T5914] ? do_raw_spin_unlock+0x121/0x230
[ 88.751876][ T5914] ? _raw_spin_unlock+0x28/0x40
[ 88.756729][ T5914] ? ext4_xattr_block_find+0x350/0x350
[ 88.762188][ T5914] ? ext4_xattr_ibody_set+0x50d/0x6a0
[ 88.767560][ T5914] ext4_xattr_set_handle+0x1280/0x14c0
[ 88.773048][ T5914] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0
[ 88.779029][ T5914] ? __ext4_journal_start_sb+0x259/0x560
[ 88.784678][ T5914] ext4_xattr_set+0x252/0x340
[ 88.789394][ T5914] ? end_current_label_crit_section+0x170/0x170
[ 88.795674][ T5914] ? ext4_xattr_set_credits+0x2f0/0x2f0
[ 88.801257][ T5914] ? posix_xattr_acl+0x93/0xb0
[ 88.806040][ T5914] ? ext4_xattr_trusted_get+0x40/0x40
[ 88.811443][ T5914] __vfs_setxattr+0x431/0x470
[ 88.816150][ T5914] __vfs_setxattr_noperm+0x12d/0x5e0
[ 88.821470][ T5914] vfs_setxattr+0x16b/0x2f0
[ 88.826001][ T5914] ? xattr_permission+0x470/0x470
[ 88.831048][ T5914] ? __mnt_want_write+0x223/0x2a0
[ 88.836129][ T5914] ? path_setxattr+0x3a1/0x5d0
[ 88.840898][ T5914] path_setxattr+0x3f3/0x5d0
[ 88.845488][ T5914] ? simple_xattrs_free+0x150/0x150
[ 88.850701][ T5914] ? lockdep_hardirqs_on_prepare+0x40d/0x770
[ 88.856680][ T5914] ? lock_chain_count+0x20/0x20
[ 88.861527][ T5914] __x64_sys_lsetxattr+0xb8/0xd0
[ 88.866500][ T5914] do_syscall_64+0x55/0xa0
[ 88.870915][ T5914] ? clear_bhb_loop+0x40/0x90
[ 88.875590][ T5914] ? clear_bhb_loop+0x40/0x90
[ 88.880259][ T5914] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 88.886144][ T5914] RIP: 0033:0x7f023219c799
[ 88.890695][ T5914] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 88.910321][ T5914] RSP: 002b:00007ffceba6d8e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[ 88.918764][ T5914] RAX: ffffffffffffffda RBX: 00007f0232415fa0 RCX: 00007f023219c799
[ 88.926760][ T5914] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0
[ 88.934747][ T5914] RBP: 00007f0232232bd9 R08: 0000000000000000 R09: 0000000000000000
[ 88.942736][ T5914] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000
[ 88.950730][ T5914] R13: 00007f0232415fac R14: 00007f0232415fa0 R15: 00007f0232415fa0
[ 88.958733][ T5914]
[ 88.961881][ T5914] Kernel Offset: disabled
[ 88.966200][ T5914] Rebooting in 86400 seconds..