Warning: Permanently added '10.128.0.76' (ED25519) to the list of known hosts. 2026/01/31 11:41:45 parsed 1 programs [ 80.282818][ T5780] cgroup: Unknown subsys name 'net' [ 80.415168][ T5780] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.819491][ T5780] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.890165][ T8] cfg80211: failed to load regulatory.db [ 84.377446][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.386204][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.411890][ T3445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.419796][ T3445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.022988][ T5850] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 86.031600][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 86.042061][ T5850] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 86.059485][ T5850] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 86.067910][ T5850] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 86.075346][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 86.457001][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 86.541305][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.549678][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.556969][ T5856] bridge_slave_0: entered allmulticast mode [ 86.565215][ T5856] bridge_slave_0: entered promiscuous mode [ 86.574262][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.585399][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.592741][ T5856] bridge_slave_1: entered allmulticast mode [ 86.599666][ T5856] bridge_slave_1: entered promiscuous mode [ 86.630241][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.643118][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.675643][ T5856] team0: Port device team_slave_0 added [ 86.684721][ T5856] team0: Port device team_slave_1 added [ 86.713701][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.720857][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.746898][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.760789][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.768343][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.795213][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.840936][ T5856] hsr_slave_0: entered promiscuous mode [ 86.850254][ T5856] hsr_slave_1: entered promiscuous mode [ 87.045079][ T5856] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.057318][ T5856] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.069466][ T5856] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.079364][ T5856] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.105398][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.112652][ T5856] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.120893][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.128536][ T5856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.190140][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.207034][ T1117] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.221157][ T1117] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.239609][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.261767][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.268926][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.281796][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.288938][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.505534][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.546441][ T5856] veth0_vlan: entered promiscuous mode [ 87.572383][ T5856] veth1_vlan: entered promiscuous mode [ 87.612917][ T5856] veth0_macvtap: entered promiscuous mode [ 87.623925][ T5856] veth1_macvtap: entered promiscuous mode [ 87.643774][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.667101][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.684360][ T5856] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.693501][ T5856] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.702305][ T5856] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.711434][ T5856] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.041008][ T59] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/01/31 11:41:55 executed programs: 0 [ 88.330233][ T5084] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.339437][ T5084] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.347251][ T5084] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.355898][ T5084] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.364354][ T5084] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 88.372958][ T5084] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.498765][ T5882] chnl_net:caif_netlink_parms(): no params data found [ 88.566697][ T5882] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.573934][ T5882] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.581323][ T5882] bridge_slave_0: entered allmulticast mode [ 88.588354][ T5882] bridge_slave_0: entered promiscuous mode [ 88.596484][ T5882] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.603818][ T5882] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.611397][ T5882] bridge_slave_1: entered allmulticast mode [ 88.620279][ T5882] bridge_slave_1: entered promiscuous mode [ 88.652600][ T5882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.664501][ T5882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.691759][ T5882] team0: Port device team_slave_0 added [ 88.700795][ T5882] team0: Port device team_slave_1 added [ 88.725239][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.732461][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.759049][ T5882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.772333][ T5882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.779852][ T5882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.806116][ T5882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.846974][ T5882] hsr_slave_0: entered promiscuous mode [ 88.854641][ T5882] hsr_slave_1: entered promiscuous mode [ 88.861765][ T5882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.871702][ T5882] Cannot create hsr debugfs directory [ 90.448926][ T5084] Bluetooth: hci0: command tx timeout [ 90.561466][ T59] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.528540][ T5084] Bluetooth: hci0: command tx timeout [ 92.780321][ T59] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.841009][ T59] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.740265][ T59] hsr_slave_0: left promiscuous mode [ 93.746174][ T59] hsr_slave_1: left promiscuous mode [ 93.752451][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.760190][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.768705][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.776311][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.784537][ T59] bridge_slave_1: left allmulticast mode [ 93.790263][ T59] bridge_slave_1: left promiscuous mode [ 93.796971][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.809552][ T59] bridge_slave_0: left allmulticast mode [ 93.815322][ T59] bridge_slave_0: left promiscuous mode [ 93.821334][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.842173][ T59] veth1_macvtap: left promiscuous mode [ 93.848296][ T59] veth0_macvtap: left promiscuous mode [ 93.853984][ T59] veth1_vlan: left promiscuous mode [ 93.860262][ T59] veth0_vlan: left promiscuous mode [ 94.285179][ T59] team0 (unregistering): Port device team_slave_1 removed [ 94.320300][ T59] team0 (unregistering): Port device team_slave_0 removed [ 94.351486][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.387697][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.621048][ T5084] Bluetooth: hci0: command tx timeout [ 94.628944][ T59] bond0 (unregistering): Released all slaves [ 94.714978][ T5882] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 94.725124][ T5882] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 94.734718][ T5882] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 94.749577][ T5882] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 94.873997][ T5882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.891960][ T5882] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.904096][ T3486] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.911269][ T3486] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.929279][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.936458][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.142612][ T5882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.180051][ T5882] veth0_vlan: entered promiscuous mode [ 95.191351][ T5882] veth1_vlan: entered promiscuous mode [ 95.215387][ T5882] veth0_macvtap: entered promiscuous mode [ 95.233896][ T5882] veth1_macvtap: entered promiscuous mode [ 95.252248][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.265559][ T5882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.282794][ T5882] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.294094][ T5882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.303019][ T5882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.312065][ T5882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.376250][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.387012][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.415381][ T3445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.423779][ T3445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.476961][ T5931] syz.0.17[5931]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 95.499553][ T5931] loop0: detected capacity change from 0 to 1024 [ 95.509048][ T5931] ======================================================= [ 95.509048][ T5931] WARNING: The mand mount option has been deprecated and [ 95.509048][ T5931] and is ignored by this kernel. Remove the mand [ 95.509048][ T5931] option from the mount to silence this warning. [ 95.509048][ T5931] ======================================================= [ 95.573356][ T5931] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.593585][ T5931] ================================================================== [ 95.601772][ T5931] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x94b/0x1e90 [ 95.609618][ T5931] Read of size 18446744073709551588 at addr ffff88802b32b040 by task syz.0.17/5931 [ 95.618897][ T5931] [ 95.621232][ T5931] CPU: 1 PID: 5931 Comm: syz.0.17 Not tainted syzkaller #0 [ 95.628407][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 95.638551][ T5931] Call Trace: [ 95.641828][ T5931] [ 95.644749][ T5931] dump_stack_lvl+0x18c/0x250 [ 95.649429][ T5931] ? read_lock_is_recursive+0x20/0x20 [ 95.654818][ T5931] ? show_regs_print_info+0x20/0x20 [ 95.660530][ T5931] ? load_image+0x400/0x400 [ 95.665021][ T5931] ? _raw_spin_lock_irqsave+0xc0/0x100 [ 95.670483][ T5931] ? __virt_addr_valid+0x18c/0x540 [ 95.675594][ T5931] ? __virt_addr_valid+0x469/0x540 [ 95.680698][ T5931] print_report+0xa8/0x210 [ 95.685219][ T5931] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 95.690795][ T5931] kasan_report+0x117/0x150 [ 95.695284][ T5931] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 95.700749][ T5931] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 95.706234][ T5931] kasan_check_range+0x241/0x290 [ 95.711223][ T5931] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 95.716683][ T5931] __asan_memmove+0x29/0x70 [ 95.721181][ T5931] ext4_xattr_set_entry+0x94b/0x1e90 [ 95.726469][ T5931] ext4_xattr_block_set+0xae8/0x32b0 [ 95.731752][ T5931] ? ext4_destroy_inode+0x200/0x200 [ 95.736955][ T5931] ? proc_nr_inodes+0x230/0x230 [ 95.741885][ T5931] ? do_raw_spin_unlock+0x121/0x230 [ 95.747083][ T5931] ? _raw_spin_unlock+0x28/0x40 [ 95.751931][ T5931] ? ext4_xattr_block_find+0x350/0x350 [ 95.757386][ T5931] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 95.762761][ T5931] ext4_xattr_set_handle+0xe2e/0x14c0 [ 95.768135][ T5931] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 95.774126][ T5931] ? __ext4_journal_start_sb+0x259/0x560 [ 95.779788][ T5931] ext4_xattr_set+0x252/0x340 [ 95.784469][ T5931] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 95.790006][ T5931] ? evm_protected_xattr_common+0x170/0x190 [ 95.796000][ T5931] ? ext4_xattr_security_get+0x40/0x40 [ 95.801465][ T5931] __vfs_setxattr+0x431/0x470 [ 95.806140][ T5931] __vfs_setxattr_noperm+0x12d/0x5e0 [ 95.811419][ T5931] vfs_setxattr+0x16b/0x2f0 [ 95.815973][ T5931] ? xattr_permission+0x470/0x470 [ 95.820990][ T5931] ? __mnt_want_write+0x223/0x2a0 [ 95.826011][ T5931] ? path_setxattr+0x3a1/0x5d0 [ 95.830780][ T5931] path_setxattr+0x3f3/0x5d0 [ 95.835456][ T5931] ? simple_xattrs_free+0x150/0x150 [ 95.840653][ T5931] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 95.846642][ T5931] ? lock_chain_count+0x20/0x20 [ 95.851506][ T5931] __x64_sys_setxattr+0xbb/0xd0 [ 95.856361][ T5931] do_syscall_64+0x55/0xa0 [ 95.860881][ T5931] ? clear_bhb_loop+0x40/0x90 [ 95.865563][ T5931] ? clear_bhb_loop+0x40/0x90 [ 95.870236][ T5931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 95.876225][ T5931] RIP: 0033:0x7f78f1b9aeb9 [ 95.880645][ T5931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.900331][ T5931] RSP: 002b:00007ffde0600e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 95.908737][ T5931] RAX: ffffffffffffffda RBX: 00007f78f1e15fa0 RCX: 00007f78f1b9aeb9 [ 95.916727][ T5931] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 95.925060][ T5931] RBP: 00007f78f1c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 95.933204][ T5931] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 95.941166][ T5931] R13: 00007f78f1e15fac R14: 00007f78f1e15fa0 R15: 00007f78f1e15fa0 [ 95.950020][ T5931] [ 95.953042][ T5931] [ 95.955371][ T5931] Allocated by task 5931: [ 95.959761][ T5931] kasan_set_track+0x4e/0x70 [ 95.964411][ T5931] __kasan_kmalloc+0x8f/0xa0 [ 95.968998][ T5931] __kmalloc_node_track_caller+0xb2/0x230 [ 95.974929][ T5931] kmemdup+0x2b/0x70 [ 95.978823][ T5931] ext4_xattr_block_set+0x9ea/0x32b0 [ 95.984112][ T5931] ext4_xattr_set_handle+0xe2e/0x14c0 [ 95.989741][ T5931] ext4_xattr_set+0x252/0x340 [ 95.994412][ T5931] __vfs_setxattr+0x431/0x470 [ 95.999080][ T5931] __vfs_setxattr_noperm+0x12d/0x5e0 [ 96.004358][ T5931] vfs_setxattr+0x16b/0x2f0 [ 96.008849][ T5931] path_setxattr+0x3f3/0x5d0 [ 96.013447][ T5931] __x64_sys_setxattr+0xbb/0xd0 [ 96.018390][ T5931] do_syscall_64+0x55/0xa0 [ 96.022867][ T5931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.028773][ T5931] [ 96.031085][ T5931] The buggy address belongs to the object at ffff88802b32b000 [ 96.031085][ T5931] which belongs to the cache kmalloc-1k of size 1024 [ 96.045130][ T5931] The buggy address is located 64 bytes inside of [ 96.045130][ T5931] 1024-byte region [ffff88802b32b000, ffff88802b32b400) [ 96.058491][ T5931] [ 96.060803][ T5931] The buggy address belongs to the physical page: [ 96.067296][ T5931] page:ffffea0000acca00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2b328 [ 96.077439][ T5931] head:ffffea0000acca00 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 96.086488][ T5931] anon flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 96.094905][ T5931] page_type: 0xffffffff() [ 96.099231][ T5931] raw: 00fff00000000840 ffff888017c41dc0 0000000000000000 0000000000000001 [ 96.107879][ T5931] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 96.116463][ T5931] page dumped because: kasan: bad access detected [ 96.122926][ T5931] page_owner tracks the page as allocated [ 96.128653][ T5931] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5710, tgid 5710 (dhcpcd-run-hook), ts 55270863537, free_ts 55159687852 [ 96.150268][ T5931] post_alloc_hook+0x1c1/0x200 [ 96.155044][ T5931] get_page_from_freelist+0x1951/0x19e0 [ 96.160604][ T5931] __alloc_pages+0x1f0/0x460 [ 96.165182][ T5931] alloc_slab_page+0x5d/0x160 [ 96.169960][ T5931] new_slab+0x87/0x2d0 [ 96.174037][ T5931] ___slab_alloc+0xc5d/0x12f0 [ 96.178823][ T5931] __kmem_cache_alloc_node+0x19e/0x250 [ 96.184377][ T5931] __kmalloc+0xa4/0x230 [ 96.188528][ T5931] load_elf_binary+0x268/0x2860 [ 96.193373][ T5931] bprm_execve+0xb08/0x1700 [ 96.197929][ T5931] do_execveat_common+0x51b/0x6c0 [ 96.203028][ T5931] __x64_sys_execve+0x92/0xa0 [ 96.207698][ T5931] do_syscall_64+0x55/0xa0 [ 96.212105][ T5931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.218095][ T5931] page last free stack trace: [ 96.222940][ T5931] free_unref_page_prepare+0x7b2/0x8c0 [ 96.228419][ T5931] free_unref_page+0x32/0x2e0 [ 96.233271][ T5931] __slab_free+0x35a/0x400 [ 96.237852][ T5931] qlist_free_all+0x75/0xd0 [ 96.242451][ T5931] kasan_quarantine_reduce+0x143/0x160 [ 96.247921][ T5931] __kasan_slab_alloc+0x22/0x80 [ 96.252785][ T5931] slab_post_alloc_hook+0x6e/0x4b0 [ 96.257921][ T5931] kmem_cache_alloc_node+0x14c/0x320 [ 96.263200][ T5931] dup_task_struct+0x57/0x7c0 [ 96.267901][ T5931] copy_process+0x586/0x3d80 [ 96.272501][ T5931] kernel_clone+0x24b/0x8a0 [ 96.277000][ T5931] __x64_sys_clone+0x1b7/0x230 [ 96.281755][ T5931] do_syscall_64+0x55/0xa0 [ 96.286161][ T5931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.292043][ T5931] [ 96.294357][ T5931] Memory state around the buggy address: [ 96.299989][ T5931] ffff88802b32af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 96.308135][ T5931] ffff88802b32af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 96.316202][ T5931] >ffff88802b32b000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 96.324596][ T5931] ^ [ 96.330745][ T5931] ffff88802b32b080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 96.338884][ T5931] ffff88802b32b100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 96.347201][ T5931] ================================================================== [ 96.390748][ T5931] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 96.398357][ T5931] CPU: 1 PID: 5931 Comm: syz.0.17 Not tainted syzkaller #0 [ 96.405928][ T5931] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 96.416531][ T5931] Call Trace: [ 96.419899][ T5931] [ 96.423547][ T5931] dump_stack_lvl+0x18c/0x250 [ 96.428345][ T5931] ? show_regs_print_info+0x20/0x20 [ 96.433650][ T5931] ? load_image+0x400/0x400 [ 96.438241][ T5931] panic+0x2dc/0x730 [ 96.442136][ T5931] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 96.448295][ T5931] ? bpf_jit_dump+0xd0/0xd0 [ 96.452937][ T5931] ? _raw_spin_unlock_irqrestore+0x111/0x120 [ 96.459003][ T5931] ? _raw_spin_unlock+0x40/0x40 [ 96.463851][ T5931] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 96.469426][ T5931] check_panic_on_warn+0x84/0xa0 [ 96.475066][ T5931] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 96.480617][ T5931] end_report+0x6f/0x130 [ 96.484860][ T5931] kasan_report+0x128/0x150 [ 96.489488][ T5931] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 96.495207][ T5931] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 96.501009][ T5931] kasan_check_range+0x241/0x290 [ 96.506381][ T5931] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 96.512364][ T5931] __asan_memmove+0x29/0x70 [ 96.517137][ T5931] ext4_xattr_set_entry+0x94b/0x1e90 [ 96.522529][ T5931] ext4_xattr_block_set+0xae8/0x32b0 [ 96.527871][ T5931] ? ext4_destroy_inode+0x200/0x200 [ 96.533068][ T5931] ? proc_nr_inodes+0x230/0x230 [ 96.537922][ T5931] ? do_raw_spin_unlock+0x121/0x230 [ 96.543207][ T5931] ? _raw_spin_unlock+0x28/0x40 [ 96.548221][ T5931] ? ext4_xattr_block_find+0x350/0x350 [ 96.553678][ T5931] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 96.559143][ T5931] ext4_xattr_set_handle+0xe2e/0x14c0 [ 96.564563][ T5931] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 96.570986][ T5931] ? __ext4_journal_start_sb+0x259/0x560 [ 96.576634][ T5931] ext4_xattr_set+0x252/0x340 [ 96.581653][ T5931] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 96.587539][ T5931] ? evm_protected_xattr_common+0x170/0x190 [ 96.593517][ T5931] ? ext4_xattr_security_get+0x40/0x40 [ 96.599157][ T5931] __vfs_setxattr+0x431/0x470 [ 96.603832][ T5931] __vfs_setxattr_noperm+0x12d/0x5e0 [ 96.609136][ T5931] vfs_setxattr+0x16b/0x2f0 [ 96.613635][ T5931] ? xattr_permission+0x470/0x470 [ 96.618646][ T5931] ? __mnt_want_write+0x223/0x2a0 [ 96.623689][ T5931] ? path_setxattr+0x3a1/0x5d0 [ 96.628631][ T5931] path_setxattr+0x3f3/0x5d0 [ 96.633386][ T5931] ? simple_xattrs_free+0x150/0x150 [ 96.638584][ T5931] ? lockdep_hardirqs_on_prepare+0x40d/0x770 [ 96.644639][ T5931] ? lock_chain_count+0x20/0x20 [ 96.649509][ T5931] __x64_sys_setxattr+0xbb/0xd0 [ 96.654528][ T5931] do_syscall_64+0x55/0xa0 [ 96.658953][ T5931] ? clear_bhb_loop+0x40/0x90 [ 96.663626][ T5931] ? clear_bhb_loop+0x40/0x90 [ 96.668294][ T5931] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 96.674274][ T5931] RIP: 0033:0x7f78f1b9aeb9 [ 96.678764][ T5931] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 96.698553][ T5931] RSP: 002b:00007ffde0600e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 96.707055][ T5931] RAX: ffffffffffffffda RBX: 00007f78f1e15fa0 RCX: 00007f78f1b9aeb9 [ 96.715180][ T5931] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 96.723498][ T5931] RBP: 00007f78f1c08c1f R08: 0000000000000000 R09: 0000000000000000 [ 96.731457][ T5931] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 96.739416][ T5931] R13: 00007f78f1e15fac R14: 00007f78f1e15fa0 R15: 00007f78f1e15fa0 [ 96.747385][ T5931] [ 96.750841][ T5931] Kernel Offset: disabled [ 96.755151][ T5931] Rebooting in 86400 seconds..