Warning: Permanently added '10.128.0.230' (ED25519) to the list of known hosts. [ 87.044795][ T10] cfg80211: failed to load regulatory.db 2026/07/18 21:50:08 parsed 1 programs 2026/07/18 21:50:08 serving rpc on tcp://38129 [ 91.428093][ T5611] cgroup: Unknown subsys name 'net' [ 91.668712][ T5611] cgroup: Unknown subsys name 'cpuset' [ 91.741974][ T5611] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 93.757406][ T5611] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 98.006035][ T3179] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.006057][ T3179] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.089555][ T3179] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.089577][ T3179] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.017501][ T5662] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.019054][ T5662] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.019334][ T5662] bridge_slave_0: entered allmulticast mode [ 101.024482][ T5662] bridge_slave_0: entered promiscuous mode [ 101.037747][ T5662] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.038113][ T5662] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.038387][ T5662] bridge_slave_1: entered allmulticast mode [ 101.042674][ T5662] bridge_slave_1: entered promiscuous mode [ 101.120131][ T5662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.126334][ T5662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.169344][ T5662] team0: Port device team_slave_0 added [ 101.174785][ T5662] team0: Port device team_slave_1 added [ 101.413163][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.413175][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.413190][ T5662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.416314][ T5662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.416324][ T5662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.416339][ T5662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.770215][ T5662] hsr_slave_0: entered promiscuous mode [ 101.774685][ T5662] hsr_slave_1: entered promiscuous mode [ 102.122029][ T5662] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.156787][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 102.160068][ T5662] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 102.201156][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 102.206846][ T5662] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 102.246462][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 102.247942][ T5662] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 102.285941][ T5662] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 102.417824][ T5662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.467235][ T5662] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.484644][ T3179] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.484814][ T3179] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.510937][ T3179] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.511076][ T3179] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.170267][ T5662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.486907][ T5662] veth0_vlan: entered promiscuous mode [ 103.547673][ T5662] veth1_vlan: entered promiscuous mode [ 103.629160][ T5662] veth0_macvtap: entered promiscuous mode [ 103.637988][ T5662] veth1_macvtap: entered promiscuous mode [ 103.675362][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.696495][ T5662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.722572][ T3184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.728008][ T3184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.728937][ T3184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.729672][ T3184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.263587][ T4914] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.285209][ T4914] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.285978][ T4914] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.288073][ T4914] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.288919][ T4914] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.458625][ T3184] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.166960][ T3184] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.662407][ T3184] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.982094][ T3184] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.702614][ T3184] bridge_slave_1: left allmulticast mode [ 106.702814][ T3184] bridge_slave_1: left promiscuous mode [ 106.709113][ T3184] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.913429][ T3184] bridge_slave_0: left allmulticast mode [ 106.913468][ T3184] bridge_slave_0: left promiscuous mode [ 106.913776][ T3184] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.652147][ T3184] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 107.712324][ T3184] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 107.734366][ T3184] bond0 (unregistering): Released all slaves [ 107.782606][ T5260] 8021q: adding VLAN 0 to HW filter on device eth1 [ 108.223866][ T3184] hsr_slave_0: left promiscuous mode [ 108.261518][ T3184] hsr_slave_1: left promiscuous mode [ 108.282823][ T3184] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 108.283317][ T3184] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 108.307979][ T3184] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 108.308007][ T3184] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 108.498844][ T3184] veth1_macvtap: left promiscuous mode [ 108.517743][ T3184] veth0_macvtap: left promiscuous mode [ 108.518791][ T3184] veth1_vlan: left promiscuous mode [ 108.532266][ T3184] veth0_vlan: left promiscuous mode [ 109.262091][ T3184] team0 (unregistering): Port device team_slave_1 removed [ 109.301968][ T3184] team0 (unregistering): Port device team_slave_0 removed [ 109.499493][ T5260] 8021q: adding VLAN 0 to HW filter on device eth2 [ 110.477807][ T5260] 8021q: adding VLAN 0 to HW filter on device eth3 2026/07/18 21:50:31 executed programs: 0 [ 111.477731][ T60] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 111.507235][ T60] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 111.518991][ T60] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 111.530338][ T60] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 111.538586][ T60] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 111.907510][ T5260] 8021q: adding VLAN 0 to HW filter on device eth4 [ 112.700945][ T5793] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.701212][ T5793] bridge0: port 1(bridge_slave_0) entered disabled state [ 112.702042][ T5793] bridge_slave_0: entered allmulticast mode [ 112.715907][ T5793] bridge_slave_0: entered promiscuous mode [ 112.729288][ T5793] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.729736][ T5793] bridge0: port 2(bridge_slave_1) entered disabled state [ 112.730007][ T5793] bridge_slave_1: entered allmulticast mode [ 112.733962][ T5793] bridge_slave_1: entered promiscuous mode [ 112.813422][ T5793] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 112.820121][ T5793] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 112.867860][ T5793] team0: Port device team_slave_0 added [ 112.871165][ T5793] team0: Port device team_slave_1 added [ 112.929065][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 112.929077][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.929092][ T5793] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 112.931297][ T5793] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 112.931310][ T5793] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 112.931517][ T5793] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 113.037496][ T5793] hsr_slave_0: entered promiscuous mode [ 113.039086][ T5793] hsr_slave_1: entered promiscuous mode [ 113.682644][ T4914] Bluetooth: hci0: command tx timeout [ 115.741497][ T4914] Bluetooth: hci0: command tx timeout [ 115.741931][ T5793] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 115.789714][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 115.796647][ T5793] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 115.829279][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 115.831147][ T5793] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 115.894040][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 115.895497][ T5793] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 115.961456][ T5793] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 116.259507][ T5793] 8021q: adding VLAN 0 to HW filter on device bond0 [ 116.320728][ T5793] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.337272][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.337540][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 116.356562][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.359048][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 117.177067][ T5793] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.321202][ T5793] veth0_vlan: entered promiscuous mode [ 117.357555][ T5793] veth1_vlan: entered promiscuous mode [ 117.435076][ T5793] veth0_macvtap: entered promiscuous mode [ 117.446412][ T5793] veth1_macvtap: entered promiscuous mode [ 117.474428][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.495297][ T5793] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.514783][ T48] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.516298][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.516345][ T48] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.516384][ T48] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.823958][ T4914] Bluetooth: hci0: command tx timeout [ 117.866299][ T3184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.866321][ T3184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.932672][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.932694][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/07/18 21:50:38 executed programs: 2 [ 118.076557][ T5940] loop0: detected capacity change from 0 to 512 [ 118.112766][ T5940] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 118.112787][ T5940] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 118.256412][ T5940] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 118.257466][ T5940] EXT4-fs (loop0): 1 truncate cleaned up [ 118.265030][ T5940] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.303820][ T5940] ================================================================== [ 118.303837][ T5940] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x7a4/0x1ed0 [ 118.303870][ T5940] Read of size 18446744073709551572 at addr ffff88801f6da050 by task syz.0.17/5940 [ 118.303889][ T5940] [ 118.303902][ T5940] CPU: 0 UID: 0 PID: 5940 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 118.303926][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 118.303939][ T5940] Call Trace: [ 118.303947][ T5940] [ 118.303956][ T5940] dump_stack_lvl+0xe8/0x150 [ 118.303988][ T5940] print_address_description+0x55/0x1e0 [ 118.304019][ T5940] ? ext4_xattr_set_entry+0x7a4/0x1ed0 [ 118.304041][ T5940] print_report+0x58/0x70 [ 118.304068][ T5940] kasan_report+0x117/0x150 [ 118.304103][ T5940] ? ext4_xattr_set_entry+0x7a4/0x1ed0 [ 118.304127][ T5940] ? ext4_xattr_set_entry+0x7a4/0x1ed0 [ 118.304149][ T5940] kasan_check_range+0x264/0x2c0 [ 118.304172][ T5940] ? ext4_xattr_set_entry+0x7a4/0x1ed0 [ 118.304195][ T5940] __asan_memmove+0x29/0x70 [ 118.304225][ T5940] ext4_xattr_set_entry+0x7a4/0x1ed0 [ 118.304258][ T5940] ext4_xattr_block_set+0x71e/0x2a80 [ 118.304282][ T5940] ? lock_acquire+0x115/0x350 [ 118.304309][ T5940] ? check_xattrs+0x44e/0xd50 [ 118.304333][ T5940] ? __pfx_check_xattrs+0x10/0x10 [ 118.304356][ T5940] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 118.304382][ T5940] ? ext4_xattr_block_find+0x2a1/0x320 [ 118.304406][ T5940] ext4_expand_extra_isize_ea+0x1342/0x1e70 [ 118.304447][ T5940] __ext4_expand_extra_isize+0x30d/0x400 [ 118.304474][ T5940] __ext4_mark_inode_dirty+0x455/0x700 [ 118.304504][ T5940] __ext4_unlink+0x6a3/0xb40 [ 118.304532][ T5940] ? __pfx___ext4_unlink+0x10/0x10 [ 118.304551][ T5940] ? __pfx___dquot_initialize+0x10/0x10 [ 118.304566][ T5940] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 118.304589][ T5940] ext4_unlink+0x206/0x5c0 [ 118.304606][ T5940] vfs_unlink+0x27b/0x6e0 [ 118.304618][ T5940] filename_unlinkat+0x3d3/0x610 [ 118.304630][ T5940] ? __pfx_filename_unlinkat+0x10/0x10 [ 118.304642][ T5940] ? strncpy_from_user+0x150/0x2c0 [ 118.304658][ T5940] ? do_getname+0x151/0x250 [ 118.304671][ T5940] __se_sys_unlink+0x2e/0x140 [ 118.304683][ T5940] do_syscall_64+0x17b/0x530 [ 118.304700][ T5940] ? irqentry_exit+0x10f/0x8f0 [ 118.304717][ T5940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.304729][ T5940] ? clear_bhb_loop+0x40/0x90 [ 118.304742][ T5940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.304753][ T5940] RIP: 0033:0x7fb92808de99 [ 118.304765][ T5940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.304775][ T5940] RSP: 002b:00007ffeebe6d1f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 118.304790][ T5940] RAX: ffffffffffffffda RBX: 00007fb928315fa0 RCX: 00007fb92808de99 [ 118.304799][ T5940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 118.304806][ T5940] RBP: 00007fb928123eaf R08: 0000000000000000 R09: 0000000000000000 [ 118.304814][ T5940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.304821][ T5940] R13: 00007fb928315fac R14: 00007fb928315fa0 R15: 00007fb928315fa0 [ 118.304833][ T5940] [ 118.304838][ T5940] [ 118.304840][ T5940] Allocated by task 5940: [ 118.304846][ T5940] kasan_save_track+0x3e/0x80 [ 118.304857][ T5940] __kasan_kmalloc+0x93/0xb0 [ 118.304867][ T5940] __kmalloc_node_track_caller_noprof+0x566/0x7b0 [ 118.304879][ T5940] kmemdup_noprof+0x2b/0x70 [ 118.304892][ T5940] ext4_xattr_block_set+0x633/0x2a80 [ 118.304903][ T5940] ext4_expand_extra_isize_ea+0x1342/0x1e70 [ 118.304915][ T5940] __ext4_expand_extra_isize+0x30d/0x400 [ 118.304927][ T5940] __ext4_mark_inode_dirty+0x455/0x700 [ 118.304941][ T5940] __ext4_unlink+0x6a3/0xb40 [ 118.304955][ T5940] ext4_unlink+0x206/0x5c0 [ 118.304969][ T5940] vfs_unlink+0x27b/0x6e0 [ 118.304978][ T5940] filename_unlinkat+0x3d3/0x610 [ 118.304987][ T5940] __se_sys_unlink+0x2e/0x140 [ 118.304996][ T5940] do_syscall_64+0x17b/0x530 [ 118.305012][ T5940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.305022][ T5940] [ 118.305025][ T5940] The buggy address belongs to the object at ffff88801f6da000 [ 118.305025][ T5940] which belongs to the cache kmalloc-1k of size 1024 [ 118.305034][ T5940] The buggy address is located 80 bytes inside of [ 118.305034][ T5940] 1024-byte region [ffff88801f6da000, ffff88801f6da400) [ 118.305046][ T5940] [ 118.305049][ T5940] The buggy address belongs to the physical page: [ 118.305055][ T5940] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1f6d8 [ 118.305066][ T5940] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 118.305082][ T5940] flags: 0x80000000000040(head|node=0|zone=1) [ 118.305093][ T5940] page_type: f5(slab) [ 118.305104][ T5940] raw: 0080000000000040 ffff88813feaedc0 dead000000000100 dead000000000122 [ 118.305114][ T5940] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 118.305125][ T5940] head: 0080000000000040 ffff88813feaedc0 dead000000000100 dead000000000122 [ 118.305135][ T5940] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 118.305145][ T5940] head: 0080000000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 118.305154][ T5940] head: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000008 [ 118.305160][ T5940] page dumped because: kasan: bad access detected [ 118.305165][ T5940] page_owner tracks the page as allocated [ 118.305169][ T5940] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 2866025379 [ 118.305188][ T5940] post_alloc_hook+0x1f9/0x250 [ 118.305205][ T5940] get_page_from_freelist+0x264c/0x26c0 [ 118.305217][ T5940] __alloc_frozen_pages_noprof+0x222/0x5b0 [ 118.305229][ T5940] allocate_slab+0x7c/0x5e0 [ 118.305243][ T5940] refill_objects+0x2d8/0x350 [ 118.305257][ T5940] __pcs_replace_empty_main+0x330/0x690 [ 118.305271][ T5940] __kmalloc_noprof+0x543/0x790 [ 118.305280][ T5940] __alloc_workqueue+0x10b/0x2060 [ 118.305297][ T5940] alloc_workqueue_noprof+0xe3/0x210 [ 118.305313][ T5940] pm_start_workqueues+0x38/0x60 [ 118.305329][ T5940] pm_init+0x9/0xb0 [ 118.305343][ T5940] do_one_initcall+0x250/0x870 [ 118.305359][ T5940] do_initcall_level+0x10a/0x1a0 [ 118.305373][ T5940] do_initcalls+0x59/0xa0 [ 118.305386][ T5940] kernel_init_freeable+0x29d/0x3e0 [ 118.305400][ T5940] kernel_init+0x22/0x1d0 [ 118.305411][ T5940] page_owner free stack trace missing [ 118.305415][ T5940] [ 118.305418][ T5940] Memory state around the buggy address: [ 118.305424][ T5940] ffff88801f6d9f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.305431][ T5940] ffff88801f6d9f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 118.305439][ T5940] >ffff88801f6da000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 118.305444][ T5940] ^ [ 118.305451][ T5940] ffff88801f6da080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 118.305458][ T5940] ffff88801f6da100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 118.305464][ T5940] ================================================================== [ 118.305471][ T5940] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 118.305480][ T5940] CPU: 0 UID: 0 PID: 5940 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 118.305494][ T5940] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/25/2026 [ 118.305500][ T5940] Call Trace: [ 118.305504][ T5940] [ 118.305509][ T5940] vpanic+0x56c/0xa60 [ 118.305521][ T5940] ? __pfx_vpanic+0x10/0x10 [ 118.305534][ T5940] panic+0xc5/0xd0 [ 118.305544][ T5940] ? __pfx_panic+0x10/0x10 [ 118.305555][ T5940] ? ext4_xattr_set_entry+0x7a4/0x1ed0 [ 118.305567][ T5940] ? rcu_is_watching+0x15/0xb0 [ 118.305588][ T5940] ? ext4_xattr_set_entry+0x7a4/0x1ed0 [ 118.305600][ T5940] check_panic_on_warn+0x89/0xb0 [ 118.305612][ T5940] ? ext4_xattr_set_entry+0x7a4/0x1ed0 [ 118.305623][ T5940] end_report+0x73/0x170 [ 118.305636][ T5940] ? ext4_xattr_set_entry+0x7a4/0x1ed0 [ 118.305648][ T5940] kasan_report+0x128/0x150 [ 118.305661][ T5940] ? ext4_xattr_set_entry+0x7a4/0x1ed0 [ 118.305674][ T5940] ? ext4_xattr_set_entry+0x7a4/0x1ed0 [ 118.305687][ T5940] kasan_check_range+0x264/0x2c0 [ 118.305700][ T5940] ? ext4_xattr_set_entry+0x7a4/0x1ed0 [ 118.305712][ T5940] __asan_memmove+0x29/0x70 [ 118.305729][ T5940] ext4_xattr_set_entry+0x7a4/0x1ed0 [ 118.305746][ T5940] ext4_xattr_block_set+0x71e/0x2a80 [ 118.305759][ T5940] ? lock_acquire+0x115/0x350 [ 118.305773][ T5940] ? check_xattrs+0x44e/0xd50 [ 118.305786][ T5940] ? __pfx_check_xattrs+0x10/0x10 [ 118.305798][ T5940] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 118.305812][ T5940] ? ext4_xattr_block_find+0x2a1/0x320 [ 118.305826][ T5940] ext4_expand_extra_isize_ea+0x1342/0x1e70 [ 118.305847][ T5940] __ext4_expand_extra_isize+0x30d/0x400 [ 118.305861][ T5940] __ext4_mark_inode_dirty+0x455/0x700 [ 118.305879][ T5940] __ext4_unlink+0x6a3/0xb40 [ 118.305897][ T5940] ? __pfx___ext4_unlink+0x10/0x10 [ 118.305913][ T5940] ? __pfx___dquot_initialize+0x10/0x10 [ 118.305927][ T5940] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 118.305946][ T5940] ext4_unlink+0x206/0x5c0 [ 118.305962][ T5940] vfs_unlink+0x27b/0x6e0 [ 118.305974][ T5940] filename_unlinkat+0x3d3/0x610 [ 118.305986][ T5940] ? __pfx_filename_unlinkat+0x10/0x10 [ 118.305998][ T5940] ? strncpy_from_user+0x150/0x2c0 [ 118.306013][ T5940] ? do_getname+0x151/0x250 [ 118.306026][ T5940] __se_sys_unlink+0x2e/0x140 [ 118.306037][ T5940] do_syscall_64+0x17b/0x530 [ 118.306054][ T5940] ? irqentry_exit+0x10f/0x8f0 [ 118.306076][ T5940] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.306088][ T5940] ? clear_bhb_loop+0x40/0x90 [ 118.306101][ T5940] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.306112][ T5940] RIP: 0033:0x7fb92808de99 [ 118.306122][ T5940] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 118.306132][ T5940] RSP: 002b:00007ffeebe6d1f8 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 118.306144][ T5940] RAX: ffffffffffffffda RBX: 00007fb928315fa0 RCX: 00007fb92808de99 [ 118.306153][ T5940] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180 [ 118.306160][ T5940] RBP: 00007fb928123eaf R08: 0000000000000000 R09: 0000000000000000 [ 118.306168][ T5940] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.306175][ T5940] R13: 00007fb928315fac R14: 00007fb928315fa0 R15: 00007fb928315fa0 [ 118.306187][ T5940] [ 118.306346][ T5940] Kernel Offset: disabled