Warning: Permanently added '10.128.10.20' (ED25519) to the list of known hosts. 2025/10/19 13:43:21 parsed 1 programs [ 89.726697][ T5797] cgroup: Unknown subsys name 'net' [ 89.864507][ T5797] cgroup: Unknown subsys name 'rlimit' [ 91.623970][ T5797] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 92.297592][ T9] cfg80211: failed to load regulatory.db [ 93.661406][ T2955] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.676505][ T2955] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.710745][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.718735][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.269769][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 95.370255][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.379954][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.387447][ T5842] bridge_slave_0: entered allmulticast mode [ 95.394792][ T5842] bridge_slave_0: entered promiscuous mode [ 95.404881][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.412970][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.420693][ T5842] bridge_slave_1: entered allmulticast mode [ 95.428503][ T5842] bridge_slave_1: entered promiscuous mode [ 95.468127][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.480944][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.523321][ T5842] team0: Port device team_slave_0 added [ 95.532498][ T5842] team0: Port device team_slave_1 added [ 95.568979][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.576126][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.602170][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.616033][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.623064][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.649151][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.700195][ T5842] hsr_slave_0: entered promiscuous mode [ 95.708304][ T5842] hsr_slave_1: entered promiscuous mode [ 95.907043][ T5842] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.919713][ T5842] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.930419][ T5842] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.940985][ T5842] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.975734][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.983600][ T5842] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.991936][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.999369][ T5842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.074175][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.111824][ T58] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.121210][ T58] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.141310][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.167906][ T3503] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.175075][ T3503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.190838][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.198065][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.470470][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.543524][ T5842] veth0_vlan: entered promiscuous mode [ 96.558293][ T5842] veth1_vlan: entered promiscuous mode [ 96.591370][ T5842] veth0_macvtap: entered promiscuous mode [ 96.605576][ T5842] veth1_macvtap: entered promiscuous mode [ 96.631042][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.647955][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.665312][ T5842] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.676494][ T5842] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.685233][ T5842] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.694824][ T5842] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.892306][ T2955] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.454497][ T5875] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.463613][ T5875] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.473799][ T5875] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.483961][ T5875] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.497284][ T5875] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 97.504830][ T5875] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 2025/10/19 13:43:32 executed programs: 0 [ 98.885587][ T5103] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.895688][ T5103] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.903725][ T5103] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.913248][ T5103] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.921859][ T5103] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.931038][ T5103] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.101999][ T5896] chnl_net:caif_netlink_parms(): no params data found [ 99.178079][ T5896] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.185225][ T5896] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.193068][ T5896] bridge_slave_0: entered allmulticast mode [ 99.200363][ T5896] bridge_slave_0: entered promiscuous mode [ 99.208997][ T5896] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.216586][ T5896] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.223991][ T5896] bridge_slave_1: entered allmulticast mode [ 99.231836][ T5896] bridge_slave_1: entered promiscuous mode [ 99.264522][ T5896] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.276910][ T5896] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.313821][ T5896] team0: Port device team_slave_0 added [ 99.322002][ T5896] team0: Port device team_slave_1 added [ 99.351682][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.358903][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.385392][ T5896] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.408389][ T2955] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.422727][ T5896] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.430082][ T5896] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.456287][ T5896] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.503938][ T5896] hsr_slave_0: entered promiscuous mode [ 99.510976][ T5896] hsr_slave_1: entered promiscuous mode [ 99.517803][ T5896] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.525669][ T5896] Cannot create hsr debugfs directory [ 101.006874][ T5103] Bluetooth: hci0: command tx timeout [ 101.769868][ T2955] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.843133][ T2955] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.733264][ T2955] hsr_slave_0: left promiscuous mode [ 102.740066][ T2955] hsr_slave_1: left promiscuous mode [ 102.749341][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.757350][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.769196][ T2955] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.777156][ T2955] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.785466][ T2955] bridge_slave_1: left allmulticast mode [ 102.794591][ T2955] bridge_slave_1: left promiscuous mode [ 102.801994][ T2955] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.820124][ T2955] bridge_slave_0: left allmulticast mode [ 102.828155][ T2955] bridge_slave_0: left promiscuous mode [ 102.834013][ T2955] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.873086][ T2955] veth1_macvtap: left promiscuous mode [ 102.880095][ T2955] veth0_macvtap: left promiscuous mode [ 102.889103][ T2955] veth1_vlan: left promiscuous mode [ 102.894734][ T2955] veth0_vlan: left promiscuous mode [ 103.094167][ T5103] Bluetooth: hci0: command tx timeout [ 103.373520][ T2955] team0 (unregistering): Port device team_slave_1 removed [ 103.411109][ T2955] team0 (unregistering): Port device team_slave_0 removed [ 103.448932][ T2955] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.484201][ T2955] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.820673][ T2955] bond0 (unregistering): Released all slaves [ 103.919720][ T5896] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 103.933542][ T5896] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.944399][ T5896] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.958753][ T5896] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 104.091177][ T5896] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.117982][ T5896] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.132750][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.139995][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.156661][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.164018][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.439960][ T5896] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.504018][ T5896] veth0_vlan: entered promiscuous mode [ 104.518545][ T5896] veth1_vlan: entered promiscuous mode [ 104.551796][ T5896] veth0_macvtap: entered promiscuous mode [ 104.561541][ T5896] veth1_macvtap: entered promiscuous mode [ 104.582564][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.597054][ T5896] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.611894][ T5896] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.621858][ T5896] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.631707][ T5896] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.640609][ T5896] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.769075][ T3503] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.781106][ T3503] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.839063][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.847251][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.912972][ T5945] syz.0.17[5945]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 104.947986][ T5945] loop0: detected capacity change from 0 to 1024 [ 104.959938][ T5945] ======================================================= [ 104.959938][ T5945] WARNING: The mand mount option has been deprecated and [ 104.959938][ T5945] and is ignored by this kernel. Remove the mand [ 104.959938][ T5945] option from the mount to silence this warning. [ 104.959938][ T5945] ======================================================= [ 105.024812][ T5945] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.052318][ T5945] ================================================================== [ 105.060451][ T5945] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x94b/0x1e90 [ 105.068485][ T5945] Read of size 18446744073709551588 at addr ffff88802c4dc840 by task syz.0.17/5945 [ 105.077782][ T5945] [ 105.080131][ T5945] CPU: 1 PID: 5945 Comm: syz.0.17 Not tainted syzkaller #0 [ 105.087336][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.097417][ T5945] Call Trace: [ 105.100710][ T5945] [ 105.103663][ T5945] dump_stack_lvl+0x16c/0x230 [ 105.108361][ T5945] ? read_lock_is_recursive+0x20/0x20 [ 105.113755][ T5945] ? show_regs_print_info+0x20/0x20 [ 105.118972][ T5945] ? load_image+0x3b0/0x3b0 [ 105.123495][ T5945] ? _raw_spin_lock_irqsave+0xb4/0xf0 [ 105.129055][ T5945] ? __virt_addr_valid+0x18c/0x540 [ 105.134185][ T5945] ? __virt_addr_valid+0x469/0x540 [ 105.139322][ T5945] print_report+0xac/0x220 [ 105.143762][ T5945] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 105.149249][ T5945] kasan_report+0x117/0x150 [ 105.153768][ T5945] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 105.159424][ T5945] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 105.165078][ T5945] kasan_check_range+0x288/0x290 [ 105.170319][ T5945] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 105.175805][ T5945] __asan_memmove+0x29/0x70 [ 105.180402][ T5945] ext4_xattr_set_entry+0x94b/0x1e90 [ 105.185742][ T5945] ext4_xattr_block_set+0xae3/0x32a0 [ 105.191090][ T5945] ? ext4_destroy_inode+0x200/0x200 [ 105.196322][ T5945] ? proc_nr_inodes+0x230/0x230 [ 105.201197][ T5945] ? do_raw_spin_unlock+0x121/0x230 [ 105.206426][ T5945] ? _raw_spin_unlock+0x28/0x40 [ 105.211309][ T5945] ? ext4_xattr_block_find+0x350/0x350 [ 105.216798][ T5945] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 105.222201][ T5945] ext4_xattr_set_handle+0x10a1/0x1290 [ 105.227885][ T5945] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 105.233899][ T5945] ? __ext4_journal_start_sb+0x259/0x570 [ 105.239592][ T5945] ext4_xattr_set+0x22d/0x320 [ 105.244289][ T5945] ? end_current_label_crit_section+0x170/0x170 [ 105.250816][ T5945] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 105.256391][ T5945] ? posix_xattr_acl+0x93/0xb0 [ 105.261216][ T5945] ? evm_protect_xattr+0x36d/0x7a0 [ 105.266351][ T5945] ? ext4_xattr_trusted_get+0x40/0x40 [ 105.271835][ T5945] __vfs_setxattr+0x431/0x470 [ 105.276548][ T5945] __vfs_setxattr_noperm+0x12d/0x5e0 [ 105.281877][ T5945] vfs_setxattr+0x16c/0x2f0 [ 105.286412][ T5945] ? xattr_permission+0x470/0x470 [ 105.291631][ T5945] ? __mnt_want_write+0x223/0x2a0 [ 105.296682][ T5945] ? path_setxattr+0x314/0x550 [ 105.301469][ T5945] path_setxattr+0x362/0x550 [ 105.306095][ T5945] ? simple_xattrs_free+0x150/0x150 [ 105.311350][ T5945] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 105.317358][ T5945] ? lock_chain_count+0x20/0x20 [ 105.322232][ T5945] __x64_sys_lsetxattr+0xb8/0xd0 [ 105.327187][ T5945] do_syscall_64+0x55/0xb0 [ 105.331627][ T5945] ? clear_bhb_loop+0x40/0x90 [ 105.336330][ T5945] ? clear_bhb_loop+0x40/0x90 [ 105.341028][ T5945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.346962][ T5945] RIP: 0033:0x7fc877b8efc9 [ 105.351410][ T5945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.371044][ T5945] RSP: 002b:00007ffe96404348 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 105.379556][ T5945] RAX: ffffffffffffffda RBX: 00007fc877de5fa0 RCX: 00007fc877b8efc9 [ 105.387550][ T5945] RDX: 0000200000000800 RSI: 0000200000000180 RDI: 00002000000001c0 [ 105.395550][ T5945] RBP: 00007fc877c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 105.403627][ T5945] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 105.411697][ T5945] R13: 00007fc877de5fa0 R14: 00007fc877de5fa0 R15: 0000000000000005 [ 105.419915][ T5945] [ 105.423047][ T5945] [ 105.425390][ T5945] Allocated by task 5945: [ 105.429738][ T5945] kasan_set_track+0x4e/0x70 [ 105.434346][ T5945] __kasan_kmalloc+0x8f/0xa0 [ 105.438952][ T5945] __kmalloc_node_track_caller+0xb2/0x230 [ 105.444691][ T5945] kmemdup+0x2b/0x70 [ 105.448641][ T5945] ext4_xattr_block_set+0x9e5/0x32a0 [ 105.453967][ T5945] ext4_xattr_set_handle+0x10a1/0x1290 [ 105.459446][ T5945] ext4_xattr_set+0x22d/0x320 [ 105.464144][ T5945] __vfs_setxattr+0x431/0x470 [ 105.468833][ T5945] __vfs_setxattr_noperm+0x12d/0x5e0 [ 105.474135][ T5945] vfs_setxattr+0x16c/0x2f0 [ 105.478653][ T5945] path_setxattr+0x362/0x550 [ 105.483263][ T5945] __x64_sys_lsetxattr+0xb8/0xd0 [ 105.488305][ T5945] do_syscall_64+0x55/0xb0 [ 105.492745][ T5945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.498674][ T5945] [ 105.501025][ T5945] The buggy address belongs to the object at ffff88802c4dc800 [ 105.501025][ T5945] which belongs to the cache kmalloc-1k of size 1024 [ 105.515113][ T5945] The buggy address is located 64 bytes inside of [ 105.515113][ T5945] 1024-byte region [ffff88802c4dc800, ffff88802c4dcc00) [ 105.528439][ T5945] [ 105.530774][ T5945] The buggy address belongs to the physical page: [ 105.537292][ T5945] page:ffffea0000b13600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2c4d8 [ 105.547479][ T5945] head:ffffea0000b13600 order:3 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 105.556426][ T5945] flags: 0xfff00000000840(slab|head|node=0|zone=1|lastcpupid=0x7ff) [ 105.564447][ T5945] page_type: 0xffffffff() [ 105.568800][ T5945] raw: 00fff00000000840 ffff888017841dc0 dead000000000122 0000000000000000 [ 105.577403][ T5945] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 105.585990][ T5945] page dumped because: kasan: bad access detected [ 105.592518][ T5945] page_owner tracks the page as allocated [ 105.598268][ T5945] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 5896, tgid 5896 (syz-executor), ts 104892929584, free_ts 104870983539 [ 105.621303][ T5945] post_alloc_hook+0x1cd/0x210 [ 105.626096][ T5945] get_page_from_freelist+0x195c/0x19f0 [ 105.631661][ T5945] __alloc_pages+0x1e3/0x460 [ 105.636271][ T5945] alloc_slab_page+0x5d/0x170 [ 105.640972][ T5945] new_slab+0x87/0x2e0 [ 105.645070][ T5945] ___slab_alloc+0xc6d/0x1300 [ 105.649763][ T5945] __kmem_cache_alloc_node+0x1a2/0x260 [ 105.655238][ T5945] __kmalloc+0xa4/0x240 [ 105.659437][ T5945] ip6t_alloc_initial_table+0x6e/0x640 [ 105.664911][ T5945] ip6table_filter_table_init+0x1c/0xb0 [ 105.670467][ T5945] xt_find_table_lock+0x306/0x3e0 [ 105.675514][ T5945] xt_request_find_table_lock+0x26/0x100 [ 105.681158][ T5945] do_ip6t_get_ctl+0x729/0x1150 [ 105.686020][ T5945] nf_getsockopt+0x262/0x280 [ 105.690662][ T5945] ipv6_getsockopt+0x216/0x2c0 [ 105.695446][ T5945] do_sock_getsockopt+0x368/0x440 [ 105.700494][ T5945] page last free stack trace: [ 105.705174][ T5945] free_unref_page_prepare+0x7ce/0x8e0 [ 105.710673][ T5945] free_unref_page+0x32/0x2e0 [ 105.715381][ T5945] __slab_free+0x35e/0x410 [ 105.719826][ T5945] qlist_free_all+0x75/0xe0 [ 105.724370][ T5945] kasan_quarantine_reduce+0x143/0x160 [ 105.729850][ T5945] __kasan_slab_alloc+0x22/0x80 [ 105.734716][ T5945] slab_post_alloc_hook+0x6e/0x4d0 [ 105.739842][ T5945] __kmem_cache_alloc_node+0x13e/0x260 [ 105.745494][ T5945] __kmalloc_node_track_caller+0xa2/0x230 [ 105.751232][ T5945] strndup_user+0x7a/0x150 [ 105.755663][ T5945] __se_sys_mount+0xe2/0x3c0 [ 105.760262][ T5945] do_syscall_64+0x55/0xb0 [ 105.764696][ T5945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 105.770598][ T5945] [ 105.772928][ T5945] Memory state around the buggy address: [ 105.778578][ T5945] ffff88802c4dc700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 105.786651][ T5945] ffff88802c4dc780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 105.794727][ T5945] >ffff88802c4dc800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 105.803059][ T5945] ^ [ 105.809220][ T5945] ffff88802c4dc880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 105.817378][ T5945] ffff88802c4dc900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 105.825445][ T5945] ================================================================== [ 105.846042][ T5103] Bluetooth: hci0: command tx timeout [ 105.870148][ T5945] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 105.877406][ T5945] CPU: 0 PID: 5945 Comm: syz.0.17 Not tainted syzkaller #0 [ 105.884635][ T5945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 105.894724][ T5945] Call Trace: [ 105.898047][ T5945] [ 105.901040][ T5945] dump_stack_lvl+0x16c/0x230 [ 105.905855][ T5945] ? show_regs_print_info+0x20/0x20 [ 105.911179][ T5945] ? load_image+0x3b0/0x3b0 [ 105.915724][ T5945] panic+0x2c0/0x710 [ 105.919646][ T5945] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 105.925820][ T5945] ? bpf_jit_dump+0xd0/0xd0 [ 105.930349][ T5945] ? _raw_spin_unlock_irqrestore+0xfa/0x110 [ 105.936265][ T5945] ? _raw_spin_unlock+0x40/0x40 [ 105.941131][ T5945] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 105.946613][ T5945] check_panic_on_warn+0x84/0xa0 [ 105.951568][ T5945] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 105.957041][ T5945] end_report+0x6f/0x140 [ 105.961296][ T5945] kasan_report+0x128/0x150 [ 105.965815][ T5945] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 105.971290][ T5945] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 105.976785][ T5945] kasan_check_range+0x288/0x290 [ 105.981751][ T5945] ? ext4_xattr_set_entry+0x94b/0x1e90 [ 105.987239][ T5945] __asan_memmove+0x29/0x70 [ 105.991770][ T5945] ext4_xattr_set_entry+0x94b/0x1e90 [ 105.997083][ T5945] ext4_xattr_block_set+0xae3/0x32a0 [ 106.002392][ T5945] ? ext4_destroy_inode+0x200/0x200 [ 106.007622][ T5945] ? proc_nr_inodes+0x230/0x230 [ 106.012492][ T5945] ? do_raw_spin_unlock+0x121/0x230 [ 106.017732][ T5945] ? _raw_spin_unlock+0x28/0x40 [ 106.022599][ T5945] ? ext4_xattr_block_find+0x350/0x350 [ 106.028078][ T5945] ? ext4_xattr_ibody_set+0x50d/0x6a0 [ 106.033479][ T5945] ext4_xattr_set_handle+0x10a1/0x1290 [ 106.038968][ T5945] ? ext4_xattr_inode_free_quota+0x1b0/0x1b0 [ 106.044973][ T5945] ? __ext4_journal_start_sb+0x259/0x570 [ 106.050627][ T5945] ext4_xattr_set+0x22d/0x320 [ 106.055327][ T5945] ? end_current_label_crit_section+0x170/0x170 [ 106.061608][ T5945] ? ext4_xattr_set_credits+0x2f0/0x2f0 [ 106.067207][ T5945] ? posix_xattr_acl+0x93/0xb0 [ 106.071997][ T5945] ? evm_protect_xattr+0x36d/0x7a0 [ 106.077125][ T5945] ? ext4_xattr_trusted_get+0x40/0x40 [ 106.082519][ T5945] __vfs_setxattr+0x431/0x470 [ 106.087392][ T5945] __vfs_setxattr_noperm+0x12d/0x5e0 [ 106.092723][ T5945] vfs_setxattr+0x16c/0x2f0 [ 106.097253][ T5945] ? xattr_permission+0x470/0x470 [ 106.102387][ T5945] ? __mnt_want_write+0x223/0x2a0 [ 106.107515][ T5945] ? path_setxattr+0x314/0x550 [ 106.112296][ T5945] path_setxattr+0x362/0x550 [ 106.116914][ T5945] ? simple_xattrs_free+0x150/0x150 [ 106.122138][ T5945] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 106.128307][ T5945] ? lock_chain_count+0x20/0x20 [ 106.133188][ T5945] __x64_sys_lsetxattr+0xb8/0xd0 [ 106.138168][ T5945] do_syscall_64+0x55/0xb0 [ 106.142603][ T5945] ? clear_bhb_loop+0x40/0x90 [ 106.147290][ T5945] ? clear_bhb_loop+0x40/0x90 [ 106.152074][ T5945] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 106.157981][ T5945] RIP: 0033:0x7fc877b8efc9 [ 106.162425][ T5945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 106.182133][ T5945] RSP: 002b:00007ffe96404348 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 106.190568][ T5945] RAX: ffffffffffffffda RBX: 00007fc877de5fa0 RCX: 00007fc877b8efc9 [ 106.198556][ T5945] RDX: 0000200000000800 RSI: 0000200000000180 RDI: 00002000000001c0 [ 106.206832][ T5945] RBP: 00007fc877c11f91 R08: 0000000000000000 R09: 0000000000000000 [ 106.214829][ T5945] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 106.222826][ T5945] R13: 00007fc877de5fa0 R14: 00007fc877de5fa0 R15: 0000000000000005 [ 106.230946][ T5945] [ 106.234296][ T5945] Kernel Offset: disabled [ 106.238625][ T5945] Rebooting in 86400 seconds..