Warning: Permanently added '[localhost]:33956' (ED25519) to the list of known hosts.
2025/10/27 13:02:11 parsed 1 programs
syzkaller login: [ 83.624726][ T5315] cgroup: Unknown subsys name 'net'
[ 83.696803][ T5315] cgroup: Unknown subsys name 'cpuset'
[ 83.702824][ T5315] cgroup: Unknown subsys name 'rlimit'
[ 85.396705][ T5315] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 89.010496][ T5327] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 91.329199][ T5371] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 91.335058][ T5371] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 91.338799][ T5371] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 91.342989][ T5371] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 91.347255][ T5371] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 91.712459][ T3060] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.725663][ T3060] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.747948][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.751480][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.922623][ T45] cfg80211: failed to load regulatory.db
[ 93.027174][ T5398] chnl_net:caif_netlink_parms(): no params data found
[ 93.089706][ T5398] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.093724][ T5398] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.096828][ T5398] bridge_slave_0: entered allmulticast mode
[ 93.100660][ T5398] bridge_slave_0: entered promiscuous mode
[ 93.107330][ T5398] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.110491][ T5398] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.114183][ T5398] bridge_slave_1: entered allmulticast mode
[ 93.117726][ T5398] bridge_slave_1: entered promiscuous mode
[ 93.141529][ T5398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 93.147747][ T5398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 93.171043][ T5398] team0: Port device team_slave_0 added
[ 93.176532][ T5398] team0: Port device team_slave_1 added
[ 93.197920][ T5398] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 93.200801][ T5398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 93.212153][ T5398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 93.219034][ T5398] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 93.221982][ T5398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 93.233297][ T5398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 93.266799][ T5398] hsr_slave_0: entered promiscuous mode
[ 93.271542][ T5398] hsr_slave_1: entered promiscuous mode
[ 93.409199][ T5398] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 93.419217][ T5398] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 93.426146][ T5398] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 93.436584][ T5398] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 93.516650][ T5398] 8021q: adding VLAN 0 to HW filter on device bond0
[ 93.537505][ T5398] 8021q: adding VLAN 0 to HW filter on device team0
[ 93.548679][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.551718][ T1039] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 93.562102][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.565321][ T1039] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.752819][ T5398] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 93.791340][ T5398] veth0_vlan: entered promiscuous mode
[ 93.799179][ T5398] veth1_vlan: entered promiscuous mode
[ 93.827948][ T5398] veth0_macvtap: entered promiscuous mode
[ 93.833967][ T5398] veth1_macvtap: entered promiscuous mode
[ 93.851094][ T5398] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 93.864300][ T5398] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 93.876174][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.886559][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.890955][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 93.906158][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.061440][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 94.104037][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 94.136291][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 94.177019][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
2025/10/27 13:02:24 executed programs: 0
[ 94.544390][ T5371] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 94.548796][ T5371] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 94.552389][ T5371] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 94.560334][ T5371] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 94.564632][ T5371] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 94.719948][ T5423] chnl_net:caif_netlink_parms(): no params data found
[ 94.781723][ T5423] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.786046][ T5423] bridge0: port 1(bridge_slave_0) entered disabled state
[ 94.789614][ T5423] bridge_slave_0: entered allmulticast mode
[ 94.794484][ T5423] bridge_slave_0: entered promiscuous mode
[ 94.801660][ T5423] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.805573][ T5423] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.808764][ T5423] bridge_slave_1: entered allmulticast mode
[ 94.812669][ T5423] bridge_slave_1: entered promiscuous mode
[ 94.841374][ T5423] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 94.849616][ T5423] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 94.872372][ T5423] team0: Port device team_slave_0 added
[ 94.882077][ T5423] team0: Port device team_slave_1 added
[ 94.901698][ T5423] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 94.905316][ T5423] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.917619][ T5423] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 94.924375][ T5423] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 94.927332][ T5423] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 94.938766][ T5423] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 94.977036][ T5423] hsr_slave_0: entered promiscuous mode
[ 94.980084][ T5423] hsr_slave_1: entered promiscuous mode
[ 94.984163][ T5423] debugfs: 'hsr0' already exists in 'hsr'
[ 94.986826][ T5423] Cannot create hsr debugfs directory
[ 96.634299][ T5371] Bluetooth: hci0: command tx timeout
[ 96.846029][ T13] bridge_slave_1: left allmulticast mode
[ 96.848708][ T13] bridge_slave_1: left promiscuous mode
[ 96.854919][ T13] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.886524][ T13] bridge_slave_0: left allmulticast mode
[ 96.888533][ T13] bridge_slave_0: left promiscuous mode
[ 96.890915][ T13] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.270196][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 97.276675][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 97.281262][ T13] bond0 (unregistering): Released all slaves
[ 97.397664][ T13] hsr_slave_0: left promiscuous mode
[ 97.400623][ T13] hsr_slave_1: left promiscuous mode
[ 97.406997][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 97.410102][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 97.426057][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 97.429188][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 97.451488][ T13] veth1_macvtap: left promiscuous mode
[ 97.457507][ T13] veth0_macvtap: left promiscuous mode
[ 97.460354][ T13] veth1_vlan: left promiscuous mode
[ 97.462740][ T13] veth0_vlan: left promiscuous mode
[ 97.850883][ T13] team0 (unregistering): Port device team_slave_1 removed
[ 97.870753][ T13] team0 (unregistering): Port device team_slave_0 removed
[ 98.340168][ T5423] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 98.376688][ T5423] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 98.398421][ T5423] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 98.419195][ T5423] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 98.649335][ T5423] 8021q: adding VLAN 0 to HW filter on device bond0
[ 98.686614][ T5423] 8021q: adding VLAN 0 to HW filter on device team0
[ 98.696568][ T13] bridge0: port 1(bridge_slave_0) entered blocking state
[ 98.700094][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 98.713699][ T5371] Bluetooth: hci0: command tx timeout
[ 98.732031][ T13] bridge0: port 2(bridge_slave_1) entered blocking state
[ 98.735478][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 99.035672][ T5423] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 99.070415][ T5423] veth0_vlan: entered promiscuous mode
[ 99.079282][ T5423] veth1_vlan: entered promiscuous mode
[ 99.101547][ T5423] veth0_macvtap: entered promiscuous mode
[ 99.107890][ T5423] veth1_macvtap: entered promiscuous mode
[ 99.121484][ T5423] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 99.135606][ T5423] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 99.144954][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.148880][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.152709][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.172869][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 99.220952][ T1039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.231566][ T1039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.256367][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 99.259818][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 99.322854][ T5464] loop0: detected capacity change from 0 to 512
[ 99.335961][ T5464] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support!
[ 99.353628][ T5464] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode
[ 99.370797][ T5464] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2853: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 99.381787][ T5464] EXT4-fs (loop0): 1 truncate cleaned up
[ 99.385998][ T5464] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 99.428205][ T5464] ==================================================================
[ 99.431549][ T5464] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x8e9/0x1e20
[ 99.434982][ T5464] Read of size 18446744073709551572 at addr ffff888011d0d050 by task syz.0.17/5464
[ 99.439934][ T5464]
[ 99.440994][ T5464] CPU: 0 UID: 0 PID: 5464 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 99.441008][ T5464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 99.441014][ T5464] Call Trace:
[ 99.441021][ T5464]
[ 99.441026][ T5464] dump_stack_lvl+0x189/0x250
[ 99.441044][ T5464] ? __kasan_check_byte+0x12/0x40
[ 99.441060][ T5464] ? __pfx_dump_stack_lvl+0x10/0x10
[ 99.441073][ T5464] ? lock_release+0x4b/0x3e0
[ 99.441084][ T5464] ? __virt_addr_valid+0x4a5/0x5c0
[ 99.441098][ T5464] print_report+0xca/0x240
[ 99.441107][ T5464] ? ext4_xattr_set_entry+0x8e9/0x1e20
[ 99.441117][ T5464] kasan_report+0x118/0x150
[ 99.441126][ T5464] ? ext4_xattr_set_entry+0x8e9/0x1e20
[ 99.441135][ T5464] ? ext4_xattr_set_entry+0x8e9/0x1e20
[ 99.441144][ T5464] kasan_check_range+0x2b0/0x2c0
[ 99.441153][ T5464] ? ext4_xattr_set_entry+0x8e9/0x1e20
[ 99.441161][ T5464] __asan_memmove+0x29/0x70
[ 99.441169][ T5464] ext4_xattr_set_entry+0x8e9/0x1e20
[ 99.441181][ T5464] ext4_xattr_block_set+0x872/0x2ac0
[ 99.441190][ T5464] ? fs_reclaim_acquire+0x7d/0x100
[ 99.441202][ T5464] ? __pfx_check_xattrs+0x10/0x10
[ 99.441216][ T5464] ? __pfx_ext4_xattr_block_set+0x10/0x10
[ 99.441226][ T5464] ? ext4_xattr_block_find+0x2d4/0x350
[ 99.441235][ T5464] ext4_expand_extra_isize_ea+0x12da/0x1ea0
[ 99.441251][ T5464] __ext4_expand_extra_isize+0x30d/0x400
[ 99.441263][ T5464] __ext4_mark_inode_dirty+0x46c/0x700
[ 99.441277][ T5464] __ext4_unlink+0x631/0xab0
[ 99.441290][ T5464] ? __pfx___ext4_unlink+0x10/0x10
[ 99.441301][ T5464] ? __pfx___dquot_initialize+0x10/0x10
[ 99.441309][ T5464] ? down_write+0x162/0x1f0
[ 99.441362][ T5464] ext4_unlink+0x216/0x5d0
[ 99.441373][ T5464] vfs_unlink+0x394/0x650
[ 99.441387][ T5464] do_unlinkat+0x345/0x560
[ 99.441400][ T5464] ? __pfx_do_unlinkat+0x10/0x10
[ 99.441411][ T5464] ? strncpy_from_user+0x150/0x290
[ 99.441425][ T5464] ? getname_flags+0x1e5/0x540
[ 99.441435][ T5464] __x64_sys_unlink+0x47/0x50
[ 99.441443][ T5464] do_syscall_64+0xfa/0xfa0
[ 99.441451][ T5464] ? lockdep_hardirqs_on+0x9c/0x150
[ 99.441461][ T5464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.441468][ T5464] ? clear_bhb_loop+0x60/0xb0
[ 99.441475][ T5464] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.441482][ T5464] RIP: 0033:0x7f55ceb8efc9
[ 99.441495][ T5464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 99.441504][ T5464] RSP: 002b:00007ffe9c0e7d38 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[ 99.441515][ T5464] RAX: ffffffffffffffda RBX: 00007f55cede5fa0 RCX: 00007f55ceb8efc9
[ 99.441522][ T5464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180
[ 99.441528][ T5464] RBP: 00007f55cec11f91 R08: 0000000000000000 R09: 0000000000000000
[ 99.441534][ T5464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 99.441540][ T5464] R13: 00007f55cede5fa0 R14: 00007f55cede5fa0 R15: 0000000000000001
[ 99.441551][ T5464]
[ 99.441554][ T5464]
[ 99.569604][ T5464] Allocated by task 5464:
[ 99.571361][ T5464] kasan_save_track+0x3e/0x80
[ 99.573205][ T5464] __kasan_kmalloc+0x93/0xb0
[ 99.575040][ T5464] __kmalloc_node_track_caller_noprof+0x568/0x800
[ 99.577567][ T5464] kmemdup_noprof+0x2b/0x70
[ 99.579393][ T5464] ext4_xattr_block_set+0x781/0x2ac0
[ 99.581742][ T5464] ext4_expand_extra_isize_ea+0x12da/0x1ea0
[ 99.584263][ T5464] __ext4_expand_extra_isize+0x30d/0x400
[ 99.586777][ T5464] __ext4_mark_inode_dirty+0x46c/0x700
[ 99.589045][ T5464] __ext4_unlink+0x631/0xab0
[ 99.591036][ T5464] ext4_unlink+0x216/0x5d0
[ 99.593041][ T5464] vfs_unlink+0x394/0x650
[ 99.594933][ T5464] do_unlinkat+0x345/0x560
[ 99.596909][ T5464] __x64_sys_unlink+0x47/0x50
[ 99.598820][ T5464] do_syscall_64+0xfa/0xfa0
[ 99.600825][ T5464] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.603367][ T5464]
[ 99.604470][ T5464] The buggy address belongs to the object at ffff888011d0d000
[ 99.604470][ T5464] which belongs to the cache kmalloc-1k of size 1024
[ 99.610268][ T5464] The buggy address is located 80 bytes inside of
[ 99.610268][ T5464] 1024-byte region [ffff888011d0d000, ffff888011d0d400)
[ 99.615845][ T5464]
[ 99.616911][ T5464] The buggy address belongs to the physical page:
[ 99.619529][ T5464] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11d0c
[ 99.623163][ T5464] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0
[ 99.626673][ T5464] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff)
[ 99.629992][ T5464] page_type: f5(slab)
[ 99.631693][ T5464] raw: 00fff00000000040 ffff88801a041dc0 dead000000000122 0000000000000000
[ 99.635393][ T5464] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[ 99.639018][ T5464] head: 00fff00000000040 ffff88801a041dc0 dead000000000122 0000000000000000
[ 99.642767][ T5464] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000
[ 99.646678][ T5464] head: 00fff00000000002 ffffea0000474301 00000000ffffffff 00000000ffffffff
[ 99.650518][ T5464] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004
[ 99.654240][ T5464] page dumped because: kasan: bad access detected
[ 99.656976][ T5464] page_owner tracks the page as allocated
[ 99.659395][ T5464] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5464, tgid 5464 (syz.0.17), ts 99391437193, free_ts 91456122382
[ 99.667820][ T5464] post_alloc_hook+0x240/0x2a0
[ 99.670340][ T5464] get_page_from_freelist+0x2365/0x2440
[ 99.673093][ T5464] __alloc_pages_slowpath+0x30b/0xcf0
[ 99.675446][ T5464] __alloc_frozen_pages_noprof+0x319/0x370
[ 99.677935][ T5464] allocate_slab+0x71/0x350
[ 99.679853][ T5464] ___slab_alloc+0xe94/0x18a0
[ 99.681897][ T5464] __slab_alloc+0x65/0x100
[ 99.683767][ T5464] __kmalloc_node_noprof+0x5cc/0x800
[ 99.686062][ T5464] alloc_slab_obj_exts+0x3e/0x100
[ 99.688182][ T5464] __memcg_slab_post_alloc_hook+0x31d/0x7d0
[ 99.690765][ T5464] __kmalloc_node_track_caller_noprof+0x5e6/0x800
[ 99.693645][ T5464] kstrdup+0x42/0x100
[ 99.695529][ T5464] alloc_vfsmnt+0xeb/0x430
[ 99.697526][ T5464] vfs_create_mount+0x69/0x320
[ 99.699492][ T5464] do_new_mount+0x390/0xa10
[ 99.701510][ T5464] __se_sys_mount+0x313/0x410
[ 99.703479][ T5464] page last free pid 3060 tgid 3060 stack trace:
[ 99.706259][ T5464] __free_frozen_pages+0xbc4/0xd30
[ 99.708562][ T5464] free_large_kmalloc+0x13a/0x1f0
[ 99.710653][ T5464] build_detached_freelist+0x22a/0x270
[ 99.712948][ T5464] kmem_cache_free_bulk+0x8ec/0xdb0
[ 99.715293][ T5464] kvfree_rcu_bulk+0xe5/0x1f0
[ 99.717275][ T5464] kfree_rcu_monitor+0x211/0x2a0
[ 99.719357][ T5464] process_scheduled_works+0xae1/0x17b0
[ 99.721678][ T5464] worker_thread+0x8a0/0xda0
[ 99.723664][ T5464] kthread+0x711/0x8a0
[ 99.725569][ T5464] ret_from_fork+0x4bc/0x870
[ 99.727815][ T5464] ret_from_fork_asm+0x1a/0x30
[ 99.729995][ T5464]
[ 99.731074][ T5464] Memory state around the buggy address:
[ 99.733571][ T5464] ffff888011d0cf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 99.736964][ T5464] ffff888011d0cf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 99.740460][ T5464] >ffff888011d0d000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 99.743748][ T5464] ^
[ 99.746711][ T5464] ffff888011d0d080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 99.750155][ T5464] ffff888011d0d100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 99.753701][ T5464] ==================================================================
[ 99.786401][ T5464] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 99.789639][ T5464] CPU: 0 UID: 0 PID: 5464 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full)
[ 99.793611][ T5464] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 99.798239][ T5464] Call Trace:
[ 99.799728][ T5464]
[ 99.801035][ T5464] dump_stack_lvl+0x99/0x250
[ 99.803019][ T5464] ? __asan_memcpy+0x40/0x70
[ 99.804805][ T5464] ? __pfx_dump_stack_lvl+0x10/0x10
[ 99.807091][ T5464] ? __pfx__printk+0x10/0x10
[ 99.809150][ T5464] vpanic+0x237/0x6d0
[ 99.810949][ T5464] ? __pfx_vpanic+0x10/0x10
[ 99.812906][ T5464] ? preempt_schedule+0xae/0xc0
[ 99.814912][ T5464] ? __pfx_preempt_schedule+0x10/0x10
[ 99.817427][ T5464] panic+0xb9/0xc0
[ 99.819125][ T5464] ? __pfx_panic+0x10/0x10
[ 99.821136][ T5464] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 99.823749][ T5464] ? ext4_xattr_set_entry+0x8e9/0x1e20
[ 99.826146][ T5464] check_panic_on_warn+0x89/0xb0
[ 99.828325][ T5464] ? ext4_xattr_set_entry+0x8e9/0x1e20
[ 99.830751][ T5464] end_report+0x78/0x160
[ 99.832606][ T5464] kasan_report+0x129/0x150
[ 99.834505][ T5464] ? ext4_xattr_set_entry+0x8e9/0x1e20
[ 99.836941][ T5464] ? ext4_xattr_set_entry+0x8e9/0x1e20
[ 99.839293][ T5464] kasan_check_range+0x2b0/0x2c0
[ 99.841543][ T5464] ? ext4_xattr_set_entry+0x8e9/0x1e20
[ 99.843992][ T5464] __asan_memmove+0x29/0x70
[ 99.845977][ T5464] ext4_xattr_set_entry+0x8e9/0x1e20
[ 99.848260][ T5464] ext4_xattr_block_set+0x872/0x2ac0
[ 99.850546][ T5464] ? fs_reclaim_acquire+0x7d/0x100
[ 99.852782][ T5464] ? __pfx_check_xattrs+0x10/0x10
[ 99.854986][ T5464] ? __pfx_ext4_xattr_block_set+0x10/0x10
[ 99.857517][ T5464] ? ext4_xattr_block_find+0x2d4/0x350
[ 99.859967][ T5464] ext4_expand_extra_isize_ea+0x12da/0x1ea0
[ 99.862666][ T5464] __ext4_expand_extra_isize+0x30d/0x400
[ 99.865243][ T5464] __ext4_mark_inode_dirty+0x46c/0x700
[ 99.867679][ T5464] __ext4_unlink+0x631/0xab0
[ 99.869813][ T5464] ? __pfx___ext4_unlink+0x10/0x10
[ 99.872042][ T5464] ? __pfx___dquot_initialize+0x10/0x10
[ 99.874481][ T5464] ? down_write+0x162/0x1f0
[ 99.876557][ T5464] ext4_unlink+0x216/0x5d0
[ 99.878412][ T5464] vfs_unlink+0x394/0x650
[ 99.880132][ T5464] do_unlinkat+0x345/0x560
[ 99.882132][ T5464] ? __pfx_do_unlinkat+0x10/0x10
[ 99.884338][ T5464] ? strncpy_from_user+0x150/0x290
[ 99.886683][ T5464] ? getname_flags+0x1e5/0x540
[ 99.888902][ T5464] __x64_sys_unlink+0x47/0x50
[ 99.890843][ T5464] do_syscall_64+0xfa/0xfa0
[ 99.892632][ T5464] ? lockdep_hardirqs_on+0x9c/0x150
[ 99.894754][ T5464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.897495][ T5464] ? clear_bhb_loop+0x60/0xb0
[ 99.899624][ T5464] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 99.902303][ T5464] RIP: 0033:0x7f55ceb8efc9
[ 99.904271][ T5464] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 99.912823][ T5464] RSP: 002b:00007ffe9c0e7d38 EFLAGS: 00000246 ORIG_RAX: 0000000000000057
[ 99.916567][ T5464] RAX: ffffffffffffffda RBX: 00007f55cede5fa0 RCX: 00007f55ceb8efc9
[ 99.920130][ T5464] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000180
[ 99.923686][ T5464] RBP: 00007f55cec11f91 R08: 0000000000000000 R09: 0000000000000000
[ 99.927245][ T5464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 99.930755][ T5464] R13: 00007f55cede5fa0 R14: 00007f55cede5fa0 R15: 0000000000000001
[ 99.934174][ T5464]
[ 99.935889][ T5464] Kernel Offset: disabled
[ 99.937842][ T5464] Rebooting in 86400 seconds..
VM DIAGNOSIS:
13:02:30 Registers:
info registers vcpu 0
CPU#0
RAX=0000000000000031 RBX=0000000000000031 RCX=0000000000000000 RDX=00000000000003f8
RSI=0000000000000000 RDI=0000000000000020 RBP=00000000000003f8 RSP=ffffc90002b3eeb0
R8 =ffff8880306c0237 R9 =1ffff110060d8046 R10=dffffc0000000000 R11=ffffffff851660e0
R12=dffffc0000000000 R13=ffffffff997e1905 R14=ffffffff99af5320 R15=0000000000000000
RIP=ffffffff8516615c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055555abb8500 ffffffff 00c00000
GS =0000 ffff88808d733000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=000020000000f000 CR3=0000000056364000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000001000000 Opmask01=0000000001000001 Opmask02=00000000ffffffef Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffe9c0e8010 0000003000000018
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000001a0000000d0 00000000ffffffff
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55cec12fdb
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55cec12fe8
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55cec12fe2
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55cec12ff6
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55cec1307c
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007f55cec1315a
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000094
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000002 0000000000000000 0000000000000000 0000000000000094
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 000000524f525245
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00524f5252450040
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00e800a800000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000