Warning: Permanently added '10.128.1.93' (ED25519) to the list of known hosts. 2026/02/21 22:49:42 parsed 1 programs [ 75.964296][ T4271] cgroup: Unknown subsys name 'net' [ 76.099351][ T4271] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.560715][ T4271] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 78.950192][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.967737][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.988400][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 79.005069][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.014002][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.022383][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 80.381706][ T4320] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.390020][ T4319] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.398913][ T4319] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.408034][ T4319] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.417167][ T4319] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.424462][ T4319] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.790818][ T4346] chnl_net:caif_netlink_parms(): no params data found [ 81.855812][ T4346] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.863676][ T4346] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.871824][ T4346] device bridge_slave_0 entered promiscuous mode [ 81.881580][ T4346] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.888915][ T4346] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.897282][ T4346] device bridge_slave_1 entered promiscuous mode [ 81.922818][ T4346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.935506][ T4346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.962267][ T4346] team0: Port device team_slave_0 added [ 81.970220][ T4346] team0: Port device team_slave_1 added [ 81.991848][ T4346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.998948][ T4346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.025261][ T4346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.040606][ T4346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.047909][ T4346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.074037][ T4346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.161591][ T4346] device hsr_slave_0 entered promiscuous mode [ 82.168574][ T4346] device hsr_slave_1 entered promiscuous mode [ 82.267674][ T4346] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.278214][ T4346] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.287406][ T4346] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.296678][ T4346] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.368492][ T4346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.381974][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.391024][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.410958][ T4346] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.420726][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.430393][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.439467][ T75] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.446811][ T75] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.457191][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 82.477777][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.486394][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.495765][ T75] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.502948][ T75] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.527061][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.538718][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.550398][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.562766][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.571433][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.589184][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.598516][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.609888][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.622415][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.645639][ T4346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.824510][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.832050][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.846331][ T4346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.866098][ T75] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.898463][ T4346] device veth0_vlan entered promiscuous mode [ 82.906497][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.918304][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.926430][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.938747][ T4346] device veth1_vlan entered promiscuous mode [ 82.954031][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.962211][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.984354][ T4346] device veth0_macvtap entered promiscuous mode [ 82.994163][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.002670][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.015697][ T4346] device veth1_macvtap entered promiscuous mode [ 83.038582][ T4346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.046947][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.060615][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.076924][ T4346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.086056][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.095221][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.108553][ T4346] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.118758][ T4346] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.128346][ T4346] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.139300][ T4346] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.306798][ T9] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/02/21 22:49:52 executed programs: 0 [ 83.702262][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.710648][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.718349][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.727188][ T48] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.735799][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 83.743550][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 83.856930][ T4375] chnl_net:caif_netlink_parms(): no params data found [ 83.904919][ T4375] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.912073][ T4375] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.920050][ T4375] device bridge_slave_0 entered promiscuous mode [ 83.928436][ T4375] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.936049][ T4375] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.944029][ T4375] device bridge_slave_1 entered promiscuous mode [ 83.968045][ T4375] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.979149][ T4375] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 84.001947][ T4375] team0: Port device team_slave_0 added [ 84.010025][ T4375] team0: Port device team_slave_1 added [ 84.031401][ T4375] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.038429][ T4375] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.064473][ T4375] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.076610][ T4375] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.083640][ T4375] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.111389][ T4375] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.152834][ T4375] device hsr_slave_0 entered promiscuous mode [ 84.159622][ T4375] device hsr_slave_1 entered promiscuous mode [ 84.166950][ T4375] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.175901][ T4375] Cannot create hsr debugfs directory [ 85.693095][ T9] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.773729][ T48] Bluetooth: hci0: command 0x0409 tx timeout [ 86.654470][ T14] cfg80211: failed to load regulatory.db [ 87.853234][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 87.974324][ T9] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.026660][ T9] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.880380][ T4375] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.890612][ T4375] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.926415][ T4375] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.937788][ T4375] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.032261][ T4375] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.050096][ T9] device hsr_slave_0 left promiscuous mode [ 89.058289][ T9] device hsr_slave_1 left promiscuous mode [ 89.067592][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.075653][ T9] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.084780][ T9] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.092237][ T9] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.103317][ T9] device bridge_slave_1 left promiscuous mode [ 89.110448][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.126047][ T9] device bridge_slave_0 left promiscuous mode [ 89.132298][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.160758][ T9] device veth1_macvtap left promiscuous mode [ 89.167396][ T9] device veth0_macvtap left promiscuous mode [ 89.173833][ T9] device veth1_vlan left promiscuous mode [ 89.179826][ T9] device veth0_vlan left promiscuous mode [ 89.514734][ T9] team0 (unregistering): Port device team_slave_1 removed [ 89.540859][ T9] team0 (unregistering): Port device team_slave_0 removed [ 89.567767][ T9] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.595151][ T9] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.769079][ T9] bond0 (unregistering): Released all slaves [ 89.853990][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 89.861894][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 89.872012][ T4375] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.882277][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 89.891307][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 89.900920][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.908168][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.927766][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 89.936341][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 89.942791][ T48] Bluetooth: hci0: command 0x040f tx timeout [ 89.951425][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 89.960206][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.967605][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.977068][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 89.995672][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 90.004995][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 90.014665][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 90.027887][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 90.036796][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 90.050693][ T4375] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 90.061520][ T4375] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 90.085727][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 90.094713][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 90.105867][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 90.114752][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 90.127172][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 90.137252][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 90.324871][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 90.332418][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 90.346328][ T4375] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.367096][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 90.375978][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 90.393471][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 90.401811][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 90.411480][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 90.419360][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 90.431026][ T4375] device veth0_vlan entered promiscuous mode [ 90.450434][ T4375] device veth1_vlan entered promiscuous mode [ 90.476849][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.485094][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.493380][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.501909][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.512114][ T4375] device veth0_macvtap entered promiscuous mode [ 90.526787][ T4375] device veth1_macvtap entered promiscuous mode [ 90.541731][ T4375] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.549748][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.558173][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.566505][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.575120][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.592867][ T4375] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.601656][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 90.610249][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 90.621329][ T4375] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.630550][ T4375] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.640640][ T4375] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.649419][ T4375] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.700465][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.711548][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.726040][ T37] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.744217][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.752085][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.760268][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.847627][ T4414] loop0: detected capacity change from 0 to 4096 [ 90.897068][ T4414] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 90.918848][ T4414] ntfs3: loop0: Failed to load $Extend. [ 90.975748][ T4414] ================================================================== [ 90.983963][ T4414] BUG: KASAN: slab-out-of-bounds in ntfs_set_ea+0x110d/0x13b0 [ 90.991461][ T4414] Write of size 4 at addr ffff888078effd90 by task syz.0.17/4414 [ 90.999211][ T4414] [ 91.001565][ T4414] CPU: 0 PID: 4414 Comm: syz.0.17 Not tainted syzkaller #0 [ 91.008789][ T4414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 91.018874][ T4414] Call Trace: [ 91.022187][ T4414] [ 91.025142][ T4414] dump_stack_lvl+0x188/0x24e [ 91.029851][ T4414] ? __lock_acquire+0x7d10/0x7d10 [ 91.034920][ T4414] ? show_regs_print_info+0x12/0x12 [ 91.040166][ T4414] ? load_image+0x400/0x400 [ 91.044695][ T4414] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 91.050185][ T4414] ? __virt_addr_valid+0x188/0x540 [ 91.055332][ T4414] ? __virt_addr_valid+0x465/0x540 [ 91.060521][ T4414] ? ntfs_set_ea+0x110d/0x13b0 [ 91.065303][ T4414] print_report+0xa8/0x210 [ 91.069742][ T4414] kasan_report+0x10b/0x140 [ 91.074266][ T4414] ? ntfs_set_ea+0x110d/0x13b0 [ 91.079060][ T4414] ntfs_set_ea+0x110d/0x13b0 [ 91.083689][ T4414] ? ntfs_save_wsl_perm+0x400/0x400 [ 91.088920][ T4414] ? aa_get_newest_label+0xf9/0x5b0 [ 91.094136][ T4414] ? verify_lock_unused+0x140/0x140 [ 91.099366][ T4414] ntfs_setxattr+0x16b/0x840 [ 91.103985][ T4414] ? evm_protected_xattr_common+0x170/0x190 [ 91.109898][ T4414] ? ntfs_getxattr+0x5c0/0x5c0 [ 91.114720][ T4414] ? evm_protect_xattr+0x7e9/0x9d0 [ 91.119849][ T4414] ? ntfs_getxattr+0x5c0/0x5c0 [ 91.124637][ T4414] __vfs_setxattr+0x3e0/0x420 [ 91.129339][ T4414] __vfs_setxattr_noperm+0x129/0x5e0 [ 91.134646][ T4414] vfs_setxattr+0x167/0x2e0 [ 91.139172][ T4414] ? xattr_permission+0x500/0x500 [ 91.144242][ T4414] ? _copy_from_user+0x10b/0x170 [ 91.149204][ T4414] ? setxattr+0x2ce/0x360 [ 91.153557][ T4414] setxattr+0x346/0x360 [ 91.157750][ T4414] ? path_setxattr+0x290/0x290 [ 91.162549][ T4414] ? __mnt_want_write+0x21f/0x2a0 [ 91.167625][ T4414] path_setxattr+0x147/0x290 [ 91.172233][ T4414] ? simple_xattr_list_add+0xf0/0xf0 [ 91.177555][ T4414] ? lock_chain_count+0x20/0x20 [ 91.182556][ T4414] __x64_sys_lsetxattr+0xb4/0xd0 [ 91.187531][ T4414] do_syscall_64+0x4c/0xa0 [ 91.191965][ T4414] ? clear_bhb_loop+0x60/0xb0 [ 91.196669][ T4414] ? clear_bhb_loop+0x60/0xb0 [ 91.201362][ T4414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.207273][ T4414] RIP: 0033:0x7f9045d9c629 [ 91.211721][ T4414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.231341][ T4414] RSP: 002b:00007ffed83a2248 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 91.239781][ T4414] RAX: ffffffffffffffda RBX: 00007f9046015fa0 RCX: 00007f9045d9c629 [ 91.247765][ T4414] RDX: 0000200000000000 RSI: 0000200000000080 RDI: 0000200000000300 [ 91.255758][ T4414] RBP: 00007f9045e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 91.263740][ T4414] R10: 0000000000009ab7 R11: 0000000000000246 R12: 0000000000000000 [ 91.271728][ T4414] R13: 00007f9046015fac R14: 00007f9046015fa0 R15: 00007f9046015fa0 [ 91.279731][ T4414] [ 91.282768][ T4414] [ 91.285100][ T4414] The buggy address belongs to the physical page: [ 91.291532][ T4414] page:ffffea0001e3bc00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x78ef0 [ 91.301701][ T4414] head:ffffea0001e3bc00 order:4 compound_mapcount:0 compound_pincount:0 [ 91.310049][ T4414] flags: 0xfff00000010000(head|node=0|zone=1|lastcpupid=0x7ff) [ 91.317634][ T4414] raw: 00fff00000010000 0000000000000000 dead000000000122 0000000000000000 [ 91.326226][ T4414] raw: 0000000000000000 0000000000000000 00000001ffffffff 0000000000000000 [ 91.334815][ T4414] page dumped because: kasan: bad access detected [ 91.341241][ T4414] page_owner tracks the page as allocated [ 91.346963][ T4414] page last allocated via order 4, migratetype Unmovable, gfp_mask 0x140d40(GFP_NOFS|__GFP_COMP|__GFP_ZERO|__GFP_HARDWALL), pid 4414, tgid 4414 (syz.0.17), ts 90975725449, free_ts 90974015045 [ 91.365727][ T4414] post_alloc_hook+0x173/0x1a0 [ 91.370545][ T4414] get_page_from_freelist+0x1a1e/0x1ab0 [ 91.376120][ T4414] __alloc_pages+0x1ec/0x4f0 [ 91.380722][ T4414] __kmalloc_large_node+0x8c/0x1e0 [ 91.385852][ T4414] __kmalloc+0x110/0x240 [ 91.390115][ T4414] ntfs_set_ea+0x533/0x13b0 [ 91.394630][ T4414] ntfs_setxattr+0x16b/0x840 [ 91.399220][ T4414] __vfs_setxattr+0x3e0/0x420 [ 91.403901][ T4414] __vfs_setxattr_noperm+0x129/0x5e0 [ 91.409194][ T4414] vfs_setxattr+0x167/0x2e0 [ 91.413713][ T4414] setxattr+0x346/0x360 [ 91.417885][ T4414] path_setxattr+0x147/0x290 [ 91.422485][ T4414] __x64_sys_lsetxattr+0xb4/0xd0 [ 91.427438][ T4414] do_syscall_64+0x4c/0xa0 [ 91.431871][ T4414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.437780][ T4414] page last free stack trace: [ 91.442454][ T4414] __free_pages_ok+0xb46/0xc40 [ 91.447232][ T4414] free_large_kmalloc+0xfd/0x190 [ 91.452189][ T4414] ntfs_set_ea+0x724/0x13b0 [ 91.456696][ T4414] ntfs_setxattr+0x16b/0x840 [ 91.461293][ T4414] __vfs_setxattr+0x3e0/0x420 [ 91.465985][ T4414] __vfs_setxattr_noperm+0x129/0x5e0 [ 91.471290][ T4414] vfs_setxattr+0x167/0x2e0 [ 91.475814][ T4414] setxattr+0x346/0x360 [ 91.479987][ T4414] path_setxattr+0x147/0x290 [ 91.484591][ T4414] __x64_sys_lsetxattr+0xb4/0xd0 [ 91.489544][ T4414] do_syscall_64+0x4c/0xa0 [ 91.494140][ T4414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.500052][ T4414] [ 91.502386][ T4414] Memory state around the buggy address: [ 91.508029][ T4414] ffff888078effc80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 91.516113][ T4414] ffff888078effd00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 91.524190][ T4414] >ffff888078effd80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 91.532263][ T4414] ^ [ 91.536872][ T4414] ffff888078effe00: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 91.544966][ T4414] ffff888078effe80: fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe fe [ 91.553040][ T4414] ================================================================== [ 91.592170][ T4414] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.599443][ T4414] CPU: 0 PID: 4414 Comm: syz.0.17 Not tainted syzkaller #0 [ 91.606657][ T4414] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 91.616741][ T4414] Call Trace: [ 91.620049][ T4414] [ 91.623008][ T4414] dump_stack_lvl+0x188/0x24e [ 91.627743][ T4414] ? memcpy+0x3c/0x60 [ 91.631771][ T4414] ? show_regs_print_info+0x12/0x12 [ 91.637016][ T4414] ? load_image+0x400/0x400 [ 91.641560][ T4414] panic+0x2e5/0x730 [ 91.645478][ T4414] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 91.651682][ T4414] ? bpf_jit_dump+0xd0/0xd0 [ 91.656225][ T4414] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 91.662238][ T4414] ? _raw_spin_unlock+0x40/0x40 [ 91.667126][ T4414] check_panic_on_warn+0x80/0xa0 [ 91.672103][ T4414] ? ntfs_set_ea+0x110d/0x13b0 [ 91.676924][ T4414] end_report+0x66/0x110 [ 91.681227][ T4414] kasan_report+0x118/0x140 [ 91.685770][ T4414] ? ntfs_set_ea+0x110d/0x13b0 [ 91.690593][ T4414] ntfs_set_ea+0x110d/0x13b0 [ 91.695223][ T4414] ? ntfs_save_wsl_perm+0x400/0x400 [ 91.700448][ T4414] ? aa_get_newest_label+0xf9/0x5b0 [ 91.705683][ T4414] ? verify_lock_unused+0x140/0x140 [ 91.710896][ T4414] ntfs_setxattr+0x16b/0x840 [ 91.715507][ T4414] ? evm_protected_xattr_common+0x170/0x190 [ 91.721432][ T4414] ? ntfs_getxattr+0x5c0/0x5c0 [ 91.726217][ T4414] ? evm_protect_xattr+0x7e9/0x9d0 [ 91.731364][ T4414] ? ntfs_getxattr+0x5c0/0x5c0 [ 91.736139][ T4414] __vfs_setxattr+0x3e0/0x420 [ 91.740831][ T4414] __vfs_setxattr_noperm+0x129/0x5e0 [ 91.746134][ T4414] vfs_setxattr+0x167/0x2e0 [ 91.750663][ T4414] ? xattr_permission+0x500/0x500 [ 91.755716][ T4414] ? _copy_from_user+0x10b/0x170 [ 91.760682][ T4414] ? setxattr+0x2ce/0x360 [ 91.765055][ T4414] setxattr+0x346/0x360 [ 91.769242][ T4414] ? path_setxattr+0x290/0x290 [ 91.774040][ T4414] ? __mnt_want_write+0x21f/0x2a0 [ 91.779090][ T4414] path_setxattr+0x147/0x290 [ 91.783710][ T4414] ? simple_xattr_list_add+0xf0/0xf0 [ 91.789012][ T4414] ? lock_chain_count+0x20/0x20 [ 91.793879][ T4414] __x64_sys_lsetxattr+0xb4/0xd0 [ 91.798837][ T4414] do_syscall_64+0x4c/0xa0 [ 91.803262][ T4414] ? clear_bhb_loop+0x60/0xb0 [ 91.807955][ T4414] ? clear_bhb_loop+0x60/0xb0 [ 91.812645][ T4414] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 91.818548][ T4414] RIP: 0033:0x7f9045d9c629 [ 91.822968][ T4414] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 91.842581][ T4414] RSP: 002b:00007ffed83a2248 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 91.851006][ T4414] RAX: ffffffffffffffda RBX: 00007f9046015fa0 RCX: 00007f9045d9c629 [ 91.859019][ T4414] RDX: 0000200000000000 RSI: 0000200000000080 RDI: 0000200000000300 [ 91.867009][ T4414] RBP: 00007f9045e32b39 R08: 0000000000000000 R09: 0000000000000000 [ 91.874996][ T4414] R10: 0000000000009ab7 R11: 0000000000000246 R12: 0000000000000000 [ 91.882977][ T4414] R13: 00007f9046015fac R14: 00007f9046015fa0 R15: 00007f9046015fa0 [ 91.890970][ T4414] [ 91.894574][ T4414] Kernel Offset: disabled [ 91.898903][ T4414] Rebooting in 86400 seconds..