Warning: Permanently added '10.128.0.162' (ED25519) to the list of known hosts. 2026/02/18 10:46:40 parsed 1 programs [ 47.784249][ T28] audit: type=1400 audit(1771411600.868:64): avc: denied { node_bind } for pid=282 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 47.805257][ T28] audit: type=1400 audit(1771411600.868:65): avc: denied { module_request } for pid=282 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 48.512435][ T28] audit: type=1400 audit(1771411601.598:66): avc: denied { mounton } for pid=288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 48.513466][ T288] cgroup: Unknown subsys name 'net' [ 48.535116][ T28] audit: type=1400 audit(1771411601.598:67): avc: denied { mount } for pid=288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.562393][ T28] audit: type=1400 audit(1771411601.638:68): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 48.562597][ T288] cgroup: Unknown subsys name 'devices' [ 48.708793][ T288] cgroup: Unknown subsys name 'hugetlb' [ 48.714523][ T288] cgroup: Unknown subsys name 'rlimit' [ 48.852476][ T28] audit: type=1400 audit(1771411601.938:69): avc: denied { setattr } for pid=288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 48.875822][ T28] audit: type=1400 audit(1771411601.938:70): avc: denied { create } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.896583][ T28] audit: type=1400 audit(1771411601.938:71): avc: denied { write } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 48.916880][ T28] audit: type=1400 audit(1771411601.938:72): avc: denied { read } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 48.937127][ T28] audit: type=1400 audit(1771411601.938:73): avc: denied { mounton } for pid=288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 48.946046][ T293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 49.000092][ T288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.659819][ T295] request_module fs-gadgetfs succeeded, but still no fs? [ 49.900076][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.907201][ T314] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.914552][ T314] device bridge_slave_0 entered promiscuous mode [ 49.921550][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.928698][ T314] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.936002][ T314] device bridge_slave_1 entered promiscuous mode [ 49.973420][ T314] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.980643][ T314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.987946][ T314] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.994962][ T314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.013841][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.021539][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.028997][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.038067][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.046302][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.053374][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.062345][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.071339][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.078378][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.090749][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.099902][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.112837][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.124625][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.132818][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.141041][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.150018][ T314] device veth0_vlan entered promiscuous mode [ 50.159931][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.169237][ T314] device veth1_macvtap entered promiscuous mode [ 50.178510][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.188533][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/02/18 10:46:43 executed programs: 0 [ 50.794877][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.802114][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.809763][ T362] device bridge_slave_0 entered promiscuous mode [ 50.816546][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.823693][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.831020][ T362] device bridge_slave_1 entered promiscuous mode [ 50.875611][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.882873][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.890205][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.897249][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.908092][ T43] device bridge_slave_1 left promiscuous mode [ 50.914209][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.921907][ T43] device bridge_slave_0 left promiscuous mode [ 50.928097][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.936132][ T43] device veth1_macvtap left promiscuous mode [ 50.942221][ T43] device veth0_vlan left promiscuous mode [ 51.027055][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.034356][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.044031][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.051671][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.060245][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.069553][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.077996][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.085004][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.094053][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.102386][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.110702][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.117732][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.129494][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.138095][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.147266][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.155393][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.169110][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.177582][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.188307][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.196219][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.204385][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.212146][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.220238][ T362] device veth0_vlan entered promiscuous mode [ 51.233260][ T362] device veth1_macvtap entered promiscuous mode [ 51.239947][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.248209][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.256609][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.267876][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.276310][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.295520][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.310689][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.314706][ T374] loop2: detected capacity change from 0 to 1024 [ 51.325619][ T374] ======================================================= [ 51.325619][ T374] WARNING: The mand mount option has been deprecated and [ 51.325619][ T374] and is ignored by this kernel. Remove the mand [ 51.325619][ T374] option from the mount to silence this warning. [ 51.325619][ T374] ======================================================= [ 51.368892][ T374] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.381309][ T362] EXT4-fs (loop2): unmounting filesystem. [ 51.397308][ T378] loop2: detected capacity change from 0 to 1024 [ 51.409061][ T378] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.420428][ T362] EXT4-fs (loop2): unmounting filesystem. [ 51.435551][ T381] loop2: detected capacity change from 0 to 1024 [ 51.458371][ T381] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.470772][ T362] EXT4-fs (loop2): unmounting filesystem. [ 51.485860][ T384] loop2: detected capacity change from 0 to 1024 [ 51.498220][ T384] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.511522][ T362] EXT4-fs (loop2): unmounting filesystem. [ 51.526623][ T387] loop2: detected capacity change from 0 to 1024 [ 51.548027][ T387] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.564114][ T362] EXT4-fs (loop2): unmounting filesystem. [ 51.578827][ T390] loop2: detected capacity change from 0 to 1024 [ 51.597865][ T390] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.614355][ T362] EXT4-fs (loop2): unmounting filesystem. [ 51.630142][ T393] loop2: detected capacity change from 0 to 1024 [ 51.659263][ T393] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.671856][ T362] EXT4-fs (loop2): unmounting filesystem. [ 51.695439][ T396] loop2: detected capacity change from 0 to 1024 [ 51.719320][ T396] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.744920][ T362] EXT4-fs (loop2): unmounting filesystem. [ 51.768905][ T400] loop2: detected capacity change from 0 to 1024 [ 51.788054][ T400] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.801545][ T362] EXT4-fs (loop2): unmounting filesystem. [ 51.823966][ T403] loop2: detected capacity change from 0 to 1024 [ 51.849045][ T403] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.870419][ T362] EXT4-fs (loop2): unmounting filesystem. [ 51.897872][ T406] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.915221][ T362] EXT4-fs (loop2): unmounting filesystem. [ 51.942821][ T409] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.959320][ T362] EXT4-fs (loop2): unmounting filesystem. [ 51.988998][ T412] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.001541][ T362] EXT4-fs (loop2): unmounting filesystem. [ 52.028029][ T415] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.051213][ T362] EXT4-fs (loop2): unmounting filesystem. [ 52.069938][ T418] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.084453][ T362] EXT4-fs (loop2): unmounting filesystem. [ 52.117876][ T421] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.133603][ T362] EXT4-fs (loop2): unmounting filesystem. [ 52.157921][ T424] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.172592][ T362] EXT4-fs (loop2): unmounting filesystem. [ 52.209435][ T427] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.224476][ T362] EXT4-fs (loop2): unmounting filesystem. [ 52.257754][ T430] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.272499][ T362] EXT4-fs (loop2): unmounting filesystem. [ 52.297817][ T433] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.313961][ T362] EXT4-fs (loop2): unmounting filesystem. [ 52.337628][ T436] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.353266][ T362] EXT4-fs (loop2): unmounting filesystem. [ 52.388426][ T439] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.405410][ T362] EXT4-fs (loop2): unmounting filesystem. [ 52.437815][ T442] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.454413][ T362] EXT4-fs (loop2): unmounting filesystem. [ 52.479647][ T445] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.495122][ T362] EXT4-fs (loop2): unmounting filesystem. [ 52.519117][ T448] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.537829][ T362] EXT4-fs (loop2): unmounting filesystem. [ 52.558154][ T451] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.571061][ T362] EXT4-fs (loop2): unmounting filesystem. [ 52.607956][ T454] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.620290][ T362] EXT4-fs (loop2): unmounting filesystem. [ 52.659039][ T457] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.671127][ T362] EXT4-fs (loop2): unmounting filesystem. [ 52.698185][ T460] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.711009][ T362] EXT4-fs (loop2): unmounting filesystem. [ 52.757881][ T463] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.773975][ T362] EXT4-fs (loop2): unmounting filesystem. [ 52.798404][ T466] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.811453][ T362] EXT4-fs (loop2): unmounting filesystem. [ 52.838787][ T469] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 52.851968][ T362] EXT4-fs (loop2): unmounting filesystem. 2026/02/18 10:46:48 executed programs: 163 [ 56.322864][ T904] set_capacity_and_notify: 158 callbacks suppressed [ 56.322878][ T904] loop2: detected capacity change from 0 to 1024 [ 56.363327][ T907] loop2: detected capacity change from 0 to 1024 [ 56.396401][ T910] loop2: detected capacity change from 0 to 1024 [ 56.439901][ T913] loop2: detected capacity change from 0 to 1024 [ 56.473100][ T916] loop2: detected capacity change from 0 to 1024 [ 56.514107][ T919] loop2: detected capacity change from 0 to 1024 [ 56.542012][ T922] loop2: detected capacity change from 0 to 1024 [ 56.577405][ T925] loop2: detected capacity change from 0 to 1024 [ 56.601277][ T928] loop2: detected capacity change from 0 to 1024 [ 56.642780][ T932] loop2: detected capacity change from 0 to 1024 2026/02/18 10:46:53 executed programs: 395 [ 61.353198][ T1533] set_capacity_and_notify: 188 callbacks suppressed [ 61.353215][ T1533] loop2: detected capacity change from 0 to 1024 [ 61.402138][ T1537] loop2: detected capacity change from 0 to 1024 [ 61.432002][ T1540] loop2: detected capacity change from 0 to 1024 [ 61.468957][ T1544] loop2: detected capacity change from 0 to 1024 [ 61.510881][ T1547] loop2: detected capacity change from 0 to 1024 [ 61.539834][ T1550] loop2: detected capacity change from 0 to 1024 [ 61.569666][ T1553] loop2: detected capacity change from 0 to 1024 [ 61.613336][ T1556] loop2: detected capacity change from 0 to 1024 [ 61.637570][ T1559] loop2: detected capacity change from 0 to 1024 [ 61.659798][ T1562] loop2: detected capacity change from 0 to 1024 [ 64.569283][ T1941] ================================================================== [ 64.577398][ T1941] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x979/0x21d0 [ 64.585196][ T1941] Read of size 18446744073709551588 at addr ffff88810e7e9840 by task syz.2.590/1941 [ 64.594546][ T1941] [ 64.596875][ T1941] CPU: 0 PID: 1941 Comm: syz.2.590 Not tainted syzkaller #0 [ 64.604129][ T1941] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 64.614173][ T1941] Call Trace: [ 64.617438][ T1941] [ 64.620374][ T1941] __dump_stack+0x21/0x24 [ 64.624991][ T1941] dump_stack_lvl+0x110/0x170 [ 64.629709][ T1941] ? __cfi_dump_stack_lvl+0x8/0x8 [ 64.635330][ T1941] ? kasan_save_alloc_info+0x25/0x30 [ 64.640631][ T1941] ? ext4_xattr_block_set+0x9d5/0x3260 [ 64.646099][ T1941] ? ext4_xattr_set+0x242/0x320 [ 64.650943][ T1941] ? ext4_xattr_trusted_set+0x3c/0x50 [ 64.656526][ T1941] ? ext4_xattr_set_entry+0x979/0x21d0 [ 64.661983][ T1941] print_address_description+0x71/0x200 [ 64.667539][ T1941] print_report+0x4a/0x60 [ 64.671851][ T1941] kasan_report+0x122/0x150 [ 64.676334][ T1941] ? ext4_xattr_set_entry+0x979/0x21d0 [ 64.681780][ T1941] ? ext4_xattr_set_entry+0x979/0x21d0 [ 64.687218][ T1941] kasan_check_range+0x249/0x2a0 [ 64.692149][ T1941] ? ext4_xattr_set_entry+0x979/0x21d0 [ 64.697622][ T1941] memmove+0x2d/0x70 [ 64.701503][ T1941] ext4_xattr_set_entry+0x979/0x21d0 [ 64.706864][ T1941] ext4_xattr_block_set+0xad3/0x3260 [ 64.712146][ T1941] ? __kasan_check_write+0x14/0x20 [ 64.717382][ T1941] ? iput+0x620/0x670 [ 64.721446][ T1941] ? ext4_xattr_block_find+0x310/0x310 [ 64.726910][ T1941] ext4_xattr_set_handle+0x10e8/0x12c0 [ 64.732465][ T1941] ? __cfi_ext4_xattr_set_handle+0x10/0x10 [ 64.738521][ T1941] ? __kasan_check_read+0x11/0x20 [ 64.743543][ T1941] ? __ext4_journal_start_sb+0x2ed/0x4a0 [ 64.749169][ T1941] ext4_xattr_set+0x242/0x320 [ 64.753843][ T1941] ? __kasan_kmalloc+0x95/0xb0 [ 64.758628][ T1941] ? __kmalloc_node+0xb2/0x1e0 [ 64.763382][ T1941] ? __cfi_ext4_xattr_set+0x10/0x10 [ 64.768612][ T1941] ? selinux_inode_setxattr+0x5cf/0xbf0 [ 64.774155][ T1941] ext4_xattr_trusted_set+0x3c/0x50 [ 64.779340][ T1941] ? __cfi_ext4_xattr_trusted_set+0x10/0x10 [ 64.785312][ T1941] __vfs_setxattr+0x3f2/0x440 [ 64.789977][ T1941] __vfs_setxattr_noperm+0x12a/0x5e0 [ 64.795269][ T1941] __vfs_setxattr_locked+0x212/0x230 [ 64.800541][ T1941] vfs_setxattr+0x167/0x2e0 [ 64.805024][ T1941] ? __cfi_vfs_setxattr+0x10/0x10 [ 64.810060][ T1941] ? __kasan_check_write+0x14/0x20 [ 64.815525][ T1941] setxattr+0x346/0x360 [ 64.819823][ T1941] ? path_setxattr+0x290/0x290 [ 64.824582][ T1941] ? __mnt_want_write+0x1e6/0x260 [ 64.829590][ T1941] ? mnt_want_write+0x220/0x300 [ 64.834427][ T1941] path_setxattr+0x147/0x290 [ 64.839002][ T1941] ? simple_xattr_list_add+0x120/0x120 [ 64.844533][ T1941] __x64_sys_lsetxattr+0xc2/0xe0 [ 64.849460][ T1941] x64_sys_call+0x8b7/0x9a0 [ 64.853947][ T1941] do_syscall_64+0x4c/0xa0 [ 64.858514][ T1941] ? clear_bhb_loop+0x30/0x80 [ 64.863167][ T1941] ? clear_bhb_loop+0x30/0x80 [ 64.867821][ T1941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 64.873705][ T1941] RIP: 0033:0x7fc1a019c629 [ 64.878128][ T1941] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 64.897719][ T1941] RSP: 002b:00007ffc0f908148 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 64.906121][ T1941] RAX: ffffffffffffffda RBX: 00007fc1a0415fa0 RCX: 00007fc1a019c629 [ 64.914078][ T1941] RDX: 0000200000000000 RSI: 0000200000000180 RDI: 00002000000001c0 [ 64.922044][ T1941] RBP: 00007fc1a0232b39 R08: 0000000000000000 R09: 0000000000000000 [ 64.930004][ T1941] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000 [ 64.938185][ T1941] R13: 00007fc1a0415fac R14: 00007fc1a0415fa0 R15: 00007fc1a0415fa0 [ 64.946242][ T1941] [ 64.949335][ T1941] [ 64.951643][ T1941] Allocated by task 1941: [ 64.955955][ T1941] kasan_set_track+0x4b/0x70 [ 64.960530][ T1941] kasan_save_alloc_info+0x25/0x30 [ 64.965634][ T1941] __kasan_kmalloc+0x95/0xb0 [ 64.970207][ T1941] __kmalloc_node_track_caller+0xb1/0x1e0 [ 64.975918][ T1941] kmemdup+0x2b/0x60 [ 64.979821][ T1941] ext4_xattr_block_set+0x9d5/0x3260 [ 64.985094][ T1941] ext4_xattr_set_handle+0x10e8/0x12c0 [ 64.990564][ T1941] ext4_xattr_set+0x242/0x320 [ 64.995315][ T1941] ext4_xattr_trusted_set+0x3c/0x50 [ 65.000491][ T1941] __vfs_setxattr+0x3f2/0x440 [ 65.005151][ T1941] __vfs_setxattr_noperm+0x12a/0x5e0 [ 65.010413][ T1941] __vfs_setxattr_locked+0x212/0x230 [ 65.015686][ T1941] vfs_setxattr+0x167/0x2e0 [ 65.020166][ T1941] setxattr+0x346/0x360 [ 65.024350][ T1941] path_setxattr+0x147/0x290 [ 65.029094][ T1941] __x64_sys_lsetxattr+0xc2/0xe0 [ 65.034014][ T1941] x64_sys_call+0x8b7/0x9a0 [ 65.038498][ T1941] do_syscall_64+0x4c/0xa0 [ 65.042898][ T1941] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 65.048780][ T1941] [ 65.051093][ T1941] The buggy address belongs to the object at ffff88810e7e9800 [ 65.051093][ T1941] which belongs to the cache kmalloc-1k of size 1024 [ 65.065150][ T1941] The buggy address is located 64 bytes inside of [ 65.065150][ T1941] 1024-byte region [ffff88810e7e9800, ffff88810e7e9c00) [ 65.078414][ T1941] [ 65.080916][ T1941] The buggy address belongs to the physical page: [ 65.087485][ T1941] page:ffffea000439fa00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10e7e8 [ 65.097705][ T1941] head:ffffea000439fa00 order:3 compound_mapcount:0 compound_pincount:0 [ 65.106011][ T1941] flags: 0x4000000000010200(slab|head|zone=1) [ 65.112069][ T1941] raw: 4000000000010200 ffffea00048d9200 dead000000000002 ffff888100043080 [ 65.120890][ T1941] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 65.129476][ T1941] page dumped because: kasan: bad access detected [ 65.135870][ T1941] page_owner tracks the page as allocated [ 65.141557][ T1941] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 1, tgid 1 (swapper/0), ts 3266453836, free_ts 0 [ 65.159281][ T1941] post_alloc_hook+0x1f5/0x210 [ 65.164033][ T1941] prep_new_page+0x1c/0x110 [ 65.168516][ T1941] get_page_from_freelist+0x2d12/0x2d80 [ 65.174066][ T1941] __alloc_pages+0x1d9/0x480 [ 65.178652][ T1941] alloc_slab_page+0x6e/0xf0 [ 65.183230][ T1941] new_slab+0x98/0x3d0 [ 65.187284][ T1941] ___slab_alloc+0x6bd/0xb20 [ 65.191850][ T1941] __slab_alloc+0x5e/0xa0 [ 65.196154][ T1941] __kmem_cache_alloc_node+0x203/0x2c0 [ 65.201867][ T1941] kmalloc_trace+0x29/0xb0 [ 65.206274][ T1941] tipc_link_create+0x120/0xe90 [ 65.211127][ T1941] tipc_link_bc_create+0xea/0x5b0 [ 65.216141][ T1941] tipc_bcast_init+0x239/0x3f0 [ 65.220906][ T1941] tipc_init_net+0x284/0x360 [ 65.225574][ T1941] ops_init+0x1c8/0x4a0 [ 65.229724][ T1941] register_pernet_operations+0x2ac/0x610 [ 65.235510][ T1941] page_owner free stack trace missing [ 65.240852][ T1941] [ 65.243153][ T1941] Memory state around the buggy address: [ 65.248800][ T1941] ffff88810e7e9700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 65.256926][ T1941] ffff88810e7e9780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 65.264964][ T1941] >ffff88810e7e9800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 65.272997][ T1941] ^ [ 65.279121][ T1941] ffff88810e7e9880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 65.287241][ T1941] ffff88810e7e9900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 65.295350][ T1941] ================================================================== [ 65.304577][ T1941] Disabling lock debugging due to kernel taint [ 65.315110][ T28] kauditd_printk_skb: 35 callbacks suppressed [ 65.315123][ T28] audit: type=1400 audit(1771411618.398:109): avc: denied { read } for pid=84 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 65.343511][ T28] audit: type=1400 audit(1771411618.398:110): avc: denied { search } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.365148][ T28] audit: type=1400 audit(1771411618.398:111): avc: denied { write } for pid=84 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.386815][ T28] audit: type=1400 audit(1771411618.398:112): avc: denied { add_name } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 65.407997][ T28] audit: type=1400 audit(1771411618.398:113): avc: denied { create } for pid=84 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.428617][ T28] audit: type=1400 audit(1771411618.398:114): avc: denied { append open } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 65.452023][ T28] audit: type=1400 audit(1771411618.398:115): avc: denied { getattr } for pid=84 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 2026/02/18 10:46:58 executed programs: 592 [ 66.027652][ T2015] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.034727][ T2015] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.042130][ T2015] device bridge_slave_0 entered promiscuous mode [ 66.049341][ T2015] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.056383][ T2015] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.064082][ T2015] device bridge_slave_1 entered promiscuous mode [ 66.103340][ T2015] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.110398][ T2015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.117679][ T2015] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.124699][ T2015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.141862][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.149512][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.157049][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.168456][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.176745][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.183771][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.192503][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.200779][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.207833][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.220993][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.230374][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.243005][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.255480][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.263674][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.271271][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.281228][ T2015] device veth0_vlan entered promiscuous mode [ 66.290840][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.299856][ T2015] device veth1_macvtap entered promiscuous mode [ 66.309368][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.319025][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.375490][ T2028] set_capacity_and_notify: 142 callbacks suppressed [ 66.375506][ T2028] loop2: detected capacity change from 0 to 1024 [ 66.415850][ T2032] loop2: detected capacity change from 0 to 1024 [ 66.440495][ T2035] loop2: detected capacity change from 0 to 1024 [ 66.473814][ T2038] loop2: detected capacity change from 0 to 1024 [ 66.511540][ T2042] loop2: detected capacity change from 0 to 1024 [ 66.551585][ T2046] loop2: detected capacity change from 0 to 1024 [ 66.561722][ T43] device bridge_slave_1 left promiscuous mode [ 66.569378][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.578581][ T43] device bridge_slave_0 left promiscuous mode [ 66.585038][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.601622][ T43] device veth1_macvtap left promiscuous mode [ 66.611768][ T43] device veth0_vlan left promiscuous mode [ 66.614402][ T2051] loop2: detected capacity change from 0 to 1024 [ 66.684432][ T2055] loop2: detected capacity change from 0 to 1024 [ 66.706534][ T2058] loop2: detected capacity change from 0 to 1024 [ 66.735216][ T2061] loop2: detected capacity change from 0 to 1024 2026/02/18 10:47:03 executed programs: 810 [ 71.385994][ T2650] set_capacity_and_notify: 182 callbacks suppressed [ 71.386006][ T2650] loop2: detected capacity change from 0 to 1024 [ 71.440311][ T2654] loop2: detected capacity change from 0 to 1024 [ 71.478878][ T2658] loop2: detected capacity change from 0 to 1024 [ 71.496818][ T2661] loop2: detected capacity change from 0 to 1024 [ 71.519924][ T2664] loop2: detected capacity change from 0 to 1024 [ 71.552575][ T2667] loop2: detected capacity change from 0 to 1024 [ 71.579117][ T2670] loop2: detected capacity change from 0 to 1024 [ 71.600709][ T2673] loop2: detected capacity change from 0 to 1024 [ 71.629980][ T2676] loop2: detected capacity change from 0 to 1024 [ 71.660950][ T2679] loop2: detected capacity change from 0 to 1024