Warning: Permanently added '[localhost]:6304' (ED25519) to the list of known hosts. 2025/09/14 15:07:15 parsed 1 programs [ 155.954991][ T5368] cgroup: Unknown subsys name 'net' [ 156.044741][ T5368] cgroup: Unknown subsys name 'cpuset' [ 156.052757][ T5368] cgroup: Unknown subsys name 'rlimit' [ 158.547057][ T5368] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 164.978500][ T5375] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 165.492341][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.496417][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.537854][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.541748][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.538634][ T5396] chnl_net:caif_netlink_parms(): no params data found [ 168.674820][ T5396] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.679378][ T5396] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.683353][ T5396] bridge_slave_0: entered allmulticast mode [ 168.688711][ T5396] bridge_slave_0: entered promiscuous mode [ 168.695999][ T5396] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.699158][ T5396] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.703744][ T5396] bridge_slave_1: entered allmulticast mode [ 168.708448][ T5396] bridge_slave_1: entered promiscuous mode [ 168.742883][ T5396] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.753297][ T5396] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.781542][ T5396] team0: Port device team_slave_0 added [ 168.787421][ T5396] team0: Port device team_slave_1 added [ 168.826224][ T5396] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.837416][ T5396] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.878229][ T5396] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.899337][ T5396] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.904201][ T5396] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.938203][ T5396] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.977363][ T5396] hsr_slave_0: entered promiscuous mode [ 168.981883][ T5396] hsr_slave_1: entered promiscuous mode [ 169.264976][ T5396] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 169.279075][ T5396] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 169.287541][ T5396] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 169.296992][ T5396] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 169.365447][ T5396] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.383045][ T5396] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.394579][ T5396] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.400981][ T5396] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.489833][ T5396] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.508611][ T31] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.519510][ T31] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.536802][ T5396] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.548458][ T31] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.552169][ T31] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.584348][ T31] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.588410][ T31] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.013923][ T5396] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.078694][ T5396] veth0_vlan: entered promiscuous mode [ 170.102413][ T5396] veth1_vlan: entered promiscuous mode [ 170.132757][ T5396] veth0_macvtap: entered promiscuous mode [ 170.173354][ T5396] veth1_macvtap: entered promiscuous mode [ 170.193840][ T5396] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.211833][ T5396] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.225164][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.244253][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.298982][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.338460][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.506466][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.556903][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.603659][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.649922][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.933247][ T45] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 170.937692][ T45] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 170.952669][ T45] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 170.956810][ T45] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 170.972137][ T45] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.169837][ T12] bridge_slave_1: left allmulticast mode [ 173.206597][ T12] bridge_slave_1: left promiscuous mode [ 173.220528][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.301650][ T12] bridge_slave_0: left allmulticast mode [ 173.309259][ T12] bridge_slave_0: left promiscuous mode [ 173.339780][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.194970][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 174.208644][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 174.227449][ T12] bond0 (unregistering): Released all slaves [ 174.435412][ T12] hsr_slave_0: left promiscuous mode [ 174.472621][ T12] hsr_slave_1: left promiscuous mode [ 174.477937][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 174.497698][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 174.513680][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 174.516932][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 174.585705][ T12] veth1_macvtap: left promiscuous mode [ 174.608761][ T12] veth0_macvtap: left promiscuous mode [ 174.661619][ T12] veth1_vlan: left promiscuous mode [ 174.664115][ T12] veth0_vlan: left promiscuous mode [ 175.459487][ T12] team0 (unregistering): Port device team_slave_1 removed [ 175.486185][ T12] team0 (unregistering): Port device team_slave_0 removed 2025/09/14 15:07:44 executed programs: 0 [ 180.605563][ T4704] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.622556][ T4704] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.640276][ T4704] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.644725][ T4704] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.685182][ T4704] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 181.207664][ T5509] chnl_net:caif_netlink_parms(): no params data found [ 181.392128][ T5509] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.406023][ T5509] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.412803][ T5509] bridge_slave_0: entered allmulticast mode [ 181.435272][ T5509] bridge_slave_0: entered promiscuous mode [ 181.463889][ T5509] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.473962][ T5509] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.478711][ T5509] bridge_slave_1: entered allmulticast mode [ 181.488895][ T5509] bridge_slave_1: entered promiscuous mode [ 181.541466][ T5509] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.557351][ T5509] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.641110][ T5509] team0: Port device team_slave_0 added [ 181.646331][ T5509] team0: Port device team_slave_1 added [ 181.675113][ T5509] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.679650][ T5509] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.707517][ T5509] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.714527][ T5509] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.717813][ T5509] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.784842][ T5509] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.872539][ T5509] hsr_slave_0: entered promiscuous mode [ 181.878459][ T5509] hsr_slave_1: entered promiscuous mode [ 182.795872][ T4704] Bluetooth: hci0: command tx timeout [ 182.938889][ T5509] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.954764][ T5509] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 182.974997][ T5509] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 182.987579][ T5509] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 183.244157][ T5509] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.328631][ T5509] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.367637][ T1040] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.370788][ T1040] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.382106][ T3110] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.385626][ T3110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.772097][ T5509] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.851818][ T5509] veth0_vlan: entered promiscuous mode [ 183.894906][ T5509] veth1_vlan: entered promiscuous mode [ 183.993592][ T5509] veth0_macvtap: entered promiscuous mode [ 184.012443][ T5509] veth1_macvtap: entered promiscuous mode [ 184.038886][ T5509] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.064994][ T5509] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.199107][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.271474][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.377667][ T1040] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.451556][ T1040] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 184.667822][ T3110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.685911][ T3110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.739798][ T3110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.744790][ T3110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.876944][ T5548] loop0: detected capacity change from 0 to 512 [ 184.899349][ T4704] Bluetooth: hci0: command tx timeout [ 184.948145][ T5548] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 185.025670][ T5548] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 185.193083][ T5548] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2848: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 185.221457][ T5548] EXT4-fs (loop0): 1 truncate cleaned up [ 185.271585][ T5548] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 185.326362][ T5548] ================================================================== [ 185.334360][ T5548] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x9c1/0x1e20 [ 185.337928][ T5548] Read of size 18446744073709551540 at addr ffff8880003c4870 by task syz.0.17/5548 [ 185.362400][ T5548] [ 185.363795][ T5548] CPU: 0 UID: 0 PID: 5548 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 185.363812][ T5548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 185.363820][ T5548] Call Trace: [ 185.363828][ T5548] [ 185.363834][ T5548] dump_stack_lvl+0x189/0x250 [ 185.363854][ T5548] ? __kasan_check_byte+0x12/0x40 [ 185.363869][ T5548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 185.363911][ T5548] ? lock_release+0x4b/0x3e0 [ 185.363930][ T5548] ? __virt_addr_valid+0x4a5/0x5c0 [ 185.363946][ T5548] print_report+0xca/0x240 [ 185.363958][ T5548] ? ext4_xattr_set_entry+0x9c1/0x1e20 [ 185.363972][ T5548] kasan_report+0x118/0x150 [ 185.363986][ T5548] ? ext4_xattr_set_entry+0x9c1/0x1e20 [ 185.364001][ T5548] ? ext4_xattr_set_entry+0x9c1/0x1e20 [ 185.364015][ T5548] kasan_check_range+0x2b0/0x2c0 [ 185.364037][ T5548] ? ext4_xattr_set_entry+0x9c1/0x1e20 [ 185.364052][ T5548] __asan_memmove+0x29/0x70 [ 185.364069][ T5548] ext4_xattr_set_entry+0x9c1/0x1e20 [ 185.364089][ T5548] ext4_xattr_block_set+0x872/0x2ac0 [ 185.364223][ T5548] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 185.364241][ T5548] ? rcu_is_watching+0x15/0xb0 [ 185.364257][ T5548] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 185.364270][ T5548] ? _raw_spin_unlock+0x28/0x50 [ 185.364285][ T5548] ? ext4_xattr_ibody_set+0x554/0x6a0 [ 185.364300][ T5548] ext4_xattr_set_handle+0xdd7/0x1590 [ 185.364316][ T5548] ? __asan_memset+0x22/0x50 [ 185.364329][ T5548] ? __pfx_ext4_xattr_set_handle+0x10/0x10 [ 185.364346][ T5548] ? __ext4_journal_start_sb+0x27e/0x5c0 [ 185.364363][ T5548] ext4_xattr_set+0x230/0x320 [ 185.364380][ T5548] ? __pfx_ext4_xattr_set+0x10/0x10 [ 185.364396][ T5548] ? __pfx_evm_protect_xattr+0x10/0x10 [ 185.364409][ T5548] ? __pfx_ext4_xattr_trusted_set+0x10/0x10 [ 185.364425][ T5548] __vfs_setxattr+0x43c/0x480 [ 185.364444][ T5548] __vfs_setxattr_noperm+0x12d/0x660 [ 185.364460][ T5548] vfs_setxattr+0x16b/0x2f0 [ 185.364475][ T5548] ? __pfx_vfs_setxattr+0x10/0x10 [ 185.364489][ T5548] ? mnt_get_write_access+0x223/0x2a0 [ 185.364502][ T5548] filename_setxattr+0x274/0x600 [ 185.364519][ T5548] ? __pfx_filename_setxattr+0x10/0x10 [ 185.364535][ T5548] ? getname_flags+0x1e5/0x540 [ 185.364552][ T5548] path_setxattrat+0x364/0x3a0 [ 185.364565][ T5548] ? __pfx_path_setxattrat+0x10/0x10 [ 185.364575][ T5548] ? do_futex+0x395/0x420 [ 185.364595][ T5548] ? do_sys_truncate+0x12b/0x190 [ 185.364608][ T5548] ? __pfx___se_sys_futex+0x10/0x10 [ 185.364625][ T5548] __x64_sys_lsetxattr+0xbf/0xe0 [ 185.364642][ T5548] do_syscall_64+0xfa/0x3b0 [ 185.364653][ T5548] ? lockdep_hardirqs_on+0x9c/0x150 [ 185.364670][ T5548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.364681][ T5548] ? clear_bhb_loop+0x60/0xb0 [ 185.364694][ T5548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.364706][ T5548] RIP: 0033:0x7ff5b698eba9 [ 185.364718][ T5548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 185.364728][ T5548] RSP: 002b:00007ffd0a7657e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 185.364743][ T5548] RAX: ffffffffffffffda RBX: 00007ff5b6bd5fa0 RCX: 00007ff5b698eba9 [ 185.364751][ T5548] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000200000000100 [ 185.364759][ T5548] RBP: 00007ff5b6a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 185.364766][ T5548] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000 [ 185.364773][ T5548] R13: 00007ff5b6bd5fa0 R14: 00007ff5b6bd5fa0 R15: 0000000000000005 [ 185.364785][ T5548] [ 185.364789][ T5548] [ 185.637658][ T5548] Allocated by task 5548: [ 185.640223][ T5548] kasan_save_track+0x3e/0x80 [ 185.643001][ T5548] __kasan_kmalloc+0x93/0xb0 [ 185.645327][ T5548] __kmalloc_node_track_caller_noprof+0x271/0x4e0 [ 185.649906][ T5548] kmemdup_noprof+0x2b/0x70 [ 185.659280][ T5548] ext4_xattr_block_set+0x781/0x2ac0 [ 185.662281][ T5548] ext4_xattr_set_handle+0xdd7/0x1590 [ 185.664832][ T5548] ext4_xattr_set+0x230/0x320 [ 185.667695][ T5548] __vfs_setxattr+0x43c/0x480 [ 185.672412][ T5548] __vfs_setxattr_noperm+0x12d/0x660 [ 185.677638][ T5548] vfs_setxattr+0x16b/0x2f0 [ 185.682018][ T5548] filename_setxattr+0x274/0x600 [ 185.685926][ T5548] path_setxattrat+0x364/0x3a0 [ 185.691265][ T5548] __x64_sys_lsetxattr+0xbf/0xe0 [ 185.695254][ T5548] do_syscall_64+0xfa/0x3b0 [ 185.697119][ T5548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 185.699529][ T5548] [ 185.700608][ T5548] The buggy address belongs to the object at ffff8880003c4800 [ 185.700608][ T5548] which belongs to the cache kmalloc-1k of size 1024 [ 185.706140][ T5548] The buggy address is located 112 bytes inside of [ 185.706140][ T5548] 1024-byte region [ffff8880003c4800, ffff8880003c4c00) [ 185.731578][ T5548] [ 185.733071][ T5548] The buggy address belongs to the physical page: [ 185.736390][ T5548] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x3c4 [ 185.757655][ T5548] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 185.766427][ T5548] flags: 0x7ff00000000040(head|node=0|zone=0|lastcpupid=0x7ff) [ 185.774415][ T5548] page_type: f5(slab) [ 185.789317][ T5548] raw: 007ff00000000040 ffff88801a841dc0 dead000000000122 0000000000000000 [ 185.796428][ T5548] raw: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 185.820958][ T5548] head: 007ff00000000040 ffff88801a841dc0 dead000000000122 0000000000000000 [ 185.830681][ T5548] head: 0000000000000000 0000000080080008 00000000f5000000 0000000000000000 [ 185.844706][ T5548] head: 007ff00000000002 ffffea000000f101 00000000ffffffff 00000000ffffffff [ 185.848264][ T5548] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000004 [ 185.867816][ T5548] page dumped because: kasan: bad access detected [ 185.877451][ T5548] page_owner tracks the page as allocated [ 185.885576][ T5548] page last allocated via order 2, migratetype Unmovable, gfp_mask 0x252800(GFP_NOWAIT|__GFP_NORETRY|__GFP_COMP|__GFP_THISNODE), pid 5548, tgid 5548 (syz.0.17), ts 185285095674, free_ts 55888287647 [ 185.904056][ T5548] post_alloc_hook+0x240/0x2a0 [ 185.913197][ T5548] get_page_from_freelist+0x21e4/0x22c0 [ 185.916376][ T5548] __alloc_pages_slowpath+0x2fe/0xce0 [ 185.918677][ T5548] __alloc_frozen_pages_noprof+0x319/0x370 [ 185.926030][ T5548] allocate_slab+0x65/0x370 [ 185.935447][ T5548] ___slab_alloc+0xbeb/0x1420 [ 185.937697][ T5548] __kmalloc_node_noprof+0x2fd/0x4e0 [ 185.941106][ T5548] alloc_slab_obj_exts+0x39/0xa0 [ 185.947029][ T5548] __memcg_slab_post_alloc_hook+0x31e/0x7f0 [ 185.956403][ T5548] __kmalloc_node_track_caller_noprof+0x335/0x4e0 [ 185.962401][ T5548] kstrdup+0x42/0x100 [ 185.967706][ T5548] alloc_vfsmnt+0xeb/0x430 [ 185.976094][ T5548] vfs_create_mount+0x6c/0x3d0 [ 185.980652][ T5548] do_new_mount+0x3ec/0x9e0 [ 185.988029][ T5548] __se_sys_mount+0x317/0x410 [ 185.991734][ T5548] do_syscall_64+0xfa/0x3b0 [ 185.997422][ T5548] page last free pid 4733 tgid 4733 stack trace: [ 186.001570][ T5548] __free_frozen_pages+0xbc4/0xd30 [ 186.009169][ T5548] __slab_free+0x303/0x3c0 [ 186.014309][ T5548] qlist_free_all+0x97/0x140 [ 186.021592][ T5548] kasan_quarantine_reduce+0x148/0x160 [ 186.024171][ T5548] __kasan_slab_alloc+0x22/0x80 [ 186.032413][ T5548] __kmalloc_node_track_caller_noprof+0x216/0x4e0 [ 186.042228][ T5548] krealloc_noprof+0x124/0x340 [ 186.045049][ T5548] ima_collect_measurement+0x4c4/0x8e0 [ 186.050745][ T5548] process_measurement+0x1121/0x1a40 [ 186.055969][ T5548] ima_bprm_check+0xfd/0x200 [ 186.060777][ T5548] security_bprm_check+0xd9/0x270 [ 186.068959][ T5548] bprm_execve+0x8ee/0x1450 [ 186.071726][ T5548] do_execveat_common+0x510/0x6a0 [ 186.075959][ T5548] __x64_sys_execve+0x94/0xb0 [ 186.083405][ T5548] do_syscall_64+0xfa/0x3b0 [ 186.086680][ T5548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.091243][ T5548] [ 186.093158][ T5548] Memory state around the buggy address: [ 186.096366][ T5548] ffff8880003c4700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.100958][ T5548] ffff8880003c4780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 186.109418][ T5548] >ffff8880003c4800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 186.120638][ T5548] ^ [ 186.124159][ T5548] ffff8880003c4880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 186.131439][ T5548] ffff8880003c4900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 186.141492][ T5548] ================================================================== [ 186.551170][ T5548] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 186.560956][ T5548] CPU: 0 UID: 0 PID: 5548 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 186.569765][ T5548] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014 [ 186.574241][ T5548] Call Trace: [ 186.575702][ T5548] [ 186.577002][ T5548] dump_stack_lvl+0x99/0x250 [ 186.578927][ T5548] ? __asan_memcpy+0x40/0x70 [ 186.592242][ T5548] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.594896][ T5548] ? __pfx__printk+0x10/0x10 [ 186.602681][ T5548] vpanic+0x281/0x750 [ 186.609657][ T5548] ? preempt_schedule+0xae/0xc0 [ 186.614262][ T5548] ? __pfx_vpanic+0x10/0x10 [ 186.619864][ T5548] ? preempt_schedule_common+0x83/0xd0 [ 186.623820][ T5548] ? preempt_schedule+0xae/0xc0 [ 186.629902][ T5548] ? __pfx_preempt_schedule+0x10/0x10 [ 186.640900][ T5548] panic+0xb9/0xc0 [ 186.642861][ T5548] ? __pfx_panic+0x10/0x10 [ 186.645052][ T5548] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 186.648519][ T5548] ? ext4_xattr_set_entry+0x9c1/0x1e20 [ 186.659289][ T5548] check_panic_on_warn+0x89/0xb0 [ 186.661693][ T5548] ? ext4_xattr_set_entry+0x9c1/0x1e20 [ 186.664089][ T5548] end_report+0x78/0x160 [ 186.670797][ T5548] kasan_report+0x129/0x150 [ 186.673031][ T5548] ? ext4_xattr_set_entry+0x9c1/0x1e20 [ 186.680427][ T5548] ? ext4_xattr_set_entry+0x9c1/0x1e20 [ 186.682992][ T5548] kasan_check_range+0x2b0/0x2c0 [ 186.690895][ T5548] ? ext4_xattr_set_entry+0x9c1/0x1e20 [ 186.693519][ T5548] __asan_memmove+0x29/0x70 [ 186.695520][ T5548] ext4_xattr_set_entry+0x9c1/0x1e20 [ 186.709657][ T5548] ext4_xattr_block_set+0x872/0x2ac0 [ 186.712482][ T5548] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 186.715012][ T5548] ? rcu_is_watching+0x15/0xb0 [ 186.717149][ T5548] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 186.721037][ T5548] ? _raw_spin_unlock+0x28/0x50 [ 186.724969][ T5548] ? ext4_xattr_ibody_set+0x554/0x6a0 [ 186.727377][ T5548] ext4_xattr_set_handle+0xdd7/0x1590 [ 186.740181][ T5548] ? __asan_memset+0x22/0x50 [ 186.742787][ T5548] ? __pfx_ext4_xattr_set_handle+0x10/0x10 [ 186.750212][ T5548] ? __ext4_journal_start_sb+0x27e/0x5c0 [ 186.753053][ T5548] ext4_xattr_set+0x230/0x320 [ 186.755167][ T5548] ? __pfx_ext4_xattr_set+0x10/0x10 [ 186.769720][ T5548] ? __pfx_evm_protect_xattr+0x10/0x10 [ 186.772475][ T5548] ? __pfx_ext4_xattr_trusted_set+0x10/0x10 [ 186.775169][ T5548] __vfs_setxattr+0x43c/0x480 [ 186.778130][ T5548] __vfs_setxattr_noperm+0x12d/0x660 [ 186.789468][ T5548] vfs_setxattr+0x16b/0x2f0 [ 186.791641][ T5548] ? __pfx_vfs_setxattr+0x10/0x10 [ 186.793833][ T5548] ? mnt_get_write_access+0x223/0x2a0 [ 186.796194][ T5548] filename_setxattr+0x274/0x600 [ 186.798452][ T5548] ? __pfx_filename_setxattr+0x10/0x10 [ 186.819540][ T5548] ? getname_flags+0x1e5/0x540 [ 186.840146][ T5548] path_setxattrat+0x364/0x3a0 [ 186.842281][ T5548] ? __pfx_path_setxattrat+0x10/0x10 [ 186.844523][ T5548] ? do_futex+0x395/0x420 [ 186.846351][ T5548] ? do_sys_truncate+0x12b/0x190 [ 186.848466][ T5548] ? __pfx___se_sys_futex+0x10/0x10 [ 186.860360][ T5548] __x64_sys_lsetxattr+0xbf/0xe0 [ 186.862641][ T5548] do_syscall_64+0xfa/0x3b0 [ 186.870688][ T5548] ? lockdep_hardirqs_on+0x9c/0x150 [ 186.874577][ T5548] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.877057][ T5548] ? clear_bhb_loop+0x60/0xb0 [ 186.879124][ T5548] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.881686][ T5548] RIP: 0033:0x7ff5b698eba9 [ 186.883528][ T5548] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 186.930684][ T5548] RSP: 002b:00007ffd0a7657e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 186.934226][ T5548] RAX: ffffffffffffffda RBX: 00007ff5b6bd5fa0 RCX: 00007ff5b698eba9 [ 186.937646][ T5548] RDX: 0000200000000040 RSI: 00002000000000c0 RDI: 0000200000000100 [ 186.951211][ T5548] RBP: 00007ff5b6a11e19 R08: 0000000000000000 R09: 0000000000000000 [ 186.961460][ T5548] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000 [ 186.964804][ T5548] R13: 00007ff5b6bd5fa0 R14: 00007ff5b6bd5fa0 R15: 0000000000000005 [ 186.968065][ T5548] [ 186.980169][ T5548] Kernel Offset: disabled [ 186.984259][ T5548] Rebooting in 86400 seconds.. VM DIAGNOSIS: 15:07:51 Registers: info registers vcpu 0 CPU#0 RAX=1ffffffff3400160 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff9a000ad0 RSP=ffffc90002b2ec70 R8 =ffff8880340f0237 R9 =1ffff1100681e046 R10=dffffc0000000000 R11=ffffffff85513af0 R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff9a000840 R15=0000000000000000 RIP=ffffffff85513b67 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0 ES =0000 0000000000000000 ffffffff 00c00000 CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA] SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA] DS =0000 0000000000000000 ffffffff 00c00000 FS =0000 00005555728df500 ffffffff 00c00000 GS =0000 ffff88808d00a000 ffffffff 00c00000 LDT=0000 0000000000000000 ffffffff 00c00000 TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy GDT= fffffe0000001000 0000007f IDT= fffffe0000000000 00000fff CR0=80050033 CR2=00007f931c6ccfeb CR3=000000004fbb8000 CR4=00352ef0 DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 DR6=00000000ffff0ff0 DR7=0000000000000400 EFER=0000000000000d01 FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80 FPR0=0000000000000000 0000 FPR1=0000000000000000 0000 FPR2=0000000000000000 0000 FPR3=0000000000000000 0000 FPR4=0000000000000000 0000 FPR5=0000000000000000 0000 FPR6=0000000000000000 0000 FPR7=0000000000000000 0000 Opmask00=0000000080040001 Opmask01=0000000020080810 Opmask02=00000000ffffffef Opmask03=0000000000000000 Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000 ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0a765ac0 0000003000000018 ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0a765c46 ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ffd0a765c46 00007ffd0a765c4c ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff5b6a12e46 ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff5b6a12e53 ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff5b6a12e4d ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff5b6a12e61 ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff5b6a12ee7 ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 00007ff5b6a12fc5 ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 2525252525252525 2525252525252525 2525252525252525 2525252525252525 ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0063696e61703d73 726f727265006f72 2d746e756f6d6572 3d73726f72726500 ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 00464c4b44551856 574a575740004a57 08514b504a484057 1856574a57574000 ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000