[ 51.919464][ T148] device hsr_slave_0 left promiscuous mode [ 51.955904][ T148] device hsr_slave_1 left promiscuous mode [ 52.054517][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 52.055838][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 52.057907][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 52.059236][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 52.060706][ T148] device bridge_slave_1 left promiscuous mode [ 52.062082][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.095731][ T148] device bridge_slave_0 left promiscuous mode [ 52.096756][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.214679][ T148] device veth1_macvtap left promiscuous mode [ 52.215919][ T148] device veth0_macvtap left promiscuous mode [ 52.217035][ T148] device veth1_vlan left promiscuous mode [ 52.218145][ T148] device veth0_vlan left promiscuous mode [ 52.315881][ T148] team0 (unregistering): Port device team_slave_1 removed [ 52.319984][ T148] team0 (unregistering): Port device team_slave_0 removed [ 52.323983][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.367680][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.479071][ T148] bond0 (unregistering): Released all slaves [ 55.148417][ T148] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.197463][ T148] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.237415][ T148] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 55.277902][ T148] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 Warning: Permanently added '10.128.1.181' (ED25519) to the list of known hosts. 1970/01/01 00:00:56 parsed 1 programs [ 57.321503][ T148] device hsr_slave_0 left promiscuous mode [ 57.359732][ T148] device hsr_slave_1 left promiscuous mode [ 57.444661][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 57.446089][ T148] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 57.447874][ T148] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 57.449115][ T148] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 57.450731][ T148] device bridge_slave_1 left promiscuous mode [ 57.451920][ T148] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.484980][ T148] device bridge_slave_0 left promiscuous mode [ 57.486062][ T148] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.625159][ T148] device veth1_macvtap left promiscuous mode [ 57.626309][ T148] device veth0_macvtap left promiscuous mode [ 57.627314][ T148] device veth1_vlan left promiscuous mode [ 57.628347][ T148] device veth0_vlan left promiscuous mode [ 57.741791][ T148] team0 (unregistering): Port device team_slave_1 removed [ 57.746845][ T148] team0 (unregistering): Port device team_slave_0 removed [ 57.750769][ T148] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 57.787454][ T148] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 57.888011][ T148] bond0 (unregistering): Released all slaves [ 58.043387][ T4409] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 59.218960][ T4446] chnl_net:caif_netlink_parms(): no params data found [ 59.236749][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.237947][ T4446] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.239423][ T4446] device bridge_slave_0 entered promiscuous mode [ 59.241403][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.242651][ T4446] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.244089][ T4446] device bridge_slave_1 entered promiscuous mode [ 59.252103][ T4446] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.254867][ T4446] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.262753][ T4446] team0: Port device team_slave_0 added [ 59.265040][ T4446] team0: Port device team_slave_1 added [ 59.271428][ T4446] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.272644][ T4446] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.278349][ T4446] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.280761][ T4446] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.281964][ T4446] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.287121][ T4446] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.335466][ T4446] device hsr_slave_0 entered promiscuous mode [ 59.384615][ T4446] device hsr_slave_1 entered promiscuous mode [ 59.933641][ T4446] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.975598][ T4446] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.995562][ T4446] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 60.016029][ T4446] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 60.060519][ T4446] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.061741][ T4446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.063042][ T4446] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.064221][ T4446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.082214][ T4446] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.087504][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 60.089459][ T136] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.090917][ T136] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.096270][ T4446] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.099367][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 60.100912][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.102077][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.106360][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 60.107894][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.109099][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.118351][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 60.120066][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 60.123446][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 60.127731][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 60.131060][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 60.133631][ T4446] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 60.182534][ T4446] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.187619][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 60.188969][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 60.192093][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 60.193931][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 60.201057][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 60.202796][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 60.205262][ T4446] device veth0_vlan entered promiscuous mode [ 60.207411][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 60.209085][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 60.211992][ T4446] device veth1_vlan entered promiscuous mode [ 60.220413][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 60.222016][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 60.223498][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 60.225829][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 60.228854][ T4446] device veth0_macvtap entered promiscuous mode [ 60.231188][ T4446] device veth1_macvtap entered promiscuous mode [ 60.237321][ T4446] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.238558][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 60.240296][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 60.241828][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 60.243441][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 60.246574][ T4446] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.249310][ T4446] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.250831][ T4446] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.252350][ T4446] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.253880][ T4446] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.257325][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 60.259046][ T300] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 60.469579][ T1615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.470949][ T1615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.472806][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 60.483141][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.485206][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.486606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:00 executed programs: 0 [ 60.969588][ T4662] chnl_net:caif_netlink_parms(): no params data found [ 60.990237][ T4662] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.991586][ T4662] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.993134][ T4662] device bridge_slave_0 entered promiscuous mode [ 60.996364][ T4662] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.997581][ T4662] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.999179][ T4662] device bridge_slave_1 entered promiscuous mode [ 61.008054][ T4662] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.010694][ T4662] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.019861][ T4662] team0: Port device team_slave_0 added [ 61.021750][ T4662] team0: Port device team_slave_1 added [ 61.029644][ T4662] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 61.030781][ T4662] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.036115][ T4662] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 61.038426][ T4662] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 61.039492][ T4662] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 61.043693][ T4662] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.086255][ T4662] device hsr_slave_0 entered promiscuous mode [ 61.125440][ T4662] device hsr_slave_1 entered promiscuous mode [ 61.144728][ T4662] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.146095][ T4662] Cannot create hsr debugfs directory [ 61.178759][ T4662] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 62.984453][ T4487] Bluetooth: hci0: command 0x0409 tx timeout [ 63.267890][ T4662] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.074559][ T4737] Bluetooth: hci0: command 0x041b tx timeout [ 65.617717][ T4662] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.658563][ T4662] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.828125][ T4662] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.865878][ T4662] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.905540][ T4662] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.955811][ T4662] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.016279][ T4662] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.019973][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.021539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.024106][ T4662] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.027390][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.028992][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.030525][ T1615] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.031822][ T1615] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.033688][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.036669][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.038215][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.039851][ T1615] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.041062][ T1615] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.044186][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.047572][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.050568][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.052445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.054157][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.058211][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.059932][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.073697][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.075963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.078940][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.080596][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.083031][ T4662] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.119950][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.121300][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.125060][ T4662] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.131683][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.133325][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.139723][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 66.141347][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 66.142923][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 66.145664][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 66.148163][ T4662] device veth0_vlan entered promiscuous mode [ 66.151415][ T4662] device veth1_vlan entered promiscuous mode [ 66.162148][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.163698][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 66.166775][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.169131][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.171699][ T4662] device veth0_macvtap entered promiscuous mode [ 66.175130][ T4662] device veth1_macvtap entered promiscuous mode [ 66.179840][ T4662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.181545][ T4662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.183574][ T4662] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.186059][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 66.187703][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 66.189251][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 66.190831][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 66.193297][ T4662] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.195199][ T4662] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.197256][ T4662] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.206305][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.208070][ T1615] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.210351][ T4662] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.211819][ T4662] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.213157][ T4662] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.214994][ T4662] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.233669][ T1615] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.236013][ T1615] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.237631][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 66.242681][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.244099][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.246267][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:06 executed programs: 2 [ 66.263078][ T4746] loop0: detected capacity change from 0 to 512 [ 66.270210][ T4746] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 66.272341][ T4746] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.278818][ T4746] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2809: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 66.281299][ T4746] EXT4-fs (loop0): 1 truncate cleaned up [ 66.282197][ T4746] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 66.293283][ T4746] ================================================================== [ 66.294684][ T4746] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0xb68/0x2f28 [ 66.296060][ T4746] Read of size 18446744073709551540 at addr ffff0000c543e070 by task syz.0.16/4746 [ 66.297577][ T4746] [ 66.297954][ T4746] CPU: 0 PID: 4746 Comm: syz.0.16 Not tainted syzkaller #0 [ 66.299225][ T4746] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 66.300933][ T4746] Call trace: [ 66.301503][ T4746] dump_backtrace+0x0/0x458 [ 66.302458][ T4746] show_stack+0x2c/0x3c [ 66.303305][ T4746] __dump_stack+0x30/0x40 [ 66.304142][ T4746] dump_stack_lvl+0xf4/0x15c [ 66.304963][ T4746] print_address_description+0x78/0x30c [ 66.305924][ T4746] kasan_report+0xec/0x158 [ 66.306815][ T4746] kasan_check_range+0x268/0x2a0 [ 66.307699][ T4746] memmove+0x90/0xe8 [ 66.308352][ T4746] ext4_xattr_set_entry+0xb68/0x2f28 [ 66.309220][ T4746] ext4_xattr_block_set+0x540/0x2738 [ 66.310098][ T4746] ext4_xattr_set_handle+0xa04/0x1074 [ 66.311024][ T4746] ext4_xattr_set+0x1e8/0x2b4 [ 66.311855][ T4746] ext4_xattr_trusted_set+0x4c/0x64 [ 66.312649][ T4746] __vfs_setxattr+0x374/0x390 [ 66.313401][ T4746] __vfs_setxattr_noperm+0x120/0x56c [ 66.314250][ T4746] __vfs_setxattr_locked+0x1e8/0x214 [ 66.315130][ T4746] vfs_setxattr+0x158/0x2a8 [ 66.315900][ T4746] setxattr+0x278/0x2f8 [ 66.316635][ T4746] path_setxattr+0x130/0x260 [ 66.317459][ T4746] __arm64_sys_lsetxattr+0xc4/0xe0 [ 66.318321][ T4746] invoke_syscall+0x98/0x28c [ 66.319073][ T4746] el0_svc_common+0x13c/0x258 [ 66.319890][ T4746] do_el0_svc+0x5c/0x140 [ 66.320636][ T4746] el0_svc+0x78/0x1d0 [ 66.321295][ T4746] el0t_64_sync_handler+0xcc/0xe4 [ 66.322150][ T4746] el0t_64_sync+0x1a0/0x1a4 [ 66.322952][ T4746] [ 66.323360][ T4746] Allocated by task 4746: [ 66.324118][ T4746] __kasan_kmalloc+0xb0/0xf0 [ 66.324933][ T4746] __kmalloc_track_caller+0x210/0x35c [ 66.325879][ T4746] kmemdup+0xcc/0x144 [ 66.326536][ T4746] ext4_xattr_block_set+0x48c/0x2738 [ 66.327431][ T4746] ext4_xattr_set_handle+0xa04/0x1074 [ 66.328282][ T4746] ext4_xattr_set+0x1e8/0x2b4 [ 66.329069][ T4746] ext4_xattr_trusted_set+0x4c/0x64 [ 66.329969][ T4746] __vfs_setxattr+0x374/0x390 [ 66.330802][ T4746] __vfs_setxattr_noperm+0x120/0x56c [ 66.331688][ T4746] __vfs_setxattr_locked+0x1e8/0x214 [ 66.332591][ T4746] vfs_setxattr+0x158/0x2a8 [ 66.333397][ T4746] setxattr+0x278/0x2f8 [ 66.334114][ T4746] path_setxattr+0x130/0x260 [ 66.334917][ T4746] __arm64_sys_lsetxattr+0xc4/0xe0 [ 66.335957][ T4746] invoke_syscall+0x98/0x28c [ 66.336860][ T4746] el0_svc_common+0x13c/0x258 [ 66.337701][ T4746] do_el0_svc+0x5c/0x140 [ 66.338562][ T4746] el0_svc+0x78/0x1d0 [ 66.339321][ T4746] el0t_64_sync_handler+0xcc/0xe4 [ 66.340267][ T4746] el0t_64_sync+0x1a0/0x1a4 [ 66.341119][ T4746] [ 66.341550][ T4746] The buggy address belongs to the object at ffff0000c543e000 [ 66.341550][ T4746] which belongs to the cache kmalloc-1k of size 1024 [ 66.344171][ T4746] The buggy address is located 112 bytes inside of [ 66.344171][ T4746] 1024-byte region [ffff0000c543e000, ffff0000c543e400) [ 66.346652][ T4746] The buggy address belongs to the page: [ 66.347738][ T4746] page:0000000004225a8a refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x105438 [ 66.349711][ T4746] head:0000000004225a8a order:3 compound_mapcount:0 compound_pincount:0 [ 66.351299][ T4746] flags: 0x5ffc00000010200(slab|head|node=0|zone=2|lastcpupid=0x7ff) [ 66.352762][ T4746] raw: 05ffc00000010200 fffffc000319e800 0000000e00000002 ffff0000c0002780 [ 66.354160][ T4746] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 66.355676][ T4746] page dumped because: kasan: bad access detected [ 66.356800][ T4746] [ 66.357192][ T4746] Memory state around the buggy address: [ 66.358139][ T4746] ffff0000c543df00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 66.359482][ T4746] ffff0000c543df80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 66.360798][ T4746] >ffff0000c543e000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.362144][ T4746] ^ [ 66.363524][ T4746] ffff0000c543e080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.364916][ T4746] ffff0000c543e100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 66.366312][ T4746] ================================================================== [ 66.367719][ T4746] Disabling lock debugging due to kernel taint [ 66.413141][ T4750] loop0: detected capacity change from 0 to 512 [ 66.458236][ T4750] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 66.461293][ T4750] EXT4-fs (loop0): 1 truncate cleaned up [ 66.462267][ T4750] EXT4-fs (loop0): mounted filesystem without journal. Opts: nogrpid,min_batch_time=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,nobarrier,nodiscard,quota,,errors=continue. Quota mode: writeback. [ 66.469528][ T4750] Unable to handle kernel write to read-only memory at virtual address ffff0000d1471000 [ 66.471293][ T4750] Mem abort info: [ 66.471882][ T4750] ESR = 0x000000009600004f [ 66.472598][ T4750] EC = 0x25: DABT (current EL), IL = 32 bits [ 66.473616][ T4750] SET = 0, FnV = 0 [ 66.474240][ T4750] EA = 0, S1PTW = 0 [ 66.475108][ T4750] FSC = 0x0f: level 3 permission fault [ 66.475231][ T4737] list_add corruption. prev->next should be next (ffff8000165c35a8), but was ffff0000dc7c8000. (prev=ffff0000d0ac42d8). [ 66.476075][ T4750] Data abort info: [ 66.478344][ T4737] ------------[ cut here ]------------ [ 66.478886][ T4750] ISV = 0, ISS = 0x0000004f [ 66.479746][ T4737] kernel BUG at lib/list_debug.c:32! [ 66.480605][ T4750] CM = 0, WnR = 1 [ 66.481385][ T4737] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 66.482276][ T4750] swapper pgtable: 4k pages, 48-bit VAs, pgdp=0000000210fe7000 [ 66.483422][ T4737] Modules linked in: [ 66.485440][ T4737] CPU: 0 PID: 4737 Comm: kworker/0:17 Tainted: G B syzkaller #0 [ 66.486928][ T4737] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/02/2026 [ 66.488598][ T4737] Workqueue: ipv6_addrconf addrconf_dad_work [ 66.489590][ T4737] pstate: 62400005 (nZCv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 66.490911][ T4737] pc : __list_add_valid+0x10c/0x110 [ 66.491777][ T4737] lr : __list_add_valid+0x10c/0x110 [ 66.492646][ T4737] sp : ffff80001f8b7500 [ 66.493331][ T4737] x29: ffff80001f8b7500 x28: 1fffe00019aff5c0 x27: dfff800000000000 [ 66.494431][ T4750] [ffff0000d1471000] pgd=180000023fff8003 [ 66.494707][ T4737] x26: ffff0000d5732800 [ 66.494709][ T4750] , p4d=180000023fff8003, pud=180000023f614003 [ 66.495649][ T4737] x25: 000000000000007e [ 66.496315][ T4750] , pmd=180000023f589003 [ 66.497330][ T4737] x24: ffff8000165c3340 [ 66.498028][ T4750] , pte=0060000111471787 [ 66.498686][ T4737] [ 66.498690][ T4737] x23: ffff8000165c35b0 [ 66.499404][ T4750] [ 66.500077][ T4737] x22: dfff800000000000 x21: ffff0000d5732ad8 [ 66.503002][ T4737] x20: ffff0000d0ac42d8 x19: ffff8000165c35a8 x18: 0000000000000402 [ 66.504646][ T4737] x17: 3861353363353631 x16: ffff80001135fda8 x15: 28207478656e2065 [ 66.506172][ T4737] x14: 0000000000000003 x13: 1ffff00003f16d9c x12: 0000000000000000 [ 66.507527][ T4737] x11: ff80800008300a40 x10: 0000000000000000 x9 : 3bc719bd5080d600 [ 66.508868][ T4737] x8 : 3bc719bd5080d600 x7 : 0000000000000000 x6 : ffff8000082ff554 [ 66.510166][ T4737] x5 : 0000000000000000 x4 : 0000000000000000 x3 : 0000000000000010 [ 66.511589][ T4737] x2 : 0000000000000008 x1 : 0000000100000401 x0 : 0000000000000075 [ 66.512961][ T4737] Call trace: [ 66.513593][ T4737] __list_add_valid+0x10c/0x110 [ 66.514518][ T4737] ___neigh_create+0x18ec/0x22dc [ 66.515428][ T4737] __neigh_create+0x44/0x58 [ 66.516257][ T4737] ip6_finish_output2+0xc1c/0x1a2c [ 66.517207][ T4737] ip6_finish_output+0x564/0x6d8 [ 66.518046][ T4737] ip6_output+0x274/0x500 [ 66.518795][ T4737] ndisc_send_skb+0xbec/0x1670 [ 66.519629][ T4737] ndisc_send_ns+0x52c/0x724 [ 66.520437][ T4737] addrconf_dad_work+0x7fc/0x1104 [ 66.521327][ T4737] process_one_work+0x7a4/0x1178 [ 66.522174][ T4737] worker_thread+0x8fc/0x103c [ 66.523015][ T4737] kthread+0x37c/0x460 [ 66.523730][ T4737] ret_from_fork+0x10/0x20 [ 66.524469][ T4737] Code: 91358000 aa1303e1 aa1403e3 95aa8342 (d4210000) [ 66.525609][ T4737] ---[ end trace 5cbae419bb0e7a5d ]--- [ 66.728063][ T4737] Kernel panic - not syncing: Oops - BUG: Fatal exception in interrupt [ 66.729443][ T4737] SMP: stopping secondary CPUs [ 67.798533][ T4737] SMP: failed to stop secondary CPUs 0-1 [ 67.799416][ T4737] Kernel Offset: disabled [ 67.800121][ T4737] CPU features: 0xa,000003c1,7d33ffd9 [ 67.800993][ T4737] Memory Limit: none [ 68.009834][ T4737] Rebooting in 86400 seconds..