[ 76.374734][ T13] cfg80211: failed to load regulatory.db Warning: Permanently added '10.128.1.98' (ED25519) to the list of known hosts. 2025/07/28 22:07:37 ignoring optional flag "sandboxArg"="0" 2025/07/28 22:07:37 ignoring optional flag "type"="gce" 2025/07/28 22:07:37 parsed 1 programs [ 80.873251][ T4568] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 81.283453][ T4632] chnl_net:caif_netlink_parms(): no params data found [ 81.324862][ T4632] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.331958][ T4632] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.340154][ T4632] device bridge_slave_0 entered promiscuous mode [ 81.350358][ T4632] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.357576][ T4632] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.365815][ T4632] device bridge_slave_1 entered promiscuous mode [ 81.384644][ T4632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.397301][ T4632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.417443][ T4632] team0: Port device team_slave_0 added [ 81.424932][ T4632] team0: Port device team_slave_1 added [ 81.440184][ T4632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.447445][ T4632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.473793][ T4632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.487112][ T4632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.494217][ T4632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.520913][ T4632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.546600][ T4632] device hsr_slave_0 entered promiscuous mode [ 81.553597][ T4632] device hsr_slave_1 entered promiscuous mode [ 82.111800][ T4632] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.143570][ T4632] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.158183][ T4632] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.176841][ T4632] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.243834][ T4632] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.250921][ T4632] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.258368][ T4632] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.265562][ T4632] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.303022][ T1189] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.313030][ T1189] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.385273][ T4632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.412594][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 82.421327][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 82.445886][ T4632] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.465484][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 82.477255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 82.490835][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.497963][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.516353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 82.527431][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 82.536297][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.543395][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 82.553566][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 82.574472][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 82.584108][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 82.593732][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.602217][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.624769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.643801][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.663222][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.683205][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.708444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.719325][ T4632] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.729507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.927350][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.936539][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.950615][ T4632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.970794][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.984226][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 83.011371][ T4632] device veth0_vlan entered promiscuous mode [ 83.020338][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 83.029841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 83.044238][ T4632] device veth1_vlan entered promiscuous mode [ 83.051884][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 83.062318][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 83.070650][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 83.095384][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 83.106248][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 83.115240][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 83.126463][ T4632] device veth0_macvtap entered promiscuous mode [ 83.141738][ T4632] device veth1_macvtap entered promiscuous mode [ 83.158385][ T4632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.170116][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 83.179222][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 83.189955][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 83.198897][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 83.211624][ T4632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.219605][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 83.233482][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 83.254611][ T4632] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.273694][ T4632] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.282425][ T4632] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.291800][ T4632] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.685870][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.696059][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.714830][ T1182] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.719371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.725855][ T1182] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.746340][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 2025/07/28 22:07:44 executed programs: 0 [ 85.326858][ T4794] chnl_net:caif_netlink_parms(): no params data found [ 85.420453][ T4794] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.427657][ T4794] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.437397][ T4794] device bridge_slave_0 entered promiscuous mode [ 85.446530][ T4794] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.453892][ T4794] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.461851][ T4794] device bridge_slave_1 entered promiscuous mode [ 85.506277][ T4794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.517493][ T4794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.551826][ T4794] team0: Port device team_slave_0 added [ 85.568246][ T4794] team0: Port device team_slave_1 added [ 85.597504][ T4794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.606723][ T4794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.635325][ T4794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.668280][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.684089][ T4794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.691509][ T4794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.717963][ T4794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.755743][ T4794] device hsr_slave_0 entered promiscuous mode [ 85.762637][ T4794] device hsr_slave_1 entered promiscuous mode [ 85.771984][ T4794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 85.779982][ T4794] Cannot create hsr debugfs directory [ 87.173973][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 87.588441][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.639764][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.710455][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 88.576945][ T4794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.587170][ T4794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.599422][ T4794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.609312][ T4794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.667345][ T4794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.678253][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 88.686246][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.696782][ T4794] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.721512][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 88.730999][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.739717][ T1182] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.746866][ T1182] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.755439][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 88.766825][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 88.777237][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.787211][ T1189] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.794321][ T1189] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.818783][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 88.832981][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 88.841639][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 88.850786][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.860361][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.871346][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 88.880270][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.904118][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.912460][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.924880][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.933380][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.943001][ T4794] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 89.029190][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 89.036720][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 89.059589][ T4794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.083481][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.092073][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.110969][ T4794] device veth0_vlan entered promiscuous mode [ 89.118369][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.126821][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.135934][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.143696][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.165663][ T144] device hsr_slave_0 left promiscuous mode [ 89.171925][ T144] device hsr_slave_1 left promiscuous mode [ 89.179444][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.187143][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.195383][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.203083][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.210622][ T144] device bridge_slave_1 left promiscuous mode [ 89.217191][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.225917][ T144] device bridge_slave_0 left promiscuous mode [ 89.232056][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.242886][ T144] device veth1_macvtap left promiscuous mode [ 89.248946][ T144] device veth0_macvtap left promiscuous mode [ 89.255236][ T144] device veth1_vlan left promiscuous mode [ 89.260993][ T144] device veth0_vlan left promiscuous mode [ 89.262811][ T5012] Bluetooth: hci0: command 0x041b tx timeout [ 89.383424][ T144] team0 (unregistering): Port device team_slave_1 removed [ 89.396646][ T144] team0 (unregistering): Port device team_slave_0 removed [ 89.408313][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 89.424931][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.474576][ T144] bond0 (unregistering): Released all slaves [ 89.550548][ T4794] device veth1_vlan entered promiscuous mode [ 89.569595][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 89.578188][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 89.586279][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 89.595449][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 89.605984][ T4794] device veth0_macvtap entered promiscuous mode [ 89.616120][ T4794] device veth1_macvtap entered promiscuous mode [ 89.632092][ T4794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.642642][ T4794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.657081][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 89.665768][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 89.674197][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 89.682600][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 89.691486][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 89.700422][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 89.712440][ T4794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.721456][ T4794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.730305][ T4794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.739964][ T4794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.792492][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.806225][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.837106][ T1182] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 89.847125][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.855180][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.865997][ T1189] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.911586][ T5056] loop0: detected capacity change from 0 to 1024 [ 89.969242][ T5056] EXT4-fs (loop0): Ignoring removed orlov option [ 89.977305][ T5056] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 90.023064][ T5056] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. 2025/07/28 22:07:49 executed programs: 1 [ 90.247679][ T5061] loop0: detected capacity change from 0 to 1024 [ 90.315547][ T5061] EXT4-fs (loop0): Ignoring removed orlov option [ 90.321934][ T5061] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 90.386904][ T5061] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 90.547563][ T5065] loop0: detected capacity change from 0 to 1024 [ 90.582830][ T5065] EXT4-fs (loop0): Ignoring removed orlov option [ 90.589333][ T5065] EXT4-fs (loop0): Ignoring removed nomblk_io_submit option [ 90.645610][ T5065] EXT4-fs (loop0): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,errors=continue,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 90.719222][ T4794] ================================================================== [ 90.727494][ T4794] BUG: KASAN: use-after-free in ext4_xattr_delete_inode+0xba6/0xbb0 [ 90.735501][ T4794] Read of size 4 at addr ffff88801e88b000 by task syz-executor/4794 [ 90.743478][ T4794] [ 90.745807][ T4794] CPU: 0 PID: 4794 Comm: syz-executor Not tainted 5.15.189-syzkaller #0 [ 90.754126][ T4794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 90.764358][ T4794] Call Trace: [ 90.767703][ T4794] [ 90.770653][ T4794] dump_stack_lvl+0x168/0x230 [ 90.775353][ T4794] ? show_regs_print_info+0x20/0x20 [ 90.780556][ T4794] ? load_image+0x3b0/0x3b0 [ 90.785148][ T4794] ? _raw_spin_lock_irqsave+0xb0/0xf0 [ 90.790521][ T4794] ? errseq_check+0x3c/0x70 [ 90.795035][ T4794] ? __ext4_journal_get_write_access+0x2f7/0x6d0 [ 90.801366][ T4794] print_address_description+0x60/0x2d0 [ 90.806911][ T4794] ? ext4_xattr_delete_inode+0xba6/0xbb0 [ 90.812547][ T4794] kasan_report+0xdf/0x130 [ 90.816968][ T4794] ? ext4_xattr_delete_inode+0xba6/0xbb0 [ 90.822614][ T4794] ext4_xattr_delete_inode+0xba6/0xbb0 [ 90.828092][ T4794] ? ext4_expand_extra_isize_ea+0x19a0/0x19a0 [ 90.834174][ T4794] ext4_evict_inode+0xc47/0x1080 [ 90.839119][ T4794] ? _raw_spin_unlock+0x24/0x40 [ 90.843991][ T4794] ? ext4_inode_is_fast_symlink+0x350/0x350 [ 90.849889][ T4794] ? do_raw_spin_unlock+0x11d/0x230 [ 90.855094][ T4794] ? ext4_inode_is_fast_symlink+0x350/0x350 [ 90.861066][ T4794] evict+0x485/0x870 [ 90.864952][ T4794] ? __lock_acquire+0x7c60/0x7c60 [ 90.869967][ T4794] ? proc_nr_inodes+0x320/0x320 [ 90.874800][ T4794] ? do_raw_spin_unlock+0x11d/0x230 [ 90.879983][ T4794] ? _raw_spin_unlock+0x24/0x40 [ 90.884815][ T4794] ? iput+0x706/0x8a0 [ 90.888783][ T4794] vfs_rmdir+0x3b4/0x430 [ 90.893013][ T4794] do_rmdir+0x295/0x710 [ 90.897146][ T4794] ? __phys_addr_symbol+0x2b/0x70 [ 90.902151][ T4794] ? d_delete_notify+0x150/0x150 [ 90.907071][ T4794] ? strncpy_from_user+0x1fb/0x360 [ 90.912167][ T4794] ? getname_flags+0x1fe/0x500 [ 90.916919][ T4794] __x64_sys_unlinkat+0xc0/0xe0 [ 90.921778][ T4794] do_syscall_64+0x4c/0xa0 [ 90.926181][ T4794] ? clear_bhb_loop+0x30/0x80 [ 90.930842][ T4794] ? clear_bhb_loop+0x30/0x80 [ 90.935503][ T4794] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 90.941392][ T4794] RIP: 0033:0x7fd5338ba6c7 [ 90.945792][ T4794] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 90.965551][ T4794] RSP: 002b:00007ffd870d1b18 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 90.974120][ T4794] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fd5338ba6c7 [ 90.982078][ T4794] RDX: 0000000000000200 RSI: 00007ffd870d2cc0 RDI: 00000000ffffff9c [ 90.990027][ T4794] RBP: 00007fd533906336 R08: 0000000000000000 R09: 0000000000000000 [ 90.998326][ T4794] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffd870d2cc0 [ 91.006279][ T4794] R13: 00007fd533906336 R14: 0000000000016185 R15: 0000000000000007 [ 91.014242][ T4794] [ 91.017243][ T4794] [ 91.019543][ T4794] Allocated by task 4774: [ 91.023853][ T4794] __kasan_slab_alloc+0x9c/0xd0 [ 91.028788][ T4794] slab_post_alloc_hook+0x4c/0x380 [ 91.033899][ T4794] kmem_cache_alloc_node+0x12d/0x2d0 [ 91.039178][ T4794] __alloc_skb+0xf4/0x750 [ 91.043494][ T4794] inet_netconf_notify_devconf+0x16f/0x230 [ 91.049283][ T4794] __devinet_sysctl_register+0x321/0x380 [ 91.054912][ T4794] devinet_sysctl_register+0x17c/0x1f0 [ 91.060352][ T4794] inetdev_init+0x28c/0x4d0 [ 91.064846][ T4794] inetdev_event+0x280/0x1360 [ 91.069501][ T4794] raw_notifier_call_chain+0xcb/0x160 [ 91.074852][ T4794] register_netdevice+0x1275/0x16b0 [ 91.080037][ T4794] __ip_tunnel_create+0x2bf/0x380 [ 91.085038][ T4794] ip_tunnel_init_net+0x232/0x6b0 [ 91.090042][ T4794] vti_init_net+0x2b/0xf0 [ 91.094354][ T4794] ops_init+0x357/0x600 [ 91.098497][ T4794] setup_net+0x38d/0x9f0 [ 91.102715][ T4794] copy_net_ns+0x348/0x5b0 [ 91.107110][ T4794] create_new_namespaces+0x3d3/0x6f0 [ 91.112375][ T4794] unshare_nsproxy_namespaces+0x116/0x160 [ 91.118081][ T4794] ksys_unshare+0x4bc/0x890 [ 91.122739][ T4794] __x64_sys_unshare+0x34/0x40 [ 91.127486][ T4794] do_syscall_64+0x4c/0xa0 [ 91.131882][ T4794] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.137757][ T4794] [ 91.140061][ T4794] Freed by task 4774: [ 91.144015][ T4794] kasan_set_track+0x4b/0x70 [ 91.148584][ T4794] kasan_set_free_info+0x1f/0x40 [ 91.153681][ T4794] ____kasan_slab_free+0xd5/0x110 [ 91.158685][ T4794] slab_free_freelist_hook+0xea/0x170 [ 91.164038][ T4794] kmem_cache_free+0x8f/0x210 [ 91.168697][ T4794] netlink_broadcast_filtered+0x107a/0x1170 [ 91.174572][ T4794] nlmsg_notify+0xec/0x1a0 [ 91.179153][ T4794] __devinet_sysctl_register+0x321/0x380 [ 91.184763][ T4794] devinet_sysctl_register+0x17c/0x1f0 [ 91.190200][ T4794] inetdev_init+0x28c/0x4d0 [ 91.194677][ T4794] inetdev_event+0x280/0x1360 [ 91.199328][ T4794] raw_notifier_call_chain+0xcb/0x160 [ 91.204679][ T4794] register_netdevice+0x1275/0x16b0 [ 91.209854][ T4794] __ip_tunnel_create+0x2bf/0x380 [ 91.214864][ T4794] ip_tunnel_init_net+0x232/0x6b0 [ 91.219879][ T4794] vti_init_net+0x2b/0xf0 [ 91.224187][ T4794] ops_init+0x357/0x600 [ 91.228324][ T4794] setup_net+0x38d/0x9f0 [ 91.232544][ T4794] copy_net_ns+0x348/0x5b0 [ 91.236951][ T4794] create_new_namespaces+0x3d3/0x6f0 [ 91.242212][ T4794] unshare_nsproxy_namespaces+0x116/0x160 [ 91.247923][ T4794] ksys_unshare+0x4bc/0x890 [ 91.252406][ T4794] __x64_sys_unshare+0x34/0x40 [ 91.257146][ T4794] do_syscall_64+0x4c/0xa0 [ 91.261541][ T4794] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.267415][ T4794] [ 91.269718][ T4794] The buggy address belongs to the object at ffff88801e88b000 [ 91.269718][ T4794] which belongs to the cache skbuff_head_cache of size 232 [ 91.284268][ T4794] The buggy address is located 0 bytes inside of [ 91.284268][ T4794] 232-byte region [ffff88801e88b000, ffff88801e88b0e8) [ 91.297444][ T4794] The buggy address belongs to the page: [ 91.303051][ T4794] page:ffffea00007a22c0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1e88b [ 91.313181][ T4794] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 91.320710][ T4794] raw: 00fff00000000200 dead000000000100 dead000000000122 ffff888144bf0140 [ 91.329292][ T4794] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 91.338024][ T4794] page dumped because: kasan: bad access detected [ 91.344420][ T4794] page_owner tracks the page as allocated [ 91.350113][ T4794] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 21, ts 66664485063, free_ts 66663613471 [ 91.367361][ T4794] get_page_from_freelist+0x1b77/0x1c60 [ 91.372893][ T4794] __alloc_pages+0x1e1/0x470 [ 91.377460][ T4794] new_slab+0xc0/0x4b0 [ 91.381504][ T4794] ___slab_alloc+0x81e/0xdf0 [ 91.386099][ T4794] kmem_cache_alloc_node+0x1c3/0x2d0 [ 91.391359][ T4794] __alloc_skb+0xf4/0x750 [ 91.395667][ T4794] nsim_dev_trap_report_work+0x2a1/0xb40 [ 91.401279][ T4794] process_one_work+0x863/0x1000 [ 91.406197][ T4794] worker_thread+0xaa8/0x12a0 [ 91.410857][ T4794] kthread+0x436/0x520 [ 91.414906][ T4794] ret_from_fork+0x1f/0x30 [ 91.419317][ T4794] page last free stack trace: [ 91.423964][ T4794] free_unref_page_prepare+0x637/0x6c0 [ 91.429399][ T4794] free_unref_page_list+0x122/0x7e0 [ 91.434576][ T4794] release_pages+0x184b/0x1bb0 [ 91.439324][ T4794] tlb_finish_mmu+0x164/0x2e0 [ 91.443979][ T4794] exit_mmap+0x3a6/0x5f0 [ 91.448199][ T4794] __mmput+0x115/0x3b0 [ 91.452242][ T4794] exit_mm+0x567/0x6c0 [ 91.456288][ T4794] do_exit+0x5a1/0x20a0 [ 91.460427][ T4794] do_group_exit+0x12e/0x300 [ 91.465005][ T4794] __x64_sys_exit_group+0x3b/0x40 [ 91.470018][ T4794] do_syscall_64+0x4c/0xa0 [ 91.474414][ T4794] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.480292][ T4794] [ 91.482597][ T4794] Memory state around the buggy address: [ 91.488211][ T4794] ffff88801e88af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 91.496249][ T4794] ffff88801e88af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 91.504289][ T4794] >ffff88801e88b000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 91.512324][ T4794] ^ [ 91.516370][ T4794] ffff88801e88b080: fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc fc [ 91.524495][ T4794] ffff88801e88b100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 91.532557][ T4794] ================================================================== [ 91.540601][ T4794] Disabling lock debugging due to kernel taint [ 91.548465][ T5011] Bluetooth: hci0: command 0x040f tx timeout [ 91.560934][ T4794] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.568150][ T4794] CPU: 1 PID: 4794 Comm: syz-executor Tainted: G B 5.15.189-syzkaller #0 [ 91.577860][ T4794] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 91.587922][ T4794] Call Trace: [ 91.591200][ T4794] [ 91.594123][ T4794] dump_stack_lvl+0x168/0x230 [ 91.598797][ T4794] ? show_regs_print_info+0x20/0x20 [ 91.603986][ T4794] ? load_image+0x3b0/0x3b0 [ 91.608501][ T4794] panic+0x2c9/0x7f0 [ 91.612378][ T4794] ? bpf_jit_dump+0xd0/0xd0 [ 91.616947][ T4794] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 91.622827][ T4794] ? _raw_spin_unlock+0x40/0x40 [ 91.627650][ T4794] ? ext4_xattr_delete_inode+0xba6/0xbb0 [ 91.633259][ T4794] check_panic_on_warn+0x80/0xa0 [ 91.638182][ T4794] ? ext4_xattr_delete_inode+0xba6/0xbb0 [ 91.643806][ T4794] end_report+0x6d/0xf0 [ 91.647941][ T4794] kasan_report+0x102/0x130 [ 91.652415][ T4794] ? ext4_xattr_delete_inode+0xba6/0xbb0 [ 91.658108][ T4794] ext4_xattr_delete_inode+0xba6/0xbb0 [ 91.663551][ T4794] ? ext4_expand_extra_isize_ea+0x19a0/0x19a0 [ 91.669616][ T4794] ext4_evict_inode+0xc47/0x1080 [ 91.674526][ T4794] ? _raw_spin_unlock+0x24/0x40 [ 91.679352][ T4794] ? ext4_inode_is_fast_symlink+0x350/0x350 [ 91.685222][ T4794] ? do_raw_spin_unlock+0x11d/0x230 [ 91.690399][ T4794] ? ext4_inode_is_fast_symlink+0x350/0x350 [ 91.696265][ T4794] evict+0x485/0x870 [ 91.700161][ T4794] ? __lock_acquire+0x7c60/0x7c60 [ 91.705164][ T4794] ? proc_nr_inodes+0x320/0x320 [ 91.709988][ T4794] ? do_raw_spin_unlock+0x11d/0x230 [ 91.715157][ T4794] ? _raw_spin_unlock+0x24/0x40 [ 91.720006][ T4794] ? iput+0x706/0x8a0 [ 91.723963][ T4794] vfs_rmdir+0x3b4/0x430 [ 91.728180][ T4794] do_rmdir+0x295/0x710 [ 91.732316][ T4794] ? __phys_addr_symbol+0x2b/0x70 [ 91.737315][ T4794] ? d_delete_notify+0x150/0x150 [ 91.742226][ T4794] ? strncpy_from_user+0x1fb/0x360 [ 91.747309][ T4794] ? getname_flags+0x1fe/0x500 [ 91.752045][ T4794] __x64_sys_unlinkat+0xc0/0xe0 [ 91.756870][ T4794] do_syscall_64+0x4c/0xa0 [ 91.761264][ T4794] ? clear_bhb_loop+0x30/0x80 [ 91.765916][ T4794] ? clear_bhb_loop+0x30/0x80 [ 91.770565][ T4794] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 91.776434][ T4794] RIP: 0033:0x7fd5338ba6c7 [ 91.780824][ T4794] Code: 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 07 01 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 91.800401][ T4794] RSP: 002b:00007ffd870d1b18 EFLAGS: 00000207 ORIG_RAX: 0000000000000107 [ 91.808798][ T4794] RAX: ffffffffffffffda RBX: 0000000000000065 RCX: 00007fd5338ba6c7 [ 91.816754][ T4794] RDX: 0000000000000200 RSI: 00007ffd870d2cc0 RDI: 00000000ffffff9c [ 91.824704][ T4794] RBP: 00007fd533906336 R08: 0000000000000000 R09: 0000000000000000 [ 91.832652][ T4794] R10: 0000000000000100 R11: 0000000000000207 R12: 00007ffd870d2cc0 [ 91.840610][ T4794] R13: 00007fd533906336 R14: 0000000000016185 R15: 0000000000000007 [ 91.848567][ T4794] [ 91.851788][ T4794] Kernel Offset: disabled [ 91.856099][ T4794] Rebooting in 86400 seconds..