Warning: Permanently added '10.128.1.216' (ED25519) to the list of known hosts. 2026/03/18 18:30:05 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 89.590022][ T4592] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 91.444653][ T1444] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.452750][ T1444] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.460735][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.476829][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.486099][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.493614][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 91.682796][ T4634] chnl_net:caif_netlink_parms(): no params data found [ 91.738147][ T4634] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.745368][ T4634] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.753516][ T4634] device bridge_slave_0 entered promiscuous mode [ 91.762177][ T4634] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.769670][ T4634] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.778116][ T4634] device bridge_slave_1 entered promiscuous mode [ 91.803079][ T4634] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.815345][ T4634] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.842499][ T4634] team0: Port device team_slave_0 added [ 91.851876][ T4634] team0: Port device team_slave_1 added [ 91.873972][ T4634] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.881097][ T4634] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.909197][ T4634] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.922836][ T4634] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.931477][ T4634] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.959518][ T4634] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.996983][ T4634] device hsr_slave_0 entered promiscuous mode [ 92.003789][ T4634] device hsr_slave_1 entered promiscuous mode [ 92.593405][ T4634] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.606769][ T4634] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.625332][ T4634] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.646965][ T4634] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.731903][ T4634] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.767450][ T4634] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.780512][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 92.796231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 92.824986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 92.838670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 92.853923][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.861284][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.876909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 92.886720][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.895542][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.902620][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.911727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.936506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 92.953349][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.962468][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.972993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.982155][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.991785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 93.001193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 93.009954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 93.019969][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.034723][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 93.043109][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 93.052682][ T4634] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.159778][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.168589][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.182099][ T4634] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.216351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 93.225925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 93.253086][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 93.261738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 93.272622][ T4634] device veth0_vlan entered promiscuous mode [ 93.280797][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 93.289666][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 93.302017][ T4634] device veth1_vlan entered promiscuous mode [ 93.339501][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 93.350959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 93.360246][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 93.369305][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 93.380854][ T4634] device veth0_macvtap entered promiscuous mode [ 93.407584][ T4634] device veth1_macvtap entered promiscuous mode [ 93.424156][ T4634] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.433420][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 93.442375][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 93.450769][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 93.459757][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 93.472093][ T4634] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.491902][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 93.501719][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 93.513504][ T4634] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.522424][ T4634] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.531378][ T4634] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.540340][ T4634] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.857627][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/03/18 18:30:14 executed programs: 0 [ 96.197401][ T4806] chnl_net:caif_netlink_parms(): no params data found [ 96.254150][ T4806] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.261730][ T4806] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.270119][ T4806] device bridge_slave_0 entered promiscuous mode [ 96.278634][ T4806] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.286306][ T4806] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.294270][ T4806] device bridge_slave_1 entered promiscuous mode [ 96.319673][ T4806] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 96.331131][ T4806] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 96.359831][ T4806] team0: Port device team_slave_0 added [ 96.368421][ T4806] team0: Port device team_slave_1 added [ 96.388554][ T4806] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.395782][ T4806] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.422020][ T4806] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.434510][ T4806] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.441462][ T4806] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.468270][ T4806] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.504771][ T4806] device hsr_slave_0 entered promiscuous mode [ 96.511625][ T4806] device hsr_slave_1 entered promiscuous mode [ 96.518792][ T4806] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.526840][ T4806] Cannot create hsr debugfs directory [ 98.135321][ T4256] Bluetooth: hci0: command 0x0409 tx timeout [ 98.341271][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.400088][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.432668][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.303551][ T4806] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 99.312926][ T4806] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 99.321423][ T4806] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 99.331888][ T4806] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 99.374077][ T4806] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.398763][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 99.407117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 99.417771][ T4806] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.440489][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 99.449401][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 99.457897][ T1444] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.464965][ T1444] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.490237][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 99.501020][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 99.509631][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 99.518369][ T1444] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.525474][ T1444] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.550425][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 99.559577][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 99.571540][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 99.580881][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 99.590921][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 99.617227][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 99.626609][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 99.638220][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 99.646646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 99.659857][ T4806] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.671032][ T4806] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 99.679598][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 99.688140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 99.698544][ T154] device hsr_slave_0 left promiscuous mode [ 99.705180][ T154] device hsr_slave_1 left promiscuous mode [ 99.711530][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.719332][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.727467][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.735200][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.742739][ T154] device bridge_slave_1 left promiscuous mode [ 99.749293][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.758859][ T154] device bridge_slave_0 left promiscuous mode [ 99.765196][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.776214][ T154] device veth1_macvtap left promiscuous mode [ 99.782224][ T154] device veth0_macvtap left promiscuous mode [ 99.789221][ T154] device veth1_vlan left promiscuous mode [ 99.795203][ T154] device veth0_vlan left promiscuous mode [ 99.915219][ T154] team0 (unregistering): Port device team_slave_1 removed [ 99.928094][ T154] team0 (unregistering): Port device team_slave_0 removed [ 99.941414][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 99.953846][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.000342][ T154] bond0 (unregistering): Released all slaves [ 100.123985][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 100.131571][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 100.147752][ T4806] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.169630][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 100.179582][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 100.193998][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 100.202285][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 100.212136][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 100.219491][ T4243] Bluetooth: hci0: command 0x041b tx timeout [ 100.221051][ T1444] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 100.235933][ T4806] device veth0_vlan entered promiscuous mode [ 100.246854][ T4806] device veth1_vlan entered promiscuous mode [ 100.273029][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 100.281439][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 100.289830][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 100.298504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 100.308478][ T4806] device veth0_macvtap entered promiscuous mode [ 100.319122][ T4806] device veth1_macvtap entered promiscuous mode [ 100.332356][ T4806] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.340885][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 100.349189][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 100.357605][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 100.366287][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 100.377534][ T4806] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.388224][ T4806] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.397051][ T4806] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.406204][ T4806] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.415049][ T4806] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.425901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 100.434371][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 100.487628][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.497811][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.517238][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 100.529661][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.538637][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.547901][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 100.595885][ T5042] loop0: detected capacity change from 0 to 1024 [ 100.616982][ T5042] ======================================================= [ 100.616982][ T5042] WARNING: The mand mount option has been deprecated and [ 100.616982][ T5042] and is ignored by this kernel. Remove the mand [ 100.616982][ T5042] option from the mount to silence this warning. [ 100.616982][ T5042] ======================================================= [ 100.721792][ T5042] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 100.781650][ T5042] ================================================================== [ 100.790349][ T5042] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x1bf6/0x3ea0 [ 100.798437][ T5042] Read of size 18446744073709550624 at addr ffff8880611e47e0 by task syz.0.17/5042 [ 100.807709][ T5042] [ 100.810054][ T5042] CPU: 0 PID: 5042 Comm: syz.0.17 Not tainted syzkaller #0 [ 100.817247][ T5042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 100.827317][ T5042] Call Trace: [ 100.830738][ T5042] [ 100.833679][ T5042] dump_stack_lvl+0x188/0x250 [ 100.838548][ T5042] ? show_regs_print_info+0x20/0x20 [ 100.843756][ T5042] ? _printk+0xda/0x130 [ 100.847912][ T5042] ? ext4_xattr_set_entry+0x1bf6/0x3ea0 [ 100.853465][ T5042] ? load_image+0x400/0x400 [ 100.858095][ T5042] print_address_description+0x60/0x2d0 [ 100.863661][ T5042] ? ext4_xattr_set_entry+0x1bf6/0x3ea0 [ 100.869307][ T5042] kasan_report+0xdf/0x130 [ 100.873989][ T5042] ? ext4_xattr_set_entry+0x1bf6/0x3ea0 [ 100.879617][ T5042] ? mb_cache_entry_create+0x676/0x890 [ 100.885085][ T5042] ? ext4_xattr_set_entry+0x1bf6/0x3ea0 [ 100.890633][ T5042] kasan_check_range+0x235/0x290 [ 100.895569][ T5042] ? ext4_xattr_set_entry+0x1bf6/0x3ea0 [ 100.901113][ T5042] memmove+0x25/0x60 [ 100.905044][ T5042] ext4_xattr_set_entry+0x1bf6/0x3ea0 [ 100.910441][ T5042] ? ext4_xattr_ibody_set+0x330/0x330 [ 100.915822][ T5042] ? rcu_is_watching+0x11/0xa0 [ 100.920579][ T5042] ? kmem_cache_free+0x14c/0x210 [ 100.925517][ T5042] ? mb_cache_entry_delete_or_get+0x1bd/0x1e0 [ 100.931667][ T5042] ext4_xattr_block_set+0x4fd/0x2d20 [ 100.936968][ T5042] ? __ext4_journal_get_write_access+0x2ea/0x6e0 [ 100.943319][ T5042] ? __ext4_xattr_check_block+0x25a/0x8d0 [ 100.949068][ T5042] ? ext4_xattr_block_find+0x500/0x500 [ 100.954550][ T5042] ext4_xattr_set_handle+0xbc4/0x12b0 [ 100.959942][ T5042] ? ext4_xattr_set_entry+0x3ea0/0x3ea0 [ 100.965582][ T5042] ? handle_mm_fault+0x2be9/0x4410 [ 100.970707][ T5042] ? __ext4_journal_start_sb+0x1bd/0x360 [ 100.976340][ T5042] ext4_xattr_set+0x242/0x320 [ 100.981026][ T5042] ? ext4_xattr_set_credits+0x290/0x290 [ 100.987000][ T5042] ? posix_xattr_acl+0x8f/0xb0 [ 100.991769][ T5042] ? evm_protect_xattr+0x33c/0x9b0 [ 100.996877][ T5042] ? ext4_xattr_trusted_get+0x40/0x40 [ 101.002244][ T5042] __vfs_setxattr+0x3e0/0x420 [ 101.006927][ T5042] __vfs_setxattr_noperm+0x129/0x5e0 [ 101.012212][ T5042] vfs_setxattr+0x167/0x2e0 [ 101.016713][ T5042] ? xattr_permission+0x500/0x500 [ 101.021729][ T5042] ? _copy_from_user+0x111/0x170 [ 101.026665][ T5042] ? setxattr+0x2cc/0x390 [ 101.030990][ T5042] setxattr+0x36c/0x390 [ 101.035144][ T5042] ? path_setxattr+0x290/0x290 [ 101.039933][ T5042] ? __mnt_want_write+0x1e2/0x260 [ 101.044994][ T5042] path_setxattr+0x147/0x290 [ 101.049602][ T5042] ? simple_xattr_list_add+0xf0/0xf0 [ 101.054982][ T5042] ? lock_chain_count+0x20/0x20 [ 101.059832][ T5042] ? vtime_user_exit+0x2c8/0x3e0 [ 101.064786][ T5042] __x64_sys_lsetxattr+0xb4/0xd0 [ 101.069745][ T5042] do_syscall_64+0x4c/0xa0 [ 101.074170][ T5042] ? clear_bhb_loop+0x30/0x80 [ 101.078841][ T5042] ? clear_bhb_loop+0x30/0x80 [ 101.083614][ T5042] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.089614][ T5042] RIP: 0033:0x7ff81cff4ef9 [ 101.094035][ T5042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.113639][ T5042] RSP: 002b:00007ff81c658028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 101.122149][ T5042] RAX: ffffffffffffffda RBX: 00007ff81d25ffa0 RCX: 00007ff81cff4ef9 [ 101.130115][ T5042] RDX: 0000200000000440 RSI: 00002000000000c0 RDI: 0000200000000100 [ 101.138085][ T5042] RBP: 00007ff81d089ee0 R08: 0000000000000000 R09: 0000000000000000 [ 101.146058][ T5042] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000 [ 101.154028][ T5042] R13: 00007ff81d260038 R14: 00007ff81d25ffa0 R15: 00007fff70f4ac68 [ 101.162012][ T5042] [ 101.165023][ T5042] [ 101.167357][ T5042] The buggy address belongs to the page: [ 101.173148][ T5042] page:ffffea0001847900 refcount:2 mapcount:0 mapping:ffff8880170a4f30 index:0x1c pfn:0x611e4 [ 101.183390][ T5042] memcg:ffff8880797e0000 [ 101.187629][ T5042] aops:def_blk_aops ino:700000 [ 101.192402][ T5042] flags: 0xfff0000000203a(referenced|dirty|lru|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 101.202749][ T5042] raw: 00fff0000000203a ffffea00017410c8 ffffea0001a8b648 ffff8880170a4f30 [ 101.211332][ T5042] raw: 000000000000001c ffff888072a1f1d0 00000002ffffffff ffff8880797e0000 [ 101.219898][ T5042] page dumped because: kasan: bad access detected [ 101.226306][ T5042] page_owner tracks the page as allocated [ 101.232008][ T5042] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 5042, ts 100768257022, free_ts 100753826552 [ 101.249547][ T5042] get_page_from_freelist+0x1bbd/0x1ca0 [ 101.255098][ T5042] __alloc_pages+0x1ee/0x480 [ 101.259722][ T5042] __page_cache_alloc+0xce/0x440 [ 101.264741][ T5042] pagecache_get_page+0x9b6/0xf10 [ 101.269797][ T5042] __getblk_gfp+0x247/0xb60 [ 101.274386][ T5042] ext4_xattr_block_set+0x1d85/0x2d20 [ 101.279934][ T5042] ext4_xattr_set_handle+0xbc4/0x12b0 [ 101.285304][ T5042] ext4_xattr_set+0x242/0x320 [ 101.289991][ T5042] __vfs_setxattr+0x3e0/0x420 [ 101.294664][ T5042] __vfs_setxattr_noperm+0x129/0x5e0 [ 101.299941][ T5042] vfs_setxattr+0x167/0x2e0 [ 101.304520][ T5042] setxattr+0x36c/0x390 [ 101.309028][ T5042] path_setxattr+0x147/0x290 [ 101.313604][ T5042] __x64_sys_setxattr+0xb7/0xd0 [ 101.318443][ T5042] do_syscall_64+0x4c/0xa0 [ 101.322863][ T5042] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.328756][ T5042] page last free stack trace: [ 101.333522][ T5042] free_unref_page_prepare+0x637/0x6c0 [ 101.338989][ T5042] free_unref_page_list+0x119/0x820 [ 101.344196][ T5042] release_pages+0x186c/0x1be0 [ 101.348952][ T5042] tlb_finish_mmu+0x176/0x300 [ 101.353625][ T5042] unmap_region+0x344/0x3b0 [ 101.358135][ T5042] __do_munmap+0x9f8/0xdf0 [ 101.362536][ T5042] __vm_munmap+0x140/0x240 [ 101.366933][ T5042] __x64_sys_munmap+0x67/0x70 [ 101.371790][ T5042] do_syscall_64+0x4c/0xa0 [ 101.376292][ T5042] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.382174][ T5042] [ 101.384480][ T5042] Memory state around the buggy address: [ 101.390264][ T5042] ffff8880611e4680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 101.398305][ T5042] ffff8880611e4700: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 101.406343][ T5042] >ffff8880611e4780: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 101.414379][ T5042] ^ [ 101.421554][ T5042] ffff8880611e4800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 101.429610][ T5042] ffff8880611e4880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 101.437802][ T5042] ================================================================== [ 101.445851][ T5042] Disabling lock debugging due to kernel taint [ 101.453499][ T5042] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 101.460704][ T5042] CPU: 1 PID: 5042 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 101.469289][ T5042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.479431][ T5042] Call Trace: [ 101.482706][ T5042] [ 101.485633][ T5042] dump_stack_lvl+0x188/0x250 [ 101.490317][ T5042] ? show_regs_print_info+0x20/0x20 [ 101.495521][ T5042] ? load_image+0x400/0x400 [ 101.500024][ T5042] panic+0x2e5/0x810 [ 101.504235][ T5042] ? bpf_jit_dump+0xd0/0xd0 [ 101.508735][ T5042] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 101.514694][ T5042] ? _raw_spin_unlock+0x40/0x40 [ 101.519608][ T5042] ? print_memory_metadata+0x314/0x400 [ 101.525045][ T5042] ? ext4_xattr_set_entry+0x1bf6/0x3ea0 [ 101.530570][ T5042] check_panic_on_warn+0x80/0xa0 [ 101.535493][ T5042] ? ext4_xattr_set_entry+0x1bf6/0x3ea0 [ 101.541039][ T5042] end_report+0x6d/0xf0 [ 101.545173][ T5042] kasan_report+0x102/0x130 [ 101.549675][ T5042] ? ext4_xattr_set_entry+0x1bf6/0x3ea0 [ 101.555200][ T5042] ? mb_cache_entry_create+0x676/0x890 [ 101.560638][ T5042] ? ext4_xattr_set_entry+0x1bf6/0x3ea0 [ 101.566161][ T5042] kasan_check_range+0x235/0x290 [ 101.571077][ T5042] ? ext4_xattr_set_entry+0x1bf6/0x3ea0 [ 101.576619][ T5042] memmove+0x25/0x60 [ 101.580509][ T5042] ext4_xattr_set_entry+0x1bf6/0x3ea0 [ 101.585870][ T5042] ? ext4_xattr_ibody_set+0x330/0x330 [ 101.591229][ T5042] ? rcu_is_watching+0x11/0xa0 [ 101.595977][ T5042] ? kmem_cache_free+0x14c/0x210 [ 101.600894][ T5042] ? mb_cache_entry_delete_or_get+0x1bd/0x1e0 [ 101.606939][ T5042] ext4_xattr_block_set+0x4fd/0x2d20 [ 101.612203][ T5042] ? __ext4_journal_get_write_access+0x2ea/0x6e0 [ 101.618514][ T5042] ? __ext4_xattr_check_block+0x25a/0x8d0 [ 101.624211][ T5042] ? ext4_xattr_block_find+0x500/0x500 [ 101.629822][ T5042] ext4_xattr_set_handle+0xbc4/0x12b0 [ 101.635173][ T5042] ? ext4_xattr_set_entry+0x3ea0/0x3ea0 [ 101.640875][ T5042] ? handle_mm_fault+0x2be9/0x4410 [ 101.645967][ T5042] ? __ext4_journal_start_sb+0x1bd/0x360 [ 101.651576][ T5042] ext4_xattr_set+0x242/0x320 [ 101.656231][ T5042] ? ext4_xattr_set_credits+0x290/0x290 [ 101.661754][ T5042] ? posix_xattr_acl+0x8f/0xb0 [ 101.666495][ T5042] ? evm_protect_xattr+0x33c/0x9b0 [ 101.671582][ T5042] ? ext4_xattr_trusted_get+0x40/0x40 [ 101.676943][ T5042] __vfs_setxattr+0x3e0/0x420 [ 101.681611][ T5042] __vfs_setxattr_noperm+0x129/0x5e0 [ 101.687004][ T5042] vfs_setxattr+0x167/0x2e0 [ 101.691596][ T5042] ? xattr_permission+0x500/0x500 [ 101.696777][ T5042] ? _copy_from_user+0x111/0x170 [ 101.701694][ T5042] ? setxattr+0x2cc/0x390 [ 101.706012][ T5042] setxattr+0x36c/0x390 [ 101.710146][ T5042] ? path_setxattr+0x290/0x290 [ 101.714911][ T5042] ? __mnt_want_write+0x1e2/0x260 [ 101.719919][ T5042] path_setxattr+0x147/0x290 [ 101.724489][ T5042] ? simple_xattr_list_add+0xf0/0xf0 [ 101.729761][ T5042] ? lock_chain_count+0x20/0x20 [ 101.734593][ T5042] ? vtime_user_exit+0x2c8/0x3e0 [ 101.739529][ T5042] __x64_sys_lsetxattr+0xb4/0xd0 [ 101.744449][ T5042] do_syscall_64+0x4c/0xa0 [ 101.748853][ T5042] ? clear_bhb_loop+0x30/0x80 [ 101.753506][ T5042] ? clear_bhb_loop+0x30/0x80 [ 101.758247][ T5042] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 101.764227][ T5042] RIP: 0033:0x7ff81cff4ef9 [ 101.768628][ T5042] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.788403][ T5042] RSP: 002b:00007ff81c658028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 101.796802][ T5042] RAX: ffffffffffffffda RBX: 00007ff81d25ffa0 RCX: 00007ff81cff4ef9 [ 101.804751][ T5042] RDX: 0000200000000440 RSI: 00002000000000c0 RDI: 0000200000000100 [ 101.812876][ T5042] RBP: 00007ff81d089ee0 R08: 0000000000000000 R09: 0000000000000000 [ 101.820826][ T5042] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000 [ 101.828779][ T5042] R13: 00007ff81d260038 R14: 00007ff81d25ffa0 R15: 00007fff70f4ac68 [ 101.836866][ T5042] [ 101.840224][ T5042] Kernel Offset: disabled [ 101.844532][ T5042] Rebooting in 86400 seconds..