Warning: Permanently added '10.128.0.238' (ED25519) to the list of known hosts. 2026/03/20 04:21:17 parsed 1 programs [ 69.986477][ T5843] cgroup: Unknown subsys name 'net' [ 70.140466][ T5843] cgroup: Unknown subsys name 'cpuset' [ 70.149786][ T5843] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.225149][ T1318] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.232172][ T1318] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.509806][ T5843] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.153350][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 76.583750][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.596106][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.605913][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.615422][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.623640][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.904593][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.912942][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 76.977625][ T138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 76.985667][ T138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.237812][ T5925] chnl_net:caif_netlink_parms(): no params data found [ 77.350037][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.358527][ T5925] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.366257][ T5925] bridge_slave_0: entered allmulticast mode [ 77.374452][ T5925] bridge_slave_0: entered promiscuous mode [ 77.395331][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.403298][ T5925] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.411816][ T5925] bridge_slave_1: entered allmulticast mode [ 77.419801][ T5925] bridge_slave_1: entered promiscuous mode [ 77.467172][ T5925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.482910][ T5925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.528680][ T5925] team0: Port device team_slave_0 added [ 77.536773][ T5925] team0: Port device team_slave_1 added [ 77.565469][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.572581][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.598511][ T5925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.612358][ T5925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.619410][ T5925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 77.645433][ T5925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.693594][ T5925] hsr_slave_0: entered promiscuous mode [ 77.701349][ T5925] hsr_slave_1: entered promiscuous mode [ 77.848895][ T5925] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.864372][ T5925] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.874477][ T5925] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.885055][ T5925] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.919741][ T5925] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.927320][ T5925] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.934944][ T5925] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.942179][ T5925] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.954891][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.963746][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.024755][ T5925] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.051187][ T5925] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.066146][ T138] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.073360][ T138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.090045][ T138] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.097181][ T138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.271848][ T5925] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.325920][ T5925] veth0_vlan: entered promiscuous mode [ 78.339408][ T5925] veth1_vlan: entered promiscuous mode [ 78.375543][ T5925] veth0_macvtap: entered promiscuous mode [ 78.389296][ T5925] veth1_macvtap: entered promiscuous mode [ 78.411715][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.428246][ T5925] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.445378][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.454280][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.466337][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.479002][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.625357][ T138] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.694545][ T138] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.775372][ T138] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.855778][ T138] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/03/20 04:21:28 executed programs: 0 [ 79.001242][ T5164] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.008767][ T5164] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.016184][ T5164] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.026448][ T5164] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.035357][ T5164] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.175373][ T5951] chnl_net:caif_netlink_parms(): no params data found [ 79.255295][ T5951] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.262880][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.270283][ T5951] bridge_slave_0: entered allmulticast mode [ 79.277927][ T5951] bridge_slave_0: entered promiscuous mode [ 79.286401][ T5951] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.293854][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.302271][ T5951] bridge_slave_1: entered allmulticast mode [ 79.310321][ T5951] bridge_slave_1: entered promiscuous mode [ 79.341272][ T5951] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 79.355581][ T5951] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 79.393688][ T5951] team0: Port device team_slave_0 added [ 79.403560][ T5951] team0: Port device team_slave_1 added [ 79.437539][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.444490][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.470862][ T5951] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.485111][ T5951] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.492251][ T5951] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 79.518273][ T5951] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.571281][ T5951] hsr_slave_0: entered promiscuous mode [ 79.578668][ T5951] hsr_slave_1: entered promiscuous mode [ 79.585131][ T5951] debugfs: 'hsr0' already exists in 'hsr' [ 79.591054][ T5951] Cannot create hsr debugfs directory [ 81.057583][ T51] Bluetooth: hci0: command tx timeout [ 81.251692][ T138] bridge_slave_1: left allmulticast mode [ 81.257845][ T138] bridge_slave_1: left promiscuous mode [ 81.264688][ T138] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.276604][ T138] bridge_slave_0: left allmulticast mode [ 81.284303][ T138] bridge_slave_0: left promiscuous mode [ 81.290166][ T138] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.446652][ T138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 81.458280][ T1233] cfg80211: failed to load regulatory.db [ 81.466826][ T138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 81.476671][ T138] bond0 (unregistering): Released all slaves [ 81.548040][ T138] hsr_slave_0: left promiscuous mode [ 81.554658][ T138] hsr_slave_1: left promiscuous mode [ 81.561746][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 81.569481][ T138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 81.578379][ T138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 81.585793][ T138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 81.604619][ T138] veth1_macvtap: left promiscuous mode [ 81.610760][ T138] veth0_macvtap: left promiscuous mode [ 81.616376][ T138] veth1_vlan: left promiscuous mode [ 81.625115][ T138] veth0_vlan: left promiscuous mode [ 81.951757][ T138] team0 (unregistering): Port device team_slave_1 removed [ 81.980152][ T138] team0 (unregistering): Port device team_slave_0 removed [ 82.436321][ T5951] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.454732][ T5951] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.472456][ T5951] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.491843][ T5951] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.708284][ T5951] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.741151][ T5951] 8021q: adding VLAN 0 to HW filter on device team0 [ 82.763108][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.770337][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 82.790244][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.797477][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.081575][ T5951] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.138825][ T51] Bluetooth: hci0: command tx timeout [ 83.156768][ T5951] veth0_vlan: entered promiscuous mode [ 83.175294][ T5951] veth1_vlan: entered promiscuous mode [ 83.231617][ T5951] veth0_macvtap: entered promiscuous mode [ 83.246204][ T5951] veth1_macvtap: entered promiscuous mode [ 83.280909][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.302040][ T5951] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.324406][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.341759][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.370723][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.396427][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.473397][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.487960][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.525876][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.534894][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.625808][ T6027] loop0: detected capacity change from 0 to 512 [ 83.642281][ T6027] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 83.655538][ T6027] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 83.673162][ T6027] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 83.687685][ T6027] EXT4-fs (loop0): 1 truncate cleaned up [ 83.694744][ T6027] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 83.716316][ T6027] ================================================================== [ 83.724392][ T6027] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x9c1/0x1e20 [ 83.732114][ T6027] Read of size 18446744073709551540 at addr ffff888077971870 by task syz.0.17/6027 [ 83.741382][ T6027] [ 83.743740][ T6027] CPU: 1 UID: 0 PID: 6027 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 83.743752][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 83.743764][ T6027] Call Trace: [ 83.743771][ T6027] [ 83.743776][ T6027] dump_stack_lvl+0xe8/0x150 [ 83.743794][ T6027] print_address_description+0x55/0x1e0 [ 83.743808][ T6027] ? ext4_xattr_set_entry+0x9c1/0x1e20 [ 83.743819][ T6027] print_report+0x58/0x70 [ 83.743831][ T6027] kasan_report+0x117/0x150 [ 83.743841][ T6027] ? ext4_xattr_set_entry+0x9c1/0x1e20 [ 83.743853][ T6027] ? ext4_xattr_set_entry+0x9c1/0x1e20 [ 83.743863][ T6027] kasan_check_range+0x264/0x2c0 [ 83.743873][ T6027] ? ext4_xattr_set_entry+0x9c1/0x1e20 [ 83.743883][ T6027] __asan_memmove+0x29/0x70 [ 83.743896][ T6027] ext4_xattr_set_entry+0x9c1/0x1e20 [ 83.743910][ T6027] ext4_xattr_block_set+0x878/0x2ad0 [ 83.743923][ T6027] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 83.743939][ T6027] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 83.743949][ T6027] ? _raw_spin_unlock+0x28/0x50 [ 83.743960][ T6027] ? ext4_xattr_ibody_set+0x554/0x6a0 [ 83.743972][ T6027] ext4_xattr_set_handle+0xe05/0x14c0 [ 83.743986][ T6027] ? __pfx_ext4_xattr_set_handle+0x10/0x10 [ 83.743999][ T6027] ext4_xattr_set+0x255/0x340 [ 83.744012][ T6027] ? __pfx_ext4_xattr_set+0x10/0x10 [ 83.744023][ T6027] ? __pfx_evm_protect_xattr+0x10/0x10 [ 83.744035][ T6027] ? __pfx_ext4_xattr_trusted_set+0x10/0x10 [ 83.744047][ T6027] __vfs_setxattr+0x43c/0x480 [ 83.744061][ T6027] __vfs_setxattr_noperm+0x12d/0x660 [ 83.744075][ T6027] vfs_setxattr+0x163/0x360 [ 83.744088][ T6027] ? __pfx_vfs_setxattr+0x10/0x10 [ 83.744102][ T6027] filename_setxattr+0x296/0x630 [ 83.744116][ T6027] ? __pfx_filename_setxattr+0x10/0x10 [ 83.744130][ T6027] ? do_getname+0x151/0x250 [ 83.744141][ T6027] path_setxattrat+0x3eb/0x440 [ 83.744153][ T6027] ? __pfx_path_setxattrat+0x10/0x10 [ 83.744162][ T6027] ? do_futex+0x333/0x420 [ 83.744175][ T6027] ? __pfx___se_sys_futex+0x10/0x10 [ 83.744183][ T6027] ? __se_sys_chdir+0x1ce/0x2a0 [ 83.744194][ T6027] ? __pfx___se_sys_chdir+0x10/0x10 [ 83.744205][ T6027] __x64_sys_lsetxattr+0xbf/0xe0 [ 83.744219][ T6027] do_syscall_64+0x14d/0xf80 [ 83.744230][ T6027] ? trace_irq_disable+0x3b/0x150 [ 83.744242][ T6027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.744251][ T6027] ? clear_bhb_loop+0x40/0x90 [ 83.744261][ T6027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.744270][ T6027] RIP: 0033:0x7f0fa119c799 [ 83.744286][ T6027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 83.744293][ T6027] RSP: 002b:00007f0fa1f73028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 83.744304][ T6027] RAX: ffffffffffffffda RBX: 00007f0fa1415fa0 RCX: 00007f0fa119c799 [ 83.744310][ T6027] RDX: 0000200000000040 RSI: 0000200000000300 RDI: 0000200000000100 [ 83.744316][ T6027] RBP: 00007f0fa1232c99 R08: 0000000000000000 R09: 0000000000000000 [ 83.744321][ T6027] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000 [ 83.744327][ T6027] R13: 00007f0fa1416038 R14: 00007f0fa1415fa0 R15: 00007ffe3f32a398 [ 83.744336][ T6027] [ 83.744340][ T6027] [ 84.055646][ T6027] Allocated by task 6027: [ 84.059960][ T6027] kasan_save_track+0x3e/0x80 [ 84.064636][ T6027] __kasan_kmalloc+0x93/0xb0 [ 84.069205][ T6027] __kmalloc_node_track_caller_noprof+0x4db/0x7b0 [ 84.075601][ T6027] kmemdup_noprof+0x2b/0x70 [ 84.080089][ T6027] ext4_xattr_block_set+0x787/0x2ad0 [ 84.085359][ T6027] ext4_xattr_set_handle+0xe05/0x14c0 [ 84.090712][ T6027] ext4_xattr_set+0x255/0x340 [ 84.095371][ T6027] __vfs_setxattr+0x43c/0x480 [ 84.100030][ T6027] __vfs_setxattr_noperm+0x12d/0x660 [ 84.105299][ T6027] vfs_setxattr+0x163/0x360 [ 84.109784][ T6027] filename_setxattr+0x296/0x630 [ 84.114704][ T6027] path_setxattrat+0x3eb/0x440 [ 84.119452][ T6027] __x64_sys_lsetxattr+0xbf/0xe0 [ 84.124377][ T6027] do_syscall_64+0x14d/0xf80 [ 84.128948][ T6027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.134828][ T6027] [ 84.137135][ T6027] The buggy address belongs to the object at ffff888077971800 [ 84.137135][ T6027] which belongs to the cache kmalloc-1k of size 1024 [ 84.151175][ T6027] The buggy address is located 112 bytes inside of [ 84.151175][ T6027] 1024-byte region [ffff888077971800, ffff888077971c00) [ 84.164514][ T6027] [ 84.166822][ T6027] The buggy address belongs to the physical page: [ 84.173227][ T6027] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x77970 [ 84.181974][ T6027] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 84.190454][ T6027] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 84.197987][ T6027] page_type: f5(slab) [ 84.201957][ T6027] raw: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122 [ 84.210532][ T6027] raw: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 84.219094][ T6027] head: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122 [ 84.227743][ T6027] head: 0000000000000000 0000000800100010 00000000f5000000 0000000000000000 [ 84.236393][ T6027] head: 00fff00000000003 fffffffffffffe01 00000000ffffffff 00000000ffffffff [ 84.245044][ T6027] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 84.253697][ T6027] page dumped because: kasan: bad access detected [ 84.260100][ T6027] page_owner tracks the page as allocated [ 84.265800][ T6027] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5708, tgid 5708 (dhcpcd-run-hook), ts 54778941191, free_ts 54758930609 [ 84.287400][ T6027] post_alloc_hook+0x231/0x280 [ 84.292157][ T6027] get_page_from_freelist+0x2418/0x24b0 [ 84.297689][ T6027] __alloc_frozen_pages_noprof+0x233/0x3d0 [ 84.303481][ T6027] allocate_slab+0x77/0x660 [ 84.307974][ T6027] refill_objects+0x339/0x3d0 [ 84.312635][ T6027] __pcs_replace_empty_main+0x321/0x720 [ 84.318170][ T6027] __kmalloc_noprof+0x474/0x760 [ 84.323001][ T6027] load_elf_phdrs+0x13e/0x240 [ 84.327664][ T6027] load_elf_binary+0xa0f/0x2980 [ 84.332508][ T6027] bprm_execve+0x949/0x1470 [ 84.337001][ T6027] do_execveat_common+0x50d/0x690 [ 84.342014][ T6027] __x64_sys_execve+0x97/0xc0 [ 84.346676][ T6027] do_syscall_64+0x14d/0xf80 [ 84.351258][ T6027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.357225][ T6027] page last free pid 5706 tgid 5706 stack trace: [ 84.363530][ T6027] __free_frozen_pages+0xbf0/0xd00 [ 84.368623][ T6027] __slab_free+0x274/0x2c0 [ 84.373022][ T6027] qlist_free_all+0x99/0x100 [ 84.377605][ T6027] kasan_quarantine_reduce+0x148/0x160 [ 84.383048][ T6027] __kasan_slab_alloc+0x22/0x80 [ 84.387879][ T6027] kmem_cache_alloc_noprof+0x2bc/0x650 [ 84.393334][ T6027] do_getname+0x2e/0x250 [ 84.397559][ T6027] vfs_fstatat+0x45/0x170 [ 84.402034][ T6027] __x64_sys_newfstatat+0x151/0x200 [ 84.407246][ T6027] do_syscall_64+0x14d/0xf80 [ 84.411837][ T6027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.417717][ T6027] [ 84.420029][ T6027] Memory state around the buggy address: [ 84.425638][ T6027] ffff888077971700: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.433682][ T6027] ffff888077971780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 84.441727][ T6027] >ffff888077971800: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.449796][ T6027] ^ [ 84.457497][ T6027] ffff888077971880: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.465544][ T6027] ffff888077971900: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.473584][ T6027] ================================================================== [ 84.490149][ T6027] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 84.497380][ T6027] CPU: 0 UID: 0 PID: 6027 Comm: syz.0.17 Not tainted syzkaller #0 PREEMPT(full) [ 84.506496][ T6027] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.516564][ T6027] Call Trace: [ 84.519860][ T6027] [ 84.522803][ T6027] vpanic+0x56c/0xa60 [ 84.526808][ T6027] ? __pfx_vpanic+0x10/0x10 [ 84.531333][ T6027] panic+0xc5/0xd0 [ 84.535066][ T6027] ? __pfx_panic+0x10/0x10 [ 84.539471][ T6027] ? preempt_schedule_thunk+0x16/0x30 [ 84.544829][ T6027] ? ext4_xattr_set_entry+0x9c1/0x1e20 [ 84.550283][ T6027] ? preempt_schedule_thunk+0x16/0x30 [ 84.555642][ T6027] ? ext4_xattr_set_entry+0x9c1/0x1e20 [ 84.561111][ T6027] check_panic_on_warn+0x89/0xb0 [ 84.566055][ T6027] ? ext4_xattr_set_entry+0x9c1/0x1e20 [ 84.571493][ T6027] end_report+0x73/0x180 [ 84.575717][ T6027] ? ext4_xattr_set_entry+0x9c1/0x1e20 [ 84.581152][ T6027] kasan_report+0x128/0x150 [ 84.585635][ T6027] ? ext4_xattr_set_entry+0x9c1/0x1e20 [ 84.591076][ T6027] ? ext4_xattr_set_entry+0x9c1/0x1e20 [ 84.596513][ T6027] kasan_check_range+0x264/0x2c0 [ 84.601520][ T6027] ? ext4_xattr_set_entry+0x9c1/0x1e20 [ 84.606966][ T6027] __asan_memmove+0x29/0x70 [ 84.611454][ T6027] ext4_xattr_set_entry+0x9c1/0x1e20 [ 84.616742][ T6027] ext4_xattr_block_set+0x878/0x2ad0 [ 84.622027][ T6027] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 84.627385][ T6027] ? __pfx_ext4_xattr_block_set+0x10/0x10 [ 84.633083][ T6027] ? _raw_spin_unlock+0x28/0x50 [ 84.637913][ T6027] ? ext4_xattr_ibody_set+0x554/0x6a0 [ 84.643266][ T6027] ext4_xattr_set_handle+0xe05/0x14c0 [ 84.648626][ T6027] ? __pfx_ext4_xattr_set_handle+0x10/0x10 [ 84.654418][ T6027] ext4_xattr_set+0x255/0x340 [ 84.659077][ T6027] ? __pfx_ext4_xattr_set+0x10/0x10 [ 84.664266][ T6027] ? __pfx_evm_protect_xattr+0x10/0x10 [ 84.669723][ T6027] ? __pfx_ext4_xattr_trusted_set+0x10/0x10 [ 84.675601][ T6027] __vfs_setxattr+0x43c/0x480 [ 84.680266][ T6027] __vfs_setxattr_noperm+0x12d/0x660 [ 84.685533][ T6027] vfs_setxattr+0x163/0x360 [ 84.690016][ T6027] ? __pfx_vfs_setxattr+0x10/0x10 [ 84.695126][ T6027] filename_setxattr+0x296/0x630 [ 84.700067][ T6027] ? __pfx_filename_setxattr+0x10/0x10 [ 84.705534][ T6027] ? do_getname+0x151/0x250 [ 84.710029][ T6027] path_setxattrat+0x3eb/0x440 [ 84.714789][ T6027] ? __pfx_path_setxattrat+0x10/0x10 [ 84.720054][ T6027] ? do_futex+0x333/0x420 [ 84.724370][ T6027] ? __pfx___se_sys_futex+0x10/0x10 [ 84.729545][ T6027] ? __se_sys_chdir+0x1ce/0x2a0 [ 84.734406][ T6027] ? __pfx___se_sys_chdir+0x10/0x10 [ 84.739586][ T6027] __x64_sys_lsetxattr+0xbf/0xe0 [ 84.744508][ T6027] do_syscall_64+0x14d/0xf80 [ 84.749103][ T6027] ? trace_irq_disable+0x3b/0x150 [ 84.754134][ T6027] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.760185][ T6027] ? clear_bhb_loop+0x40/0x90 [ 84.764846][ T6027] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.770721][ T6027] RIP: 0033:0x7f0fa119c799 [ 84.775115][ T6027] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.794700][ T6027] RSP: 002b:00007f0fa1f73028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd [ 84.803096][ T6027] RAX: ffffffffffffffda RBX: 00007f0fa1415fa0 RCX: 00007f0fa119c799 [ 84.811052][ T6027] RDX: 0000200000000040 RSI: 0000200000000300 RDI: 0000200000000100 [ 84.819035][ T6027] RBP: 00007f0fa1232c99 R08: 0000000000000000 R09: 0000000000000000 [ 84.826986][ T6027] R10: 000000000000fe37 R11: 0000000000000246 R12: 0000000000000000 [ 84.834956][ T6027] R13: 00007f0fa1416038 R14: 00007f0fa1415fa0 R15: 00007ffe3f32a398 [ 84.842911][ T6027] [ 84.846271][ T6027] Kernel Offset: disabled [ 84.850606][ T6027] Rebooting in 86400 seconds..