Warning: Permanently added '10.128.0.20' (ED25519) to the list of known hosts.
2026/04/18 22:49:17 parsed 1 programs
[ 24.920984][ T28] audit: type=1400 audit(1776552557.050:64): avc: denied { node_bind } for pid=282 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 24.941810][ T28] audit: type=1400 audit(1776552557.050:65): avc: denied { module_request } for pid=282 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 25.731099][ T28] audit: type=1400 audit(1776552557.860:66): avc: denied { mounton } for pid=290 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 25.732049][ T290] cgroup: Unknown subsys name 'net'
[ 25.753790][ T28] audit: type=1400 audit(1776552557.860:67): avc: denied { mount } for pid=290 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.788053][ T28] audit: type=1400 audit(1776552557.890:68): avc: denied { unmount } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 25.788244][ T290] cgroup: Unknown subsys name 'devices'
[ 25.935022][ T290] cgroup: Unknown subsys name 'hugetlb'
[ 25.940687][ T290] cgroup: Unknown subsys name 'rlimit'
[ 26.047627][ T28] audit: type=1400 audit(1776552558.180:69): avc: denied { setattr } for pid=290 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 26.070915][ T28] audit: type=1400 audit(1776552558.180:70): avc: denied { create } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 26.079787][ T293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 26.091615][ T28] audit: type=1400 audit(1776552558.180:71): avc: denied { write } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 26.120231][ T28] audit: type=1400 audit(1776552558.180:72): avc: denied { read } for pid=290 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 26.131355][ T290] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 26.140842][ T28] audit: type=1400 audit(1776552558.180:73): avc: denied { mounton } for pid=290 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 26.867743][ T295] request_module fs-gadgetfs succeeded, but still no fs?
[ 27.475781][ T345] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.482834][ T345] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.490348][ T345] device bridge_slave_0 entered promiscuous mode
[ 27.497167][ T345] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.504805][ T345] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.512118][ T345] device bridge_slave_1 entered promiscuous mode
[ 27.549205][ T345] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.556284][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.563593][ T345] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.570619][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.588520][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 27.596063][ T311] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.603673][ T311] bridge0: port 2(bridge_slave_1) entered disabled state
[ 27.612437][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 27.620681][ T311] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.627713][ T311] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 27.636528][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 27.644729][ T311] bridge0: port 2(bridge_slave_1) entered blocking state
[ 27.651748][ T311] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 27.663833][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 27.672947][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 27.686428][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 27.697656][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 27.705928][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 27.713415][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 27.721510][ T345] device veth0_vlan entered promiscuous mode
[ 27.731806][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 27.740908][ T345] device veth1_macvtap entered promiscuous mode
[ 27.750109][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 27.760163][ T311] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 27.794880][ T345] syz-executor (345) used greatest stack depth: 21568 bytes left
2026/04/18 22:49:20 executed programs: 0
[ 27.973778][ T356] bridge0: port 1(bridge_slave_0) entered blocking state
[ 27.980827][ T356] bridge0: port 1(bridge_slave_0) entered disabled state
[ 27.988233][ T356] device bridge_slave_0 entered promiscuous mode
[ 27.995238][ T356] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.002255][ T356] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.010093][ T356] device bridge_slave_1 entered promiscuous mode
[ 28.054351][ T356] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.061417][ T356] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.068722][ T356] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.075854][ T356] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.101957][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.109728][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.117246][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.126367][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.134824][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.141870][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.156474][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.164707][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.171725][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.183358][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.192518][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.206077][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.225584][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.233777][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 28.241200][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 28.249591][ T356] device veth0_vlan entered promiscuous mode
[ 28.259206][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 28.268375][ T356] device veth1_macvtap entered promiscuous mode
[ 28.285973][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 28.295543][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 28.303838][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 28.336061][ T361] loop2: detected capacity change from 0 to 1024
[ 28.342850][ T361] =======================================================
[ 28.342850][ T361] WARNING: The mand mount option has been deprecated and
[ 28.342850][ T361] and is ignored by this kernel. Remove the mand
[ 28.342850][ T361] option from the mount to silence this warning.
[ 28.342850][ T361] =======================================================
[ 28.403369][ T361] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.418370][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 28.436357][ T367] loop2: detected capacity change from 0 to 1024
[ 28.454822][ T367] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.468038][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 28.488800][ T371] loop2: detected capacity change from 0 to 1024
[ 28.510643][ T371] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.523431][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 28.540769][ T375] loop2: detected capacity change from 0 to 1024
[ 28.554493][ T375] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.567670][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 28.582835][ T379] loop2: detected capacity change from 0 to 1024
[ 28.594691][ T379] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.608027][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 28.623925][ T383] loop2: detected capacity change from 0 to 1024
[ 28.634785][ T383] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 28.649374][ T383] ==================================================================
[ 28.657472][ T383] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x979/0x21d0
[ 28.665199][ T383] Read of size 18446744073709551588 at addr ffff888115c02040 by task syz.2.22/383
[ 28.674404][ T383]
[ 28.676730][ T383] CPU: 1 PID: 383 Comm: syz.2.22 Not tainted syzkaller #0
[ 28.683842][ T383] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 28.693904][ T383] Call Trace:
[ 28.697183][ T383]
[ 28.700102][ T383] __dump_stack+0x21/0x24
[ 28.704435][ T383] dump_stack_lvl+0x110/0x170
[ 28.709116][ T383] ? __cfi_dump_stack_lvl+0x8/0x8
[ 28.714143][ T383] ? kasan_save_alloc_info+0x25/0x30
[ 28.719458][ T383] ? ext4_xattr_block_set+0x9d5/0x3260
[ 28.724920][ T383] ? ext4_xattr_set+0x242/0x320
[ 28.729784][ T383] ? ext4_xattr_trusted_set+0x3c/0x50
[ 28.735151][ T383] ? ext4_xattr_set_entry+0x979/0x21d0
[ 28.740712][ T383] print_address_description+0x71/0x200
[ 28.746266][ T383] print_report+0x4a/0x60
[ 28.750593][ T383] kasan_report+0x122/0x150
[ 28.755102][ T383] ? ext4_xattr_set_entry+0x979/0x21d0
[ 28.760600][ T383] ? ext4_xattr_set_entry+0x979/0x21d0
[ 28.766053][ T383] kasan_check_range+0x249/0x2a0
[ 28.770985][ T383] ? ext4_xattr_set_entry+0x979/0x21d0
[ 28.776442][ T383] memmove+0x2d/0x70
[ 28.780342][ T383] ext4_xattr_set_entry+0x979/0x21d0
[ 28.785636][ T383] ext4_xattr_block_set+0xad3/0x3260
[ 28.790938][ T383] ? iput+0x620/0x670
[ 28.794942][ T383] ? ext4_xattr_block_find+0x310/0x310
[ 28.800405][ T383] ext4_xattr_set_handle+0x1338/0x1570
[ 28.805868][ T383] ? __cfi_ext4_xattr_set_handle+0x10/0x10
[ 28.811675][ T383] ? __schedule+0xbae/0x1500
[ 28.816267][ T383] ? __kasan_check_read+0x11/0x20
[ 28.821297][ T383] ? __ext4_journal_start_sb+0x2ed/0x4a0
[ 28.826934][ T383] ext4_xattr_set+0x242/0x320
[ 28.831702][ T383] ? __cfi_ext4_xattr_set+0x10/0x10
[ 28.836906][ T383] ? selinux_inode_setxattr+0x5cf/0xbf0
[ 28.842458][ T383] ext4_xattr_trusted_set+0x3c/0x50
[ 28.847685][ T383] ? __cfi_ext4_xattr_trusted_set+0x10/0x10
[ 28.853583][ T383] __vfs_setxattr+0x3f2/0x440
[ 28.858267][ T383] __vfs_setxattr_noperm+0x12a/0x5e0
[ 28.863554][ T383] __vfs_setxattr_locked+0x212/0x230
[ 28.869103][ T383] vfs_setxattr+0x167/0x2e0
[ 28.873607][ T383] ? __cfi_vfs_setxattr+0x10/0x10
[ 28.878637][ T383] ? copy_user_enhanced_fast_string+0xa/0x40
[ 28.884628][ T383] setxattr+0x346/0x360
[ 28.888792][ T383] ? path_setxattr+0x290/0x290
[ 28.893561][ T383] ? __mnt_want_write+0x1e6/0x260
[ 28.898589][ T383] ? mnt_want_write+0x220/0x300
[ 28.903441][ T383] path_setxattr+0x147/0x290
[ 28.908036][ T383] ? simple_xattr_list_add+0x120/0x120
[ 28.913588][ T383] ? __kasan_check_write+0x14/0x20
[ 28.918695][ T383] ? fpregs_restore_userregs+0x128/0x260
[ 28.924416][ T383] __x64_sys_lsetxattr+0xc2/0xe0
[ 28.929359][ T383] x64_sys_call+0x8b7/0x9a0
[ 28.933860][ T383] do_syscall_64+0x4c/0xa0
[ 28.938272][ T383] ? clear_bhb_loop+0x30/0x80
[ 28.942950][ T383] ? clear_bhb_loop+0x30/0x80
[ 28.947637][ T383] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 28.953540][ T383] RIP: 0033:0x7f01f639c819
[ 28.957955][ T383] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 28.977734][ T383] RSP: 002b:00007f01f71b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[ 28.986156][ T383] RAX: ffffffffffffffda RBX: 00007f01f6615fa0 RCX: 00007f01f639c819
[ 28.994232][ T383] RDX: 0000200000000500 RSI: 0000200000000180 RDI: 0000200000000540
[ 29.002223][ T383] RBP: 00007f01f6432c91 R08: 0000000000000000 R09: 0000000000000000
[ 29.010213][ T383] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000
[ 29.018197][ T383] R13: 00007f01f6616038 R14: 00007f01f6615fa0 R15: 00007fffb5575fb8
[ 29.026181][ T383]
[ 29.029219][ T383]
[ 29.031560][ T383] Allocated by task 383:
[ 29.035806][ T383] kasan_set_track+0x4b/0x70
[ 29.040495][ T383] kasan_save_alloc_info+0x25/0x30
[ 29.045621][ T383] __kasan_kmalloc+0x95/0xb0
[ 29.050219][ T383] __kmalloc_node_track_caller+0xb1/0x1e0
[ 29.055957][ T383] kmemdup+0x2b/0x60
[ 29.059964][ T383] ext4_xattr_block_set+0x9d5/0x3260
[ 29.065256][ T383] ext4_xattr_set_handle+0x1338/0x1570
[ 29.070724][ T383] ext4_xattr_set+0x242/0x320
[ 29.075406][ T383] ext4_xattr_trusted_set+0x3c/0x50
[ 29.080610][ T383] __vfs_setxattr+0x3f2/0x440
[ 29.085299][ T383] __vfs_setxattr_noperm+0x12a/0x5e0
[ 29.090589][ T383] __vfs_setxattr_locked+0x212/0x230
[ 29.095873][ T383] vfs_setxattr+0x167/0x2e0
[ 29.100385][ T383] setxattr+0x346/0x360
[ 29.104635][ T383] path_setxattr+0x147/0x290
[ 29.109226][ T383] __x64_sys_lsetxattr+0xc2/0xe0
[ 29.114166][ T383] x64_sys_call+0x8b7/0x9a0
[ 29.118673][ T383] do_syscall_64+0x4c/0xa0
[ 29.123128][ T383] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 29.129024][ T383]
[ 29.131344][ T383] The buggy address belongs to the object at ffff888115c02000
[ 29.131344][ T383] which belongs to the cache kmalloc-1k of size 1024
[ 29.145391][ T383] The buggy address is located 64 bytes inside of
[ 29.145391][ T383] 1024-byte region [ffff888115c02000, ffff888115c02400)
[ 29.158749][ T383]
[ 29.161071][ T383] The buggy address belongs to the physical page:
[ 29.167473][ T383] page:ffffea0004570000 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x115c00
[ 29.177790][ T383] head:ffffea0004570000 order:3 compound_mapcount:0 compound_pincount:0
[ 29.186115][ T383] flags: 0x4000000000010200(slab|head|zone=1)
[ 29.192194][ T383] raw: 4000000000010200 ffffea000451ce00 dead000000000002 ffff888100043080
[ 29.200772][ T383] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000
[ 29.209345][ T383] page dumped because: kasan: bad access detected
[ 29.215751][ T383] page_owner tracks the page as allocated
[ 29.221716][ T383] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 102, tgid 102 (udevd), ts 5436100238, free_ts 0
[ 29.241336][ T383] post_alloc_hook+0x1f5/0x210
[ 29.246103][ T383] prep_new_page+0x1c/0x110
[ 29.250607][ T383] get_page_from_freelist+0x2d12/0x2d80
[ 29.256157][ T383] __alloc_pages+0x1fa/0x610
[ 29.261012][ T383] alloc_slab_page+0x6e/0xf0
[ 29.265608][ T383] new_slab+0x98/0x3d0
[ 29.269679][ T383] ___slab_alloc+0x6bd/0xb20
[ 29.274267][ T383] __slab_alloc+0x5e/0xa0
[ 29.278607][ T383] __kmem_cache_alloc_node+0x203/0x2c0
[ 29.284069][ T383] __kmalloc_node_track_caller+0xa0/0x1e0
[ 29.289802][ T383] __alloc_skb+0x236/0x4b0
[ 29.294227][ T383] netlink_sendmsg+0x635/0xbd0
[ 29.298998][ T383] ____sys_sendmsg+0x5cc/0x990
[ 29.303760][ T383] ___sys_sendmsg+0x2a2/0x360
[ 29.308435][ T383] __x64_sys_sendmsg+0x205/0x2d0
[ 29.313374][ T383] x64_sys_call+0x171/0x9a0
[ 29.317878][ T383] page_owner free stack trace missing
[ 29.323245][ T383]
[ 29.325578][ T383] Memory state around the buggy address:
[ 29.331203][ T383] ffff888115c01f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 29.339261][ T383] ffff888115c01f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 29.347318][ T383] >ffff888115c02000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 29.355372][ T383] ^
[ 29.361528][ T383] ffff888115c02080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 29.369590][ T383] ffff888115c02100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 29.377641][ T383] ==================================================================
[ 29.392288][ T383] Disabling lock debugging due to kernel taint
[ 29.401386][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 29.420214][ T387] loop2: detected capacity change from 0 to 1024
[ 29.439150][ T387] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 29.455473][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 29.471004][ T391] loop2: detected capacity change from 0 to 1024
[ 29.488791][ T391] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 29.501826][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 29.517423][ T395] loop2: detected capacity change from 0 to 1024
[ 29.544774][ T395] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 29.559654][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 29.575932][ T399] loop2: detected capacity change from 0 to 1024
[ 29.595810][ T399] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 29.610397][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 29.634102][ T403] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 29.646794][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 29.678248][ T407] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 29.693863][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 29.738752][ T411] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 29.756943][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 29.795018][ T8] device bridge_slave_1 left promiscuous mode
[ 29.801194][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.809308][ T8] device bridge_slave_0 left promiscuous mode
[ 29.816027][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.824852][ T415] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 29.824861][ T8] device veth1_macvtap left promiscuous mode
[ 29.840230][ T8] device veth0_vlan left promiscuous mode
[ 29.842600][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 29.876389][ T420] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 29.891247][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 29.928299][ T424] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 29.942864][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 29.979881][ T428] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 29.992741][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 30.024209][ T432] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 30.041291][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 30.064419][ T436] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 30.079054][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 30.104310][ T440] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 30.118371][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 30.144013][ T444] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 30.164907][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 30.194273][ T448] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 30.208937][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 30.234759][ T453] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 30.247631][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 30.274215][ T457] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 30.288339][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 30.314124][ T461] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 30.329077][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 30.364275][ T465] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 30.378943][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 30.404135][ T469] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 30.422483][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 30.444257][ T473] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 30.457567][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 30.484277][ T477] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 30.499906][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 30.524389][ T481] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 30.538774][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 30.565736][ T485] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 30.579180][ T356] EXT4-fs (loop2): unmounting filesystem.
[ 30.614742][ T489] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none.
[ 30.883050][ C0] general protection fault, probably for non-canonical address 0xe00628ad8d2cc5e6: 0000 [#1] PREEMPT SMP KASAN
[ 30.894832][ C0] KASAN: maybe wild-memory-access in range [0x0031656c69662f30-0x0031656c69662f37]
[ 30.904144][ C0] CPU: 0 PID: 533 Comm: syz.2.59 Tainted: G B syzkaller #0
[ 30.912836][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026
[ 30.922901][ C0] RIP: 0010:rb_insert_color+0xa6/0x6e0
[ 30.928544][ C0] Code: 4c 8b 3b 41 f6 c7 01 0f 85 11 06 00 00 4c 89 75 b8 4c 89 65 d0 4d 8d 67 08 4d 89 e5 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 80 7c 05 00 00 74 08 4c 89 e7 e8 ea c3 c4 fc 4d 8b 34 24 49 39
[ 30.948268][ C0] RSP: 0018:ffffc90000007c50 EFLAGS: 00010003
[ 30.954378][ C0] RAX: dffffc0000000000 RBX: ffffc90000b676e0 RCX: dffffc0000000000
[ 30.962371][ C0] RDX: 0000000000010000 RSI: ffff8881f6e29da0 RDI: ffff8881f6e2a310
[ 30.970377][ C0] RBP: ffffc90000007ca8 R08: ffff8881f6e2a327 R09: ffff8881f6e2a318
[ 30.978382][ C0] R10: dffffc0000000000 R11: ffffed103edc5465 R12: 0031656c69662f36
[ 30.986381][ C0] R13: 00062cad8d2cc5e6 R14: 1ffff9200016cedc R15: 0031656c69662f2e
[ 30.994484][ C0] FS: 00007f01f71b56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 31.003439][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.010036][ C0] CR2: 00007f70a79d7000 CR3: 000000011dbcc000 CR4: 00000000003506b0
[ 31.018011][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.026006][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.033995][ C0] Call Trace:
[ 31.037312][ C0]
[ 31.040173][ C0] timerqueue_add+0x20e/0x230
[ 31.044876][ C0] enqueue_hrtimer+0xc9/0x240
[ 31.049590][ C0] __hrtimer_run_queues+0x429/0x8e0
[ 31.054830][ C0] ? hrtimer_interrupt+0x8c0/0x8c0
[ 31.059951][ C0] ? ktime_get_update_offsets_now+0x30c/0x320
[ 31.066024][ C0] hrtimer_interrupt+0x3c7/0x8c0
[ 31.070973][ C0] __sysvec_apic_timer_interrupt+0x11e/0x440
[ 31.076966][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0
[ 31.082791][ C0]
[ 31.085723][ C0]
[ 31.088713][ C0] asm_sysvec_apic_timer_interrupt+0x1b/0x20
[ 31.094704][ C0] RIP: 0010:__memmove+0x19c/0x1a0
[ 31.099764][ C0] Code: fa 02 72 16 66 44 8b 1e 66 44 8b 54 16 fe 66 44 89 1f 66 44 89 54 17 fe eb 0c 48 83 fa 01 72 06 44 8a 1e 44 88 1f c3 48 89 d1 a4 c3 00 eb 2e 0f 1f 00 49 89 f9 48 89 d1 83 e2 07 48 c1 e9 03
[ 31.119889][ C0] RSP: 0018:ffffc90002ee73a0 EFLAGS: 00010282
[ 31.125971][ C0] RAX: ffff88811c0f2060 RBX: ffffffffffffffe4 RCX: fffffffffeeabf64
[ 31.133955][ C0] RDX: ffffffffffffffe4 RSI: ffff88811d2460c0 RDI: ffff88811d2460e0
[ 31.141935][ C0] RBP: ffffc90002ee73d0 R08: ffff88811c0f2024 R09: 0000000000000001
[ 31.149904][ C0] R10: dffffc0000000000 R11: ffffed102381e480 R12: 0000000000000000
[ 31.157875][ C0] R13: ffffffff81fbd4c9 R14: ffff88811c0f2040 R15: ffff88811c0f2060
[ 31.165846][ C0] ? ext4_xattr_set_entry+0x979/0x21d0
[ 31.171316][ C0] ? memmove+0x56/0x70
[ 31.175393][ C0] ext4_xattr_set_entry+0x979/0x21d0
[ 31.180684][ C0] ext4_xattr_block_set+0xad3/0x3260
[ 31.185973][ C0] ? __kasan_check_write+0x14/0x20
[ 31.191086][ C0] ? iput+0x620/0x670
[ 31.195067][ C0] ? ext4_xattr_block_find+0x310/0x310
[ 31.200528][ C0] ext4_xattr_set_handle+0x1338/0x1570
[ 31.207251][ C0] ? __cfi_ext4_xattr_set_handle+0x10/0x10
[ 31.213086][ C0] ? __kasan_check_read+0x11/0x20
[ 31.218169][ C0] ? __ext4_journal_start_sb+0x2ed/0x4a0
[ 31.223809][ C0] ext4_xattr_set+0x242/0x320
[ 31.228497][ C0] ? __kasan_kmalloc+0x95/0xb0
[ 31.233260][ C0] ? __kmalloc_node+0xb2/0x1e0
[ 31.238105][ C0] ? __cfi_ext4_xattr_set+0x10/0x10
[ 31.243307][ C0] ? selinux_inode_setxattr+0x5cf/0xbf0
[ 31.248885][ C0] ext4_xattr_trusted_set+0x3c/0x50
[ 31.254115][ C0] ? __cfi_ext4_xattr_trusted_set+0x10/0x10
[ 31.260032][ C0] __vfs_setxattr+0x3f2/0x440
[ 31.264723][ C0] __vfs_setxattr_noperm+0x12a/0x5e0
[ 31.270102][ C0] __vfs_setxattr_locked+0x212/0x230
[ 31.275394][ C0] vfs_setxattr+0x167/0x2e0
[ 31.279935][ C0] ? __cfi_vfs_setxattr+0x10/0x10
[ 31.284961][ C0] ? __kasan_check_write+0x14/0x20
[ 31.290074][ C0] setxattr+0x346/0x360
[ 31.294233][ C0] ? path_setxattr+0x290/0x290
[ 31.299100][ C0] ? __mnt_want_write+0x1e6/0x260
[ 31.304123][ C0] ? mnt_want_write+0x220/0x300
[ 31.308974][ C0] path_setxattr+0x147/0x290
[ 31.313658][ C0] ? simple_xattr_list_add+0x120/0x120
[ 31.319152][ C0] ? __kasan_check_write+0x14/0x20
[ 31.324293][ C0] ? fpregs_restore_userregs+0x128/0x260
[ 31.329948][ C0] __x64_sys_lsetxattr+0xc2/0xe0
[ 31.334902][ C0] x64_sys_call+0x8b7/0x9a0
[ 31.339439][ C0] do_syscall_64+0x4c/0xa0
[ 31.343882][ C0] ? clear_bhb_loop+0x30/0x80
[ 31.348587][ C0] ? clear_bhb_loop+0x30/0x80
[ 31.353287][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 31.359287][ C0] RIP: 0033:0x7f01f639c819
[ 31.363706][ C0] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48
[ 31.383316][ C0] RSP: 002b:00007f01f71b5028 EFLAGS: 00000246 ORIG_RAX: 00000000000000bd
[ 31.391732][ C0] RAX: ffffffffffffffda RBX: 00007f01f6615fa0 RCX: 00007f01f639c819
[ 31.399715][ C0] RDX: 0000200000000500 RSI: 0000200000000180 RDI: 0000200000000540
[ 31.407860][ C0] RBP: 00007f01f6432c91 R08: 0000000000000000 R09: 0000000000000000
[ 31.415845][ C0] R10: 0000000000000361 R11: 0000000000000246 R12: 0000000000000000
[ 31.423821][ C0] R13: 00007f01f6616038 R14: 00007f01f6615fa0 R15: 00007fffb5575fb8
[ 31.431802][ C0]
[ 31.434920][ C0] Modules linked in:
[ 31.438819][ C0] ---[ end trace 0000000000000000 ]---
[ 31.444281][ C0] RIP: 0010:rb_insert_color+0xa6/0x6e0
[ 31.449753][ C0] Code: 4c 8b 3b 41 f6 c7 01 0f 85 11 06 00 00 4c 89 75 b8 4c 89 65 d0 4d 8d 67 08 4d 89 e5 49 c1 ed 03 48 b8 00 00 00 00 00 fc ff df <41> 80 7c 05 00 00 74 08 4c 89 e7 e8 ea c3 c4 fc 4d 8b 34 24 49 39
[ 31.469367][ C0] RSP: 0018:ffffc90000007c50 EFLAGS: 00010003
[ 31.475448][ C0] RAX: dffffc0000000000 RBX: ffffc90000b676e0 RCX: dffffc0000000000
[ 31.483449][ C0] RDX: 0000000000010000 RSI: ffff8881f6e29da0 RDI: ffff8881f6e2a310
[ 31.491453][ C0] RBP: ffffc90000007ca8 R08: ffff8881f6e2a327 R09: ffff8881f6e2a318
[ 31.499440][ C0] R10: dffffc0000000000 R11: ffffed103edc5465 R12: 0031656c69662f36
[ 31.507414][ C0] R13: 00062cad8d2cc5e6 R14: 1ffff9200016cedc R15: 0031656c69662f2e
[ 31.515561][ C0] FS: 00007f01f71b56c0(0000) GS:ffff8881f6e00000(0000) knlGS:0000000000000000
[ 31.524495][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 31.531079][ C0] CR2: 00007f70a79d7000 CR3: 000000011dbcc000 CR4: 00000000003506b0
[ 31.539139][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 31.547105][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 31.555086][ C0] Kernel panic - not syncing: Fatal exception in interrupt
[ 31.562644][ C0] Kernel Offset: disabled
[ 31.566962][ C0] Rebooting in 86400 seconds..