Warning: Permanently added '10.128.0.207' (ED25519) to the list of known hosts. 2026/04/10 10:17:39 parsed 1 programs [ 59.727971][ T28] audit: type=1400 audit(1775816259.289:64): avc: denied { node_bind } for pid=284 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 59.752326][ T28] audit: type=1400 audit(1775816259.289:65): avc: denied { module_request } for pid=284 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 60.490493][ T28] audit: type=1400 audit(1775816260.049:66): avc: denied { mounton } for pid=291 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 60.491613][ T291] cgroup: Unknown subsys name 'net' [ 60.517625][ T28] audit: type=1400 audit(1775816260.049:67): avc: denied { mount } for pid=291 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.551298][ T28] audit: type=1400 audit(1775816260.089:68): avc: denied { unmount } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 60.551469][ T291] cgroup: Unknown subsys name 'devices' [ 60.695954][ T291] cgroup: Unknown subsys name 'hugetlb' [ 60.703871][ T291] cgroup: Unknown subsys name 'rlimit' [ 60.840096][ T28] audit: type=1400 audit(1775816260.399:69): avc: denied { setattr } for pid=291 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 60.867467][ T28] audit: type=1400 audit(1775816260.399:70): avc: denied { create } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.890795][ T28] audit: type=1400 audit(1775816260.399:71): avc: denied { write } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.900421][ T294] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 60.914002][ T28] audit: type=1400 audit(1775816260.399:72): avc: denied { read } for pid=291 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 60.947855][ T28] audit: type=1400 audit(1775816260.399:73): avc: denied { mounton } for pid=291 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 60.981191][ T291] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.691707][ T296] request_module fs-gadgetfs succeeded, but still no fs? [ 62.240544][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.248828][ T339] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.256975][ T339] device bridge_slave_0 entered promiscuous mode [ 62.264774][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.272680][ T339] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.280951][ T339] device bridge_slave_1 entered promiscuous mode [ 62.320848][ T339] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.328988][ T339] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.338290][ T339] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.346836][ T339] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.365702][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 62.374536][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.383109][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.393601][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 62.402823][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.410057][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.420719][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 62.431066][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.440337][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.453261][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 62.464171][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 62.478555][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 62.490575][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 62.500011][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 62.509922][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 62.518673][ T339] device veth0_vlan entered promiscuous mode [ 62.529186][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 62.539066][ T339] device veth1_macvtap entered promiscuous mode [ 62.549117][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 62.560354][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 62.590617][ T339] syz-executor (339) used greatest stack depth: 21184 bytes left 2026/04/10 10:17:42 executed programs: 0 [ 62.858418][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.868509][ T355] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.877643][ T355] device bridge_slave_0 entered promiscuous mode [ 62.890468][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.898284][ T355] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.907042][ T355] device bridge_slave_1 entered promiscuous mode [ 62.955960][ T355] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.963963][ T355] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.972160][ T355] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.980056][ T355] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.004571][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 63.013638][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.022152][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.031871][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 63.040797][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.048699][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 63.058099][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 63.067954][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.075753][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 63.090010][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 63.104335][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 63.119194][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 63.132467][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 63.142198][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 63.150903][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 63.165226][ T355] device veth0_vlan entered promiscuous mode [ 63.176480][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.187233][ T355] device veth1_macvtap entered promiscuous mode [ 63.203828][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.214972][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.246965][ T359] loop2: detected capacity change from 0 to 1024 [ 63.254653][ T359] ======================================================= [ 63.254653][ T359] WARNING: The mand mount option has been deprecated and [ 63.254653][ T359] and is ignored by this kernel. Remove the mand [ 63.254653][ T359] option from the mount to silence this warning. [ 63.254653][ T359] ======================================================= [ 63.306295][ T359] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.319210][ T355] EXT4-fs (loop2): unmounting filesystem. [ 63.334371][ T363] loop2: detected capacity change from 0 to 1024 [ 63.346218][ T363] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.362558][ T355] EXT4-fs (loop2): unmounting filesystem. [ 63.379412][ T366] loop2: detected capacity change from 0 to 1024 [ 63.395507][ T366] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.409228][ T355] EXT4-fs (loop2): unmounting filesystem. [ 63.424941][ T369] loop2: detected capacity change from 0 to 1024 [ 63.436848][ T369] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.449902][ T355] EXT4-fs (loop2): unmounting filesystem. [ 63.466102][ T372] loop2: detected capacity change from 0 to 1024 [ 63.495347][ T372] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.512107][ T355] EXT4-fs (loop2): unmounting filesystem. [ 63.527017][ T375] loop2: detected capacity change from 0 to 1024 [ 63.545187][ T375] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.563931][ T355] EXT4-fs (loop2): unmounting filesystem. [ 63.579843][ T378] loop2: detected capacity change from 0 to 1024 [ 63.600515][ T378] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.614581][ T355] EXT4-fs (loop2): unmounting filesystem. [ 63.630915][ T381] loop2: detected capacity change from 0 to 1024 [ 63.645710][ T381] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.661010][ T355] EXT4-fs (loop2): unmounting filesystem. [ 63.678822][ T384] loop2: detected capacity change from 0 to 1024 [ 63.695369][ T384] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.710924][ T355] EXT4-fs (loop2): unmounting filesystem. [ 63.727623][ T387] loop2: detected capacity change from 0 to 1024 [ 63.747938][ T387] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.760853][ T355] EXT4-fs (loop2): unmounting filesystem. [ 63.797527][ T390] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.811073][ T355] EXT4-fs (loop2): unmounting filesystem. [ 63.837985][ T393] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.851413][ T355] EXT4-fs (loop2): unmounting filesystem. [ 63.885454][ T396] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.899682][ T355] EXT4-fs (loop2): unmounting filesystem. [ 63.907192][ T268] device bridge_slave_1 left promiscuous mode [ 63.918804][ T268] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.927267][ T268] device bridge_slave_0 left promiscuous mode [ 63.934640][ T268] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.939149][ T399] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 63.954718][ T268] device veth1_macvtap left promiscuous mode [ 63.963901][ T268] device veth0_vlan left promiscuous mode [ 63.964921][ T355] EXT4-fs (loop2): unmounting filesystem. [ 64.014765][ T402] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.032146][ T355] EXT4-fs (loop2): unmounting filesystem. [ 64.075971][ T405] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.092069][ T355] EXT4-fs (loop2): unmounting filesystem. [ 64.126083][ T409] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.140733][ T355] EXT4-fs (loop2): unmounting filesystem. [ 64.165446][ T412] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.178604][ T355] EXT4-fs (loop2): unmounting filesystem. [ 64.206412][ T415] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.226196][ T355] EXT4-fs (loop2): unmounting filesystem. [ 64.256466][ T418] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.270176][ T355] EXT4-fs (loop2): unmounting filesystem. [ 64.295298][ T421] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.308959][ T355] EXT4-fs (loop2): unmounting filesystem. [ 64.335646][ T424] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.350083][ T355] EXT4-fs (loop2): unmounting filesystem. [ 64.375619][ T427] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.390331][ T355] EXT4-fs (loop2): unmounting filesystem. [ 64.415377][ T430] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.428076][ T355] EXT4-fs (loop2): unmounting filesystem. [ 64.455362][ T433] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.469404][ T355] EXT4-fs (loop2): unmounting filesystem. [ 64.495126][ T436] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.507987][ T355] EXT4-fs (loop2): unmounting filesystem. [ 64.526846][ T439] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.539942][ T355] EXT4-fs (loop2): unmounting filesystem. [ 64.566675][ T442] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.579695][ T355] EXT4-fs (loop2): unmounting filesystem. [ 64.609867][ T445] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.626895][ T355] EXT4-fs (loop2): unmounting filesystem. [ 64.645705][ T448] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.658602][ T355] EXT4-fs (loop2): unmounting filesystem. [ 64.686953][ T451] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.700738][ T355] EXT4-fs (loop2): unmounting filesystem. [ 64.725308][ T454] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 64.738299][ T355] EXT4-fs (loop2): unmounting filesystem. 2026/04/10 10:17:47 executed programs: 162 [ 68.277918][ T877] set_capacity_and_notify: 156 callbacks suppressed [ 68.277946][ T877] loop2: detected capacity change from 0 to 1024 [ 68.327658][ T881] loop2: detected capacity change from 0 to 1024 [ 68.363104][ T884] loop2: detected capacity change from 0 to 1024 [ 68.392186][ T887] loop2: detected capacity change from 0 to 1024 [ 68.438824][ T891] loop2: detected capacity change from 0 to 1024 [ 68.466951][ T894] loop2: detected capacity change from 0 to 1024 [ 68.496774][ T897] loop2: detected capacity change from 0 to 1024 [ 68.530513][ T900] loop2: detected capacity change from 0 to 1024 [ 68.578635][ T904] loop2: detected capacity change from 0 to 1024 [ 68.609022][ T907] loop2: detected capacity change from 0 to 1024 [ 72.168270][ T1357] ================================================================== [ 72.177443][ T1357] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0x979/0x21d0 [ 72.185262][ T1357] Read of size 18446744073709551588 at addr ffff88811388b040 by task syz.2.369/1357 [ 72.196104][ T1357] [ 72.198802][ T1357] CPU: 0 PID: 1357 Comm: syz.2.369 Not tainted syzkaller #0 [ 72.206974][ T1357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 72.218406][ T1357] Call Trace: [ 72.221699][ T1357] [ 72.224986][ T1357] __dump_stack+0x21/0x24 [ 72.229703][ T1357] dump_stack_lvl+0x110/0x170 [ 72.234576][ T1357] ? __cfi_dump_stack_lvl+0x8/0x8 [ 72.240239][ T1357] ? kasan_save_alloc_info+0x25/0x30 [ 72.245980][ T1357] ? ext4_xattr_block_set+0x9d5/0x3260 [ 72.251882][ T1357] ? ext4_xattr_set+0x242/0x320 [ 72.257172][ T1357] ? ext4_xattr_security_set+0x3c/0x50 [ 72.264735][ T1357] ? ext4_xattr_set_entry+0x979/0x21d0 [ 72.270729][ T1357] print_address_description+0x71/0x200 [ 72.277830][ T1357] print_report+0x4a/0x60 [ 72.282590][ T1357] kasan_report+0x122/0x150 [ 72.287704][ T1357] ? ext4_xattr_set_entry+0x979/0x21d0 [ 72.294052][ T1357] ? ext4_xattr_set_entry+0x979/0x21d0 [ 72.299781][ T1357] kasan_check_range+0x249/0x2a0 [ 72.305352][ T1357] ? ext4_xattr_set_entry+0x979/0x21d0 [ 72.311112][ T1357] memmove+0x2d/0x70 [ 72.315281][ T1357] ext4_xattr_set_entry+0x979/0x21d0 [ 72.320747][ T1357] ext4_xattr_block_set+0xad3/0x3260 [ 72.327021][ T1357] ? __kasan_check_write+0x14/0x20 [ 72.333006][ T1357] ? iput+0x620/0x670 [ 72.338120][ T1357] ? ext4_xattr_block_find+0x310/0x310 [ 72.343977][ T1357] ext4_xattr_set_handle+0xe3b/0x1570 [ 72.350325][ T1357] ? __cfi_ext4_xattr_set_handle+0x10/0x10 [ 72.357390][ T1357] ? __kasan_check_read+0x11/0x20 [ 72.362994][ T1357] ? __ext4_journal_start_sb+0x2ed/0x4a0 [ 72.370075][ T1357] ext4_xattr_set+0x242/0x320 [ 72.375901][ T1357] ? ns_capable+0x8c/0xf0 [ 72.381613][ T1357] ? __cfi_ext4_xattr_set+0x10/0x10 [ 72.387160][ T1357] ? selinux_inode_setxattr+0x5cf/0xbf0 [ 72.393227][ T1357] ext4_xattr_security_set+0x3c/0x50 [ 72.398862][ T1357] ? __cfi_ext4_xattr_security_set+0x10/0x10 [ 72.405447][ T1357] __vfs_setxattr+0x3f2/0x440 [ 72.411087][ T1357] __vfs_setxattr_noperm+0x12a/0x5e0 [ 72.417638][ T1357] __vfs_setxattr_locked+0x212/0x230 [ 72.423424][ T1357] vfs_setxattr+0x167/0x2e0 [ 72.429041][ T1357] ? __cfi_vfs_setxattr+0x10/0x10 [ 72.435030][ T1357] ? __kasan_check_write+0x14/0x20 [ 72.441460][ T1357] setxattr+0x346/0x360 [ 72.446156][ T1357] ? path_setxattr+0x290/0x290 [ 72.451493][ T1357] ? __mnt_want_write+0x1e6/0x260 [ 72.457123][ T1357] ? mnt_want_write+0x220/0x300 [ 72.462931][ T1357] path_setxattr+0x147/0x290 [ 72.468349][ T1357] ? simple_xattr_list_add+0x120/0x120 [ 72.473910][ T1357] __x64_sys_setxattr+0xc5/0xe0 [ 72.479118][ T1357] x64_sys_call+0x633/0x9a0 [ 72.484527][ T1357] do_syscall_64+0x4c/0xa0 [ 72.489138][ T1357] ? clear_bhb_loop+0x30/0x80 [ 72.494248][ T1357] ? clear_bhb_loop+0x30/0x80 [ 72.499651][ T1357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.506736][ T1357] RIP: 0033:0x7f39b399c819 [ 72.511579][ T1357] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 72.533189][ T1357] RSP: 002b:00007ffc69e6c668 EFLAGS: 00000246 ORIG_RAX: 00000000000000bc [ 72.542724][ T1357] RAX: ffffffffffffffda RBX: 00007f39b3c15fa0 RCX: 00007f39b399c819 [ 72.552380][ T1357] RDX: 00002000000013c0 RSI: 0000200000000140 RDI: 0000200000000100 [ 72.561978][ T1357] RBP: 00007f39b3a32c91 R08: 0000000000000000 R09: 0000000000000000 [ 72.571605][ T1357] R10: 0000000000000700 R11: 0000000000000246 R12: 0000000000000000 [ 72.583292][ T1357] R13: 00007f39b3c15fac R14: 00007f39b3c15fa0 R15: 00007f39b3c15fa0 [ 72.592256][ T1357] [ 72.595362][ T1357] [ 72.597721][ T1357] Allocated by task 1357: [ 72.602817][ T1357] kasan_set_track+0x4b/0x70 [ 72.607827][ T1357] kasan_save_alloc_info+0x25/0x30 [ 72.614276][ T1357] __kasan_kmalloc+0x95/0xb0 [ 72.619351][ T1357] __kmalloc_node_track_caller+0xb1/0x1e0 [ 72.626046][ T1357] kmemdup+0x2b/0x60 [ 72.631099][ T1357] ext4_xattr_block_set+0x9d5/0x3260 [ 72.637519][ T1357] ext4_xattr_set_handle+0xe3b/0x1570 [ 72.643417][ T1357] ext4_xattr_set+0x242/0x320 [ 72.648349][ T1357] ext4_xattr_security_set+0x3c/0x50 [ 72.654419][ T1357] __vfs_setxattr+0x3f2/0x440 [ 72.660061][ T1357] __vfs_setxattr_noperm+0x12a/0x5e0 [ 72.665959][ T1357] __vfs_setxattr_locked+0x212/0x230 [ 72.671866][ T1357] vfs_setxattr+0x167/0x2e0 [ 72.676806][ T1357] setxattr+0x346/0x360 [ 72.680975][ T1357] path_setxattr+0x147/0x290 [ 72.685926][ T1357] __x64_sys_setxattr+0xc5/0xe0 [ 72.691208][ T1357] x64_sys_call+0x633/0x9a0 [ 72.696156][ T1357] do_syscall_64+0x4c/0xa0 [ 72.700724][ T1357] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 72.707753][ T1357] [ 72.710339][ T1357] The buggy address belongs to the object at ffff88811388b000 [ 72.710339][ T1357] which belongs to the cache kmalloc-1k of size 1024 [ 72.726207][ T1357] The buggy address is located 64 bytes inside of [ 72.726207][ T1357] 1024-byte region [ffff88811388b000, ffff88811388b400) [ 72.741058][ T1357] [ 72.743728][ T1357] The buggy address belongs to the physical page: [ 72.751032][ T1357] page:ffffea00044e2200 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x113888 [ 72.762232][ T1357] head:ffffea00044e2200 order:3 compound_mapcount:0 compound_pincount:0 [ 72.772377][ T1357] flags: 0x4000000000010200(slab|head|zone=1) [ 72.779981][ T1357] raw: 4000000000010200 dead000000000100 dead000000000122 ffff888100043080 [ 72.789523][ T1357] raw: 0000000000000000 0000000080100010 00000001ffffffff 0000000000000000 [ 72.799056][ T1357] page dumped because: kasan: bad access detected [ 72.806270][ T1357] page_owner tracks the page as allocated [ 72.813462][ T1357] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 103, tgid 103 (udevd), ts 5021259337, free_ts 0 [ 72.835352][ T1357] post_alloc_hook+0x1f5/0x210 [ 72.840824][ T1357] prep_new_page+0x1c/0x110 [ 72.846114][ T1357] get_page_from_freelist+0x2d12/0x2d80 [ 72.853119][ T1357] __alloc_pages+0x1fa/0x610 [ 72.859319][ T1357] alloc_slab_page+0x6e/0xf0 [ 72.864781][ T1357] new_slab+0x98/0x3d0 [ 72.869938][ T1357] ___slab_alloc+0x6bd/0xb20 [ 72.875595][ T1357] __slab_alloc+0x5e/0xa0 [ 72.882013][ T1357] __kmem_cache_alloc_node+0x203/0x2c0 [ 72.888136][ T1357] __kmalloc_node_track_caller+0xa0/0x1e0 [ 72.894627][ T1357] __alloc_skb+0x236/0x4b0 [ 72.900135][ T1357] netlink_sendmsg+0x635/0xbd0 [ 72.906206][ T1357] ____sys_sendmsg+0x5cc/0x990 [ 72.911753][ T1357] ___sys_sendmsg+0x2a2/0x360 [ 72.917664][ T1357] __x64_sys_sendmsg+0x205/0x2d0 [ 72.923647][ T1357] x64_sys_call+0x171/0x9a0 [ 72.929061][ T1357] page_owner free stack trace missing [ 72.934771][ T1357] [ 72.937399][ T1357] Memory state around the buggy address: [ 72.944542][ T1357] ffff88811388af00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 72.954640][ T1357] ffff88811388af80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 72.966727][ T1357] >ffff88811388b000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 72.976102][ T1357] ^ [ 72.982774][ T1357] ffff88811388b080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 72.992284][ T1357] ffff88811388b100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 73.001271][ T1357] ================================================================== [ 73.012217][ T1357] Disabling lock debugging due to kernel taint [ 73.022947][ T28] kauditd_printk_skb: 34 callbacks suppressed [ 73.022959][ T28] audit: type=1400 audit(1775816272.579:108): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 2026/04/10 10:17:52 executed programs: 355 [ 73.054157][ T28] audit: type=1400 audit(1775816272.579:109): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.079095][ T28] audit: type=1400 audit(1775816272.579:110): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.102426][ T28] audit: type=1400 audit(1775816272.579:111): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 73.127323][ T28] audit: type=1400 audit(1775816272.579:112): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.150845][ T28] audit: type=1400 audit(1775816272.579:113): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.178806][ T28] audit: type=1400 audit(1775816272.579:114): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 73.289401][ T1378] set_capacity_and_notify: 151 callbacks suppressed [ 73.289417][ T1378] loop2: detected capacity change from 0 to 1024 [ 73.317291][ T1381] loop2: detected capacity change from 0 to 1024 [ 73.348196][ T1385] loop2: detected capacity change from 0 to 1024 [ 73.378769][ T1388] loop2: detected capacity change from 0 to 1024 [ 73.411176][ T1391] loop2: detected capacity change from 0 to 1024 [ 73.449728][ T1395] loop2: detected capacity change from 0 to 1024 [ 73.490580][ T1399] loop2: detected capacity change from 0 to 1024 [ 73.522853][ T1403] loop2: detected capacity change from 0 to 1024 [ 73.546665][ T1406] loop2: detected capacity change from 0 to 1024 [ 73.590440][ T1410] loop2: detected capacity change from 0 to 1024 2026/04/10 10:17:57 executed programs: 575 [ 78.328383][ T2016] set_capacity_and_notify: 195 callbacks suppressed [ 78.328395][ T2016] loop2: detected capacity change from 0 to 1024 [ 78.371758][ T2019] loop2: detected capacity change from 0 to 1024 [ 78.410122][ T2023] loop2: detected capacity change from 0 to 1024 [ 78.443324][ T2026] loop2: detected capacity change from 0 to 1024 [ 78.487844][ T2029] loop2: detected capacity change from 0 to 1024 [ 78.522476][ T2032] loop2: detected capacity change from 0 to 1024 [ 78.550720][ T2035] loop2: detected capacity change from 0 to 1024 [ 78.587614][ T2039] loop2: detected capacity change from 0 to 1024 [ 78.622908][ T2042] loop2: detected capacity change from 0 to 1024 [ 78.659505][ T2046] loop2: detected capacity change from 0 to 1024 [ 78.792003][ T2059] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.801108][ T2059] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.810864][ T2059] device bridge_slave_0 entered promiscuous mode [ 78.819433][ T2059] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.826855][ T2059] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.834803][ T2059] device bridge_slave_1 entered promiscuous mode [ 78.871777][ T2059] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.880782][ T2059] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.889497][ T2059] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.899027][ T2059] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.925419][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 78.934662][ T406] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.943133][ T406] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.954622][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 78.964929][ T406] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.973007][ T406] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.983896][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 78.996183][ T406] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.003819][ T406] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.017608][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 79.028267][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 79.045462][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 79.057205][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.066198][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.075087][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.085301][ T2059] device veth0_vlan entered promiscuous mode [ 79.096752][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.106718][ T2059] device veth1_macvtap entered promiscuous mode [ 79.118379][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 79.129189][ T406] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 79.357391][ T268] device bridge_slave_1 left promiscuous mode [ 79.365790][ T268] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.375625][ T268] device bridge_slave_0 left promiscuous mode [ 79.384381][ T268] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.395274][ T268] device veth1_macvtap left promiscuous mode [ 79.407761][ T268] device veth0_vlan left promiscuous mode