Warning: Permanently added '10.128.0.223' (ED25519) to the list of known hosts. 2024/12/28 01:21:00 ignoring optional flag "sandboxArg"="0" 2024/12/28 01:21:00 parsed 1 programs [ 21.387186][ T30] audit: type=1400 audit(1735348860.617:66): avc: denied { node_bind } for pid=286 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 22.261786][ T30] audit: type=1400 audit(1735348861.497:67): avc: denied { integrity } for pid=292 comm="syz-executor" lockdown_reason="debugfs access" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=lockdown permissive=1 [ 22.285310][ T30] audit: type=1400 audit(1735348861.517:68): avc: denied { mounton } for pid=292 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=1926 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 22.286628][ T292] cgroup: Unknown subsys name 'net' [ 22.307749][ T30] audit: type=1400 audit(1735348861.517:69): avc: denied { mount } for pid=292 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.334962][ T292] cgroup: Unknown subsys name 'devices' [ 22.334969][ T30] audit: type=1400 audit(1735348861.547:70): avc: denied { unmount } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 22.569504][ T292] cgroup: Unknown subsys name 'hugetlb' [ 22.574906][ T292] cgroup: Unknown subsys name 'rlimit' [ 22.804458][ T30] audit: type=1400 audit(1735348862.037:71): avc: denied { setattr } for pid=292 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=250 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 22.827431][ T30] audit: type=1400 audit(1735348862.037:72): avc: denied { create } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.840005][ T297] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 22.848026][ T30] audit: type=1400 audit(1735348862.037:73): avc: denied { write } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.876045][ T30] audit: type=1400 audit(1735348862.037:74): avc: denied { read } for pid=292 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 22.896075][ T30] audit: type=1400 audit(1735348862.037:75): avc: denied { module_request } for pid=292 comm="syz-executor" kmod="netdev-wpan0" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 22.917936][ T292] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 23.294336][ T305] request_module fs-gadgetfs succeeded, but still no fs? [ 23.618482][ T318] syz-executor (318) used greatest stack depth: 20800 bytes left [ 23.866358][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.873722][ T345] bridge0: port 1(bridge_slave_0) entered disabled state [ 23.881046][ T345] device bridge_slave_0 entered promiscuous mode [ 23.887689][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.894510][ T345] bridge0: port 2(bridge_slave_1) entered disabled state [ 23.901740][ T345] device bridge_slave_1 entered promiscuous mode [ 23.944297][ T345] bridge0: port 2(bridge_slave_1) entered blocking state [ 23.951147][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 23.958255][ T345] bridge0: port 1(bridge_slave_0) entered blocking state [ 23.965026][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 23.985786][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 23.993304][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.000304][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.009078][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.017027][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.023869][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.032074][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.040117][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.046939][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.058939][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.067996][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.081531][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.093210][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.101166][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.108547][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.116572][ T345] device veth0_vlan entered promiscuous mode [ 24.126495][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.139317][ T345] device veth1_macvtap entered promiscuous mode [ 24.148755][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.158433][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.192626][ T345] syz-executor (345) used greatest stack depth: 20688 bytes left 2024/12/28 01:21:03 executed programs: 0 [ 24.438004][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.444848][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.452072][ T360] device bridge_slave_0 entered promiscuous mode [ 24.458802][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.465629][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.472841][ T360] device bridge_slave_1 entered promiscuous mode [ 24.522078][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.529045][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.536129][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.542944][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.558279][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 24.565346][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 24.579597][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 24.586944][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 24.594844][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 24.602988][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 24.610929][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 24.617773][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 24.625859][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 24.634218][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 24.642217][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 24.649058][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 24.663954][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 24.672246][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 24.688173][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 24.696229][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 24.704934][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 24.713228][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 24.724910][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 24.732733][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 24.741743][ T360] device veth0_vlan entered promiscuous mode [ 24.748624][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 24.756065][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 24.766732][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 24.775084][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 24.784096][ T360] device veth1_macvtap entered promiscuous mode [ 24.794812][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 24.802423][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 24.810483][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 24.819732][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 24.828140][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 24.855221][ T366] loop2: detected capacity change from 0 to 512 [ 24.931861][ T366] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 24.939035][ T366] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 24.947617][ T366] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 24.955365][ T366] System zones: 1-12 [ 24.960509][ T366] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.16: corrupted in-inode xattr [ 24.973405][ T366] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.16: couldn't read orphan inode 15 (err -117) [ 24.985178][ T366] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 25.013569][ T360] ================================================================== [ 25.021441][ T360] BUG: KASAN: use-after-free in ext4_htree_fill_tree+0x131b/0x13e0 [ 25.029165][ T360] Read of size 1 at addr ffff88810f7cea67 by task syz-executor/360 [ 25.036888][ T360] [ 25.039065][ T360] CPU: 1 PID: 360 Comm: syz-executor Not tainted 5.15.173-syzkaller-00161-gb4bd207b0380 #0 [ 25.048868][ T360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 25.058766][ T360] Call Trace: [ 25.061884][ T360] [ 25.064666][ T360] dump_stack_lvl+0x151/0x1c0 [ 25.069177][ T360] ? io_uring_drop_tctx_refs+0x190/0x190 [ 25.074645][ T360] ? panic+0x760/0x760 [ 25.078571][ T360] print_address_description+0x87/0x3b0 [ 25.083929][ T360] kasan_report+0x179/0x1c0 [ 25.088271][ T360] ? ext4_htree_fill_tree+0x131b/0x13e0 [ 25.093652][ T360] ? ext4_htree_fill_tree+0x131b/0x13e0 [ 25.099031][ T360] __asan_report_load1_noabort+0x14/0x20 [ 25.104502][ T360] ext4_htree_fill_tree+0x131b/0x13e0 [ 25.109708][ T360] ? ext4_handle_dirty_dirblock+0x6d0/0x6d0 [ 25.115438][ T360] ? __kasan_kmalloc+0x9/0x10 [ 25.119950][ T360] ? ext4_readdir+0x523/0x3960 [ 25.124553][ T360] ext4_readdir+0x2f75/0x3960 [ 25.129063][ T360] ? down_read_killable+0x1035/0x1b10 [ 25.134288][ T360] ? down_read_interruptible+0x1bf0/0x1bf0 [ 25.139908][ T360] ? numa_migrate_prep+0xe0/0xe0 [ 25.144685][ T360] ? ext4_dir_llseek+0x540/0x540 [ 25.149459][ T360] ? __kasan_check_read+0x11/0x20 [ 25.154323][ T360] ? security_file_permission+0x86/0xb0 [ 25.159697][ T360] iterate_dir+0x265/0x600 [ 25.163950][ T360] ? ext4_dir_llseek+0x540/0x540 [ 25.168726][ T360] __se_sys_getdents64+0x1c1/0x460 [ 25.173674][ T360] ? __x64_sys_getdents64+0x90/0x90 [ 25.178706][ T360] ? filldir+0x680/0x680 [ 25.182787][ T360] __x64_sys_getdents64+0x7b/0x90 [ 25.187650][ T360] x64_sys_call+0x5ae/0x9a0 [ 25.191986][ T360] do_syscall_64+0x3b/0xb0 [ 25.196239][ T360] ? clear_bhb_loop+0x35/0x90 [ 25.200751][ T360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 25.206481][ T360] RIP: 0033:0x7f5563096693 [ 25.210735][ T360] Code: c1 66 0f 1f 44 00 00 48 83 c4 08 48 89 ef 5b 5d e9 82 3e f8 ff 66 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 a8 ff ff ff f7 d8 [ 25.230173][ T360] RSP: 002b:00007fff791c08e8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 25.238422][ T360] RAX: ffffffffffffffda RBX: 000055558690f4e0 RCX: 00007f5563096693 [ 25.246236][ T360] RDX: 0000000000008000 RSI: 000055558690f4e0 RDI: 0000000000000005 [ 25.254044][ T360] RBP: 000055558690f4b4 R08: 0000000000028b61 R09: 0000000000000000 [ 25.261852][ T360] R10: 00007f5563229ca0 R11: 0000000000000293 R12: ffffffffffffffa8 [ 25.269663][ T360] R13: 0000000000000010 R14: 000055558690f4b0 R15: 0000000000000001 [ 25.277488][ T360] [ 25.280342][ T360] [ 25.282511][ T360] Allocated by task 357: [ 25.286592][ T360] __kasan_slab_alloc+0xb1/0xe0 [ 25.291276][ T360] slab_post_alloc_hook+0x53/0x2c0 [ 25.296221][ T360] kmem_cache_alloc+0xf5/0x250 [ 25.300821][ T360] security_inode_alloc+0x29/0x120 [ 25.305769][ T360] inode_init_always+0x76d/0x9d0 [ 25.310543][ T360] new_inode_pseudo+0x93/0x220 [ 25.315145][ T360] new_inode+0x28/0x1c0 [ 25.319134][ T360] proc_get_inode+0x24/0x6d0 [ 25.323561][ T360] proc_lookup_de+0x253/0x300 [ 25.328076][ T360] proc_lookup+0xbe/0xe0 [ 25.332154][ T360] proc_root_lookup+0x3a/0x50 [ 25.336665][ T360] __lookup_slow+0x2b9/0x400 [ 25.341107][ T360] lookup_slow+0x5a/0x80 [ 25.345174][ T360] walk_component+0x48c/0x610 [ 25.349686][ T360] link_path_walk+0x642/0xd90 [ 25.354198][ T360] path_lookupat+0xa0/0x450 [ 25.358538][ T360] filename_lookup+0x230/0x5c0 [ 25.363137][ T360] user_path_at_empty+0x43/0x1a0 [ 25.367911][ T360] __se_sys_mount+0x285/0x3b0 [ 25.372423][ T360] __x64_sys_mount+0xbf/0xd0 [ 25.376850][ T360] x64_sys_call+0x49d/0x9a0 [ 25.381191][ T360] do_syscall_64+0x3b/0xb0 [ 25.385443][ T360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 25.391174][ T360] [ 25.393344][ T360] Freed by task 13: [ 25.396990][ T360] kasan_set_track+0x4b/0x70 [ 25.401413][ T360] kasan_set_free_info+0x23/0x40 [ 25.406187][ T360] ____kasan_slab_free+0x126/0x160 [ 25.411135][ T360] __kasan_slab_free+0x11/0x20 [ 25.415734][ T360] slab_free_freelist_hook+0xbd/0x190 [ 25.420944][ T360] kmem_cache_free+0x115/0x330 [ 25.425573][ T360] inode_free_by_rcu+0x1c/0x20 [ 25.430158][ T360] rcu_do_batch+0x57a/0xc10 [ 25.434485][ T360] rcu_core+0x517/0x1020 [ 25.438562][ T360] rcu_core_si+0x9/0x10 [ 25.442555][ T360] handle_softirqs+0x25e/0x5c0 [ 25.447159][ T360] run_ksoftirqd+0x28/0x40 [ 25.451407][ T360] smpboot_thread_fn+0x466/0x8d0 [ 25.456179][ T360] kthread+0x421/0x510 [ 25.460088][ T360] ret_from_fork+0x1f/0x30 [ 25.464375][ T360] [ 25.466508][ T360] Last potentially related work creation: [ 25.472063][ T360] kasan_save_stack+0x3b/0x60 [ 25.476575][ T360] __kasan_record_aux_stack+0xd3/0xf0 [ 25.481784][ T360] kasan_record_aux_stack_noalloc+0xb/0x10 [ 25.487424][ T360] call_rcu+0x123/0x10b0 [ 25.491504][ T360] security_inode_free+0xb3/0xd0 [ 25.496278][ T360] __destroy_inode+0x179/0x4e0 [ 25.500877][ T360] evict+0x7d6/0x930 [ 25.504613][ T360] iput+0x63b/0x7e0 [ 25.508254][ T360] dentry_unlink_inode+0x34e/0x430 [ 25.513204][ T360] __dentry_kill+0x447/0x660 [ 25.517627][ T360] shrink_dentry_list+0x35e/0x4b0 [ 25.522496][ T360] shrink_dcache_parent+0xc9/0x340 [ 25.527437][ T360] do_one_tree+0x27/0xe0 [ 25.531517][ T360] shrink_dcache_for_umount+0x7d/0x120 [ 25.536814][ T360] generic_shutdown_super+0x66/0x330 [ 25.541932][ T360] kill_anon_super+0x3d/0x70 [ 25.546358][ T360] proc_kill_sb+0x8d/0xd0 [ 25.550523][ T360] deactivate_locked_super+0xad/0x110 [ 25.555731][ T360] deactivate_super+0xbe/0xf0 [ 25.560247][ T360] cleanup_mnt+0x45c/0x510 [ 25.564508][ T360] __cleanup_mnt+0x19/0x20 [ 25.568751][ T360] task_work_run+0x129/0x190 [ 25.573178][ T360] do_exit+0xc48/0x2ca0 [ 25.577173][ T360] do_group_exit+0x141/0x310 [ 25.581596][ T360] get_signal+0x7a3/0x1630 [ 25.585846][ T360] arch_do_signal_or_restart+0xbd/0x1680 [ 25.591315][ T360] exit_to_user_mode_loop+0xa0/0xe0 [ 25.596349][ T360] exit_to_user_mode_prepare+0x5a/0xa0 [ 25.601644][ T360] syscall_exit_to_user_mode+0x26/0x160 [ 25.607032][ T360] do_syscall_64+0x47/0xb0 [ 25.611280][ T360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 25.617010][ T360] [ 25.619176][ T360] The buggy address belongs to the object at ffff88810f7cea50 [ 25.619176][ T360] which belongs to the cache lsm_inode_cache of size 56 [ 25.633325][ T360] The buggy address is located 23 bytes inside of [ 25.633325][ T360] 56-byte region [ffff88810f7cea50, ffff88810f7cea88) [ 25.646256][ T360] The buggy address belongs to the page: [ 25.651737][ T360] page:ffffea00043df380 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f7ce [ 25.661792][ T360] flags: 0x4000000000000200(slab|zone=1) [ 25.667273][ T360] raw: 4000000000000200 0000000000000000 dead000000000122 ffff888100186300 [ 25.675702][ T360] raw: 0000000000000000 00000000002e002e 00000001ffffffff 0000000000000000 [ 25.684097][ T360] page dumped because: kasan: bad access detected [ 25.690355][ T360] page_owner tracks the page as allocated [ 25.695901][ T360] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_HARDWALL), pid 357, ts 24240561104, free_ts 24233862053 [ 25.712915][ T360] post_alloc_hook+0x1a3/0x1b0 [ 25.717518][ T360] prep_new_page+0x1b/0x110 [ 25.721850][ T360] get_page_from_freelist+0x3550/0x35d0 [ 25.727232][ T360] __alloc_pages+0x27e/0x8f0 [ 25.731662][ T360] new_slab+0x9a/0x4e0 [ 25.735569][ T360] ___slab_alloc+0x39e/0x830 [ 25.739990][ T360] __slab_alloc+0x4a/0x90 [ 25.744155][ T360] kmem_cache_alloc+0x139/0x250 [ 25.748843][ T360] security_inode_alloc+0x29/0x120 [ 25.753789][ T360] inode_init_always+0x76d/0x9d0 [ 25.758563][ T360] new_inode_pseudo+0x93/0x220 [ 25.763167][ T360] sock_create_lite+0x8d/0x500 [ 25.767762][ T360] __netlink_kernel_create+0x12f/0x910 [ 25.773068][ T360] uevent_net_init+0xe0/0x2d0 [ 25.777570][ T360] ops_init+0x1cd/0x4a0 [ 25.781660][ T360] setup_net+0x34b/0xb50 [ 25.785730][ T360] page last free stack trace: [ 25.790242][ T360] free_unref_page_prepare+0x7c8/0x7d0 [ 25.795540][ T360] free_unref_page_list+0x14b/0xa60 [ 25.800570][ T360] release_pages+0x1310/0x1370 [ 25.805174][ T360] free_pages_and_swap_cache+0x8a/0xa0 [ 25.810465][ T360] tlb_finish_mmu+0x177/0x320 [ 25.814982][ T360] exit_mmap+0x40d/0x940 [ 25.819057][ T360] __mmput+0x95/0x310 [ 25.822876][ T360] mmput+0x5b/0x170 [ 25.826524][ T360] do_exit+0xb9c/0x2ca0 [ 25.830515][ T360] do_group_exit+0x141/0x310 [ 25.834942][ T360] __x64_sys_exit_group+0x3f/0x40 [ 25.839801][ T360] x64_sys_call+0x610/0x9a0 [ 25.844139][ T360] do_syscall_64+0x3b/0xb0 [ 25.848394][ T360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 25.854123][ T360] [ 25.856292][ T360] Memory state around the buggy address: [ 25.861767][ T360] ffff88810f7ce900: fb fb fb fb fb fc fc fc fc 00 00 00 00 00 00 00 [ 25.869658][ T360] ffff88810f7ce980: fc fc fc fc 00 00 00 00 00 00 00 fc fc fc fc fa [ 25.877561][ T360] >ffff88810f7cea00: fb fb fb fb fb fb fc fc fc fc fa fb fb fb fb fb [ 25.885457][ T360] ^ [ 25.892490][ T360] ffff88810f7cea80: fb fc fc fc fc 00 00 00 00 00 00 00 fc fc fc fc [ 25.900385][ T360] ffff88810f7ceb00: 00 00 00 00 00 00 00 fc fc fc fc 00 00 00 00 00 [ 25.908282][ T360] ================================================================== [ 25.916177][ T360] Disabling lock debugging due to kernel taint [ 26.105898][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.113336][ T371] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.120560][ T371] device bridge_slave_0 entered promiscuous mode [ 26.129019][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.135840][ T371] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.143109][ T371] device bridge_slave_1 entered promiscuous mode [ 26.188247][ T371] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.195169][ T371] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.202274][ T371] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.209065][ T371] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.226875][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.234610][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.241825][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.254446][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.262610][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.269445][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.278093][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.286102][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.292957][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.308609][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.317771][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.330811][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.344975][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.352892][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.360132][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.368304][ T371] device veth0_vlan entered promiscuous mode [ 26.377959][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.390589][ T371] device veth1_macvtap entered promiscuous mode [ 26.399639][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.409590][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.418846][ T10] device bridge_slave_1 left promiscuous mode [ 26.424766][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.432286][ T10] device bridge_slave_0 left promiscuous mode [ 26.438426][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.446180][ T10] device veth1_macvtap left promiscuous mode [ 26.452280][ T10] device veth0_vlan left promiscuous mode [ 26.548109][ T376] loop3: detected capacity change from 0 to 512 [ 26.628462][ T376] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 26.635444][ T376] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 26.644106][ T376] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 26.651906][ T376] System zones: 1-12 [ 26.656103][ T376] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.19: corrupted in-inode xattr [ 26.667861][ T376] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.19: couldn't read orphan inode 15 (err -117) [ 26.679842][ T376] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 26.906716][ T379] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.913688][ T379] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.920978][ T379] device bridge_slave_0 entered promiscuous mode [ 26.934022][ T379] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.941010][ T379] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.948698][ T379] device bridge_slave_1 entered promiscuous mode [ 27.008675][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.016002][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.028040][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.036427][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.044473][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.051323][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.058669][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.067012][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.075314][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.083294][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.090175][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.101641][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.113451][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.126987][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.138449][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.146319][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.153833][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.163933][ T379] device veth0_vlan entered promiscuous mode [ 27.173343][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.182171][ T379] device veth1_macvtap entered promiscuous mode [ 27.191063][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.202945][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.229718][ T385] loop4: detected capacity change from 0 to 512 [ 27.310499][ T385] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 27.317780][ T385] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 27.326285][ T385] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 27.334056][ T385] System zones: 1-12 [ 27.338312][ T385] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2219: inode #15: comm syz.4.23: corrupted in-inode xattr [ 27.350122][ T385] EXT4-fs error (device loop4): ext4_orphan_get:1406: comm syz.4.23: couldn't read orphan inode 15 (err -117) [ 27.362278][ T385] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 27.408908][ T10] device bridge_slave_1 left promiscuous mode [ 27.414841][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.422222][ T10] device bridge_slave_0 left promiscuous mode [ 27.428221][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.435744][ T10] device bridge_slave_1 left promiscuous mode [ 27.441740][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.448907][ T10] device bridge_slave_0 left promiscuous mode [ 27.454804][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.462963][ T10] device veth1_macvtap left promiscuous mode [ 27.468796][ T10] device veth0_vlan left promiscuous mode [ 27.474563][ T10] device veth1_macvtap left promiscuous mode [ 27.480384][ T10] device veth0_vlan left promiscuous mode [ 27.693640][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.700644][ T388] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.708028][ T388] device bridge_slave_0 entered promiscuous mode [ 27.714868][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.721763][ T388] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.728972][ T388] device bridge_slave_1 entered promiscuous mode [ 27.772873][ T388] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.779729][ T388] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.786801][ T388] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.793623][ T388] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.812702][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.820163][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.827119][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.836276][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.844223][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.851187][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.859559][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.867551][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.874396][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.886194][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.895776][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.909356][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.920799][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.928603][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.935745][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.944345][ T388] device veth0_vlan entered promiscuous mode [ 27.953665][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.961774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.970795][ T388] device veth1_macvtap entered promiscuous mode [ 27.979679][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.987120][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.995418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.004827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 28.012939][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.049208][ T395] loop5: detected capacity change from 0 to 512 [ 28.078578][ T395] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 28.085799][ T395] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 28.095347][ T395] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 28.103157][ T395] System zones: 1-12 [ 28.107448][ T395] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2219: inode #15: comm syz.5.25: corrupted in-inode xattr [ 28.119234][ T395] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.25: couldn't read orphan inode 15 (err -117) [ 28.130866][ T395] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 28.366579][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.373517][ T400] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.380814][ T400] device bridge_slave_0 entered promiscuous mode [ 28.388912][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.395745][ T400] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.402967][ T400] device bridge_slave_1 entered promiscuous mode [ 28.444785][ T400] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.451634][ T400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.458742][ T400] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.465511][ T400] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.486206][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.493865][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.500938][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.510887][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.519039][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.525865][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.534544][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.542485][ T393] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.549326][ T393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.563060][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.571878][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.584806][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.596459][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.604345][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.611850][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.619893][ T8] device bridge_slave_1 left promiscuous mode [ 28.625807][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.633158][ T8] device bridge_slave_0 left promiscuous mode [ 28.639131][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.646554][ T8] device veth1_macvtap left promiscuous mode [ 28.652631][ T8] device veth0_vlan left promiscuous mode [ 28.730590][ T400] device veth0_vlan entered promiscuous mode [ 28.740385][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.749775][ T400] device veth1_macvtap entered promiscuous mode [ 28.758429][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.767953][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.792183][ T405] loop6: detected capacity change from 0 to 512 [ 28.878497][ T405] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 28.885472][ T405] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 28.894211][ T405] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 28.902180][ T405] System zones: 1-12 [ 28.906938][ T405] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2219: inode #15: comm syz.6.29: corrupted in-inode xattr [ 28.918796][ T405] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.29: couldn't read orphan inode 15 (err -117) [ 28.930440][ T405] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 29.146265][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.153169][ T409] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.160581][ T409] device bridge_slave_0 entered promiscuous mode [ 29.167225][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.174245][ T409] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.181651][ T409] device bridge_slave_1 entered promiscuous mode [ 29.227157][ T409] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.234008][ T409] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.241096][ T409] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.247889][ T409] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.266222][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.273710][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.280946][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.290746][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.298700][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.305515][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.313571][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.321538][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.328480][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.341301][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.350178][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.363034][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.375115][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.383128][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.390430][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.398295][ T409] device veth0_vlan entered promiscuous mode [ 29.407356][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.416511][ T409] device veth1_macvtap entered promiscuous mode 2024/12/28 01:21:08 executed programs: 17 [ 29.425432][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.437958][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.464723][ T414] loop7: detected capacity change from 0 to 512 [ 29.475331][ T414] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 29.482700][ T414] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 29.491557][ T414] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 29.499359][ T414] System zones: 1-12 [ 29.503593][ T414] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2219: inode #15: comm syz.7.31: corrupted in-inode xattr [ 29.515478][ T414] EXT4-fs error (device loop7): ext4_orphan_get:1406: comm syz.7.31: couldn't read orphan inode 15 (err -117) [ 29.527325][ T414] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 29.598667][ T8] device bridge_slave_1 left promiscuous mode [ 29.604621][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.611825][ T8] device bridge_slave_0 left promiscuous mode [ 29.617830][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.625502][ T8] device veth1_macvtap left promiscuous mode [ 29.631354][ T8] device veth0_vlan left promiscuous mode [ 29.802845][ T417] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.810089][ T417] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.817323][ T417] device bridge_slave_0 entered promiscuous mode [ 29.824696][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.831788][ T417] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.839123][ T417] device bridge_slave_1 entered promiscuous mode [ 29.886920][ T417] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.893768][ T417] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.900886][ T417] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.907661][ T417] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.933684][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.941315][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.948817][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.960741][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.969005][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.975852][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.984045][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.992208][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.000546][ T393] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.007369][ T393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.020632][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.028528][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.038580][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.046432][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.060173][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.068490][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.085864][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 30.094206][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.102105][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.109829][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.120398][ T417] device veth0_vlan entered promiscuous mode [ 30.129990][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.138032][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.151364][ T417] device veth1_macvtap entered promiscuous mode [ 30.160133][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.167759][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.175738][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.184990][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.193152][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.221740][ T423] loop8: detected capacity change from 0 to 512 [ 30.231030][ T423] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 30.238043][ T423] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 30.246401][ T423] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 30.254361][ T423] System zones: 1-12 [ 30.258683][ T423] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2219: inode #15: comm syz.8.34: corrupted in-inode xattr [ 30.270421][ T423] EXT4-fs error (device loop8): ext4_orphan_get:1406: comm syz.8.34: couldn't read orphan inode 15 (err -117) [ 30.282086][ T423] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 30.466814][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.474070][ T426] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.481596][ T426] device bridge_slave_0 entered promiscuous mode [ 30.488317][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.495149][ T426] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.502377][ T426] device bridge_slave_1 entered promiscuous mode [ 30.552373][ T426] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.559348][ T426] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.566433][ T426] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.573252][ T426] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.591814][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.599374][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.606720][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.614776][ T8] device bridge_slave_1 left promiscuous mode [ 30.620765][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.628033][ T8] device bridge_slave_0 left promiscuous mode [ 30.633955][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.641758][ T8] device bridge_slave_1 left promiscuous mode [ 30.647693][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.655445][ T8] device bridge_slave_0 left promiscuous mode [ 30.661494][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.669308][ T8] device veth1_macvtap left promiscuous mode [ 30.675105][ T8] device veth0_vlan left promiscuous mode [ 30.680932][ T8] device veth1_macvtap left promiscuous mode [ 30.686734][ T8] device veth0_vlan left promiscuous mode [ 30.820819][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.828941][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.835871][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.844787][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.852748][ T393] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.859587][ T393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.873258][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.882029][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.894598][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.905662][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.913945][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.921261][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.929454][ T426] device veth0_vlan entered promiscuous mode [ 30.938920][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.947700][ T426] device veth1_macvtap entered promiscuous mode [ 30.956694][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.966835][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.975095][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.002422][ T431] loop9: detected capacity change from 0 to 512 [ 31.090429][ T431] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 31.097412][ T431] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 31.105867][ T431] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 31.115345][ T431] System zones: 1-12 [ 31.119853][ T431] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2219: inode #15: comm syz.9.37: corrupted in-inode xattr [ 31.131561][ T431] EXT4-fs error (device loop9): ext4_orphan_get:1406: comm syz.9.37: couldn't read orphan inode 15 (err -117) [ 31.143358][ T431] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 31.345819][ T435] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.352704][ T435] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.360099][ T435] device bridge_slave_0 entered promiscuous mode [ 31.367098][ T435] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.374036][ T435] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.381062][ T435] device bridge_slave_1 entered promiscuous mode [ 31.426571][ T435] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.433421][ T435] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.440519][ T435] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.447291][ T435] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.465545][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.473406][ T393] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.480695][ T393] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.489528][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.497656][ T393] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.504492][ T393] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.514297][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.522268][ T393] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.529106][ T393] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.540784][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.551121][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.563495][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.575358][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.583175][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.590997][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.601618][ T435] device veth0_vlan entered promiscuous mode [ 31.611560][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.620280][ T435] device veth1_macvtap entered promiscuous mode [ 31.629638][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.640871][ T393] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.663051][ T440] loop0: detected capacity change from 0 to 512 [ 31.729359][ T440] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 31.736470][ T440] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 31.745381][ T440] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 31.753397][ T440] System zones: 1-12 [ 31.758099][ T440] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2219: inode #15: comm syz.0.41: corrupted in-inode xattr [ 31.770214][ T440] EXT4-fs error (device loop0): ext4_orphan_get:1406: comm syz.0.41: couldn't read orphan inode 15 (err -117) [ 31.770438][ T8] device bridge_slave_1 left promiscuous mode [ 31.782514][ T440] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 31.787829][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.819258][ T8] device bridge_slave_0 left promiscuous mode [ 31.825904][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.834042][ T8] device veth1_macvtap left promiscuous mode [ 31.839989][ T8] device veth0_vlan left promiscuous mode [ 32.175691][ T445] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.182649][ T445] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.190105][ T445] device bridge_slave_0 entered promiscuous mode [ 32.196877][ T445] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.203966][ T445] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.211140][ T445] device bridge_slave_1 entered promiscuous mode [ 32.261727][ T445] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.268581][ T445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.275656][ T445] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.282558][ T445] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.300198][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.307653][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.314746][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.323278][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.331305][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.338150][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.348158][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.356087][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.362926][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.374088][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.382952][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.402693][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.413158][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.421238][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.428629][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.439562][ T445] device veth0_vlan entered promiscuous mode [ 32.449004][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.458870][ T445] device veth1_macvtap entered promiscuous mode [ 32.467927][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.481481][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.504400][ T450] loop1: detected capacity change from 0 to 512 [ 32.530158][ T450] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 32.537178][ T450] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 32.546140][ T450] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 32.553987][ T450] System zones: 1-12 [ 32.558394][ T450] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2219: inode #15: comm syz.1.43: corrupted in-inode xattr [ 32.570129][ T450] EXT4-fs error (device loop1): ext4_orphan_get:1406: comm syz.1.43: couldn't read orphan inode 15 (err -117) [ 32.581780][ T450] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 32.788710][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.795545][ T453] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.802825][ T453] device bridge_slave_0 entered promiscuous mode [ 32.809347][ T453] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.816164][ T453] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.823561][ T453] device bridge_slave_1 entered promiscuous mode [ 32.867137][ T453] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.873980][ T453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.881078][ T453] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.887866][ T453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.907088][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.914899][ T323] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.921956][ T323] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.931029][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.939061][ T323] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.945885][ T323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.954968][ T8] device bridge_slave_1 left promiscuous mode [ 32.961037][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.968303][ T8] device bridge_slave_0 left promiscuous mode [ 32.974202][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.982005][ T8] device bridge_slave_1 left promiscuous mode [ 32.988229][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.995565][ T8] device bridge_slave_0 left promiscuous mode [ 33.001589][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.009564][ T8] device veth1_macvtap left promiscuous mode [ 33.015360][ T8] device veth0_vlan left promiscuous mode [ 33.021196][ T8] device veth1_macvtap left promiscuous mode [ 33.026990][ T8] device veth0_vlan left promiscuous mode [ 33.199538][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.207742][ T323] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.214572][ T323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.221763][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.222506][ T30] kauditd_printk_skb: 42 callbacks suppressed [ 33.222519][ T30] audit: type=1400 audit(1735348872.457:118): avc: denied { remove_name } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 33.229988][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.235523][ T30] audit: type=1400 audit(1735348872.457:119): avc: denied { rename } for pid=83 comm="syslogd" name="messages" dev="tmpfs" ino=2 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 33.291609][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 33.299823][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.308104][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 33.315696][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.324251][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.331656][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.339450][ T453] device veth0_vlan entered promiscuous mode [ 33.349163][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.357107][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.365967][ T453] device veth1_macvtap entered promiscuous mode [ 33.374090][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.381706][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.389893][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.398996][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.406979][ T323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.431517][ T459] loop2: detected capacity change from 0 to 512 [ 33.458392][ T459] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 33.465366][ T459] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 33.473911][ T459] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 33.481821][ T459] System zones: 1-12 [ 33.486019][ T459] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2219: inode #15: comm syz.2.46: corrupted in-inode xattr [ 33.497870][ T459] EXT4-fs error (device loop2): ext4_orphan_get:1406: comm syz.2.46: couldn't read orphan inode 15 (err -117) [ 33.509725][ T459] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 33.770103][ T462] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.776943][ T462] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.784787][ T462] device bridge_slave_0 entered promiscuous mode [ 33.791613][ T462] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.798584][ T462] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.805757][ T462] device bridge_slave_1 entered promiscuous mode [ 33.857284][ T462] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.864226][ T462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.871340][ T462] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.878108][ T462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.900458][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.907889][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.914856][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.924152][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.932192][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.939046][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.951014][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.959161][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.965987][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.977324][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.986370][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.003105][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.014191][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.022020][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.029219][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.037057][ T462] device veth0_vlan entered promiscuous mode [ 34.050462][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.059508][ T462] device veth1_macvtap entered promiscuous mode [ 34.069260][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.081583][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.106001][ T467] loop3: detected capacity change from 0 to 512 [ 34.180582][ T467] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 34.187645][ T467] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 34.196005][ T467] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 34.203813][ T467] System zones: 1-12 [ 34.208433][ T467] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2219: inode #15: comm syz.3.50: corrupted in-inode xattr [ 34.220444][ T467] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.50: couldn't read orphan inode 15 (err -117) [ 34.234826][ T467] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 34.278075][ T8] device bridge_slave_1 left promiscuous mode [ 34.283984][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.291238][ T8] device bridge_slave_0 left promiscuous mode [ 34.297135][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.305455][ T8] device bridge_slave_1 left promiscuous mode [ 34.311556][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.318926][ T8] device bridge_slave_0 left promiscuous mode [ 34.324835][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.332697][ T8] device veth1_macvtap left promiscuous mode [ 34.338589][ T8] device veth0_vlan left promiscuous mode [ 34.344281][ T8] device veth1_macvtap left promiscuous mode [ 34.350126][ T8] device veth0_vlan left promiscuous mode 2024/12/28 01:21:13 executed programs: 37 [ 34.705459][ T471] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.712475][ T471] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.719603][ T471] device bridge_slave_0 entered promiscuous mode [ 34.726329][ T471] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.733366][ T471] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.740798][ T471] device bridge_slave_1 entered promiscuous mode [ 34.785726][ T471] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.792593][ T471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.799691][ T471] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.806588][ T471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.824926][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.832516][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.839531][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.848721][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.856648][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.863485][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.872185][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.880335][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.887168][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.899205][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.908017][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.927245][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.939762][ T471] device veth0_vlan entered promiscuous mode [ 34.946354][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.954546][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.961837][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.972605][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.981400][ T471] device veth1_macvtap entered promiscuous mode