Warning: Permanently added '10.128.1.248' (ED25519) to the list of known hosts.
2025/08/03 14:12:12 ignoring optional flag "sandboxArg"="0"
2025/08/03 14:12:13 parsed 1 programs
[ 53.222442][ T28] audit: type=1400 audit(1754230333.883:106): avc: denied { unlink } for pid=392 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 53.258348][ T392] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 54.011098][ T415] bridge0: port 1(bridge_slave_0) entered blocking state
[ 54.018830][ T415] bridge0: port 1(bridge_slave_0) entered disabled state
[ 54.026273][ T415] device bridge_slave_0 entered promiscuous mode
[ 54.033066][ T415] bridge0: port 2(bridge_slave_1) entered blocking state
[ 54.040076][ T415] bridge0: port 2(bridge_slave_1) entered disabled state
[ 54.047700][ T415] device bridge_slave_1 entered promiscuous mode
[ 54.086707][ T415] bridge0: port 2(bridge_slave_1) entered blocking state
[ 54.093773][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 54.100999][ T415] bridge0: port 1(bridge_slave_0) entered blocking state
[ 54.108036][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 54.125158][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 54.132383][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 54.139610][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 54.147282][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 54.156102][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 54.164551][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 54.171580][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 54.180728][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 54.188946][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 54.195996][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 54.207244][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 54.217308][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 54.229954][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 54.240653][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 54.249337][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 54.257015][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 54.266189][ T415] device veth0_vlan entered promiscuous mode
[ 54.275471][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 54.284502][ T415] device veth1_macvtap entered promiscuous mode
[ 54.293576][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 54.304112][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 54.530652][ T28] audit: type=1400 audit(1754230335.183:107): avc: denied { create } for pid=440 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1
[ 54.747919][ T28] audit: type=1401 audit(1754230335.403:108): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
2025/08/03 14:12:15 executed programs: 0
[ 54.973465][ T461] bridge0: port 1(bridge_slave_0) entered blocking state
[ 54.980502][ T461] bridge0: port 1(bridge_slave_0) entered disabled state
[ 54.987925][ T461] device bridge_slave_0 entered promiscuous mode
[ 54.997260][ T461] bridge0: port 2(bridge_slave_1) entered blocking state
[ 55.004349][ T461] bridge0: port 2(bridge_slave_1) entered disabled state
[ 55.011649][ T461] device bridge_slave_1 entered promiscuous mode
[ 55.032774][ T8] device bridge_slave_1 left promiscuous mode
[ 55.038908][ T8] bridge0: port 2(bridge_slave_1) entered disabled state
[ 55.046525][ T8] device bridge_slave_0 left promiscuous mode
[ 55.052700][ T8] bridge0: port 1(bridge_slave_0) entered disabled state
[ 55.060405][ T8] device veth1_macvtap left promiscuous mode
[ 55.066580][ T8] device veth0_vlan left promiscuous mode
[ 55.172482][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 55.179960][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 55.188590][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 55.197151][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 55.205484][ T452] bridge0: port 1(bridge_slave_0) entered blocking state
[ 55.212542][ T452] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 55.220045][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 55.228589][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 55.236986][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 55.245180][ T452] bridge0: port 2(bridge_slave_1) entered blocking state
[ 55.252199][ T452] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 55.263674][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 55.272748][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 55.285899][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 55.296878][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 55.304900][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 55.312590][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 55.320499][ T461] device veth0_vlan entered promiscuous mode
[ 55.329964][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 55.342443][ T461] device veth1_macvtap entered promiscuous mode
[ 55.352195][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 55.360419][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 55.369672][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 55.378046][ T452] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 55.402135][ T472] loop2: detected capacity change from 0 to 512
[ 55.412626][ T472] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.16: inode #1: comm syz.2.16: iget: illegal inode #
[ 55.425788][ T472] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.16: error while reading EA inode 1 err=-117
[ 55.438984][ T472] EXT4-fs warning (device loop2): ext4_expand_extra_isize_ea:2818: Unable to expand inode 15. Delete some EAs or run e2fsck.
[ 55.452048][ T472] EXT4-fs error (device loop2): ext4_xattr_inode_iget:404: comm syz.2.16: inode #1: comm syz.2.16: iget: illegal inode #
[ 55.464944][ T472] EXT4-fs error (device loop2): ext4_xattr_inode_iget:409: comm syz.2.16: error while reading EA inode 1 err=-117
[ 55.477240][ T472] EXT4-fs (loop2): 1 orphan inode deleted
[ 55.483071][ T472] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback.
[ 55.492282][ T28] audit: type=1400 audit(1754230336.153:109): avc: denied { mount } for pid=471 comm="syz.2.16" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 55.513600][ T28] audit: type=1400 audit(1754230336.163:110): avc: denied { write } for pid=471 comm="syz.2.16" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 55.515289][ T472] ==================================================================
[ 55.535357][ T28] audit: type=1400 audit(1754230336.163:111): avc: denied { add_name } for pid=471 comm="syz.2.16" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 55.543397][ T472] BUG: KASAN: out-of-bounds in ext4_xattr_set_entry+0xaf2/0x21d0
[ 55.563630][ T28] audit: type=1400 audit(1754230336.163:112): avc: denied { create } for pid=471 comm="syz.2.16" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 55.571297][ T472] Read of size 18446744073709551600 at addr ffff88811024b008 by task syz.2.16/472
[ 55.590989][ T28] audit: type=1400 audit(1754230336.163:113): avc: denied { write open } for pid=471 comm="syz.2.16" path="/0/file0/file0/bus" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 55.600125][ T472]
[ 55.600144][ T472] CPU: 0 PID: 472 Comm: syz.2.16 Not tainted 6.1.145-syzkaller-1169984-g3b4ff5af8d36 #0
[ 55.600161][ T472] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 55.600177][ T472] Call Trace:
[ 55.600181][ T472]
[ 55.600188][ T472] __dump_stack+0x21/0x24
[ 55.623530][ T28] audit: type=1400 audit(1754230336.163:114): avc: denied { mounton } for pid=471 comm="syz.2.16" path="/0/file0/file0/bus" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1
[ 55.625470][ T472] dump_stack_lvl+0xee/0x150
[ 55.635188][ T28] audit: type=1400 audit(1754230336.163:115): avc: denied { map } for pid=471 comm="syz.2.16" path="/0/file0/file0/bus" dev="devtmpfs" ino=120 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1
[ 55.645186][ T472] ? __cfi_dump_stack_lvl+0x8/0x8
[ 55.645205][ T472] ? __cfi__printk+0x8/0x8
[ 55.716745][ T472] ? is_bpf_text_address+0x177/0x190
[ 55.722014][ T472] ? ext4_xattr_set_entry+0xaf2/0x21d0
[ 55.727450][ T472] print_address_description+0x71/0x210
[ 55.732973][ T472] print_report+0x4a/0x60
[ 55.737289][ T472] kasan_report+0x122/0x150
[ 55.741782][ T472] ? ext4_xattr_set_entry+0xaf2/0x21d0
[ 55.747218][ T472] ? ext4_xattr_set_entry+0xaf2/0x21d0
[ 55.752651][ T472] kasan_check_range+0x280/0x290
[ 55.757564][ T472] memmove+0x2d/0x70
[ 55.761434][ T472] ext4_xattr_set_entry+0xaf2/0x21d0
[ 55.766701][ T472] ext4_xattr_ibody_set+0x24e/0x6c0
[ 55.771888][ T472] ext4_destroy_inline_data_nolock+0x211/0x5b0
[ 55.778033][ T472] ? ext4_destroy_inline_data+0xe0/0xe0
[ 55.783556][ T472] ? ext4_check_all_de+0x61/0x100
[ 55.788576][ T472] ? ext4_check_all_de+0xc8/0x100
[ 55.793577][ T472] ext4_convert_inline_data_nolock+0x3c9/0x9e0
[ 55.799814][ T472] ? ext4_add_dirent_to_inline+0x420/0x420
[ 55.805599][ T472] ? __kasan_check_read+0x11/0x20
[ 55.810615][ T472] ? get_max_inline_xattr_value_size+0x4ed/0x630
[ 55.816933][ T472] ext4_try_add_inline_entry+0x784/0xad0
[ 55.822545][ T472] ? ext4_fname_setup_filename+0x243/0x2d0
[ 55.828328][ T472] ? __cfi_ext4_try_add_inline_entry+0x10/0x10
[ 55.834471][ T472] ? __kasan_check_write+0x14/0x20
[ 55.839566][ T472] ext4_add_entry+0x4eb/0xd70
[ 55.844219][ T472] ? ext4_inc_count+0x1b0/0x1b0
[ 55.849050][ T472] ? __cfi___ext4_new_inode+0x10/0x10
[ 55.854400][ T472] ? dquot_initialize+0x20/0x20
[ 55.859225][ T472] ext4_add_nondir+0x97/0x270
[ 55.863885][ T472] ext4_create+0x2e0/0x460
[ 55.868292][ T472] ? __cfi_ext4_create+0x10/0x10
[ 55.873231][ T472] ? selinux_inode_create+0x22/0x30
[ 55.878425][ T472] ? security_inode_create+0xd2/0x120
[ 55.883777][ T472] ? __cfi_ext4_create+0x10/0x10
[ 55.888795][ T472] path_openat+0x11e3/0x2f50
[ 55.893410][ T472] ? do_filp_open+0x3c0/0x3c0
[ 55.898061][ T472] do_filp_open+0x1c1/0x3c0
[ 55.902538][ T472] ? __cfi_do_filp_open+0x10/0x10
[ 55.907535][ T472] ? alloc_fd+0x4e6/0x590
[ 55.911846][ T472] do_sys_openat2+0x185/0x7e0
[ 55.916511][ T472] ? __se_sys_futex+0x273/0x2e0
[ 55.921338][ T472] ? do_sys_open+0xe0/0xe0
[ 55.925736][ T472] ? __this_cpu_preempt_check+0x13/0x20
[ 55.931275][ T472] ? xfd_validate_state+0x70/0x150
[ 55.936374][ T472] __x64_sys_openat+0x136/0x160
[ 55.941207][ T472] x64_sys_call+0x783/0x9a0
[ 55.945686][ T472] do_syscall_64+0x4c/0xa0
[ 55.950078][ T472] ? clear_bhb_loop+0x30/0x80
[ 55.954733][ T472] ? clear_bhb_loop+0x30/0x80
[ 55.959383][ T472] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 55.965361][ T472] RIP: 0033:0x7fd87098e929
[ 55.969772][ T472] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 55.989466][ T472] RSP: 002b:00007fd8717d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101
[ 55.997869][ T472] RAX: ffffffffffffffda RBX: 00007fd870bb5fa0 RCX: 00007fd87098e929
[ 56.005831][ T472] RDX: 000000000000275a RSI: 00002000000000c0 RDI: ffffffffffffff9c
[ 56.013803][ T472] RBP: 00007fd870a10b39 R08: 0000000000000000 R09: 0000000000000000
[ 56.021756][ T472] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[ 56.029708][ T472] R13: 0000000000000000 R14: 00007fd870bb5fa0 R15: 00007fffa566a8c8
[ 56.037678][ T472]
[ 56.040684][ T472]
[ 56.042981][ T472] The buggy address belongs to the physical page:
[ 56.049361][ T472] page:ffffea00044092c0 refcount:2 mapcount:1 mapping:ffff88811381b2d0 index:0x4 pfn:0x11024b
[ 56.059595][ T472] memcg:ffff88810033eb40
[ 56.063912][ T472] aops:def_blk_aops ino:700002
[ 56.068649][ T472] flags: 0x5400000000020056(referenced|uptodate|lru|workingset|mappedtodisk|zone=1)
[ 56.078000][ T472] raw: 5400000000020056 ffffea0004409288 ffffea0004409348 ffff88811381b2d0
[ 56.086575][ T472] raw: 0000000000000004 0000000000000000 0000000200000000 ffff88810033eb40
[ 56.095149][ T472] page dumped because: kasan: bad access detected
[ 56.101556][ T472] page_owner tracks the page as allocated
[ 56.107241][ T472] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x152c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 400, tgid 400 (udevd), ts 55411097314, free_ts 54747816828
[ 56.126929][ T472] post_alloc_hook+0x1f5/0x210
[ 56.131780][ T472] prep_new_page+0x1c/0x110
[ 56.136261][ T472] get_page_from_freelist+0x2c7b/0x2cf0
[ 56.141781][ T472] __alloc_pages+0x1c3/0x450
[ 56.146369][ T472] __folio_alloc+0x12/0x40
[ 56.150761][ T472] page_cache_ra_unbounded+0x234/0x720
[ 56.156194][ T472] page_cache_sync_ra+0x3e3/0x490
[ 56.161195][ T472] filemap_read+0x62d/0x22c0
[ 56.165756][ T472] blkdev_read_iter+0x41e/0x560
[ 56.170593][ T472] vfs_read+0x41e/0x8c0
[ 56.174735][ T472] ksys_read+0x140/0x240
[ 56.178954][ T472] __x64_sys_read+0x7b/0x90
[ 56.183501][ T472] x64_sys_call+0x2f/0x9a0
[ 56.187894][ T472] do_syscall_64+0x4c/0xa0
[ 56.192281][ T472] entry_SYSCALL_64_after_hwframe+0x68/0xd2
[ 56.198150][ T472] page last free stack trace:
[ 56.202807][ T472] free_unref_page_prepare+0x742/0x750
[ 56.208251][ T472] free_unref_page+0x8f/0x530
[ 56.212937][ T472] __free_pages+0x67/0x100
[ 56.217339][ T472] __vunmap+0x9af/0xb70
[ 56.221535][ T472] vfree+0x61/0x90
[ 56.225227][ T472] kcov_close+0x2b/0x50
[ 56.229375][ T472] __fput+0x1fc/0x8f0
[ 56.233416][ T472] ____fput+0x15/0x20
[ 56.237372][ T472] task_work_run+0x1db/0x240
[ 56.241935][ T472] do_exit+0xa25/0x2650
[ 56.246065][ T472] do_group_exit+0x210/0x2d0
[ 56.250627][ T472] get_signal+0x13b5/0x1520
[ 56.255104][ T472] arch_do_signal_or_restart+0xb0/0x1030
[ 56.260710][ T472] exit_to_user_mode_loop+0x7a/0xb0
[ 56.265900][ T472] exit_to_user_mode_prepare+0x5a/0xa0
[ 56.271351][ T472] syscall_exit_to_user_mode+0x1a/0x30
[ 56.276804][ T472]
[ 56.279109][ T472] Memory state around the buggy address:
[ 56.284715][ T472] ffff88811024af00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 56.292761][ T472] ffff88811024af80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 56.300806][ T472] >ffff88811024b000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 56.308864][ T472] ^
[ 56.313168][ T472] ffff88811024b080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 56.321215][ T472] ffff88811024b100: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 56.329259][ T472] ==================================================================
[ 56.342546][ T472] Disabling lock debugging due to kernel taint
[ 56.350969][ T461] EXT4-fs error (device loop2): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len is smaller than minimal - offset=76, inode=0, rec_len=0, size=1024 fake=0
[ 56.372096][ T461] EXT4-fs warning (device loop2): __ext4_unlink:3335: inode #15: comm syz-executor: Deleting file 'bus' with no links
[ 56.384860][ T461] EXT4-fs error (device loop2): __ext4_iget:5079: inode #13: block 327706: comm syz-executor: invalid block
[ 56.397020][ T461] EXT4-fs error (device loop2): __ext4_iget:5079: inode #13: block 327706: comm syz-executor: invalid block
[ 56.473490][ T461] EXT4-fs (loop2): unmounting filesystem.
[ 56.518238][ T476] bridge0: port 1(bridge_slave_0) entered blocking state
[ 56.525396][ T476] bridge0: port 1(bridge_slave_0) entered disabled state
[ 56.533027][ T476] device bridge_slave_0 entered promiscuous mode
[ 56.539794][ T476] bridge0: port 2(bridge_slave_1) entered blocking state
[ 56.546841][ T476] bridge0: port 2(bridge_slave_1) entered disabled state
[ 56.554346][ T476] device bridge_slave_1 entered promiscuous mode
[ 56.595034][ T476] bridge0: port 2(bridge_slave_1) entered blocking state
[ 56.602088][ T476] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 56.609405][ T476] bridge0: port 1(bridge_slave_0) entered blocking state
[ 56.616429][ T476] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 56.633403][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 56.640958][ T43] bridge0: port 1(bridge_slave_0) entered disabled state
[ 56.648484][ T43] bridge0: port 2(bridge_slave_1) entered disabled state
[ 56.662608][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 56.671086][ T43] bridge0: port 1(bridge_slave_0) entered blocking state
[ 56.678207][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 56.686735][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 56.695076][ T43] bridge0: port 2(bridge_slave_1) entered blocking state
[ 56.702124][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 56.718041][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 56.727552][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 56.740606][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 56.751399][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 56.759751][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 56.767897][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 56.778698][ T476] device veth0_vlan entered promiscuous mode
[ 56.788334][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 56.797380][ T476] device veth1_macvtap entered promiscuous mode
[ 56.806821][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 56.820209][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 56.850861][ T487] loop3: detected capacity change from 0 to 512
[ 56.861183][ T487] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.19: inode #1: comm syz.3.19: iget: illegal inode #
[ 56.874069][ T487] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.19: error while reading EA inode 1 err=-117
[ 56.886674][ T487] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.19: inode #1: comm syz.3.19: iget: illegal inode #
[ 56.899680][ T487] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.19: error while reading EA inode 1 err=-117
[ 56.914320][ T487] EXT4-fs (loop3): 1 orphan inode deleted
[ 56.920083][ T487] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback.
[ 56.963247][ T8] BUG: unable to handle page fault for address: ffffed265ffff13f
[ 56.971024][ T8] #PF: supervisor read access in kernel mode
[ 56.977007][ T8] #PF: error_code(0x0000) - not-present page
[ 56.983003][ T8] PGD 23fff2067 P4D 23fff2067 PUD 0
[ 56.988321][ T8] Oops: 0000 [#1] PREEMPT SMP KASAN
[ 56.993524][ T8] CPU: 1 PID: 8 Comm: kworker/u4:0 Tainted: G B 6.1.145-syzkaller-1169984-g3b4ff5af8d36 #0
[ 57.004892][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 57.014936][ T8] Workqueue: netns cleanup_net
[ 57.019709][ T8] RIP: 0010:neigh_flush_dev+0x13e/0x960
[ 57.025231][ T8] Code: 07 00 00 4c 89 f0 48 c1 e8 03 48 89 45 98 49 89 df 4c 89 75 a8 48 83 7d a0 00 74 6e 49 8d 9f 78 01 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 e3 27 cb fd 48 8b 45 a0 48 39 03
[ 57.044809][ T8] RSP: 0018:ffffc90000087790 EFLAGS: 00010a06
[ 57.050847][ T8] RAX: 1ffff1265ffff13f RBX: ffff8932ffff89f9 RCX: ffff888100399440
[ 57.058789][ T8] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000001
[ 57.066733][ T8] RBP: ffffc90000087830 R08: 0000000000000004 R09: 0000000000000003
[ 57.074766][ T8] R10: fffff52000010ef8 R11: 1ffff92000010ef8 R12: dffffc0000000000
[ 57.082713][ T8] R13: ffff888108c79500 R14: ffff88812bdfd400 R15: ffff8932ffff8881
[ 57.090660][ T8] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 57.099568][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 57.106126][ T8] CR2: ffffed265ffff13f CR3: 000000010c844000 CR4: 00000000003506a0
[ 57.114169][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 57.122130][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 57.130161][ T8] Call Trace:
[ 57.133437][ T8]
[ 57.136346][ T8] ? _raw_write_lock_bh+0x8e/0xe0
[ 57.141360][ T8] ? __cfi__raw_write_lock_bh+0x10/0x10
[ 57.146878][ T8] __neigh_ifdown+0x3f/0x400
[ 57.151475][ T8] neigh_ifdown+0x1f/0x30
[ 57.155776][ T8] arp_ifdown+0x1c/0x20
[ 57.159904][ T8] inetdev_event+0x891/0x10e0
[ 57.164553][ T8] ? __cfi_inetdev_event+0x10/0x10
[ 57.169638][ T8] ? arp_netdev_event+0xd4/0x2b0
[ 57.174559][ T8] raw_notifier_call_chain+0xa1/0x110
[ 57.179906][ T8] unregister_netdevice_many+0xf8f/0x1820
[ 57.185613][ T8] ? __cfi_unregister_netdevice_many+0x10/0x10
[ 57.191740][ T8] ? unregister_netdevice_queue+0x1aa/0x360
[ 57.197606][ T8] ? __cfi_unregister_netdevice_queue+0x10/0x10
[ 57.203836][ T8] ? mutex_lock+0xf8/0x1a0
[ 57.208249][ T8] ? __cfi_mutex_lock+0x10/0x10
[ 57.213102][ T8] ? __cfi_unregister_netdevice_queue+0x10/0x10
[ 57.219341][ T8] ip_tunnel_delete_nets+0x346/0x390
[ 57.224612][ T8] ? __cfi_ip_tunnel_delete_nets+0x10/0x10
[ 57.230393][ T8] ? __cfi_xfrmi_exit_batch_net+0x10/0x10
[ 57.236097][ T8] ipip_exit_batch_net+0x22/0x30
[ 57.241009][ T8] ? __cfi_ipip_exit_batch_net+0x10/0x10
[ 57.246613][ T8] cleanup_net+0x62d/0xb00
[ 57.251002][ T8] ? __cfi_cleanup_net+0x10/0x10
[ 57.255921][ T8] ? pwq_dec_nr_in_flight+0x18c/0x3c0
[ 57.261267][ T8] process_one_work+0x71f/0xc40
[ 57.266093][ T8] worker_thread+0xa29/0x11f0
[ 57.270748][ T8] kthread+0x281/0x320
[ 57.274793][ T8] ? __cfi_worker_thread+0x10/0x10
[ 57.279876][ T8] ? __cfi_kthread+0x10/0x10
[ 57.284450][ T8] ret_from_fork+0x1f/0x30
[ 57.288853][ T8]
[ 57.291844][ T8] Modules linked in:
[ 57.295706][ T8] CR2: ffffed265ffff13f
[ 57.299838][ T8] ---[ end trace 0000000000000000 ]---
[ 57.299881][ T306] general protection fault, probably for non-canonical address 0x1578000000000: 0000 [#2] PREEMPT SMP KASAN
[ 57.305274][ T8] RIP: 0010:neigh_flush_dev+0x13e/0x960
[ 57.316701][ T306] CPU: 0 PID: 306 Comm: kworker/0:2 Tainted: G B D 6.1.145-syzkaller-1169984-g3b4ff5af8d36 #0
[ 57.322220][ T8] Code: 07 00 00 4c 89 f0 48 c1 e8 03 48 89 45 98 49 89 df 4c 89 75 a8 48 83 7d a0 00 74 6e 49 8d 9f 78 01 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 e3 27 cb fd 48 8b 45 a0 48 39 03
[ 57.333638][ T306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 57.353228][ T8] RSP: 0018:ffffc90000087790 EFLAGS: 00010a06
[ 57.363274][ T306] Workqueue: ipv6_addrconf addrconf_dad_work
[ 57.363298][ T306] RIP: 0010:switch_mm_irqs_off+0x57b/0x980
[ 57.369421][ T8] RAX: 1ffff1265ffff13f RBX: ffff8932ffff89f9 RCX: ffff888100399440
[ 57.375437][ T306] Code: 00 74 0c 48 c7 c7 10 70 e1 86 e8 d0 78 7e 00 48 8b 05 09 83 ab 05 48 01 c3 48 81 eb 00 00 00 80 41 8d 45 01 0f b7 c0 48 09 d8 <0f> 22 d8 66 90 e9 50 01 00 00 65 8b 05 34 24 cc 7e 89 c3 c1 e8 06
[ 57.381218][ T8] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000001
[ 57.389163][ T306] RSP: 0018:ffffc900013a7768 EFLAGS: 00010007
[ 57.408750][ T8] RBP: ffffc90000087830 R08: 0000000000000004 R09: 0000000000000003
[ 57.416711][ T306]
[ 57.416717][ T306] RAX: 0001578000000000 RBX: 0001578000000000 RCX: ffffffff7fffffff
[ 57.422747][ T8] R10: fffff52000010ef8 R11: 1ffff92000010ef8 R12: dffffc0000000000
[ 57.430694][ T306] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff88812e2ea618
[ 57.432996][ T8] R13: ffff888108c79500 R14: ffff88812bdfd400 R15: ffff8932ffff8881
[ 57.440938][ T306] RBP: ffffc900013a77b0 R08: dffffc0000000000 R09: ffffed1025c5d4c5
[ 57.448883][ T8] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 57.456828][ T306] R10: ffffed1025c5d4c5 R11: 1ffff11025c5d4c4 R12: ffff88812e2ea300
[ 57.464774][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 57.472718][ T306] R13: 0000000000000000 R14: ffff88810d865900 R15: 0000000000000000
[ 57.481714][ T8] CR2: ffffed265ffff13f CR3: 000000010c844000 CR4: 00000000003506a0
[ 57.489832][ T306] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 57.496394][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 57.504335][ T306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 57.512279][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 57.521175][ T306] CR2: 0000000000000000 CR3: 000000010c844000 CR4: 00000000003506b0
[ 57.529120][ T8] Kernel panic - not syncing: Fatal exception in interrupt
[ 57.535680][ T306] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 57.535691][ T306] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 57.535701][ T306] Call Trace:
[ 57.535706][ T306]
[ 57.535715][ T306] __schedule+0x9eb/0x14e0
[ 57.535737][ T306] ? release_firmware_map_entry+0x194/0x194
[ 57.535753][ T306] ? mutex_can_spin_on_owner+0x270/0x270
[ 57.535774][ T306] schedule+0xbd/0x170
[ 57.535788][ T306] schedule_preempt_disabled+0x13/0x20
[ 57.535803][ T306] __mutex_lock+0x3c3/0x16d0
[ 57.535819][ T306] ? _raw_spin_lock+0x8e/0xe0
[ 57.535834][ T306] ? __ww_mutex_lock_interruptible_slowpath+0x20/0x20
[ 57.535852][ T306] ? raw_spin_rq_lock_nested+0x24/0x30
[ 57.535867][ T306] ? newidle_balance+0x861/0xda0
[ 57.535887][ T306] ? kvm_sched_clock_read+0x18/0x40
[ 57.535907][ T306] ? sched_clock+0x9/0x10
[ 57.535924][ T306] ? sched_clock_cpu+0x6e/0x250
[ 57.535941][ T306] ? __cfi_sched_clock_cpu+0x10/0x10
[ 57.535957][ T306] ? put_prev_entity+0x3b0/0x3b0
[ 57.535976][ T306] __mutex_lock_slowpath+0xe/0x10
[ 57.535992][ T306] mutex_lock+0xf8/0x1a0
[ 57.536007][ T306] ? __cfi_mutex_lock+0x10/0x10
[ 57.536024][ T306] rtnl_lock+0x15/0x20
[ 57.536043][ T306] addrconf_dad_work+0xc4/0x14b0
[ 57.536063][ T306] ? _raw_spin_unlock+0x4c/0x70
[ 57.536076][ T306] ? finish_task_switch+0x16b/0x7b0
[ 57.536094][ T306] ? __cfi_addrconf_dad_work+0x10/0x10
[ 57.536114][ T306] ? __schedule+0xb8f/0x14e0
[ 57.536127][ T306] ? __cfi__raw_spin_lock_irq+0x10/0x10
[ 57.536143][ T306] process_one_work+0x71f/0xc40
[ 57.536159][ T306] worker_thread+0xa29/0x11f0
[ 57.536174][ T306] ? _raw_spin_lock_irqsave+0xb0/0x110
[ 57.536190][ T306] ? __kthread_parkme+0x142/0x180
[ 57.536205][ T306] kthread+0x281/0x320
[ 57.536219][ T306] ? __cfi_worker_thread+0x10/0x10
[ 57.536233][ T306] ? __cfi_kthread+0x10/0x10
[ 57.536248][ T306] ret_from_fork+0x1f/0x30
[ 57.536266][ T306]
[ 57.536271][ T306] Modules linked in:
[ 57.544233][ T306] ---[ end trace 0000000000000000 ]---
[ 57.544241][ T306] RIP: 0010:neigh_flush_dev+0x13e/0x960
[ 57.544261][ T306] Code: 07 00 00 4c 89 f0 48 c1 e8 03 48 89 45 98 49 89 df 4c 89 75 a8 48 83 7d a0 00 74 6e 49 8d 9f 78 01 00 00 48 89 d8 48 c1 e8 03 <42> 80 3c 20 00 74 08 48 89 df e8 e3 27 cb fd 48 8b 45 a0 48 39 03
[ 57.544274][ T306] RSP: 0018:ffffc90000087790 EFLAGS: 00010a06
[ 57.544287][ T306] RAX: 1ffff1265ffff13f RBX: ffff8932ffff89f9 RCX: ffff888100399440
[ 57.544299][ T306] RDX: 0000000000000000 RSI: 0000000000000008 RDI: 0000000000000001
[ 57.544308][ T306] RBP: ffffc90000087830 R08: 0000000000000004 R09: 0000000000000003
[ 57.544318][ T306] R10: fffff52000010ef8 R11: 1ffff92000010ef8 R12: dffffc0000000000
[ 57.544329][ T306] R13: ffff888108c79500 R14: ffff88812bdfd400 R15: ffff8932ffff8881
[ 57.544341][ T306] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 57.544354][ T306] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 57.544365][ T306] CR2: 0000000000000000 CR3: 000000010c844000 CR4: 00000000003506b0
[ 57.544378][ T306] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 57.544387][ T306] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 58.662458][ T8] Shutting down cpus with NMI
[ 58.990733][ T8] Kernel Offset: disabled
[ 58.995049][ T8] Rebooting in 86400 seconds..