Warning: Permanently added '10.128.1.19' (ED25519) to the list of known hosts. 2026/02/03 12:53:44 parsed 1 programs [ 41.264757][ T30] audit: type=1400 audit(1770123225.534:105): avc: denied { unlink } for pid=394 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 41.304203][ T394] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 42.050401][ T436] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.057648][ T436] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.065776][ T436] device bridge_slave_0 entered promiscuous mode [ 42.072802][ T436] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.080030][ T436] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.087760][ T436] device bridge_slave_1 entered promiscuous mode [ 42.132615][ T436] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.139836][ T436] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.147170][ T436] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.154320][ T436] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.171288][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.179058][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.186641][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.197660][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.206157][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.213190][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.220704][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.228906][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.236594][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.248277][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.257263][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.269872][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.280391][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.288467][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.296062][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.304130][ T436] device veth0_vlan entered promiscuous mode [ 42.313425][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.322544][ T436] device veth1_macvtap entered promiscuous mode [ 42.331317][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 42.341028][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 42.384079][ T30] audit: type=1401 audit(1770123226.644:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/02/03 12:53:46 executed programs: 0 [ 42.699487][ T464] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.706744][ T464] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.714504][ T464] device bridge_slave_0 entered promiscuous mode [ 42.721523][ T464] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.728754][ T464] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.736183][ T464] device bridge_slave_1 entered promiscuous mode [ 42.781854][ T464] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.788946][ T464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.796532][ T464] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.803545][ T464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.825126][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 42.832837][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.840461][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.856041][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 42.864330][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.871356][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 42.878863][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 42.887106][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.894174][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.902663][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 42.917705][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 42.930926][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 42.943715][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 42.952380][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 42.960003][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 42.968838][ T464] device veth0_vlan entered promiscuous mode [ 42.978140][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 42.987311][ T464] device veth1_macvtap entered promiscuous mode [ 42.997048][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.006936][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.029328][ T475] loop2: detected capacity change from 0 to 512 [ 43.067459][ T475] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 43.074863][ T475] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 43.083631][ T475] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 43.091688][ T475] System zones: 1-12 [ 43.096745][ T475] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2233: inode #15: comm syz.2.16: corrupted in-inode xattr [ 43.108976][ T475] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.16: couldn't read orphan inode 15 (err -117) [ 43.120981][ T475] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 43.143008][ T30] audit: type=1400 audit(1770123227.414:107): avc: denied { mount } for pid=474 comm="syz.2.16" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 43.171111][ T30] audit: type=1400 audit(1770123227.434:108): avc: denied { write } for pid=474 comm="syz.2.16" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.192689][ T30] audit: type=1400 audit(1770123227.434:109): avc: denied { add_name } for pid=474 comm="syz.2.16" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.212961][ T30] audit: type=1400 audit(1770123227.434:110): avc: denied { create } for pid=474 comm="syz.2.16" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.233017][ T30] audit: type=1400 audit(1770123227.434:111): avc: denied { write open } for pid=474 comm="syz.2.16" path="/0/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.256021][ T30] audit: type=1400 audit(1770123227.434:112): avc: denied { mounton } for pid=474 comm="syz.2.16" path="/0/file0/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.278746][ T30] audit: type=1400 audit(1770123227.434:113): avc: denied { link } for pid=474 comm="syz.2.16" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 43.321724][ T30] audit: type=1400 audit(1770123227.434:114): avc: denied { remove_name } for pid=474 comm="syz.2.16" name="file0" dev="loop2" ino=12 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 43.518496][ T480] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.525716][ T480] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.532981][ T480] device bridge_slave_0 entered promiscuous mode [ 43.540071][ T480] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.547313][ T480] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.554754][ T480] device bridge_slave_1 entered promiscuous mode [ 43.601001][ T480] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.608070][ T480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.615579][ T480] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.622895][ T480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.640776][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.648564][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.656320][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.669089][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.677300][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.684434][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.693131][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.701446][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.708662][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.724291][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.733424][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.749841][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.760915][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.769097][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.776711][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.785423][ T480] device veth0_vlan entered promiscuous mode [ 43.792243][ T45] device bridge_slave_1 left promiscuous mode [ 43.798380][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.805893][ T45] device bridge_slave_0 left promiscuous mode [ 43.812063][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.820035][ T45] device veth1_macvtap left promiscuous mode [ 43.826471][ T45] device veth0_vlan left promiscuous mode [ 43.898968][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 43.908777][ T480] device veth1_macvtap entered promiscuous mode [ 43.919150][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.929145][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.952853][ T491] loop3: detected capacity change from 0 to 512 [ 44.003287][ T491] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 44.010520][ T491] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 44.019252][ T491] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 44.027860][ T491] System zones: 1-12 [ 44.032412][ T491] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2233: inode #15: comm syz.3.20: corrupted in-inode xattr [ 44.044550][ T491] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.20: couldn't read orphan inode 15 (err -117) [ 44.056625][ T491] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 44.089239][ T480] ================================================================== [ 44.097334][ T480] BUG: KASAN: slab-out-of-bounds in ext4_htree_fill_tree+0x10f5/0x1160 [ 44.105875][ T480] Read of size 1 at addr ffff88811a788a67 by task syz-executor/480 [ 44.113797][ T480] [ 44.116135][ T480] CPU: 1 PID: 480 Comm: syz-executor Not tainted syzkaller #0 [ 44.123807][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 44.133877][ T480] Call Trace: [ 44.137140][ T480] [ 44.140077][ T480] __dump_stack+0x21/0x30 [ 44.144393][ T480] dump_stack_lvl+0x110/0x170 [ 44.149052][ T480] ? show_regs_print_info+0x20/0x20 [ 44.154322][ T480] ? load_image+0x3e0/0x3e0 [ 44.158800][ T480] print_address_description+0x7f/0x2c0 [ 44.164410][ T480] ? ext4_htree_fill_tree+0x10f5/0x1160 [ 44.170017][ T480] kasan_report+0xf1/0x140 [ 44.174409][ T480] ? ext4_htree_fill_tree+0x10f5/0x1160 [ 44.179951][ T480] __asan_report_load1_noabort+0x14/0x20 [ 44.185759][ T480] ext4_htree_fill_tree+0x10f5/0x1160 [ 44.191113][ T480] ? ext4_handle_dirty_dirblock+0x670/0x670 [ 44.196991][ T480] ? ext4_readdir+0x4a8/0x3b20 [ 44.201736][ T480] ext4_readdir+0x2cdb/0x3b20 [ 44.206389][ T480] ? __kasan_check_write+0x14/0x20 [ 44.211476][ T480] ? rwsem_read_trylock+0x2ae/0x640 [ 44.216793][ T480] ? ext4_dir_llseek+0x4a0/0x4a0 [ 44.221893][ T480] ? downgrade_write+0x430/0x430 [ 44.226822][ T480] ? vmacache_update+0xb7/0x120 [ 44.231666][ T480] ? avc_policy_seqno+0x1b/0x70 [ 44.236514][ T480] ? down_read_killable+0xc1/0x110 [ 44.241608][ T480] ? down_read_interruptible+0x110/0x110 [ 44.247223][ T480] ? fsnotify_perm+0x269/0x5b0 [ 44.251964][ T480] ? security_file_permission+0x83/0xa0 [ 44.257486][ T480] iterate_dir+0x260/0x600 [ 44.262161][ T480] ? ext4_dir_llseek+0x4a0/0x4a0 [ 44.267075][ T480] __se_sys_getdents64+0xf2/0x250 [ 44.272086][ T480] ? __x64_sys_getdents64+0x90/0x90 [ 44.277343][ T480] ? filldir+0x690/0x690 [ 44.281557][ T480] ? debug_smp_processor_id+0x17/0x20 [ 44.287019][ T480] __x64_sys_getdents64+0x7b/0x90 [ 44.292042][ T480] x64_sys_call+0x592/0x9a0 [ 44.296543][ T480] do_syscall_64+0x4c/0xa0 [ 44.301116][ T480] ? clear_bhb_loop+0x50/0xa0 [ 44.305768][ T480] ? clear_bhb_loop+0x50/0xa0 [ 44.310420][ T480] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 44.316283][ T480] RIP: 0033:0x7f90c75d7d73 [ 44.320674][ T480] Code: c7 c0 e8 ff ff ff 64 c7 00 16 00 00 00 31 c0 eb 9e e8 81 9b fd ff 90 b8 ff ff ff 7f 48 39 c2 48 0f 47 d0 b8 d9 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 05 c3 0f 1f 40 00 48 c7 c2 e8 ff ff ff f7 d8 [ 44.340286][ T480] RSP: 002b:00007ffe92b832b8 EFLAGS: 00000293 ORIG_RAX: 00000000000000d9 [ 44.348689][ T480] RAX: ffffffffffffffda RBX: 0000555586fe0910 RCX: 00007f90c75d7d73 [ 44.356648][ T480] RDX: 0000000000008000 RSI: 0000555586fe0940 RDI: 0000000000000005 [ 44.364599][ T480] RBP: 0000555586fe0940 R08: 0000000000028701 R09: 0000000000000001 [ 44.372582][ T480] R10: 00007f90c7782ca0 R11: 0000000000000293 R12: 0000555586fe0914 [ 44.380622][ T480] R13: ffffffffffffffe8 R14: 0000000000000010 R15: 0000000000000001 [ 44.388706][ T480] [ 44.391711][ T480] [ 44.394035][ T480] Allocated by task 151: [ 44.398274][ T480] __kasan_slab_alloc+0xbd/0xf0 [ 44.403195][ T480] slab_post_alloc_hook+0x4f/0x2b0 [ 44.408284][ T480] kmem_cache_alloc+0xf7/0x260 [ 44.413115][ T480] vm_area_dup+0x26/0x210 [ 44.417422][ T480] __split_vma+0xac/0x3e0 [ 44.421725][ T480] split_vma+0x7c/0xd0 [ 44.425774][ T480] mprotect_fixup+0x531/0x7d0 [ 44.430440][ T480] do_mprotect_pkey+0x72b/0xad0 [ 44.435267][ T480] __x64_sys_mprotect+0x80/0x90 [ 44.440201][ T480] x64_sys_call+0x912/0x9a0 [ 44.444679][ T480] do_syscall_64+0x4c/0xa0 [ 44.449068][ T480] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 44.454944][ T480] [ 44.457243][ T480] Last potentially related work creation: [ 44.462926][ T480] kasan_save_stack+0x3a/0x60 [ 44.467579][ T480] __kasan_record_aux_stack+0xd2/0x100 [ 44.473113][ T480] kasan_record_aux_stack_noalloc+0xb/0x10 [ 44.478987][ T480] call_rcu+0x10b/0xf80 [ 44.483291][ T480] vm_area_free_no_check+0x10e/0x140 [ 44.488562][ T480] vm_area_free+0x56/0x60 [ 44.492881][ T480] exit_mmap+0x4e6/0x8b0 [ 44.497094][ T480] __mmput+0x93/0x320 [ 44.501054][ T480] mmput+0x50/0x150 [ 44.504847][ T480] do_exit+0x9f2/0x27e0 [ 44.508987][ T480] do_group_exit+0x141/0x310 [ 44.513584][ T480] __x64_sys_exit_group+0x3f/0x40 [ 44.518602][ T480] x64_sys_call+0x832/0x9a0 [ 44.523099][ T480] do_syscall_64+0x4c/0xa0 [ 44.527503][ T480] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 44.533374][ T480] [ 44.535671][ T480] The buggy address belongs to the object at ffff88811a788940 [ 44.535671][ T480] which belongs to the cache vm_area_struct of size 232 [ 44.549957][ T480] The buggy address is located 63 bytes to the right of [ 44.549957][ T480] 232-byte region [ffff88811a788940, ffff88811a788a28) [ 44.563642][ T480] The buggy address belongs to the page: [ 44.569517][ T480] page:ffffea000469e200 refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88811a788940 pfn:0x11a788 [ 44.581134][ T480] flags: 0x4000000000000200(slab|zone=1) [ 44.586774][ T480] raw: 4000000000000200 ffffea000469e280 0000000300000003 ffff888100186780 [ 44.595337][ T480] raw: ffff88811a788940 00000000800d0000 00000001ffffffff 0000000000000000 [ 44.604064][ T480] page dumped because: kasan: bad access detected [ 44.610532][ T480] page_owner tracks the page as allocated [ 44.616236][ T480] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 151, ts 5171607538, free_ts 5168628620 [ 44.632310][ T480] post_alloc_hook+0x192/0x1b0 [ 44.637072][ T480] prep_new_page+0x1c/0x110 [ 44.641587][ T480] get_page_from_freelist+0x2d3a/0x2dc0 [ 44.647119][ T480] __alloc_pages+0x1a2/0x460 [ 44.651694][ T480] new_slab+0xa1/0x4d0 [ 44.655823][ T480] ___slab_alloc+0x381/0x810 [ 44.660597][ T480] __slab_alloc+0x49/0x90 [ 44.664924][ T480] kmem_cache_alloc+0x138/0x260 [ 44.669755][ T480] vm_area_dup+0x26/0x210 [ 44.674155][ T480] __split_vma+0xac/0x3e0 [ 44.678564][ T480] __do_munmap+0x3b9/0x1020 [ 44.683090][ T480] mmap_region+0x91e/0x1710 [ 44.687576][ T480] do_mmap+0x812/0xf10 [ 44.691618][ T480] vm_mmap_pgoff+0x1ec/0x430 [ 44.696178][ T480] ksys_mmap_pgoff+0x161/0x1d0 [ 44.700910][ T480] __x64_sys_mmap+0xfa/0x110 [ 44.705472][ T480] page last free stack trace: [ 44.710115][ T480] free_unref_page_prepare+0x542/0x550 [ 44.715554][ T480] free_unref_page_list+0x13a/0x9d0 [ 44.720726][ T480] release_pages+0x1006/0x1060 [ 44.725478][ T480] free_pages_and_swap_cache+0x86/0xa0 [ 44.730987][ T480] tlb_finish_mmu+0x17e/0x310 [ 44.735657][ T480] exit_mmap+0x43b/0x8b0 [ 44.739884][ T480] __mmput+0x93/0x320 [ 44.743839][ T480] mmput+0x50/0x150 [ 44.747623][ T480] do_exit+0x9f2/0x27e0 [ 44.751791][ T480] do_group_exit+0x141/0x310 [ 44.756353][ T480] __x64_sys_exit_group+0x3f/0x40 [ 44.761490][ T480] x64_sys_call+0x832/0x9a0 [ 44.766001][ T480] do_syscall_64+0x4c/0xa0 [ 44.770406][ T480] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 44.776485][ T480] [ 44.778795][ T480] Memory state around the buggy address: [ 44.784414][ T480] ffff88811a788900: fc fc fc fc fc fc fc fc fb fb fb fb fb fb fb fb [ 44.792546][ T480] ffff88811a788980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.800760][ T480] >ffff88811a788a00: fb fb fb fb fb fc fc fc fc fc fc fc fc fb fb fb [ 44.808787][ T480] ^ [ 44.815960][ T480] ffff88811a788a80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 44.823991][ T480] ffff88811a788b00: fb fb fb fb fb fb fb fb fb fb fc fc fc fc fc fc [ 44.832205][ T480] ================================================================== [ 44.840418][ T480] Disabling lock debugging due to kernel taint [ 45.022238][ T494] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.029463][ T494] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.036958][ T494] device bridge_slave_0 entered promiscuous mode [ 45.046205][ T494] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.053360][ T494] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.060729][ T494] device bridge_slave_1 entered promiscuous mode [ 45.110497][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.117916][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.126390][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.134789][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.143416][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.150452][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.159835][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.170608][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.179057][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.187405][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.194450][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.205814][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.216899][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.229804][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.243311][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.251419][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.258976][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.267016][ T494] device veth0_vlan entered promiscuous mode [ 45.276464][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.288038][ T494] device veth1_macvtap entered promiscuous mode [ 45.296823][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.306833][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.331812][ T505] loop4: detected capacity change from 0 to 512 [ 45.354790][ T505] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 45.362052][ T505] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 45.371309][ T505] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 45.379720][ T505] System zones: 1-12 [ 45.384500][ T505] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2233: inode #15: comm syz.4.23: corrupted in-inode xattr [ 45.396840][ T505] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.23: couldn't read orphan inode 15 (err -117) [ 45.409299][ T505] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 45.464986][ T45] device bridge_slave_1 left promiscuous mode [ 45.471120][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.479183][ T45] device bridge_slave_0 left promiscuous mode [ 45.485516][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.493518][ T45] device bridge_slave_1 left promiscuous mode [ 45.499859][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.507272][ T45] device bridge_slave_0 left promiscuous mode [ 45.513386][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.521509][ T45] device veth1_macvtap left promiscuous mode [ 45.527661][ T45] device veth0_vlan left promiscuous mode [ 45.533711][ T45] device veth1_macvtap left promiscuous mode [ 45.539962][ T45] device veth0_vlan left promiscuous mode [ 45.755234][ T508] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.762274][ T508] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.769731][ T508] device bridge_slave_0 entered promiscuous mode [ 45.777029][ T508] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.784254][ T508] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.791685][ T508] device bridge_slave_1 entered promiscuous mode [ 45.830363][ T508] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.837425][ T508] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.844707][ T508] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.851718][ T508] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.868550][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.876255][ T235] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.883567][ T235] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.892506][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.900820][ T235] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.907906][ T235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.918019][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.926339][ T235] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.933358][ T235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.945130][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.954234][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.968010][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.978517][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.986703][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.994512][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.002821][ T508] device veth0_vlan entered promiscuous mode [ 46.012188][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.021053][ T508] device veth1_macvtap entered promiscuous mode [ 46.030084][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.043169][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.075041][ T520] loop5: detected capacity change from 0 to 512 [ 46.117243][ T520] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 46.124542][ T520] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 46.133356][ T520] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 46.141633][ T520] System zones: 1-12 [ 46.146414][ T520] EXT4-fs error (device loop5): ext4_xattr_ibody_find:2233: inode #15: comm syz.5.25: corrupted in-inode xattr [ 46.158593][ T520] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.25: couldn't read orphan inode 15 (err -117) [ 46.170536][ T520] EXT4-fs (loop5): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 46.449501][ T523] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.456575][ T523] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.463839][ T523] device bridge_slave_0 entered promiscuous mode [ 46.470841][ T523] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.478023][ T523] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.485571][ T523] device bridge_slave_1 entered promiscuous mode [ 46.527748][ T523] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.534861][ T523] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.542093][ T523] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.549199][ T523] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.567341][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.574859][ T235] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.582080][ T235] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.590847][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.599030][ T235] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.606060][ T235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.615829][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.623978][ T235] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.631229][ T235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.642406][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.651526][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.667450][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.678040][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.686195][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.693549][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.703124][ T523] device veth0_vlan entered promiscuous mode [ 46.712438][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.721224][ T45] device bridge_slave_1 left promiscuous mode [ 46.727434][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.735354][ T45] device bridge_slave_0 left promiscuous mode [ 46.741469][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.749651][ T45] device veth1_macvtap left promiscuous mode [ 46.755701][ T45] device veth0_vlan left promiscuous mode [ 46.867881][ T523] device veth1_macvtap entered promiscuous mode [ 46.876994][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.886765][ T235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.916389][ T534] loop6: detected capacity change from 0 to 512 [ 46.927420][ T534] EXT4-fs (loop6): Ignoring removed mblk_io_submit option [ 46.934742][ T534] EXT4-fs (loop6): mounting ext3 file system using the ext4 subsystem [ 46.943418][ T534] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 46.951392][ T534] System zones: 1-12 [ 46.956103][ T534] EXT4-fs error (device loop6): ext4_xattr_ibody_find:2233: inode #15: comm syz.6.29: corrupted in-inode xattr [ 46.968244][ T534] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.29: couldn't read orphan inode 15 (err -117) [ 46.980335][ T534] EXT4-fs (loop6): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 47.183769][ T538] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.190963][ T538] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.198648][ T538] device bridge_slave_0 entered promiscuous mode [ 47.205822][ T538] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.212862][ T538] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.220430][ T538] device bridge_slave_1 entered promiscuous mode [ 47.261004][ T538] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.268408][ T538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.275796][ T538] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.282822][ T538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.299015][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 47.307210][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.314516][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.323407][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 47.331917][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.338979][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.347666][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 47.355997][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.363034][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.378145][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 47.387851][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 47.402182][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 47.412918][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 47.421105][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 47.428673][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 47.439130][ T538] device veth0_vlan entered promiscuous mode [ 47.448495][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 47.460023][ T538] device veth1_macvtap entered promiscuous mode [ 47.469216][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.479013][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.505919][ T549] loop7: detected capacity change from 0 to 512 [ 47.517105][ T549] EXT4-fs (loop7): Ignoring removed mblk_io_submit option [ 47.524550][ T549] EXT4-fs (loop7): mounting ext3 file system using the ext4 subsystem [ 47.533321][ T549] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 47.541314][ T549] System zones: 1-12 [ 47.546053][ T549] EXT4-fs error (device loop7): ext4_xattr_ibody_find:2233: inode #15: comm syz.7.31: corrupted in-inode xattr [ 47.558189][ T549] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.31: couldn't read orphan inode 15 (err -117) [ 47.570361][ T549] EXT4-fs (loop7): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. 2026/02/03 12:53:52 executed programs: 19 [ 47.860498][ T552] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.867616][ T552] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.875221][ T552] device bridge_slave_0 entered promiscuous mode [ 47.882590][ T552] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.889802][ T552] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.897220][ T552] device bridge_slave_1 entered promiscuous mode [ 47.910681][ T45] device bridge_slave_1 left promiscuous mode [ 47.917146][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.924849][ T45] device bridge_slave_0 left promiscuous mode [ 47.930970][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.938811][ T45] device bridge_slave_1 left promiscuous mode [ 47.944996][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.952299][ T45] device bridge_slave_0 left promiscuous mode [ 47.958627][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.966684][ T45] device veth1_macvtap left promiscuous mode [ 47.972686][ T45] device veth0_vlan left promiscuous mode [ 47.978919][ T45] device veth1_macvtap left promiscuous mode [ 47.985030][ T45] device veth0_vlan left promiscuous mode [ 48.133567][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.141136][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.150163][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.158465][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.166629][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.173651][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.181220][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.190508][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.199273][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.207454][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.214664][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.225806][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.235386][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.247925][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.258448][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.266694][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.274177][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.283354][ T552] device veth0_vlan entered promiscuous mode [ 48.293055][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.301937][ T552] device veth1_macvtap entered promiscuous mode [ 48.310728][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.320848][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.345562][ T563] loop8: detected capacity change from 0 to 512 [ 48.356605][ T563] EXT4-fs (loop8): Ignoring removed mblk_io_submit option [ 48.364504][ T563] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 48.373730][ T563] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 48.381772][ T563] System zones: 1-12 [ 48.386560][ T563] EXT4-fs error (device loop8): ext4_xattr_ibody_find:2233: inode #15: comm syz.8.35: corrupted in-inode xattr [ 48.398843][ T563] EXT4-fs error (device loop8): ext4_orphan_get:1405: comm syz.8.35: couldn't read orphan inode 15 (err -117) [ 48.411033][ T563] EXT4-fs (loop8): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 48.574829][ T566] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.581861][ T566] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.589500][ T566] device bridge_slave_0 entered promiscuous mode [ 48.598420][ T566] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.605636][ T566] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.612909][ T566] device bridge_slave_1 entered promiscuous mode [ 48.654680][ T566] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.661716][ T566] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.668987][ T566] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.676054][ T566] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.693501][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.701021][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.708549][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.719234][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.727494][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.734520][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.743492][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.751986][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.759052][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.770175][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.779931][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.793912][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.804935][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.813037][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.820823][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.828732][ T566] device veth0_vlan entered promiscuous mode [ 48.840725][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.849855][ T566] device veth1_macvtap entered promiscuous mode [ 48.858706][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.870180][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.895077][ T577] loop9: detected capacity change from 0 to 512 [ 48.926423][ T45] device bridge_slave_1 left promiscuous mode [ 48.932620][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.940422][ T577] EXT4-fs (loop9): Ignoring removed mblk_io_submit option [ 48.941607][ T45] device bridge_slave_0 left promiscuous mode [ 48.953811][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.960893][ T577] EXT4-fs (loop9): mounting ext3 file system using the ext4 subsystem [ 48.969855][ T45] device veth1_macvtap left promiscuous mode [ 48.969863][ T577] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 48.976551][ T45] device veth0_vlan left promiscuous mode [ 48.984606][ T577] System zones: 1-12 [ 48.995200][ T577] EXT4-fs error (device loop9): ext4_xattr_ibody_find:2233: inode #15: comm syz.9.37: corrupted in-inode xattr [ 49.007784][ T577] EXT4-fs error (device loop9): ext4_orphan_get:1405: comm syz.9.37: couldn't read orphan inode 15 (err -117) [ 49.019793][ T577] EXT4-fs (loop9): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 49.367941][ T581] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.375140][ T581] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.382688][ T581] device bridge_slave_0 entered promiscuous mode [ 49.390143][ T581] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.397442][ T581] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.404989][ T581] device bridge_slave_1 entered promiscuous mode [ 49.452956][ T581] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.460016][ T581] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.467458][ T581] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.474504][ T581] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.491975][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.499610][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.506937][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.517596][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.525900][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.532908][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.541436][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.549798][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.556851][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.568669][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.577844][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.590102][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.605056][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.613298][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.621058][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.629735][ T581] device veth0_vlan entered promiscuous mode [ 49.641956][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.650907][ T581] device veth1_macvtap entered promiscuous mode [ 49.659796][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.672964][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.696830][ T592] loop0: detected capacity change from 0 to 512 [ 49.716485][ T592] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 49.724649][ T592] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 49.733487][ T592] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 49.741664][ T592] System zones: 1-12 [ 49.746482][ T592] EXT4-fs error (device loop0): ext4_xattr_ibody_find:2233: inode #15: comm syz.0.41: corrupted in-inode xattr [ 49.758744][ T592] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.41: couldn't read orphan inode 15 (err -117) [ 49.770735][ T592] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 50.032142][ T595] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.039759][ T595] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.047401][ T595] device bridge_slave_0 entered promiscuous mode [ 50.054837][ T595] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.061861][ T595] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.069452][ T595] device bridge_slave_1 entered promiscuous mode [ 50.110887][ T595] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.118044][ T595] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.125489][ T595] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.132919][ T595] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.142843][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.150311][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.159431][ T45] device bridge_slave_1 left promiscuous mode [ 50.165797][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.173272][ T45] device bridge_slave_0 left promiscuous mode [ 50.179607][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.187747][ T45] device bridge_slave_1 left promiscuous mode [ 50.194233][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.201637][ T45] device bridge_slave_0 left promiscuous mode [ 50.208154][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.216571][ T45] device veth1_macvtap left promiscuous mode [ 50.222693][ T45] device veth0_vlan left promiscuous mode [ 50.228804][ T45] device veth1_macvtap left promiscuous mode [ 50.235311][ T45] device veth0_vlan left promiscuous mode [ 50.433944][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.441607][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.451419][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.459825][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.468547][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.476163][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.485827][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.494456][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.502575][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.509743][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.520147][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.528405][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.537368][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.545640][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.558423][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.567062][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.578022][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.586133][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.594682][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.602166][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.611674][ T595] device veth0_vlan entered promiscuous mode [ 50.620980][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.630623][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.639743][ T595] device veth1_macvtap entered promiscuous mode [ 50.648489][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.656854][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.665263][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.676270][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.684825][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.706163][ T606] loop1: detected capacity change from 0 to 512 [ 50.775192][ T606] EXT4-fs (loop1): Ignoring removed mblk_io_submit option [ 50.782420][ T606] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 50.791337][ T606] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 50.799330][ T606] System zones: 1-12 [ 50.803750][ T606] EXT4-fs error (device loop1): ext4_xattr_ibody_find:2233: inode #15: comm syz.1.44: corrupted in-inode xattr [ 50.816106][ T606] EXT4-fs error (device loop1): ext4_orphan_get:1405: comm syz.1.44: couldn't read orphan inode 15 (err -117) [ 50.828930][ T606] EXT4-fs (loop1): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 51.007043][ T609] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.014840][ T609] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.022110][ T609] device bridge_slave_0 entered promiscuous mode [ 51.031144][ T609] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.038210][ T609] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.045862][ T609] device bridge_slave_1 entered promiscuous mode [ 51.088111][ T609] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.095646][ T609] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.103367][ T609] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.110439][ T609] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.128828][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.136329][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.144105][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.153227][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.162091][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.170595][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.177768][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.187563][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.196000][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.204384][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.211400][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.221660][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.230033][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.240522][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.248722][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.261109][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.269603][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.280621][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.288884][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.297101][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.304648][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.314414][ T609] device veth0_vlan entered promiscuous mode [ 51.323024][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.331309][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.340572][ T609] device veth1_macvtap entered promiscuous mode [ 51.350755][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.358462][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.366755][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.375952][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.384641][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.408832][ T620] loop2: detected capacity change from 0 to 512 [ 51.446162][ T620] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 51.453378][ T620] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 51.462806][ T620] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 51.472171][ T620] System zones: 1-12 [ 51.476790][ T620] EXT4-fs error (device loop2): ext4_xattr_ibody_find:2233: inode #15: comm syz.2.46: corrupted in-inode xattr [ 51.488829][ T620] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.46: couldn't read orphan inode 15 (err -117) [ 51.500985][ T620] EXT4-fs (loop2): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 51.528253][ T45] device bridge_slave_1 left promiscuous mode [ 51.534642][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.542033][ T45] device bridge_slave_0 left promiscuous mode [ 51.548287][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.556086][ T45] device veth1_macvtap left promiscuous mode [ 51.562084][ T45] device veth0_vlan left promiscuous mode [ 51.917581][ T623] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.925194][ T623] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.932644][ T623] device bridge_slave_0 entered promiscuous mode [ 51.939673][ T623] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.946982][ T623] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.954862][ T623] device bridge_slave_1 entered promiscuous mode [ 52.000666][ T623] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.007738][ T623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.015180][ T623] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.022201][ T623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.039845][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.047800][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.055377][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.065979][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.074264][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.081285][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.089910][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.098864][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.106404][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.119690][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.129295][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.147741][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.162380][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 52.170737][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.179290][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.187042][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.199891][ T623] device veth0_vlan entered promiscuous mode [ 52.209401][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.217598][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.226843][ T623] device veth1_macvtap entered promiscuous mode [ 52.235631][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.243464][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.252666][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.265110][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.273498][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.316039][ T634] loop3: detected capacity change from 0 to 512 [ 52.369463][ T634] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 52.376796][ T634] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 52.385690][ T634] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 52.393618][ T634] System zones: 1-12 [ 52.398313][ T634] EXT4-fs error (device loop3): ext4_xattr_ibody_find:2233: inode #15: comm syz.3.50: corrupted in-inode xattr [ 52.410795][ T634] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.50: couldn't read orphan inode 15 (err -117) [ 52.422787][ T634] EXT4-fs (loop3): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 52.690077][ T45] device bridge_slave_1 left promiscuous mode [ 52.696503][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.703982][ T45] device bridge_slave_0 left promiscuous mode [ 52.710414][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.718638][ T45] device bridge_slave_1 left promiscuous mode [ 52.725065][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.732563][ T45] device bridge_slave_0 left promiscuous mode [ 52.738888][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.747077][ T45] device veth1_macvtap left promiscuous mode [ 52.753085][ T45] device veth0_vlan left promiscuous mode [ 52.759064][ T45] device veth1_macvtap left promiscuous mode [ 52.765236][ T45] device veth0_vlan left promiscuous mode [ 52.946931][ T637] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.954122][ T637] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.961479][ T637] device bridge_slave_0 entered promiscuous mode [ 52.969140][ T637] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.976201][ T637] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.983470][ T637] device bridge_slave_1 entered promiscuous mode [ 53.027774][ T637] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.034971][ T637] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.043204][ T637] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.050588][ T637] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.067135][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.074793][ T372] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.082721][ T372] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.092219][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.100558][ T372] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.107631][ T372] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.116329][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.124746][ T372] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.131784][ T372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.143032][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.152626][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 53.160798][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.172748][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 53.181372][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.192670][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 53.200774][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.209357][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.216830][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.226035][ T637] device veth0_vlan entered promiscuous mode [ 53.235459][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 53.243610][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.252745][ T637] device veth1_macvtap entered promiscuous mode [ 53.261656][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 53.269455][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready 2026/02/03 12:53:57 executed programs: 38 [ 53.278145][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.287513][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 53.295964][ T372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.319892][ T648] loop4: detected capacity change from 0 to 512 [ 53.347246][ T648] EXT4-fs (loop4): Ignoring removed mblk_io_submit option [ 53.356520][ T648] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 53.371156][ T648] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=b016c118, mo2=0002] [ 53.379437][ T648] System zones: 1-12 [ 53.385261][ T648] EXT4-fs error (device loop4): ext4_xattr_ibody_find:2233: inode #15: comm syz.4.53: corrupted in-inode xattr [ 53.397964][ T648] EXT4-fs error (device loop4): ext4_orphan_get:1405: comm syz.4.53: couldn't read orphan inode 15 (err -117) [ 53.410462][ T648] EXT4-fs (loop4): mounted filesystem without journal. Opts: jqfmt=vfsold,data_err=abort,debug,noload,mblk_io_submit,commit=0x0000000000000005,init_itable=0x0000000000000601,grpquota,,errors=continue. Quota mode: writeback. [ 53.676519][ T651] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.683656][ T651] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.691072][ T651] device bridge_slave_0 entered promiscuous mode [ 53.698367][ T651] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.705804][ T651] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.713248][ T651] device bridge_slave_1 entered promiscuous mode [ 53.756863][ T651] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.763907][ T651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.771458][ T651] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.778759][ T651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.796005][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.803606][ T478] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.811386][ T478] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.820139][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.828516][ T478] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.835714][ T478] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.845790][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 53.854103][ T478] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.861298][ T478] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.872630][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 53.883636][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 53.896256][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 53.906958][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 53.915028][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 53.922399][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 53.932356][ T651] device veth0_vlan entered promiscuous mode [ 53.941826][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 53.952780][ T651] device veth1_macvtap entered promiscuous mode [ 53.961743][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 53.972165][ T478] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.994825][ T45] device bridge_slave_1 left promiscuous mode [ 54.000973][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.008751][ T45] device bridge_slave_0 left promiscuous mode [ 54.008903][ T662] loop5: detected capacity change from 0 to 512 [ 54.015386][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.029073][ T45] device veth1_macvtap left promiscuous mode [ 54.035125][ T45] device veth0_vlan left promiscuous mode