Warning: Permanently added '10.128.0.99' (ED25519) to the list of known hosts. 2026/02/18 19:13:33 parsed 1 programs [ 43.102917][ T24] kauditd_printk_skb: 30 callbacks suppressed [ 43.102927][ T24] audit: type=1400 audit(1771442013.920:104): avc: denied { unlink } for pid=410 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 43.167215][ T410] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 43.724639][ T24] audit: type=1400 audit(1771442014.550:105): avc: denied { create } for pid=440 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 43.886986][ T439] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.929618][ T439] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.956946][ T439] device bridge_slave_0 entered promiscuous mode [ 44.013523][ T439] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.020652][ T439] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.033759][ T439] device bridge_slave_1 entered promiscuous mode [ 44.089469][ T24] audit: type=1401 audit(1771442014.910:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 44.150058][ T439] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.157163][ T439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.164682][ T439] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.171804][ T439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.192906][ T451] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.200364][ T451] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.208101][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.215691][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.234069][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.242433][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.249505][ T451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.283500][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.293851][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.300880][ T451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.308476][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.316783][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.330898][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.341860][ T439] device veth0_vlan entered promiscuous mode [ 44.349125][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.357331][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.365015][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.375762][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.384830][ T439] device veth1_macvtap entered promiscuous mode 2026/02/18 19:13:35 executed programs: 0 [ 44.393974][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.404781][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.435997][ T24] audit: type=1400 audit(1771442015.260:107): avc: denied { write } for pid=401 comm="syz-execprog" path="pipe:[15788]" dev="pipefs" ino=15788 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 44.501181][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.509339][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.517829][ T473] device bridge_slave_0 entered promiscuous mode [ 44.541847][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.549058][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.556504][ T473] device bridge_slave_1 entered promiscuous mode [ 44.630395][ T482] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.637554][ T482] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.645051][ T482] device bridge_slave_0 entered promiscuous mode [ 44.651947][ T482] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.659119][ T482] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.666561][ T482] device bridge_slave_1 entered promiscuous mode [ 44.681074][ T477] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.688232][ T477] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.695560][ T477] device bridge_slave_0 entered promiscuous mode [ 44.717961][ T477] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.725762][ T477] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.734304][ T477] device bridge_slave_1 entered promiscuous mode [ 44.762370][ T480] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.769540][ T480] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.777020][ T480] device bridge_slave_0 entered promiscuous mode [ 44.784378][ T480] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.791599][ T480] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.799469][ T480] device bridge_slave_1 entered promiscuous mode [ 44.842816][ T483] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.850757][ T483] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.858325][ T483] device bridge_slave_0 entered promiscuous mode [ 44.875278][ T483] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.882488][ T483] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.890013][ T483] device bridge_slave_1 entered promiscuous mode [ 44.997232][ T483] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.004401][ T483] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.011826][ T483] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.018857][ T483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.059702][ T451] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.067582][ T451] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.075328][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.082688][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.090276][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.098159][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.118665][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.127362][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.135961][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.143572][ T451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.151329][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.160257][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.169112][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.176337][ T451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.183906][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.191382][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.199081][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.213859][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.222151][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.230432][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.237486][ T451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.245236][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.253795][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.262007][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.269402][ T451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.277127][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.285595][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.293063][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.300887][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.309364][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.317624][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.324762][ T451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.333824][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.341446][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.373819][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.382563][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.391105][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.399936][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.407171][ T451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.415540][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.423819][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.431825][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.439943][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.447849][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.455924][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.464024][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.472111][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.480572][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.488827][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.495861][ T451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.503238][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.511881][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.520297][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.527421][ T451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.535089][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.555341][ T473] device veth0_vlan entered promiscuous mode [ 45.562764][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.571378][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.579751][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.587959][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.596175][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.604471][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.611471][ T451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.618932][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.627126][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.634305][ T451] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.641816][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.650086][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.658378][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.666427][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.674653][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.682025][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.689940][ T480] device veth0_vlan entered promiscuous mode [ 45.706939][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.715812][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.723987][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.735239][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.757905][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.766097][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.774031][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.782060][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.789852][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.800065][ T480] device veth1_macvtap entered promiscuous mode [ 45.808120][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.816442][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.825174][ T482] device veth0_vlan entered promiscuous mode [ 45.834372][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.842446][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.851039][ T473] device veth1_macvtap entered promiscuous mode [ 45.861376][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.868889][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.876383][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.885336][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.895796][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.904237][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.916875][ T482] device veth1_macvtap entered promiscuous mode [ 45.924212][ T483] device veth0_vlan entered promiscuous mode [ 45.930545][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.939187][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.947434][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.955317][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.963865][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.981592][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.990163][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.998588][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.006707][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.014847][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.022244][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.030576][ T477] device veth0_vlan entered promiscuous mode [ 46.037360][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.045766][ T451] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.072500][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.093204][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.102253][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.110955][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.121417][ T477] device veth1_macvtap entered promiscuous mode [ 46.128658][ T500] ====================================================== [ 46.128658][ T500] WARNING: the mand mount option is being deprecated and [ 46.128658][ T500] will be removed in v5.15! [ 46.128658][ T500] ====================================================== [ 46.133923][ T483] device veth1_macvtap entered promiscuous mode [ 46.162495][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.171205][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.179604][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.187732][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.196256][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.198735][ T498] EXT4-fs (loop5): Ignoring removed nobh option [ 46.205150][ T355] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.211741][ T500] EXT4-fs (loop2): Ignoring removed nobh option [ 46.219122][ T498] EXT4-fs (loop5): Ignoring removed bh option [ 46.231067][ T498] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 46.241819][ T500] EXT4-fs (loop2): Ignoring removed bh option [ 46.257649][ T500] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 46.260806][ T498] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 46.274628][ T500] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 46.296097][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.318660][ T24] audit: type=1400 audit(1771442017.150:108): avc: denied { mount } for pid=499 comm="syz.2.18" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 46.336935][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.356810][ T24] audit: type=1400 audit(1771442017.180:109): avc: denied { read append } for pid=499 comm="syz.2.18" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.359766][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.379564][ T24] audit: type=1400 audit(1771442017.180:110): avc: denied { open } for pid=499 comm="syz.2.18" path="/0/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.379577][ T24] audit: type=1400 audit(1771442017.180:111): avc: denied { write } for pid=499 comm="syz.2.18" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.379592][ T24] audit: type=1400 audit(1771442017.180:112): avc: denied { add_name } for pid=499 comm="syz.2.18" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.379606][ T24] audit: type=1400 audit(1771442017.180:113): avc: denied { create } for pid=499 comm="syz.2.18" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 46.518744][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.520253][ T480] EXT4-fs error (device loop2): mb_free_blocks:1540: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 46.527720][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.552744][ T508] EXT4-fs (loop3): Ignoring removed nobh option [ 46.553937][ T480] ================================================================== [ 46.559639][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.567232][ T480] BUG: KASAN: use-after-free in ext4_ext_remove_space+0x374f/0x4570 [ 46.567245][ T480] Read of size 4 at addr ffff8881195a5c18 by task syz-executor/480 [ 46.567255][ T480] [ 46.575612][ T508] EXT4-fs (loop3): Ignoring removed bh option [ 46.583622][ T480] CPU: 0 PID: 480 Comm: syz-executor Not tainted syzkaller #0 [ 46.583626][ T480] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 46.583635][ T480] Call Trace: [ 46.583655][ T480] __dump_stack+0x21/0x24 [ 46.592143][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.594711][ T480] dump_stack_lvl+0x1a7/0x208 [ 46.594720][ T480] ? show_regs_print_info+0x18/0x18 [ 46.594727][ T480] ? thaw_kernel_threads+0x220/0x220 [ 46.594736][ T480] print_address_description+0x7f/0x2c0 [ 46.594745][ T480] ? ext4_ext_remove_space+0x374f/0x4570 [ 46.594760][ T480] kasan_report+0xe2/0x130 [ 46.601223][ T319] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.608863][ T480] ? __read_extent_tree_block+0x1e8/0x790 [ 46.608871][ T480] ? ext4_ext_remove_space+0x374f/0x4570 [ 46.608881][ T480] __asan_report_load4_noabort+0x14/0x20 [ 46.608888][ T480] ext4_ext_remove_space+0x374f/0x4570 [ 46.608895][ T480] ? __kasan_slab_free+0x11/0x20 [ 46.608911][ T480] ? ext4_es_free_extent+0x3de/0x4c0 [ 46.619799][ T508] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 46.622866][ T480] ? ext4_es_free_extent+0x3de/0x4c0 [ 46.728914][ T480] ? __es_remove_extent+0xdbf/0x16f0 [ 46.734368][ T480] ? _raw_write_lock+0x94/0xf0 [ 46.739121][ T480] ? ext4_da_release_space+0x19f/0x410 [ 46.744651][ T480] ? ext4_ext_index_trans_blocks+0x100/0x100 [ 46.750635][ T480] ext4_ext_truncate+0x169/0x1f0 [ 46.755691][ T480] ext4_truncate+0xb21/0x12d0 [ 46.760546][ T480] ? __ext4_mark_inode_dirty+0x610/0x610 [ 46.766350][ T480] ext4_evict_inode+0xf5b/0x1770 [ 46.771280][ T480] ? _raw_spin_unlock+0x4d/0x70 [ 46.776111][ T480] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 46.781976][ T480] ? inode_io_list_del_locked+0x1b3/0x210 [ 46.787676][ T480] ? _raw_spin_unlock+0x4d/0x70 [ 46.792620][ T480] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 46.798541][ T480] evict+0x4ae/0x930 [ 46.802535][ T480] ? mode_strip_sgid+0x160/0x160 [ 46.807461][ T480] ? _raw_spin_lock+0x94/0xf0 [ 46.812660][ T480] ? _raw_spin_trylock_bh+0x150/0x150 [ 46.818141][ T480] ? iput+0x291/0x7c0 [ 46.822203][ T480] ? __kasan_check_write+0x14/0x20 [ 46.827375][ T480] iput+0x638/0x7c0 [ 46.831167][ T480] do_unlinkat+0x347/0x680 [ 46.835646][ T480] ? __check_object_size+0x2f4/0x3c0 [ 46.840904][ T480] ? fsnotify_link_count+0x90/0x90 [ 46.846224][ T480] ? getname_flags+0x206/0x500 [ 46.850971][ T480] __x64_sys_unlink+0x49/0x50 [ 46.855901][ T480] do_syscall_64+0x31/0x40 [ 46.860293][ T480] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.866188][ T480] RIP: 0033:0x7f3ba4b201a7 [ 46.870593][ T480] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 46.890653][ T480] RSP: 002b:00007ffe3b01bee8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 46.899147][ T480] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f3ba4b201a7 [ 46.907269][ T480] RDX: 00007ffe3b01bf10 RSI: 00007ffe3b01bfa0 RDI: 00007ffe3b01bfa0 [ 46.915227][ T480] RBP: 00007ffe3b01bfa0 R08: 00007ffe3b01cfa0 R09: 00000000ffffffff [ 46.923179][ T480] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe3b01d090 [ 46.931143][ T480] R13: 00007f3ba4bb2e5b R14: 000000000000b4e9 R15: 00007ffe3b01e160 [ 46.939273][ T480] [ 46.941583][ T480] Allocated by task 94: [ 46.945808][ T480] __kasan_slab_alloc+0xbd/0xf0 [ 46.950802][ T480] slab_post_alloc_hook+0x5d/0x2f0 [ 46.955900][ T480] kmem_cache_alloc+0x162/0x2d0 [ 46.960732][ T480] getname_flags+0xb9/0x500 [ 46.965296][ T480] user_path_at_empty+0x2f/0x50 [ 46.970230][ T480] do_readlinkat+0xd9/0x490 [ 46.974705][ T480] __x64_sys_readlink+0x7f/0x90 [ 46.979523][ T480] do_syscall_64+0x31/0x40 [ 46.983907][ T480] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.989763][ T480] [ 46.992154][ T480] Freed by task 94: [ 46.995935][ T480] kasan_set_track+0x4a/0x70 [ 47.000580][ T480] kasan_set_free_info+0x23/0x40 [ 47.005577][ T480] ____kasan_slab_free+0x125/0x160 [ 47.010659][ T480] __kasan_slab_free+0x11/0x20 [ 47.015398][ T480] slab_free_freelist_hook+0xc5/0x190 [ 47.020754][ T480] kmem_cache_free+0x100/0x2d0 [ 47.025498][ T480] filename_lookup+0x4b3/0x6a0 [ 47.030270][ T480] user_path_at_empty+0x43/0x50 [ 47.035117][ T480] do_readlinkat+0xd9/0x490 [ 47.039591][ T480] __x64_sys_readlink+0x7f/0x90 [ 47.044415][ T480] do_syscall_64+0x31/0x40 [ 47.048804][ T480] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.054660][ T480] [ 47.056961][ T480] The buggy address belongs to the object at ffff8881195a5500 [ 47.056961][ T480] which belongs to the cache names_cache of size 4096 [ 47.071080][ T480] The buggy address is located 1816 bytes inside of [ 47.071080][ T480] 4096-byte region [ffff8881195a5500, ffff8881195a6500) [ 47.084752][ T480] The buggy address belongs to the page: [ 47.090655][ T480] page:ffffea0004656800 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x1195a0 [ 47.101388][ T480] head:ffffea0004656800 order:3 compound_mapcount:0 compound_pincount:0 [ 47.109692][ T480] flags: 0x4000000000010200(slab|head) [ 47.115232][ T480] raw: 4000000000010200 dead000000000100 dead000000000122 ffff88810018a780 [ 47.123790][ T480] raw: 0000000000000000 0000000000070007 00000001ffffffff 0000000000000000 [ 47.132431][ T480] page dumped because: kasan: bad access detected [ 47.138829][ T480] page_owner tracks the page as allocated [ 47.144531][ T480] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 98, ts 4537350983, free_ts 0 [ 47.162702][ T480] prep_new_page+0x179/0x180 [ 47.167323][ T480] get_page_from_freelist+0x223b/0x23d0 [ 47.173062][ T480] __alloc_pages_nodemask+0x290/0x620 [ 47.178406][ T480] new_slab+0x84/0x3f0 [ 47.182450][ T480] ___slab_alloc+0x2a6/0x450 [ 47.187110][ T480] __slab_alloc+0x63/0xa0 [ 47.191427][ T480] kmem_cache_alloc+0x1ac/0x2d0 [ 47.196254][ T480] getname_flags+0xb9/0x500 [ 47.200926][ T480] user_path_at_empty+0x2f/0x50 [ 47.205743][ T480] do_readlinkat+0xd9/0x490 [ 47.210234][ T480] __x64_sys_readlink+0x7f/0x90 [ 47.215146][ T480] do_syscall_64+0x31/0x40 [ 47.219554][ T480] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.225592][ T480] page_owner free stack trace missing [ 47.230928][ T480] [ 47.233228][ T480] Memory state around the buggy address: [ 47.238832][ T480] ffff8881195a5b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.246867][ T480] ffff8881195a5b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.254903][ T480] >ffff8881195a5c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.262930][ T480] ^ [ 47.267755][ T480] ffff8881195a5c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.275788][ T480] ffff8881195a5d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 47.283818][ T480] ================================================================== [ 47.292108][ T480] Disabling lock debugging due to kernel taint [ 47.308517][ T473] EXT4-fs error (device loop5): mb_free_blocks:1540: group 0, inode 16: block 81:freeing already freed block (bit 5); block bitmap corrupt. [ 47.314049][ T508] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 47.364703][ T482] EXT4-fs error (device loop3): mb_free_blocks:1540: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 47.425126][ T515] EXT4-fs (loop1): Ignoring removed nobh option [ 47.431540][ T515] EXT4-fs (loop1): Ignoring removed bh option [ 47.455152][ T515] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.485831][ T515] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 47.500609][ T518] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.516997][ T520] EXT4-fs (loop6): Ignoring removed nobh option [ 47.524307][ T520] EXT4-fs (loop6): Ignoring removed bh option [ 47.530521][ T520] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.533661][ T518] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.550435][ T518] device bridge_slave_0 entered promiscuous mode [ 47.557773][ T518] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.558704][ T477] EXT4-fs error (device loop1): mb_free_blocks:1540: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 47.565221][ T518] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.588511][ T520] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 47.593063][ T518] device bridge_slave_1 entered promiscuous mode [ 47.627849][ T483] EXT4-fs error (device loop6): mb_free_blocks:1540: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 47.684802][ T526] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.691838][ T526] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.699801][ T526] device bridge_slave_0 entered promiscuous mode [ 47.708706][ T526] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.716162][ T526] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.724069][ T526] device bridge_slave_1 entered promiscuous mode [ 47.739204][ T525] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.746279][ T525] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.753816][ T525] device bridge_slave_0 entered promiscuous mode [ 47.773721][ T525] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.780763][ T525] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.788344][ T525] device bridge_slave_1 entered promiscuous mode [ 47.896043][ T553] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.903249][ T553] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.910827][ T553] device bridge_slave_0 entered promiscuous mode [ 47.925102][ T518] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.932235][ T518] bridge0: port 2(bridge_slave_1) entered forwarding state [ 47.939605][ T518] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.946640][ T518] bridge0: port 1(bridge_slave_0) entered forwarding state [ 47.957919][ T553] bridge0: port 2(bridge_slave_1) entered blocking state [ 47.965249][ T553] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.972672][ T553] device bridge_slave_1 entered promiscuous mode [ 47.991203][ T557] bridge0: port 1(bridge_slave_0) entered blocking state [ 47.998563][ T557] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.006026][ T557] device bridge_slave_0 entered promiscuous mode [ 48.019956][ T557] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.027132][ T557] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.034428][ T557] device bridge_slave_1 entered promiscuous mode [ 48.045639][ T526] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.052670][ T526] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.059933][ T526] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.067032][ T526] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.087402][ T525] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.094544][ T525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.101874][ T525] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.108907][ T525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.164715][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.172426][ T512] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.179840][ T512] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.187491][ T512] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.195051][ T512] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.202395][ T512] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.209871][ T512] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.243291][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.251673][ T512] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.258805][ T512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.266640][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.275333][ T512] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.282434][ T512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.304273][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.311710][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.320850][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.329791][ T512] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.336854][ T512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.344567][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.352657][ T512] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.359718][ T512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.367148][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.375574][ T512] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.382577][ T512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.390411][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.413792][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.422250][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.431644][ T512] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.438702][ T512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.446367][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.454660][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.462664][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.470743][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.478710][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.486764][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.534461][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.542994][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.552232][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.561007][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.569199][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.576859][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.584501][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 48.592817][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.601446][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.609061][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.617595][ T525] device veth0_vlan entered promiscuous mode [ 48.632720][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.641284][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.649965][ T512] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.657025][ T512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.664753][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.673090][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.681391][ T512] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.688623][ T512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.696147][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.707110][ T525] device veth1_macvtap entered promiscuous mode [ 48.724277][ T518] device veth0_vlan entered promiscuous mode [ 48.731082][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 48.739860][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.748234][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 48.756113][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 48.764336][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.772645][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.780401][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.788896][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 48.797531][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.825905][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 48.833846][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.841214][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.849402][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.858161][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 48.866625][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.875015][ T512] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.882014][ T512] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.889537][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 48.898080][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.906385][ T512] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.913497][ T512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.920854][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 48.930341][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 48.938525][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.968879][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.977792][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.986788][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.996756][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.009303][ T557] device veth0_vlan entered promiscuous mode [ 49.015713][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.023123][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.030529][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.038917][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.047513][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.055911][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.074546][ T518] device veth1_macvtap entered promiscuous mode [ 49.081894][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.090539][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.099279][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.107796][ T512] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.127749][ T557] device veth1_macvtap entered promiscuous mode [ 49.145678][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.154640][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.162879][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.171265][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.179789][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.189948][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.198958][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.201469][ T565] EXT4-fs (loop8): Ignoring removed nobh option [ 49.206753][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.212674][ T565] EXT4-fs (loop8): Ignoring removed bh option [ 49.226226][ T565] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 49.242290][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.251419][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.251716][ T565] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 49.293833][ T553] device veth0_vlan entered promiscuous mode [ 49.305134][ T525] EXT4-fs error (device loop8): mb_free_blocks:1540: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 49.335067][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 49.343677][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.365246][ T526] device veth0_vlan entered promiscuous mode [ 49.376365][ T553] device veth1_macvtap entered promiscuous mode [ 49.383742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.391933][ T571] EXT4-fs (loop7): Ignoring removed nobh option [ 49.392351][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 49.398342][ T571] EXT4-fs (loop7): Ignoring removed bh option [ 49.408018][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.412201][ T571] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 49.421187][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.439718][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.440802][ T571] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 49.479738][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 49.488334][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.507976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.517071][ T572] EXT4-fs (loop4): Ignoring removed nobh option [ 49.522177][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.532355][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.541403][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.544575][ T572] EXT4-fs (loop4): Ignoring removed bh option 2026/02/18 19:13:40 executed programs: 30 [ 49.554425][ T526] device veth1_macvtap entered promiscuous mode [ 49.557303][ T518] EXT4-fs error (device loop7): mb_free_blocks:1540: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 49.577710][ T572] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 49.581440][ T576] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.597852][ T576] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.605619][ T576] device bridge_slave_0 entered promiscuous mode [ 49.605763][ T518] EXT4-fs error (device loop7): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 36143008, count = 0 [ 49.614544][ T572] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 49.631538][ T518] EXT4-fs error (device loop7): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 36143008, count = 16 [ 49.666595][ T557] EXT4-fs error (device loop4): mb_free_blocks:1540: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 49.667591][ T518] EXT4-fs error (device loop7): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 0, count = 0 [ 49.682428][ T557] EXT4-fs error (device loop4): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 281471419315344, count = 16 [ 49.701765][ T518] EXT4-fs error (device loop7): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 39100976, count = 0 [ 49.710245][ T557] EXT4-fs error (device loop4): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 281471419313176, count = 2177 [ 49.723199][ T518] EXT4-fs error (device loop7): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 0, count = 16 [ 49.740989][ T576] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.752629][ T518] EXT4-fs error (device loop7): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 0, count = 1 [ 49.759965][ T576] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.772357][ T557] EXT4-fs error (device loop4): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 281471419313168, count = 16 [ 49.772465][ T557] EXT4-fs error (device loop4): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 45410689216384, count = 16 [ 49.780410][ T576] device bridge_slave_1 entered promiscuous mode [ 49.794908][ T557] EXT4-fs error (device loop4): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 45410689190017, count = 26368 [ 49.823619][ T518] EXT4-fs error (device loop7): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 0, count = 192 [ 49.830841][ T557] EXT4-fs error (device loop4): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 45410689190016, count = 16 [ 49.845100][ T518] EXT4-fs error (device loop7): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 2366527012752, count = 16 [ 49.873980][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 49.874197][ T518] EXT4-fs error (device loop7): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 2366526980096, count = 32672 [ 49.881906][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.905397][ T557] EXT4-fs error (device loop4): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 281470996965504, count = 16 [ 49.905733][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.923758][ T557] EXT4-fs error (device loop4): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 281470996963328, count = 2177 [ 49.929385][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.951955][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.005349][ T585] EXT4-fs (loop0): Ignoring removed nobh option [ 50.011619][ T585] EXT4-fs (loop0): Ignoring removed bh option [ 50.021153][ T585] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 50.041014][ T576] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.042705][ T588] EXT4-fs (loop9): Ignoring removed nobh option [ 50.048187][ T576] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.048245][ T576] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.048253][ T576] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.062401][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.071319][ T588] EXT4-fs (loop9): Ignoring removed bh option [ 50.081522][ T585] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 50.084776][ T588] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 50.090832][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.134525][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.135212][ T553] EXT4-fs error (device loop0): mb_free_blocks:1540: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 50.143013][ T588] EXT4-fs (loop9): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 50.198792][ T526] EXT4-fs error (device loop9): mb_free_blocks:1540: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 50.203540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.221839][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.229090][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.246446][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.254825][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.261875][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.271499][ T112] device bridge_slave_1 left promiscuous mode [ 50.277820][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.285556][ T112] device bridge_slave_0 left promiscuous mode [ 50.291938][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.299743][ T112] device bridge_slave_1 left promiscuous mode [ 50.306004][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.313296][ T112] device bridge_slave_0 left promiscuous mode [ 50.319605][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.327391][ T112] device bridge_slave_1 left promiscuous mode [ 50.333712][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.341074][ T112] device bridge_slave_0 left promiscuous mode [ 50.347589][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.355329][ T112] device bridge_slave_1 left promiscuous mode [ 50.361526][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.369069][ T112] device bridge_slave_0 left promiscuous mode [ 50.375205][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.382914][ T112] device bridge_slave_1 left promiscuous mode [ 50.389095][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.396945][ T112] device bridge_slave_0 left promiscuous mode [ 50.403199][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.411426][ T112] device veth1_macvtap left promiscuous mode [ 50.417652][ T112] device veth0_vlan left promiscuous mode [ 50.423872][ T112] device veth1_macvtap left promiscuous mode [ 50.429832][ T112] device veth0_vlan left promiscuous mode [ 50.435811][ T112] device veth1_macvtap left promiscuous mode [ 50.441789][ T112] device veth0_vlan left promiscuous mode [ 50.447767][ T112] device veth1_macvtap left promiscuous mode [ 50.453866][ T112] device veth0_vlan left promiscuous mode [ 50.459658][ T112] device veth1_macvtap left promiscuous mode [ 50.466020][ T112] device veth0_vlan left promiscuous mode [ 50.520058][ T112] general protection fault, probably for non-canonical address 0xdffffc0000bfc3ef: 0000 [#1] PREEMPT SMP KASAN [ 50.532443][ T112] KASAN: probably user-memory-access in range [0x0000000005fe1f78-0x0000000005fe1f7f] [ 50.542421][ T112] CPU: 0 PID: 112 Comm: kworker/u4:2 Tainted: G B syzkaller #0 [ 50.551616][ T112] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.561921][ T112] Workqueue: netns cleanup_net [ 50.566705][ T112] RIP: 0010:fib6_del+0xbd3/0xfa0 [ 50.572108][ T112] Code: 00 00 00 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 1b 07 9e fd 4c 8b 33 49 83 c6 7c 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 d0 02 00 00 41 ff 06 48 8b 7c 24 20 31 [ 50.591696][ T112] RSP: 0018:ffffc90000c770a0 EFLAGS: 00010203 [ 50.597875][ T112] RAX: 0000000000bfc3ef RBX: ffff88812bf66c00 RCX: 0000000000000000 [ 50.605835][ T112] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffff88812bf66c28 [ 50.613866][ T112] RBP: ffffc90000c77270 R08: ffffc90000c771af R09: ffffc90000c771a0 [ 50.621937][ T112] R10: dffffc0000000000 R11: fffff5200018ee36 R12: dffffc0000000000 [ 50.629887][ T112] R13: ffff888115ce6000 R14: 0000000005fe1f7c R15: 1ffff9200018ee5a [ 50.637848][ T112] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 50.646810][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 50.653536][ T112] CR2: 00007feda37a8000 CR3: 000000010d48a000 CR4: 00000000003506b0 [ 50.661522][ T112] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 50.669606][ T112] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 50.677678][ T112] Call Trace: [ 50.681028][ T112] ? unwind_next_frame+0x3d5/0x700 [ 50.686122][ T112] ? arch_stack_walk+0x108/0x140 [ 50.691030][ T112] ? fib6_locate+0x460/0x460 [ 50.695678][ T112] ? stack_trace_snprint+0xf0/0xf0 [ 50.700784][ T112] ? neigh_ifdown+0x1f/0x30 [ 50.705362][ T112] ? fib6_ifdown+0x2eb/0x4e0 [ 50.709930][ T112] fib6_clean_node+0x2a4/0x540 [ 50.714747][ T112] ? node_free_rcu+0x30/0x30 [ 50.719409][ T112] ? arp_ifdown+0x1c/0x20 [ 50.723721][ T112] ? unregister_netdevice_many+0x45e/0x1a80 [ 50.729770][ T112] ? default_device_exit_batch+0x35e/0x3c0 [ 50.735553][ T112] ? cleanup_net+0x603/0xb80 [ 50.740119][ T112] ? process_one_work+0x6e1/0xba0 [ 50.745217][ T112] ? worker_thread+0xa6a/0x13c0 [ 50.750038][ T112] ? ret_from_fork+0x1f/0x30 [ 50.754724][ T112] fib6_walk_continue+0x4fc/0x700 [ 50.759730][ T112] fib6_walk+0x153/0x290 [ 50.763944][ T112] fib6_clean_all+0x1b3/0x290 [ 50.768687][ T112] ? rt6_sync_down_dev+0x140/0x140 [ 50.773859][ T112] ? fib6_del+0xfa0/0xfa0 [ 50.778248][ T112] ? node_free_rcu+0x30/0x30 [ 50.782815][ T112] ? rt6_sync_down_dev+0x140/0x140 [ 50.787986][ T112] ? call_rcu+0x10b0/0x10b0 [ 50.792815][ T112] rt6_disable_ip+0x121/0x6b0 [ 50.797558][ T112] ? __kasan_check_write+0x14/0x20 [ 50.802685][ T112] ? fib6_ifdown+0x4e0/0x4e0 [ 50.807245][ T112] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 50.812695][ T112] ? __kasan_check_read+0x11/0x20 [ 50.817786][ T112] addrconf_ifdown+0x150/0x1850 [ 50.822622][ T112] ? _raw_spin_unlock_irqrestore+0x5b/0x80 [ 50.828499][ T112] ? addrconf_cleanup+0x1c0/0x1c0 [ 50.833522][ T112] ? __kasan_check_write+0x14/0x20 [ 50.838691][ T112] ? mutex_lock+0x92/0xf0 [ 50.843407][ T112] ? mutex_trylock+0xa0/0xa0 [ 50.848436][ T112] ? __kasan_check_write+0x14/0x20 [ 50.853685][ T112] addrconf_notify+0x3bd/0xe90 [ 50.858659][ T112] raw_notifier_call_chain+0x90/0x100 [ 50.864031][ T112] dev_close_many+0x331/0x4d0 [ 50.868772][ T112] ? __dev_open+0x500/0x500 [ 50.873759][ T112] ? __kasan_check_read+0x11/0x20 [ 50.879213][ T112] unregister_netdevice_many+0x45e/0x1a80 [ 50.885149][ T112] ? alloc_netdev_mqs+0xc80/0xc80 [ 50.890150][ T112] ? unregister_netdevice_queue+0x1aa/0x370 [ 50.896315][ T112] ? list_netdevice+0x4c0/0x4c0 [ 50.901155][ T112] ? br_dev_delete+0xfc/0x110 [ 50.906065][ T112] default_device_exit_batch+0x35e/0x3c0 [ 50.912022][ T112] ? default_device_exit+0x390/0x390 [ 50.917450][ T112] ? wait_woken+0x180/0x180 [ 50.922026][ T112] ? rtnl_unlock+0xe/0x10 [ 50.926483][ T112] ? default_device_exit+0x390/0x390 [ 50.932138][ T112] cleanup_net+0x603/0xb80 [ 50.936646][ T112] ? __kasan_check_write+0x14/0x20 [ 50.941728][ T112] ? ops_init+0x4a0/0x4a0 [ 50.946042][ T112] ? read_word_at_a_time+0x12/0x20 [ 50.951224][ T112] ? strscpy+0x9b/0x290 [ 50.955729][ T112] process_one_work+0x6e1/0xba0 [ 50.960854][ T112] worker_thread+0xa6a/0x13c0 [ 50.965604][ T112] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 50.971041][ T112] ? __kasan_check_read+0x11/0x20 [ 50.976308][ T112] kthread+0x346/0x3d0 [ 50.980437][ T112] ? worker_clr_flags+0x190/0x190 [ 50.985436][ T112] ? kthread_blkcg+0xd0/0xd0 [ 50.990014][ T112] ret_from_fork+0x1f/0x30 [ 50.994398][ T112] Modules linked in: [ 50.998519][ T112] ---[ end trace d92c19d2df42f966 ]--- [ 51.003997][ T112] RIP: 0010:fib6_del+0xbd3/0xfa0 [ 51.009090][ T112] Code: 00 00 00 00 00 00 48 89 d8 48 c1 e8 03 42 80 3c 20 00 74 08 48 89 df e8 1b 07 9e fd 4c 8b 33 49 83 c6 7c 4c 89 f0 48 c1 e8 03 <42> 0f b6 04 20 84 c0 0f 85 d0 02 00 00 41 ff 06 48 8b 7c 24 20 31 [ 51.028793][ T112] RSP: 0018:ffffc90000c770a0 EFLAGS: 00010203 [ 51.034872][ T112] RAX: 0000000000bfc3ef RBX: ffff88812bf66c00 RCX: 0000000000000000 [ 51.042991][ T112] RDX: 0000000000000010 RSI: 0000000000000000 RDI: ffff88812bf66c28 [ 51.050973][ T112] RBP: ffffc90000c77270 R08: ffffc90000c771af R09: ffffc90000c771a0 [ 51.059044][ T112] R10: dffffc0000000000 R11: fffff5200018ee36 R12: dffffc0000000000 [ 51.067017][ T112] R13: ffff888115ce6000 R14: 0000000005fe1f7c R15: 1ffff9200018ee5a [ 51.075107][ T112] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 51.084494][ T112] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.091086][ T112] CR2: 00007feda37a8000 CR3: 000000010d48a000 CR4: 00000000003506b0 [ 51.099449][ T112] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.107440][ T112] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.115530][ T112] Kernel panic - not syncing: Fatal exception in interrupt [ 51.123209][ T112] Kernel Offset: disabled [ 51.127712][ T112] Rebooting in 86400 seconds..