[ 62.199335][ T2878] bridge_slave_0: left promiscuous mode [ 62.205281][ T2878] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.453892][ T2878] hsr_slave_0: left promiscuous mode [ 62.465196][ T2878] hsr_slave_1: left promiscuous mode [ 62.481436][ T2878] veth1_macvtap: left promiscuous mode [ 62.487440][ T2878] veth0_macvtap: left promiscuous mode [ 62.493297][ T2878] veth1_vlan: left promiscuous mode [ 62.498755][ T2878] veth0_vlan: left promiscuous mode [ 62.691272][ T2878] team0 (unregistering): Port device team_slave_1 removed [ 62.704968][ T2878] team0 (unregistering): Port device team_slave_0 removed Warning: Permanently added '10.128.10.35' (ED25519) to the list of known hosts. 2026/01/04 15:35:30 parsed 1 programs [ 84.925673][ T4498] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.475566][ T2975] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.484120][ T2975] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.516290][ T2878] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.524293][ T2878] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.387158][ T4533] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.394660][ T4533] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.402164][ T4533] bridge_slave_0: entered allmulticast mode [ 88.410764][ T4533] bridge_slave_0: entered promiscuous mode [ 88.418831][ T4533] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.426028][ T4533] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.433264][ T4533] bridge_slave_1: entered allmulticast mode [ 88.440159][ T4533] bridge_slave_1: entered promiscuous mode [ 88.536666][ T4533] team0: Port device team_slave_0 added [ 88.543665][ T4533] team0: Port device team_slave_1 added [ 88.641649][ T4533] hsr_slave_0: entered promiscuous mode [ 88.647742][ T4533] hsr_slave_1: entered promiscuous mode [ 88.778787][ T4533] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.788037][ T4533] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.800838][ T4533] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.810036][ T4533] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.304799][ T4533] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.315757][ T2878] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.322839][ T2878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.340118][ T692] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.347274][ T692] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.978869][ T4533] veth0_vlan: entered promiscuous mode [ 89.987972][ T4533] veth1_vlan: entered promiscuous mode [ 90.200418][ T4533] veth0_macvtap: entered promiscuous mode [ 90.208353][ T4533] veth1_macvtap: entered promiscuous mode 2026/01/04 15:35:37 executed programs: 0 [ 91.321523][ T3054] bridge_slave_1: left allmulticast mode [ 91.328138][ T3054] bridge_slave_1: left promiscuous mode [ 91.335053][ T3054] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.344616][ T3054] bridge_slave_0: left allmulticast mode [ 91.350438][ T3054] bridge_slave_0: left promiscuous mode [ 91.356233][ T3054] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.607429][ T3054] hsr_slave_0: left promiscuous mode [ 91.625463][ T3054] hsr_slave_1: left promiscuous mode [ 91.637675][ T3054] veth1_macvtap: left promiscuous mode [ 91.643264][ T3054] veth0_macvtap: left promiscuous mode [ 91.649796][ T3054] veth1_vlan: left promiscuous mode [ 91.655458][ T3054] veth0_vlan: left promiscuous mode [ 91.841727][ T3054] team0 (unregistering): Port device team_slave_1 removed [ 91.860341][ T3054] team0 (unregistering): Port device team_slave_0 removed [ 92.653437][ T4716] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.660637][ T4716] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.668021][ T4716] bridge_slave_0: entered allmulticast mode [ 92.674987][ T4716] bridge_slave_0: entered promiscuous mode [ 92.681595][ T4708] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.689021][ T4708] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.696321][ T4708] bridge_slave_0: entered allmulticast mode [ 92.703060][ T4708] bridge_slave_0: entered promiscuous mode [ 92.734239][ T4716] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.741699][ T4716] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.748911][ T4716] bridge_slave_1: entered allmulticast mode [ 92.755945][ T4716] bridge_slave_1: entered promiscuous mode [ 92.769589][ T4708] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.777087][ T4708] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.784277][ T4708] bridge_slave_1: entered allmulticast mode [ 92.791041][ T4708] bridge_slave_1: entered promiscuous mode [ 92.854377][ T4718] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.861699][ T4718] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.869832][ T4718] bridge_slave_0: entered allmulticast mode [ 92.877249][ T4718] bridge_slave_0: entered promiscuous mode [ 92.907098][ T4718] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.914404][ T4718] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.921601][ T4718] bridge_slave_1: entered allmulticast mode [ 92.928561][ T4718] bridge_slave_1: entered promiscuous mode [ 92.935630][ T4709] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.942848][ T4709] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.950237][ T4709] bridge_slave_0: entered allmulticast mode [ 92.957846][ T4709] bridge_slave_0: entered promiscuous mode [ 92.964965][ T4711] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.972305][ T4711] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.979475][ T4711] bridge_slave_0: entered allmulticast mode [ 92.986477][ T4711] bridge_slave_0: entered promiscuous mode [ 93.013383][ T4709] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.020768][ T4709] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.028050][ T4709] bridge_slave_1: entered allmulticast mode [ 93.034683][ T4709] bridge_slave_1: entered promiscuous mode [ 93.058730][ T4711] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.066234][ T4711] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.073377][ T4711] bridge_slave_1: entered allmulticast mode [ 93.081576][ T4711] bridge_slave_1: entered promiscuous mode [ 93.268083][ T4716] team0: Port device team_slave_0 added [ 93.302392][ T4716] team0: Port device team_slave_1 added [ 93.322576][ T4708] team0: Port device team_slave_0 added [ 93.358822][ T4718] team0: Port device team_slave_0 added [ 93.383263][ T4708] team0: Port device team_slave_1 added [ 93.390614][ T4718] team0: Port device team_slave_1 added [ 93.478151][ T4709] team0: Port device team_slave_0 added [ 93.572415][ T4709] team0: Port device team_slave_1 added [ 93.580847][ T4711] team0: Port device team_slave_0 added [ 93.639866][ T4711] team0: Port device team_slave_1 added [ 93.871485][ T4708] hsr_slave_0: entered promiscuous mode [ 93.878157][ T4708] hsr_slave_1: entered promiscuous mode [ 93.889924][ T4716] hsr_slave_0: entered promiscuous mode [ 93.896697][ T4716] hsr_slave_1: entered promiscuous mode [ 93.902789][ T4716] debugfs: 'hsr0' already exists in 'hsr' [ 93.908603][ T4716] Cannot create hsr debugfs directory [ 93.980778][ T4718] hsr_slave_0: entered promiscuous mode [ 93.987933][ T4718] hsr_slave_1: entered promiscuous mode [ 93.994391][ T4718] debugfs: 'hsr0' already exists in 'hsr' [ 94.000306][ T4718] Cannot create hsr debugfs directory [ 94.091248][ T4709] hsr_slave_0: entered promiscuous mode [ 94.097927][ T4709] hsr_slave_1: entered promiscuous mode [ 94.103977][ T4709] debugfs: 'hsr0' already exists in 'hsr' [ 94.109945][ T4709] Cannot create hsr debugfs directory [ 94.294042][ T4711] hsr_slave_0: entered promiscuous mode [ 94.304347][ T4711] hsr_slave_1: entered promiscuous mode [ 94.312694][ T4711] debugfs: 'hsr0' already exists in 'hsr' [ 94.318861][ T4711] Cannot create hsr debugfs directory [ 94.646774][ T4708] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 94.668462][ T4708] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 94.691665][ T4708] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 94.719051][ T4708] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 95.149549][ T4716] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 95.188580][ T4716] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 95.208470][ T4716] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 95.230453][ T4718] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 95.248750][ T4716] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 95.259977][ T4718] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 95.278682][ T4718] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 95.300537][ T4718] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 95.488699][ T4709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.527295][ T4709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.567883][ T4709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.601574][ T4711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 95.631909][ T4709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.641690][ T4711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 95.657612][ T4711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 95.692199][ T4711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 96.817255][ T4708] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.846264][ T859] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.853390][ T859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.917175][ T859] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.924325][ T859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.729153][ T4718] 8021q: adding VLAN 0 to HW filter on device team0 [ 97.757091][ T2795] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.764338][ T2795] bridge0: port 1(bridge_slave_0) entered forwarding state [ 97.827000][ T2795] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.834129][ T2795] bridge0: port 2(bridge_slave_1) entered forwarding state [ 97.968636][ T4716] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.022885][ T2780] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.030150][ T2780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.083762][ T2780] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.090932][ T2780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.319023][ T4711] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.344216][ T4709] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.370694][ T859] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.377902][ T859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.443497][ T859] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.450691][ T859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.466494][ T859] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.473819][ T859] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.483813][ T859] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.491010][ T859] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.614646][ T4709] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 98.625797][ T4709] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 100.843307][ T4708] veth0_vlan: entered promiscuous mode [ 100.881014][ T4708] veth1_vlan: entered promiscuous mode [ 101.392538][ T4718] veth0_vlan: entered promiscuous mode [ 101.419518][ T4716] veth0_vlan: entered promiscuous mode [ 101.431220][ T4718] veth1_vlan: entered promiscuous mode [ 101.452479][ T4716] veth1_vlan: entered promiscuous mode [ 101.620236][ T4711] veth0_vlan: entered promiscuous mode [ 101.659149][ T4711] veth1_vlan: entered promiscuous mode [ 101.801837][ T4709] veth0_vlan: entered promiscuous mode [ 101.844055][ T4709] veth1_vlan: entered promiscuous mode [ 101.917836][ T4708] veth0_macvtap: entered promiscuous mode [ 101.933782][ T4708] veth1_macvtap: entered promiscuous mode [ 102.506947][ T4718] veth0_macvtap: entered promiscuous mode [ 102.546653][ T4718] veth1_macvtap: entered promiscuous mode [ 102.588032][ T4716] veth0_macvtap: entered promiscuous mode [ 102.618155][ T4716] veth1_macvtap: entered promiscuous mode [ 102.748641][ T4709] veth0_macvtap: entered promiscuous mode [ 102.763622][ T4709] veth1_macvtap: entered promiscuous mode [ 102.877475][ T4711] veth0_macvtap: entered promiscuous mode [ 102.899488][ T4711] veth1_macvtap: entered promiscuous mode [ 103.181106][ T2795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.190209][ T2795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.258743][ T1555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.266910][ T1555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2026/01/04 15:35:50 executed programs: 10 [ 103.441155][ T5497] loop5: detected capacity change from 0 to 512 [ 103.484823][ T5497] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 103.550839][ T5497] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 103.606088][ T5497] System zones: 1-12 [ 103.626274][ T5497] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.19: corrupted in-inode xattr: e_value size too large [ 103.715402][ T5497] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.19: couldn't read orphan inode 15 (err -117) [ 103.787822][ T5497] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 103.831111][ T2795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.839249][ T2795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.875071][ T4708] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.908813][ T3054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.917086][ T3054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.972055][ T5526] loop5: detected capacity change from 0 to 512 [ 104.028902][ T3054] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.034946][ T2795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.036813][ T3054] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.052379][ T2795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.057416][ T5526] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 104.089569][ T3054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.097478][ T3054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.098806][ T5526] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 104.115731][ T2795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.124245][ T2795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.156053][ T5526] System zones: 1-12 [ 104.167669][ T5526] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.22: corrupted in-inode xattr: e_value size too large [ 104.209349][ T5536] loop3: detected capacity change from 0 to 512 [ 104.223341][ T5539] loop4: detected capacity change from 0 to 512 [ 104.275215][ T5539] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 104.277827][ T5536] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 104.292324][ T5526] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.22: couldn't read orphan inode 15 (err -117) [ 104.324361][ T5539] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 104.332612][ T5539] System zones: 1-12 [ 104.337791][ T5539] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.21: corrupted in-inode xattr: e_value size too large [ 104.354068][ T5539] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.21: couldn't read orphan inode 15 (err -117) [ 104.368948][ T5539] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.391429][ T5526] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.396470][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.412902][ T2795] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.420985][ T2795] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.427409][ T5542] loop0: detected capacity change from 0 to 512 [ 104.454861][ T4708] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.466764][ T5536] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 104.476288][ T5542] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 104.486260][ T692] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.494095][ T692] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.503664][ T5536] System zones: 1-12 [ 104.510030][ T5536] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.20: corrupted in-inode xattr: e_value size too large [ 104.528988][ T5542] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 104.565340][ T5542] System zones: 1-12 [ 104.581014][ T5551] loop5: detected capacity change from 0 to 512 [ 104.591670][ T5536] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.20: couldn't read orphan inode 15 (err -117) [ 104.603959][ T5542] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.17: corrupted in-inode xattr: e_value size too large [ 104.629535][ T5553] loop4: detected capacity change from 0 to 512 [ 104.649341][ T5551] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 104.650101][ T5536] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.675553][ T5542] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.17: couldn't read orphan inode 15 (err -117) [ 104.689760][ T5553] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 104.710086][ T5551] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 104.719000][ T5551] System zones: 1-12 [ 104.719476][ T5542] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.724833][ T5551] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.24: corrupted in-inode xattr: e_value size too large [ 104.748474][ T5553] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 104.764126][ T5555] loop1: detected capacity change from 0 to 512 [ 104.769048][ T5553] System zones: 1-12 [ 104.776156][ T5553] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.23: corrupted in-inode xattr: e_value size too large [ 104.807061][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.817208][ T5553] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.23: couldn't read orphan inode 15 (err -117) [ 104.817720][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 104.847986][ T5555] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 104.855742][ T5551] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.24: couldn't read orphan inode 15 (err -117) [ 104.869898][ T5553] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.904472][ T5555] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 104.934404][ T5555] System zones: 1-12 [ 104.941902][ T5562] loop0: detected capacity change from 0 to 512 [ 104.949549][ T5551] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.969590][ T5555] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.18: corrupted in-inode xattr: e_value size too large [ 104.997328][ T5562] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 104.999091][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.025275][ T5565] loop3: detected capacity change from 0 to 512 [ 105.026475][ T5555] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.18: couldn't read orphan inode 15 (err -117) [ 105.050789][ T5562] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 105.067117][ T4708] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.079326][ T5565] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 105.086314][ T5555] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.097064][ T5562] System zones: 1-12 [ 105.109734][ T5562] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.26: corrupted in-inode xattr: e_value size too large [ 105.136844][ T5562] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.26: couldn't read orphan inode 15 (err -117) [ 105.146170][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.183719][ T5562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.186727][ T5565] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 105.207078][ T5565] System zones: 1-12 [ 105.211711][ T5565] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.25: corrupted in-inode xattr: e_value size too large [ 105.257119][ T5565] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.25: couldn't read orphan inode 15 (err -117) [ 105.272620][ T5575] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 105.296827][ T5577] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 105.297436][ T5576] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 105.307129][ T5565] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.335058][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.388434][ T5577] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 105.408858][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.418446][ T5577] System zones: 1-12 [ 105.425802][ T5576] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 105.433218][ T5575] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 105.449299][ T5577] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.28: corrupted in-inode xattr: e_value size too large [ 105.464414][ T5575] System zones: 1-12 [ 105.471525][ T5575] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.29: corrupted in-inode xattr: e_value size too large [ 105.487148][ T5575] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.29: couldn't read orphan inode 15 (err -117) [ 105.488605][ T5577] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.28: couldn't read orphan inode 15 (err -117) [ 105.505418][ T5576] System zones: 1-12 [ 105.517970][ T5575] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.519003][ T5576] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.27: corrupted in-inode xattr: e_value size too large [ 105.588552][ T5577] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.629969][ T5576] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.27: couldn't read orphan inode 15 (err -117) [ 105.677390][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.696298][ T5590] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 105.709410][ T5576] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.736429][ T5590] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 105.744615][ T5590] System zones: 1-12 [ 105.754859][ T5593] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 105.789372][ T5590] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.31: corrupted in-inode xattr: e_value size too large [ 105.808696][ T4708] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.834218][ T5593] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 105.863569][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 105.896918][ T5593] System zones: 1-12 [ 105.901195][ T5593] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.34: corrupted in-inode xattr: e_value size too large [ 105.929014][ T5590] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.31: couldn't read orphan inode 15 (err -117) [ 105.960660][ T5593] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.34: couldn't read orphan inode 15 (err -117) [ 105.966049][ T5590] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 105.992946][ T5602] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 106.003054][ T5593] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.073091][ T5604] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 106.083598][ T5604] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 106.099232][ T5608] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 106.110554][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.117359][ T5602] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 106.130665][ T5608] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 106.131620][ T5602] System zones: 1-12 [ 106.143324][ T5602] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.35: corrupted in-inode xattr: e_value size too large [ 106.158639][ T5602] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.35: couldn't read orphan inode 15 (err -117) [ 106.171282][ T5602] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.183549][ T5608] System zones: 1-12 [ 106.184335][ T5608] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.36: corrupted in-inode xattr: e_value size too large [ 106.213264][ T5604] System zones: 1-12 [ 106.223492][ T5604] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.37: corrupted in-inode xattr: e_value size too large [ 106.238041][ T5604] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.37: couldn't read orphan inode 15 (err -117) [ 106.251247][ T5604] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.253260][ T5608] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.36: couldn't read orphan inode 15 (err -117) [ 106.300545][ T4708] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.331558][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.332436][ T5608] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.396136][ T5613] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 106.418940][ T5616] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 106.424604][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.432049][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.469530][ T5619] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 106.488081][ T5613] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 106.541499][ T5616] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 106.545752][ T5613] System zones: 1-12 [ 106.560668][ T5619] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 106.571635][ T5624] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 106.591183][ T5619] System zones: 1-12 [ 106.591451][ T5616] System zones: 1-12 [ 106.602673][ T5624] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 106.643969][ T5616] EXT4-fs error (device loop5): ext4_iget_extra_inode:5073: inode #15: comm syz.5.39: corrupted in-inode xattr: e_value size too large [ 106.661600][ T5613] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.38: corrupted in-inode xattr: e_value size too large [ 106.700975][ T5624] System zones: 1-12 [ 106.705291][ T5619] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.40: corrupted in-inode xattr: e_value size too large [ 106.726175][ T5624] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.42: corrupted in-inode xattr: e_value size too large [ 106.726482][ T5616] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.39: couldn't read orphan inode 15 (err -117) [ 106.740920][ T5631] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 106.757022][ T5613] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.38: couldn't read orphan inode 15 (err -117) [ 106.766772][ T5619] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.40: couldn't read orphan inode 15 (err -117) [ 106.794568][ T5624] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.42: couldn't read orphan inode 15 (err -117) [ 106.807919][ T5624] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.821770][ T5631] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 106.832385][ T5619] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.843112][ T5613] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.878646][ T5631] System zones: 1-12 [ 106.879815][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.887069][ T5631] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.41: corrupted in-inode xattr: e_value size too large [ 106.922259][ T4711] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 106.934576][ T5631] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.41: couldn't read orphan inode 15 (err -117) [ 106.953690][ T5631] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 106.975564][ T4709] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.005951][ T5616] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.048175][ T4718] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.068880][ T5639] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 107.077401][ T5640] EXT4-fs (loop0): mounting ext3 file system using the ext4 subsystem [ 107.122552][ T5642] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 107.155704][ T4708] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.158062][ T5640] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 107.174954][ T5639] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 107.204780][ T5640] System zones: 1-12 [ 107.211743][ T5642] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 107.215051][ T5640] EXT4-fs error (device loop0): ext4_iget_extra_inode:5073: inode #15: comm syz.0.45: corrupted in-inode xattr: e_value size too large [ 107.233978][ T5639] System zones: 1-12 [ 107.234249][ T5639] EXT4-fs error (device loop1): ext4_iget_extra_inode:5073: inode #15: comm syz.1.43: corrupted in-inode xattr: e_value size too large [ 107.239817][ T5639] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.43: couldn't read orphan inode 15 (err -117) [ 107.272019][ T5649] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 107.300026][ T5642] System zones: 1-12 [ 107.304235][ T5642] EXT4-fs error (device loop3): ext4_iget_extra_inode:5073: inode #15: comm syz.3.44: corrupted in-inode xattr: e_value size too large [ 107.345474][ T5649] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a043c11c, mo2=0002] [ 107.353793][ T5649] System zones: 1-12 [ 107.372863][ T5639] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.375684][ T5649] EXT4-fs error (device loop4): ext4_iget_extra_inode:5073: inode #15: comm syz.4.46: corrupted in-inode xattr: e_value size too large [ 107.386956][ T5642] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.44: couldn't read orphan inode 15 (err -117) [ 107.425461][ T5640] EXT4-fs error (device loop0): ext4_orphan_get:1396: comm syz.0.45: couldn't read orphan inode 15 (err -117) [ 107.443593][ T5642] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.445259][ T5649] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.46: couldn't read orphan inode 15 (err -117) [ 107.471282][ T5649] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.488486][ T5640] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 107.506527][ T5639] EXT4-fs warning (device loop1): dx_probe:801: inode #2: comm syz.1.43: Unrecognised inode hash code 4 [ 107.517801][ T5639] EXT4-fs warning (device loop1): dx_probe:934: inode #2: comm syz.1.43: Corrupt directory, running e2fsck is recommended [ 107.556880][ T4716] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 107.568050][ T5653] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 107.579471][ T5639] ================================================================== [ 107.587560][ T5639] BUG: KASAN: use-after-free in __ext4_check_dir_entry+0x755/0x8e0 [ 107.595553][ T5639] Read of size 2 at addr ffff88811cdb2003 by task syz.1.43/5639 [ 107.603167][ T5639] [ 107.605509][ T5639] CPU: 1 UID: 0 PID: 5639 Comm: syz.1.43 Not tainted syzkaller #0 PREEMPT(none) [ 107.605526][ T5639] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 107.605541][ T5639] Call Trace: [ 107.605549][ T5639] [ 107.605555][ T5639] dump_stack_lvl+0xc8/0x130 [ 107.605577][ T5639] print_report+0xca/0x240 [ 107.605596][ T5639] ? __ext4_check_dir_entry+0x755/0x8e0 [ 107.605611][ T5639] kasan_report+0x118/0x150 [ 107.605629][ T5639] ? __ext4_check_dir_entry+0x755/0x8e0 [ 107.605644][ T5639] __ext4_check_dir_entry+0x755/0x8e0 [ 107.605660][ T5639] ext4_readdir+0x1284/0x3820 [ 107.605679][ T5639] ? __pfx_ext4_readdir+0x10/0x10 [ 107.605693][ T5639] ? __pfx_rwsem_read_trylock+0x10/0x10 [ 107.605719][ T5639] ? iterate_dir+0xc3/0x580 [ 107.605731][ T5639] ? down_read_killable+0x120/0x1a0 [ 107.605752][ T5639] iterate_dir+0x1c1/0x580 [ 107.605764][ T5639] __se_sys_getdents64+0xe4/0x240 [ 107.605777][ T5639] ? __pfx___se_sys_getdents64+0x10/0x10 [ 107.605789][ T5639] ? __pfx_filldir64+0x10/0x10 [ 107.605802][ T5639] ? switch_fpu_return+0x12c/0x1c0 [ 107.605818][ T5639] do_syscall_64+0x85/0xf80 [ 107.605836][ T5639] ? clear_bhb_loop+0x60/0xb0 [ 107.605850][ T5639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.605863][ T5639] RIP: 0033:0x7f27b516eec9 [ 107.605879][ T5639] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.605890][ T5639] RSP: 002b:00007f27b4fdf038 EFLAGS: 00000246 ORIG_RAX: 00000000000000d9 [ 107.605904][ T5639] RAX: ffffffffffffffda RBX: 00007f27b53c5fa0 RCX: 00007f27b516eec9 [ 107.605913][ T5639] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000006 [ 107.605921][ T5639] RBP: 00007f27b51f1f91 R08: 0000000000000000 R09: 0000000000000000 [ 107.605929][ T5639] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 107.605936][ T5639] R13: 00007f27b53c6038 R14: 00007f27b53c5fa0 R15: 00007ffe8c4c7f38 [ 107.605947][ T5639] [ 107.605960][ T5639] [ 107.804958][ T5639] The buggy address belongs to the physical page: [ 107.811452][ T5639] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff88811cdb3a00 pfn:0x11cdb2 [ 107.821873][ T5639] flags: 0x200000000000000(node=0|zone=2) [ 107.827618][ T5639] raw: 0200000000000000 ffffea0004b3c388 ffffea0004773108 0000000000000000 [ 107.836284][ T5639] raw: ffff88811cdb3a00 0000000000100000 00000000ffffffff 0000000000000000 [ 107.844947][ T5639] page dumped because: kasan: bad access detected [ 107.851622][ T5639] page_owner tracks the page as freed [ 107.856980][ T5639] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5216, tgid 5216 (modprobe), ts 99328411007, free_ts 104683271888 [ 107.878238][ T5639] post_alloc_hook+0x15a/0x190 [ 107.883051][ T5639] get_page_from_freelist+0x2b7c/0x2c20 [ 107.888604][ T5639] __alloc_frozen_pages_noprof+0x26b/0x460 [ 107.894406][ T5639] alloc_pages_mpol+0xd1/0x330 [ 107.899174][ T5639] allocate_slab+0x81/0x350 [ 107.903755][ T5639] ___slab_alloc+0xb72/0x1380 [ 107.908415][ T5639] __kmem_cache_alloc_bulk+0x160/0x340 [ 107.913866][ T5639] kmem_cache_prefill_sheaf+0x26b/0x360 [ 107.919409][ T5639] mas_alloc_nodes+0x1c2/0x350 [ 107.924204][ T5639] mas_preallocate+0x74e/0xcf0 [ 107.928968][ T5639] __split_vma+0x290/0xa20 [ 107.933374][ T5639] vma_modify+0x919/0x2140 [ 107.937777][ T5639] vma_modify_flags+0x1fb/0x2d0 [ 107.942616][ T5639] mprotect_fixup+0x43c/0x9e0 [ 107.947288][ T5639] do_mprotect_pkey+0x8c5/0xcb0 [ 107.952126][ T5639] __x64_sys_mprotect+0x80/0x90 [ 107.957050][ T5639] page last free pid 3408 tgid 3408 stack trace: [ 107.963362][ T5639] __free_frozen_pages+0xa93/0xc00 [ 107.968453][ T5639] __slab_free+0x2a6/0x2f0 [ 107.972855][ T5639] qlist_free_all+0x97/0x100 [ 107.977537][ T5639] kasan_quarantine_reduce+0x148/0x160 [ 107.983089][ T5639] __kasan_slab_alloc+0x22/0x80 [ 107.987944][ T5639] __kmalloc_noprof+0x384/0x750 [ 107.992793][ T5639] tomoyo_realpath_from_path+0xe3/0x5d0 [ 107.998336][ T5639] tomoyo_path_perm+0x1fa/0x520 [ 108.003169][ T5639] security_inode_getattr+0x10a/0x260 [ 108.008533][ T5639] __se_sys_newfstat+0xe1/0x3e0 [ 108.013367][ T5639] do_syscall_64+0x85/0xf80 [ 108.017856][ T5639] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.023915][ T5639] [ 108.026220][ T5639] Memory state around the buggy address: [ 108.031869][ T5639] ffff88811cdb1f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 108.039966][ T5639] ffff88811cdb1f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 108.048019][ T5639] >ffff88811cdb2000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 108.056072][ T5639] ^ [ 108.060126][ T5639] ffff88811cdb2080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 108.068276][ T5639] ffff88811cdb2100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 108.076319][ T5639] ================================================================== [ 108.086817][ T5639] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 108.094436][ T5639] Kernel Offset: disabled [ 108.098760][ T5639] Rebooting in 86400 seconds..