Warning: Permanently added '10.128.0.253' (ED25519) to the list of known hosts. 2025/10/22 14:38:58 parsed 1 programs [ 23.175122][ T24] audit: type=1400 audit(1761143938.670:64): avc: denied { node_bind } for pid=275 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 23.196396][ T24] audit: type=1400 audit(1761143938.670:65): avc: denied { create } for pid=275 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 23.216244][ T24] audit: type=1400 audit(1761143938.680:66): avc: denied { module_request } for pid=275 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 24.115256][ T24] audit: type=1400 audit(1761143939.610:67): avc: denied { mounton } for pid=282 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.116651][ T282] cgroup: Unknown subsys name 'net' [ 24.138316][ T24] audit: type=1400 audit(1761143939.610:68): avc: denied { mount } for pid=282 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.165972][ T24] audit: type=1400 audit(1761143939.640:69): avc: denied { unmount } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.166440][ T282] cgroup: Unknown subsys name 'devices' [ 24.277741][ T282] cgroup: Unknown subsys name 'hugetlb' [ 24.283554][ T282] cgroup: Unknown subsys name 'rlimit' [ 24.434208][ T24] audit: type=1400 audit(1761143939.930:70): avc: denied { setattr } for pid=282 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.458392][ T24] audit: type=1400 audit(1761143939.930:71): avc: denied { create } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.470710][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.479023][ T24] audit: type=1400 audit(1761143939.930:72): avc: denied { write } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.508368][ T24] audit: type=1400 audit(1761143939.930:73): avc: denied { read } for pid=282 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.531201][ T282] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.076624][ T292] request_module fs-gadgetfs succeeded, but still no fs? [ 25.088261][ T293] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 25.548824][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.556311][ T336] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.563996][ T336] device bridge_slave_0 entered promiscuous mode [ 25.571587][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.578913][ T336] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.586713][ T336] device bridge_slave_1 entered promiscuous mode [ 25.638689][ T336] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.645854][ T336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.653232][ T336] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.660299][ T336] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.685306][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.693454][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.701817][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.718488][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.727255][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.734595][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.742693][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.751439][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.758522][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.800906][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.821237][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.829543][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.841386][ T336] device veth0_vlan entered promiscuous mode [ 25.853338][ T336] device veth1_macvtap entered promiscuous mode [ 25.860551][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.868736][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.876534][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 25.884001][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 2025/10/22 14:39:01 executed programs: 0 [ 25.896399][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 25.907579][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.055173][ T359] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.062399][ T359] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.069926][ T359] device bridge_slave_0 entered promiscuous mode [ 26.079294][ T359] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.086747][ T359] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.094384][ T359] device bridge_slave_1 entered promiscuous mode [ 26.136889][ T358] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.143943][ T358] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.151812][ T358] device bridge_slave_0 entered promiscuous mode [ 26.160048][ T358] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.167484][ T358] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.175058][ T358] device bridge_slave_1 entered promiscuous mode [ 26.184510][ T361] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.191800][ T361] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.199481][ T361] device bridge_slave_0 entered promiscuous mode [ 26.231200][ T361] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.238347][ T361] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.245956][ T361] device bridge_slave_1 entered promiscuous mode [ 26.259020][ T356] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.266664][ T356] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.274240][ T356] device bridge_slave_0 entered promiscuous mode [ 26.283588][ T356] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.291209][ T356] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.298649][ T356] device bridge_slave_1 entered promiscuous mode [ 26.321991][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.329284][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.337105][ T360] device bridge_slave_0 entered promiscuous mode [ 26.368292][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.375831][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.383563][ T360] device bridge_slave_1 entered promiscuous mode [ 26.577585][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.585541][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.596351][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.604799][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.613426][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.620726][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.647107][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.655007][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.662578][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.670302][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.678687][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.686454][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.694037][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.701733][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.710400][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.719728][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.727392][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.735029][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.743454][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.752130][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.759367][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.767026][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 26.794310][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.803005][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.811795][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.819162][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.828219][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 26.836999][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.846142][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.854183][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.863098][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.872407][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.881436][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.888765][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.896756][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 26.905251][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.913620][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.920678][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.928195][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.936561][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 26.945969][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.954004][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.962132][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 26.970570][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.978645][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.986904][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.000146][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.008215][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.026600][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.035341][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.043828][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.051032][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.059755][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 27.067916][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.076107][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 27.084555][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.093222][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 27.100936][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.117452][ T358] device veth0_vlan entered promiscuous mode [ 27.135023][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.144721][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.153245][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.162299][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.170051][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.177995][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 27.187141][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.196086][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.203219][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.210868][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 27.228815][ T356] device veth0_vlan entered promiscuous mode [ 27.240160][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.249108][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.257821][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 27.267056][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.275795][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.282888][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.291894][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.300537][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.308647][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.317689][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.325353][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.343804][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.357335][ T358] device veth1_macvtap entered promiscuous mode [ 27.368792][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.377100][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.384800][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.395916][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.414536][ T361] device veth0_vlan entered promiscuous mode [ 27.421537][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.430823][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.439607][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.450923][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.459203][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.466954][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.477790][ T356] device veth1_macvtap entered promiscuous mode [ 27.495321][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.505317][ T360] device veth0_vlan entered promiscuous mode [ 27.515394][ T359] device veth0_vlan entered promiscuous mode [ 27.527891][ T361] device veth1_macvtap entered promiscuous mode [ 27.543779][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 27.552014][ T378] ====================================================== [ 27.552014][ T378] WARNING: the mand mount option is being deprecated and [ 27.552014][ T378] will be removed in v5.15! [ 27.552014][ T378] ====================================================== [ 27.552020][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.552634][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.594340][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.604567][ T359] device veth1_macvtap entered promiscuous mode [ 27.614346][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.622582][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.631171][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.643732][ T378] EXT4-fs (loop1): Ignoring removed nobh option [ 27.645088][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.662978][ T378] EXT4-fs (loop1): Ignoring removed bh option [ 27.670071][ T378] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 27.670190][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.694072][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.702614][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.707844][ T378] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,noauto_da_alloc,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 27.752009][ T378] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3342: comm syz.1.18: Allocating blocks 497-513 which overlap fs metadata [ 27.786533][ T378] EXT4-fs (loop1): pa ffff888125d00bd0: logic 176, phys. 481, len 2 [ 27.794678][ T378] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 1 [ 27.805612][ T360] device veth1_macvtap entered promiscuous mode [ 27.812513][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.822077][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.830825][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.840087][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.848997][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 27.858111][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.866521][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 27.874197][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.883109][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.891993][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.900489][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.915601][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 27.924450][ T309] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.963595][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 27.985014][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.040157][ T418] EXT4-fs (loop6): Ignoring removed nobh option [ 28.046120][ T417] EXT4-fs (loop2): Ignoring removed nobh option [ 28.052879][ T417] EXT4-fs (loop2): Ignoring removed bh option [ 28.062947][ T421] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.063006][ T417] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.070559][ T418] EXT4-fs (loop6): Ignoring removed bh option [ 28.083275][ T421] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.097531][ T422] EXT4-fs (loop0): Ignoring removed nobh option [ 28.103810][ T422] EXT4-fs (loop0): Ignoring removed bh option [ 28.110274][ T421] device bridge_slave_0 entered promiscuous mode [ 28.110369][ T422] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.119545][ T418] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.132864][ T421] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.149145][ T417] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,noauto_da_alloc,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 28.155493][ T428] EXT4-fs (loop5): Ignoring removed nobh option [ 28.174854][ T421] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.189429][ T421] device bridge_slave_1 entered promiscuous mode [ 28.196121][ T428] EXT4-fs (loop5): Ignoring removed bh option [ 28.202823][ T428] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.221514][ T417] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3342: comm syz.2.19: Allocating blocks 497-513 which overlap fs metadata [ 28.235855][ T418] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,noauto_da_alloc,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 28.256230][ T428] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,noauto_da_alloc,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 28.285438][ T422] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,noauto_da_alloc,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 28.337229][ T421] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.344859][ T421] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.349553][ T418] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3342: comm syz.6.20: Allocating blocks 497-513 which overlap fs metadata [ 28.352812][ T421] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.374133][ T421] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.389843][ T417] EXT4-fs (loop2): pa ffff888125d00d20: logic 176, phys. 481, len 2 [ 28.398480][ T417] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 1 [ 28.409614][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.428598][ T422] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3342: comm syz.0.17: Allocating blocks 497-513 which overlap fs metadata [ 28.454596][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.467696][ T422] EXT4-fs (loop0): pa ffff888125d0c5e8: logic 176, phys. 481, len 2 [ 28.475847][ T422] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 1 [ 28.477874][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.497153][ T428] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3342: comm syz.5.21: Allocating blocks 497-513 which overlap fs metadata [ 28.498782][ T418] EXT4-fs (loop6): pa ffff888125f41dc8: logic 176, phys. 481, len 2 [ 28.519392][ T418] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 1 [ 28.537673][ T428] EXT4-fs (loop5): pa ffff888125f41930: logic 176, phys. 481, len 2 [ 28.539557][ T356] ================================================================== [ 28.546111][ T428] EXT4-fs error (device loop5): ext4_mb_release_inode_pa:4359: group 0, [ 28.554143][ T356] BUG: KASAN: use-after-free in ext4_ext_remove_space+0x3a6a/0x4920 [ 28.554159][ T428] free 0, pa_free 1 [ 28.562638][ T356] Read of size 4 at addr ffff88812f9dfc18 by task syz-executor/356 [ 28.562641][ T356] [ 28.562665][ T356] CPU: 0 PID: 356 Comm: syz-executor Not tainted syzkaller #0 [ 28.562671][ T356] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 28.562675][ T356] Call Trace: [ 28.562694][ T356] __dump_stack+0x21/0x24 [ 28.562705][ T356] dump_stack_lvl+0x169/0x1d8 [ 28.562716][ T356] ? show_regs_print_info+0x18/0x18 [ 28.562727][ T356] ? thaw_kernel_threads+0x220/0x220 [ 28.562739][ T356] print_address_description+0x7f/0x2c0 [ 28.562750][ T356] ? ext4_ext_remove_space+0x3a6a/0x4920 [ 28.562761][ T356] kasan_report+0xe2/0x130 [ 28.562770][ T356] ? __read_extent_tree_block+0x1e8/0x790 [ 28.562780][ T356] ? ext4_ext_remove_space+0x3a6a/0x4920 [ 28.562792][ T356] __asan_report_load4_noabort+0x14/0x20 [ 28.562802][ T356] ext4_ext_remove_space+0x3a6a/0x4920 [ 28.562812][ T356] ? __kasan_slab_free+0x11/0x20 [ 28.562823][ T356] ? slab_free_freelist_hook+0xc5/0x190 [ 28.562839][ T356] ? __es_remove_extent+0xdc5/0x16f0 [ 28.562852][ T356] ? _raw_write_lock+0x8e/0xe0 [ 28.562866][ T356] ? ext4_da_release_space+0x19f/0x410 [ 28.562892][ T356] ? ext4_ext_index_trans_blocks+0x100/0x100 [ 28.562903][ T356] ext4_ext_truncate+0x169/0x1f0 [ 28.562914][ T356] ext4_truncate+0xaea/0x1290 [ 28.562928][ T356] ? __ext4_mark_inode_dirty+0x610/0x610 [ 28.562947][ T356] ext4_evict_inode+0xf4f/0x1760 [ 28.594946][ T421] device veth0_vlan entered promiscuous mode [ 28.596462][ T356] ? _raw_spin_unlock+0x4d/0x70 [ 28.596480][ T356] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 28.596503][ T356] ? inode_io_list_del_locked+0x1b3/0x210 [ 28.616043][ T421] device veth1_macvtap entered promiscuous mode [ 28.619600][ T356] ? _raw_spin_unlock+0x4d/0x70 [ 28.759720][ T356] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 28.765824][ T356] evict+0x478/0x910 [ 28.769819][ T356] ? mode_strip_sgid+0x160/0x160 [ 28.774785][ T356] ? _raw_spin_lock+0x8e/0xe0 [ 28.780197][ T356] ? _raw_spin_trylock_bh+0x130/0x130 [ 28.785575][ T356] ? iput+0x291/0x7c0 [ 28.789878][ T356] ? __kasan_check_write+0x14/0x20 [ 28.794987][ T356] iput+0x638/0x7c0 [ 28.798998][ T356] do_unlinkat+0x33f/0x670 [ 28.803554][ T356] ? __check_object_size+0x2f4/0x3c0 [ 28.808929][ T356] ? fsnotify_link_count+0x90/0x90 [ 28.814884][ T356] ? getname_flags+0x206/0x500 [ 28.821335][ T356] __x64_sys_unlink+0x49/0x50 [ 28.826913][ T356] do_syscall_64+0x31/0x40 [ 28.831700][ T356] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 28.837723][ T356] RIP: 0033:0x7fde5f733577 [ 28.842225][ T356] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 28.863527][ T356] RSP: 002b:00007ffd1ff443e8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 28.872772][ T356] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fde5f733577 [ 28.881207][ T356] RDX: 00007ffd1ff44410 RSI: 00007ffd1ff444a0 RDI: 00007ffd1ff444a0 [ 28.889468][ T356] RBP: 00007ffd1ff444a0 R08: 0000000000000000 R09: 0000000000000000 [ 28.897570][ T356] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffd1ff45590 [ 28.905951][ T356] R13: 00007fde5f7b6d7d R14: 0000000000006f3b R15: 00007ffd1ff46660 [ 28.914488][ T356] [ 28.916841][ T356] The buggy address belongs to the page: [ 28.922576][ T356] page:ffffea0004be77c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12f9df [ 28.932985][ T356] flags: 0x4000000000000000() [ 28.937774][ T356] raw: 4000000000000000 ffffea0004be77c8 ffffea0004be77c8 0000000000000000 [ 28.947166][ T356] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 28.956230][ T356] page dumped because: kasan: bad access detected [ 28.962960][ T356] page_owner info is not present (never set?) [ 28.969478][ T356] [ 28.972001][ T356] Memory state around the buggy address: [ 28.977749][ T356] ffff88812f9dfb00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 28.986071][ T356] ffff88812f9dfb80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 28.994394][ T356] >ffff88812f9dfc00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 29.002545][ T356] ^ [ 29.007481][ T356] ffff88812f9dfc80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 29.015972][ T356] ffff88812f9dfd00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 29.024477][ T356] ================================================================== [ 29.032646][ T356] Disabling lock debugging due to kernel taint [ 29.042060][ T24] kauditd_printk_skb: 58 callbacks suppressed [ 29.042073][ T24] audit: type=1400 audit(1761143944.540:132): avc: denied { read } for pid=77 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 29.070695][ T24] audit: type=1400 audit(1761143944.540:133): avc: denied { search } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.106092][ T24] audit: type=1400 audit(1761143944.540:134): avc: denied { write } for pid=77 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.129509][ T24] audit: type=1400 audit(1761143944.540:135): avc: denied { add_name } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 29.154184][ T24] audit: type=1400 audit(1761143944.540:136): avc: denied { create } for pid=77 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.175460][ T24] audit: type=1400 audit(1761143944.540:137): avc: denied { append open } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.199535][ T24] audit: type=1400 audit(1761143944.540:138): avc: denied { getattr } for pid=77 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.229163][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.238376][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.246803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.255634][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.264117][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.273161][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.282291][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.290910][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.300012][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 29.308713][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.317676][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 29.325621][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 29.334891][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.343670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 29.352372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.362039][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.369871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.454910][ T442] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.462843][ T442] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.470792][ T442] device bridge_slave_0 entered promiscuous mode [ 29.478470][ T442] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.485643][ T442] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.487005][ T444] EXT4-fs (loop7): Ignoring removed nobh option [ 29.499498][ T444] EXT4-fs (loop7): Ignoring removed bh option [ 29.505695][ T444] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.507992][ T442] device bridge_slave_1 entered promiscuous mode [ 29.553865][ T444] EXT4-fs (loop7): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,noauto_da_alloc,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 29.595455][ T444] EXT4-fs error (device loop7): ext4_mb_mark_diskspace_used:3342: comm syz.7.24: Allocating blocks 497-513 which overlap fs metadata [ 29.646785][ T450] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.654046][ T450] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.661722][ T450] device bridge_slave_0 entered promiscuous mode [ 29.677938][ T444] EXT4-fs (loop7): pa ffff888125fd7540: logic 176, phys. 481, len 2 [ 29.678908][ T450] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.686102][ T444] EXT4-fs error (device loop7): ext4_mb_release_inode_pa:4359: group 0, [ 29.693109][ T450] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.693663][ T450] device bridge_slave_1 entered promiscuous mode [ 29.701644][ T444] free 0, pa_free 1 [ 29.730942][ T421] EXT4-fs error (device loop7): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 33008, count = 16 [ 29.745596][ T421] EXT4-fs error (device loop7): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 257, count = 32754 [ 29.760563][ T421] EXT4-fs error (device loop7): mb_free_blocks:1524: group 0, inode 15: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 29.780329][ T451] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.787504][ T451] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.795187][ T451] device bridge_slave_0 entered promiscuous mode [ 29.818464][ T451] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.826191][ T451] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.834047][ T451] device bridge_slave_1 entered promiscuous mode [ 29.867621][ T455] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.874855][ T455] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.882669][ T455] device bridge_slave_0 entered promiscuous mode [ 29.892126][ T455] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.899259][ T455] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.906864][ T455] device bridge_slave_1 entered promiscuous mode [ 29.991478][ T450] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.998692][ T450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.006265][ T450] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.013497][ T450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.036823][ T377] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.044270][ T377] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.052704][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.060839][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.087940][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.096707][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.105091][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.112690][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.136486][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.144273][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.152786][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.161527][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.168713][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.210241][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.218292][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.227069][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.234202][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.242173][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.251144][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.258335][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.266004][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.274110][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.282749][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.304869][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.312669][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.345130][ T466] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.352445][ T466] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.360459][ T466] device bridge_slave_0 entered promiscuous mode [ 30.369397][ T466] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.376588][ T466] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.384075][ T466] device bridge_slave_1 entered promiscuous mode [ 30.396821][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.405927][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.414663][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.421764][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.429814][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.439167][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.446799][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.454225][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.463251][ T49] device bridge_slave_1 left promiscuous mode [ 30.469548][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.477257][ T49] device bridge_slave_0 left promiscuous mode [ 30.483515][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.491583][ T49] device bridge_slave_1 left promiscuous mode [ 30.497910][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.505402][ T49] device bridge_slave_0 left promiscuous mode [ 30.511816][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.520019][ T49] device veth1_macvtap left promiscuous mode [ 30.526147][ T49] device veth0_vlan left promiscuous mode [ 30.531980][ T49] device veth1_macvtap left promiscuous mode [ 30.538858][ T49] device veth0_vlan left promiscuous mode [ 30.704101][ T451] device veth0_vlan entered promiscuous mode [ 30.719999][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.730684][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.739795][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.748555][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.771069][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.778700][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.786919][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.795408][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.804100][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.813202][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.837410][ T451] device veth1_macvtap entered promiscuous mode [ 30.848107][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.856233][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.865023][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.873877][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.881037][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.888949][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.898284][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.906583][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.913822][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.939604][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.948638][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.960300][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 30.968960][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.984282][ T442] device veth0_vlan entered promiscuous mode [ 31.001584][ T455] device veth0_vlan entered promiscuous mode [ 31.008935][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 31.017515][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.025988][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 31.034306][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.044282][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.053339][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.061747][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.070602][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.079651][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.088632][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.098214][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.106141][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.114484][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.123764][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.144583][ T442] device veth1_macvtap entered promiscuous mode [ 31.151932][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.160776][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.169532][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.177955][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.186385][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready 2025/10/22 14:39:06 executed programs: 28 [ 31.220460][ T455] device veth1_macvtap entered promiscuous mode [ 31.227578][ T24] audit: type=1400 audit(1761143946.720:139): avc: denied { write } for pid=275 comm="syz-execprog" path="pipe:[14151]" dev="pipefs" ino=14151 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 31.253459][ T470] EXT4-fs (loop4): Ignoring removed nobh option [ 31.261324][ T470] EXT4-fs (loop4): Ignoring removed bh option [ 31.269870][ T470] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.283881][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.291701][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.293098][ T470] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,noauto_da_alloc,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 31.300261][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 31.340593][ T470] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3342: comm syz.4.40: Allocating blocks 497-513 which overlap fs metadata [ 31.340873][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.363658][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.370832][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.378000][ T470] EXT4-fs (loop4): pa ffff888125fd73f0: logic 176, phys. 481, len 2 [ 31.378669][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 31.386559][ T470] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 1 [ 31.395256][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.413786][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.415851][ T451] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 112589990710368, count = 16 [ 31.421035][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.436518][ T451] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 112589990684262, count = 26122 [ 31.444681][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.460296][ T451] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 112589990684256, count = 16 [ 31.467772][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.482417][ T451] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 35392462936208, count = 16 [ 31.491063][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.506057][ T451] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 35392462921828, count = 14392 [ 31.514899][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.529167][ T451] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 35392462921824, count = 16 [ 31.538786][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.553204][ T451] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 112589218958528, count = 16 [ 31.562305][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.576222][ T451] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 112589218932326, count = 26214 [ 31.585011][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.608356][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.616889][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.625764][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.634681][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.643994][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.652500][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.661379][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.670232][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.679096][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.687567][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 31.695473][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.703483][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.725343][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.765119][ T450] device veth0_vlan entered promiscuous mode [ 31.781917][ T450] device veth1_macvtap entered promiscuous mode [ 31.788779][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.799196][ T474] EXT4-fs (loop3): Ignoring removed nobh option [ 31.805486][ T474] EXT4-fs (loop3): Ignoring removed bh option [ 31.812875][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.821802][ T474] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.834872][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.844303][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 31.853161][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.870273][ T466] device veth0_vlan entered promiscuous mode [ 31.877775][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 31.886393][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.906366][ T466] device veth1_macvtap entered promiscuous mode [ 31.913261][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.921639][ T474] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,noauto_da_alloc,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 31.947019][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.954619][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 31.963461][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.976404][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 31.976864][ T476] EXT4-fs (loop8): Ignoring removed nobh option [ 31.984566][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.000512][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.009932][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.015243][ T474] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3342: comm syz.3.42: Allocating blocks 497-513 which overlap fs metadata [ 32.018421][ T476] EXT4-fs (loop8): Ignoring removed bh option [ 32.033109][ T440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.038999][ T476] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.076260][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.080808][ T474] EXT4-fs (loop3): pa ffff88812fd94000: logic 176, phys. 481, len 2 [ 32.084894][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.092701][ T474] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 1 [ 32.116366][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.124953][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.125385][ T476] EXT4-fs (loop8): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,noauto_da_alloc,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 32.238476][ T476] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3342: comm syz.8.30: Allocating blocks 497-513 which overlap fs metadata [ 32.307201][ T484] EXT4-fs (loop9): Ignoring removed nobh option [ 32.313632][ T484] EXT4-fs (loop9): Ignoring removed bh option [ 32.326393][ T484] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.370614][ T476] EXT4-fs (loop8): pa ffff88812fc1a498: logic 176, phys. 481, len 2 [ 32.379422][ T476] EXT4-fs error (device loop8): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 1 [ 32.410556][ T484] EXT4-fs (loop9): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,noauto_da_alloc,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 32.449004][ T488] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.478290][ T488] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.504232][ T488] device bridge_slave_0 entered promiscuous mode [ 32.586671][ T484] EXT4-fs error (device loop9): ext4_mb_mark_diskspace_used:3342: comm syz.9.32: Allocating blocks 497-513 which overlap fs metadata [ 32.636859][ T484] EXT4-fs (loop9): pa ffff88812fc1a9d8: logic 176, phys. 481, len 2 [ 32.646131][ T484] EXT4-fs error (device loop9): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 1 [ 32.692881][ T488] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.700393][ T488] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.744017][ T488] device bridge_slave_1 entered promiscuous mode [ 32.746482][ T450] EXT4-fs error (device loop9): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 281471325108768, count = 16 [ 32.765772][ T450] EXT4-fs error (device loop9): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 281471325106592, count = 2177 [ 32.787103][ T450] EXT4-fs error (device loop9): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 46613280034768, count = 16 [ 32.813646][ T450] EXT4-fs error (device loop9): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 46613280032897, count = 1872 [ 32.847646][ T450] EXT4-fs error (device loop9): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 46613280032896, count = 16 [ 32.887913][ T450] EXT4-fs error (device loop9): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 281471392942208, count = 16 [ 32.903462][ T450] EXT4-fs error (device loop9): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 281471392940032, count = 2177 [ 32.919183][ T450] EXT4-fs error (device loop9): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 46613280034144, count = 16 [ 33.153152][ T505] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.171079][ T505] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.180195][ T505] device bridge_slave_0 entered promiscuous mode [ 33.257636][ T505] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.264867][ T505] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.282124][ T505] device bridge_slave_1 entered promiscuous mode [ 33.310399][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 33.325382][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.413895][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 33.423698][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.433255][ T377] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.440530][ T377] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.449228][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 33.469636][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.478751][ T377] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.485825][ T377] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.493809][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.502866][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 33.557386][ T377] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.618823][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.658925][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.676564][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.685141][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.697719][ T488] device veth0_vlan entered promiscuous mode [ 33.765629][ T517] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.772998][ T517] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.782162][ T517] device bridge_slave_0 entered promiscuous mode [ 33.799275][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.816383][ T517] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.823818][ T517] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.842938][ T517] device bridge_slave_1 entered promiscuous mode [ 33.853105][ T488] device veth1_macvtap entered promiscuous mode [ 33.941505][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.951731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.046926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 34.057833][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.077739][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 34.089194][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.109504][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 34.119234][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.138072][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.145798][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.168706][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 34.189917][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.206497][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.213796][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.221590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 34.269985][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 34.300329][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.322400][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 34.330892][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.414256][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 34.426372][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.469625][ T49] device bridge_slave_1 left promiscuous mode [ 34.482580][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.493779][ T49] device bridge_slave_0 left promiscuous mode [ 34.512251][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.523109][ T49] device bridge_slave_1 left promiscuous mode [ 34.529602][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.538411][ T49] device bridge_slave_0 left promiscuous mode [ 34.544900][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.561649][ T49] device bridge_slave_1 left promiscuous mode [ 34.568199][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.609694][ T49] device bridge_slave_0 left promiscuous mode [ 34.617461][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.662420][ T49] device bridge_slave_1 left promiscuous mode [ 34.683513][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.691912][ T49] device bridge_slave_0 left promiscuous mode [ 34.698370][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.714817][ T49] device bridge_slave_1 left promiscuous mode [ 34.724196][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.764239][ T49] device bridge_slave_0 left promiscuous mode [ 34.795536][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.812717][ T49] device bridge_slave_1 left promiscuous mode [ 34.834363][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.851141][ T49] device bridge_slave_0 left promiscuous mode [ 34.859778][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.869657][ T49] device veth1_macvtap left promiscuous mode [ 34.875701][ T49] device veth0_vlan left promiscuous mode [ 34.906593][ T49] device veth1_macvtap left promiscuous mode [ 34.912770][ T49] device veth0_vlan left promiscuous mode [ 34.941249][ T49] device veth1_macvtap left promiscuous mode [ 34.950129][ T49] device veth0_vlan left promiscuous mode [ 34.966655][ T49] device veth1_macvtap left promiscuous mode [ 34.973112][ T49] device veth0_vlan left promiscuous mode [ 34.979724][ T49] device veth1_macvtap left promiscuous mode [ 34.985821][ T49] device veth0_vlan left promiscuous mode [ 34.992358][ T49] device veth1_macvtap left promiscuous mode [ 34.998686][ T49] device veth0_vlan left promiscuous mode 2025/10/22 14:39:11 executed programs: 177 [ 36.212588][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 36.220919][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 36.229841][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 36.240682][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 36.251791][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 36.258873][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 36.266752][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 36.275353][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 36.283809][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 36.290894][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 36.318980][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 36.341455][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 36.352219][ T451] EXT4-fs error: 22810 callbacks suppressed [ 36.352236][ T451] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 128038095445136, count = 16 [ 36.367955][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 36.385150][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 36.393607][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 36.406283][ T451] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 128038095433330, count = 11808 [ 36.421603][ T451] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 128038095433328, count = 16 [ 36.443265][ T451] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 57415948082624, count = 16 [ 36.449442][ T505] device veth0_vlan entered promiscuous mode [ 36.466928][ T451] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 57415948056419, count = 26214 [ 36.488846][ T451] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 57415948056416, count = 16 [ 36.506993][ T451] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 55174867877024, count = 16 [ 36.524981][ T451] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 55174867847728, count = 29300 [ 36.527846][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.543749][ T451] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 55174867847728, count = 16 [ 36.571412][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.606610][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 36.615024][ T451] EXT4-fs error (device loop4): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 53013321390944, count = 16 [ 36.630152][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 36.661277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 36.714958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 36.745088][ T517] device veth0_vlan entered promiscuous mode [ 36.778068][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.793120][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.828346][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 36.846531][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 36.860236][ T505] device veth1_macvtap entered promiscuous mode [ 36.887856][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 36.896994][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 36.915172][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 36.950299][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 36.965308][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 36.974077][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 36.983251][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 36.992884][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 37.002275][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 37.017309][ T517] device veth1_macvtap entered promiscuous mode [ 37.079233][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 37.102440][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 37.111207][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 37.122836][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 37.131368][ T439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 38.428686][ T49] BUG: unable to handle page fault for address: 0000000025faa068 [ 38.436471][ T49] #PF: supervisor read access in kernel mode [ 38.442811][ T49] #PF: error_code(0x0000) - not-present page [ 38.448803][ T49] PGD 0 P4D 0 [ 38.452213][ T49] Oops: 0000 [#1] PREEMPT SMP KASAN [ 38.457437][ T49] CPU: 1 PID: 49 Comm: kworker/u4:2 Tainted: G B syzkaller #0 [ 38.466203][ T49] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 38.476280][ T49] Workqueue: netns cleanup_net [ 38.481300][ T49] RIP: 0010:__radix_tree_delete+0x123/0x3c0 [ 38.487212][ T49] Code: 4d 89 fe 49 63 dd 8d 43 3f 85 db 0f 49 c3 c1 f8 06 48 98 4d 8d ac c6 28 02 00 00 4c 89 ef be 08 00 00 00 e8 7f a0 46 ff 31 f6 <49> 0f a3 9e 28 02 00 00 41 0f 93 c4 40 0f 92 c6 bf 02 00 00 00 e8 [ 38.507024][ T49] RSP: 0018:ffffc900009e76c0 EFLAGS: 00010246 [ 38.513120][ T49] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000000282 [ 38.521149][ T49] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000025faa068 [ 38.529195][ T49] RBP: ffffc900009e7718 R08: 0000000000000000 R09: ffffed1025f8e3b6 [ 38.537284][ T49] R10: ffffed1025f8e3b6 R11: 1ffff11025f8e3b5 R12: ffff88812fc71c01 [ 38.545377][ T49] R13: 0000000025faa068 R14: 0000000025fa9e40 R15: ffff88812fc71b80 [ 38.553594][ T49] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 38.562550][ T49] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 38.569157][ T49] CR2: 0000000025faa068 CR3: 000000010d3cd000 CR4: 00000000003506a0