Warning: Permanently added '10.128.0.114' (ED25519) to the list of known hosts. 2026/07/17 06:03:26 parsed 1 programs 2026/07/17 06:03:26 serving rpc on tcp://34973 [ 19.524394][ T30] audit: type=1400 audit(1784268206.683:64): avc: denied { node_bind } for pid=293 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 19.529007][ T30] audit: type=1400 audit(1784268206.683:65): avc: denied { module_request } for pid=293 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 20.134146][ T30] audit: type=1400 audit(1784268207.293:66): avc: denied { mounton } for pid=302 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 20.135179][ T302] cgroup: Unknown subsys name 'net' [ 20.156803][ T30] audit: type=1400 audit(1784268207.293:67): avc: denied { mount } for pid=302 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.184059][ T30] audit: type=1400 audit(1784268207.323:68): avc: denied { unmount } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 20.184203][ T302] cgroup: Unknown subsys name 'devices' [ 20.293423][ T302] cgroup: Unknown subsys name 'hugetlb' [ 20.299032][ T302] cgroup: Unknown subsys name 'rlimit' [ 20.440524][ T30] audit: type=1400 audit(1784268207.593:69): avc: denied { setattr } for pid=302 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 20.454214][ T304] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 20.463747][ T30] audit: type=1400 audit(1784268207.593:70): avc: denied { create } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 20.492598][ T30] audit: type=1400 audit(1784268207.593:71): avc: denied { write } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 20.511176][ T302] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 20.513160][ T30] audit: type=1400 audit(1784268207.593:72): avc: denied { read } for pid=302 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 20.541698][ T30] audit: type=1400 audit(1784268207.593:73): avc: denied { mounton } for pid=302 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 20.944463][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 20.951528][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 20.959054][ T306] device bridge_slave_0 entered promiscuous mode [ 20.966143][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 20.973207][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 20.980724][ T306] device bridge_slave_1 entered promiscuous mode [ 21.016909][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.023956][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.031187][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.038208][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.054358][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.061607][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.069220][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 21.076761][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 21.085494][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 21.093683][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 21.100691][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 21.109136][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 21.117318][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 21.124337][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 21.135490][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 21.144566][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 21.157219][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 21.167544][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 21.175499][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 21.183098][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 21.190925][ T306] device veth0_vlan entered promiscuous mode [ 21.200130][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 21.208887][ T306] device veth1_macvtap entered promiscuous mode [ 21.217709][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 21.228882][ T45] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 21.248468][ T306] request_module fs-gadgetfs succeeded, but still no fs? [ 21.270663][ T306] syz-executor (306) used greatest stack depth: 20800 bytes left [ 21.713310][ T10] device bridge_slave_1 left promiscuous mode [ 21.719492][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 21.727028][ T10] device bridge_slave_0 left promiscuous mode [ 21.733171][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 21.741079][ T10] device veth1_macvtap left promiscuous mode [ 21.747184][ T10] device veth0_vlan left promiscuous mode 2026/07/17 06:03:29 executed programs: 0 [ 22.023667][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.030703][ T366] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.038333][ T366] device bridge_slave_0 entered promiscuous mode [ 22.045531][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.052727][ T366] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.060113][ T366] device bridge_slave_1 entered promiscuous mode [ 22.093716][ T366] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.100746][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.107986][ T366] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.115017][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.130698][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 22.138358][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 22.145568][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 22.154809][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 22.162945][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 22.169947][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 22.178318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 22.186479][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 22.193506][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 22.204332][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 22.213243][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 22.225514][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 22.235962][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 22.244084][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 22.251418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 22.259346][ T366] device veth0_vlan entered promiscuous mode [ 22.268515][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 22.277262][ T366] device veth1_macvtap entered promiscuous mode [ 22.285657][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 22.295018][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 22.317941][ T370] loop2: detected capacity change from 0 to 1024 [ 22.353310][ T370] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 22.393140][ T370] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.17: corrupted xattr entries [ 22.404543][ T370] EXT4-fs (loop2): Remounting filesystem read-only [ 22.471141][ T374] loop2: detected capacity change from 0 to 1024 [ 22.483177][ T374] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 22.525222][ T374] ================================================================== [ 22.533338][ T374] BUG: KASAN: use-after-free in ext4_xattr_ibody_get+0x606/0x670 [ 22.541051][ T374] Read of size 4 at addr ffff88811e649004 by task syz.2.18/374 [ 22.548564][ T374] [ 22.550869][ T374] CPU: 0 PID: 374 Comm: syz.2.18 Not tainted syzkaller #0 [ 22.557950][ T374] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 22.568338][ T374] Call Trace: [ 22.571595][ T374] [ 22.574503][ T374] __dump_stack+0x21/0x30 [ 22.578809][ T374] dump_stack_lvl+0x110/0x170 [ 22.583456][ T374] ? show_regs_print_info+0x20/0x20 [ 22.588630][ T374] ? load_image+0x3f0/0x3f0 [ 22.593193][ T374] print_address_description+0x7f/0x2c0 [ 22.598718][ T374] ? ext4_xattr_ibody_get+0x606/0x670 [ 22.604066][ T374] kasan_report+0x10f/0x150 [ 22.608826][ T374] ? ext4_xattr_ibody_get+0x606/0x670 [ 22.614173][ T374] __asan_report_load4_noabort+0x14/0x20 [ 22.619793][ T374] ext4_xattr_ibody_get+0x606/0x670 [ 22.624965][ T374] ? mb_cache_entry_put+0x90/0x90 [ 22.629970][ T374] ? down_read+0xab/0x100 [ 22.634277][ T374] ext4_xattr_get+0x116/0x830 [ 22.638936][ T374] ? get_cached_acl+0x2a0/0x2f0 [ 22.643758][ T374] ext4_get_acl+0x85/0x6c0 [ 22.648146][ T374] ? __kasan_check_write+0x14/0x20 [ 22.653236][ T374] ? _raw_spin_lock+0x94/0xf0 [ 22.657979][ T374] get_acl+0x161/0x270 [ 22.662017][ T374] posix_acl_chmod+0xe9/0x250 [ 22.666669][ T374] ext4_setattr+0xb6b/0x1b10 [ 22.671229][ T374] ? atime_needs_update+0x810/0x810 [ 22.676405][ T374] ? ext4_write_inode+0x5a0/0x5a0 [ 22.681404][ T374] notify_change+0xc30/0xf40 [ 22.685970][ T374] chmod_common+0x21a/0x3c0 [ 22.690448][ T374] ? __ia32_sys_chroot+0x40/0x40 [ 22.695358][ T374] ? slab_free_freelist_hook+0xc2/0x190 [ 22.700877][ T374] ? user_path_at_empty+0x162/0x1c0 [ 22.706045][ T374] do_fchmodat+0xd4/0x1a0 [ 22.710348][ T374] ? do_faccessat+0x9b0/0x9b0 [ 22.714996][ T374] ? __se_sys_chdir+0x1af/0x280 [ 22.719823][ T374] ? debug_smp_processor_id+0x17/0x20 [ 22.725173][ T374] __x64_sys_fchmodat+0x7b/0x90 [ 22.730007][ T374] x64_sys_call+0x1b7/0x9a0 [ 22.734529][ T374] do_syscall_64+0x4c/0xa0 [ 22.740165][ T374] ? clear_bhb_loop+0x50/0xa0 [ 22.744909][ T374] ? clear_bhb_loop+0x50/0xa0 [ 22.749650][ T374] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 22.755529][ T374] RIP: 0033:0x7ff261301e99 [ 22.759931][ T374] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 22.779516][ T374] RSP: 002b:00007fffdedeb388 EFLAGS: 00000246 ORIG_RAX: 000000000000010c [ 22.788460][ T374] RAX: ffffffffffffffda RBX: 00007ff261589fa0 RCX: 00007ff261301e99 [ 22.796860][ T374] RDX: 00000000ffffff50 RSI: 0000200000000300 RDI: ffffffffffffff9c [ 22.806457][ T374] RBP: 00007ff261397eaf R08: 0000000000000000 R09: 0000000000000000 [ 22.814991][ T374] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 22.822960][ T374] R13: 00007ff261589fac R14: 00007ff261589fa0 R15: 00007ff261589fa0 [ 22.830916][ T374] [ 22.833913][ T374] [ 22.836216][ T374] Allocated by task 229: [ 22.840432][ T374] __kasan_slab_alloc+0xb7/0xe0 [ 22.845264][ T374] slab_post_alloc_hook+0x4f/0x2b0 [ 22.850354][ T374] kmem_cache_alloc+0xf7/0x260 [ 22.855096][ T374] skb_clone+0x1c7/0x370 [ 22.859317][ T374] dev_queue_xmit_nit+0x353/0x9c0 [ 22.864324][ T374] dev_hard_start_xmit+0x163/0x680 [ 22.869437][ T374] sch_direct_xmit+0x279/0x9c0 [ 22.874183][ T374] __dev_queue_xmit+0x14f1/0x2d60 [ 22.879186][ T374] dev_queue_xmit+0x17/0x20 [ 22.883671][ T374] ip_finish_output2+0xb1f/0xec0 [ 22.888591][ T374] __ip_finish_output+0x161/0x360 [ 22.893595][ T374] ip_finish_output+0x31/0x220 [ 22.898337][ T374] ip_output+0x1ea/0x390 [ 22.902556][ T374] __ip_queue_xmit+0x10ca/0x1c30 [ 22.907475][ T374] ip_queue_xmit+0x4d/0x70 [ 22.911866][ T374] __tcp_transmit_skb+0x1e23/0x35f0 [ 22.917046][ T374] tcp_write_xmit+0x16f4/0x5f00 [ 22.921874][ T374] __tcp_push_pending_frames+0x99/0x2f0 [ 22.927402][ T374] tcp_data_snd_check+0x7d/0xb0 [ 22.932228][ T374] tcp_rcv_established+0x1137/0x1ad0 [ 22.937490][ T374] tcp_v4_do_rcv+0x591/0x9f0 [ 22.942056][ T374] tcp_v4_rcv+0x221a/0x2880 [ 22.946535][ T374] ip_protocol_deliver_rcu+0x360/0x760 [ 22.951972][ T374] ip_local_deliver+0x2dd/0x520 [ 22.956798][ T374] ip_sublist_rcv+0x75b/0x8a0 [ 22.961452][ T374] ip_list_rcv+0x3e4/0x430 [ 22.965843][ T374] __netif_receive_skb_list_core+0x57e/0x770 [ 22.971800][ T374] netif_receive_skb_list_internal+0x7f8/0xaa0 [ 22.977964][ T374] napi_complete_done+0x375/0x7a0 [ 22.982968][ T374] virtnet_poll+0x8f4/0xe90 [ 22.987449][ T374] __napi_poll+0xbb/0x580 [ 22.991757][ T374] net_rx_action+0x37f/0x910 [ 22.996323][ T374] handle_softirqs+0x250/0x560 [ 23.001078][ T374] __irq_exit_rcu+0x52/0xf0 [ 23.005561][ T374] irq_exit_rcu+0x9/0x10 [ 23.009780][ T374] common_interrupt+0xbe/0xe0 [ 23.014436][ T374] asm_common_interrupt+0x27/0x40 [ 23.019440][ T374] [ 23.021740][ T374] Freed by task 229: [ 23.025608][ T374] kasan_set_track+0x4a/0x70 [ 23.030182][ T374] kasan_set_free_info+0x23/0x40 [ 23.035098][ T374] ____kasan_slab_free+0x125/0x160 [ 23.040192][ T374] __kasan_slab_free+0x11/0x20 [ 23.044932][ T374] slab_free_freelist_hook+0xc2/0x190 [ 23.050281][ T374] kmem_cache_free+0x100/0x320 [ 23.055024][ T374] kfree_skbmem+0x10c/0x180 [ 23.059509][ T374] consume_skb+0xb3/0x1f0 [ 23.063815][ T374] packet_rcv+0x16e/0x1310 [ 23.068646][ T374] dev_queue_xmit_nit+0x939/0x9c0 [ 23.073650][ T374] dev_hard_start_xmit+0x163/0x680 [ 23.078739][ T374] sch_direct_xmit+0x279/0x9c0 [ 23.083481][ T374] __dev_queue_xmit+0x14f1/0x2d60 [ 23.088486][ T374] dev_queue_xmit+0x17/0x20 [ 23.092967][ T374] ip_finish_output2+0xb1f/0xec0 [ 23.097885][ T374] __ip_finish_output+0x161/0x360 [ 23.102885][ T374] ip_finish_output+0x31/0x220 [ 23.107626][ T374] ip_output+0x1ea/0x390 [ 23.111854][ T374] __ip_queue_xmit+0x10ca/0x1c30 [ 23.116768][ T374] ip_queue_xmit+0x4d/0x70 [ 23.121161][ T374] __tcp_transmit_skb+0x1e23/0x35f0 [ 23.126340][ T374] tcp_write_xmit+0x16f4/0x5f00 [ 23.131168][ T374] __tcp_push_pending_frames+0x99/0x2f0 [ 23.136690][ T374] tcp_data_snd_check+0x7d/0xb0 [ 23.141516][ T374] tcp_rcv_established+0x1137/0x1ad0 [ 23.146779][ T374] tcp_v4_do_rcv+0x591/0x9f0 [ 23.151345][ T374] tcp_v4_rcv+0x221a/0x2880 [ 23.155822][ T374] ip_protocol_deliver_rcu+0x360/0x760 [ 23.161256][ T374] ip_local_deliver+0x2dd/0x520 [ 23.166083][ T374] ip_sublist_rcv+0x75b/0x8a0 [ 23.170735][ T374] ip_list_rcv+0x3e4/0x430 [ 23.175129][ T374] __netif_receive_skb_list_core+0x57e/0x770 [ 23.181085][ T374] netif_receive_skb_list_internal+0x7f8/0xaa0 [ 23.187234][ T374] napi_complete_done+0x375/0x7a0 [ 23.192234][ T374] virtnet_poll+0x8f4/0xe90 [ 23.196718][ T374] __napi_poll+0xbb/0x580 [ 23.201023][ T374] net_rx_action+0x37f/0x910 [ 23.205601][ T374] handle_softirqs+0x250/0x560 [ 23.210358][ T374] __irq_exit_rcu+0x52/0xf0 [ 23.214851][ T374] irq_exit_rcu+0x9/0x10 [ 23.219106][ T374] common_interrupt+0xbe/0xe0 [ 23.223766][ T374] asm_common_interrupt+0x27/0x40 [ 23.228776][ T374] [ 23.231083][ T374] The buggy address belongs to the object at ffff88811e649000 [ 23.231083][ T374] which belongs to the cache skbuff_head_cache of size 248 [ 23.245635][ T374] The buggy address is located 4 bytes inside of [ 23.245635][ T374] 248-byte region [ffff88811e649000, ffff88811e6490f8) [ 23.258735][ T374] The buggy address belongs to the page: [ 23.264354][ T374] page:ffffea0004799240 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11e649 [ 23.274575][ T374] flags: 0x4000000000000200(slab|zone=1) [ 23.280308][ T374] raw: 4000000000000200 0000000000000000 dead000000000122 ffff8881081aa300 [ 23.288875][ T374] raw: 0000000000000000 00000000000c000c 00000001ffffffff 0000000000000000 [ 23.297429][ T374] page dumped because: kasan: bad access detected [ 23.303815][ T374] page_owner tracks the page as allocated [ 23.309511][ T374] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY), pid 229, ts 11806558436, free_ts 0 [ 23.324591][ T374] post_alloc_hook+0x192/0x1b0 [ 23.329338][ T374] prep_new_page+0x1c/0x110 [ 23.334011][ T374] get_page_from_freelist+0x2c3a/0x2cd0 [ 23.339534][ T374] __alloc_pages+0x1a2/0x460 [ 23.344100][ T374] new_slab+0xa0/0x4d0 [ 23.348145][ T374] ___slab_alloc+0x3ac/0x840 [ 23.352715][ T374] __slab_alloc+0x49/0x90 [ 23.357031][ T374] kmem_cache_alloc+0x138/0x260 [ 23.361859][ T374] __alloc_skb+0xe4/0x730 [ 23.366169][ T374] __tcp_send_ack+0x9b/0x6c0 [ 23.370737][ T374] tcp_send_ack+0x3b/0x60 [ 23.375044][ T374] tcp_cleanup_rbuf+0x281/0x5b0 [ 23.379872][ T374] tcp_recvmsg_locked+0x1c95/0x24f0 [ 23.385044][ T374] tcp_recvmsg+0x233/0x770 [ 23.389436][ T374] inet_recvmsg+0x13a/0x470 [ 23.393920][ T374] sock_read_iter+0x2c2/0x380 [ 23.398576][ T374] page_owner free stack trace missing [ 23.403918][ T374] [ 23.406222][ T374] Memory state around the buggy address: [ 23.411824][ T374] ffff88811e648f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 23.419860][ T374] ffff88811e648f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 23.427895][ T374] >ffff88811e649000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 23.435927][ T374] ^ [ 23.439966][ T374] ffff88811e649080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc [ 23.448000][ T374] ffff88811e649100: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 23.456033][ T374] ================================================================== [ 23.464070][ T374] Disabling lock debugging due to kernel taint [ 23.474701][ T374] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.18: corrupted xattr entries [ 23.486380][ T374] EXT4-fs (loop2): Remounting filesystem read-only [ 23.543503][ T377] loop2: detected capacity change from 0 to 1024 [ 23.557250][ T377] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 23.595518][ T377] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.19: corrupted xattr entries [ 23.607344][ T377] EXT4-fs (loop2): Remounting filesystem read-only [ 23.671739][ T380] loop2: detected capacity change from 0 to 1024 [ 23.692815][ T380] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 23.779901][ T383] loop2: detected capacity change from 0 to 1024 [ 23.793321][ T383] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 23.837203][ T383] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.21: corrupted xattr entries [ 23.848683][ T383] EXT4-fs (loop2): Remounting filesystem read-only [ 23.894261][ T386] loop2: detected capacity change from 0 to 1024 [ 23.913280][ T386] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 23.958500][ T386] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.22: corrupted xattr entries [ 23.970348][ T386] EXT4-fs (loop2): Remounting filesystem read-only [ 24.012887][ T389] loop2: detected capacity change from 0 to 1024 [ 24.023653][ T389] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 24.061033][ T389] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.23: corrupted xattr entries [ 24.072921][ T389] EXT4-fs (loop2): Remounting filesystem read-only [ 24.120176][ T393] loop2: detected capacity change from 0 to 1024 [ 24.163133][ T393] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 24.248536][ T396] loop2: detected capacity change from 0 to 1024 [ 24.302792][ T396] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 24.340154][ T396] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.26: corrupted xattr entries [ 24.351554][ T396] EXT4-fs (loop2): Remounting filesystem read-only [ 24.418947][ T399] loop2: detected capacity change from 0 to 1024 [ 24.472857][ T399] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 24.510721][ T399] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.27: corrupted xattr entries [ 24.522244][ T399] EXT4-fs (loop2): Remounting filesystem read-only [ 24.612750][ T402] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 24.655776][ T402] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.28: corrupted xattr entries [ 24.667140][ T402] EXT4-fs (loop2): Remounting filesystem read-only [ 24.742933][ T405] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 24.782083][ T405] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.29: corrupted xattr entries [ 24.793547][ T405] EXT4-fs (loop2): Remounting filesystem read-only [ 24.902771][ T408] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 25.062921][ T411] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 25.100756][ T411] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.31: corrupted xattr entries [ 25.112169][ T411] EXT4-fs (loop2): Remounting filesystem read-only [ 25.212867][ T414] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 25.255690][ T414] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.32: corrupted xattr entries [ 25.267039][ T414] EXT4-fs (loop2): Remounting filesystem read-only [ 25.362855][ T417] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 25.405841][ T417] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.33: corrupted xattr entries [ 25.417210][ T417] EXT4-fs (loop2): Remounting filesystem read-only [ 25.532947][ T420] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 25.575836][ T420] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.34: corrupted xattr entries [ 25.587852][ T420] EXT4-fs (loop2): Remounting filesystem read-only [ 25.673065][ T423] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 25.711591][ T423] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.35: corrupted xattr entries [ 25.723110][ T423] EXT4-fs (loop2): Remounting filesystem read-only [ 25.893064][ T427] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 25.932604][ T427] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.36: corrupted xattr entries [ 25.943943][ T427] EXT4-fs (loop2): Remounting filesystem read-only [ 26.022790][ T430] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 26.162915][ T433] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 26.206402][ T433] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.38: corrupted xattr entries [ 26.217805][ T433] EXT4-fs (loop2): Remounting filesystem read-only [ 26.352855][ T436] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 26.391689][ T436] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.39: corrupted xattr entries [ 26.403365][ T436] EXT4-fs (loop2): Remounting filesystem read-only [ 26.512858][ T439] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 26.550373][ T439] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.40: corrupted xattr entries [ 26.561782][ T439] EXT4-fs (loop2): Remounting filesystem read-only [ 26.755098][ T442] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 26.794228][ T442] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.41: corrupted xattr entries [ 26.805598][ T442] EXT4-fs (loop2): Remounting filesystem read-only [ 26.852971][ T445] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 26.891443][ T445] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.42: corrupted xattr entries [ 26.903087][ T445] EXT4-fs (loop2): Remounting filesystem read-only [ 27.073581][ T448] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. 2026/07/17 06:03:34 executed programs: 29 [ 27.172681][ T30] kauditd_printk_skb: 41 callbacks suppressed [ 27.172693][ T30] audit: type=1400 audit(1784268214.333:115): avc: denied { write } for pid=293 comm="syz-execprog" path="pipe:[14992]" dev="pipefs" ino=14992 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 27.213037][ T452] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 27.250881][ T452] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.44: corrupted xattr entries [ 27.264876][ T452] EXT4-fs (loop2): Remounting filesystem read-only [ 27.339194][ T455] set_capacity_and_notify: 17 callbacks suppressed [ 27.339205][ T455] loop2: detected capacity change from 0 to 1024 [ 27.412797][ T455] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 27.509718][ T458] loop2: detected capacity change from 0 to 1024 [ 27.542812][ T458] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 27.623979][ T461] loop2: detected capacity change from 0 to 1024 [ 27.634340][ T461] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 27.672410][ T461] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.47: corrupted xattr entries [ 27.683989][ T461] EXT4-fs (loop2): Remounting filesystem read-only [ 27.733095][ T464] loop2: detected capacity change from 0 to 1024 [ 27.743470][ T464] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 27.839252][ T467] loop2: detected capacity change from 0 to 1024 [ 27.853705][ T467] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 27.893835][ T467] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.49: corrupted xattr entries [ 27.905328][ T467] EXT4-fs (loop2): Remounting filesystem read-only [ 27.963356][ T471] loop2: detected capacity change from 0 to 1024 [ 27.973693][ T471] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 28.012235][ T471] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.51: corrupted xattr entries [ 28.024371][ T471] EXT4-fs (loop2): Remounting filesystem read-only [ 28.083143][ T474] loop2: detected capacity change from 0 to 1024 [ 28.092958][ T474] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 28.131353][ T474] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.52: corrupted xattr entries [ 28.142815][ T474] EXT4-fs (loop2): Remounting filesystem read-only [ 28.192873][ T477] loop2: detected capacity change from 0 to 1024 [ 28.202966][ T477] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 28.240826][ T477] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.53: corrupted xattr entries [ 28.252186][ T477] EXT4-fs (loop2): Remounting filesystem read-only [ 28.303595][ T480] loop2: detected capacity change from 0 to 1024 [ 28.322864][ T480] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 28.360751][ T480] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.54: corrupted xattr entries [ 28.372152][ T480] EXT4-fs (loop2): Remounting filesystem read-only [ 28.431144][ T483] loop2: detected capacity change from 0 to 1024 [ 28.582958][ T483] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 28.621360][ T483] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.55: corrupted xattr entries [ 28.633301][ T483] EXT4-fs (loop2): Remounting filesystem read-only [ 28.872827][ T486] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 28.910908][ T486] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.56: corrupted xattr entries [ 28.922456][ T486] EXT4-fs (loop2): Remounting filesystem read-only [ 28.973107][ T490] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 29.010899][ T490] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.58: corrupted xattr entries [ 29.022288][ T490] EXT4-fs (loop2): Remounting filesystem read-only [ 29.124298][ T493] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 29.162570][ T493] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.59: corrupted xattr entries [ 29.174329][ T493] EXT4-fs (loop2): Remounting filesystem read-only [ 29.322882][ T497] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 29.361024][ T497] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.61: corrupted xattr entries [ 29.372425][ T497] EXT4-fs (loop2): Remounting filesystem read-only [ 29.482857][ T500] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 29.520281][ T500] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.62: corrupted xattr entries [ 29.531691][ T500] EXT4-fs (loop2): Remounting filesystem read-only [ 29.593361][ T503] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 29.732847][ T506] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 29.771757][ T506] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.64: corrupted xattr entries [ 29.783227][ T506] EXT4-fs (loop2): Remounting filesystem read-only [ 29.862841][ T509] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 29.905961][ T509] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.65: corrupted xattr entries [ 29.917359][ T509] EXT4-fs (loop2): Remounting filesystem read-only [ 30.022871][ T512] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 30.060625][ T512] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.66: corrupted xattr entries [ 30.072254][ T512] EXT4-fs (loop2): Remounting filesystem read-only [ 30.152781][ T515] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 30.313029][ T518] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 30.353482][ T518] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.68: corrupted xattr entries [ 30.364993][ T518] EXT4-fs (loop2): Remounting filesystem read-only [ 30.432875][ T521] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 30.471728][ T521] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.69: corrupted xattr entries [ 30.483138][ T521] EXT4-fs (loop2): Remounting filesystem read-only [ 30.592815][ T524] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 30.630834][ T524] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.70: corrupted xattr entries [ 30.642262][ T524] EXT4-fs (loop2): Remounting filesystem read-only [ 30.793606][ T528] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 30.912890][ T531] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 30.951445][ T531] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.73: corrupted xattr entries [ 30.962909][ T531] EXT4-fs (loop2): Remounting filesystem read-only [ 31.095074][ T534] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 31.133266][ T534] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.74: corrupted xattr entries [ 31.144702][ T534] EXT4-fs (loop2): Remounting filesystem read-only [ 31.252854][ T537] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 31.402978][ T540] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 31.445953][ T540] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.76: corrupted xattr entries [ 31.457347][ T540] EXT4-fs (loop2): Remounting filesystem read-only [ 31.562904][ T543] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 31.602367][ T543] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.77: corrupted xattr entries [ 31.613784][ T543] EXT4-fs (loop2): Remounting filesystem read-only [ 31.762847][ T547] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 31.800249][ T547] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.78: corrupted xattr entries [ 31.811932][ T547] EXT4-fs (loop2): Remounting filesystem read-only [ 31.912924][ T550] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 32.052846][ T553] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 32.095775][ T553] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.80: corrupted xattr entries [ 32.107167][ T553] EXT4-fs (loop2): Remounting filesystem read-only [ 32.202858][ T556] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 32.240291][ T556] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.81: corrupted xattr entries 2026/07/17 06:03:39 executed programs: 67 [ 32.252208][ T556] EXT4-fs (loop2): Remounting filesystem read-only [ 32.443165][ T560] EXT4-fs (loop2): mounted filesystem without journal. Opts: block_validity,errors=remount-ro,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,grpjquota=,nogrpid,noauto_da_alloc,norecovery,. Quota mode: none. [ 32.486754][ T560] EXT4-fs error (device loop2): xattr_find_entry:297: inode #12: comm syz.2.83: corrupted xattr entries [ 32.498100][ T560] EXT4-fs (loop2): Remounting filesystem read-only