Warning: Permanently added '10.128.1.98' (ED25519) to the list of known hosts. 2026/03/23 20:10:01 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 41.848006][ T24] audit: type=1400 audit(1774296601.899:106): avc: denied { unlink } for pid=418 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 41.881780][ T418] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 42.428565][ T24] audit: type=1400 audit(1774296602.479:107): avc: denied { create } for pid=442 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 42.535282][ T24] audit: type=1401 audit(1774296602.589:108): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 42.687268][ T449] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.712207][ T449] bridge0: port 1(bridge_slave_0) entered disabled state [ 42.741001][ T449] device bridge_slave_0 entered promiscuous mode [ 42.761381][ T449] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.768876][ T449] bridge0: port 2(bridge_slave_1) entered disabled state [ 42.786253][ T449] device bridge_slave_1 entered promiscuous mode [ 42.970414][ T449] bridge0: port 2(bridge_slave_1) entered blocking state [ 42.978298][ T449] bridge0: port 2(bridge_slave_1) entered forwarding state [ 42.985898][ T449] bridge0: port 1(bridge_slave_0) entered blocking state [ 42.993165][ T449] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.024355][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.033499][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.041591][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.049747][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 43.078447][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 43.087209][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.094807][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.103370][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 43.113072][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.120333][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.128219][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 43.136668][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 43.156619][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 43.172425][ T449] device veth0_vlan entered promiscuous mode [ 43.179055][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 43.189414][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 43.198679][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 43.212664][ T449] device veth1_macvtap entered promiscuous mode [ 43.219800][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready 2026/03/23 20:10:03 executed programs: 0 [ 43.232057][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 43.242938][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 43.384888][ T487] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.392666][ T487] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.400845][ T487] device bridge_slave_0 entered promiscuous mode [ 43.408631][ T487] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.416032][ T487] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.424090][ T487] device bridge_slave_1 entered promiscuous mode [ 43.500221][ T490] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.507755][ T490] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.517080][ T490] device bridge_slave_0 entered promiscuous mode [ 43.533228][ T490] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.540667][ T490] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.548139][ T490] device bridge_slave_1 entered promiscuous mode [ 43.571461][ T491] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.578668][ T491] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.586359][ T491] device bridge_slave_0 entered promiscuous mode [ 43.610978][ T491] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.618218][ T491] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.625833][ T491] device bridge_slave_1 entered promiscuous mode [ 43.685185][ T494] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.692594][ T494] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.700280][ T494] device bridge_slave_0 entered promiscuous mode [ 43.709624][ T494] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.717114][ T494] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.724636][ T494] device bridge_slave_1 entered promiscuous mode [ 43.755249][ T493] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.762752][ T493] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.771142][ T493] device bridge_slave_0 entered promiscuous mode [ 43.791084][ T493] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.798538][ T493] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.806011][ T493] device bridge_slave_1 entered promiscuous mode [ 43.924927][ T493] bridge0: port 2(bridge_slave_1) entered blocking state [ 43.932504][ T493] bridge0: port 2(bridge_slave_1) entered forwarding state [ 43.940179][ T493] bridge0: port 1(bridge_slave_0) entered blocking state [ 43.947515][ T493] bridge0: port 1(bridge_slave_0) entered forwarding state [ 43.960179][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 43.968601][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 43.976519][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 43.984989][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.011110][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.019692][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.028677][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.035939][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.044110][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.053471][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.062183][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.069995][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.077786][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.093313][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.101859][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.110908][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.119136][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.137985][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.146155][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.154473][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.162046][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.169939][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.179182][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.187739][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.195229][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.203573][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.213156][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.222869][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.231315][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.239214][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.247825][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.256879][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.264116][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.271557][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.280344][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.288898][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.295988][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.303792][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.311777][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.336925][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.346661][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.377420][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.386155][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.395398][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 44.405268][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.414989][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 44.423564][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.443567][ T487] device veth0_vlan entered promiscuous mode [ 44.450596][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.459001][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.468626][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.477398][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.486156][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.494708][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.503097][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.511495][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.520715][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.528726][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.537378][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.549083][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.557698][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.567096][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.581382][ T491] device veth0_vlan entered promiscuous mode [ 44.603315][ T490] device veth0_vlan entered promiscuous mode [ 44.621799][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.630221][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.638276][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.646296][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 44.654186][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.674932][ T490] device veth1_macvtap entered promiscuous mode [ 44.681938][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 44.690699][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.699261][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.707324][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.715977][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 44.725460][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.733938][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.741526][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.757825][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.766402][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.774603][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.783210][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.791723][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.800043][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.808335][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.816607][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 44.834413][ T487] device veth1_macvtap entered promiscuous mode [ 44.848838][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.857373][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.866437][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.874752][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 44.884060][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 44.893388][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 44.902143][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 44.911152][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 44.919412][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.927528][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 44.935614][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.949354][ T491] device veth1_macvtap entered promiscuous mode [ 44.969664][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 44.978625][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.987616][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 44.998575][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.010210][ T347] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.012138][ T512] EXT4-fs (loop2): Ignoring removed bh option [ 45.028390][ T512] EXT4-fs (loop2): Ignoring removed oldalloc option [ 45.047892][ T494] device veth0_vlan entered promiscuous mode [ 45.052306][ T512] EXT4-fs (loop2): Ignoring removed nobh option [ 45.061418][ T512] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 45.075197][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.083846][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.085306][ T512] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue [ 45.112508][ T24] audit: type=1400 audit(1774296605.169:109): avc: denied { mount } for pid=511 comm="syz.2.19" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 45.134614][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.142763][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.150950][ T24] audit: type=1400 audit(1774296605.169:110): avc: denied { write } for pid=511 comm="syz.2.19" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.161219][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.173179][ T24] audit: type=1400 audit(1774296605.169:111): avc: denied { add_name } for pid=511 comm="syz.2.19" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 45.203767][ T24] audit: type=1400 audit(1774296605.169:112): avc: denied { create } for pid=511 comm="syz.2.19" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.221819][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.224416][ T24] audit: type=1400 audit(1774296605.169:113): avc: denied { read open } for pid=511 comm="syz.2.19" path="/0/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.254140][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.256761][ T24] audit: type=1400 audit(1774296605.169:114): avc: denied { write } for pid=511 comm="syz.2.19" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 45.265445][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.297337][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.305498][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.321549][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.330928][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.339649][ T512] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.19: Allocating blocks 497-513 which overlap fs metadata [ 45.348300][ T494] device veth1_macvtap entered promiscuous mode [ 45.361870][ T512] EXT4-fs (loop2): pa ffff888126b03348: logic 128, phys. 449, len 4 [ 45.370124][ T512] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4375: group 0, free 0, pa_free 1 [ 45.387387][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.397482][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.408083][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.426695][ T534] EXT4-fs (loop6): Ignoring removed bh option [ 45.436173][ T534] EXT4-fs (loop6): Ignoring removed oldalloc option [ 45.447878][ T493] device veth0_vlan entered promiscuous mode [ 45.457097][ T534] EXT4-fs (loop6): Ignoring removed nobh option [ 45.463824][ T534] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 45.471851][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.486151][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.495832][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 45.499091][ T534] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue [ 45.505518][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.534944][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 45.543611][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.552623][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.554019][ T537] EXT4-fs (loop1): Ignoring removed bh option [ 45.563862][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.567394][ T537] EXT4-fs (loop1): Ignoring removed oldalloc option [ 45.582747][ T493] device veth1_macvtap entered promiscuous mode [ 45.589497][ T537] EXT4-fs (loop1): Ignoring removed nobh option [ 45.596365][ T537] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 45.603086][ T540] EXT4-fs (loop2): Ignoring removed bh option [ 45.616215][ T540] EXT4-fs (loop2): Ignoring removed oldalloc option [ 45.623729][ T540] EXT4-fs (loop2): Ignoring removed nobh option [ 45.630727][ T540] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 45.644908][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.652773][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.658988][ T540] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue [ 45.661214][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 45.691434][ T537] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue [ 45.723859][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.732932][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 45.741233][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 45.749785][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.763840][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 45.782812][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 45.850714][ T537] ------------[ cut here ]------------ [ 45.859851][ T537] kernel BUG at fs/ext4/extents_status.c:968! [ 45.863347][ T553] EXT4-fs (loop5): Ignoring removed bh option [ 45.883037][ T553] EXT4-fs (loop5): Ignoring removed oldalloc option [ 45.885596][ T537] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 45.891730][ T553] EXT4-fs (loop5): Ignoring removed nobh option [ 45.896891][ T537] CPU: 1 PID: 537 Comm: syz.1.18 Not tainted syzkaller #0 [ 45.896896][ T537] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 45.896929][ T537] RIP: 0010:ext4_es_cache_extent+0x57b/0x5d0 [ 45.896946][ T537] Code: e8 03 42 80 3c 38 00 74 08 48 89 df e8 ee 3e d2 ff 48 8b 3b 48 8b 74 24 28 48 8d 54 24 60 e8 fc 72 0c 00 eb 13 e8 b5 be 97 ff <0f> 0b e8 ae be 97 ff eb 28 e8 a7 be 97 ff 31 f6 65 ff 0d da 78 35 [ 45.903940][ T553] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 45.911252][ T537] RSP: 0018:ffffc900017c6500 EFLAGS: 00010293 [ 45.911270][ T537] RAX: ffffffff81ccf49b RBX: 0000000000000040 RCX: ffff88811a40bb40 [ 45.911275][ T537] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 000000000000003e [ 45.911280][ T537] RBP: ffffc900017c6608 R08: ffffc900017c6577 R09: ffffc900017c6560 [ 45.911286][ T537] R10: dffffc0000000000 R11: fffff520002f8caf R12: ffff88811b5733c8 [ 45.911292][ T537] R13: 47ffffffffffffff R14: 000000000000003e R15: dffffc0000000000 [ 45.911311][ T537] FS: 00007fa869ff66c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 46.019619][ T537] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 46.027065][ T537] CR2: 00007f7afa1b6000 CR3: 000000011950c000 CR4: 00000000003506a0 [ 46.035613][ T537] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 46.043755][ T537] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 46.052190][ T537] Call Trace: [ 46.055575][ T537] ? __es_insert_extent+0x1800/0x1800 [ 46.061173][ T537] __read_extent_tree_block+0x44b/0x790 [ 46.067108][ T537] ext4_find_extent+0x8b9/0xe20 [ 46.072157][ T537] ext4_ext_map_blocks+0x20b/0x5dd0 [ 46.077512][ T537] ? __kasan_check_write+0x14/0x20 [ 46.083134][ T537] ? __switch_to+0x508/0x1020 [ 46.087840][ T537] ? set_next_entity+0xb4/0x5d0 [ 46.092971][ T537] ? compat_start_thread+0x80/0x80 [ 46.098106][ T537] ? ext4_ext_release+0x10/0x10 [ 46.103274][ T537] ? ext4_es_lookup_extent+0x54c/0x900 [ 46.109010][ T537] ext4_map_blocks+0x985/0x1bd0 [ 46.113853][ T537] ? _raw_spin_trylock_bh+0x150/0x150 [ 46.119305][ T537] ? rcu_preempt_deferred_qs_irqrestore+0x65e/0x950 [ 46.125869][ T537] ? ext4_issue_zeroout+0x1a0/0x1a0 [ 46.131345][ T537] _ext4_get_block+0x1d1/0x4e0 [ 46.136090][ T537] ? xas_load+0x153/0x2a0 [ 46.140402][ T537] ? ext4_get_block+0x50/0x50 [ 46.145175][ T537] ? xas_load+0x28b/0x2a0 [ 46.149569][ T537] ? __rcu_read_unlock+0x5e/0xa0 [ 46.154488][ T537] ext4_get_block_unwritten+0x2a/0x40 [ 46.160202][ T537] ext4_block_write_begin+0x573/0x1340 [ 46.165674][ T537] ? _ext4_get_block+0x4e0/0x4e0 [ 46.170881][ T537] ? ext4_print_free_blocks+0x2c0/0x2c0 [ 46.176665][ T537] ? __kasan_check_read+0x11/0x20 [ 46.182198][ T537] ? ext4_inode_journal_mode+0x19a/0x480 [ 46.188286][ T537] ext4_write_begin+0x67e/0x1690 [ 46.193416][ T537] ? ext4_readahead+0x110/0x110 [ 46.198356][ T537] ? is_bpf_text_address+0x177/0x190 [ 46.203994][ T537] ? __kernel_text_address+0xa0/0x100 [ 46.209450][ T537] ext4_da_write_begin+0x478/0xf10 [ 46.214624][ T537] ? arch_stack_walk+0xee/0x140 [ 46.219548][ T537] ? stack_trace_save+0xa6/0xf0 [ 46.224382][ T537] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 46.230273][ T537] ? unlock_page+0x8d/0xa0 [ 46.234679][ T537] ? block_read_full_page+0xa41/0xb50 [ 46.240229][ T537] ? __set_page_owner+0x3b/0x2a0 [ 46.245496][ T537] ? entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.251821][ T537] ? get_page_from_freelist+0x223b/0x23d0 [ 46.257695][ T537] ? __alloc_pages_nodemask+0x290/0x620 [ 46.263591][ T537] ? new_slab+0x84/0x3f0 [ 46.267808][ T537] ? ___slab_alloc+0x2a6/0x450 [ 46.272924][ T537] ? __slab_alloc+0x63/0xa0 [ 46.277405][ T537] ? __kmalloc+0x1fe/0x330 [ 46.281887][ T537] ? ktime_get_coarse_real_ts64+0xe1/0xf0 [ 46.288028][ T537] generic_perform_write+0x2ce/0x540 [ 46.293501][ T537] ? grab_cache_page_write_begin+0xb0/0xb0 [ 46.300628][ T537] ? down_write+0xb2/0x120 [ 46.305086][ T537] ? down_read_killable+0xe0/0xe0 [ 46.310307][ T537] ? generic_write_checks+0x3d4/0x480 [ 46.316207][ T537] ext4_buffered_write_iter+0x4b8/0x640 [ 46.322160][ T537] ext4_file_write_iter+0x53f/0x1980 [ 46.327439][ T537] ? stack_trace_save+0xa6/0xf0 [ 46.332650][ T537] ? stack_trace_snprint+0xf0/0xf0 [ 46.338044][ T537] ? __kasan_slab_alloc+0x69/0xf0 [ 46.343062][ T537] ? iter_file_splice_write+0x19e/0xcb0 [ 46.348736][ T537] ? ext4_file_read_iter+0x530/0x530 [ 46.354444][ T537] ? __kasan_kmalloc+0xec/0x110 [ 46.359998][ T537] ? __kasan_kmalloc+0xda/0x110 [ 46.364832][ T537] ? __kmalloc+0x1a4/0x330 [ 46.369429][ T537] ? iter_file_splice_write+0x19e/0xcb0 [ 46.375132][ T537] ? direct_splice_actor+0xe9/0x120 [ 46.380588][ T537] ? splice_direct_to_actor+0x4cb/0xb30 [ 46.386227][ T537] ? do_splice_direct+0x1c2/0x2d0 [ 46.391460][ T537] do_iter_readv_writev+0x478/0x5f0 [ 46.396969][ T537] ? avc_policy_seqno+0x1b/0x70 [ 46.401814][ T537] ? generic_file_rw_checks+0x2a0/0x2a0 [ 46.407440][ T537] ? security_file_permission+0x83/0xa0 [ 46.413335][ T537] ? rw_verify_area+0x1c0/0x360 [ 46.418464][ T537] do_iter_write+0x189/0x630 [ 46.423423][ T537] vfs_iter_write+0x7d/0xa0 [ 46.428129][ T537] iter_file_splice_write+0x68c/0xcb0 [ 46.433957][ T537] ? splice_from_pipe+0x180/0x180 [ 46.439646][ T537] ? generic_file_splice_read+0x462/0x5f0 [ 46.446891][ T537] ? splice_shrink_spd+0xb0/0xb0 [ 46.452044][ T537] ? fsnotify_perm+0x2fa/0x4b0 [ 46.458253][ T537] ? splice_from_pipe+0x180/0x180 [ 46.465054][ T537] direct_splice_actor+0xe9/0x120 [ 46.472451][ T537] splice_direct_to_actor+0x4cb/0xb30 [ 46.479342][ T537] ? do_splice_direct+0x2d0/0x2d0 [ 46.486748][ T537] ? pipe_to_sendpage+0x320/0x320 [ 46.492868][ T537] ? rw_verify_area+0x1c0/0x360 [ 46.498100][ T537] do_splice_direct+0x1c2/0x2d0 [ 46.506028][ T537] ? do_splice_to+0x180/0x180 [ 46.512047][ T537] ? fsnotify_perm+0x66/0x4b0 [ 46.517525][ T537] ? security_file_permission+0x83/0xa0 [ 46.523346][ T537] do_sendfile+0x8df/0x1040 [ 46.528034][ T537] ? do_preadv+0x390/0x390 [ 46.533070][ T537] ? __kasan_check_write+0x14/0x20 [ 46.539305][ T537] ? switch_fpu_return+0x19c/0x330 [ 46.544803][ T537] __x64_sys_sendfile64+0x199/0x1f0 [ 46.550104][ T537] ? __ia32_sys_sendfile+0x190/0x190 [ 46.555409][ T537] ? __kasan_check_read+0x11/0x20 [ 46.560751][ T537] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 46.566482][ T537] do_syscall_64+0x31/0x40 [ 46.571082][ T537] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.576964][ T537] RIP: 0033:0x7fa86a193799 [ 46.581574][ T537] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 46.601769][ T537] RSP: 002b:00007fa869ff6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 46.610463][ T537] RAX: ffffffffffffffda RBX: 00007fa86a40cfa0 RCX: 00007fa86a193799 [ 46.618595][ T537] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000005 [ 46.626720][ T537] RBP: 00007fa86a229bd9 R08: 0000000000000000 R09: 0000000000000000 [ 46.634864][ T537] R10: 000000000003ffff R11: 0000000000000246 R12: 0000000000000000 [ 46.642993][ T537] R13: 00007fa86a40d038 R14: 00007fa86a40cfa0 R15: 00007fffe33d5fa8 [ 46.651393][ T537] Modules linked in: [ 46.670639][ T537] ---[ end trace 29d9fb207777ac23 ]--- [ 46.678487][ T556] EXT4-fs (loop3): Ignoring removed bh option [ 46.678741][ T490] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 33: comm syz-executor: path /1/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=848650, rec_len=84, size=1024 fake=0 [ 46.684718][ T556] EXT4-fs (loop3): Ignoring removed oldalloc option [ 46.684733][ T556] EXT4-fs (loop3): Ignoring removed nobh option [ 46.684753][ T556] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 46.688132][ T487] EXT4-fs error (device loop6): ext4_lookup:1830: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 46.707728][ T24] audit: type=1400 audit(1774296606.739:115): avc: denied { remove_name } for pid=487 comm="syz-executor" name="lost+found" dev="loop6" ino=11 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.714626][ T537] RIP: 0010:ext4_es_cache_extent+0x57b/0x5d0 [ 46.734422][ T490] EXT4-fs error (device loop2): ext4_empty_dir:3115: inode #11: block 33: comm syz-executor: bad entry in directory: inode out of bounds - offset=1024, inode=848650, rec_len=84, size=1024 fake=0 [ 46.746118][ T537] Code: e8 03 42 80 3c 38 00 74 08 48 89 df e8 ee 3e d2 ff 48 8b 3b 48 8b 74 24 28 48 8d 54 24 60 e8 fc 72 0c 00 eb 13 e8 b5 be 97 ff <0f> 0b e8 ae be 97 ff eb 28 e8 a7 be 97 ff 31 f6 65 ff 0d da 78 35 [ 46.748776][ T487] EXT4-fs error (device loop6): ext4_lookup:1830: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 46.776088][ T537] RSP: 0018:ffffc900017c6500 EFLAGS: 00010293 [ 46.791963][ T490] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 33: comm syz-executor: path /1/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=848650, rec_len=84, size=1024 fake=0 [ 46.802104][ T553] EXT4-fs (loop5): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue [ 46.819560][ T556] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue [ 46.839919][ T537] [ 46.898254][ T549] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.22: Allocating blocks 497-513 which overlap fs metadata [ 46.910701][ T537] RAX: ffffffff81ccf49b RBX: 0000000000000040 RCX: ffff88811a40bb40 [ 46.927226][ T490] EXT4-fs error (device loop2): ext4_empty_dir:3115: inode #11: block 33: comm syz-executor: bad entry in directory: inode out of bounds - offset=1024, inode=848650, rec_len=84, size=1024 fake=0 [ 46.933510][ T537] RDX: 0000000000000000 RSI: 0000000000000040 RDI: 000000000000003e [ 46.952949][ T549] EXT4-fs (loop2): pa ffff88811c0461f8: logic 128, phys. 449, len 4 [ 46.959799][ T537] RBP: ffffc900017c6608 R08: ffffc900017c6577 R09: ffffc900017c6560 [ 46.967358][ T549] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4375: group 0, free 0, pa_free 1 [ 46.969289][ T490] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 33: comm syz-executor: path /1/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=848650, rec_len=84, size=1024 fake=0 [ 46.976240][ T537] R10: dffffc0000000000 R11: fffff520002f8caf R12: ffff88811b5733c8 [ 46.989221][ T490] EXT4-fs error (device loop2): ext4_empty_dir:3115: inode #11: block 33: comm syz-executor: bad entry in directory: inode out of bounds - offset=1024, inode=848650, rec_len=84, size=1024 fake=0 [ 47.012361][ T537] R13: 47ffffffffffffff R14: 000000000000003e R15: dffffc0000000000 [ 47.018358][ T490] EXT4-fs error (device loop2): ext4_readdir:263: inode #11: block 33: comm syz-executor: path /1/file1/lost+found: bad entry in directory: inode out of bounds - offset=0, inode=848650, rec_len=84, size=1024 fake=0 [ 47.050918][ T537] FS: 00007fa869ff66c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 47.072720][ T490] EXT4-fs error (device loop2): ext4_empty_dir:3115: inode #11: block 33: comm syz-executor: bad entry in directory: inode out of bounds - offset=1024, inode=848650, rec_len=84, size=1024 fake=0 [ 47.096164][ T537] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 47.108860][ T564] EXT4-fs error (device loop5): ext4_mb_mark_diskspace_used:3358: comm syz.5.21: Allocating blocks 1-17 which overlap fs metadata [ 47.110315][ T537] CR2: fffffffffffffe70 CR3: 000000011950c000 CR4: 00000000003506b0 [ 47.131076][ T494] EXT4-fs error (device loop5): ext4_lookup:1830: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 47.152709][ T537] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 47.161271][ T537] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 47.163321][ T494] EXT4-fs error (device loop5): ext4_lookup:1830: inode #16: comm syz-executor: iget: bad extended attribute block 8 [ 47.170005][ T537] Kernel panic - not syncing: Fatal exception [ 47.189416][ T537] Kernel Offset: disabled [ 47.193734][ T537] Rebooting in 86400 seconds..