Warning: Permanently added '10.128.0.231' (ED25519) to the list of known hosts. 2025/10/09 02:31:01 parsed 1 programs [ 48.691214][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 48.691228][ T24] audit: type=1400 audit(1759977061.960:105): avc: denied { unlink } for pid=420 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 48.740841][ T420] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.191064][ T24] audit: type=1400 audit(1759977062.460:106): avc: denied { create } for pid=431 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 49.575677][ T24] audit: type=1401 audit(1759977062.840:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 49.678649][ T461] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.689638][ T461] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.697445][ T461] device bridge_slave_0 entered promiscuous mode [ 49.726051][ T461] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.733455][ T461] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.741099][ T461] device bridge_slave_1 entered promiscuous mode [ 49.820088][ T461] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.827296][ T461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.834745][ T461] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.842101][ T461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.873191][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.882641][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.890401][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.918742][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.929495][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.936598][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.944786][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.953747][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.961044][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.969005][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.977099][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.009423][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.024679][ T461] device veth0_vlan entered promiscuous mode [ 50.037999][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.048739][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.079280][ T49] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.093026][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.103343][ T461] device veth1_macvtap entered promiscuous mode [ 50.117996][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.132808][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/10/09 02:31:03 executed programs: 0 [ 50.222320][ T24] audit: type=1400 audit(1759977063.490:108): avc: denied { write } for pid=412 comm="syz-execprog" path="pipe:[14952]" dev="pipefs" ino=14952 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 50.373453][ T485] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.380758][ T485] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.388712][ T485] device bridge_slave_0 entered promiscuous mode [ 50.396856][ T485] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.404145][ T485] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.411699][ T485] device bridge_slave_1 entered promiscuous mode [ 50.430459][ T488] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.437593][ T488] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.445241][ T488] device bridge_slave_0 entered promiscuous mode [ 50.454639][ T488] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.461861][ T488] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.469330][ T488] device bridge_slave_1 entered promiscuous mode [ 50.609031][ T489] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.616278][ T489] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.623823][ T489] device bridge_slave_0 entered promiscuous mode [ 50.639864][ T496] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.647834][ T496] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.655661][ T496] device bridge_slave_0 entered promiscuous mode [ 50.665331][ T496] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.672898][ T496] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.681003][ T496] device bridge_slave_1 entered promiscuous mode [ 50.697926][ T489] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.705106][ T489] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.713177][ T489] device bridge_slave_1 entered promiscuous mode [ 50.722173][ T495] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.729304][ T495] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.736695][ T495] device bridge_slave_0 entered promiscuous mode [ 50.758433][ T495] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.765497][ T495] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.773417][ T495] device bridge_slave_1 entered promiscuous mode [ 50.909059][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 50.916841][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.933016][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.941661][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.950297][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.957678][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.969171][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 50.981238][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.990200][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.998933][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.006185][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.036544][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.044303][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 51.052332][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.060006][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 51.069244][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.078025][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.085348][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.092997][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 51.101524][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.109883][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.116912][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.124564][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.171371][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.179963][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.189315][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.197653][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.206022][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.213831][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.221737][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.230207][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.238432][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.246907][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.254033][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.261559][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.270154][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.278416][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 51.287016][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.295279][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 51.303597][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.312519][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.336836][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 51.344756][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.353581][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.360757][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.368185][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.376681][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.384519][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.392356][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.410400][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 51.419103][ T331] bridge0: port 1(bridge_slave_0) entered blocking state [ 51.426217][ T331] bridge0: port 1(bridge_slave_0) entered forwarding state [ 51.433929][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 51.443504][ T331] bridge0: port 2(bridge_slave_1) entered blocking state [ 51.450615][ T331] bridge0: port 2(bridge_slave_1) entered forwarding state [ 51.458231][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.466577][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.475457][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.483573][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 51.498999][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.523262][ T489] device veth0_vlan entered promiscuous mode [ 51.539716][ T488] device veth0_vlan entered promiscuous mode [ 51.547955][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.556076][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.564408][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.572386][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.580655][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.588303][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.597029][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.605477][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.613348][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.621389][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.630134][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 51.638619][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 51.646946][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.655767][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.671716][ T485] device veth0_vlan entered promiscuous mode [ 51.684895][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.693411][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.702403][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.711491][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.726041][ T489] device veth1_macvtap entered promiscuous mode [ 51.735894][ T496] device veth0_vlan entered promiscuous mode [ 51.742796][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.751006][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.759569][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.768052][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.776219][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.784634][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 51.793131][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 51.802225][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 51.810378][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 51.820788][ T485] device veth1_macvtap entered promiscuous mode [ 51.830439][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.838343][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 51.846793][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 51.865873][ T488] device veth1_macvtap entered promiscuous mode [ 51.879623][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 51.887790][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.896305][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.905173][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 51.914694][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 51.925697][ T495] device veth0_vlan entered promiscuous mode [ 51.946859][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 51.955145][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 51.966702][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.975225][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 51.984530][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 51.988330][ T510] ====================================================== [ 51.988330][ T510] WARNING: the mand mount option is being deprecated and [ 51.988330][ T510] will be removed in v5.15! [ 51.988330][ T510] ====================================================== [ 51.993976][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.028878][ T510] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.032367][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.049802][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.058499][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.066215][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.068179][ T510] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue [ 52.099282][ T24] audit: type=1400 audit(1759977065.370:109): avc: denied { mount } for pid=509 comm="syz.1.18" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 52.120826][ T510] cgroup: fork rejected by pids controller in /syz1 [ 52.147499][ T24] audit: type=1400 audit(1759977065.390:110): avc: denied { write } for pid=514 comm="syz.1.18" name="/" dev="loop1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.170095][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.170706][ T24] audit: type=1400 audit(1759977065.390:111): avc: denied { add_name } for pid=514 comm="syz.1.18" name="core" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.187875][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.199624][ T24] audit: type=1400 audit(1759977065.390:112): avc: denied { create } for pid=514 comm="syz.1.18" name="core" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.199654][ T24] audit: type=1400 audit(1759977065.390:113): avc: denied { read write open } for pid=514 comm="syz.1.18" path="/0/file1/core" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 52.199673][ T24] audit: type=1400 audit(1759977065.420:114): avc: denied { remove_name } for pid=515 comm="syz.1.18" name="core" dev="loop1" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 52.284816][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.306475][ T514] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3342: comm syz.1.18: Allocating blocks 497-513 which overlap fs metadata [ 52.307895][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.330575][ T526] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3342: comm syz.1.18: Allocating blocks 1-17 which overlap fs metadata [ 52.344808][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 52.355156][ T515] EXT4-fs error (device loop1): ext4_ext_map_blocks:4178: inode #19: comm syz.1.18: bad extent address lblock: 34, depth: 1 pblock 0 [ 52.361512][ T517] EXT4-fs error (device loop1): mb_free_blocks:1524: group 0, inode 21: block 353:freeing already freed block (bit 22); block bitmap corrupt. [ 52.370665][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.420873][ T495] device veth1_macvtap entered promiscuous mode [ 52.437624][ T496] device veth1_macvtap entered promiscuous mode [ 52.440884][ T580] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.461642][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.469177][ T580] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue [ 52.504779][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 52.520954][ T580] cgroup: fork rejected by pids controller in /syz6 [ 52.523350][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.537084][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.550180][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 52.569166][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.606359][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.618151][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.636339][ T602] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 52.663684][ T599] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3342: comm syz.6.19: Allocating blocks 497-513 which overlap fs metadata [ 52.679699][ T602] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue [ 52.729107][ T602] cgroup: fork rejected by pids controller in /syz0 [ 52.746960][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 52.756007][ T613] EXT4-fs error (device loop6): mb_free_blocks:1524: group 0, inode 14: block 401:freeing already freed block (bit 25); block bitmap corrupt. [ 52.765429][ T331] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 52.780949][ T585] ------------[ cut here ]------------ [ 52.786550][ T585] kernel BUG at fs/ext4/extents.c:2135! [ 52.800010][ T585] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 52.806412][ T585] CPU: 1 PID: 585 Comm: syz.6.19 Not tainted syzkaller #0 [ 52.813711][ T585] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 52.823882][ T585] RIP: 0010:ext4_ext_insert_extent+0x44fa/0x4530 [ 52.830619][ T585] Code: ff ff 89 d9 80 e1 07 fe c1 38 c1 0f 8c 01 e9 ff ff 48 89 df e8 e7 01 d5 ff e9 f4 e8 ff ff e8 5d 12 9b ff 0f 0b e8 56 12 9b ff <0f> 0b e8 4f 12 9b ff 0f 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 43 [ 52.850909][ T585] RSP: 0018:ffffc90001a463e0 EFLAGS: 00010293 [ 52.857100][ T585] RAX: ffffffff81c8934a RBX: ffff88812d88f400 RCX: ffff88811a2d3b40 [ 52.865292][ T585] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000010 [ 52.865743][ T667] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3342: comm syz.0.17: Allocating blocks 497-513 which overlap fs metadata [ 52.873288][ T585] RBP: ffffc90001a46590 R08: dffffc0000000000 R09: ffffed1024c23016 [ 52.873297][ T585] R10: ffffed1024c23016 R11: 1ffff11024c23015 R12: 0000000000000010 [ 52.873304][ T585] R13: 1ffff11021f84a88 R14: ffff88812d88f430 R15: 0000000000000010 [ 52.873315][ T585] FS: 00007f6140d026c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 52.873323][ T585] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 52.873330][ T585] CR2: 00007ffcf5797f6d CR3: 000000011a96a000 CR4: 00000000003506a0 [ 52.873349][ T585] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 52.941965][ T331] EXT4-fs error (device loop0): mb_free_blocks:1524: group 0, [ 52.943863][ T585] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 52.943867][ T331] inode 26: block 129: [ 52.951531][ T585] Call Trace: [ 52.951555][ T585] ? __read_extent_tree_block+0x1e8/0x790 [ 52.951568][ T585] ? memcpy+0x56/0x70 [ 52.951590][ T585] ? ext4_ext_next_allocated_block+0x2e0/0x2e0 [ 52.959851][ T331] freeing already freed block (bit 8); block bitmap corrupt. [ 52.963918][ T585] ? get_implied_cluster_alloc+0x526/0x940 [ 52.996681][ T585] ext4_ext_map_blocks+0x148f/0x5d40 [ 53.002009][ T585] ? __kasan_slab_alloc+0xcf/0xf0 [ 53.007158][ T585] ? __kasan_slab_alloc+0xbd/0xf0 [ 53.012229][ T585] ? slab_post_alloc_hook+0x5d/0x2f0 [ 53.017702][ T585] ? kmem_cache_alloc+0x165/0x2e0 [ 53.021211][ T669] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.17: Freeing blocks not in datazone - block = 0, count = 0 [ 53.022750][ T585] ? ext4_writepages+0xebd/0x2e00 [ 53.037358][ T669] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.17: Freeing blocks not in datazone - block = 0, count = 0 [ 53.041129][ T585] ? do_writepages+0x12a/0x270 [ 53.055197][ T669] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.17: Freeing blocks not in datazone - block = 0, count = 16 [ 53.058950][ T585] ? __filemap_fdatawrite_range+0x2bc/0x360 [ 53.058963][ T585] ? file_write_and_wait_range+0x8c/0x110 [ 53.058977][ T585] ? ext4_file_write_iter+0x536/0x1980 [ 53.058988][ T585] ? __kernel_write+0x55a/0x910 [ 53.059000][ T585] ? dump_emit+0x240/0x360 [ 53.059010][ T585] ? ext4_ext_release+0x10/0x10 [ 53.059022][ T585] ? get_signal+0xf23/0x12e0 [ 53.059043][ T585] ? arch_do_signal_or_restart+0xbf/0x10f0 [ 53.114088][ T585] ? exit_to_user_mode_loop+0xa2/0xe0 [ 53.119564][ T585] ? exit_to_user_mode_prepare+0x76/0xa0 [ 53.125380][ T585] ? irqentry_exit_to_user_mode+0x9/0x10 [ 53.131006][ T585] ? irqentry_exit+0x12/0x60 [ 53.135586][ T585] ? exc_page_fault+0x67/0xc0 [ 53.140274][ T585] ? ext4_es_lookup_extent+0x32d/0x8c0 [ 53.145852][ T585] ext4_map_blocks+0x978/0x1bc0 [ 53.150910][ T585] ? ext4_issue_zeroout+0x1a0/0x1a0 [ 53.156369][ T585] ? ext4_inode_journal_mode+0x19a/0x480 [ 53.162124][ T585] ext4_writepages+0x11d5/0x2e00 [ 53.167286][ T585] ? write_boundary_block+0x140/0x140 [ 53.172850][ T585] ? ext4_readahead+0x110/0x110 [ 53.177823][ T585] ? ext4_readpage+0x220/0x220 [ 53.182588][ T585] ? __ext4_get_inode_loc+0x544/0xc20 [ 53.188037][ T585] ? __kasan_check_read+0x11/0x20 [ 53.193070][ T585] ? mark_buffer_dirty+0x1cc/0x330 [ 53.198274][ T585] ? __ext4_handle_dirty_metadata+0x2eb/0x7f0 [ 53.204337][ T585] ? ext4_readpage+0x220/0x220 [ 53.209110][ T585] do_writepages+0x12a/0x270 [ 53.213700][ T585] ? __ext4_mark_inode_dirty+0x43e/0x610 [ 53.219325][ T585] ? __writepage+0x130/0x130 [ 53.223907][ T585] ? __kasan_check_write+0x14/0x20 [ 53.229010][ T585] ? _raw_spin_lock+0x8e/0xe0 [ 53.233678][ T585] ? _raw_spin_unlock+0x4d/0x70 [ 53.238549][ T585] __filemap_fdatawrite_range+0x2bc/0x360 [ 53.244353][ T585] ? iov_iter_advance+0x548/0x750 [ 53.249553][ T585] ? filemap_check_errors+0x120/0x120 [ 53.254946][ T585] ? generic_perform_write+0x483/0x510 [ 53.260581][ T585] ? preempt_count_add+0x90/0x1b0 [ 53.265891][ T585] file_write_and_wait_range+0x8c/0x110 [ 53.271446][ T585] ext4_sync_file+0x1a9/0x9f0 [ 53.276118][ T585] vfs_fsync_range+0x190/0x1a0 [ 53.280883][ T585] ext4_buffered_write_iter+0x59b/0x640 [ 53.286684][ T585] ext4_file_write_iter+0x536/0x1980 [ 53.292175][ T585] ? follow_page_pte+0xc57/0xcc0 [ 53.297205][ T585] ? can_reuse_spf_vma+0xe0/0xe0 [ 53.302574][ T585] ? ext4_file_read_iter+0x530/0x530 [ 53.308120][ T585] ? iov_iter_kvec+0x3f/0x120 [ 53.312801][ T585] __kernel_write+0x55a/0x910 [ 53.317480][ T585] ? vfs_read+0xa10/0xa10 [ 53.321845][ T585] ? populate_vma_page_range+0xf0/0xf0 [ 53.327499][ T585] ? __kasan_check_write+0x14/0x20 [ 53.332705][ T585] ? get_dump_page+0x46b/0x5b0 [ 53.337471][ T585] dump_emit+0x240/0x360 [ 53.341708][ T585] ? wait_for_dump_helpers+0x390/0x390 [ 53.347171][ T585] ? ext4_llseek+0x1ee/0x210 [ 53.351759][ T585] dump_user_range+0x6a/0x1a0 [ 53.356458][ T585] elf_core_dump+0x278a/0x2bc0 [ 53.361313][ T585] ? load_elf_binary+0x2890/0x2890 [ 53.366428][ T585] ? __fsnotify_parent+0x5ff/0x6c0 [ 53.371543][ T585] ? do_truncate+0x1ad/0x210 [ 53.376148][ T585] ? putname+0xfe/0x150 [ 53.380388][ T585] ? __kasan_check_read+0x11/0x20 [ 53.385597][ T585] ? __ia32_sys_unshare+0x40/0x40 [ 53.390638][ T585] do_coredump+0x1ac9/0x27f0 [ 53.395261][ T585] ? simple_acl_create+0x1c0/0x1c0 [ 53.400474][ T585] ? debug_smp_processor_id+0x17/0x20 [ 53.405955][ T585] ? kmem_cache_free+0x100/0x2d0 [ 53.411268][ T585] ? ____kasan_slab_free+0x130/0x160 [ 53.416643][ T585] ? get_signal+0xb98/0x12e0 [ 53.421334][ T585] ? kmem_cache_free+0x100/0x2d0 [ 53.426387][ T585] get_signal+0xf23/0x12e0 [ 53.430824][ T585] arch_do_signal_or_restart+0xbf/0x10f0 [ 53.436555][ T585] ? __bad_area_nosemaphore+0x2b0/0x420 [ 53.442183][ T585] ? memset+0x35/0x40 [ 53.446249][ T585] ? __ia32_sys_rt_sigreturn+0x6c0/0x6c0 [ 53.451888][ T585] ? bad_area+0x6a/0x80 [ 53.456050][ T585] exit_to_user_mode_loop+0xa2/0xe0 [ 53.461287][ T585] exit_to_user_mode_prepare+0x76/0xa0 [ 53.466973][ T585] irqentry_exit_to_user_mode+0x9/0x10 [ 53.472531][ T585] irqentry_exit+0x12/0x60 [ 53.477036][ T585] exc_page_fault+0x67/0xc0 [ 53.481661][ T585] ? asm_exc_page_fault+0x8/0x30 [ 53.486692][ T585] asm_exc_page_fault+0x1e/0x30 [ 53.491584][ T585] RIP: 0033:0x7f6140e91ec9 [ 53.496003][ T585] Code: Unable to access opcode bytes at RIP 0x7f6140e91e9f. [ 53.503473][ T585] RSP: 002b:00007f6140d01fe8 EFLAGS: 00010206 [ 53.509556][ T585] RAX: 0000000000000000 RBX: 00007f61410e8fa0 RCX: 00007f6140e91ec9 [ 53.517913][ T585] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000a000 [ 53.526443][ T585] RBP: 00007f6140f14f91 R08: 0000000000000000 R09: 0000000000000000 [ 53.534782][ T585] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 53.542927][ T585] R13: 00007f61410e9038 R14: 00007f61410e8fa0 R15: 00007fff6b33a3c8 [ 53.550914][ T585] Modules linked in: [ 53.555505][ T669] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.17: Freeing blocks not in datazone - block = 0, count = 0 [ 53.568792][ T585] ---[ end trace a30471667e8a21d5 ]--- [ 53.568816][ T585] RIP: 0010:ext4_ext_insert_extent+0x44fa/0x4530 [ 53.568828][ T585] Code: ff ff 89 d9 80 e1 07 fe c1 38 c1 0f 8c 01 e9 ff ff 48 89 df e8 e7 01 d5 ff e9 f4 e8 ff ff e8 5d 12 9b ff 0f 0b e8 56 12 9b ff <0f> 0b e8 4f 12 9b ff 0f 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 43 [ 53.568836][ T585] RSP: 0018:ffffc90001a463e0 EFLAGS: 00010293 [ 53.568849][ T585] RAX: ffffffff81c8934a RBX: ffff88812d88f400 RCX: ffff88811a2d3b40 [ 53.568856][ T585] RDX: 0000000000000000 RSI: 0000000000000010 RDI: 0000000000000010 [ 53.568871][ T585] RBP: ffffc90001a46590 R08: dffffc0000000000 R09: ffffed1024c23016 [ 53.568888][ T585] R10: ffffed1024c23016 R11: 1ffff11024c23015 R12: 0000000000000010 [ 53.576034][ T669] EXT4-fs error (device loop0): ext4_free_blocks:5685: comm syz.0.17: Freeing blocks not in datazone - block = 0, count = 16 [ 53.584129][ T704] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 53.618820][ T585] R13: 1ffff11021f84a88 R14: ffff88812d88f430 R15: 0000000000000010 [ 53.629456][ T704] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue [ 53.633689][ T585] FS: 00007f6140d026c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 53.710247][ T585] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 53.716874][ T585] CR2: 00007f7c09d50000 CR3: 000000011a96a000 CR4: 00000000003506b0 [ 53.725125][ T585] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 53.733179][ T585] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 53.741326][ T585] Kernel panic - not syncing: Fatal exception [ 53.747954][ T585] Kernel Offset: disabled [ 53.752377][ T585] Rebooting in 86400 seconds..