Warning: Permanently added '10.128.1.57' (ED25519) to the list of known hosts. 2026/04/08 19:06:22 parsed 1 programs Setting up swapspace version 1, size = 127995904 bytes [ 51.719106][ T24] audit: type=1400 audit(1775675183.240:106): avc: denied { unlink } for pid=413 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 51.786464][ T413] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.286695][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.294770][ T422] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.302995][ T422] device bridge_slave_0 entered promiscuous mode [ 52.310907][ T422] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.318373][ T422] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.326237][ T422] device bridge_slave_1 entered promiscuous mode [ 52.380478][ T422] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.389943][ T422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.399600][ T422] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.407693][ T422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.428614][ T312] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.436557][ T312] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.445150][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 52.454310][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 52.465025][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 52.475273][ T312] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.484446][ T312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 52.497874][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 52.506735][ T312] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.514654][ T312] bridge0: port 2(bridge_slave_1) entered forwarding state [ 52.528484][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 52.540818][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 52.555152][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 52.567812][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 52.576381][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 52.585894][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 52.597138][ T422] device veth0_vlan entered promiscuous mode [ 52.609258][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 52.621807][ T422] device veth1_macvtap entered promiscuous mode [ 52.632277][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 52.644676][ T312] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 53.022595][ T24] audit: type=1400 audit(1775675184.540:107): avc: denied { create } for pid=445 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 53.215667][ T24] audit: type=1401 audit(1775675184.730:108): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 53.549335][ T9] device bridge_slave_1 left promiscuous mode [ 53.567571][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.588403][ T9] device bridge_slave_0 left promiscuous mode 2026/04/08 19:06:25 executed programs: 0 [ 53.607894][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.623016][ T9] device veth1_macvtap left promiscuous mode [ 53.631207][ T9] device veth0_vlan left promiscuous mode [ 53.792087][ T475] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.801921][ T475] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.810783][ T475] device bridge_slave_0 entered promiscuous mode [ 53.820142][ T475] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.830537][ T475] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.842323][ T475] device bridge_slave_1 entered promiscuous mode [ 53.895602][ T475] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.905267][ T475] bridge0: port 2(bridge_slave_1) entered forwarding state [ 53.913429][ T475] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.920900][ T475] bridge0: port 1(bridge_slave_0) entered forwarding state [ 53.942788][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 53.951330][ T7] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.959440][ T7] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.971241][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 53.981435][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.990374][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 54.001803][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 54.012196][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.021059][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 54.043522][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 54.064191][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 54.073721][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 54.086895][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 54.098945][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 54.110163][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 54.119902][ T475] device veth0_vlan entered promiscuous mode [ 54.133565][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 54.146141][ T475] device veth1_macvtap entered promiscuous mode [ 54.157047][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 54.169203][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 54.229890][ T481] EXT4-fs (loop2): Ignoring removed bh option [ 54.244774][ T481] EXT4-fs (loop2): Ignoring removed oldalloc option [ 54.252390][ T481] EXT4-fs (loop2): Ignoring removed nobh option [ 54.260388][ T481] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 54.279511][ T481] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue [ 54.303851][ T24] audit: type=1400 audit(1775675185.830:109): avc: denied { mount } for pid=480 comm="syz.2.17" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 54.328989][ T24] audit: type=1400 audit(1775675185.830:110): avc: denied { write } for pid=480 comm="syz.2.17" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.355276][ T24] audit: type=1400 audit(1775675185.830:111): avc: denied { add_name } for pid=480 comm="syz.2.17" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 54.378472][ T481] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.17: Allocating blocks 497-513 which overlap fs metadata [ 54.380116][ T481] EXT4-fs (loop2): pa ffff8881213803f0: logic 128, phys. 385, len 8 [ 54.405647][ T481] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4375: group 0, free 0, pa_free 1 [ 54.416570][ T24] audit: type=1400 audit(1775675185.830:112): avc: denied { create } for pid=480 comm="syz.2.17" name="bus" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.440851][ T24] audit: type=1400 audit(1775675185.830:113): avc: denied { read open } for pid=480 comm="syz.2.17" path="/0/file1/bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.466957][ T24] audit: type=1400 audit(1775675185.830:114): avc: denied { write } for pid=480 comm="syz.2.17" name="bus" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 54.492830][ T24] audit: type=1400 audit(1775675185.830:115): avc: denied { read write } for pid=480 comm="syz.2.17" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 54.677596][ T488] EXT4-fs (loop2): Ignoring removed bh option [ 54.684899][ T488] EXT4-fs (loop2): Ignoring removed oldalloc option [ 54.692929][ T488] EXT4-fs (loop2): Ignoring removed nobh option [ 54.705587][ T488] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 54.729285][ T488] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue [ 54.790825][ T488] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.18: Allocating blocks 497-513 which overlap fs metadata [ 54.810004][ T488] EXT4-fs (loop2): pa ffff888121336b28: logic 128, phys. 385, len 8 [ 54.822447][ T488] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4375: group 0, free 0, pa_free 1 [ 55.093112][ T495] EXT4-fs (loop2): Ignoring removed bh option [ 55.100871][ T495] EXT4-fs (loop2): Ignoring removed oldalloc option [ 55.107970][ T495] EXT4-fs (loop2): Ignoring removed nobh option [ 55.115217][ T495] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 55.139132][ T495] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue [ 55.185054][ T495] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.19: Allocating blocks 497-513 which overlap fs metadata [ 55.202427][ T495] EXT4-fs (loop2): pa ffff8881214c3888: logic 128, phys. 385, len 8 [ 55.212587][ T495] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4375: group 0, free 0, pa_free 1 [ 55.449970][ T503] EXT4-fs (loop2): Ignoring removed bh option [ 55.456694][ T503] EXT4-fs (loop2): Ignoring removed oldalloc option [ 55.464125][ T503] EXT4-fs (loop2): Ignoring removed nobh option [ 55.471749][ T503] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 55.489150][ T503] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,bsddf,bh,oldalloc,data_err=ignore,nouid32,nobh,user_xattr,nouid32,dioread_nolock,,errors=continue [ 55.536521][ T503] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.20: Allocating blocks 497-513 which overlap fs metadata [ 55.552302][ T503] EXT4-fs (loop2): pa ffff8881214c3348: logic 128, phys. 385, len 8 [ 55.561486][ T503] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4375: group 0, free 0, pa_free 1 [ 55.593911][ T503] ------------[ cut here ]------------ [ 55.600750][ T503] kernel BUG at fs/ext4/extents.c:3184! [ 55.607366][ T503] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 55.616185][ T503] CPU: 1 PID: 503 Comm: syz.2.20 Not tainted syzkaller #0 [ 55.623756][ T503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 55.634980][ T503] RIP: 0010:ext4_split_extent_at+0xe1f/0xe40 [ 55.641089][ T503] Code: a7 cf d2 ff e9 05 fc ff ff 89 d9 80 e1 07 fe c1 38 c1 0f 8c 12 fc ff ff 48 89 df e8 6b cf d2 ff e9 05 fc ff ff e8 81 4f 98 ff <0f> 0b e8 7a 4f 98 ff 0f 0b e8 73 4f 98 ff 0f 0b e8 6c 4f 98 ff 0f [ 55.664075][ T503] RSP: 0018:ffffc90000e26de0 EFLAGS: 00010293 [ 55.670582][ T503] RAX: ffffffff81cc63cf RBX: 1ffff110257f3086 RCX: ffff888113e713c0 [ 55.679140][ T503] RDX: 0000000000000000 RSI: 000000000000001f RDI: 0000000000000064 [ 55.687896][ T503] RBP: ffffc90000e26f40 R08: 0000000000000010 R09: 000000004000043b [ 55.696649][ T503] R10: dffffc0000000000 R11: ffffed102335c66a R12: 0000000000000010 [ 55.705487][ T503] R13: 0000000000000011 R14: 000000000000000e R15: 000000000000001f [ 55.714203][ T503] FS: 00007fde61efa6c0(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 55.723504][ T503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 55.730990][ T503] CR2: 00007f02e8a16000 CR3: 00000001186a3000 CR4: 00000000003506a0 [ 55.740455][ T503] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 55.749664][ T503] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 55.760804][ T503] Call Trace: [ 55.764558][ T503] ? memset+0x35/0x40 [ 55.769765][ T503] ? ext4_ext_try_to_merge_right+0x820/0x820 [ 55.777136][ T503] ? ext4_find_extent+0xc9a/0xe20 [ 55.782665][ T503] ext4_split_extent+0x363/0x4a0 [ 55.788278][ T503] ext4_ext_map_blocks+0x1084/0x5dd0 [ 55.794100][ T503] ? __kasan_slab_alloc+0xcf/0xf0 [ 55.799745][ T503] ? __kasan_slab_alloc+0xbd/0xf0 [ 55.805611][ T503] ? slab_post_alloc_hook+0x5d/0x2f0 [ 55.811273][ T503] ? kmem_cache_alloc+0x162/0x2d0 [ 55.817594][ T503] ? ext4_alloc_io_end_vec+0x2a/0x160 [ 55.825741][ T503] ? ext4_writepages+0x1057/0x2eb0 [ 55.832239][ T503] ? do_writepages+0x128/0x280 [ 55.838067][ T503] ? __filemap_fdatawrite_range+0x2a0/0x350 [ 55.845687][ T503] ? file_write_and_wait_range+0x8c/0x110 [ 55.853843][ T503] ? ext4_file_write_iter+0x53f/0x1980 [ 55.860547][ T503] ? vfs_write+0x758/0xdc0 [ 55.866388][ T503] ? __x64_sys_pwrite64+0x197/0x220 [ 55.872303][ T503] ? ext4_ext_release+0x10/0x10 [ 55.878152][ T503] ? ext4_es_lookup_extent+0x54c/0x900 [ 55.884172][ T503] ext4_map_blocks+0x985/0x1bd0 [ 55.890259][ T503] ? ext4_issue_zeroout+0x1a0/0x1a0 [ 55.896122][ T503] ? ext4_inode_journal_mode+0x19a/0x480 [ 55.902273][ T503] ext4_writepages+0x136a/0x2eb0 [ 55.907466][ T503] ? ext4_readpage+0x220/0x220 [ 55.912559][ T503] ? ext4_readpage+0x220/0x220 [ 55.918135][ T503] do_writepages+0x128/0x280 [ 55.922838][ T503] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 55.928771][ T503] ? __writepage+0x130/0x130 [ 55.933770][ T503] ? __kasan_check_write+0x14/0x20 [ 55.939596][ T503] ? _raw_spin_lock+0x94/0xf0 [ 55.944782][ T503] ? _raw_spin_unlock+0x4d/0x70 [ 55.950819][ T503] __filemap_fdatawrite_range+0x2a0/0x350 [ 55.958088][ T503] ? filemap_check_errors+0x120/0x120 [ 55.964194][ T503] ? __get_user_nocheck_1+0x6/0x10 [ 55.970495][ T503] ? generic_perform_write+0x4c8/0x540 [ 55.977462][ T503] ? preempt_count_add+0x90/0x1b0 [ 55.984649][ T503] file_write_and_wait_range+0x8c/0x110 [ 55.991211][ T503] ext4_sync_file+0x1a9/0x9f0 [ 55.997034][ T503] vfs_fsync_range+0x190/0x1a0 [ 56.004019][ T503] ext4_buffered_write_iter+0x59b/0x640 [ 56.011012][ T503] ext4_file_write_iter+0x53f/0x1980 [ 56.017251][ T503] ? futex_wait+0x6f0/0x6f0 [ 56.022204][ T503] ? avc_policy_seqno+0x1b/0x70 [ 56.028274][ T503] ? selinux_file_permission+0x2a5/0x510 [ 56.034901][ T503] ? ext4_file_read_iter+0x530/0x530 [ 56.041289][ T503] ? security_file_permission+0x83/0xa0 [ 56.049022][ T503] ? iov_iter_init+0x3f/0x120 [ 56.055641][ T503] vfs_write+0x758/0xdc0 [ 56.061112][ T503] ? kernel_write+0x3c0/0x3c0 [ 56.066524][ T503] ? __fget_files+0x2c4/0x320 [ 56.072189][ T503] ? __fdget+0x1a1/0x230 [ 56.076912][ T503] ? __x64_sys_pwrite64+0xf2/0x220 [ 56.082838][ T503] __x64_sys_pwrite64+0x197/0x220 [ 56.088310][ T503] ? ksys_pwrite64+0x1b0/0x1b0 [ 56.093660][ T503] ? __kasan_check_read+0x11/0x20 [ 56.099488][ T503] ? exit_to_user_mode_prepare+0x9a/0xa0 [ 56.105392][ T503] do_syscall_64+0x31/0x40 [ 56.110906][ T503] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 56.118657][ T503] RIP: 0033:0x7fde62097799 [ 56.124362][ T503] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 56.148555][ T503] RSP: 002b:00007fde61efa028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 56.158202][ T503] RAX: ffffffffffffffda RBX: 00007fde62310fa0 RCX: 00007fde62097799 [ 56.166964][ T503] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000006 [ 56.176578][ T503] RBP: 00007fde6212dbd9 R08: 0000000000000000 R09: 0000000000000000 [ 56.185627][ T503] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000000 [ 56.194706][ T503] R13: 00007fde62311038 R14: 00007fde62310fa0 R15: 00007ffc40db2cf8 [ 56.203368][ T503] Modules linked in: [ 56.208577][ T503] ---[ end trace 0150e27b6069b543 ]--- [ 56.216866][ T503] RIP: 0010:ext4_split_extent_at+0xe1f/0xe40 [ 56.224379][ T503] Code: a7 cf d2 ff e9 05 fc ff ff 89 d9 80 e1 07 fe c1 38 c1 0f 8c 12 fc ff ff 48 89 df e8 6b cf d2 ff e9 05 fc ff ff e8 81 4f 98 ff <0f> 0b e8 7a 4f 98 ff 0f 0b e8 73 4f 98 ff 0f 0b e8 6c 4f 98 ff 0f [ 56.251345][ T503] RSP: 0018:ffffc90000e26de0 EFLAGS: 00010293 [ 56.258498][ T503] RAX: ffffffff81cc63cf RBX: 1ffff110257f3086 RCX: ffff888113e713c0 [ 56.269003][ T503] RDX: 0000000000000000 RSI: 000000000000001f RDI: 0000000000000064 [ 56.278283][ T503] RBP: ffffc90000e26f40 R08: 0000000000000010 R09: 000000004000043b [ 56.287436][ T503] R10: dffffc0000000000 R11: ffffed102335c66a R12: 0000000000000010 [ 56.296700][ T503] R13: 0000000000000011 R14: 000000000000000e R15: 000000000000001f [ 56.306337][ T503] FS: 00007fde61efa6c0(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 56.316679][ T503] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 56.324755][ T503] CR2: 00007fde620e4e80 CR3: 00000001186a3000 CR4: 00000000003506b0 [ 56.335548][ T503] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 56.346478][ T503] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 56.355657][ T503] Kernel panic - not syncing: Fatal exception [ 56.363886][ T503] Kernel Offset: disabled [ 56.370556][ T503] Rebooting in 86400 seconds..