Warning: Permanently added '10.128.1.9' (ED25519) to the list of known hosts. 2026/03/03 19:13:54 parsed 1 programs [ 82.404434][ T5821] cgroup: Unknown subsys name 'net' [ 82.541320][ T5821] cgroup: Unknown subsys name 'cpuset' [ 82.551312][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.069363][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 86.153808][ T1210] cfg80211: failed to load regulatory.db [ 86.803886][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.812131][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.842243][ T998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.852043][ T998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.893598][ T5836] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.979747][ T5137] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.989106][ T5137] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.997305][ T5137] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.010946][ T5137] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.023041][ T5137] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.604651][ T5888] chnl_net:caif_netlink_parms(): no params data found [ 89.692455][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.700235][ T5888] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.707480][ T5888] bridge_slave_0: entered allmulticast mode [ 89.715197][ T5888] bridge_slave_0: entered promiscuous mode [ 89.724432][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.731746][ T5888] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.739335][ T5888] bridge_slave_1: entered allmulticast mode [ 89.746824][ T5888] bridge_slave_1: entered promiscuous mode [ 89.779230][ T5888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.791316][ T5888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.824043][ T5888] team0: Port device team_slave_0 added [ 89.832146][ T5888] team0: Port device team_slave_1 added [ 89.860373][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.867335][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.893351][ T5888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.906182][ T5888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.913198][ T5888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.939119][ T5888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.992731][ T5888] hsr_slave_0: entered promiscuous mode [ 89.999545][ T5888] hsr_slave_1: entered promiscuous mode [ 90.173226][ T5888] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.186427][ T5888] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.196760][ T5888] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 90.207297][ T5888] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 90.241133][ T5888] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.248335][ T5888] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.256141][ T5888] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.263242][ T5888] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.328736][ T5888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.348478][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.358518][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.372971][ T5888] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.386939][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.394065][ T998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.409214][ T998] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.416364][ T998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.619066][ T5888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.665875][ T5888] veth0_vlan: entered promiscuous mode [ 90.678868][ T5888] veth1_vlan: entered promiscuous mode [ 90.708751][ T5888] veth0_macvtap: entered promiscuous mode [ 90.718944][ T5888] veth1_macvtap: entered promiscuous mode [ 90.738462][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.752823][ T5888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.768474][ T1148] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.780073][ T1148] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.795862][ T1148] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.806477][ T1148] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.929749][ T76] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.006339][ T76] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.122913][ T76] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.241707][ T76] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/03/03 19:14:07 executed programs: 0 [ 92.028835][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 92.037381][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 92.045195][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 92.053625][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 92.061505][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 92.231226][ T5927] chnl_net:caif_netlink_parms(): no params data found [ 92.329302][ T5927] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.337059][ T5927] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.344250][ T5927] bridge_slave_0: entered allmulticast mode [ 92.352288][ T5927] bridge_slave_0: entered promiscuous mode [ 92.361582][ T5927] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.369356][ T5927] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.376933][ T5927] bridge_slave_1: entered allmulticast mode [ 92.384590][ T5927] bridge_slave_1: entered promiscuous mode [ 92.423013][ T5927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.436020][ T5927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.471069][ T5927] team0: Port device team_slave_0 added [ 92.479905][ T5927] team0: Port device team_slave_1 added [ 92.510633][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.517933][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.543938][ T5927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.557339][ T5927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.564380][ T5927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.590348][ T5927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.647327][ T5927] hsr_slave_0: entered promiscuous mode [ 92.653757][ T5927] hsr_slave_1: entered promiscuous mode [ 92.660529][ T5927] debugfs: 'hsr0' already exists in 'hsr' [ 92.666357][ T5927] Cannot create hsr debugfs directory [ 94.146060][ T51] Bluetooth: hci0: command tx timeout [ 94.265914][ T76] bridge_slave_1: left allmulticast mode [ 94.271662][ T76] bridge_slave_1: left promiscuous mode [ 94.278453][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.291222][ T76] bridge_slave_0: left allmulticast mode [ 94.300070][ T76] bridge_slave_0: left promiscuous mode [ 94.307573][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.535487][ T76] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.548322][ T76] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.558734][ T76] bond0 (unregistering): Released all slaves [ 94.671059][ T76] hsr_slave_0: left promiscuous mode [ 94.678081][ T76] hsr_slave_1: left promiscuous mode [ 94.684120][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.700691][ T76] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.709675][ T76] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.717398][ T76] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.734125][ T76] veth1_macvtap: left promiscuous mode [ 94.739834][ T76] veth0_macvtap: left promiscuous mode [ 94.747075][ T76] veth1_vlan: left promiscuous mode [ 94.752416][ T76] veth0_vlan: left promiscuous mode [ 95.011671][ T76] team0 (unregistering): Port device team_slave_1 removed [ 95.028019][ T76] team0 (unregistering): Port device team_slave_0 removed [ 95.366867][ T5927] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.386149][ T5927] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.404133][ T5927] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.416560][ T5927] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.797086][ T5927] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.819766][ T5927] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.843057][ T998] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.850234][ T998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.867451][ T998] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.874550][ T998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.170018][ T5927] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.219127][ T5927] veth0_vlan: entered promiscuous mode [ 96.225520][ T51] Bluetooth: hci0: command tx timeout [ 96.241490][ T5927] veth1_vlan: entered promiscuous mode [ 96.279820][ T5927] veth0_macvtap: entered promiscuous mode [ 96.293665][ T5927] veth1_macvtap: entered promiscuous mode [ 96.318647][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.336895][ T5927] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.352210][ T76] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.368248][ T76] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.389471][ T76] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.398460][ T76] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.496752][ T1148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.504622][ T1148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.540674][ T1148] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.549885][ T1148] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.612452][ T5975] loop0: detected capacity change from 0 to 1024 [ 96.622488][ T5975] EXT4-fs: Ignoring removed bh option [ 96.639673][ T5975] EXT4-fs: Ignoring removed oldalloc option [ 96.645882][ T5975] EXT4-fs: Ignoring removed nobh option [ 96.679544][ T5975] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.696205][ T30] audit: type=1804 audit(1772565252.630:2): pid=5975 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.17" name="/newroot/0/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 96.734934][ T5975] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 96.775432][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 96.834216][ T5981] loop0: detected capacity change from 0 to 1024 [ 96.843686][ T5981] EXT4-fs: Ignoring removed bh option [ 96.849886][ T5981] EXT4-fs: Ignoring removed oldalloc option [ 96.856332][ T5981] EXT4-fs: Ignoring removed nobh option [ 96.880279][ T5981] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 96.897920][ T30] audit: type=1804 audit(1772565252.830:3): pid=5981 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.18" name="/newroot/1/file1/bus" dev="loop0" ino=18 res=1 errno=0 2026/03/03 19:14:12 executed programs: 4 [ 96.960043][ T5981] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 96.997458][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.048745][ T5986] loop0: detected capacity change from 0 to 1024 [ 97.059655][ T5986] EXT4-fs: Ignoring removed bh option [ 97.066081][ T5986] EXT4-fs: Ignoring removed oldalloc option [ 97.072398][ T5986] EXT4-fs: Ignoring removed nobh option [ 97.097518][ T5986] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.114087][ T30] audit: type=1804 audit(1772565253.040:4): pid=5986 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.19" name="/newroot/2/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 97.158344][ T5986] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 97.219255][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.286833][ T5991] loop0: detected capacity change from 0 to 1024 [ 97.294521][ T5991] EXT4-fs: Ignoring removed bh option [ 97.300122][ T5991] EXT4-fs: Ignoring removed oldalloc option [ 97.306473][ T5991] EXT4-fs: Ignoring removed nobh option [ 97.351210][ T5991] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.370988][ T30] audit: type=1804 audit(1772565253.300:5): pid=5991 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.20" name="/newroot/3/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 97.404284][ T5991] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 97.441710][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.522530][ T5996] loop0: detected capacity change from 0 to 1024 [ 97.532302][ T5996] EXT4-fs: Ignoring removed bh option [ 97.539284][ T5996] EXT4-fs: Ignoring removed oldalloc option [ 97.545528][ T5996] EXT4-fs: Ignoring removed nobh option [ 97.583864][ T5996] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.602373][ T30] audit: type=1804 audit(1772565253.530:6): pid=5996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.21" name="/newroot/4/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 97.646413][ T5996] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 97.681677][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.738289][ T6000] loop0: detected capacity change from 0 to 1024 [ 97.747434][ T6000] EXT4-fs: Ignoring removed bh option [ 97.752846][ T6000] EXT4-fs: Ignoring removed oldalloc option [ 97.759971][ T6000] EXT4-fs: Ignoring removed nobh option [ 97.793164][ T6000] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 97.811792][ T30] audit: type=1804 audit(1772565253.740:7): pid=6000 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.22" name="/newroot/5/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 97.880765][ T6000] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 97.917094][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 97.974198][ T6005] loop0: detected capacity change from 0 to 1024 [ 97.984088][ T6005] EXT4-fs: Ignoring removed bh option [ 97.994897][ T6005] EXT4-fs: Ignoring removed oldalloc option [ 98.000891][ T6005] EXT4-fs: Ignoring removed nobh option [ 98.047045][ T6005] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.070172][ T30] audit: type=1804 audit(1772565254.000:8): pid=6005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.23" name="/newroot/6/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 98.106562][ T6005] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 98.144000][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.210446][ T6010] loop0: detected capacity change from 0 to 1024 [ 98.219213][ T6010] EXT4-fs: Ignoring removed bh option [ 98.226445][ T6010] EXT4-fs: Ignoring removed oldalloc option [ 98.232400][ T6010] EXT4-fs: Ignoring removed nobh option [ 98.267943][ T6010] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.288080][ T30] audit: type=1804 audit(1772565254.220:9): pid=6010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.24" name="/newroot/7/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 98.304961][ T51] Bluetooth: hci0: command tx timeout [ 98.369110][ T6013] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #18: comm syz.0.24: ES cache extent failed: add [83,1,276,0x2] conflict with existing [25,-26,576460752303423487,0x18] [ 98.369110][ T6013] [ 98.391137][ T6010] EXT4-fs (loop0): pa ffff888072c65e80: logic 80, phys. 273, len 3 [ 98.399551][ T6010] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5465: group 0, free 2, pa_free 1 [ 98.412650][ T6010] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #15: comm syz.0.24: ES cache extent failed: add [0,1,177,0x1] conflict with existing [0,1,113,0x2] [ 98.412650][ T6010] [ 98.432139][ T6010] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #15: comm syz.0.24: ES cache extent failed: add [1,15,177,0x1] conflict with existing [1,35,576460752303423487,0x18] [ 98.432139][ T6010] [ 98.453240][ T6010] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #15: comm syz.0.24: ES cache extent failed: add [16,1,177,0x1] conflict with existing [1,35,576460752303423487,0x18] [ 98.453240][ T6010] [ 98.474189][ T6010] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #15: comm syz.0.24: ES cache extent failed: add [17,15,177,0x1] conflict with existing [1,35,576460752303423487,0x18] [ 98.474189][ T6010] [ 98.497891][ T6010] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #15: comm syz.0.24: ES cache extent failed: add [32,1,225,0x1] conflict with existing [1,35,576460752303423487,0x18] [ 98.497891][ T6010] [ 98.519823][ T6010] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #15: comm syz.0.24: ES cache extent failed: add [76,-77,18446744073709551615,0x8] conflict with existing [65,15,257,0x2] [ 98.519823][ T6010] [ 98.541115][ T6010] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #15: comm syz.0.24: ES cache extent failed: add [0,1,177,0x1] conflict with existing [0,1,113,0x2] [ 98.541115][ T6010] [ 98.561332][ T6010] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #15: comm syz.0.24: ES cache extent failed: add [1,15,177,0x1] conflict with existing [1,35,576460752303423487,0x18] [ 98.561332][ T6010] [ 98.582181][ T6010] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #15: comm syz.0.24: ES cache extent failed: add [16,1,177,0x1] conflict with existing [1,35,576460752303423487,0x18] [ 98.582181][ T6010] [ 98.606688][ T6013] EXT4-fs error (device loop0): ext4_find_extent:939: inode #18: comm syz.0.24: pblk 145 bad header/extent: invalid extent entries - magic f30a, entries 17, max 84(84), depth 0(0) [ 98.629418][ T6010] EXT4-fs error (device loop0): ext4_free_blocks:6724: comm syz.0.24: Freeing blocks not in datazone - block = 0, count = 0 [ 98.835787][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.896773][ T6015] loop0: detected capacity change from 0 to 1024 [ 98.904424][ T6015] EXT4-fs: Ignoring removed bh option [ 98.915983][ T6015] EXT4-fs: Ignoring removed oldalloc option [ 98.929480][ T6015] EXT4-fs: Ignoring removed nobh option [ 98.963098][ T6015] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 98.984896][ T30] audit: type=1804 audit(1772565254.910:10): pid=6015 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.25" name="/newroot/8/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 99.065436][ T6015] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #15: comm syz.0.25: ES cache extent failed: add [25,-26,18446744073709551615,0x8] conflict with existing [36,1,149,0x2] [ 99.065436][ T6015] [ 99.087049][ T6015] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #15: comm syz.0.25: ES cache extent failed: add [0,1,177,0x1] conflict with existing [0,1,113,0x2] [ 99.087049][ T6015] [ 99.106591][ T6015] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #15: comm syz.0.25: ES cache extent failed: add [1,15,177,0x1] conflict with existing [1,24,576460752303423487,0x18] [ 99.106591][ T6015] [ 99.130549][ T6015] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #15: comm syz.0.25: ES cache extent failed: add [16,1,177,0x1] conflict with existing [1,24,576460752303423487,0x18] [ 99.130549][ T6015] [ 99.151980][ T6015] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #15: comm syz.0.25: ES cache extent failed: add [17,10,177,0x1] conflict with existing [1,24,576460752303423487,0x18] [ 99.151980][ T6015] [ 99.244267][ T6018] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.25: Allocating blocks 497-513 which overlap fs metadata [ 99.260948][ T6018] EXT4-fs (loop0): pa ffff888072d59570: logic 128, phys. 465, len 3 [ 99.269077][ T6018] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 1 [ 99.286643][ T6015] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 1 with error 28 [ 99.299250][ T6015] EXT4-fs (loop0): This should not happen!! Data will be lost [ 99.299250][ T6015] [ 99.309093][ T6015] EXT4-fs (loop0): Total free blocks count 0 [ 99.315914][ T6015] EXT4-fs (loop0): Free/Dirty block details [ 99.322154][ T6015] EXT4-fs (loop0): free_blocks=16 [ 99.327312][ T6015] EXT4-fs (loop0): dirty_blocks=0 [ 99.332346][ T6015] EXT4-fs (loop0): Block reservation details [ 99.338866][ T6015] EXT4-fs (loop0): i_reserved_data_blocks=0 [ 99.407048][ T6020] loop0: detected capacity change from 0 to 1024 [ 99.420736][ T6020] EXT4-fs: Ignoring removed bh option [ 99.427596][ T6020] EXT4-fs: Ignoring removed oldalloc option [ 99.433616][ T6020] EXT4-fs: Ignoring removed nobh option [ 99.462636][ T6020] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.478661][ T30] audit: type=1804 audit(1772565255.410:11): pid=6020 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.26" name="/newroot/9/file1/bus" dev="loop0" ino=18 res=1 errno=0 [ 99.523343][ T6020] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 99.554336][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.627765][ T6024] EXT4-fs: Ignoring removed bh option [ 99.633234][ T6024] EXT4-fs: Ignoring removed oldalloc option [ 99.639259][ T6024] EXT4-fs: Ignoring removed nobh option [ 99.669431][ T6024] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.717574][ T6024] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 99.750164][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 99.828470][ T6028] EXT4-fs: Ignoring removed bh option [ 99.833907][ T6028] EXT4-fs: Ignoring removed oldalloc option [ 99.842255][ T6028] EXT4-fs: Ignoring removed nobh option [ 99.867922][ T6028] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 99.920199][ T6028] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 99.954422][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.017273][ T6032] EXT4-fs: Ignoring removed bh option [ 100.022978][ T6032] EXT4-fs: Ignoring removed oldalloc option [ 100.031422][ T6032] EXT4-fs: Ignoring removed nobh option [ 100.051630][ T6032] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.098966][ T6032] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 100.133119][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.201737][ T6036] EXT4-fs: Ignoring removed bh option [ 100.207241][ T6036] EXT4-fs: Ignoring removed oldalloc option [ 100.213325][ T6036] EXT4-fs: Ignoring removed nobh option [ 100.238266][ T6036] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.284142][ T6036] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 100.319430][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.376752][ T6040] EXT4-fs: Ignoring removed bh option [ 100.382189][ T6040] EXT4-fs: Ignoring removed oldalloc option [ 100.388319][ T51] Bluetooth: hci0: command tx timeout [ 100.393834][ T6040] EXT4-fs: Ignoring removed nobh option [ 100.422623][ T6040] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.464633][ T6040] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 100.501042][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.548130][ T6044] EXT4-fs: Ignoring removed bh option [ 100.553886][ T6044] EXT4-fs: Ignoring removed oldalloc option [ 100.561357][ T6044] EXT4-fs: Ignoring removed nobh option [ 100.590635][ T6044] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.636233][ T6044] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 100.675979][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.740796][ T6049] EXT4-fs: Ignoring removed bh option [ 100.746539][ T6049] EXT4-fs: Ignoring removed oldalloc option [ 100.752642][ T6049] EXT4-fs: Ignoring removed nobh option [ 100.779656][ T6049] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.818673][ T6049] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 100.850855][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.915564][ T6053] EXT4-fs: Ignoring removed bh option [ 100.921400][ T6053] EXT4-fs: Ignoring removed oldalloc option [ 100.927999][ T6053] EXT4-fs: Ignoring removed nobh option [ 100.952363][ T6053] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 100.996905][ T6053] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 101.031948][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.085880][ T6057] EXT4-fs: Ignoring removed bh option [ 101.091474][ T6057] EXT4-fs: Ignoring removed oldalloc option [ 101.099389][ T6057] EXT4-fs: Ignoring removed nobh option [ 101.131445][ T6057] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.187218][ T6057] EXT4-fs error (device loop0): mb_free_blocks:2047: group 0, inode 15: block 177:freeing already freed block (bit 11); block bitmap corrupt. [ 101.223188][ T5927] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.278161][ T6062] EXT4-fs: Ignoring removed bh option [ 101.283599][ T6062] EXT4-fs: Ignoring removed oldalloc option [ 101.290620][ T6062] EXT4-fs: Ignoring removed nobh option [ 101.314250][ T6062] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 101.410758][ T6062] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #15: comm syz.0.36: ES cache extent failed: add [0,1,177,0x1] conflict with existing [0,1,113,0x2] [ 101.410758][ T6062] [ 101.431322][ T6062] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #15: comm syz.0.36: ES cache extent failed: add [1,15,177,0x1] conflict with existing [1,35,576460752303423487,0x18] [ 101.431322][ T6062] [ 101.453091][ T6062] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #15: comm syz.0.36: ES cache extent failed: add [16,1,177,0x1] conflict with existing [1,35,576460752303423487,0x18] [ 101.453091][ T6062] [ 101.474023][ T6062] EXT4-fs warning (device loop0): ext4_es_cache_extent:1082: inode #15: comm syz.0.36: ES cache extent failed: add [17,10,177,0x1] conflict with existing [1,35,576460752303423487,0x18] [ 101.474023][ T6062] [ 101.495148][ T6062] ------------[ cut here ]------------ [ 101.500651][ T6062] kernel BUG at fs/ext4/extents_status.c:1044! [ 101.508263][ T6062] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 101.514687][ T6062] CPU: 0 UID: 0 PID: 6062 Comm: syz.0.36 Not tainted syzkaller #0 PREEMPT(full) [ 101.523898][ T6062] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 101.534045][ T6062] RIP: 0010:ext4_es_cache_extent+0x875/0x9e0 [ 101.540057][ T6062] Code: e1 07 80 c1 03 38 c1 0f 8c 5c fe ff ff 48 8b 7c 24 18 e8 fe ac ad ff e9 4d fe ff ff e8 a4 6e 43 ff 90 0f 0b e8 9c 6e 43 ff 90 <0f> 0b 65 8b 1d e6 98 99 10 bf 07 00 00 00 89 de e8 c6 72 43 ff 83 [ 101.559699][ T6062] RSP: 0018:ffffc90003456d20 EFLAGS: 00010293 [ 101.565767][ T6062] RAX: ffffffff82822744 RBX: 0000000000000018 RCX: ffff88803155bd00 [ 101.573732][ T6062] RDX: 0000000000000000 RSI: 000000000000001b RDI: 0000000000000018 [ 101.581698][ T6062] RBP: ffffc90003456e68 R08: ffffc90003456dd7 R09: ffffc90003456dc0 [ 101.589667][ T6062] R10: dffffc0000000000 R11: fffff5200068adbb R12: ffffc90003456dc0 [ 101.597809][ T6062] R13: 000000000000001b R14: 000000000000000f R15: dffffc0000000000 [ 101.605775][ T6062] FS: 00007fbdae25d6c0(0000) GS:ffff888125464000(0000) knlGS:0000000000000000 [ 101.614695][ T6062] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 101.621270][ T6062] CR2: 00007fbdad3e9e80 CR3: 00000000781f0000 CR4: 0000000000350ef0 [ 101.629237][ T6062] Call Trace: [ 101.632593][ T6062] [ 101.635517][ T6062] ? __pfx_ext4_es_cache_extent+0x10/0x10 [ 101.641251][ T6062] __read_extent_tree_block+0x4b4/0x890 [ 101.646799][ T6062] ext4_find_extent+0x76f/0xcc0 [ 101.651655][ T6062] ext4_ext_map_blocks+0x283/0x58b0 [ 101.656857][ T6062] ? __es_insert_extent+0xb17/0x1790 [ 101.662146][ T6062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.667777][ T6062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.673406][ T6062] ? __lock_acquire+0x6b5/0x2cf0 [ 101.678352][ T6062] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 101.683990][ T6062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.689627][ T6062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.695264][ T6062] ext4_map_create_blocks+0x11d/0x540 [ 101.700647][ T6062] ext4_map_blocks+0x7cd/0x11d0 [ 101.705509][ T6062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.711155][ T6062] ? kasan_save_track+0x4f/0x80 [ 101.716170][ T6062] ? kasan_save_track+0x3e/0x80 [ 101.721017][ T6062] ? __pfx_ext4_map_blocks+0x10/0x10 [ 101.726305][ T6062] ? ext4_update_bh_state+0x10d/0x1f0 [ 101.731682][ T6062] ? __pfx_ext4_update_bh_state+0x10/0x10 [ 101.737405][ T6062] _ext4_get_block+0x1e3/0x470 [ 101.742182][ T6062] ? __pfx__ext4_get_block+0x10/0x10 [ 101.747488][ T6062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.753141][ T6062] ext4_get_block_unwritten+0x2e/0x100 [ 101.758623][ T6062] ext4_block_write_begin+0xb14/0x1950 [ 101.764096][ T6062] ? __pfx_ext4_get_block_unwritten+0x10/0x10 [ 101.770173][ T6062] ? __pfx_ext4_block_write_begin+0x10/0x10 [ 101.776069][ T6062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.781706][ T6062] ? ext4_inode_journal_mode+0x193/0x470 [ 101.787749][ T6062] ext4_write_begin+0xb40/0x18c0 [ 101.792732][ T6062] ? __pfx_ext4_write_begin+0x10/0x10 [ 101.798121][ T6062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.803769][ T6062] ext4_da_write_begin+0x355/0xd80 [ 101.808894][ T6062] ? ext4_write_end+0x7ae/0xa10 [ 101.813762][ T6062] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 101.819442][ T6062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.825078][ T6062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.830710][ T6062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.836343][ T6062] generic_perform_write+0x2e2/0x8f0 [ 101.841638][ T6062] ? __pfx_generic_perform_write+0x10/0x10 [ 101.847446][ T6062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.853082][ T6062] ? file_update_time_flags+0x400/0x4a0 [ 101.858623][ T6062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.864250][ T6062] ? ext4_write_checks+0x24b/0x2c0 [ 101.869357][ T6062] ext4_buffered_write_iter+0xce/0x3a0 [ 101.874813][ T6062] ext4_file_write_iter+0x298/0x1bf0 [ 101.880096][ T6062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.885731][ T6062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.891371][ T6062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.897007][ T6062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.902639][ T6062] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 101.908358][ T6062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.913995][ T6062] vfs_write+0x61d/0xb90 [ 101.918253][ T6062] ? __pfx_vfs_write+0x10/0x10 [ 101.923020][ T6062] ? __fget_files+0x2a/0x420 [ 101.927616][ T6062] ? srso_alias_return_thunk+0x5/0xfbef5 [ 101.933250][ T6062] __x64_sys_pwrite64+0x199/0x230 [ 101.938274][ T6062] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 101.943826][ T6062] do_syscall_64+0x14d/0xf80 [ 101.948409][ T6062] ? trace_irq_disable+0x3b/0x150 [ 101.953446][ T6062] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.959607][ T6062] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.965517][ T6062] RIP: 0033:0x7fbdad39c799 [ 101.969924][ T6062] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 101.989541][ T6062] RSP: 002b:00007fbdae25d028 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 101.997967][ T6062] RAX: ffffffffffffffda RBX: 00007fbdad615fa0 RCX: 00007fbdad39c799 [ 102.005947][ T6062] RDX: 00000000200000c1 RSI: 00002000000000c0 RDI: 0000000000000006 [ 102.013937][ T6062] RBP: 00007fbdad432bd9 R08: 0000000000000000 R09: 0000000000000000 [ 102.021917][ T6062] R10: 0000000000009000 R11: 0000000000000246 R12: 0000000000000000 [ 102.029899][ T6062] R13: 00007fbdad616038 R14: 00007fbdad615fa0 R15: 00007fff33d9aaf8 [ 102.037883][ T6062] [ 102.040888][ T6062] Modules linked in: [ 102.047284][ T6062] ---[ end trace 0000000000000000 ]--- [ 102.056860][ T6062] RIP: 0010:ext4_es_cache_extent+0x875/0x9e0 [ 102.066574][ T6062] Code: e1 07 80 c1 03 38 c1 0f 8c 5c fe ff ff 48 8b 7c 24 18 e8 fe ac ad ff e9 4d fe ff ff e8 a4 6e 43 ff 90 0f 0b e8 9c 6e 43 ff 90 <0f> 0b 65 8b 1d e6 98 99 10 bf 07 00 00 00 89 de e8 c6 72 43 ff 83 [ 102.087548][ T6062] RSP: 0018:ffffc90003456d20 EFLAGS: 00010293 [ 102.093927][ T6062] RAX: ffffffff82822744 RBX: 0000000000000018 RCX: ffff88803155bd00 [ 102.102343][ T6062] RDX: 0000000000000000 RSI: 000000000000001b RDI: 0000000000000018 [ 102.110501][ T6062] RBP: ffffc90003456e68 R08: ffffc90003456dd7 R09: ffffc90003456dc0 [ 102.118577][ T6062] R10: dffffc0000000000 R11: fffff5200068adbb R12: ffffc90003456dc0 [ 102.126672][ T6062] R13: 000000000000001b R14: 000000000000000f R15: dffffc0000000000 [ 102.134642][ T6062] FS: 00007fbdae25d6c0(0000) GS:ffff888125464000(0000) knlGS:0000000000000000 [ 102.143662][ T6062] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 102.150620][ T6062] CR2: 00007fbdad3e9e80 CR3: 00000000781f0000 CR4: 0000000000350ef0 [ 102.158641][ T6062] Kernel panic - not syncing: Fatal exception [ 102.165040][ T6062] Kernel Offset: disabled [ 102.169477][ T6062] Rebooting in 86400 seconds..