Warning: Permanently added '10.128.1.100' (ED25519) to the list of known hosts. 2026/02/08 07:23:08 parsed 1 programs [ 23.623860][ T30] audit: type=1400 audit(1770535388.691:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 23.644717][ T30] audit: type=1400 audit(1770535388.691:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 24.598175][ T30] audit: type=1400 audit(1770535389.661:66): avc: denied { mounton } for pid=287 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.601940][ T287] cgroup: Unknown subsys name 'net' [ 24.621105][ T30] audit: type=1400 audit(1770535389.661:67): avc: denied { mount } for pid=287 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.648720][ T30] audit: type=1400 audit(1770535389.701:68): avc: denied { unmount } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.649223][ T287] cgroup: Unknown subsys name 'devices' [ 24.851937][ T287] cgroup: Unknown subsys name 'hugetlb' [ 24.857570][ T287] cgroup: Unknown subsys name 'rlimit' [ 25.035784][ T30] audit: type=1400 audit(1770535390.101:69): avc: denied { setattr } for pid=287 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 25.059175][ T30] audit: type=1400 audit(1770535390.101:70): avc: denied { create } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.079743][ T30] audit: type=1400 audit(1770535390.101:71): avc: denied { write } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 25.099112][ T291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 25.108982][ T30] audit: type=1400 audit(1770535390.101:72): avc: denied { read } for pid=287 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 25.129436][ T30] audit: type=1400 audit(1770535390.111:73): avc: denied { mounton } for pid=287 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 25.159145][ T287] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.616144][ T294] request_module fs-gadgetfs succeeded, but still no fs? [ 25.719619][ T294] syz-executor (294) used greatest stack depth: 22208 bytes left [ 25.998157][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.005300][ T318] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.012889][ T318] device bridge_slave_0 entered promiscuous mode [ 26.020148][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.027274][ T318] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.034863][ T318] device bridge_slave_1 entered promiscuous mode [ 26.081860][ T318] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.088933][ T318] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.096307][ T318] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.103376][ T318] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.122861][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.130730][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.138026][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.147965][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.156465][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.163562][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.173693][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.182121][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.189161][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.203041][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.212628][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.228583][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.241237][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.250516][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.258022][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.266472][ T318] device veth0_vlan entered promiscuous mode [ 26.276542][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.285951][ T318] device veth1_macvtap entered promiscuous mode [ 26.295147][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.305362][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.339522][ T318] syz-executor (318) used greatest stack depth: 20352 bytes left 2026/02/08 07:23:12 executed programs: 0 [ 27.009725][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.016892][ T363] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.024550][ T363] device bridge_slave_0 entered promiscuous mode [ 27.031619][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.038950][ T363] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.046766][ T363] device bridge_slave_1 entered promiscuous mode [ 27.093600][ T363] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.100831][ T363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.108229][ T363] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.115380][ T363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.134465][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 27.142138][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.149464][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.158477][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 27.167010][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.174072][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 27.183227][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 27.191478][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.198648][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.217227][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 27.226627][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 27.241570][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 27.259215][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 27.267998][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 27.275592][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 27.284447][ T363] device veth0_vlan entered promiscuous mode [ 27.300456][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 27.310149][ T363] device veth1_macvtap entered promiscuous mode [ 27.319702][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 27.337541][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 27.364017][ T373] loop2: detected capacity change from 0 to 1024 [ 27.391370][ T373] ======================================================= [ 27.391370][ T373] WARNING: The mand mount option has been deprecated and [ 27.391370][ T373] and is ignored by this kernel. Remove the mand [ 27.391370][ T373] option from the mount to silence this warning. [ 27.391370][ T373] ======================================================= [ 27.460295][ T373] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 27.481362][ T373] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 27.517111][ T373] cgroup: fork rejected by pids controller in /syz2 [ 27.586704][ T381] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3887: comm syz.2.17: Allocating blocks 497-513 which overlap fs metadata [ 27.601622][ T10] EXT4-fs error (device loop2): mb_free_blocks:1876: group 0, inode 26: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 27.622376][ T381] syz.2.17 (381) used greatest stack depth: 19744 bytes left [ 27.682037][ T45] device bridge_slave_1 left promiscuous mode [ 27.688350][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.696223][ T45] device bridge_slave_0 left promiscuous mode [ 27.702421][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.711087][ T45] device veth1_macvtap left promiscuous mode [ 27.717378][ T45] device veth0_vlan left promiscuous mode [ 27.893139][ T443] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.901069][ T443] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.908473][ T443] device bridge_slave_0 entered promiscuous mode [ 27.916539][ T443] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.923678][ T443] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.931168][ T443] device bridge_slave_1 entered promiscuous mode [ 27.975791][ T443] bridge0: port 2(bridge_slave_1) entered blocking state [ 27.983007][ T443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 27.990437][ T443] bridge0: port 1(bridge_slave_0) entered blocking state [ 27.997627][ T443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.016705][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.025038][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.032948][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.052605][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.061118][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.068183][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.076038][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.085782][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.092981][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.100657][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.108776][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.126891][ T443] device veth0_vlan entered promiscuous mode [ 28.133953][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.142997][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.152495][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.160558][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.174063][ T443] device veth1_macvtap entered promiscuous mode [ 28.181667][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 28.193981][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 28.207935][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 28.234317][ T455] loop3: detected capacity change from 0 to 1024 [ 28.290366][ T455] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.314363][ T455] EXT4-fs (loop3): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 28.349108][ T455] cgroup: fork rejected by pids controller in /syz3 [ 28.385685][ T464] EXT4-fs error (device loop3): mb_free_blocks:1876: group 0, inode 19: block 97:freeing already freed block (bit 6); block bitmap corrupt. [ 28.672781][ T524] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.680080][ T524] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.687584][ T524] device bridge_slave_0 entered promiscuous mode [ 28.697639][ T524] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.704774][ T524] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.712285][ T524] device bridge_slave_1 entered promiscuous mode [ 28.771586][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 28.779205][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 28.788481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 28.797101][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 28.805457][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 28.812630][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 28.820198][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 28.831466][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 28.840173][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 28.848365][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 28.855702][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 28.870169][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 28.882940][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 28.898060][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 28.912599][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 28.920717][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 28.928494][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 28.938391][ T524] device veth0_vlan entered promiscuous mode [ 28.945491][ T45] device bridge_slave_1 left promiscuous mode [ 28.951904][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.959876][ T45] device bridge_slave_0 left promiscuous mode [ 28.966209][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.974594][ T45] device veth1_macvtap left promiscuous mode [ 28.981030][ T45] device veth0_vlan left promiscuous mode [ 29.048033][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 29.057983][ T524] device veth1_macvtap entered promiscuous mode [ 29.068151][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 29.079302][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 29.107523][ T534] loop4: detected capacity change from 0 to 1024 [ 29.196307][ T534] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.220908][ T534] EXT4-fs (loop4): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 29.257057][ T534] cgroup: fork rejected by pids controller in /syz4 [ 29.312929][ T541] EXT4-fs error (device loop4): mb_free_blocks:1876: group 0, inode 19: block 321:freeing already freed block (bit 20); block bitmap corrupt. [ 29.613764][ T603] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.620997][ T603] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.628364][ T603] device bridge_slave_0 entered promiscuous mode [ 29.635406][ T603] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.642801][ T603] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.650368][ T603] device bridge_slave_1 entered promiscuous mode [ 29.697261][ T603] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.704352][ T603] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.711698][ T603] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.718762][ T603] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.727414][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.735050][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.754820][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 29.762369][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 29.771728][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 29.780171][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 29.788321][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 29.795496][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 29.805867][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 29.814425][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 29.823091][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 29.830258][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 29.844458][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 29.852674][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 29.862094][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 29.870516][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 29.885428][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 29.894288][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 29.907286][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 29.915410][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 29.924923][ T603] device veth0_vlan entered promiscuous mode [ 29.932254][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 29.939986][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 29.947892][ T45] device bridge_slave_1 left promiscuous mode [ 29.954473][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 29.962228][ T45] device bridge_slave_0 left promiscuous mode [ 29.968379][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 29.976536][ T45] device veth1_macvtap left promiscuous mode [ 29.982764][ T45] device veth0_vlan left promiscuous mode [ 30.055085][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 30.063378][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 30.073181][ T603] device veth1_macvtap entered promiscuous mode [ 30.082709][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 30.090795][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 30.099042][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 30.110201][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 30.118521][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 30.156500][ T613] loop5: detected capacity change from 0 to 1024 [ 30.242236][ T613] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.270811][ T613] EXT4-fs (loop5): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 30.318353][ T613] cgroup: fork rejected by pids controller in /syz5 [ 30.406474][ T629] EXT4-fs error (device loop5): mb_free_blocks:1876: group 0, inode 25: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 30.664257][ T683] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.671528][ T683] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.678991][ T683] device bridge_slave_0 entered promiscuous mode [ 30.686211][ T683] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.693369][ T683] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.700979][ T683] device bridge_slave_1 entered promiscuous mode [ 30.762964][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 30.770782][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 30.782504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 30.790909][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 30.799063][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 30.806271][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 30.813918][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 30.822354][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 30.831208][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 30.839701][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 30.846867][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 30.860568][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 30.868814][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 30.878001][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 30.886454][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 30.902077][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 30.914013][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 30.922252][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 30.930177][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 30.939268][ T45] device bridge_slave_1 left promiscuous mode [ 30.945631][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 30.953364][ T45] device bridge_slave_0 left promiscuous mode [ 30.959780][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 30.967795][ T45] device veth1_macvtap left promiscuous mode [ 30.973933][ T45] device veth0_vlan left promiscuous mode [ 31.051506][ T683] device veth0_vlan entered promiscuous mode [ 31.062606][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.072191][ T683] device veth1_macvtap entered promiscuous mode [ 31.081821][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 31.090247][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.101784][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.110418][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.137648][ T693] loop6: detected capacity change from 0 to 1024 [ 31.150935][ T693] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.181726][ T693] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 31.217044][ T693] cgroup: fork rejected by pids controller in /syz6 [ 31.417050][ T762] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.424307][ T762] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.432186][ T762] device bridge_slave_0 entered promiscuous mode [ 31.441920][ T762] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.449449][ T762] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.456966][ T762] device bridge_slave_1 entered promiscuous mode [ 31.506240][ T762] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.513333][ T762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.520695][ T762] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.527748][ T762] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.546867][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.555012][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.562823][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.575696][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.584116][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.591262][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.600039][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.608261][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.615347][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.627440][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.640204][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.657440][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.669944][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.678064][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.686557][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.695390][ T762] device veth0_vlan entered promiscuous mode [ 31.709083][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.718408][ T762] device veth1_macvtap entered promiscuous mode [ 31.728024][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.744898][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 31.753253][ T354] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.780521][ T772] loop7: detected capacity change from 0 to 1024 [ 31.843186][ T772] EXT4-fs (loop7): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.860881][ T772] EXT4-fs (loop7): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 31.897441][ T772] cgroup: fork rejected by pids controller in /syz7 [ 31.905205][ T45] device bridge_slave_1 left promiscuous mode [ 31.912486][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.924599][ T45] device bridge_slave_0 left promiscuous mode [ 31.933726][ T45] bridge0: port 1(bridge_slave_0) entered disabled state 2026/02/08 07:23:17 executed programs: 18 [ 31.946013][ T45] device bridge_slave_1 left promiscuous mode [ 31.952568][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.963885][ T45] device bridge_slave_0 left promiscuous mode [ 31.970221][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.978974][ T45] device veth1_macvtap left promiscuous mode [ 31.986986][ T30] kauditd_printk_skb: 40 callbacks suppressed [ 31.987002][ T30] audit: type=1400 audit(1770535397.051:114): avc: denied { write } for pid=281 comm="syz-execprog" path="pipe:[2652]" dev="pipefs" ino=2652 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 31.989419][ T45] device veth0_vlan left promiscuous mode [ 32.022452][ T45] device veth1_macvtap left promiscuous mode [ 32.028474][ T45] device veth0_vlan left promiscuous mode [ 32.456727][ T841] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.464727][ T841] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.472444][ T841] device bridge_slave_0 entered promiscuous mode [ 32.479842][ T841] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.486914][ T841] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.494484][ T841] device bridge_slave_1 entered promiscuous mode [ 32.544865][ T841] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.552068][ T841] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.559417][ T841] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.566516][ T841] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.586095][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.594363][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.601909][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.612008][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.620654][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.627702][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.636601][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.645116][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.652236][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.664343][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.673948][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.692235][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.705697][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.715056][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.723040][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.731903][ T841] device veth0_vlan entered promiscuous mode [ 32.743280][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 32.751881][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.761627][ T841] device veth1_macvtap entered promiscuous mode [ 32.772322][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 32.780398][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 32.788669][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.798486][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 32.807318][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.836758][ T851] loop8: detected capacity change from 0 to 1024 [ 32.918468][ T851] EXT4-fs (loop8): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.940657][ T851] EXT4-fs (loop8): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 32.976613][ T851] cgroup: fork rejected by pids controller in /syz8 [ 33.003534][ T857] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3887: comm syz.8.35: Allocating blocks 1-17 which overlap fs metadata [ 33.020789][ T857] syz.8.35 (857) used greatest stack depth: 19720 bytes left [ 33.027613][ T872] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3887: comm syz.8.35: Allocating blocks 1-17 which overlap fs metadata [ 33.072843][ T880] EXT4-fs error (device loop8): ext4_mb_mark_diskspace_used:3887: comm syz.8.35: Allocating blocks 1-17 which overlap fs metadata [ 33.096246][ T855] EXT4-fs error (device loop8): mb_free_blocks:1876: group 0, inode 19: block 113:freeing already freed block (bit 7); block bitmap corrupt. [ 33.323176][ T920] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.330800][ T920] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.338275][ T920] device bridge_slave_0 entered promiscuous mode [ 33.347590][ T920] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.354898][ T920] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.362457][ T920] device bridge_slave_1 entered promiscuous mode [ 33.390436][ T45] device bridge_slave_1 left promiscuous mode [ 33.396621][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.404201][ T45] device bridge_slave_0 left promiscuous mode [ 33.410671][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.418688][ T45] device veth1_macvtap left promiscuous mode [ 33.425252][ T45] device veth0_vlan left promiscuous mode [ 33.542840][ T920] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.550096][ T920] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.557629][ T920] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.564766][ T920] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.585180][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 33.593028][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 33.600658][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 33.610427][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 33.618645][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 33.625770][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 33.636065][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 33.644410][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 33.651495][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 33.664645][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 33.674351][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 33.688407][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 33.701822][ T920] device veth0_vlan entered promiscuous mode [ 33.715049][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 33.723429][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 33.731119][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 33.742838][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 33.751201][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 33.760842][ T920] device veth1_macvtap entered promiscuous mode [ 33.770082][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 33.777928][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 33.786471][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 33.797518][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 33.805841][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 33.839426][ T930] loop9: detected capacity change from 0 to 1024 [ 33.931464][ T930] EXT4-fs (loop9): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.950592][ T930] EXT4-fs (loop9): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 33.988650][ T930] cgroup: fork rejected by pids controller in /syz9 [ 34.090746][ T950] EXT4-fs error (device loop9): mb_free_blocks:1876: group 0, inode 29: block 257:freeing already freed block (bit 16); block bitmap corrupt. [ 34.192873][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.200786][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.208212][ T999] device bridge_slave_0 entered promiscuous mode [ 34.217361][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.224490][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.232182][ T999] device bridge_slave_1 entered promiscuous mode [ 34.278751][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.286426][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.293866][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.300939][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.322270][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 34.330226][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.337645][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.347147][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 34.355453][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 34.362565][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 34.371639][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 34.380178][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 34.387364][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 34.396364][ T45] device bridge_slave_1 left promiscuous mode [ 34.403059][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 34.410619][ T45] device bridge_slave_0 left promiscuous mode [ 34.416743][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 34.424892][ T45] device veth1_macvtap left promiscuous mode [ 34.431198][ T45] device veth0_vlan left promiscuous mode [ 34.537390][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 34.548105][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 34.562767][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 34.574401][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 34.582614][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 34.590126][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 34.598695][ T999] device veth0_vlan entered promiscuous mode [ 34.610752][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 34.620235][ T999] device veth1_macvtap entered promiscuous mode [ 34.629913][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 34.640728][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 34.666952][ T1009] loop0: detected capacity change from 0 to 1024 [ 34.722400][ T1009] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.741046][ T1009] EXT4-fs (loop0): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 34.778378][ T1009] cgroup: fork rejected by pids controller in /syz0 [ 34.833566][ T1028] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3887: comm syz.0.41: Allocating blocks 1-17 which overlap fs metadata [ 34.848877][ T1022] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3887: comm syz.0.41: Allocating blocks 1-17 which overlap fs metadata [ 34.867024][ T1018] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3887: comm syz.0.41: Allocating blocks 1-17 which overlap fs metadata [ 34.896193][ T1030] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3887: comm syz.0.41: Allocating blocks 497-513 which overlap fs metadata [ 34.916659][ T1018] EXT4-fs error (device loop0): mb_free_blocks:1876: group 0, inode 22: block 145:freeing already freed block (bit 9); block bitmap corrupt. [ 35.124888][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.132595][ T1079] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.140243][ T1079] device bridge_slave_0 entered promiscuous mode [ 35.147170][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.154500][ T1079] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.162090][ T1079] device bridge_slave_1 entered promiscuous mode [ 35.208902][ T1079] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.216020][ T1079] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.223391][ T1079] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.230482][ T1079] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.252071][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 35.260048][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.267357][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.278483][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 35.286739][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 35.293833][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 35.302976][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 35.311396][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 35.318446][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 35.333569][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 35.343674][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 35.361055][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 35.372545][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 35.381061][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 35.388692][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 35.397298][ T1079] device veth0_vlan entered promiscuous mode [ 35.404653][ T45] device bridge_slave_1 left promiscuous mode [ 35.411233][ T45] bridge0: port 2(bridge_slave_1) entered disabled state [ 35.418766][ T45] device bridge_slave_0 left promiscuous mode [ 35.425157][ T45] bridge0: port 1(bridge_slave_0) entered disabled state [ 35.433392][ T45] device veth1_macvtap left promiscuous mode [ 35.439500][ T45] device veth0_vlan left promiscuous mode [ 35.526618][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 35.536467][ T1079] device veth1_macvtap entered promiscuous mode [ 35.546907][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 35.557280][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 35.586747][ T1089] loop1: detected capacity change from 0 to 1024 [ 35.684774][ T1089] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.703542][ T1089] EXT4-fs (loop1): mounted filesystem without journal. Opts: dioread_nolock,noauto_da_alloc,inlinecrypt,i_version,data_err=ignore,barrier=0x0000000000000009,data_err=ignore,grpquota,noblock_validity,user_xattr,resuid=0x0000000000000000,quota,,errors=continue. Quota mode: writeback. [ 35.738845][ T1089] cgroup: fork rejected by pids controller in /syz1 [ 35.781555][ T1129] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3887: comm syz.1.44: Allocating blocks 1-17 which overlap fs metadata [ 35.814680][ T1127] ------------[ cut here ]------------ [ 35.824758][ T1127] kernel BUG at fs/ext4/extents.c:2140! [ 35.836671][ T1127] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 35.842939][ T1127] CPU: 1 PID: 1127 Comm: syz.1.44 Not tainted syzkaller #0 [ 35.844859][ T1099] EXT4-fs error (device loop1): mb_free_blocks:1876: group 0, [ 35.850187][ T1127] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 35.850200][ T1127] RIP: 0010:ext4_ext_insert_extent+0x477e/0x47c0 [ 35.850243][ T1127] Code: ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c a5 e8 ff ff 4c 89 f7 e8 33 7b d4 ff e9 98 e8 ff ff e8 69 50 95 ff 0f 0b e8 62 50 95 ff <0f> 0b e8 5b 50 95 ff 0f 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 19 [ 35.850259][ T1127] RSP: 0018:ffffc90002486140 EFLAGS: 00010293 [ 35.850277][ T1127] RAX: ffffffff81d47c4e RBX: ffff888110662400 RCX: ffff88810abcbb40 [ 35.857846][ T1099] inode 25: [ 35.867915][ T1127] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 35.867930][ T1127] RBP: ffffc900024862f0 R08: ffff88812030188f R09: 1ffff11024060311 [ 35.867943][ T1127] R10: dffffc0000000000 R11: ffffed1024060312 R12: 0000000000000006 [ 35.867956][ T1127] R13: ffff88812eee3018 R14: ffff88811066243c R15: 0000000000000006 [ 35.867969][ T1127] FS: 000055557a4df500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 35.874348][ T1099] block 321: [ 35.894030][ T1127] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 35.894048][ T1127] CR2: 00007ffc40a1bf6d CR3: 000000012caf6000 CR4: 00000000003506a0 [ 35.894065][ T1127] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 35.894076][ T1127] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 35.894089][ T1127] Call Trace: [ 35.894094][ T1127] [ 35.894105][ T1127] ? get_implied_cluster_alloc+0x5cc/0xb60 [ 35.894132][ T1127] ? ext4_ext_next_allocated_block+0x2e0/0x2e0 [ 35.900333][ T1099] freeing already freed block (bit 20); block bitmap corrupt. [ 35.908484][ T1127] ext4_ext_map_blocks+0x186c/0x61e0 [ 36.017802][ T1127] ? _raw_write_unlock+0x2b/0x60 [ 36.022753][ T1127] ? ext4_ext_release+0x10/0x10 [ 36.027615][ T1127] ? ext4_es_lookup_extent+0x54c/0x900 [ 36.033182][ T1127] ext4_map_blocks+0x988/0x1b30 [ 36.038165][ T1127] ? kmem_cache_alloc+0xf7/0x260 [ 36.043162][ T1127] ? alloc_buffer_head+0x26/0x120 [ 36.048304][ T1127] ? do_coredump+0x1452/0x2950 [ 36.053079][ T1127] ? ext4_issue_zeroout+0x250/0x250 [ 36.058298][ T1127] _ext4_get_block+0x1ea/0x540 [ 36.063181][ T1127] ? ext4_get_block+0x50/0x50 [ 36.067988][ T1127] ? should_failslab+0x9/0x20 [ 36.072684][ T1127] ext4_get_block_unwritten+0x2a/0x40 [ 36.078068][ T1127] ext4_block_write_begin+0x563/0x1160 [ 36.083536][ T1127] ? _ext4_get_block+0x540/0x540 [ 36.088478][ T1127] ? ext4_print_free_blocks+0x390/0x390 [ 36.094026][ T1127] ? ext4_write_begin+0x44c/0x12e0 [ 36.099185][ T1127] ? ext4_inode_journal_mode+0x19a/0x480 [ 36.104826][ T1127] ext4_write_begin+0x65a/0x12e0 [ 36.109775][ T1127] ? pte_alloc_one+0x70/0x190 [ 36.114452][ T1127] ? handle_pte_fault+0x1ae6/0x2710 [ 36.119659][ T1127] ? ext4_readahead+0x110/0x110 [ 36.124570][ T1127] ? post_alloc_hook+0x192/0x1b0 [ 36.129530][ T1127] ? prep_new_page+0x1c/0x110 [ 36.134247][ T1127] ? get_page_from_freelist+0x2d3a/0x2dc0 [ 36.139976][ T1127] ? prep_new_page+0x1c/0x110 [ 36.144662][ T1127] ext4_da_write_begin+0x321/0xbf0 [ 36.149912][ T1127] ? unlock_page_memcg+0x115/0x130 [ 36.155052][ T1127] ? page_add_file_rmap+0x5a4/0x700 [ 36.160270][ T1127] ? ext4_set_page_dirty+0x1a0/0x1a0 [ 36.165567][ T1127] ? _raw_spin_lock+0x94/0xf0 [ 36.170265][ T1127] ? page_add_new_anon_rmap+0x4c0/0x4c0 [ 36.175919][ T1127] ? next_uptodate_page+0xa12/0xa40 [ 36.181126][ T1127] ? _raw_spin_unlock+0x4d/0x70 [ 36.186263][ T1127] ? filemap_map_pages+0xc60/0x15f0 [ 36.191487][ T1127] ? ktime_get_coarse_real_ts64+0x11b/0x130 [ 36.197400][ T1127] ? current_time+0x1ad/0x2c0 [ 36.202091][ T1127] generic_perform_write+0x2b7/0x690 [ 36.207468][ T1127] ? file_remove_privs+0x5c0/0x5c0 [ 36.212591][ T1127] ? grab_cache_page_write_begin+0xb0/0xb0 [ 36.218410][ T1127] ? handle_pte_fault+0x1c2a/0x2710 [ 36.223615][ T1127] ? generic_write_checks+0x3d4/0x480 [ 36.228998][ T1127] ext4_buffered_write_iter+0x4ed/0x670 [ 36.234550][ T1127] ext4_file_write_iter+0x440/0x1540 [ 36.239839][ T1127] ? __kasan_check_write+0x14/0x20 [ 36.244952][ T1127] ? _raw_spin_lock+0x94/0xf0 [ 36.249630][ T1127] ? _raw_spin_trylock_bh+0x150/0x150 [ 36.255012][ T1127] ? __kasan_check_write+0x14/0x20 [ 36.260125][ T1127] ? try_grab_page+0x10d/0x3f0 [ 36.264988][ T1127] ? _raw_spin_unlock+0x4d/0x70 [ 36.269847][ T1127] ? follow_page_pte+0x943/0x980 [ 36.274804][ T1127] ? ext4_file_read_iter+0x510/0x510 [ 36.280127][ T1127] ? memset+0x35/0x40 [ 36.284130][ T1127] ? iov_iter_kvec+0xbc/0x180 [ 36.288805][ T1127] __kernel_write+0x510/0x950 [ 36.293490][ T1127] ? vfs_read+0xc40/0xc40 [ 36.297959][ T1127] ? __kasan_check_write+0x14/0x20 [ 36.303180][ T1127] ? _raw_spin_lock+0x94/0xf0 [ 36.307874][ T1127] ? _raw_spin_trylock_bh+0x150/0x150 [ 36.313246][ T1127] __dump_emit+0x246/0x370 [ 36.317674][ T1127] ? wait_for_dump_helpers+0x3a0/0x3a0 [ 36.323142][ T1127] ? ext4_llseek+0x1ee/0x210 [ 36.327735][ T1127] dump_emit+0x383/0x3f0 [ 36.331981][ T1127] dump_user_range+0x86/0x1c0 [ 36.336661][ T1127] elf_core_dump+0x2a8f/0x2fd0 [ 36.341439][ T1127] ? load_elf_binary+0x28e0/0x28e0 [ 36.346551][ T1127] ? __kmalloc+0x13d/0x2c0 [ 36.350989][ T1127] ? kvmalloc_node+0x23c/0x320 [ 36.355855][ T1127] do_coredump+0x1452/0x2950 [ 36.360449][ T1127] ? simple_acl_create+0x1c0/0x1c0 [ 36.365591][ T1127] ? kmem_cache_free+0x100/0x320 [ 36.370538][ T1127] ? ____kasan_slab_free+0x130/0x160 [ 36.375954][ T1127] ? get_signal+0xb5e/0x1480 [ 36.380556][ T1127] ? kmem_cache_free+0x100/0x320 [ 36.385501][ T1127] get_signal+0x38d/0x1480 [ 36.389924][ T1127] arch_do_signal_or_restart+0xdf/0x11c0 [ 36.395555][ T1127] ? bad_area+0x74/0x90 [ 36.399710][ T1127] ? do_kern_addr_fault+0x80/0x80 [ 36.404828][ T1127] ? get_sigframe_size+0x10/0x10 [ 36.409767][ T1127] exit_to_user_mode_loop+0xa7/0xe0 [ 36.414965][ T1127] exit_to_user_mode_prepare+0x87/0xd0 [ 36.420423][ T1127] irqentry_exit_to_user_mode+0x9/0x10 [ 36.425879][ T1127] irqentry_exit+0x12/0x40 [ 36.430302][ T1127] exc_page_fault+0x5e/0xb0 [ 36.434807][ T1127] asm_exc_page_fault+0x27/0x30 [ 36.439664][ T1127] RIP: 0033:0x7f4b77b14eb9 [ 36.444088][ T1127] Code: Unable to access opcode bytes at RIP 0x7f4b77b14e8f. [ 36.451537][ T1127] RSP: 002b:00007ffc40a19818 EFLAGS: 00010206 [ 36.457695][ T1127] RAX: 0000000000000000 RBX: 00007f4b77d8ffa0 RCX: 00007f4b77b14eb9 [ 36.465762][ T1127] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000a000 [ 36.473951][ T1127] RBP: 00007f4b77b82c1f R08: 0000000000000000 R09: 0000000000000000 [ 36.482050][ T1127] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 36.490017][ T1127] R13: 00007f4b77d8ffac R14: 00007f4b77d8ffa0 R15: 00007f4b77d8ffa0 [ 36.498079][ T1127] [ 36.501100][ T1127] Modules linked in: [ 36.509484][ T1127] ---[ end trace e60c6d5653aee04f ]--- [ 36.515014][ T1127] RIP: 0010:ext4_ext_insert_extent+0x477e/0x47c0 [ 36.521683][ T1127] Code: ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c a5 e8 ff ff 4c 89 f7 e8 33 7b d4 ff e9 98 e8 ff ff e8 69 50 95 ff 0f 0b e8 62 50 95 ff <0f> 0b e8 5b 50 95 ff 0f 0b 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 19 [ 36.542064][ T1127] RSP: 0018:ffffc90002486140 EFLAGS: 00010293 [ 36.548257][ T1127] RAX: ffffffff81d47c4e RBX: ffff888110662400 RCX: ffff88810abcbb40 [ 36.556973][ T1127] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000006 [ 36.565065][ T1127] RBP: ffffc900024862f0 R08: ffff88812030188f R09: 1ffff11024060311 [ 36.573240][ T1127] R10: dffffc0000000000 R11: ffffed1024060312 R12: 0000000000000006 [ 36.581443][ T1127] R13: ffff88812eee3018 R14: ffff88811066243c R15: 0000000000000006 [ 36.589514][ T1127] FS: 000055557a4df500(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 36.598449][ T1127] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 36.605114][ T1127] CR2: 00007f4b77b14e8f CR3: 000000012caf6000 CR4: 00000000003506a0 [ 36.613597][ T1127] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 36.621802][ T1127] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 36.630367][ T1127] Kernel panic - not syncing: Fatal exception [ 36.636687][ T1127] Kernel Offset: disabled [ 36.641042][ T1127] Rebooting in 86400 seconds..