Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. 2025/10/19 15:01:20 parsed 1 programs [ 23.221810][ T30] audit: type=1400 audit(1760886080.945:64): avc: denied { node_bind } for pid=281 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 23.242800][ T30] audit: type=1400 audit(1760886080.945:65): avc: denied { module_request } for pid=281 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 24.199022][ T30] audit: type=1400 audit(1760886081.915:66): avc: denied { mounton } for pid=288 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 24.200501][ T288] cgroup: Unknown subsys name 'net' [ 24.222062][ T30] audit: type=1400 audit(1760886081.915:67): avc: denied { mount } for pid=288 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.249671][ T30] audit: type=1400 audit(1760886081.945:68): avc: denied { unmount } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 24.250005][ T288] cgroup: Unknown subsys name 'devices' [ 24.422048][ T288] cgroup: Unknown subsys name 'hugetlb' [ 24.428229][ T288] cgroup: Unknown subsys name 'rlimit' [ 24.634734][ T30] audit: type=1400 audit(1760886082.355:69): avc: denied { setattr } for pid=288 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.658694][ T30] audit: type=1400 audit(1760886082.355:70): avc: denied { create } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.679431][ T30] audit: type=1400 audit(1760886082.355:71): avc: denied { write } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.700519][ T30] audit: type=1400 audit(1760886082.355:72): avc: denied { read } for pid=288 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.721444][ T30] audit: type=1400 audit(1760886082.355:73): avc: denied { mounton } for pid=288 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.751915][ T291] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 24.820400][ T288] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 25.299747][ T298] request_module fs-gadgetfs succeeded, but still no fs? [ 25.521696][ T308] syz-executor (308) used greatest stack depth: 21248 bytes left [ 25.724736][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.732614][ T330] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.740424][ T330] device bridge_slave_0 entered promiscuous mode [ 25.747499][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.755104][ T330] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.762537][ T330] device bridge_slave_1 entered promiscuous mode [ 25.819998][ T330] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.827185][ T330] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.835062][ T330] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.842117][ T330] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.864105][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.872244][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.879647][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.889323][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.897888][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.905196][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.914093][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.922657][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.929800][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.942543][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 25.952241][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 25.966570][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 25.979350][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 25.988153][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 25.995961][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.004741][ T330] device veth0_vlan entered promiscuous mode [ 26.015187][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.024831][ T330] device veth1_macvtap entered promiscuous mode [ 26.034864][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.045819][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/10/19 15:01:24 executed programs: 0 [ 26.493191][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.500514][ T360] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.507990][ T360] device bridge_slave_0 entered promiscuous mode [ 26.515120][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.522477][ T360] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.530033][ T360] device bridge_slave_1 entered promiscuous mode [ 26.589375][ T360] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.596595][ T360] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.604117][ T360] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.611273][ T360] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.635409][ T341] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.650190][ T341] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.659090][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 26.666881][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.682916][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.691485][ T341] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.698539][ T341] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.706080][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.714451][ T341] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.721781][ T341] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.739159][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.747723][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.755985][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.769035][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.777700][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.785549][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.794220][ T360] device veth0_vlan entered promiscuous mode [ 26.804578][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.814513][ T360] device veth1_macvtap entered promiscuous mode [ 26.823958][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.835512][ T341] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.863926][ T371] loop2: detected capacity change from 0 to 1024 [ 26.900235][ T371] ======================================================= [ 26.900235][ T371] WARNING: The mand mount option has been deprecated and [ 26.900235][ T371] and is ignored by this kernel. Remove the mand [ 26.900235][ T371] option from the mount to silence this warning. [ 26.900235][ T371] ======================================================= [ 26.970989][ T371] EXT4-fs (loop2): Ignoring removed nobh option [ 26.977284][ T371] EXT4-fs (loop2): Ignoring removed bh option [ 26.983569][ T371] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 27.001765][ T371] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 27.042453][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 27.058180][ T360] ================================================================== [ 27.066579][ T360] BUG: KASAN: use-after-free in ext4_ext_remove_space+0x353c/0x4180 [ 27.074691][ T360] Read of size 4 at addr ffff88811cf3fc18 by task syz-executor/360 [ 27.082594][ T360] [ 27.084933][ T360] CPU: 0 PID: 360 Comm: syz-executor Not tainted syzkaller #0 [ 27.092476][ T360] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 27.103064][ T360] Call Trace: [ 27.106370][ T360] [ 27.109463][ T360] __dump_stack+0x21/0x30 [ 27.113817][ T360] dump_stack_lvl+0xee/0x150 [ 27.118418][ T360] ? show_regs_print_info+0x20/0x20 [ 27.123692][ T360] ? load_image+0x3a0/0x3a0 [ 27.128296][ T360] print_address_description+0x7f/0x2c0 [ 27.133941][ T360] ? ext4_ext_remove_space+0x353c/0x4180 [ 27.139716][ T360] kasan_report+0xf1/0x140 [ 27.144149][ T360] ? __read_extent_tree_block+0x1e8/0x790 [ 27.149981][ T360] ? ext4_ext_remove_space+0x353c/0x4180 [ 27.155683][ T360] __asan_report_load4_noabort+0x14/0x20 [ 27.161605][ T360] ext4_ext_remove_space+0x353c/0x4180 [ 27.167183][ T360] ? ext4_da_release_space+0x1d6/0x480 [ 27.173295][ T360] ? ext4_ext_index_trans_blocks+0x100/0x100 [ 27.179467][ T360] ext4_ext_truncate+0x1a3/0x250 [ 27.184702][ T360] ext4_truncate+0x9a6/0xfa0 [ 27.189292][ T360] ? __ext4_mark_inode_dirty+0x610/0x610 [ 27.195023][ T360] ext4_evict_inode+0xcb9/0x1450 [ 27.199965][ T360] ? _raw_spin_unlock+0x4d/0x70 [ 27.204832][ T360] ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 [ 27.210725][ T360] ? _raw_spin_unlock+0x4d/0x70 [ 27.215697][ T360] ? inode_io_list_del+0x19b/0x1b0 [ 27.221017][ T360] ? ext4_inode_is_fast_symlink+0x3a0/0x3a0 [ 27.227007][ T360] evict+0x485/0x870 [ 27.231119][ T360] ? iput+0x28e/0x7c0 [ 27.235101][ T360] ? proc_nr_inodes+0x310/0x310 [ 27.239959][ T360] ? _raw_spin_lock+0x8e/0xe0 [ 27.244842][ T360] ? _raw_spin_trylock_bh+0x130/0x130 [ 27.250398][ T360] ? iput+0x28e/0x7c0 [ 27.254380][ T360] ? __kasan_check_write+0x14/0x20 [ 27.259666][ T360] iput+0x635/0x7c0 [ 27.263469][ T360] do_unlinkat+0x375/0x6b0 [ 27.267887][ T360] ? fsnotify_link_count+0x100/0x100 [ 27.273512][ T360] ? getname_flags+0x206/0x500 [ 27.278388][ T360] __x64_sys_unlink+0x49/0x50 [ 27.283061][ T360] x64_sys_call+0x878/0x9a0 [ 27.287563][ T360] do_syscall_64+0x4c/0xa0 [ 27.292263][ T360] ? clear_bhb_loop+0x50/0xa0 [ 27.297020][ T360] ? clear_bhb_loop+0x50/0xa0 [ 27.301715][ T360] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 27.307646][ T360] RIP: 0033:0x7f970bdc7577 [ 27.312057][ T360] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 27.332011][ T360] RSP: 002b:00007ffe370cdb08 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 27.340424][ T360] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f970bdc7577 [ 27.348635][ T360] RDX: 00007ffe370cdb30 RSI: 00007ffe370cdbc0 RDI: 00007ffe370cdbc0 [ 27.356776][ T360] RBP: 00007ffe370cdbc0 R08: 0000000000000000 R09: 0000000000000000 [ 27.365028][ T360] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe370cecb0 [ 27.373212][ T360] R13: 00007f970be4ad7d R14: 00000000000068d6 R15: 00007ffe370cfd80 [ 27.381398][ T360] [ 27.384502][ T360] [ 27.386819][ T360] The buggy address belongs to the page: [ 27.392445][ T360] page:ffffea000473cfc0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11cf3f [ 27.402683][ T360] flags: 0x4000000000000000(zone=1) [ 27.408001][ T360] raw: 4000000000000000 0000000000000000 ffffea000473cfc8 0000000000000000 [ 27.416591][ T360] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 27.425175][ T360] page dumped because: kasan: bad access detected [ 27.431886][ T360] page_owner tracks the page as freed [ 27.437365][ T360] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52a20(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 225, ts 15287366204, free_ts 15498481267 [ 27.454386][ T360] post_alloc_hook+0x192/0x1b0 [ 27.459272][ T360] prep_new_page+0x1c/0x110 [ 27.463950][ T360] get_page_from_freelist+0x2cc5/0x2d50 [ 27.469723][ T360] __alloc_pages+0x18f/0x440 [ 27.474322][ T360] skb_page_frag_refill+0x202/0x3a0 [ 27.479554][ T360] try_fill_recv+0x4a0/0x13e0 [ 27.484486][ T360] virtnet_poll+0x6a8/0xef0 [ 27.489076][ T360] __napi_poll+0xbe/0x590 [ 27.493401][ T360] net_rx_action+0x371/0x8e0 [ 27.497989][ T360] handle_softirqs+0x250/0x560 [ 27.502916][ T360] __irq_exit_rcu+0x52/0xf0 [ 27.507431][ T360] irq_exit_rcu+0x9/0x10 [ 27.511872][ T360] common_interrupt+0xbe/0xe0 [ 27.516625][ T360] asm_common_interrupt+0x27/0x40 [ 27.521679][ T360] page last free stack trace: [ 27.526347][ T360] free_unref_page_prepare+0x542/0x550 [ 27.531814][ T360] free_unref_page+0xa2/0x550 [ 27.536526][ T360] free_compound_page+0x78/0xa0 [ 27.541576][ T360] __put_compound_page+0x77/0xb0 [ 27.546615][ T360] __put_page+0xbc/0xe0 [ 27.550878][ T360] skb_release_data+0x3d3/0xa10 [ 27.555855][ T360] __kfree_skb+0x50/0x70 [ 27.560302][ T360] tcp_recvmsg_locked+0x14ac/0x2640 [ 27.565634][ T360] tcp_recvmsg+0x21b/0x720 [ 27.570343][ T360] inet_recvmsg+0x134/0x470 [ 27.574887][ T360] sock_read_iter+0x2a2/0x340 [ 27.579938][ T360] vfs_read+0x68b/0xbe0 [ 27.584380][ T360] ksys_read+0x140/0x240 [ 27.588888][ T360] __x64_sys_read+0x7b/0x90 [ 27.593386][ T360] x64_sys_call+0x96d/0x9a0 [ 27.597972][ T360] do_syscall_64+0x4c/0xa0 [ 27.602497][ T360] [ 27.604900][ T360] Memory state around the buggy address: [ 27.610710][ T360] ffff88811cf3fb00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 27.618996][ T360] ffff88811cf3fb80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 27.627340][ T360] >ffff88811cf3fc00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 27.635649][ T360] ^ [ 27.640494][ T360] ffff88811cf3fc80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 27.648815][ T360] ffff88811cf3fd00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 27.656896][ T360] ================================================================== [ 27.664965][ T360] Disabling lock debugging due to kernel taint [ 27.677757][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 89936448631952, count = 16 [ 27.692677][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 89936448599342, count = 32622 [ 27.708379][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 89936448599328, count = 16 [ 27.723843][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 47040422457616, count = 16 [ 27.739061][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 47040422425276, count = 32342 [ 27.754090][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 47040422425264, count = 16 [ 27.768960][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 246220057188736, count = 16 [ 27.784016][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 246220057165847, count = 22903 [ 27.799771][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 246220057165840, count = 16 [ 28.171149][ T8] device bridge_slave_1 left promiscuous mode [ 28.177348][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 28.185634][ T8] device bridge_slave_0 left promiscuous mode [ 28.191899][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 28.200892][ T8] device veth1_macvtap left promiscuous mode [ 28.207162][ T8] device veth0_vlan left promiscuous mode [ 28.278630][ T375] loop2: detected capacity change from 0 to 1024 [ 28.353779][ T375] EXT4-fs (loop2): Ignoring removed nobh option [ 28.360723][ T375] EXT4-fs (loop2): Ignoring removed bh option [ 28.366865][ T375] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.381452][ T375] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 28.412857][ T30] kauditd_printk_skb: 67 callbacks suppressed [ 28.412872][ T30] audit: type=1400 audit(1760886086.135:141): avc: denied { create } for pid=375 comm="syz.2.18" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1 [ 28.462379][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 28.508728][ T379] loop2: detected capacity change from 0 to 1024 [ 28.557270][ T379] EXT4-fs (loop2): Ignoring removed nobh option [ 28.563882][ T379] EXT4-fs (loop2): Ignoring removed bh option [ 28.570111][ T379] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.601190][ T379] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 28.642994][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 28.739150][ T382] loop2: detected capacity change from 0 to 1024 [ 28.787780][ T382] EXT4-fs (loop2): Ignoring removed nobh option [ 28.794427][ T382] EXT4-fs (loop2): Ignoring removed bh option [ 28.801128][ T382] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.821470][ T382] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 28.856962][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 28.928563][ T385] loop2: detected capacity change from 0 to 1024 [ 29.080391][ T385] EXT4-fs (loop2): Ignoring removed nobh option [ 29.086806][ T385] EXT4-fs (loop2): Ignoring removed bh option [ 29.093255][ T385] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.111280][ T385] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 29.146523][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 29.258331][ T388] loop2: detected capacity change from 0 to 1024 [ 29.267375][ T388] EXT4-fs (loop2): Ignoring removed nobh option [ 29.273785][ T388] EXT4-fs (loop2): Ignoring removed bh option [ 29.280071][ T388] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.301996][ T388] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 29.337580][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 29.353064][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 273748212644088, count = 30968 [ 29.368494][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 273748212644080, count = 16 [ 29.384365][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 273748212644088, count = 30968 [ 29.400093][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 273748212644080, count = 16 [ 29.415134][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 273748212644088, count = 30968 [ 29.430409][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 273748212644080, count = 16 [ 29.445622][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 273748212644088, count = 30968 [ 29.461326][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 273748212644080, count = 16 [ 29.476204][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 273748212644088, count = 30968 [ 29.657991][ T392] loop2: detected capacity change from 0 to 1024 [ 29.693426][ T392] EXT4-fs (loop2): Ignoring removed nobh option [ 29.699748][ T392] EXT4-fs (loop2): Ignoring removed bh option [ 29.705992][ T392] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.721583][ T392] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 29.757071][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 29.811787][ T395] loop2: detected capacity change from 0 to 1024 [ 29.950365][ T395] EXT4-fs (loop2): Ignoring removed nobh option [ 29.956823][ T395] EXT4-fs (loop2): Ignoring removed bh option [ 29.963160][ T395] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.981380][ T395] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 30.017899][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 30.137999][ T398] loop2: detected capacity change from 0 to 1024 [ 30.145486][ T398] EXT4-fs (loop2): Ignoring removed nobh option [ 30.151968][ T398] EXT4-fs (loop2): Ignoring removed bh option [ 30.158182][ T398] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.181223][ T398] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 30.217005][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 30.288975][ T401] loop2: detected capacity change from 0 to 1024 [ 30.297185][ T401] EXT4-fs (loop2): Ignoring removed nobh option [ 30.303655][ T401] EXT4-fs (loop2): Ignoring removed bh option [ 30.309893][ T401] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.331503][ T401] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 30.366637][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 30.448971][ T404] loop2: detected capacity change from 0 to 1024 [ 30.532982][ T404] EXT4-fs (loop2): Ignoring removed nobh option [ 30.539497][ T404] EXT4-fs (loop2): Ignoring removed bh option [ 30.545872][ T404] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.561431][ T404] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 30.596818][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 30.661352][ T408] loop2: detected capacity change from 0 to 1024 [ 30.733700][ T408] EXT4-fs (loop2): Ignoring removed nobh option [ 30.740304][ T408] EXT4-fs (loop2): Ignoring removed bh option [ 30.746944][ T408] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.761586][ T408] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 30.797470][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 30.813067][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 281470681745536, count = 16 [ 30.828222][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 281470681743360, count = 2177 [ 30.843630][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 33092723016848, count = 16 [ 30.859205][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 33092722985089, count = 31760 [ 30.874321][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 33092722985088, count = 16 [ 30.889018][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 281470681745568, count = 16 [ 30.904036][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 281470681743399, count = 2177 [ 30.981114][ T411] loop2: detected capacity change from 0 to 1024 [ 31.020423][ T411] EXT4-fs (loop2): Ignoring removed nobh option [ 31.026856][ T411] EXT4-fs (loop2): Ignoring removed bh option [ 31.033151][ T411] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.051109][ T411] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 31.086668][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 31.139533][ T414] loop2: detected capacity change from 0 to 1024 [ 31.250493][ T414] EXT4-fs (loop2): Ignoring removed nobh option [ 31.256975][ T414] EXT4-fs (loop2): Ignoring removed bh option [ 31.263336][ T414] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.281934][ T414] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 31.317520][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 31.333290][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 35182332677760, count = 16 [ 31.348303][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 35182332648832, count = 28944 [ 31.363622][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 35182332648832, count = 16 [ 31.379676][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 69140920418192, count = 16 [ 31.395094][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 69140920398096, count = 20098 [ 31.410623][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 69140920398096, count = 16 [ 31.425699][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 281474720680192, count = 16 [ 31.440685][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 281474720647433, count = 32767 [ 31.455850][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 281474720647424, count = 16 [ 31.578300][ T418] loop2: detected capacity change from 0 to 1024 [ 31.652887][ T418] EXT4-fs (loop2): Ignoring removed nobh option [ 31.659397][ T418] EXT4-fs (loop2): Ignoring removed bh option [ 31.665751][ T418] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.681331][ T418] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 31.717031][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 31.733577][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 281470997120160, count = 16 2025/10/19 15:01:29 executed programs: 17 [ 31.748899][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 281470997117984, count = 2177 [ 31.761472][ T30] audit: type=1400 audit(1760886089.485:142): avc: denied { write } for pid=281 comm="syz-execprog" path="pipe:[12824]" dev="pipefs" ino=12824 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 31.858610][ T421] loop2: detected capacity change from 0 to 1024 [ 31.933431][ T421] EXT4-fs (loop2): Ignoring removed nobh option [ 31.940365][ T421] EXT4-fs (loop2): Ignoring removed bh option [ 31.947117][ T421] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.971519][ T421] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 32.006891][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 32.058720][ T424] loop2: detected capacity change from 0 to 1024 [ 32.131694][ T424] EXT4-fs (loop2): Ignoring removed nobh option [ 32.138249][ T424] EXT4-fs (loop2): Ignoring removed bh option [ 32.144531][ T424] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.161257][ T424] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 32.197647][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 32.280812][ T427] loop2: detected capacity change from 0 to 1024 [ 32.331554][ T427] EXT4-fs (loop2): Ignoring removed nobh option [ 32.337862][ T427] EXT4-fs (loop2): Ignoring removed bh option [ 32.344222][ T427] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.361429][ T427] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 32.397250][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 32.498391][ T430] loop2: detected capacity change from 0 to 1024 [ 32.607567][ T430] EXT4-fs (loop2): Ignoring removed nobh option [ 32.614056][ T430] EXT4-fs (loop2): Ignoring removed bh option [ 32.620493][ T430] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.641268][ T430] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 32.676769][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 32.780351][ T433] loop2: detected capacity change from 0 to 1024 [ 32.855782][ T433] EXT4-fs (loop2): Ignoring removed nobh option [ 32.862399][ T433] EXT4-fs (loop2): Ignoring removed bh option [ 32.868643][ T433] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.891312][ T433] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 32.926587][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 32.998317][ T436] loop2: detected capacity change from 0 to 1024 [ 33.088867][ T436] EXT4-fs (loop2): Ignoring removed nobh option [ 33.095399][ T436] EXT4-fs (loop2): Ignoring removed bh option [ 33.101541][ T436] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.121446][ T436] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 33.157429][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 33.173396][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 281470681745536, count = 16 [ 33.188670][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 281470681743360, count = 2177 [ 33.203625][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 281470681776112, count = 16 [ 33.218883][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 281470681743360, count = 32767 [ 33.234232][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 281470681743360, count = 16 [ 33.249207][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 281470681745920, count = 16 [ 33.264331][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 281470681743752, count = 2177 [ 33.279458][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 281470681743744, count = 16 [ 33.378956][ T439] loop2: detected capacity change from 0 to 1024 [ 33.490431][ T439] EXT4-fs (loop2): Ignoring removed nobh option [ 33.497055][ T439] EXT4-fs (loop2): Ignoring removed bh option [ 33.503500][ T439] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.521497][ T439] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 33.556399][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 33.627994][ T442] loop2: detected capacity change from 0 to 1024 [ 33.698229][ T442] EXT4-fs (loop2): Ignoring removed nobh option [ 33.704636][ T442] EXT4-fs (loop2): Ignoring removed bh option [ 33.710892][ T442] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.731530][ T442] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 33.767468][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 33.858275][ T445] loop2: detected capacity change from 0 to 1024 [ 33.900845][ T445] EXT4-fs (loop2): Ignoring removed nobh option [ 33.907159][ T445] EXT4-fs (loop2): Ignoring removed bh option [ 33.913574][ T445] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.931423][ T445] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 33.966931][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 34.058148][ T448] loop2: detected capacity change from 0 to 1024 [ 34.210451][ T448] EXT4-fs (loop2): Ignoring removed nobh option [ 34.216762][ T448] EXT4-fs (loop2): Ignoring removed bh option [ 34.223387][ T448] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.251352][ T448] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 34.286051][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 34.381789][ T451] loop2: detected capacity change from 0 to 1024 [ 34.413678][ T451] EXT4-fs (loop2): Ignoring removed nobh option [ 34.420208][ T451] EXT4-fs (loop2): Ignoring removed bh option [ 34.426518][ T451] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.441582][ T451] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 34.477064][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 34.528731][ T455] loop2: detected capacity change from 0 to 1024 [ 34.611707][ T455] EXT4-fs (loop2): Ignoring removed nobh option [ 34.618187][ T455] EXT4-fs (loop2): Ignoring removed bh option [ 34.624438][ T455] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.641205][ T455] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 34.677142][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 34.728749][ T458] loop2: detected capacity change from 0 to 1024 [ 34.813055][ T458] EXT4-fs (loop2): Ignoring removed nobh option [ 34.819527][ T458] EXT4-fs (loop2): Ignoring removed bh option [ 34.825698][ T458] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.841374][ T458] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 34.876470][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 34.958529][ T461] loop2: detected capacity change from 0 to 1024 [ 35.029914][ T461] EXT4-fs (loop2): Ignoring removed nobh option [ 35.036219][ T461] EXT4-fs (loop2): Ignoring removed bh option [ 35.042389][ T461] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.061140][ T461] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 35.096401][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 35.218149][ T464] loop2: detected capacity change from 0 to 1024 [ 35.347244][ T464] EXT4-fs (loop2): Ignoring removed nobh option [ 35.353977][ T464] EXT4-fs (loop2): Ignoring removed bh option [ 35.360536][ T464] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.381278][ T464] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 35.417208][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 35.433012][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 281471138318592, count = 16 [ 35.448405][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 281471138316418, count = 2177 [ 35.463959][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 768, count = 16 [ 35.477830][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 640, count = 130 [ 35.538317][ T467] loop2: detected capacity change from 0 to 1024 [ 35.650358][ T467] EXT4-fs (loop2): Ignoring removed nobh option [ 35.656682][ T467] EXT4-fs (loop2): Ignoring removed bh option [ 35.662972][ T467] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.681414][ T467] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 35.717220][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 35.790833][ T470] loop2: detected capacity change from 0 to 1024 [ 35.890384][ T470] EXT4-fs (loop2): Ignoring removed nobh option [ 35.896714][ T470] EXT4-fs (loop2): Ignoring removed bh option [ 35.902902][ T470] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.921359][ T470] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 35.956605][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 36.009167][ T473] loop2: detected capacity change from 0 to 1024 [ 36.062942][ T473] EXT4-fs (loop2): Ignoring removed nobh option [ 36.069266][ T473] EXT4-fs (loop2): Ignoring removed bh option [ 36.075519][ T473] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.091264][ T473] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 36.127064][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 36.188596][ T476] loop2: detected capacity change from 0 to 1024 [ 36.330443][ T476] EXT4-fs (loop2): Ignoring removed nobh option [ 36.336759][ T476] EXT4-fs (loop2): Ignoring removed bh option [ 36.343068][ T476] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.361207][ T476] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 36.398542][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 36.468107][ T479] loop2: detected capacity change from 0 to 1024 [ 36.533345][ T479] EXT4-fs (loop2): Ignoring removed nobh option [ 36.539667][ T479] EXT4-fs (loop2): Ignoring removed bh option [ 36.545835][ T479] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.561071][ T479] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 36.596841][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 36.738763][ T482] loop2: detected capacity change from 0 to 1024 [ 36.850414][ T482] EXT4-fs (loop2): Ignoring removed nobh option [ 36.856848][ T482] EXT4-fs (loop2): Ignoring removed bh option [ 36.863142][ T482] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.881190][ T482] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,user_xattr,errors=continue,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 36.916134][ T360] EXT4-fs error (device loop2): mb_free_blocks:1860: group 0, inode 20: block 241:freeing already freed block (bit 15); block bitmap corrupt. [ 36.932991][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 273748212644088, count = 30968 2025/10/19 15:01:34 executed programs: 38 [ 36.948556][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 273748212644080, count = 16 [ 36.964704][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 273748212644088, count = 30968 [ 36.979938][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 273748212644080, count = 16 [ 36.995046][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 273748212644088, count = 30968 [ 37.010895][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 273748212644080, count = 16 [ 37.025653][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 273748212644088, count = 30968 [ 37.040652][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 273748212644080, count = 16 [ 37.055562][ T360] EXT4-fs error (device loop2): ext4_free_blocks:6218: comm syz-executor: Freeing blocks not in datazone - block = 273748212644088, count = 30968