Warning: Permanently added '10.128.1.177' (ED25519) to the list of known hosts. 2026/02/02 02:44:26 parsed 1 programs [ 29.455060][ T24] audit: type=1400 audit(1770000266.680:64): avc: denied { node_bind } for pid=275 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 29.476402][ T24] audit: type=1400 audit(1770000266.680:65): avc: denied { create } for pid=275 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 29.497013][ T24] audit: type=1400 audit(1770000266.680:66): avc: denied { module_request } for pid=275 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 30.106695][ T24] audit: type=1400 audit(1770000267.330:67): avc: denied { mounton } for pid=281 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 30.107716][ T281] cgroup: Unknown subsys name 'net' [ 30.135485][ T24] audit: type=1400 audit(1770000267.330:68): avc: denied { mount } for pid=281 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.158926][ T281] cgroup: Unknown subsys name 'devices' [ 30.159033][ T24] audit: type=1400 audit(1770000267.360:69): avc: denied { unmount } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 30.362278][ T281] cgroup: Unknown subsys name 'hugetlb' [ 30.367985][ T281] cgroup: Unknown subsys name 'rlimit' [ 30.571067][ T24] audit: type=1400 audit(1770000267.800:70): avc: denied { setattr } for pid=281 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 30.595359][ T24] audit: type=1400 audit(1770000267.800:71): avc: denied { create } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 Setting up swapspace version 1, size = 127995904 bytes [ 30.599020][ T285] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 30.616205][ T24] audit: type=1400 audit(1770000267.800:72): avc: denied { write } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.645369][ T24] audit: type=1400 audit(1770000267.800:73): avc: denied { read } for pid=281 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 30.672045][ T281] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 31.136190][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.143807][ T287] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.151663][ T287] device bridge_slave_0 entered promiscuous mode [ 31.158972][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.166108][ T287] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.173831][ T287] device bridge_slave_1 entered promiscuous mode [ 31.207167][ T287] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.214486][ T287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.221854][ T287] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.229132][ T287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.245506][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.252866][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.260297][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 31.268099][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 31.277440][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 31.285816][ T112] bridge0: port 1(bridge_slave_0) entered blocking state [ 31.292870][ T112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 31.301960][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 31.310408][ T112] bridge0: port 2(bridge_slave_1) entered blocking state [ 31.317581][ T112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 31.328798][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 31.341450][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 31.352233][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 31.363504][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 31.371696][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 31.379102][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 31.387317][ T287] device veth0_vlan entered promiscuous mode [ 31.397909][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 31.407474][ T287] device veth1_macvtap entered promiscuous mode [ 31.416625][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 31.426713][ T112] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 31.444039][ T287] request_module fs-gadgetfs succeeded, but still no fs? [ 31.453556][ T287] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 31.925342][ T112] device bridge_slave_1 left promiscuous mode [ 31.932408][ T112] bridge0: port 2(bridge_slave_1) entered disabled state [ 31.940042][ T112] device bridge_slave_0 left promiscuous mode [ 31.946278][ T112] bridge0: port 1(bridge_slave_0) entered disabled state [ 31.954097][ T112] device veth1_macvtap left promiscuous mode [ 31.960483][ T112] device veth0_vlan left promiscuous mode 2026/02/02 02:44:29 executed programs: 0 [ 32.361567][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.369105][ T351] bridge0: port 1(bridge_slave_0) entered disabled state [ 32.377084][ T351] device bridge_slave_0 entered promiscuous mode [ 32.384089][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.391694][ T351] bridge0: port 2(bridge_slave_1) entered disabled state [ 32.399493][ T351] device bridge_slave_1 entered promiscuous mode [ 32.434189][ T351] bridge0: port 2(bridge_slave_1) entered blocking state [ 32.441449][ T351] bridge0: port 2(bridge_slave_1) entered forwarding state [ 32.448815][ T351] bridge0: port 1(bridge_slave_0) entered blocking state [ 32.455885][ T351] bridge0: port 1(bridge_slave_0) entered forwarding state [ 32.480836][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 32.488502][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 32.497079][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 32.511107][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 32.519656][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 32.540660][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 32.550893][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 32.562342][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 32.570168][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 32.577931][ T351] device veth0_vlan entered promiscuous mode [ 32.589119][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 32.598683][ T351] device veth1_macvtap entered promiscuous mode [ 32.608198][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 32.618130][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 32.651285][ T358] ====================================================== [ 32.651285][ T358] WARNING: the mand mount option is being deprecated and [ 32.651285][ T358] will be removed in v5.15! [ 32.651285][ T358] ====================================================== [ 32.691159][ T358] EXT4-fs (loop2): Ignoring removed nobh option [ 32.697592][ T358] EXT4-fs (loop2): Ignoring removed bh option [ 32.712371][ T358] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,barrier=0x0000000000000001,dioread_lock,grpjquota=,quota,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue [ 32.736850][ T358] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.17: Allocating blocks 481-513 which overlap fs metadata [ 32.757566][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 1699786258, count = 0 [ 32.772350][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 1699786256, count = 16 [ 32.786779][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 11961483952656, count = 16 [ 32.802178][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 11961483941461, count = 11200 [ 32.817508][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 11961483941456, count = 16 [ 32.832399][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 182541152, count = 16 [ 32.846940][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 182519056, count = 22101 [ 32.861735][ T351] EXT4-fs error (device loop2): mb_free_blocks:1540: group 0, inode 15: block 17:freeing already freed block (bit 1); block bitmap corrupt. [ 32.876427][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 0, count = 33 [ 32.971568][ T362] EXT4-fs (loop2): Ignoring removed nobh option [ 32.977974][ T362] EXT4-fs (loop2): Ignoring removed bh option [ 32.992312][ T362] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,barrier=0x0000000000000001,dioread_lock,grpjquota=,quota,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue [ 33.016882][ T362] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.18: Allocating blocks 481-513 which overlap fs metadata [ 33.033851][ T351] ================================================================== [ 33.042343][ T351] BUG: KASAN: use-after-free in ext4_ext_remove_space+0x374f/0x4570 [ 33.050731][ T351] Read of size 4 at addr ffff88812c8e2c18 by task syz-executor/351 [ 33.058757][ T351] [ 33.061093][ T351] CPU: 1 PID: 351 Comm: syz-executor Not tainted syzkaller #0 [ 33.068881][ T351] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 33.078938][ T351] Call Trace: [ 33.082323][ T351] __dump_stack+0x21/0x24 [ 33.086740][ T351] dump_stack_lvl+0x1a7/0x208 [ 33.091596][ T351] ? show_regs_print_info+0x18/0x18 [ 33.096917][ T351] ? thaw_kernel_threads+0x220/0x220 [ 33.102274][ T351] print_address_description+0x7f/0x2c0 [ 33.107913][ T351] ? ext4_ext_remove_space+0x374f/0x4570 [ 33.113537][ T351] kasan_report+0xe2/0x130 [ 33.117953][ T351] ? __read_extent_tree_block+0x1e8/0x790 [ 33.123839][ T351] ? ext4_ext_remove_space+0x374f/0x4570 [ 33.129653][ T351] __asan_report_load4_noabort+0x14/0x20 [ 33.135413][ T351] ext4_ext_remove_space+0x374f/0x4570 [ 33.140879][ T351] ? __kasan_slab_free+0x11/0x20 [ 33.145897][ T351] ? ext4_es_free_extent+0x3de/0x4c0 [ 33.151420][ T351] ? ext4_es_free_extent+0x3de/0x4c0 [ 33.156791][ T351] ? __es_remove_extent+0xdbf/0x16f0 [ 33.162166][ T351] ? _raw_write_lock+0x94/0xf0 [ 33.166982][ T351] ? ext4_da_release_space+0x19f/0x410 [ 33.172679][ T351] ? ext4_ext_index_trans_blocks+0x100/0x100 [ 33.178654][ T351] ext4_ext_truncate+0x169/0x1f0 [ 33.183573][ T351] ext4_truncate+0xb21/0x12d0 [ 33.188404][ T351] ? __ext4_mark_inode_dirty+0x610/0x610 [ 33.194131][ T351] ext4_evict_inode+0xf5b/0x1770 [ 33.199137][ T351] ? _raw_spin_unlock+0x4d/0x70 [ 33.204082][ T351] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 33.210202][ T351] ? inode_io_list_del_locked+0x1b3/0x210 [ 33.215973][ T351] ? _raw_spin_unlock+0x4d/0x70 [ 33.220904][ T351] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 33.226887][ T351] evict+0x4ae/0x930 [ 33.230861][ T351] ? mode_strip_sgid+0x160/0x160 [ 33.235891][ T351] ? _raw_spin_lock+0x94/0xf0 [ 33.240559][ T351] ? _raw_spin_trylock_bh+0x150/0x150 [ 33.246106][ T351] ? iput+0x291/0x7c0 [ 33.250077][ T351] ? __kasan_check_write+0x14/0x20 [ 33.255409][ T351] iput+0x638/0x7c0 [ 33.259268][ T351] do_unlinkat+0x347/0x680 [ 33.263680][ T351] ? __check_object_size+0x2f4/0x3c0 [ 33.268950][ T351] ? fsnotify_link_count+0x90/0x90 [ 33.274127][ T351] ? getname_flags+0x206/0x500 [ 33.278868][ T351] __x64_sys_unlink+0x49/0x50 [ 33.283665][ T351] do_syscall_64+0x31/0x40 [ 33.288443][ T351] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 33.294687][ T351] RIP: 0033:0x7fab0ddd3fa7 [ 33.299102][ T351] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 33.319414][ T351] RSP: 002b:00007ffdbd489808 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 33.327839][ T351] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fab0ddd3fa7 [ 33.335894][ T351] RDX: 00007ffdbd489830 RSI: 00007ffdbd4898c0 RDI: 00007ffdbd4898c0 [ 33.344350][ T351] RBP: 00007ffdbd4898c0 R08: 00007ffdbd48a8c0 R09: 00000000ffffffff [ 33.352588][ T351] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffdbd48a9b0 [ 33.360630][ T351] R13: 00007fab0de3e71f R14: 00000000000080e8 R15: 00007ffdbd48ba80 [ 33.368590][ T351] [ 33.370985][ T351] The buggy address belongs to the page: [ 33.376598][ T351] page:ffffea0004b23880 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12c8e2 [ 33.386812][ T351] flags: 0x4000000000000000() [ 33.391490][ T351] raw: 4000000000000000 ffffea0004b23888 ffffea0004b23888 0000000000000000 [ 33.400745][ T351] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 33.409415][ T351] page dumped because: kasan: bad access detected [ 33.415976][ T351] page_owner info is not present (never set?) [ 33.422044][ T351] [ 33.424729][ T351] Memory state around the buggy address: [ 33.430371][ T351] ffff88812c8e2b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 33.438600][ T351] ffff88812c8e2b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 33.446908][ T351] >ffff88812c8e2c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 33.454946][ T351] ^ [ 33.459871][ T351] ffff88812c8e2c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 33.468061][ T351] ffff88812c8e2d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 33.476303][ T351] ================================================================== [ 33.484446][ T351] Disabling lock debugging due to kernel taint [ 33.581584][ T366] EXT4-fs (loop2): Ignoring removed nobh option [ 33.587895][ T366] EXT4-fs (loop2): Ignoring removed bh option [ 33.602008][ T366] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,barrier=0x0000000000000001,dioread_lock,grpjquota=,quota,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue [ 33.626661][ T366] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.19: Allocating blocks 481-513 which overlap fs metadata [ 33.813846][ T370] EXT4-fs (loop2): Ignoring removed nobh option [ 33.820324][ T370] EXT4-fs (loop2): Ignoring removed bh option [ 33.832632][ T370] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,barrier=0x0000000000000001,dioread_lock,grpjquota=,quota,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue [ 33.859627][ T370] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.20: Allocating blocks 481-513 which overlap fs metadata [ 33.961824][ T421] EXT4-fs (loop2): Ignoring removed nobh option [ 33.968329][ T421] EXT4-fs (loop2): Ignoring removed bh option [ 33.981969][ T421] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,barrier=0x0000000000000001,dioread_lock,grpjquota=,quota,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue [ 34.005990][ T421] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.21: Allocating blocks 481-513 which overlap fs metadata [ 34.023736][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 111546515832528, count = 16 [ 34.038493][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 111546515808116, count = 24428 [ 34.053650][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 111546515808112, count = 16 [ 34.068948][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 130151995502691, count = 26723 [ 34.084463][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 130151995502688, count = 16 [ 34.099598][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 35392517276288, count = 16 [ 34.114604][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 35392517251156, count = 25143 [ 34.130183][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 35392517251152, count = 16 [ 34.145481][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 112589218958528, count = 16 [ 37.015584][ T94] udevd[94]: worker [293] terminated by signal 11 (Segmentation fault) [ 37.741553][ T429] EXT4-fs (loop2): Ignoring removed nobh option [ 37.751436][ T429] EXT4-fs (loop2): Ignoring removed bh option [ 37.761698][ T429] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,barrier=0x0000000000000001,dioread_lock,grpjquota=,quota,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue [ 37.785300][ T429] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.22: Allocating blocks 481-513 which overlap fs metadata [ 37.802671][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 29776, count = 16 [ 37.817302][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 0, count = 29791 2026/02/02 02:44:35 executed programs: 8 [ 37.831755][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 0, count = 16 [ 37.845620][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 123628039739872, count = 16 [ 37.860668][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 123628039724912, count = 14962 [ 37.861463][ T24] kauditd_printk_skb: 59 callbacks suppressed [ 37.861473][ T24] audit: type=1400 audit(1770000275.090:133): avc: denied { write } for pid=275 comm="syz-execprog" path="pipe:[13068]" dev="pipefs" ino=13068 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 37.876562][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 123628039724912, count = 16 [ 37.921418][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 129052667206800, count = 16 [ 37.936679][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 129052667178810, count = 28005 [ 37.952015][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 129052667178800, count = 16 [ 38.106171][ T433] EXT4-fs (loop2): Ignoring removed nobh option [ 38.112809][ T433] EXT4-fs (loop2): Ignoring removed bh option [ 38.121789][ T433] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,barrier=0x0000000000000001,dioread_lock,grpjquota=,quota,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue [ 38.145662][ T433] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.23: Allocating blocks 481-513 which overlap fs metadata [ 38.303588][ T437] EXT4-fs (loop2): Ignoring removed nobh option [ 38.310059][ T437] EXT4-fs (loop2): Ignoring removed bh option [ 38.321724][ T437] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,barrier=0x0000000000000001,dioread_lock,grpjquota=,quota,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue [ 38.346038][ T437] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.24: Allocating blocks 481-513 which overlap fs metadata [ 38.363214][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 0, count = 192 [ 38.377284][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 2448131378400, count = 16 [ 38.392137][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 2448131358720, count = 19688 [ 38.407254][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 1, count = 192 [ 38.420878][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 2336462209216, count = 12832 [ 38.435745][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 37375008, count = 0 [ 38.449873][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 37375008, count = 16 [ 38.464477][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 0, count = 0 [ 38.478363][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 35664736, count = 0 [ 38.611611][ T441] EXT4-fs (loop2): Ignoring removed nobh option [ 38.617923][ T441] EXT4-fs (loop2): Ignoring removed bh option [ 38.631756][ T441] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,barrier=0x0000000000000001,dioread_lock,grpjquota=,quota,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue [ 38.655199][ T441] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.25: Allocating blocks 481-513 which overlap fs metadata [ 38.769598][ T445] EXT4-fs (loop2): Ignoring removed nobh option [ 38.776255][ T445] EXT4-fs (loop2): Ignoring removed bh option [ 38.791885][ T445] EXT4-fs (loop2): mounted filesystem without journal. Opts: resuid=0x0000000000000000,data_err=abort,barrier=0x0000000000000001,dioread_lock,grpjquota=,quota,data_err=ignore,grpquota,nobh,user_xattr,bh,minixdf,,errors=continue [ 38.816515][ T445] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3358: comm syz.2.26: Allocating blocks 481-513 which overlap fs metadata [ 38.833929][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 35392466278864, count = 16 [ 38.849111][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 35392466264180, count = 14692 [ 38.864088][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 35392466264176, count = 16 [ 38.879149][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 112589218958528, count = 16 [ 38.893826][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 112589218932326, count = 26214 [ 38.909396][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 112589218932320, count = 16 [ 38.924217][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 119251719708517, count = 25711 [ 38.939838][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 119251719708512, count = 16 [ 38.955252][ T351] EXT4-fs error (device loop2): ext4_free_blocks:5701: comm syz-executor: Freeing blocks not in datazone - block = 35392466278352, count = 16