syzkaller syzkaller login: [ 14.673838][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 14.673850][ T24] audit: type=1400 audit(1757221665.200:59): avc: denied { transition } for pid=217 comm="sshd-session" path="/bin/sh" dev="sda1" ino=90 scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.684351][ T24] audit: type=1400 audit(1757221665.200:60): avc: denied { noatsecure } for pid=217 comm="sshd-session" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.692255][ T24] audit: type=1400 audit(1757221665.200:61): avc: denied { write } for pid=217 comm="sh" path="pipe:[1482]" dev="pipefs" ino=1482 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 14.712007][ T24] audit: type=1400 audit(1757221665.200:62): avc: denied { rlimitinh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 14.730987][ T24] audit: type=1400 audit(1757221665.200:63): avc: denied { siginh } for pid=217 comm="sh" scontext=system_u:system_r:sshd_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 Warning: Permanently added '10.128.1.208' (ED25519) to the list of known hosts. 2025/09/07 05:08:13 parsed 1 programs [ 42.979578][ T24] audit: type=1400 audit(1757221693.500:64): avc: denied { node_bind } for pid=275 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 43.000310][ T24] audit: type=1400 audit(1757221693.500:65): avc: denied { create } for pid=275 comm="syz-execprog" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 43.020111][ T24] audit: type=1400 audit(1757221693.500:66): avc: denied { module_request } for pid=275 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 43.916978][ T24] audit: type=1400 audit(1757221694.440:67): avc: denied { mounton } for pid=283 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 43.918295][ T283] cgroup: Unknown subsys name 'net' [ 43.939754][ T24] audit: type=1400 audit(1757221694.440:68): avc: denied { mount } for pid=283 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.967325][ T24] audit: type=1400 audit(1757221694.470:69): avc: denied { unmount } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 43.967598][ T283] cgroup: Unknown subsys name 'devices' [ 44.205195][ T283] cgroup: Unknown subsys name 'hugetlb' [ 44.210839][ T283] cgroup: Unknown subsys name 'rlimit' [ 44.389718][ T24] audit: type=1400 audit(1757221694.910:70): avc: denied { setattr } for pid=283 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=253 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 44.412992][ T24] audit: type=1400 audit(1757221694.910:71): avc: denied { create } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.433389][ T24] audit: type=1400 audit(1757221694.910:72): avc: denied { write } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.440765][ T286] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). [ 44.454017][ T24] audit: type=1400 audit(1757221694.910:73): avc: denied { read } for pid=283 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 44.491844][ T283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.910291][ T288] request_module fs-gadgetfs succeeded, but still no fs? [ 44.921512][ T288] cgroup: cgroup: disabling cgroup2 socket matching due to net_prio or net_cls activation [ 45.316695][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.324117][ T317] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.331475][ T317] device bridge_slave_0 entered promiscuous mode [ 45.339217][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.346288][ T317] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.353736][ T317] device bridge_slave_1 entered promiscuous mode [ 45.389213][ T317] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.396298][ T317] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.403619][ T317] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.410652][ T317] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.428368][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.436023][ T303] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.444198][ T303] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.452931][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.461602][ T303] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.468683][ T303] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.478010][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.486226][ T303] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.493322][ T303] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.505908][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.516095][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.529984][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.541312][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.549573][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.557189][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.565604][ T317] device veth0_vlan entered promiscuous mode [ 45.576970][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.586199][ T317] device veth1_macvtap entered promiscuous mode [ 45.595665][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.606172][ T303] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/09/07 05:08:16 executed programs: 0 [ 46.168303][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.175655][ T354] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.183237][ T354] device bridge_slave_0 entered promiscuous mode [ 46.190503][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.197580][ T354] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.205124][ T354] device bridge_slave_1 entered promiscuous mode [ 46.246622][ T354] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.253710][ T354] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.260962][ T354] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.268043][ T354] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.289277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.297674][ T9] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.305554][ T9] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.323324][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.331652][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.341221][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.348322][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.355729][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.364233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.372409][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.379589][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.387062][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.395231][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.403153][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.411235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.422310][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.430759][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.444254][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.452169][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.460445][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.468232][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.476596][ T354] device veth0_vlan entered promiscuous mode [ 46.486461][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.495165][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.505103][ T354] device veth1_macvtap entered promiscuous mode [ 46.515048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.522925][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.531299][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.541191][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.549597][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.613769][ T379] ====================================================== [ 46.613769][ T379] WARNING: the mand mount option is being deprecated and [ 46.613769][ T379] will be removed in v5.15! [ 46.613769][ T379] ====================================================== [ 46.665039][ T379] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 46.684379][ T379] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3342: comm syz.2.17: Allocating blocks 497-513 which overlap fs metadata [ 46.699052][ T379] EXT4-fs (loop2): pa ffff8881255577e0: logic 256, phys. 385, len 8 [ 46.707456][ T379] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 1 [ 46.726063][ T354] ================================================================== [ 46.734400][ T354] BUG: KASAN: use-after-free in ext4_ext_remove_space+0x3a6a/0x4920 [ 46.742383][ T354] Read of size 4 at addr ffff88812b3aadb8 by task syz-executor/354 [ 46.750264][ T354] [ 46.752630][ T354] CPU: 1 PID: 354 Comm: syz-executor Not tainted syzkaller #0 [ 46.760082][ T354] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/14/2025 [ 46.770150][ T354] Call Trace: [ 46.773454][ T354] __dump_stack+0x21/0x24 [ 46.777795][ T354] dump_stack_lvl+0x169/0x1d8 [ 46.782474][ T354] ? show_regs_print_info+0x18/0x18 [ 46.787698][ T354] ? thaw_kernel_threads+0x220/0x220 [ 46.792980][ T354] print_address_description+0x7f/0x2c0 [ 46.798744][ T354] ? ext4_ext_remove_space+0x3a6a/0x4920 [ 46.804461][ T354] kasan_report+0xe2/0x130 [ 46.808874][ T354] ? __read_extent_tree_block+0x1e8/0x790 [ 46.814592][ T354] ? ext4_ext_remove_space+0x3a6a/0x4920 [ 46.820227][ T354] __asan_report_load4_noabort+0x14/0x20 [ 46.826066][ T354] ext4_ext_remove_space+0x3a6a/0x4920 [ 46.831519][ T354] ? __kasan_slab_free+0x11/0x20 [ 46.836457][ T354] ? slab_free_freelist_hook+0xc5/0x190 [ 46.842015][ T354] ? __es_remove_extent+0xdc5/0x16f0 [ 46.847299][ T354] ? _raw_write_lock+0x8e/0xe0 [ 46.852150][ T354] ? ext4_da_release_space+0x19f/0x410 [ 46.857608][ T354] ? ext4_ext_index_trans_blocks+0x100/0x100 [ 46.863588][ T354] ext4_ext_truncate+0x169/0x1f0 [ 46.868523][ T354] ext4_truncate+0xaea/0x1290 [ 46.873206][ T354] ? __ext4_mark_inode_dirty+0x610/0x610 [ 46.878929][ T354] ext4_evict_inode+0xf4f/0x1760 [ 46.883862][ T354] ? _raw_spin_unlock+0x4d/0x70 [ 46.888712][ T354] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 46.894604][ T354] ? inode_io_list_del_locked+0x1b3/0x210 [ 46.900322][ T354] ? _raw_spin_unlock+0x4d/0x70 [ 46.905168][ T354] ? ext4_inode_is_fast_symlink+0x370/0x370 [ 46.911061][ T354] evict+0x478/0x910 [ 46.914952][ T354] ? mode_strip_sgid+0x160/0x160 [ 46.919887][ T354] ? _raw_spin_lock+0x8e/0xe0 [ 46.924586][ T354] ? _raw_spin_trylock_bh+0x130/0x130 [ 46.930064][ T354] ? iput+0x291/0x7c0 [ 46.934376][ T354] ? __kasan_check_write+0x14/0x20 [ 46.939505][ T354] iput+0x638/0x7c0 [ 46.943320][ T354] do_unlinkat+0x33f/0x670 [ 46.947747][ T354] ? __check_object_size+0x2f4/0x3c0 [ 46.953027][ T354] ? fsnotify_link_count+0x90/0x90 [ 46.958134][ T354] ? getname_flags+0x206/0x500 [ 46.962925][ T354] __x64_sys_unlink+0x49/0x50 [ 46.967606][ T354] do_syscall_64+0x31/0x40 [ 46.972111][ T354] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 46.978086][ T354] RIP: 0033:0x7f9aa992f197 [ 46.982640][ T354] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 47.002514][ T354] RSP: 002b:00007ffcae10eec8 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 47.010954][ T354] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f9aa992f197 [ 47.019016][ T354] RDX: 00007ffcae10eef0 RSI: 00007ffcae10ef80 RDI: 00007ffcae10ef80 [ 47.026982][ T354] RBP: 00007ffcae10ef80 R08: 0000000000000000 R09: 0000000000000000 [ 47.034953][ T354] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffcae110070 [ 47.043041][ T354] R13: 00007f9aa99b2c05 R14: 000000000000b641 R15: 00007ffcae111140 [ 47.051037][ T354] [ 47.053642][ T354] The buggy address belongs to the page: [ 47.059461][ T354] page:ffffea0004acea80 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x12b3aa [ 47.069695][ T354] flags: 0x4000000000000000() [ 47.074376][ T354] raw: 4000000000000000 ffffea0004ace3c8 ffffea0004acea48 0000000000000000 [ 47.082958][ T354] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 47.091555][ T354] page dumped because: kasan: bad access detected [ 47.098242][ T354] page_owner tracks the page as freed [ 47.103622][ T354] page last allocated via order 0, migratetype Movable, gfp_mask 0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), pid 379, ts 46684101631, free_ts 46720062874 [ 47.119156][ T354] prep_new_page+0x179/0x180 [ 47.123743][ T354] get_page_from_freelist+0x2235/0x23d0 [ 47.129381][ T354] __alloc_pages_nodemask+0x268/0x5f0 [ 47.134854][ T354] pagecache_get_page+0x642/0x930 [ 47.139872][ T354] grab_cache_page_write_begin+0x59/0xb0 [ 47.145611][ T354] ext4_write_begin+0x27b/0x15a0 [ 47.150562][ T354] ext4_da_write_begin+0x455/0xe80 [ 47.155702][ T354] generic_perform_write+0x2be/0x510 [ 47.161020][ T354] ext4_buffered_write_iter+0x4b8/0x640 [ 47.166564][ T354] ext4_file_write_iter+0x536/0x1980 [ 47.171842][ T354] vfs_write+0x725/0xd60 [ 47.176077][ T354] ksys_write+0x140/0x240 [ 47.180403][ T354] __x64_sys_write+0x7b/0x90 [ 47.184988][ T354] do_syscall_64+0x31/0x40 [ 47.189403][ T354] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.195285][ T354] page last free stack trace: [ 47.199967][ T354] free_unref_page_prepare+0x2b7/0x2d0 [ 47.205425][ T354] free_unref_page_list+0x12e/0x9b0 [ 47.210618][ T354] release_pages+0xe38/0xe80 [ 47.215289][ T354] __pagevec_release+0x71/0xe0 [ 47.220048][ T354] truncate_inode_pages_range+0x771/0x15b0 [ 47.225848][ T354] truncate_pagecache+0x6c/0x90 [ 47.230786][ T354] ext4_setattr+0xdf0/0x1760 [ 47.235375][ T354] notify_change+0xab3/0xe40 [ 47.239970][ T354] do_truncate+0x186/0x210 [ 47.244556][ T354] do_sys_ftruncate+0x495/0x6b0 [ 47.249496][ T354] __x64_sys_ftruncate+0x60/0x70 [ 47.254425][ T354] do_syscall_64+0x31/0x40 [ 47.258837][ T354] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.264802][ T354] [ 47.267124][ T354] Memory state around the buggy address: [ 47.272854][ T354] ffff88812b3aac80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.280926][ T354] ffff88812b3aad00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.288981][ T354] >ffff88812b3aad80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.297035][ T354] ^ [ 47.302929][ T354] ffff88812b3aae00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.310986][ T354] ffff88812b3aae80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 47.319037][ T354] ================================================================== [ 47.327090][ T354] Disabling lock debugging due to kernel taint [ 47.495087][ T383] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 47.515991][ T383] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3342: comm syz.2.18: Allocating blocks 497-513 which overlap fs metadata [ 47.530248][ T383] EXT4-fs (loop2): pa ffff88810cf41000: logic 256, phys. 385, len 8 [ 47.538377][ T383] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 1 [ 47.715293][ T387] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 47.734445][ T387] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3342: comm syz.2.19: Allocating blocks 497-513 which overlap fs metadata [ 47.748596][ T387] EXT4-fs (loop2): pa ffff88810cf41930: logic 256, phys. 385, len 8 [ 47.756741][ T387] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 1 [ 47.965288][ T49] device bridge_slave_1 left promiscuous mode [ 47.971621][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 47.979196][ T49] device bridge_slave_0 left promiscuous mode [ 47.985465][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 47.986661][ T391] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue [ 48.008361][ T49] device veth1_macvtap left promiscuous mode [ 48.012935][ T391] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3342: comm syz.2.20: Allocating blocks 497-513 which overlap fs metadata [ 48.014952][ T49] device veth0_vlan left promiscuous mode [ 48.028427][ T391] EXT4-fs (loop2): pa ffff8881254ad2a0: logic 256, phys. 385, len 8 [ 48.041862][ T391] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4359: group 0, free 0, pa_free 1 [ 48.059344][ T354] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 110382377495456, count = 16 [ 48.074467][ T354] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 110382377470578, count = 24882 [ 48.089725][ T354] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 110382377470576, count = 16 [ 48.105563][ T354] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 109334439972560, count = 16 [ 48.120830][ T354] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 109334439945567, count = 26996 [ 48.135941][ T354] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 58498400743104, count = 16 [ 48.150594][ T354] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 58498400728678, count = 14438 [ 48.165616][ T354] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 58498400728672, count = 16 [ 53.013357][ T354] EXT4-fs error: 40461 callbacks suppressed [ 53.013373][ T354] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 106864728826167, count = 14438 [ 53.034877][ T354] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 106864728826160, count = 16 [ 53.049709][ T354] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 119165585640304, count = 16 [ 53.064523][ T354] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 119165585614346, count = 25972 [ 53.079665][ T354] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 119165585614336, count = 16 [ 53.094456][ T354] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 108162113850336, count = 16 [ 53.109242][ T354] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 108162113824373, count = 25968 [ 53.124284][ T354] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 108162113824368, count = 16 [ 53.139060][ T354] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 127682657292624, count = 16 [ 53.153774][ T354] EXT4-fs error (device loop2): ext4_free_blocks:5685: comm syz-executor: Freeing blocks not in datazone - block = 127682657280288, count = 12340