Warning: Permanently added '10.128.1.173' (ED25519) to the list of known hosts. 2025/12/24 22:02:08 parsed 1 programs [ 46.961759][ T28] audit: type=1400 audit(1766613729.255:106): avc: denied { unlink } for pid=396 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 46.984639][ T396] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.201890][ T28] audit: type=1401 audit(1766613730.495:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 48.249285][ T446] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.256385][ T446] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.264568][ T446] device bridge_slave_0 entered promiscuous mode [ 48.271561][ T446] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.278584][ T446] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.286380][ T446] device bridge_slave_1 entered promiscuous mode [ 48.326671][ T446] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.333744][ T446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.340990][ T446] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.348020][ T446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.365287][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.373026][ T10] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.380211][ T10] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.389308][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.397835][ T10] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.404942][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.413512][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.421857][ T10] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.428957][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.440498][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.450127][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.463358][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.474332][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.482856][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.490340][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.498808][ T446] device veth0_vlan entered promiscuous mode [ 48.508740][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.517746][ T446] device veth1_macvtap entered promiscuous mode [ 48.527046][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.537067][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/12/24 22:02:10 executed programs: 0 [ 48.717298][ T462] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.725088][ T462] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.732498][ T462] device bridge_slave_0 entered promiscuous mode [ 48.744129][ T462] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.751196][ T462] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.758481][ T462] device bridge_slave_1 entered promiscuous mode [ 48.805326][ T462] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.812374][ T462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.819604][ T462] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.826658][ T462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.853098][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.860672][ T357] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.868152][ T357] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.882482][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.891206][ T357] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.898232][ T357] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.906784][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.915247][ T357] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.922299][ T357] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.938137][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.947416][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.960866][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.976642][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.984761][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.992293][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.000587][ T462] device veth0_vlan entered promiscuous mode [ 49.016646][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.025723][ T462] device veth1_macvtap entered promiscuous mode [ 49.034605][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 49.043664][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.053822][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 49.062456][ T357] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.094156][ T473] loop2: detected capacity change from 0 to 1024 [ 49.100791][ T473] ======================================================= [ 49.100791][ T473] WARNING: The mand mount option has been deprecated and [ 49.100791][ T473] and is ignored by this kernel. Remove the mand [ 49.100791][ T473] option from the mount to silence this warning. [ 49.100791][ T473] ======================================================= [ 49.143013][ T473] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 49.154958][ T28] audit: type=1400 audit(1766613731.445:108): avc: denied { mount } for pid=472 comm="syz.2.16" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 49.176661][ T28] audit: type=1400 audit(1766613731.445:109): avc: denied { write } for pid=472 comm="syz.2.16" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.177159][ T473] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.16: Allocating blocks 497-513 which overlap fs metadata [ 49.198283][ T28] audit: type=1400 audit(1766613731.445:110): avc: denied { add_name } for pid=472 comm="syz.2.16" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 49.212151][ T473] EXT4-fs (loop2): pa ffff888123eea738: logic 256, phys. 385, len 8 [ 49.233256][ T28] audit: type=1400 audit(1766613731.445:111): avc: denied { create } for pid=472 comm="syz.2.16" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.240526][ T473] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 49.261202][ T28] audit: type=1400 audit(1766613731.445:112): avc: denied { read append open } for pid=472 comm="syz.2.16" path="/0/file1/memory.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.295188][ T28] audit: type=1400 audit(1766613731.555:113): avc: denied { write } for pid=472 comm="syz.2.16" name="memory.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.318279][ T28] audit: type=1400 audit(1766613731.555:114): avc: denied { mounton } for pid=472 comm="syz.2.16" path="/0/file1/bus" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 49.318524][ T462] EXT4-fs (loop2): unmounting filesystem. [ 49.340826][ T28] audit: type=1400 audit(1766613731.555:115): avc: denied { read write } for pid=472 comm="syz.2.16" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 49.376864][ T479] loop2: detected capacity change from 0 to 1024 [ 49.392629][ T479] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 49.413814][ T479] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.17: Allocating blocks 497-513 which overlap fs metadata [ 49.427926][ T479] EXT4-fs (loop2): pa ffff888123eea1f8: logic 256, phys. 385, len 8 [ 49.435945][ T479] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 49.450511][ T462] ================================================================== [ 49.458763][ T462] BUG: KASAN: use-after-free in ext4_ext_remove_space+0x2f43/0x3fb0 [ 49.466769][ T462] Read of size 4 at addr ffff888127426db8 by task syz-executor/462 [ 49.474640][ T462] [ 49.476953][ T462] CPU: 0 PID: 462 Comm: syz-executor Not tainted syzkaller #0 [ 49.484402][ T462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 49.494455][ T462] Call Trace: [ 49.497724][ T462] [ 49.500635][ T462] __dump_stack+0x21/0x24 [ 49.504945][ T462] dump_stack_lvl+0xee/0x150 [ 49.509532][ T462] ? __cfi_dump_stack_lvl+0x8/0x8 [ 49.514531][ T462] ? ext4_inode_block_valid+0x2d7/0x3f0 [ 49.520052][ T462] ? ext4_ext_remove_space+0x2f43/0x3fb0 [ 49.525658][ T462] print_address_description+0x71/0x200 [ 49.531179][ T462] print_report+0x4a/0x60 [ 49.535480][ T462] kasan_report+0x122/0x150 [ 49.539979][ T462] ? ext4_ext_remove_space+0x2f43/0x3fb0 [ 49.545593][ T462] __asan_report_load4_noabort+0x14/0x20 [ 49.551219][ T462] ext4_ext_remove_space+0x2f43/0x3fb0 [ 49.556742][ T462] ? ext4_es_free_extent+0x3de/0x4c0 [ 49.562003][ T462] ? ext4_es_insert_extent+0x2ce0/0x2ce0 [ 49.567657][ T462] ? ext4_da_release_space+0x1d6/0x480 [ 49.573103][ T462] ? __cfi_ext4_ext_remove_space+0x10/0x10 [ 49.578885][ T462] ? ext4_es_remove_extent+0x1d9/0x330 [ 49.584333][ T462] ext4_ext_truncate+0x200/0x320 [ 49.589271][ T462] ext4_truncate+0x9a6/0xf90 [ 49.593840][ T462] ? __cfi_ext4_truncate+0x10/0x10 [ 49.598943][ T462] ext4_evict_inode+0xcc3/0x1460 [ 49.603856][ T462] ? _raw_spin_unlock+0x4c/0x70 [ 49.608690][ T462] ? __cfi_ext4_evict_inode+0x10/0x10 [ 49.614040][ T462] ? _raw_spin_unlock+0x4c/0x70 [ 49.618887][ T462] ? inode_io_list_del+0x19b/0x1b0 [ 49.624029][ T462] ? __cfi_ext4_evict_inode+0x10/0x10 [ 49.629409][ T462] evict+0x493/0x890 [ 49.633287][ T462] ? __kasan_check_write+0x14/0x20 [ 49.638386][ T462] ? proc_nr_inodes+0x2f0/0x2f0 [ 49.643214][ T462] ? lockref_put_return+0x152/0x1c0 [ 49.648399][ T462] ? __cfi_lockref_put_return+0x10/0x10 [ 49.653925][ T462] ? __kasan_check_write+0x14/0x20 [ 49.659030][ T462] iput+0x620/0x670 [ 49.662817][ T462] do_unlinkat+0x375/0x6b0 [ 49.667213][ T462] ? __cfi_do_unlinkat+0x10/0x10 [ 49.672125][ T462] ? getname_flags+0x206/0x500 [ 49.676889][ T462] __x64_sys_unlink+0x49/0x50 [ 49.681637][ T462] x64_sys_call+0x958/0x9a0 [ 49.686137][ T462] do_syscall_64+0x4c/0xa0 [ 49.690819][ T462] ? clear_bhb_loop+0x30/0x80 [ 49.695500][ T462] ? clear_bhb_loop+0x30/0x80 [ 49.700267][ T462] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 49.706146][ T462] RIP: 0033:0x7f575038df57 [ 49.710542][ T462] Code: 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 49.730132][ T462] RSP: 002b:00007ffc385ac298 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 49.738537][ T462] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f575038df57 [ 49.747028][ T462] RDX: 00007ffc385ac2c0 RSI: 00007ffc385ac350 RDI: 00007ffc385ac350 [ 49.755074][ T462] RBP: 00007ffc385ac350 R08: 0000000000000000 R09: 0000000000000000 [ 49.763108][ T462] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffc385ad440 [ 49.771061][ T462] R13: 00007f5750410b55 R14: 000000000000c0ef R15: 00007ffc385ae510 [ 49.779033][ T462] [ 49.782039][ T462] [ 49.784345][ T462] The buggy address belongs to the physical page: [ 49.790743][ T462] page:ffffea00049d0980 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x127426 [ 49.800953][ T462] flags: 0x4000000000000000(zone=1) [ 49.806141][ T462] raw: 4000000000000000 dead000000000100 dead000000000122 0000000000000000 [ 49.815238][ T462] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 49.823859][ T462] page dumped because: kasan: bad access detected [ 49.830252][ T462] page_owner tracks the page as freed [ 49.835593][ T462] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 414, tgid 414 (syz-executor), ts 47809142508, free_ts 47882119143 [ 49.853112][ T462] post_alloc_hook+0x1f5/0x210 [ 49.857877][ T462] prep_new_page+0x1c/0x110 [ 49.862464][ T462] get_page_from_freelist+0x2c7b/0x2cf0 [ 49.868034][ T462] __alloc_pages+0x1c3/0x450 [ 49.872600][ T462] __folio_alloc+0x12/0x40 [ 49.876996][ T462] do_fault+0x4c0/0x1df0 [ 49.881212][ T462] handle_mm_fault+0x12fa/0x2640 [ 49.886143][ T462] do_user_addr_fault+0x905/0x1050 [ 49.891240][ T462] exc_page_fault+0x51/0xb0 [ 49.895824][ T462] asm_exc_page_fault+0x27/0x30 [ 49.900749][ T462] page last free stack trace: [ 49.905399][ T462] free_unref_page_prepare+0x742/0x750 [ 49.910864][ T462] free_unref_page_list+0x112/0x8b0 [ 49.916052][ T462] release_pages+0xad1/0xb20 [ 49.920627][ T462] free_pages_and_swap_cache+0x86/0xa0 [ 49.926179][ T462] tlb_finish_mmu+0x1aa/0x370 [ 49.930851][ T462] exit_mmap+0x3da/0xbb0 [ 49.935091][ T462] __mmput+0x93/0x360 [ 49.939068][ T462] mmput+0x4b/0x150 [ 49.942874][ T462] do_exit+0x981/0x2650 [ 49.947026][ T462] do_group_exit+0x210/0x2d0 [ 49.951610][ T462] get_signal+0x13b5/0x1520 [ 49.956106][ T462] arch_do_signal_or_restart+0xb0/0x1030 [ 49.961765][ T462] exit_to_user_mode_loop+0x7a/0xb0 [ 49.966948][ T462] exit_to_user_mode_prepare+0x87/0xd0 [ 49.972391][ T462] syscall_exit_to_user_mode+0x1a/0x30 [ 49.977837][ T462] do_syscall_64+0x58/0xa0 [ 49.982231][ T462] [ 49.984531][ T462] Memory state around the buggy address: [ 49.990137][ T462] ffff888127426c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 49.998214][ T462] ffff888127426d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 50.006247][ T462] >ffff888127426d80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 50.014277][ T462] ^ [ 50.020141][ T462] ffff888127426e00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 50.028174][ T462] ffff888127426e80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 50.036206][ T462] ================================================================== [ 50.045964][ T462] Disabling lock debugging due to kernel taint [ 50.053460][ T462] EXT4-fs (loop2): unmounting filesystem. [ 50.069605][ T483] loop2: detected capacity change from 0 to 1024 [ 50.082329][ T483] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.100521][ T483] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.18: Allocating blocks 497-513 which overlap fs metadata [ 50.115143][ T483] EXT4-fs (loop2): pa ffff888123fd1150: logic 256, phys. 385, len 8 [ 50.123815][ T483] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 50.141244][ T462] EXT4-fs (loop2): unmounting filesystem. [ 50.159328][ T487] loop2: detected capacity change from 0 to 1024 [ 50.184321][ T487] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.202449][ T487] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.19: Allocating blocks 497-513 which overlap fs metadata [ 50.216610][ T487] EXT4-fs (loop2): pa ffff888123f5ee70: logic 256, phys. 385, len 8 [ 50.224647][ T487] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 50.240151][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 112589218958528, count = 16 [ 50.255049][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 112589218932326, count = 26214 [ 50.270279][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 112589218932320, count = 16 [ 50.285516][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 126642230825680, count = 16 [ 50.300482][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 126642230817396, count = 8292 [ 50.315577][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 126642230817392, count = 16 [ 50.330521][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 62012385708432, count = 16 [ 50.345421][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 62012385682229, count = 26214 [ 50.571743][ T8] device bridge_slave_1 left promiscuous mode [ 50.577872][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.585726][ T8] device bridge_slave_0 left promiscuous mode [ 50.592107][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.600157][ T8] device veth1_macvtap left promiscuous mode [ 50.606444][ T8] device veth0_vlan left promiscuous mode [ 55.211198][ T462] EXT4-fs error: 37893 callbacks suppressed [ 55.211216][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 108170700547424, count = 16 [ 55.232787][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 35392534566080, count = 16 [ 55.248241][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 35392534552676, count = 13412 [ 55.263263][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 35392534552672, count = 16 [ 55.278844][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 112589218958528, count = 16 [ 55.293701][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 112589218932326, count = 26214 [ 55.308741][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 127952229419488, count = 16 [ 55.323470][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 127952229393010, count = 26479 [ 55.338582][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 127952229393008, count = 16 [ 55.353474][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 129125649535968, count = 16 [ 55.683948][ T462] EXT4-fs (loop2): unmounting filesystem. [ 55.698318][ T492] loop2: detected capacity change from 0 to 1024 [ 55.714752][ T492] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 55.731519][ T492] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.20: Allocating blocks 497-513 which overlap fs metadata [ 55.745539][ T492] EXT4-fs (loop2): pa ffff888123f5e348: logic 256, phys. 385, len 8 [ 55.753596][ T492] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 55.768981][ T462] EXT4-fs (loop2): unmounting filesystem. 2025/12/24 22:02:18 executed programs: 7 [ 55.783010][ T497] loop2: detected capacity change from 0 to 1024 [ 55.792598][ T497] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 55.810729][ T497] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.21: Allocating blocks 497-513 which overlap fs metadata [ 55.825577][ T497] EXT4-fs (loop2): pa ffff888129944498: logic 256, phys. 385, len 8 [ 55.833753][ T497] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 55.848304][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 92712762901136, count = 16 [ 55.862963][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 92712762884425, count = 16720 [ 55.877894][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 92712762884416, count = 16 [ 55.892768][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 104785664382096, count = 16 [ 55.907819][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 104785664364355, count = 17748 [ 55.922902][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 104785664364352, count = 16 [ 55.937636][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 92768160686192, count = 16 [ 55.952281][ T462] EXT4-fs error (device loop2): ext4_free_blocks:6205: comm syz-executor: Freeing blocks not in datazone - block = 92768160661842, count = 24352