Warning: Permanently added '10.128.1.192' (ED25519) to the list of known hosts. 2026/04/23 21:36:11 parsed 1 programs [ 44.047730][ T28] audit: type=1400 audit(1776980172.400:106): avc: denied { unlink } for pid=389 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 44.285358][ T389] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 45.015630][ T28] audit: type=1401 audit(1776980173.360:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 45.485174][ T438] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.492265][ T438] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.499707][ T438] device bridge_slave_0 entered promiscuous mode [ 45.506740][ T438] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.514164][ T438] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.521908][ T438] device bridge_slave_1 entered promiscuous mode [ 45.560513][ T438] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.567679][ T438] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.575094][ T438] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.582182][ T438] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.598905][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.606548][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.613854][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.622524][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.630740][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.637891][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.646424][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.654879][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.661940][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.672920][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.682249][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 45.695088][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 45.705939][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 45.714536][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 45.722282][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 45.730548][ T438] device veth0_vlan entered promiscuous mode [ 45.740494][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 45.749434][ T438] device veth1_macvtap entered promiscuous mode [ 45.758640][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.768728][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2026/04/23 21:36:14 executed programs: 0 [ 46.032211][ T454] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.039333][ T454] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.046672][ T454] device bridge_slave_0 entered promiscuous mode [ 46.054637][ T454] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.061931][ T454] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.069461][ T454] device bridge_slave_1 entered promiscuous mode [ 46.113254][ T454] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.120410][ T454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.127702][ T454] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.134727][ T454] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.155260][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.163277][ T306] bridge0: port 1(bridge_slave_0) entered disabled state [ 46.171417][ T306] bridge0: port 2(bridge_slave_1) entered disabled state [ 46.184737][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.193023][ T306] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.200065][ T306] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.208877][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.217084][ T306] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.224134][ T306] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.235528][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.249176][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.262704][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.273504][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.281692][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.289840][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.304028][ T454] device veth0_vlan entered promiscuous mode [ 46.313428][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.322433][ T454] device veth1_macvtap entered promiscuous mode [ 46.331618][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.347954][ T306] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.373350][ T459] loop2: detected capacity change from 0 to 1024 [ 46.380126][ T459] ======================================================= [ 46.380126][ T459] WARNING: The mand mount option has been deprecated and [ 46.380126][ T459] and is ignored by this kernel. Remove the mand [ 46.380126][ T459] option from the mount to silence this warning. [ 46.380126][ T459] ======================================================= [ 46.416570][ T459] EXT4-fs: Ignoring removed bh option [ 46.422599][ T459] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 46.439339][ T459] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 46.448843][ T28] audit: type=1400 audit(1776980174.800:108): avc: denied { mount } for pid=458 comm="syz.2.17" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 46.466214][ T459] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3850: comm syz.2.17: Allocating blocks 497-513 which overlap fs metadata [ 46.470990][ T28] audit: type=1400 audit(1776980174.800:109): avc: denied { write } for pid=458 comm="syz.2.17" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.484933][ T459] EXT4-fs (loop2): pa ffff8881237333f0: logic 64, phys. 193, len 20 [ 46.506680][ T28] audit: type=1400 audit(1776980174.800:110): avc: denied { add_name } for pid=458 comm="syz.2.17" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 46.513990][ T459] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 1 [ 46.534749][ T28] audit: type=1400 audit(1776980174.800:111): avc: denied { create } for pid=458 comm="syz.2.17" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 46.564779][ T306] ================================================================== [ 46.566827][ T28] audit: type=1400 audit(1776980174.810:112): avc: denied { read write } for pid=458 comm="syz.2.17" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.572941][ T306] BUG: KASAN: slab-out-of-bounds in ext4_find_extent+0xbeb/0xe20 [ 46.572978][ T306] Read of size 4 at addr ffff88811b314c94 by task kworker/u4:3/306 [ 46.572991][ T306] [ 46.572999][ T306] CPU: 1 PID: 306 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 46.596188][ T28] audit: type=1400 audit(1776980174.810:113): avc: denied { open } for pid=458 comm="syz.2.17" path="/0/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.603082][ T306] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 46.603098][ T306] Workqueue: writeback wb_workfn (flush-7:2) [ 46.603135][ T306] Call Trace: [ 46.611227][ T28] audit: type=1400 audit(1776980174.830:114): avc: denied { setattr } for pid=458 comm="syz.2.17" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 46.613310][ T306] [ 46.687458][ T306] __dump_stack+0x21/0x24 [ 46.691778][ T306] dump_stack_lvl+0x110/0x170 [ 46.696488][ T306] ? __cfi_dump_stack_lvl+0x8/0x8 [ 46.701501][ T306] ? ext4_find_extent+0xbeb/0xe20 [ 46.706532][ T306] print_address_description+0x71/0x200 [ 46.712071][ T306] print_report+0x4a/0x60 [ 46.716402][ T306] kasan_report+0x122/0x150 [ 46.720904][ T306] ? ext4_find_extent+0xbeb/0xe20 [ 46.725921][ T306] __asan_report_load4_noabort+0x14/0x20 [ 46.731541][ T306] ext4_find_extent+0xbeb/0xe20 [ 46.736379][ T306] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 46.742288][ T306] ext4_ext_map_blocks+0x207/0x61d0 [ 46.747497][ T306] ? kasan_set_track+0x60/0x70 [ 46.752244][ T306] ? kasan_set_track+0x4b/0x70 [ 46.756985][ T306] ? kasan_save_alloc_info+0x25/0x30 [ 46.762256][ T306] ? __kasan_slab_alloc+0x72/0x80 [ 46.767265][ T306] ? slab_post_alloc_hook+0x4f/0x2d0 [ 46.772630][ T306] ? kmem_cache_alloc+0x16e/0x330 [ 46.777814][ T306] ? ext4_alloc_io_end_vec+0x2a/0x160 [ 46.783259][ T306] ? ext4_writepages+0x10e9/0x30e0 [ 46.788448][ T306] ? do_writepages+0x3a4/0x5f0 [ 46.793192][ T306] ? __writeback_single_inode+0xc6/0xad0 [ 46.798826][ T306] ? writeback_sb_inodes+0xa10/0x15d0 [ 46.804203][ T306] ? wb_writeback+0x40b/0x9d0 [ 46.808895][ T306] ? wb_workfn+0x378/0xeb0 [ 46.813300][ T306] ? process_one_work+0x71f/0xc40 [ 46.818392][ T306] ? worker_thread+0xa29/0x11e0 [ 46.823225][ T306] ? kthread+0x281/0x320 [ 46.827449][ T306] ? ret_from_fork+0x1f/0x30 [ 46.832025][ T306] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 46.837816][ T306] ? ext4_es_lookup_extent+0x54c/0x900 [ 46.843257][ T306] ext4_map_blocks+0x9d8/0x1b70 [ 46.848092][ T306] ? __cfi_ext4_map_blocks+0x10/0x10 [ 46.853457][ T306] ? ext4_inode_journal_mode+0x19a/0x480 [ 46.859098][ T306] ext4_writepages+0x1409/0x30e0 [ 46.864030][ T306] ? __cfi_ext4_writepages+0x10/0x10 [ 46.869302][ T306] ? __dev_queue_xmit+0x10ea/0x3470 [ 46.874485][ T306] ? xas_start+0x317/0x3e0 [ 46.878890][ T306] ? __kasan_check_write+0x14/0x20 [ 46.884159][ T306] ? __cfi_ext4_writepages+0x10/0x10 [ 46.889448][ T306] do_writepages+0x3a4/0x5f0 [ 46.894116][ T306] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 46.899735][ T306] ? __cfi_do_writepages+0x10/0x10 [ 46.904843][ T306] ? __kasan_check_write+0x14/0x20 [ 46.909977][ T306] ? _raw_spin_lock+0x94/0xf0 [ 46.914726][ T306] __writeback_single_inode+0xc6/0xad0 [ 46.920169][ T306] ? inode_io_list_move_locked+0x366/0x3d0 [ 46.926051][ T306] writeback_sb_inodes+0xa10/0x15d0 [ 46.931236][ T306] ? queue_io+0x4c0/0x4c0 [ 46.935566][ T306] ? __kasan_check_read+0x11/0x20 [ 46.940575][ T306] ? queue_io+0x382/0x4c0 [ 46.944886][ T306] wb_writeback+0x40b/0x9d0 [ 46.949377][ T306] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 46.955340][ T306] ? set_worker_desc+0x1ba/0x1f0 [ 46.960352][ T306] ? __kasan_check_write+0x14/0x20 [ 46.965704][ T306] ? kvm_sched_clock_read+0x18/0x40 [ 46.970919][ T306] ? sched_clock+0x9/0x10 [ 46.975245][ T306] ? sched_clock_cpu+0x6e/0x260 [ 46.980163][ T306] wb_workfn+0x378/0xeb0 [ 46.984391][ T306] ? __cfi_wb_workfn+0x10/0x10 [ 46.989134][ T306] ? kthread_data+0x50/0xc0 [ 46.993622][ T306] ? _raw_spin_unlock+0x4c/0x70 [ 46.998459][ T306] ? finish_task_switch+0x16b/0x7b0 [ 47.003675][ T306] ? __switch_to_asm+0x3a/0x60 [ 47.008427][ T306] ? __schedule+0xbae/0x1500 [ 47.013007][ T306] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 47.018534][ T306] process_one_work+0x71f/0xc40 [ 47.023365][ T306] worker_thread+0xa29/0x11e0 [ 47.028028][ T306] ? _raw_spin_lock_irqsave+0xc2/0x130 [ 47.033580][ T306] ? __kthread_parkme+0x142/0x180 [ 47.038595][ T306] kthread+0x281/0x320 [ 47.042657][ T306] ? __cfi_worker_thread+0x10/0x10 [ 47.047750][ T306] ? __cfi_kthread+0x10/0x10 [ 47.052325][ T306] ret_from_fork+0x1f/0x30 [ 47.056810][ T306] [ 47.059810][ T306] [ 47.062110][ T306] Allocated by task 39: [ 47.066250][ T306] kasan_set_track+0x4b/0x70 [ 47.070830][ T306] kasan_save_alloc_info+0x25/0x30 [ 47.075985][ T306] __kasan_kmalloc+0x95/0xb0 [ 47.080649][ T306] __kmalloc_node_track_caller+0xb1/0x1e0 [ 47.086435][ T306] __alloc_skb+0x236/0x4b0 [ 47.090842][ T306] mld_newpack+0x142/0xa20 [ 47.095247][ T306] add_grhead+0x67/0x300 [ 47.099615][ T306] add_grec+0xf19/0x11d0 [ 47.103841][ T306] ipv6_mc_dad_complete+0x25a/0x600 [ 47.109030][ T306] addrconf_dad_completed+0x731/0xe80 [ 47.114412][ T306] addrconf_dad_work+0xc41/0x14d0 [ 47.119515][ T306] process_one_work+0x71f/0xc40 [ 47.124359][ T306] worker_thread+0xa29/0x11e0 [ 47.129043][ T306] kthread+0x281/0x320 [ 47.133101][ T306] ret_from_fork+0x1f/0x30 [ 47.137502][ T306] [ 47.139814][ T306] Freed by task 39: [ 47.143599][ T306] kasan_set_track+0x4b/0x70 [ 47.148170][ T306] kasan_save_free_info+0x31/0x50 [ 47.153177][ T306] ____kasan_slab_free+0x132/0x180 [ 47.158273][ T306] __kasan_slab_free+0x11/0x20 [ 47.163104][ T306] slab_free_freelist_hook+0xc2/0x190 [ 47.168456][ T306] __kmem_cache_free+0xb7/0x1b0 [ 47.173325][ T306] kfree+0x6f/0xf0 [ 47.177052][ T306] skb_release_data+0x63f/0x890 [ 47.181975][ T306] kfree_skb_reason+0xd4/0x230 [ 47.186728][ T306] kfree_skb_list_reason+0x47/0x70 [ 47.191842][ T306] __dev_queue_xmit+0x1e07/0x3470 [ 47.196947][ T306] neigh_resolve_output+0x6f5/0x7f0 [ 47.202238][ T306] ip6_finish_output2+0x1606/0x18a0 [ 47.207416][ T306] ip6_finish_output+0x5f9/0xbb0 [ 47.212333][ T306] ip6_output+0x1fa/0x410 [ 47.216674][ T306] mld_sendpack+0x830/0xe90 [ 47.221166][ T306] ipv6_mc_dad_complete+0x299/0x600 [ 47.226447][ T306] addrconf_dad_completed+0x731/0xe80 [ 47.231801][ T306] addrconf_dad_work+0xc41/0x14d0 [ 47.236809][ T306] process_one_work+0x71f/0xc40 [ 47.241650][ T306] worker_thread+0xa29/0x11e0 [ 47.246320][ T306] kthread+0x281/0x320 [ 47.250389][ T306] ret_from_fork+0x1f/0x30 [ 47.254798][ T306] [ 47.257102][ T306] The buggy address belongs to the object at ffff88811b314000 [ 47.257102][ T306] which belongs to the cache kmalloc-2k of size 2048 [ 47.271306][ T306] The buggy address is located 1172 bytes to the right of [ 47.271306][ T306] 2048-byte region [ffff88811b314000, ffff88811b314800) [ 47.285255][ T306] [ 47.287557][ T306] The buggy address belongs to the physical page: [ 47.293943][ T306] page:ffffea00046cc400 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11b310 [ 47.304169][ T306] head:ffffea00046cc400 order:3 compound_mapcount:0 compound_pincount:0 [ 47.312589][ T306] flags: 0x4000000000010200(slab|head|zone=1) [ 47.318746][ T306] raw: 4000000000010200 0000000000000000 dead000000000122 ffff888100043200 [ 47.327311][ T306] raw: 0000000000000000 0000000000080008 00000001ffffffff 0000000000000000 [ 47.336216][ T306] page dumped because: kasan: bad access detected [ 47.342622][ T306] page_owner tracks the page as allocated [ 47.348515][ T306] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x1d28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC|__GFP_HARDWALL), pid 454, tgid 454 (syz-executor), ts 46017725883, free_ts 45820524605 [ 47.372137][ T306] post_alloc_hook+0x1f5/0x210 [ 47.376992][ T306] prep_new_page+0x1c/0x110 [ 47.381481][ T306] get_page_from_freelist+0x2d12/0x2d80 [ 47.387009][ T306] __alloc_pages+0x1fa/0x610 [ 47.391585][ T306] alloc_slab_page+0x6e/0xf0 [ 47.396343][ T306] new_slab+0x98/0x3d0 [ 47.400413][ T306] ___slab_alloc+0x6bd/0xb20 [ 47.405014][ T306] __slab_alloc+0x5e/0xa0 [ 47.409351][ T306] __kmem_cache_alloc_node+0x203/0x2c0 [ 47.414790][ T306] __kmalloc_node_track_caller+0xa0/0x1e0 [ 47.420599][ T306] pskb_expand_head+0x1b0/0x1210 [ 47.425531][ T306] netlink_trim+0x193/0x230 [ 47.430016][ T306] netlink_broadcast+0x6e/0x1180 [ 47.434932][ T306] nlmsg_notify+0xe6/0x1a0 [ 47.439327][ T306] rtmsg_ifinfo+0xea/0x130 [ 47.443725][ T306] register_netdevice+0x1273/0x1530 [ 47.448914][ T306] page last free stack trace: [ 47.453571][ T306] free_unref_page_prepare+0x7f8/0x800 [ 47.459022][ T306] free_unref_page+0x95/0x540 [ 47.463709][ T306] __free_pages+0x67/0x100 [ 47.468138][ T306] __free_slab+0xca/0x1a0 [ 47.472480][ T306] __unfreeze_partials+0x160/0x190 [ 47.477583][ T306] put_cpu_partial+0xa9/0x100 [ 47.482248][ T306] __slab_free+0x1c4/0x280 [ 47.486667][ T306] ___cache_free+0xbf/0xd0 [ 47.491076][ T306] qlist_free_all+0xc6/0x140 [ 47.495647][ T306] kasan_quarantine_reduce+0x14a/0x170 [ 47.501272][ T306] __kasan_slab_alloc+0x24/0x80 [ 47.506124][ T306] slab_post_alloc_hook+0x4f/0x2d0 [ 47.511235][ T306] kmem_cache_alloc+0x16e/0x330 [ 47.516185][ T306] getname_flags+0xb9/0x500 [ 47.520680][ T306] getname+0x19/0x20 [ 47.524566][ T306] do_sys_openat2+0xeb/0x810 [ 47.529235][ T306] [ 47.531539][ T306] Memory state around the buggy address: [ 47.537149][ T306] ffff88811b314b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 47.545203][ T306] ffff88811b314c00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 47.553244][ T306] >ffff88811b314c80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 47.561284][ T306] ^ [ 47.565939][ T306] ffff88811b314d00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 47.573975][ T306] ffff88811b314d80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 47.582097][ T306] ================================================================== [ 47.599024][ T306] Disabling lock debugging due to kernel taint [ 47.605300][ T306] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 1 with error 117 [ 47.605646][ T28] audit: type=1400 audit(1776980175.950:115): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 47.617989][ T306] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.617989][ T306] [ 47.653454][ T454] EXT4-fs (loop2): unmounting filesystem. [ 47.669491][ T465] loop2: detected capacity change from 0 to 1024 [ 47.676171][ T465] EXT4-fs: Ignoring removed bh option [ 47.682941][ T465] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.698772][ T465] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 47.716144][ T465] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3850: comm syz.2.18: Allocating blocks 497-513 which overlap fs metadata [ 47.730422][ T465] EXT4-fs (loop2): pa ffff88810c3ef9d8: logic 64, phys. 193, len 20 [ 47.738443][ T465] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 1 [ 47.750044][ T10] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 1 with error 117 [ 47.762434][ T10] EXT4-fs (loop2): This should not happen!! Data will be lost [ 47.762434][ T10] [ 47.775519][ T454] EXT4-fs (loop2): unmounting filesystem. [ 47.792045][ T469] loop2: detected capacity change from 0 to 1024 [ 47.799345][ T469] EXT4-fs: Ignoring removed bh option [ 47.805111][ T469] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.828558][ T469] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 47.846855][ T469] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3850: comm syz.2.19: Allocating blocks 497-513 which overlap fs metadata [ 47.861559][ T469] EXT4-fs (loop2): pa ffff88812375bbd0: logic 64, phys. 193, len 20 [ 47.869724][ T469] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 1 [ 47.882282][ T335] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4878: inode #15: block 36: len 1: ext4_ext_map_blocks returned -28 [ 47.898031][ T454] EXT4-fs (loop2): unmounting filesystem. [ 47.912052][ T473] loop2: detected capacity change from 0 to 1024 [ 47.918892][ T473] EXT4-fs: Ignoring removed bh option [ 47.928886][ T473] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.948316][ T473] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 47.965663][ T473] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3850: comm syz.2.20: Allocating blocks 497-513 which overlap fs metadata [ 47.980183][ T473] EXT4-fs (loop2): pa ffff88812375b540: logic 64, phys. 193, len 20 [ 47.988355][ T473] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 1 [ 48.000589][ T10] ------------[ cut here ]------------ [ 48.006053][ T10] kernel BUG at fs/ext4/extents.c:3190! [ 48.012216][ T10] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 48.018283][ T10] CPU: 1 PID: 10 Comm: kworker/u4:1 Tainted: G B syzkaller #0 [ 48.027134][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 48.037179][ T10] Workqueue: writeback wb_workfn (flush-7:2) [ 48.043179][ T10] RIP: 0010:ext4_split_extent_at+0xf62/0xf80 [ 48.049149][ T10] Code: ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 3f fb ff ff 4c 89 f7 49 89 f7 e8 4b b1 cf ff 4c 89 fe e9 2c fb ff ff e8 ae 21 8a ff <0f> 0b e8 a7 21 8a ff 0f 0b e8 a0 21 8a ff 0f 0b e8 99 21 8a ff 0f [ 48.068739][ T10] RSP: 0018:ffffc900000a6aa0 EFLAGS: 00010293 [ 48.074791][ T10] RAX: ffffffff81e754d2 RBX: 0000000000000000 RCX: ffff88810029a880 [ 48.082737][ T10] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000024 [ 48.090686][ T10] RBP: ffffc900000a6c20 R08: 0000000000000010 R09: 000000004000043b [ 48.098635][ T10] R10: dffffc0000000000 R11: ffffed1023c186aa R12: dffffc0000000000 [ 48.106596][ T10] R13: 0000000000000000 R14: 0000000000000010 R15: ffff88811e0c3500 [ 48.114558][ T10] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 48.123566][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.130133][ T10] CR2: 000055558ef6b908 CR3: 000000010fe31000 CR4: 00000000003506a0 [ 48.138112][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.146064][ T10] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.154107][ T10] Call Trace: [ 48.157477][ T10] [ 48.160462][ T10] ? ext4_ext_try_to_merge_right+0x820/0x820 [ 48.166444][ T10] ext4_split_extent+0x363/0x4a0 [ 48.171414][ T10] ext4_ext_map_blocks+0x10e5/0x61d0 [ 48.176789][ T10] ? kasan_set_track+0x60/0x70 [ 48.181564][ T10] ? kasan_set_track+0x4b/0x70 [ 48.186318][ T10] ? kasan_save_alloc_info+0x25/0x30 [ 48.191587][ T10] ? __kasan_slab_alloc+0x72/0x80 [ 48.196606][ T10] ? kmem_cache_alloc+0x16e/0x330 [ 48.201645][ T10] ? ext4_alloc_io_end_vec+0x2a/0x160 [ 48.207031][ T10] ? ext4_writepages+0x10e9/0x30e0 [ 48.212144][ T10] ? do_writepages+0x3a4/0x5f0 [ 48.216898][ T10] ? __writeback_single_inode+0xc6/0xad0 [ 48.222624][ T10] ? writeback_sb_inodes+0xa10/0x15d0 [ 48.227989][ T10] ? wb_writeback+0x40b/0x9d0 [ 48.232649][ T10] ? wb_workfn+0x378/0xeb0 [ 48.237045][ T10] ? process_one_work+0x71f/0xc40 [ 48.242054][ T10] ? worker_thread+0xa29/0x11e0 [ 48.246886][ T10] ? kthread+0x281/0x320 [ 48.251227][ T10] ? ret_from_fork+0x1f/0x30 [ 48.255805][ T10] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 48.261438][ T10] ? ext4_es_lookup_extent+0x54c/0x900 [ 48.266897][ T10] ext4_map_blocks+0x9d8/0x1b70 [ 48.271731][ T10] ? __cfi_ext4_map_blocks+0x10/0x10 [ 48.277002][ T10] ? ext4_inode_journal_mode+0x19a/0x480 [ 48.282705][ T10] ext4_writepages+0x1409/0x30e0 [ 48.287837][ T10] ? enqueue_task_fair+0xbee/0x1d40 [ 48.293045][ T10] ? __cfi_ext4_writepages+0x10/0x10 [ 48.298334][ T10] ? __cfi____update_load_sum+0x10/0x10 [ 48.304082][ T10] ? xas_start+0x317/0x3e0 [ 48.308490][ T10] ? __kasan_check_write+0x14/0x20 [ 48.313609][ T10] ? __filemap_get_folio+0x838/0xa60 [ 48.319245][ T10] ? __cfi_ext4_writepages+0x10/0x10 [ 48.324533][ T10] do_writepages+0x3a4/0x5f0 [ 48.329170][ T10] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 48.334808][ T10] ? __cfi_do_writepages+0x10/0x10 [ 48.340001][ T10] ? __kasan_check_write+0x14/0x20 [ 48.345111][ T10] ? _raw_spin_lock+0x94/0xf0 [ 48.349823][ T10] __writeback_single_inode+0xc6/0xad0 [ 48.355278][ T10] ? inode_io_list_move_locked+0x366/0x3d0 [ 48.361076][ T10] writeback_sb_inodes+0xa10/0x15d0 [ 48.366494][ T10] ? queue_io+0x4c0/0x4c0 [ 48.370872][ T10] ? __kasan_check_read+0x11/0x20 [ 48.375882][ T10] ? queue_io+0x382/0x4c0 [ 48.380210][ T10] wb_writeback+0x40b/0x9d0 [ 48.384699][ T10] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 48.390661][ T10] ? set_worker_desc+0x1ba/0x1f0 [ 48.395604][ T10] ? __kasan_check_write+0x14/0x20 [ 48.400698][ T10] ? kvm_sched_clock_read+0x18/0x40 [ 48.405886][ T10] wb_workfn+0x378/0xeb0 [ 48.410121][ T10] ? save_fpregs_to_fpstate+0x192/0x220 [ 48.415737][ T10] ? __cfi_wb_workfn+0x10/0x10 [ 48.420479][ T10] ? kthread_data+0x50/0xc0 [ 48.424963][ T10] ? _raw_spin_unlock+0x4c/0x70 [ 48.429798][ T10] ? finish_task_switch+0x16b/0x7b0 [ 48.435247][ T10] ? __switch_to_asm+0x3a/0x60 [ 48.439994][ T10] ? __schedule+0xbae/0x1500 [ 48.444565][ T10] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 48.450095][ T10] process_one_work+0x71f/0xc40 [ 48.454926][ T10] worker_thread+0xa29/0x11e0 [ 48.459626][ T10] ? __kthread_parkme+0x142/0x180 [ 48.464654][ T10] kthread+0x281/0x320 [ 48.468726][ T10] ? __cfi_worker_thread+0x10/0x10 [ 48.473822][ T10] ? __cfi_kthread+0x10/0x10 [ 48.478403][ T10] ret_from_fork+0x1f/0x30 [ 48.482807][ T10] [ 48.485815][ T10] Modules linked in: [ 48.490747][ T10] ---[ end trace 0000000000000000 ]--- [ 48.496219][ T10] RIP: 0010:ext4_split_extent_at+0xf62/0xf80 [ 48.502532][ T10] Code: ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c 3f fb ff ff 4c 89 f7 49 89 f7 e8 4b b1 cf ff 4c 89 fe e9 2c fb ff ff e8 ae 21 8a ff <0f> 0b e8 a7 21 8a ff 0f 0b e8 a0 21 8a ff 0f 0b e8 99 21 8a ff 0f [ 48.522257][ T10] RSP: 0018:ffffc900000a6aa0 EFLAGS: 00010293 [ 48.528415][ T10] RAX: ffffffff81e754d2 RBX: 0000000000000000 RCX: ffff88810029a880 [ 48.536572][ T10] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000024 [ 48.544878][ T10] RBP: ffffc900000a6c20 R08: 0000000000000010 R09: 000000004000043b [ 48.553037][ T10] R10: dffffc0000000000 R11: ffffed1023c186aa R12: dffffc0000000000 [ 48.561099][ T10] R13: 0000000000000000 R14: 0000000000000010 R15: ffff88811e0c3500 [ 48.569220][ T10] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 48.578316][ T10] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.584896][ T10] CR2: 000055558ef6b908 CR3: 000000010fe3e000 CR4: 00000000003506a0 [ 48.593364][ T10] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.601558][ T10] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.609613][ T10] Kernel panic - not syncing: Fatal exception [ 48.616014][ T10] Kernel Offset: disabled [ 48.620332][ T10] Rebooting in 86400 seconds..