Warning: Permanently added '10.128.0.135' (ED25519) to the list of known hosts. 2026/04/14 19:38:38 parsed 1 programs [ 48.145095][ T28] audit: type=1400 audit(1776195519.222:106): avc: denied { unlink } for pid=382 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 48.196269][ T382] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 49.265302][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.272718][ T412] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.280403][ T412] device bridge_slave_0 entered promiscuous mode [ 49.287528][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.294709][ T412] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.302353][ T412] device bridge_slave_1 entered promiscuous mode [ 49.343978][ T412] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.351242][ T412] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.359257][ T412] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.366898][ T412] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.387453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.395378][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.402889][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.411966][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.420342][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.427587][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.436901][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.445682][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.452716][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.467481][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.477772][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.491504][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.503761][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.512753][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.520644][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.530092][ T412] device veth0_vlan entered promiscuous mode [ 49.541438][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.550891][ T412] device veth1_macvtap entered promiscuous mode [ 49.560637][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.571130][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.897844][ T28] audit: type=1401 audit(1776195520.972:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/04/14 19:38:41 executed programs: 0 [ 50.131129][ T443] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.138299][ T443] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.146197][ T443] device bridge_slave_0 entered promiscuous mode [ 50.153733][ T443] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.161157][ T443] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.169977][ T443] device bridge_slave_1 entered promiscuous mode [ 50.215895][ T443] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.223057][ T443] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.230578][ T443] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.237890][ T443] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.257429][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 50.266235][ T305] bridge0: port 1(bridge_slave_0) entered disabled state [ 50.273773][ T305] bridge0: port 2(bridge_slave_1) entered disabled state [ 50.284145][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 50.292851][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 50.301473][ T305] bridge0: port 1(bridge_slave_0) entered blocking state [ 50.308607][ T305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 50.318052][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 50.326578][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 50.335460][ T305] bridge0: port 2(bridge_slave_1) entered blocking state [ 50.342586][ T305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 50.353964][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 50.362464][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 50.372246][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 50.380846][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 50.396096][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 50.404802][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 50.416520][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 50.424810][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 50.433225][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 50.441128][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 50.455413][ T443] device veth0_vlan entered promiscuous mode [ 50.465547][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 50.474263][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 50.484117][ T443] device veth1_macvtap entered promiscuous mode [ 50.493903][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 50.501856][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 50.510808][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 50.520837][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 50.529737][ T305] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 50.566777][ T449] loop2: detected capacity change from 0 to 1024 [ 50.573937][ T449] ======================================================= [ 50.573937][ T449] WARNING: The mand mount option has been deprecated and [ 50.573937][ T449] and is ignored by this kernel. Remove the mand [ 50.573937][ T449] option from the mount to silence this warning. [ 50.573937][ T449] ======================================================= [ 50.622770][ T449] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.631734][ T28] audit: type=1400 audit(1776195521.712:108): avc: denied { mount } for pid=448 comm="syz.2.16" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.657059][ T28] audit: type=1400 audit(1776195521.722:109): avc: denied { write } for pid=448 comm="syz.2.16" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.665569][ T449] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3850: comm syz.2.16: Allocating blocks 497-513 which overlap fs metadata [ 50.680589][ T28] audit: type=1400 audit(1776195521.722:110): avc: denied { add_name } for pid=448 comm="syz.2.16" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.694978][ T449] EXT4-fs (loop2): pa ffff8881104da540: logic 256, phys. 385, len 8 [ 50.716979][ T28] audit: type=1400 audit(1776195521.722:111): avc: denied { create } for pid=448 comm="syz.2.16" name="memory.stat" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.724861][ T449] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 1 [ 50.757361][ T28] audit: type=1400 audit(1776195521.732:112): avc: denied { read append open } for pid=448 comm="syz.2.16" path="/0/file1/memory.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.783017][ T28] audit: type=1400 audit(1776195521.842:113): avc: denied { write } for pid=448 comm="syz.2.16" name="memory.stat" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.808014][ T28] audit: type=1400 audit(1776195521.842:114): avc: denied { mounton } for pid=448 comm="syz.2.16" path="/0/file1/bus" dev="loop2" ino=19 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.808315][ T443] EXT4-fs (loop2): unmounting filesystem. [ 50.831474][ T28] audit: type=1400 audit(1776195521.842:115): avc: denied { read write } for pid=448 comm="syz.2.16" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.871792][ T455] loop2: detected capacity change from 0 to 1024 [ 50.896214][ T455] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 50.917289][ T455] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3850: comm syz.2.17: Allocating blocks 497-513 which overlap fs metadata [ 50.931583][ T455] EXT4-fs (loop2): pa ffff8881104dd9d8: logic 256, phys. 385, len 8 [ 50.940021][ T455] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 1 [ 50.961561][ T443] EXT4-fs (loop2): unmounting filesystem. [ 50.977956][ T459] loop2: detected capacity change from 0 to 1024 [ 51.006089][ T459] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.025602][ T459] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3850: comm syz.2.18: Allocating blocks 497-513 which overlap fs metadata [ 51.039856][ T459] EXT4-fs (loop2): pa ffff88812456b348: logic 256, phys. 385, len 8 [ 51.049042][ T459] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 1 [ 51.071872][ T443] ================================================================== [ 51.080071][ T443] BUG: KASAN: use-after-free in ext4_ext_remove_space+0x348b/0x40d0 [ 51.088240][ T443] Read of size 4 at addr ffff888126bbddb8 by task syz-executor/443 [ 51.096560][ T443] [ 51.099159][ T443] CPU: 0 PID: 443 Comm: syz-executor Not tainted syzkaller #0 [ 51.107047][ T443] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 51.117193][ T443] Call Trace: [ 51.120476][ T443] [ 51.123431][ T443] __dump_stack+0x21/0x24 [ 51.127792][ T443] dump_stack_lvl+0x110/0x170 [ 51.132682][ T443] ? __cfi_dump_stack_lvl+0x8/0x8 [ 51.137887][ T443] ? ext4_inode_block_valid+0x2d7/0x3f0 [ 51.143710][ T443] ? ext4_ext_remove_space+0x348b/0x40d0 [ 51.149524][ T443] print_address_description+0x71/0x200 [ 51.155340][ T443] print_report+0x4a/0x60 [ 51.159924][ T443] kasan_report+0x122/0x150 [ 51.164685][ T443] ? ext4_ext_remove_space+0x348b/0x40d0 [ 51.170420][ T443] __asan_report_load4_noabort+0x14/0x20 [ 51.176328][ T443] ext4_ext_remove_space+0x348b/0x40d0 [ 51.181824][ T443] ? memset+0x35/0x40 [ 51.185833][ T443] ? ext4_es_insert_extent+0x2d60/0x2d60 [ 51.191478][ T443] ? _raw_write_lock+0x94/0xf0 [ 51.196516][ T443] ? ext4_da_release_space+0x1d6/0x480 [ 51.202243][ T443] ? __cfi_ext4_ext_remove_space+0x10/0x10 [ 51.208327][ T443] ? ext4_es_remove_extent+0x1d9/0x330 [ 51.214162][ T443] ext4_ext_truncate+0x200/0x320 [ 51.219383][ T443] ext4_truncate+0x9be/0xfb0 [ 51.224070][ T443] ? __cfi_ext4_truncate+0x10/0x10 [ 51.229275][ T443] ext4_evict_inode+0xccf/0x1470 [ 51.234315][ T443] ? _raw_spin_unlock+0x4c/0x70 [ 51.239268][ T443] ? __cfi_ext4_evict_inode+0x10/0x10 [ 51.244911][ T443] ? _raw_spin_unlock+0x4c/0x70 [ 51.249941][ T443] ? inode_io_list_del+0x19b/0x1b0 [ 51.255071][ T443] ? __cfi_ext4_evict_inode+0x10/0x10 [ 51.260706][ T443] evict+0x4d7/0x8f0 [ 51.264625][ T443] ? proc_nr_inodes+0x2f0/0x2f0 [ 51.269666][ T443] ? lockref_put_return+0x152/0x1d0 [ 51.275146][ T443] ? __cfi_lockref_put_return+0x10/0x10 [ 51.280875][ T443] ? __kasan_check_write+0x14/0x20 [ 51.286097][ T443] iput+0x620/0x670 [ 51.290082][ T443] do_unlinkat+0x380/0x6d0 [ 51.294673][ T443] ? __cfi_do_unlinkat+0x10/0x10 [ 51.299844][ T443] ? getname_flags+0x206/0x500 [ 51.304802][ T443] __x64_sys_unlink+0x49/0x50 [ 51.309671][ T443] x64_sys_call+0x958/0x9a0 [ 51.314265][ T443] do_syscall_64+0x4c/0xa0 [ 51.318880][ T443] ? clear_bhb_loop+0x30/0x80 [ 51.323565][ T443] ? clear_bhb_loop+0x30/0x80 [ 51.328344][ T443] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 51.334514][ T443] RIP: 0033:0x7f05f5d991e7 [ 51.338940][ T443] Code: 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 b8 57 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 51.359746][ T443] RSP: 002b:00007ffe80310918 EFLAGS: 00000206 ORIG_RAX: 0000000000000057 [ 51.368533][ T443] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f05f5d991e7 [ 51.376868][ T443] RDX: 00007ffe80310940 RSI: 00007ffe803109d0 RDI: 00007ffe803109d0 [ 51.385484][ T443] RBP: 00007ffe803109d0 R08: 00007ffe803119d0 R09: 00000000ffffffff [ 51.393730][ T443] R10: 0000000000000100 R11: 0000000000000206 R12: 00007ffe80311ac0 [ 51.401786][ T443] R13: 00007f05f5e2c113 R14: 000000000000c739 R15: 00007ffe80312b90 [ 51.410039][ T443] [ 51.413086][ T443] [ 51.415407][ T443] The buggy address belongs to the physical page: [ 51.421920][ T443] page:ffffea00049aef40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x126bbd [ 51.432507][ T443] flags: 0x4000000000000000(zone=1) [ 51.437815][ T443] raw: 4000000000000000 ffffea00049ae8c8 ffffea00049b1608 0000000000000000 [ 51.446604][ T443] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 51.455314][ T443] page dumped because: kasan: bad access detected [ 51.461821][ T443] page_owner tracks the page as freed [ 51.467279][ T443] page last allocated via order 0, migratetype Movable, gfp_mask 0x8140dca(GFP_HIGHUSER_MOVABLE|__GFP_COMP|__GFP_ZERO|__GFP_CMA), pid 458, tgid 458 (syz.2.18), ts 50974945746, free_ts 51068106216 [ 51.487342][ T443] post_alloc_hook+0x1f5/0x210 [ 51.492591][ T443] prep_new_page+0x1c/0x110 [ 51.497555][ T443] get_page_from_freelist+0x2d12/0x2d80 [ 51.503904][ T443] __alloc_pages+0x1fa/0x610 [ 51.508498][ T443] __folio_alloc+0x12/0x40 [ 51.513789][ T443] handle_mm_fault+0x1972/0x26c0 [ 51.518920][ T443] do_user_addr_fault+0x63b/0x1050 [ 51.524267][ T443] exc_page_fault+0x51/0xb0 [ 51.529078][ T443] asm_exc_page_fault+0x27/0x30 [ 51.533944][ T443] page last free stack trace: [ 51.538998][ T443] free_unref_page_prepare+0x742/0x750 [ 51.544560][ T443] free_unref_page_list+0x117/0x8c0 [ 51.549870][ T443] release_pages+0xaf2/0xb50 [ 51.554569][ T443] free_pages_and_swap_cache+0x86/0xa0 [ 51.560644][ T443] tlb_finish_mmu+0x1aa/0x370 [ 51.565410][ T443] exit_mmap+0x412/0xc10 [ 51.569935][ T443] __mmput+0x93/0x360 [ 51.573916][ T443] mmput+0x4b/0x150 [ 51.577743][ T443] do_exit+0x994/0x2660 [ 51.581901][ T443] do_group_exit+0x210/0x2d0 [ 51.586599][ T443] get_signal+0x13b5/0x1520 [ 51.591113][ T443] arch_do_signal_or_restart+0xd1/0x1140 [ 51.597044][ T443] exit_to_user_mode_loop+0x7a/0xb0 [ 51.602502][ T443] exit_to_user_mode_prepare+0x87/0xd0 [ 51.608340][ T443] syscall_exit_to_user_mode+0x1a/0x30 [ 51.614165][ T443] do_syscall_64+0x58/0xa0 [ 51.619002][ T443] [ 51.621514][ T443] Memory state around the buggy address: [ 51.627792][ T443] ffff888126bbdc80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.636573][ T443] ffff888126bbdd00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.645186][ T443] >ffff888126bbdd80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.653688][ T443] ^ [ 51.660064][ T443] ffff888126bbde00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.669814][ T443] ffff888126bbde80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 51.679246][ T443] ================================================================== [ 51.691166][ T443] Disabling lock debugging due to kernel taint [ 51.701364][ T443] EXT4-fs (loop2): unmounting filesystem. [ 51.719067][ T463] loop2: detected capacity change from 0 to 1024 [ 51.746951][ T463] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 51.768918][ T463] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3850: comm syz.2.19: Allocating blocks 497-513 which overlap fs metadata [ 51.784254][ T463] EXT4-fs (loop2): pa ffff88812456bf18: logic 256, phys. 385, len 8 [ 51.793331][ T463] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4890: group 0, free 0, pa_free 1 [ 51.804217][ T43] device bridge_slave_1 left promiscuous mode [ 51.811248][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 51.813394][ T443] EXT4-fs error (device loop2): ext4_free_blocks:6219: comm syz-executor: Freeing blocks not in datazone - block = 106790845863312, count = 16 [ 51.835541][ T43] device bridge_slave_0 left promiscuous mode [ 51.835593][ T443] EXT4-fs error (device loop2): ext4_free_blocks:6219: comm syz-executor: Freeing blocks not in datazone - block = 106790845833587, count = 29728 [ 51.843091][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 51.860435][ T443] EXT4-fs error (device loop2): ext4_free_blocks:6219: comm syz-executor: Freeing blocks not in datazone - block = 106790845833584, count = 16 [ 51.885418][ T43] device veth1_macvtap left promiscuous mode [ 51.885671][ T443] EXT4-fs error (device loop2): ext4_free_blocks:6219: comm syz-executor: Freeing blocks not in datazone - block = 112589973920400, count = 16 [ 51.892196][ T43] device veth0_vlan left promiscuous mode [ 51.908825][ T443] EXT4-fs error (device loop2): ext4_free_blocks:6219: comm syz-executor: Freeing blocks not in datazone - block = 112589973894200, count = 26214 [ 51.930428][ T443] EXT4-fs error (device loop2): ext4_free_blocks:6219: comm syz-executor: Freeing blocks not in datazone - block = 112589973894192, count = 16 [ 51.946334][ T443] EXT4-fs error (device loop2): ext4_free_blocks:6219: comm syz-executor: Freeing blocks not in datazone - block = 109259848340688, count = 16 [ 51.962383][ T443] EXT4-fs error (device loop2): ext4_free_blocks:6219: comm syz-executor: Freeing blocks not in datazone - block = 109259848314740, count = 25964 [ 56.774481][ T443] EXT4-fs error: 23700 callbacks suppressed [ 56.774505][ T443] EXT4-fs error (device loop2): ext4_free_blocks:6219: comm syz-executor: Freeing blocks not in datazone - block = 122515643725152, count = 16 [ 56.796946][ T443] EXT4-fs error (device loop2): ext4_free_blocks:6219: comm syz-executor: Freeing blocks not in datazone - block = 104592811909983, count = 29728 [ 56.812347][ T443] EXT4-fs error (device loop2): ext4_free_blocks:6219: comm syz-executor: Freeing blocks not in datazone - block = 112589957143184, count = 16 [ 56.829038][ T443] EXT4-fs error (device loop2): ext4_free_blocks:6219: comm syz-executor: Freeing blocks not in datazone - block = 112589957116984, count = 26214 [ 56.845877][ T443] EXT4-fs error (device loop2): ext4_free_blocks:6219: comm syz-executor: Freeing blocks not in datazone - block = 112589957116976, count = 16 [ 56.862004][ T443] EXT4-fs error (device loop2): ext4_free_blocks:6219: comm syz-executor: Freeing blocks not in datazone - block = 110359359968464, count = 16 [ 56.878838][ T443] EXT4-fs error (device loop2): ext4_free_blocks:6219: comm syz-executor: Freeing blocks not in datazone - block = 110359359942516, count = 25964 [ 56.895612][ T443] EXT4-fs error (device loop2): ext4_free_blocks:6219: comm syz-executor: Freeing blocks not in datazone - block = 110359359942512, count = 16 [ 56.911576][ T443] EXT4-fs error (device loop2): ext4_free_blocks:6219: comm syz-executor: Freeing blocks not in datazone - block = 106790845833587, count = 29728 [ 56.927217][ T443] EXT4-fs error (device loop2): ext4_free_blocks:6219: comm syz-executor: Freeing blocks not in datazone - block = 112589957143184, count = 16