Warning: Permanently added '10.128.1.24' (ED25519) to the list of known hosts. 2026/02/01 05:32:53 parsed 1 programs [ 47.573028][ T28] audit: type=1400 audit(1769923974.048:106): avc: denied { unlink } for pid=402 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 47.645919][ T402] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 48.441676][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.448864][ T415] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.456350][ T415] device bridge_slave_0 entered promiscuous mode [ 48.464195][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.471229][ T415] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.478707][ T415] device bridge_slave_1 entered promiscuous mode [ 48.523078][ T415] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.530125][ T415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.537422][ T415] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.544454][ T415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.563202][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 48.570856][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 48.578248][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 48.587474][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 48.595937][ T43] bridge0: port 1(bridge_slave_0) entered blocking state [ 48.603082][ T43] bridge0: port 1(bridge_slave_0) entered forwarding state [ 48.613278][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 48.621481][ T43] bridge0: port 2(bridge_slave_1) entered blocking state [ 48.628550][ T43] bridge0: port 2(bridge_slave_1) entered forwarding state [ 48.639980][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 48.649233][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 48.662166][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 48.674110][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 48.681989][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 48.689775][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 48.698273][ T415] device veth0_vlan entered promiscuous mode [ 48.707967][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 48.718397][ T415] device veth1_macvtap entered promiscuous mode [ 48.727538][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 48.738010][ T43] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 48.978792][ T28] audit: type=1401 audit(1769923975.448:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" 2026/02/01 05:32:55 executed programs: 0 [ 49.459978][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.467270][ T473] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.474740][ T473] device bridge_slave_0 entered promiscuous mode [ 49.484881][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.491915][ T473] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.499350][ T473] device bridge_slave_1 entered promiscuous mode [ 49.542063][ T473] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.549445][ T473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.556931][ T473] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.564071][ T473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.581607][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 49.589176][ T362] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.597028][ T362] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.605471][ T8] device bridge_slave_1 left promiscuous mode [ 49.611614][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 49.619405][ T8] device bridge_slave_0 left promiscuous mode [ 49.625687][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 49.633650][ T8] device veth1_macvtap left promiscuous mode [ 49.639669][ T8] device veth0_vlan left promiscuous mode [ 49.720195][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 49.728852][ T362] bridge0: port 1(bridge_slave_0) entered blocking state [ 49.736008][ T362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 49.744730][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 49.753117][ T362] bridge0: port 2(bridge_slave_1) entered blocking state [ 49.760146][ T362] bridge0: port 2(bridge_slave_1) entered forwarding state [ 49.771963][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 49.781831][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 49.796107][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 49.807772][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 49.816136][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 49.823905][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 49.832543][ T473] device veth0_vlan entered promiscuous mode [ 49.843954][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 49.853824][ T473] device veth1_macvtap entered promiscuous mode [ 49.863375][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 49.873461][ T362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 49.908264][ T484] loop2: detected capacity change from 0 to 1024 [ 49.914980][ T484] ======================================================= [ 49.914980][ T484] WARNING: The mand mount option has been deprecated and [ 49.914980][ T484] and is ignored by this kernel. Remove the mand [ 49.914980][ T484] option from the mount to silence this warning. [ 49.914980][ T484] ======================================================= [ 49.950919][ T484] EXT4-fs: Ignoring removed bh option [ 49.958131][ T484] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 49.974421][ T484] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 49.985285][ T28] audit: type=1400 audit(1769923976.458:108): avc: denied { mount } for pid=483 comm="syz.2.17" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 50.007441][ T28] audit: type=1400 audit(1769923976.458:109): avc: denied { write } for pid=483 comm="syz.2.17" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.009398][ T484] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3852: comm syz.2.17: Allocating blocks 497-513 which overlap fs metadata [ 50.029183][ T28] audit: type=1400 audit(1769923976.458:110): avc: denied { add_name } for pid=483 comm="syz.2.17" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 50.044389][ T484] EXT4-fs (loop2): pa ffff88811182c738: logic 64, phys. 193, len 20 [ 50.063743][ T28] audit: type=1400 audit(1769923976.458:111): avc: denied { create } for pid=483 comm="syz.2.17" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 50.071142][ T484] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 50.092191][ T28] audit: type=1400 audit(1769923976.458:112): avc: denied { read write } for pid=483 comm="syz.2.17" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.124170][ T28] audit: type=1400 audit(1769923976.458:113): avc: denied { open } for pid=483 comm="syz.2.17" path="/0/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.147203][ T28] audit: type=1400 audit(1769923976.518:114): avc: denied { setattr } for pid=483 comm="syz.2.17" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 50.170142][ T309] ================================================================== [ 50.178267][ T309] BUG: KASAN: slab-out-of-bounds in ext4_find_extent+0xbeb/0xe20 [ 50.185998][ T309] Read of size 4 at addr ffff88812dde5850 by task kworker/u4:3/309 [ 50.193900][ T309] [ 50.196216][ T309] CPU: 1 PID: 309 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 50.203646][ T309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 50.213698][ T309] Workqueue: writeback wb_workfn (flush-7:2) [ 50.219719][ T309] Call Trace: [ 50.222999][ T309] [ 50.225928][ T309] __dump_stack+0x21/0x24 [ 50.230254][ T309] dump_stack_lvl+0x110/0x170 [ 50.234992][ T309] ? __cfi_dump_stack_lvl+0x8/0x8 [ 50.240204][ T309] ? ext4_find_extent+0xbeb/0xe20 [ 50.245229][ T309] ? ext4_find_extent+0xbeb/0xe20 [ 50.250240][ T309] print_address_description+0x71/0x200 [ 50.255791][ T309] print_report+0x4a/0x60 [ 50.260102][ T309] kasan_report+0x122/0x150 [ 50.264601][ T309] ? ext4_find_extent+0xbeb/0xe20 [ 50.269637][ T309] __asan_report_load4_noabort+0x14/0x20 [ 50.275271][ T309] ext4_find_extent+0xbeb/0xe20 [ 50.280134][ T309] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 50.286036][ T309] ext4_ext_map_blocks+0x207/0x61d0 [ 50.291343][ T309] ? kasan_set_track+0x60/0x70 [ 50.296139][ T309] ? kasan_set_track+0x4b/0x70 [ 50.300908][ T309] ? kasan_save_alloc_info+0x25/0x30 [ 50.306201][ T309] ? __kasan_slab_alloc+0x72/0x80 [ 50.311308][ T309] ? slab_post_alloc_hook+0x4f/0x2d0 [ 50.316584][ T309] ? kmem_cache_alloc+0x16e/0x330 [ 50.321633][ T309] ? ext4_alloc_io_end_vec+0x2a/0x160 [ 50.327016][ T309] ? ext4_writepages+0x10e9/0x30e0 [ 50.332126][ T309] ? do_writepages+0x3a4/0x5f0 [ 50.336933][ T309] ? __writeback_single_inode+0xc6/0xad0 [ 50.342663][ T309] ? writeback_sb_inodes+0xa10/0x15d0 [ 50.348047][ T309] ? wb_writeback+0x40b/0x9d0 [ 50.352718][ T309] ? wb_workfn+0x378/0xeb0 [ 50.357130][ T309] ? process_one_work+0x71f/0xc40 [ 50.362149][ T309] ? worker_thread+0xa29/0x11e0 [ 50.367006][ T309] ? kthread+0x281/0x320 [ 50.371235][ T309] ? ret_from_fork+0x1f/0x30 [ 50.375825][ T309] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 50.381451][ T309] ? ext4_es_lookup_extent+0x54c/0x900 [ 50.386910][ T309] ext4_map_blocks+0x9d8/0x1b70 [ 50.391768][ T309] ? sysvec_call_function_single+0x61/0xc0 [ 50.397563][ T309] ? __cfi_ext4_map_blocks+0x10/0x10 [ 50.402846][ T309] ? ext4_inode_journal_mode+0x19a/0x480 [ 50.408467][ T309] ext4_writepages+0x1409/0x30e0 [ 50.413409][ T309] ? enqueue_task_fair+0xbee/0x1d40 [ 50.418608][ T309] ? __cfi_ext4_writepages+0x10/0x10 [ 50.423885][ T309] ? __cfi_enqueue_task_fair+0x10/0x10 [ 50.429333][ T309] ? __kasan_check_write+0x14/0x20 [ 50.434434][ T309] ? __cfi_ext4_writepages+0x10/0x10 [ 50.439820][ T309] do_writepages+0x3a4/0x5f0 [ 50.444398][ T309] ? check_preempt_curr+0xe7/0x1b0 [ 50.449486][ T309] ? __cfi_do_writepages+0x10/0x10 [ 50.454574][ T309] ? __asan_set_shadow_00+0xe/0x10 [ 50.459667][ T309] ? load_balance+0x41d6/0x4790 [ 50.464513][ T309] ? xfd_validate_state+0x70/0x150 [ 50.469607][ T309] ? __kasan_check_write+0x14/0x20 [ 50.474706][ T309] ? _raw_spin_lock+0x94/0xf0 [ 50.479386][ T309] __writeback_single_inode+0xc6/0xad0 [ 50.484950][ T309] ? inode_io_list_move_locked+0x366/0x3d0 [ 50.490846][ T309] writeback_sb_inodes+0xa10/0x15d0 [ 50.496032][ T309] ? queue_io+0x4c0/0x4c0 [ 50.500344][ T309] ? __kasan_check_read+0x11/0x20 [ 50.505351][ T309] ? queue_io+0x382/0x4c0 [ 50.509669][ T309] wb_writeback+0x40b/0x9d0 [ 50.514151][ T309] ? inode_cgwb_move_to_attached+0x3e0/0x3e0 [ 50.520111][ T309] ? irqentry_exit+0x37/0x40 [ 50.524685][ T309] ? __kasan_check_write+0x14/0x20 [ 50.529787][ T309] wb_workfn+0x378/0xeb0 [ 50.534009][ T309] ? __cfi_wb_workfn+0x10/0x10 [ 50.538747][ T309] ? kthread_data+0x50/0xc0 [ 50.543235][ T309] ? _raw_spin_unlock+0x4c/0x70 [ 50.548161][ T309] ? finish_task_switch+0x16b/0x7b0 [ 50.553353][ T309] ? __switch_to_asm+0x3a/0x60 [ 50.558217][ T309] ? __schedule+0xbae/0x1500 [ 50.562964][ T309] ? __cfi__raw_spin_lock_irq+0x10/0x10 [ 50.568495][ T309] process_one_work+0x71f/0xc40 [ 50.573331][ T309] worker_thread+0xa29/0x11e0 [ 50.578019][ T309] ? __kthread_parkme+0x142/0x180 [ 50.583034][ T309] kthread+0x281/0x320 [ 50.587080][ T309] ? __cfi_worker_thread+0x10/0x10 [ 50.592185][ T309] ? __cfi_kthread+0x10/0x10 [ 50.596760][ T309] ret_from_fork+0x1f/0x30 [ 50.601258][ T309] [ 50.604282][ T309] [ 50.606588][ T309] Allocated by task 407: [ 50.610814][ T309] kasan_set_track+0x4b/0x70 [ 50.615505][ T309] kasan_save_alloc_info+0x25/0x30 [ 50.620706][ T309] __kasan_kmalloc+0x95/0xb0 [ 50.625309][ T309] __kmalloc_node+0xb2/0x1e0 [ 50.629901][ T309] kvmalloc_node+0x28a/0x460 [ 50.634580][ T309] simple_xattr_alloc+0x43/0xa0 [ 50.639426][ T309] shmem_initxattrs+0x8d/0x1e0 [ 50.644194][ T309] security_inode_init_security+0x2a9/0x3d0 [ 50.650078][ T309] shmem_mknod+0xbb/0x1d0 [ 50.654397][ T309] shmem_create+0x2c/0x40 [ 50.658714][ T309] path_openat+0x11ec/0x2f80 [ 50.663290][ T309] do_filp_open+0x1f1/0x430 [ 50.667770][ T309] do_sys_openat2+0x15e/0x810 [ 50.672441][ T309] __x64_sys_openat+0x136/0x160 [ 50.677278][ T309] x64_sys_call+0x783/0x9a0 [ 50.681774][ T309] do_syscall_64+0x4c/0xa0 [ 50.686190][ T309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 50.692087][ T309] [ 50.694489][ T309] Freed by task 407: [ 50.698369][ T309] kasan_set_track+0x4b/0x70 [ 50.702946][ T309] kasan_save_free_info+0x31/0x50 [ 50.707952][ T309] ____kasan_slab_free+0x132/0x180 [ 50.713055][ T309] __kasan_slab_free+0x11/0x20 [ 50.717880][ T309] slab_free_freelist_hook+0xc2/0x190 [ 50.723242][ T309] __kmem_cache_free+0xb7/0x1b0 [ 50.728182][ T309] kfree+0x6f/0xf0 [ 50.731954][ T309] kvfree+0x35/0x40 [ 50.735775][ T309] shmem_evict_inode+0x894/0xa50 [ 50.740714][ T309] evict+0x4d7/0x8f0 [ 50.744593][ T309] iput+0x620/0x670 [ 50.748390][ T309] dentry_unlink_inode+0x33d/0x3f0 [ 50.753484][ T309] __dentry_kill+0x460/0x670 [ 50.758077][ T309] dentry_kill+0xc0/0x2a0 [ 50.762491][ T309] dput+0x42/0x80 [ 50.766104][ T309] do_renameat2+0x8f4/0xfd0 [ 50.770587][ T309] __x64_sys_rename+0x86/0x90 [ 50.775249][ T309] x64_sys_call+0x300/0x9a0 [ 50.779821][ T309] do_syscall_64+0x4c/0xa0 [ 50.784217][ T309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 50.790091][ T309] [ 50.792390][ T309] The buggy address belongs to the object at ffff88812dde5800 [ 50.792390][ T309] which belongs to the cache kmalloc-64 of size 64 [ 50.806242][ T309] The buggy address is located 16 bytes to the right of [ 50.806242][ T309] 64-byte region [ffff88812dde5800, ffff88812dde5840) [ 50.819876][ T309] [ 50.822192][ T309] The buggy address belongs to the physical page: [ 50.828597][ T309] page:ffffea0004b77940 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12dde5 [ 50.838835][ T309] flags: 0x4000000000000200(slab|zone=1) [ 50.844487][ T309] raw: 4000000000000200 0000000000000000 dead000000000122 ffff888100042780 [ 50.853052][ T309] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000 [ 50.861605][ T309] page dumped because: kasan: bad access detected [ 50.868175][ T309] page_owner tracks the page as allocated [ 50.873865][ T309] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 450, tgid 450 (syz-executor), ts 49057451037, free_ts 49057426481 [ 50.891934][ T309] post_alloc_hook+0x1f5/0x210 [ 50.896694][ T309] prep_new_page+0x1c/0x110 [ 50.901186][ T309] get_page_from_freelist+0x2d12/0x2d80 [ 50.906725][ T309] __alloc_pages+0x1d9/0x480 [ 50.911319][ T309] alloc_slab_page+0x6e/0xf0 [ 50.915921][ T309] new_slab+0x98/0x3d0 [ 50.919996][ T309] ___slab_alloc+0x6bd/0xb20 [ 50.924584][ T309] __slab_alloc+0x5e/0xa0 [ 50.928918][ T309] __kmem_cache_alloc_node+0x203/0x2c0 [ 50.934712][ T309] kmalloc_node_trace+0x26/0xb0 [ 50.939646][ T309] __get_vm_area_node+0x12c/0x360 [ 50.944651][ T309] __vmalloc_node_range+0x326/0x1430 [ 50.949930][ T309] vzalloc+0x78/0x90 [ 50.953811][ T309] alloc_counters+0x66/0x530 [ 50.958395][ T309] do_ipt_get_ctl+0xa6d/0x1180 [ 50.963136][ T309] nf_getsockopt+0x27f/0x2a0 [ 50.967703][ T309] page last free stack trace: [ 50.972354][ T309] free_unref_page_prepare+0x742/0x750 [ 50.977798][ T309] free_unref_page+0x95/0x540 [ 50.982510][ T309] __free_pages+0x67/0x100 [ 50.986916][ T309] __vunmap+0x9c0/0xb80 [ 50.991154][ T309] vfree+0x61/0x90 [ 50.994923][ T309] do_ipt_get_ctl+0xe9c/0x1180 [ 50.999711][ T309] nf_getsockopt+0x27f/0x2a0 [ 51.004392][ T309] ip_getsockopt+0x157/0x1e0 [ 51.008990][ T309] tcp_getsockopt+0xff/0x130 [ 51.013573][ T309] sock_common_getsockopt+0xaa/0xc0 [ 51.018752][ T309] __sys_getsockopt+0x215/0x4a0 [ 51.023585][ T309] __x64_sys_getsockopt+0xbf/0xd0 [ 51.028612][ T309] x64_sys_call+0x3d/0x9a0 [ 51.033047][ T309] do_syscall_64+0x4c/0xa0 [ 51.037480][ T309] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 51.043379][ T309] [ 51.045709][ T309] Memory state around the buggy address: [ 51.051310][ T309] ffff88812dde5700: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 51.059345][ T309] ffff88812dde5780: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 51.067396][ T309] >ffff88812dde5800: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 51.075539][ T309] ^ [ 51.082211][ T309] ffff88812dde5880: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 51.090312][ T309] ffff88812dde5900: 00 00 00 00 00 00 00 00 fc fc fc fc fc fc fc fc [ 51.098437][ T309] ================================================================== [ 51.107485][ T309] Disabling lock debugging due to kernel taint [ 51.114771][ T28] audit: type=1400 audit(1769923977.588:115): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 51.117090][ T309] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4872: inode #15: block 36: len 1: ext4_ext_map_blocks returned -28 [ 51.152799][ T473] EXT4-fs (loop2): unmounting filesystem. [ 51.175762][ T489] loop2: detected capacity change from 0 to 1024 [ 51.182972][ T489] EXT4-fs: Ignoring removed bh option [ 51.188795][ T489] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 51.203933][ T489] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 51.223197][ T489] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3852: comm syz.2.18: Allocating blocks 497-513 which overlap fs metadata [ 51.237811][ T489] EXT4-fs (loop2): pa ffff8881245c6d20: logic 64, phys. 193, len 20 [ 51.246356][ T489] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4892: group 0, free 0, pa_free 1 [ 51.258986][ T43] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 40 with max blocks 8 with error 117 [ 51.271398][ T43] EXT4-fs (loop2): This should not happen!! Data will be lost [ 51.271398][ T43] [ 51.282085][ T309] EXT4-fs warning (device loop2): ext4_convert_unwritten_extents:4872: inode #15: block 36: len 1: ext4_ext_map_blocks returned -117 [ 51.295890][ T309] EXT4-fs (loop2): failed to convert unwritten extents to written extents -- potential data loss! (inode 15, error -117) [ 51.311085][ T473] EXT4-fs (loop2): unmounting filesystem. [ 51.311870][ T8] general protection fault, probably for non-canonical address 0xe1bdc81c1ffff114: 0000 [#1] PREEMPT SMP KASAN [ 51.328630][ T8] KASAN: maybe wild-memory-access in range [0x0dee60e0ffff88a0-0x0dee60e0ffff88a7] [ 51.337923][ T8] CPU: 1 PID: 8 Comm: kworker/u4:0 Tainted: G B syzkaller #0 [ 51.346700][ T8] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 51.356739][ T8] Workqueue: netns cleanup_net [ 51.361502][ T8] RIP: 0010:kernfs_find_ns+0x31e/0x4b0 [ 51.366951][ T8] Code: fe ff ff 7f 4c 0f 42 e3 4d 85 f6 0f 84 3f 01 00 00 48 8b 5d c0 49 bf 00 00 00 00 00 fc ff df 4d 8d 6e 20 4c 89 e8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 f4 00 00 00 45 8b 6d 00 44 89 ef 44 89 [ 51.386626][ T8] RSP: 0018:ffffc900000877c0 EFLAGS: 00010206 [ 51.392678][ T8] RAX: 01bdcc1c1ffff114 RBX: ffff88812c2382d0 RCX: ffff888100299440 [ 51.400633][ T8] RDX: 0000000000000000 RSI: 000000002c287a54 RDI: 00000000ffff8881 [ 51.408763][ T8] RBP: ffffc90000087808 R08: ffff88812c2382d5 R09: 1ffff1102003606d [ 51.416718][ T8] R10: dffffc0000000000 R11: ffffed102003606e R12: 000000002c287a54 [ 51.424772][ T8] R13: 0dee60e0ffff88a1 R14: 0dee60e0ffff8881 R15: dffffc0000000000 [ 51.432909][ T8] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 51.441842][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.448417][ T8] CR2: 0000555568fc5908 CR3: 000000012e5fc000 CR4: 00000000003506a0 [ 51.456383][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.464427][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.472384][ T8] Call Trace: [ 51.475671][ T8] [ 51.478586][ T8] kernfs_remove_by_name_ns+0x89/0x160 [ 51.484168][ T8] sysfs_delete_link+0x10b/0x140 [ 51.489469][ T8] device_remove_class_symlinks+0x194/0x1a0 [ 51.495431][ T8] device_del+0x48d/0xec0 [ 51.499790][ T8] ? __cfi_device_del+0x10/0x10 [ 51.504660][ T8] netdev_unregister_kobject+0x186/0x250 [ 51.510385][ T8] unregister_netdevice_many+0x1405/0x18e0 [ 51.516173][ T8] ? __cfi__raw_spin_lock_irqsave+0x10/0x10 [ 51.522066][ T8] ? __cfi_unregister_netdevice_many+0x10/0x10 [ 51.528201][ T8] ? unregister_netdevice_queue+0x1aa/0x370 [ 51.534117][ T8] ? __cfi_unregister_netdevice_queue+0x10/0x10 [ 51.540344][ T8] ? rcu_barrier+0x7e/0x600 [ 51.544833][ T8] ip6gre_exit_batch_net+0x5b0/0x600 [ 51.550108][ T8] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 51.555908][ T8] ? __cfi_ip6gre_exit_batch_net+0x10/0x10 [ 51.561697][ T8] cleanup_net+0x635/0xb10 [ 51.566101][ T8] ? __cfi_cleanup_net+0x10/0x10 [ 51.571023][ T8] process_one_work+0x71f/0xc40 [ 51.575857][ T8] worker_thread+0xa29/0x11e0 [ 51.580550][ T8] kthread+0x281/0x320 [ 51.584598][ T8] ? __cfi_worker_thread+0x10/0x10 [ 51.589691][ T8] ? __cfi_kthread+0x10/0x10 [ 51.594264][ T8] ret_from_fork+0x1f/0x30 [ 51.598667][ T8] [ 51.601751][ T8] Modules linked in: [ 51.607343][ T8] ---[ end trace 0000000000000000 ]--- [ 51.613041][ T8] RIP: 0010:kernfs_find_ns+0x31e/0x4b0 [ 51.618535][ T8] Code: fe ff ff 7f 4c 0f 42 e3 4d 85 f6 0f 84 3f 01 00 00 48 8b 5d c0 49 bf 00 00 00 00 00 fc ff df 4d 8d 6e 20 4c 89 e8 48 c1 e8 03 <42> 0f b6 04 38 84 c0 0f 85 f4 00 00 00 45 8b 6d 00 44 89 ef 44 89 [ 51.638279][ T8] RSP: 0018:ffffc900000877c0 EFLAGS: 00010206 [ 51.644394][ T8] RAX: 01bdcc1c1ffff114 RBX: ffff88812c2382d0 RCX: ffff888100299440 [ 51.652482][ T8] RDX: 0000000000000000 RSI: 000000002c287a54 RDI: 00000000ffff8881 [ 51.660476][ T8] RBP: ffffc90000087808 R08: ffff88812c2382d5 R09: 1ffff1102003606d [ 51.668559][ T8] R10: dffffc0000000000 R11: ffffed102003606e R12: 000000002c287a54 [ 51.676582][ T8] R13: 0dee60e0ffff88a1 R14: 0dee60e0ffff8881 R15: dffffc0000000000 [ 51.684623][ T8] FS: 0000000000000000(0000) GS:ffff8881f6f00000(0000) knlGS:0000000000000000 [ 51.693779][ T8] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 51.700442][ T8] CR2: 0000555568fc5908 CR3: 000000000700f000 CR4: 00000000003506a0 [ 51.708476][ T8] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 51.716655][ T8] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 51.724663][ T8] Kernel panic - not syncing: Fatal exception [ 51.731044][ T8] Kernel Offset: disabled [ 51.735374][ T8] Rebooting in 86400 seconds..