Warning: Permanently added '10.128.1.244' (ED25519) to the list of known hosts. 2026/01/17 19:03:56 parsed 1 programs [ 22.764736][ T28] audit: type=1400 audit(1768676636.571:64): avc: denied { node_bind } for pid=283 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1 [ 22.785636][ T28] audit: type=1400 audit(1768676636.581:65): avc: denied { module_request } for pid=283 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 23.897150][ T28] audit: type=1400 audit(1768676637.711:66): avc: denied { mounton } for pid=289 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2023 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1 [ 23.900468][ T289] cgroup: Unknown subsys name 'net' [ 23.919874][ T28] audit: type=1400 audit(1768676637.711:67): avc: denied { mount } for pid=289 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.947199][ T28] audit: type=1400 audit(1768676637.741:68): avc: denied { unmount } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 23.947703][ T289] cgroup: Unknown subsys name 'devices' [ 24.087642][ T289] cgroup: Unknown subsys name 'hugetlb' [ 24.093276][ T289] cgroup: Unknown subsys name 'rlimit' [ 24.206300][ T28] audit: type=1400 audit(1768676638.021:69): avc: denied { setattr } for pid=289 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=258 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 24.229694][ T28] audit: type=1400 audit(1768676638.021:70): avc: denied { create } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.250222][ T28] audit: type=1400 audit(1768676638.021:71): avc: denied { write } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.270540][ T28] audit: type=1400 audit(1768676638.021:72): avc: denied { read } for pid=289 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 24.290999][ T293] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped). Setting up swapspace version 1, size = 127995904 bytes [ 24.291425][ T28] audit: type=1400 audit(1768676638.021:73): avc: denied { mounton } for pid=289 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 [ 24.325784][ T289] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 24.993678][ T297] request_module fs-gadgetfs succeeded, but still no fs? [ 25.215901][ T307] syz-executor (307) used greatest stack depth: 21920 bytes left [ 25.799800][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.807442][ T347] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.814840][ T347] device bridge_slave_0 entered promiscuous mode [ 25.821990][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.829070][ T347] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.836598][ T347] device bridge_slave_1 entered promiscuous mode [ 25.884459][ T347] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.891552][ T347] bridge0: port 2(bridge_slave_1) entered forwarding state [ 25.898931][ T347] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.905995][ T347] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.926827][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 25.934581][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 25.942533][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 25.951889][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 25.960428][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 25.967503][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 25.976616][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 25.984875][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 25.991949][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.009619][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.019160][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.035031][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.051779][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.060026][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.068075][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.076446][ T347] device veth0_vlan entered promiscuous mode [ 26.093453][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.102725][ T347] device veth1_macvtap entered promiscuous mode [ 26.112713][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.122774][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.170736][ T347] syz-executor (347) used greatest stack depth: 21688 bytes left 2026/01/17 19:04:00 executed programs: 0 [ 26.431054][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.438912][ T365] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.446581][ T365] device bridge_slave_0 entered promiscuous mode [ 26.458981][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.466102][ T365] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.473506][ T365] device bridge_slave_1 entered promiscuous mode [ 26.529398][ T365] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.536480][ T365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.543758][ T365] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.550841][ T365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.571876][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 26.579914][ T8] bridge0: port 1(bridge_slave_0) entered disabled state [ 26.587258][ T8] bridge0: port 2(bridge_slave_1) entered disabled state [ 26.599581][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 26.607812][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 26.614895][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 26.624005][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 26.632307][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 26.639407][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 26.652882][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 26.662431][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 26.676837][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 26.689013][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 26.697395][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 26.704806][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 26.713502][ T365] device veth0_vlan entered promiscuous mode [ 26.724099][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 26.733305][ T365] device veth1_macvtap entered promiscuous mode [ 26.748384][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 26.758386][ T8] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 26.846758][ T377] loop2: detected capacity change from 0 to 1024 [ 26.865467][ T377] ======================================================= [ 26.865467][ T377] WARNING: The mand mount option has been deprecated and [ 26.865467][ T377] and is ignored by this kernel. Remove the mand [ 26.865467][ T377] option from the mount to silence this warning. [ 26.865467][ T377] ======================================================= [ 26.911666][ T377] EXT4-fs: Ignoring removed nobh option [ 26.917335][ T377] EXT4-fs: Ignoring removed bh option [ 26.923194][ T377] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 26.950742][ T377] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.040085][ T376] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 2443836392176: comm syz.2.17: lblock 752 mapped to illegal pblock 2443836392176 (length 1) [ 27.056726][ T376] EXT4-fs error (device loop2): ext4_map_blocks:635: inode #15: block 2443836392176: comm syz.2.17: lblock 752 mapped to illegal pblock 2443836392176 (length 1) [ 27.081353][ T378] EXT4-fs error (device loop2): ext4_ext_split:1080: inode #15: comm kworker/u4:4: p_ext > EXT_MAX_EXTENT! [ 27.092994][ T378] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 27.105771][ T378] EXT4-fs (loop2): This should not happen!! Data will be lost [ 27.105771][ T378] [ 27.116184][ T306] EXT4-fs error (device loop2): ext4_map_blocks:745: inode #15: block 2443836392092: comm kworker/u4:3: lblock 668 mapped to illegal pblock 2443836392092 (length 1) [ 27.134165][ T306] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 668 with max blocks 1 with error 117 [ 27.147026][ T306] EXT4-fs (loop2): This should not happen!! Data will be lost [ 27.147026][ T306] [ 27.165745][ T365] EXT4-fs (loop2): unmounting filesystem. [ 27.234238][ T385] loop2: detected capacity change from 0 to 1024 [ 27.241151][ T385] EXT4-fs: Ignoring removed nobh option [ 27.253488][ T385] EXT4-fs: Ignoring removed bh option [ 27.266365][ T385] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 27.278316][ T43] device bridge_slave_1 left promiscuous mode [ 27.284651][ T43] bridge0: port 2(bridge_slave_1) entered disabled state [ 27.292911][ T43] device bridge_slave_0 left promiscuous mode [ 27.299343][ T43] bridge0: port 1(bridge_slave_0) entered disabled state [ 27.310395][ T43] device veth1_macvtap left promiscuous mode [ 27.312482][ T385] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.317079][ T43] device veth0_vlan left promiscuous mode [ 27.494342][ T384] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.18: Allocating blocks 497-513 which overlap fs metadata [ 27.508679][ T384] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.18: Allocating blocks 497-513 which overlap fs metadata [ 27.530662][ T384] EXT4-fs (loop2): pa ffff88811149cf18: logic 480, phys. 257, len 16 [ 27.538834][ T384] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 27.566325][ T365] EXT4-fs (loop2): unmounting filesystem. [ 27.641692][ T391] loop2: detected capacity change from 0 to 1024 [ 27.654719][ T391] EXT4-fs: Ignoring removed nobh option [ 27.666142][ T391] EXT4-fs: Ignoring removed bh option [ 27.672095][ T391] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 27.706405][ T391] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 27.819493][ T390] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.19: Allocating blocks 497-513 which overlap fs metadata [ 27.833995][ T390] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.19: Allocating blocks 497-513 which overlap fs metadata [ 27.853978][ T389] EXT4-fs (loop2): pa ffff88811149c1f8: logic 496, phys. 241, len 17 [ 27.862174][ T389] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 27.888934][ T365] EXT4-fs (loop2): unmounting filesystem. [ 27.969433][ T397] loop2: detected capacity change from 0 to 1024 [ 27.991893][ T397] EXT4-fs: Ignoring removed nobh option [ 27.997731][ T397] EXT4-fs: Ignoring removed bh option [ 28.004320][ T397] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 28.033721][ T397] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 28.124456][ T396] ================================================================== [ 28.132554][ T396] BUG: KASAN: use-after-free in ext4_find_extent+0xbeb/0xe20 [ 28.139973][ T396] Read of size 4 at addr ffff88812fdf5018 by task syz.2.20/396 [ 28.147539][ T396] [ 28.149873][ T396] CPU: 0 PID: 396 Comm: syz.2.20 Not tainted syzkaller #0 [ 28.156983][ T396] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 28.167069][ T396] Call Trace: [ 28.170355][ T396] [ 28.173291][ T396] __dump_stack+0x21/0x24 [ 28.177627][ T396] dump_stack_lvl+0x110/0x170 [ 28.182311][ T396] ? __cfi_dump_stack_lvl+0x8/0x8 [ 28.187333][ T396] ? ext4_find_extent+0xbeb/0xe20 [ 28.192365][ T396] print_address_description+0x71/0x200 [ 28.197908][ T396] print_report+0x4a/0x60 [ 28.202241][ T396] kasan_report+0x122/0x150 [ 28.206749][ T396] ? ext4_find_extent+0xbeb/0xe20 [ 28.211789][ T396] __asan_report_load4_noabort+0x14/0x20 [ 28.217436][ T396] ext4_find_extent+0xbeb/0xe20 [ 28.222298][ T396] ext4_ext_map_blocks+0x207/0x61d0 [ 28.227828][ T396] ? __stack_depot_save+0x36/0x480 [ 28.232954][ T396] ? kasan_set_track+0x60/0x70 [ 28.237742][ T396] ? slab_post_alloc_hook+0x4f/0x2d0 [ 28.243046][ T396] ? kmem_cache_alloc+0x16e/0x330 [ 28.248113][ T396] ? alloc_buffer_head+0x26/0x120 [ 28.253146][ T396] ? __cfi_ext4_ext_map_blocks+0x10/0x10 [ 28.258777][ T396] ? __block_write_begin_int+0x183/0x1430 [ 28.264505][ T396] ? block_page_mkwrite+0x281/0x300 [ 28.269709][ T396] ? ext4_page_mkwrite+0x4f8/0x1310 [ 28.274914][ T396] ? wp_page_shared+0x505/0x8d0 [ 28.279763][ T396] ? ext4_es_lookup_extent+0x54c/0x900 [ 28.285228][ T396] ext4_map_blocks+0x9d8/0x1b70 [ 28.290102][ T396] ? __cfi_ext4_map_blocks+0x10/0x10 [ 28.295388][ T396] ? update_blocked_averages+0x1060/0x1060 [ 28.301196][ T396] _ext4_get_block+0x1ea/0x540 [ 28.306056][ T396] ? __kasan_check_write+0x14/0x20 [ 28.311183][ T396] ? ext4_get_block+0x50/0x50 [ 28.315884][ T396] ? _raw_spin_unlock+0x4c/0x70 [ 28.320739][ T396] ? create_empty_buffers+0x484/0x4c0 [ 28.326126][ T396] ext4_get_block_unwritten+0x2e/0x100 [ 28.331587][ T396] __block_write_begin_int+0x482/0x1430 [ 28.337134][ T396] ? __kasan_check_write+0x14/0x20 [ 28.342249][ T396] ? __cfi_ext4_get_block_unwritten+0x10/0x10 [ 28.348318][ T396] ? __cfi___block_write_begin_int+0x10/0x10 [ 28.354570][ T396] ? ext4_inode_journal_mode+0x19a/0x480 [ 28.360216][ T396] block_page_mkwrite+0x281/0x300 [ 28.365256][ T396] ? __cfi_ext4_get_block_unwritten+0x10/0x10 [ 28.371363][ T396] ext4_page_mkwrite+0x4f8/0x1310 [ 28.376449][ T396] ? __cfi_ext4_get_block_unwritten+0x10/0x10 [ 28.382618][ T396] ? __cfi_ext4_page_mkwrite+0x10/0x10 [ 28.388098][ T396] ? __switch_to+0x517/0xe60 [ 28.392707][ T396] wp_page_shared+0x505/0x8d0 [ 28.397387][ T396] do_wp_page+0xde4/0xfc0 [ 28.401727][ T396] handle_mm_fault+0x1124/0x26c0 [ 28.406671][ T396] ? __cfi_handle_mm_fault+0x10/0x10 [ 28.411965][ T396] ? down_read_trylock+0x27f/0x660 [ 28.417105][ T396] ? _raw_spin_lock_irq+0x95/0xf0 [ 28.422133][ T396] ? lock_mm_and_find_vma+0x9e/0x320 [ 28.427420][ T396] ? do_user_addr_fault+0x2ee/0x1050 [ 28.432715][ T396] do_user_addr_fault+0x63b/0x1050 [ 28.437845][ T396] exc_page_fault+0x51/0xb0 [ 28.442353][ T396] asm_exc_page_fault+0x27/0x30 [ 28.447203][ T396] RIP: 0010:copy_user_enhanced_fast_string+0xa/0x40 [ 28.453810][ T396] Code: ff c9 75 f2 89 d1 c1 e9 03 83 e2 07 f3 48 a5 89 d1 f3 a4 31 c0 0f 01 ca c3 8d 0c ca 89 ca eb 20 0f 01 cb 83 fa 40 72 38 89 d1 a4 31 c0 0f 01 ca c3 89 ca eb 0a 90 90 90 90 90 90 90 90 90 90 [ 28.473591][ T396] RSP: 0018:ffffc90000a37a48 EFLAGS: 00050246 [ 28.479662][ T396] RAX: ffffffff8267f401 RBX: 0000000000000040 RCX: 0000000000000040 [ 28.487630][ T396] RDX: 0000000000000040 RSI: ffffc90000a37ae0 RDI: 00002000000c1000 [ 28.495601][ T396] RBP: ffffc90000a37a70 R08: ffffc90000a37b1f R09: 1ffff92000146f63 [ 28.503571][ T396] R10: dffffc0000000000 R11: fffff52000146f64 R12: 00007fffffffefc0 [ 28.511650][ T396] R13: 000000007ff71a80 R14: 00002000000c1000 R15: ffffc90000a37ae0 [ 28.519623][ T396] ? _copy_to_user+0x21/0x90 [ 28.524247][ T396] ? _copy_to_user+0x72/0x90 [ 28.528840][ T396] rng_dev_read+0x4b8/0x960 [ 28.533348][ T396] ? __cfi_rng_dev_read+0x10/0x10 [ 28.538520][ T396] ? fsnotify_perm+0x3e9/0x5b0 [ 28.543299][ T396] ? security_file_permission+0x94/0xb0 [ 28.548852][ T396] do_iter_read+0x4c5/0xb40 [ 28.553390][ T396] ? _copy_from_user+0x8f/0xc0 [ 28.558163][ T396] ? vfs_iter_read+0xa0/0xa0 [ 28.562769][ T396] ? import_iovec+0x7c/0xb0 [ 28.567279][ T396] do_preadv+0x232/0x390 [ 28.571522][ T396] ? vfs_writev+0x5f0/0x5f0 [ 28.576029][ T396] ? fpregs_restore_userregs+0x128/0x260 [ 28.581682][ T396] __x64_sys_preadv+0x9e/0xb0 [ 28.586355][ T396] x64_sys_call+0x370/0x9a0 [ 28.590865][ T396] do_syscall_64+0x4c/0xa0 [ 28.595289][ T396] ? clear_bhb_loop+0x30/0x80 [ 28.599980][ T396] ? clear_bhb_loop+0x30/0x80 [ 28.604671][ T396] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 28.610594][ T396] RIP: 0033:0x7fe97e99acb9 [ 28.615033][ T396] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 28.634644][ T396] RSP: 002b:00007fe97f93a028 EFLAGS: 00000246 ORIG_RAX: 0000000000000127 [ 28.643072][ T396] RAX: ffffffffffffffda RBX: 00007fe97ec15fa0 RCX: 00007fe97e99acb9 [ 28.651060][ T396] RDX: 0000000000000001 RSI: 0000200000000240 RDI: 0000000000000003 [ 28.659057][ T396] RBP: 00007fe97ea08bf7 R08: 0000000000000000 R09: 0000000000000000 [ 28.667027][ T396] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 28.674995][ T396] R13: 00007fe97ec16038 R14: 00007fe97ec15fa0 R15: 00007fff66f9e288 [ 28.683071][ T396] [ 28.686091][ T396] [ 28.688410][ T396] The buggy address belongs to the physical page: [ 28.694817][ T396] page:ffffea0004bf7d40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12fdf5 [ 28.705055][ T396] flags: 0x4000000000000000(zone=1) [ 28.710269][ T396] raw: 4000000000000000 ffffea0004bf7d48 ffffea0004bf7d48 0000000000000000 [ 28.718845][ T396] raw: 0000000000000000 0000000000000000 00000000ffffffff 0000000000000000 [ 28.727418][ T396] page dumped because: kasan: bad access detected [ 28.733818][ T396] page_owner info is not present (never set?) [ 28.739877][ T396] [ 28.742200][ T396] Memory state around the buggy address: [ 28.747829][ T396] ffff88812fdf4f00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 28.755885][ T396] ffff88812fdf4f80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 28.763937][ T396] >ffff88812fdf5000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 28.771991][ T396] ^ [ 28.776843][ T396] ffff88812fdf5080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 28.784902][ T396] ffff88812fdf5100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 28.792953][ T396] ================================================================== [ 28.801753][ T396] Disabling lock debugging due to kernel taint [ 28.810952][ T28] kauditd_printk_skb: 40 callbacks suppressed [ 28.811403][ T28] audit: type=1400 audit(1768676642.631:114): avc: denied { read } for pid=85 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1 [ 28.811565][ T396] EXT4-fs error (device loop2): ext4_ext_split:1080: inode #15: comm syz.2.20: p_ext > EXT_MAX_EXTENT! [ 28.820688][ T28] audit: type=1400 audit(1768676642.641:115): avc: denied { search } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 28.840354][ T396] EXT4-fs (loop2): pa ffff8881236de9d8: logic 688, phys. 129, len 16 [ 28.851156][ T28] audit: type=1400 audit(1768676642.641:116): avc: denied { write } for pid=85 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 28.872244][ T396] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, [ 28.880575][ T28] audit: type=1400 audit(1768676642.641:117): avc: denied { add_name } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 28.902150][ T396] free 10, pa_free 9 [ 28.935265][ T28] audit: type=1400 audit(1768676642.641:118): avc: denied { create } for pid=85 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 28.935625][ T378] EXT4-fs error (device loop2): ext4_ext_split:1080: inode #15: comm kworker/u4:4: p_ext > EXT_MAX_EXTENT! [ 28.958701][ T28] audit: type=1400 audit(1768676642.641:119): avc: denied { append open } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 28.971076][ T378] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 28.990079][ T28] audit: type=1400 audit(1768676642.641:120): avc: denied { getattr } for pid=85 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 29.002812][ T378] EXT4-fs (loop2): This should not happen!! Data will be lost [ 29.002812][ T378] [ 29.035367][ T43] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 664 with max blocks 1 with error 117 [ 29.048120][ T43] EXT4-fs (loop2): This should not happen!! Data will be lost [ 29.048120][ T43] [ 29.066887][ T365] EXT4-fs (loop2): unmounting filesystem. [ 29.147851][ T403] loop2: detected capacity change from 0 to 1024 [ 29.157674][ T403] EXT4-fs: Ignoring removed nobh option [ 29.163278][ T403] EXT4-fs: Ignoring removed bh option [ 29.175328][ T403] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.197388][ T403] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 29.215751][ T402] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.21: Allocating blocks 497-513 which overlap fs metadata [ 29.229833][ T402] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.21: Allocating blocks 497-513 which overlap fs metadata [ 29.258616][ T402] EXT4-fs (loop2): pa ffff88811149ce70: logic 0, phys. 113, len 25 [ 29.266627][ T402] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 23, pa_free 24 [ 29.291951][ T365] EXT4-fs (loop2): unmounting filesystem. [ 29.371586][ T408] loop2: detected capacity change from 0 to 1024 [ 29.381606][ T408] EXT4-fs: Ignoring removed nobh option [ 29.387665][ T408] EXT4-fs: Ignoring removed bh option [ 29.393678][ T408] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.418615][ T408] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 29.573253][ T407] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.22: Allocating blocks 497-513 which overlap fs metadata [ 29.587254][ T407] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.22: Allocating blocks 497-513 which overlap fs metadata [ 29.606457][ T411] EXT4-fs (loop2): pa ffff88811149c7e0: logic 480, phys. 257, len 16 [ 29.614593][ T411] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 29.642292][ T365] EXT4-fs (loop2): unmounting filesystem. [ 29.726617][ T414] loop2: detected capacity change from 0 to 1024 [ 29.734792][ T414] EXT4-fs: Ignoring removed nobh option [ 29.741175][ T414] EXT4-fs: Ignoring removed bh option [ 29.761015][ T414] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 29.798428][ T414] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 29.963816][ T413] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.23: Allocating blocks 497-513 which overlap fs metadata [ 29.978119][ T413] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.23: Allocating blocks 497-513 which overlap fs metadata [ 29.998326][ T413] EXT4-fs (loop2): pa ffff8881236de0a8: logic 496, phys. 241, len 17 [ 30.006474][ T413] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 30.032736][ T365] EXT4-fs (loop2): unmounting filesystem. [ 30.113097][ T420] loop2: detected capacity change from 0 to 1024 [ 30.127107][ T420] EXT4-fs: Ignoring removed nobh option [ 30.132754][ T420] EXT4-fs: Ignoring removed bh option [ 30.138884][ T420] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.158847][ T420] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 30.277410][ T419] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.24: Allocating blocks 497-513 which overlap fs metadata [ 30.291488][ T419] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.24: Allocating blocks 497-513 which overlap fs metadata [ 30.311696][ T423] EXT4-fs (loop2): pa ffff88811149c498: logic 560, phys. 321, len 12 [ 30.319846][ T423] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 30.346971][ T365] EXT4-fs (loop2): unmounting filesystem. [ 30.420771][ T426] loop2: detected capacity change from 0 to 1024 [ 30.430778][ T426] EXT4-fs: Ignoring removed nobh option [ 30.436556][ T426] EXT4-fs: Ignoring removed bh option [ 30.445360][ T426] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.486961][ T426] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 30.621550][ T425] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.25: Allocating blocks 497-513 which overlap fs metadata [ 30.635564][ T425] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.25: Allocating blocks 497-513 which overlap fs metadata [ 30.654564][ T426] EXT4-fs (loop2): pa ffff888123705540: logic 528, phys. 257, len 16 [ 30.662798][ T426] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 30.689318][ T365] EXT4-fs (loop2): unmounting filesystem. [ 30.767664][ T433] loop2: detected capacity change from 0 to 1024 [ 30.783427][ T433] EXT4-fs: Ignoring removed nobh option [ 30.800572][ T433] EXT4-fs: Ignoring removed bh option [ 30.806449][ T433] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 30.829261][ T433] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 30.907809][ T432] EXT4-fs error (device loop2): ext4_ext_split:1080: inode #15: comm syz.2.26: p_ext > EXT_MAX_EXTENT! [ 30.919192][ T432] EXT4-fs (loop2): pa ffff8881237fcd20: logic 624, phys. 129, len 12 [ 30.927354][ T432] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 4, pa_free 3 [ 30.943881][ T306] EXT4-fs error (device loop2): ext4_ext_split:1080: inode #15: comm kworker/u4:3: p_ext > EXT_MAX_EXTENT! [ 30.955769][ T306] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 30.968092][ T306] EXT4-fs (loop2): This should not happen!! Data will be lost [ 30.968092][ T306] [ 30.978363][ T43] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 604 with max blocks 1 with error 117 [ 30.990848][ T43] EXT4-fs (loop2): This should not happen!! Data will be lost [ 30.990848][ T43] [ 31.009558][ T365] EXT4-fs (loop2): unmounting filesystem. [ 31.094836][ T439] loop2: detected capacity change from 0 to 1024 [ 31.126533][ T439] EXT4-fs: Ignoring removed nobh option [ 31.132226][ T439] EXT4-fs: Ignoring removed bh option [ 31.164032][ T439] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.186935][ T439] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 31.229050][ T438] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.27: Allocating blocks 497-513 which overlap fs metadata [ 31.243193][ T438] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.27: Allocating blocks 497-513 which overlap fs metadata [ 31.270611][ T438] EXT4-fs (loop2): pa ffff8881237fc930: logic 400, phys. 129, len 24 [ 31.278787][ T438] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 22, pa_free 23 [ 31.304493][ T365] EXT4-fs (loop2): unmounting filesystem. [ 31.383537][ T444] loop2: detected capacity change from 0 to 1024 [ 31.393524][ T444] EXT4-fs: Ignoring removed nobh option [ 31.399626][ T444] EXT4-fs: Ignoring removed bh option [ 31.405761][ T444] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.426498][ T444] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 31.567751][ T443] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.28: Allocating blocks 497-513 which overlap fs metadata [ 31.581666][ T443] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.28: Allocating blocks 497-513 which overlap fs metadata [ 31.601662][ T444] EXT4-fs (loop2): pa ffff8881237059d8: logic 480, phys. 209, len 19 [ 31.610010][ T444] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 31.637420][ T365] EXT4-fs (loop2): unmounting filesystem. 2026/01/17 19:04:05 executed programs: 14 [ 31.666609][ T28] audit: type=1400 audit(1768676645.481:121): avc: denied { write } for pid=283 comm="syz-execprog" path="pipe:[14471]" dev="pipefs" ino=14471 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 31.720364][ T450] loop2: detected capacity change from 0 to 1024 [ 31.730452][ T450] EXT4-fs: Ignoring removed nobh option [ 31.736524][ T450] EXT4-fs: Ignoring removed bh option [ 31.745413][ T450] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 31.798522][ T450] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 31.941444][ T449] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.29: Allocating blocks 497-513 which overlap fs metadata [ 31.955592][ T449] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.29: Allocating blocks 497-513 which overlap fs metadata [ 31.975567][ T449] EXT4-fs (loop2): pa ffff8881237fcc78: logic 992, phys. 481, len 2 [ 31.983641][ T449] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 32.011366][ T365] EXT4-fs (loop2): unmounting filesystem. [ 32.091823][ T456] loop2: detected capacity change from 0 to 1024 [ 32.101959][ T456] EXT4-fs: Ignoring removed nobh option [ 32.107841][ T456] EXT4-fs: Ignoring removed bh option [ 32.113795][ T456] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.136534][ T456] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 32.217022][ T455] EXT4-fs error (device loop2): ext4_ext_map_blocks:4184: inode #15: comm syz.2.30: bad extent address lblock: 600, depth: 1 pblock 0 [ 32.231682][ T455] EXT4-fs error (device loop2): ext4_ext_map_blocks:4184: inode #15: comm syz.2.30: bad extent address lblock: 600, depth: 1 pblock 0 [ 32.252083][ T378] EXT4-fs error (device loop2): ext4_ext_map_blocks:4184: inode #15: comm kworker/u4:4: bad extent address lblock: 1, depth: 1 pblock 0 [ 32.266251][ T378] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 32.278578][ T378] EXT4-fs (loop2): This should not happen!! Data will be lost [ 32.278578][ T378] [ 32.288735][ T43] EXT4-fs error (device loop2): ext4_ext_map_blocks:4184: inode #15: comm kworker/u4:2: bad extent address lblock: 440, depth: 1 pblock 0 [ 32.303317][ T43] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 440 with max blocks 1 with error 117 [ 32.315929][ T43] EXT4-fs (loop2): This should not happen!! Data will be lost [ 32.315929][ T43] [ 32.334442][ T365] EXT4-fs (loop2): unmounting filesystem. [ 32.413800][ T462] loop2: detected capacity change from 0 to 1024 [ 32.435453][ T462] EXT4-fs: Ignoring removed nobh option [ 32.441056][ T462] EXT4-fs: Ignoring removed bh option [ 32.448274][ T462] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.468852][ T462] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 32.622291][ T461] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.31: Allocating blocks 497-513 which overlap fs metadata [ 32.636465][ T461] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.31: Allocating blocks 497-513 which overlap fs metadata [ 32.655888][ T462] EXT4-fs (loop2): pa ffff888123705150: logic 560, phys. 305, len 13 [ 32.664028][ T462] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 32.689192][ T365] EXT4-fs (loop2): unmounting filesystem. [ 32.762227][ T468] loop2: detected capacity change from 0 to 1024 [ 32.769174][ T468] EXT4-fs: Ignoring removed nobh option [ 32.774904][ T468] EXT4-fs: Ignoring removed bh option [ 32.783080][ T468] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 32.812733][ T468] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 32.874834][ T471] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.32: Allocating blocks 497-513 which overlap fs metadata [ 32.973770][ T467] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.32: Allocating blocks 497-513 which overlap fs metadata [ 32.987893][ T467] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.32: Allocating blocks 497-513 which overlap fs metadata [ 33.026366][ T365] EXT4-fs (loop2): unmounting filesystem. [ 33.100514][ T474] loop2: detected capacity change from 0 to 1024 [ 33.119724][ T474] EXT4-fs: Ignoring removed nobh option [ 33.137120][ T474] EXT4-fs: Ignoring removed bh option [ 33.143441][ T474] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.169567][ T474] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 33.265486][ T477] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.33: Allocating blocks 497-513 which overlap fs metadata [ 33.377464][ T473] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.33: Allocating blocks 497-513 which overlap fs metadata [ 33.391532][ T473] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.33: Allocating blocks 497-513 which overlap fs metadata [ 33.428523][ T365] EXT4-fs (loop2): unmounting filesystem. [ 33.507286][ T480] loop2: detected capacity change from 0 to 1024 [ 33.521070][ T480] EXT4-fs: Ignoring removed nobh option [ 33.526752][ T480] EXT4-fs: Ignoring removed bh option [ 33.532573][ T480] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.553007][ T480] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 33.674057][ T479] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.34: Allocating blocks 497-513 which overlap fs metadata [ 33.688025][ T479] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.34: Allocating blocks 497-513 which overlap fs metadata [ 33.707668][ T479] EXT4-fs (loop2): pa ffff88813007ae70: logic 592, phys. 369, len 9 [ 33.715680][ T479] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 33.742534][ T365] EXT4-fs (loop2): unmounting filesystem. [ 33.816604][ T486] loop2: detected capacity change from 0 to 1024 [ 33.832918][ T486] EXT4-fs: Ignoring removed nobh option [ 33.850364][ T486] EXT4-fs: Ignoring removed bh option [ 33.857107][ T486] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 33.879164][ T486] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.030129][ T485] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.35: Allocating blocks 497-513 which overlap fs metadata [ 34.044246][ T485] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.35: Allocating blocks 497-513 which overlap fs metadata [ 34.064038][ T484] EXT4-fs (loop2): pa ffff88813007a690: logic 992, phys. 481, len 2 [ 34.072104][ T484] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 34.099240][ T365] EXT4-fs (loop2): unmounting filesystem. [ 34.172580][ T492] loop2: detected capacity change from 0 to 1024 [ 34.189053][ T492] EXT4-fs: Ignoring removed nobh option [ 34.207537][ T492] EXT4-fs: Ignoring removed bh option [ 34.214248][ T492] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.239958][ T492] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.335859][ T495] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.36: Allocating blocks 497-513 which overlap fs metadata [ 34.440507][ T491] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.36: Allocating blocks 497-513 which overlap fs metadata [ 34.454662][ T491] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.36: Allocating blocks 497-513 which overlap fs metadata [ 34.493214][ T365] EXT4-fs (loop2): unmounting filesystem. [ 34.572527][ T498] loop2: detected capacity change from 0 to 1024 [ 34.595987][ T498] EXT4-fs: Ignoring removed nobh option [ 34.601686][ T498] EXT4-fs: Ignoring removed bh option [ 34.610617][ T498] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.629106][ T498] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 34.770293][ T497] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.37: Allocating blocks 497-513 which overlap fs metadata [ 34.784248][ T497] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.37: Allocating blocks 497-513 which overlap fs metadata [ 34.803506][ T498] EXT4-fs (loop2): pa ffff888130104348: logic 896, phys. 433, len 5 [ 34.811545][ T498] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 34.839147][ T365] EXT4-fs (loop2): unmounting filesystem. [ 34.912531][ T504] loop2: detected capacity change from 0 to 1024 [ 34.928587][ T504] EXT4-fs: Ignoring removed nobh option [ 34.945358][ T504] EXT4-fs: Ignoring removed bh option [ 34.951349][ T504] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 34.977091][ T504] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.194550][ T503] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.38: Allocating blocks 497-513 which overlap fs metadata [ 35.208606][ T503] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.38: Allocating blocks 497-513 which overlap fs metadata [ 35.228505][ T503] EXT4-fs (loop2): pa ffff888130104dc8: logic 992, phys. 481, len 2 [ 35.236548][ T503] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 35.264058][ T365] EXT4-fs (loop2): unmounting filesystem. [ 35.338529][ T510] loop2: detected capacity change from 0 to 1024 [ 35.356003][ T510] EXT4-fs: Ignoring removed nobh option [ 35.361778][ T510] EXT4-fs: Ignoring removed bh option [ 35.376319][ T510] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.399487][ T510] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.590962][ T509] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.39: Allocating blocks 497-513 which overlap fs metadata [ 35.604998][ T509] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.39: Allocating blocks 497-513 which overlap fs metadata [ 35.624795][ T513] EXT4-fs (loop2): pa ffff8881301737e0: logic 960, phys. 465, len 3 [ 35.632834][ T513] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 35.660376][ T365] EXT4-fs (loop2): unmounting filesystem. [ 35.742543][ T516] loop2: detected capacity change from 0 to 1024 [ 35.758313][ T516] EXT4-fs: Ignoring removed nobh option [ 35.774833][ T516] EXT4-fs: Ignoring removed bh option [ 35.780872][ T516] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 35.796760][ T516] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 35.880226][ T515] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.40: Allocating blocks 497-513 which overlap fs metadata [ 35.894377][ T515] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.40: Allocating blocks 497-513 which overlap fs metadata [ 35.913829][ T516] EXT4-fs (loop2): pa ffff888130104000: logic 608, phys. 337, len 11 [ 35.922050][ T516] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 35.946324][ T365] EXT4-fs (loop2): unmounting filesystem. [ 36.024238][ T522] loop2: detected capacity change from 0 to 1024 [ 36.044504][ T522] EXT4-fs: Ignoring removed nobh option [ 36.054392][ T522] EXT4-fs: Ignoring removed bh option [ 36.071019][ T522] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.098312][ T522] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.166709][ T521] EXT4-fs error (device loop2): ext4_ext_split:1080: inode #15: comm syz.2.41: p_ext > EXT_MAX_EXTENT! [ 36.178068][ T521] EXT4-fs (loop2): pa ffff888130104b28: logic 688, phys. 129, len 16 [ 36.186234][ T521] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 8, pa_free 7 [ 36.196511][ T521] EXT4-fs error (device loop2): ext4_ext_split:1080: inode #15: comm syz.2.41: p_ext > EXT_MAX_EXTENT! [ 36.214298][ T378] EXT4-fs error (device loop2): ext4_ext_split:1080: inode #15: comm kworker/u4:4: p_ext > EXT_MAX_EXTENT! [ 36.226082][ T378] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 1 with max blocks 3 with error 117 [ 36.238401][ T378] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.238401][ T378] [ 36.248555][ T43] EXT4-fs error (device loop2): ext4_ext_split:1080: inode #15: comm kworker/u4:2: p_ext > EXT_MAX_EXTENT! [ 36.260450][ T43] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 656 with max blocks 1 with error 117 [ 36.273116][ T43] EXT4-fs (loop2): This should not happen!! Data will be lost [ 36.273116][ T43] [ 36.291872][ T365] EXT4-fs (loop2): unmounting filesystem. [ 36.367441][ T528] loop2: detected capacity change from 0 to 1024 [ 36.385660][ T528] EXT4-fs: Ignoring removed nobh option [ 36.394374][ T528] EXT4-fs: Ignoring removed bh option [ 36.401804][ T528] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.419634][ T528] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.552316][ T527] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.42: Allocating blocks 497-513 which overlap fs metadata [ 36.566308][ T527] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.42: Allocating blocks 497-513 which overlap fs metadata [ 36.586114][ T531] EXT4-fs (loop2): pa ffff888130104690: logic 528, phys. 257, len 16 [ 36.594207][ T531] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 36.620092][ T365] EXT4-fs (loop2): unmounting filesystem. [ 36.697699][ T534] loop2: detected capacity change from 0 to 1024 [ 36.706367][ T534] EXT4-fs: Ignoring removed nobh option [ 36.711971][ T534] EXT4-fs: Ignoring removed bh option [ 36.717811][ T534] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 36.739317][ T534] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 36.844452][ T533] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.43: Allocating blocks 497-513 which overlap fs metadata [ 36.858477][ T533] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.43: Allocating blocks 497-513 which overlap fs metadata [ 36.878164][ T533] EXT4-fs (loop2): pa ffff8881301f2bd0: logic 528, phys. 257, len 16 [ 36.886298][ T533] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 36.912070][ T365] EXT4-fs (loop2): unmounting filesystem. 2026/01/17 19:04:10 executed programs: 29 [ 36.991931][ T540] loop2: detected capacity change from 0 to 1024 [ 36.999034][ T540] EXT4-fs: Ignoring removed nobh option [ 37.004656][ T540] EXT4-fs: Ignoring removed bh option [ 37.010653][ T540] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.029273][ T540] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 37.130683][ T539] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.44: Allocating blocks 497-513 which overlap fs metadata [ 37.144635][ T539] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.44: Allocating blocks 497-513 which overlap fs metadata [ 37.163938][ T540] EXT4-fs (loop2): pa ffff8881301f2738: logic 528, phys. 257, len 16 [ 37.172126][ T540] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 37.198006][ T365] EXT4-fs (loop2): unmounting filesystem. [ 37.275005][ T546] loop2: detected capacity change from 0 to 1024 [ 37.282396][ T546] EXT4-fs: Ignoring removed nobh option [ 37.288062][ T546] EXT4-fs: Ignoring removed bh option [ 37.305773][ T546] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.328503][ T546] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 37.442264][ T545] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.45: Allocating blocks 497-513 which overlap fs metadata [ 37.456304][ T545] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.45: Allocating blocks 497-513 which overlap fs metadata [ 37.475458][ T545] EXT4-fs (loop2): pa ffff8881301f2c78: logic 592, phys. 321, len 12 [ 37.483555][ T545] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 37.508430][ T365] EXT4-fs (loop2): unmounting filesystem. [ 37.584935][ T552] loop2: detected capacity change from 0 to 1024 [ 37.592975][ T552] EXT4-fs: Ignoring removed nobh option [ 37.599240][ T552] EXT4-fs: Ignoring removed bh option [ 37.619206][ T552] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.658395][ T552] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 37.753428][ T551] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.46: Allocating blocks 497-513 which overlap fs metadata [ 37.767459][ T551] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.46: Allocating blocks 497-513 which overlap fs metadata [ 37.787250][ T550] EXT4-fs (loop2): pa ffff888130173000: logic 608, phys. 337, len 11 [ 37.795441][ T550] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 37.818830][ T365] EXT4-fs (loop2): unmounting filesystem. [ 37.896251][ T558] loop2: detected capacity change from 0 to 1024 [ 37.915778][ T558] EXT4-fs: Ignoring removed nobh option [ 37.921472][ T558] EXT4-fs: Ignoring removed bh option [ 37.934925][ T558] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 37.956790][ T558] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 38.056442][ T557] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.47: Allocating blocks 497-513 which overlap fs metadata [ 38.070602][ T557] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3836: comm syz.2.47: Allocating blocks 497-513 which overlap fs metadata [ 38.089871][ T557] EXT4-fs (loop2): pa ffff8881301f2690: logic 560, phys. 305, len 13 [ 38.097988][ T557] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4876: group 0, free 0, pa_free 1 [ 38.122924][ T365] EXT4-fs (loop2): unmounting filesystem.