Warning: Permanently added '10.128.0.46' (ED25519) to the list of known hosts. 2025/12/24 02:32:29 parsed 1 programs [ 81.787358][ T49] cfg80211: failed to load regulatory.db [ 83.119572][ T5801] cgroup: Unknown subsys name 'net' [ 83.360415][ T5801] cgroup: Unknown subsys name 'cpuset' [ 83.416252][ T5801] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.051600][ T5801] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.217111][ T1302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.217136][ T1302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.273713][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.273733][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.005513][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 91.448580][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.449428][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.449596][ T5849] bridge_slave_0: entered allmulticast mode [ 91.451076][ T5849] bridge_slave_0: entered promiscuous mode [ 91.485965][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.486519][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.486714][ T5849] bridge_slave_1: entered allmulticast mode [ 91.489123][ T5849] bridge_slave_1: entered promiscuous mode [ 91.730094][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.733314][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.948675][ T5849] team0: Port device team_slave_0 added [ 91.952500][ T5849] team0: Port device team_slave_1 added [ 92.078877][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.078895][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.078920][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.082635][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.082651][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 92.082668][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.287289][ T5849] hsr_slave_0: entered promiscuous mode [ 92.288928][ T5849] hsr_slave_1: entered promiscuous mode [ 92.814616][ T5849] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.857801][ T5849] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.900117][ T5849] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.920041][ T5849] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.047908][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.069617][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.077923][ T990] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.078137][ T990] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.103648][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.103781][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.316027][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.362702][ T5849] veth0_vlan: entered promiscuous mode [ 93.373647][ T5849] veth1_vlan: entered promiscuous mode [ 93.402202][ T5849] veth0_macvtap: entered promiscuous mode [ 93.414254][ T5849] veth1_macvtap: entered promiscuous mode [ 93.435493][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.447967][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.473788][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.485293][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.489168][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.489219][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.211668][ T1302] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.468975][ T1302] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.714644][ T1302] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.390359][ T5115] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.392290][ T5115] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.393222][ T5115] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.394972][ T5115] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.406183][ T5115] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.531062][ T1302] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.796054][ T1302] bridge_slave_1: left allmulticast mode [ 96.796275][ T1302] bridge_slave_1: left promiscuous mode [ 96.798324][ T1302] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.888585][ T1302] bridge_slave_0: left allmulticast mode [ 96.888612][ T1302] bridge_slave_0: left promiscuous mode [ 96.888844][ T1302] bridge0: port 1(bridge_slave_0) entered disabled state 2025/12/24 02:32:46 executed programs: 0 [ 97.431715][ T61] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 97.434573][ T61] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 97.435321][ T61] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 97.449272][ T61] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 97.450057][ T61] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.746386][ T1302] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.823769][ T1302] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.862978][ T1302] bond0 (unregistering): Released all slaves [ 99.206414][ T1302] hsr_slave_0: left promiscuous mode [ 99.245911][ T1302] hsr_slave_1: left promiscuous mode [ 99.247137][ T1302] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.247224][ T1302] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.308633][ T1302] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.308660][ T1302] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.410658][ T1302] veth1_macvtap: left promiscuous mode [ 99.410904][ T1302] veth0_macvtap: left promiscuous mode [ 99.411164][ T1302] veth1_vlan: left promiscuous mode [ 99.411460][ T1302] veth0_vlan: left promiscuous mode [ 99.527893][ T5115] Bluetooth: hci0: command tx timeout [ 101.396326][ T1302] team0 (unregistering): Port device team_slave_1 removed [ 101.607805][ T5115] Bluetooth: hci0: command tx timeout [ 101.609494][ T1302] team0 (unregistering): Port device team_slave_0 removed [ 103.685788][ T5115] Bluetooth: hci0: command tx timeout [ 103.845397][ T5923] chnl_net:caif_netlink_parms(): no params data found [ 104.210207][ T5923] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.210399][ T5923] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.210590][ T5923] bridge_slave_0: entered allmulticast mode [ 104.213162][ T5923] bridge_slave_0: entered promiscuous mode [ 104.244305][ T5923] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.244484][ T5923] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.244671][ T5923] bridge_slave_1: entered allmulticast mode [ 104.267917][ T5923] bridge_slave_1: entered promiscuous mode [ 104.452385][ T5923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.461399][ T5923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.641314][ T5923] team0: Port device team_slave_0 added [ 104.644689][ T5923] team0: Port device team_slave_1 added [ 105.313991][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.314008][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.314204][ T5923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.318410][ T5923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.318425][ T5923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 105.318449][ T5923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.529503][ T5923] hsr_slave_0: entered promiscuous mode [ 105.530682][ T5923] hsr_slave_1: entered promiscuous mode [ 105.766013][ T5115] Bluetooth: hci0: command tx timeout [ 107.462166][ T5923] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.499222][ T5923] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.539120][ T5923] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.579632][ T5923] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.730167][ T5923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.760308][ T5923] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.780421][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.780660][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.809499][ T1302] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.809653][ T1302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.111396][ T5923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.182262][ T5923] veth0_vlan: entered promiscuous mode [ 108.208263][ T5923] veth1_vlan: entered promiscuous mode [ 108.257045][ T5923] veth0_macvtap: entered promiscuous mode [ 108.261634][ T5923] veth1_macvtap: entered promiscuous mode [ 108.297411][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.310266][ T5923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.338611][ T990] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.339288][ T990] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.340944][ T990] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.340983][ T990] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.538028][ T1302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.538048][ T1302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.593464][ T990] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.593483][ T990] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 2025/12/24 02:32:57 executed programs: 2 [ 108.734180][ T6058] loop0: detected capacity change from 0 to 1024 [ 108.760632][ T6058] ======================================================= [ 108.760632][ T6058] WARNING: The mand mount option has been deprecated and [ 108.760632][ T6058] and is ignored by this kernel. Remove the mand [ 108.760632][ T6058] option from the mount to silence this warning. [ 108.760632][ T6058] ======================================================= [ 108.760721][ T6058] EXT4-fs: Ignoring removed orlov option [ 108.760764][ T6058] EXT4-fs: inline encryption not supported [ 108.833574][ T6058] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.074265][ T5923] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.216437][ T6074] loop0: detected capacity change from 0 to 1024 [ 109.226769][ T6074] EXT4-fs: Ignoring removed orlov option [ 109.226797][ T6074] EXT4-fs: inline encryption not supported [ 109.263691][ T6074] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.363883][ T5923] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 109.442028][ T6081] loop0: detected capacity change from 0 to 1024 [ 109.443128][ T6081] EXT4-fs: Ignoring removed orlov option [ 109.443154][ T6081] EXT4-fs: inline encryption not supported [ 109.480784][ T6081] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 109.570226][ T6081] ================================================================== [ 109.570240][ T6081] BUG: KASAN: use-after-free in ext4_find_extent+0xae6/0xcc0 [ 109.570277][ T6081] Read of size 4 at addr ffff888049675538 by task syz.0.19/6081 [ 109.570293][ T6081] [ 109.570317][ T6081] CPU: 0 UID: 0 PID: 6081 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 109.570337][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.570354][ T6081] Call Trace: [ 109.570364][ T6081] [ 109.570371][ T6081] dump_stack_lvl+0xe8/0x150 [ 109.570396][ T6081] print_report+0xca/0x240 [ 109.570416][ T6081] ? ext4_find_extent+0xae6/0xcc0 [ 109.570437][ T6081] kasan_report+0x118/0x150 [ 109.570464][ T6081] ? ext4_find_extent+0xae6/0xcc0 [ 109.570490][ T6081] ext4_find_extent+0xae6/0xcc0 [ 109.570516][ T6081] ext4_ext_map_blocks+0x278/0x69c0 [ 109.570547][ T6081] ? __lock_acquire+0x6b6/0x2cf0 [ 109.570574][ T6081] ? __lock_acquire+0x6b6/0x2cf0 [ 109.570595][ T6081] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 109.570621][ T6081] ? rt_read_lock+0x203/0x490 [ 109.570650][ T6081] ? ext4_map_blocks+0x4a4/0x16f0 [ 109.570677][ T6081] ext4_map_query_blocks+0x135/0x9f0 [ 109.570699][ T6081] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 109.570715][ T6081] ? down_read+0x181/0x1f0 [ 109.570732][ T6081] ? __pfx_down_read+0x10/0x10 [ 109.570749][ T6081] ? ext4_es_lookup_extent+0x6cd/0xb00 [ 109.570769][ T6081] ext4_map_blocks+0x4b8/0x16f0 [ 109.570791][ T6081] ? __pfx_ext4_map_blocks+0x10/0x10 [ 109.570809][ T6081] ? __lock_acquire+0x6b6/0x2cf0 [ 109.570833][ T6081] ? percpu_ref_get_many+0x19/0x140 [ 109.570853][ T6081] _ext4_get_block+0x1fa/0x4c0 [ 109.570872][ T6081] ? __pfx__ext4_get_block+0x10/0x10 [ 109.570891][ T6081] ? __ext4_journal_ensure_credits+0x30/0x450 [ 109.570915][ T6081] ext4_block_write_begin+0xb03/0x1940 [ 109.570940][ T6081] ? __pfx_ext4_get_block+0x10/0x10 [ 109.570955][ T6081] ? __pfx_ext4_block_write_begin+0x10/0x10 [ 109.570974][ T6081] ? folio_mapping+0x16f/0x1f0 [ 109.570997][ T6081] ext4_write_begin+0xb3a/0x1870 [ 109.571031][ T6081] ? __pfx_ext4_write_begin+0x10/0x10 [ 109.571057][ T6081] ? __ext4_mark_inode_dirty+0x4c8/0x6e0 [ 109.571078][ T6081] ext4_da_write_begin+0x352/0xd30 [ 109.571108][ T6081] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 109.571138][ T6081] generic_perform_write+0x29d/0x8c0 [ 109.571169][ T6081] ? __pfx_generic_perform_write+0x10/0x10 [ 109.571195][ T6081] ? file_update_time_flags+0x44e/0x4f0 [ 109.571220][ T6081] ? ext4_write_checks+0x24d/0x2d0 [ 109.571241][ T6081] ext4_buffered_write_iter+0xd0/0x3a0 [ 109.571262][ T6081] ext4_file_write_iter+0x293/0x1be0 [ 109.571283][ T6081] ? try_to_wake_up+0x82b/0x12b0 [ 109.571311][ T6081] ? vfs_write+0x217/0xb40 [ 109.571334][ T6081] ? vfs_write+0x217/0xb40 [ 109.571356][ T6081] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 109.571381][ T6081] vfs_write+0x5d5/0xb40 [ 109.571407][ T6081] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 109.571427][ T6081] ? __pfx_vfs_write+0x10/0x10 [ 109.571455][ T6081] ? __fget_files+0x2a/0x420 [ 109.571477][ T6081] __x64_sys_pwrite64+0x196/0x220 [ 109.571505][ T6081] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 109.571535][ T6081] do_syscall_64+0xec/0xf80 [ 109.571552][ T6081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.571570][ T6081] ? trace_irq_disable+0x37/0x100 [ 109.571590][ T6081] ? clear_bhb_loop+0x60/0xb0 [ 109.571611][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.571629][ T6081] RIP: 0033:0x7fc982def749 [ 109.571653][ T6081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.571675][ T6081] RSP: 002b:00007fc982456038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 109.571695][ T6081] RAX: ffffffffffffffda RBX: 00007fc983045fa0 RCX: 00007fc982def749 [ 109.571709][ T6081] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000004 [ 109.571721][ T6081] RBP: 00007fc982e73f91 R08: 0000000000000000 R09: 0000000000000000 [ 109.571733][ T6081] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 109.571745][ T6081] R13: 00007fc983046038 R14: 00007fc983045fa0 R15: 00007fffc5aa68c8 [ 109.571765][ T6081] [ 109.571772][ T6081] [ 109.571777][ T6081] The buggy address belongs to the physical page: [ 109.571794][ T6081] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x55 pfn:0x49675 [ 109.571810][ T6081] flags: 0x80000000000000(node=0|zone=1) [ 109.571836][ T6081] raw: 0080000000000000 ffffea0001259d08 ffffea0001259d88 0000000000000000 [ 109.571852][ T6081] raw: 0000000000000055 0000000000000000 00000000ffffffff 0000000000000000 [ 109.571861][ T6081] page dumped because: kasan: bad access detected [ 109.571874][ T6081] page_owner tracks the page as freed [ 109.571881][ T6081] page last allocated via order 0, migratetype Movable, gfp_mask 0x140cca(GFP_HIGHUSER_MOVABLE|__GFP_COMP), pid 6074, tgid 6072 (syz.0.18), ts 109194943212, free_ts 109407896604 [ 109.571910][ T6081] post_alloc_hook+0x234/0x290 [ 109.571934][ T6081] get_page_from_freelist+0x28c0/0x2960 [ 109.571951][ T6081] __alloc_frozen_pages_noprof+0x181/0x370 [ 109.571967][ T6081] alloc_pages_mpol+0xd1/0x380 [ 109.571981][ T6081] folio_alloc_mpol_noprof+0x39/0xe0 [ 109.571996][ T6081] shmem_get_folio_gfp+0x633/0x1a70 [ 109.572018][ T6081] shmem_write_begin+0x166/0x320 [ 109.572040][ T6081] generic_perform_write+0x29d/0x8c0 [ 109.572064][ T6081] shmem_file_write_iter+0xfb/0x120 [ 109.572080][ T6081] vfs_write+0x5d5/0xb40 [ 109.572101][ T6081] ksys_write+0x14b/0x260 [ 109.572122][ T6081] do_syscall_64+0xec/0xf80 [ 109.572137][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.572153][ T6081] page last free pid 5923 tgid 5923 stack trace: [ 109.572163][ T6081] free_unref_folios+0xc28/0x1810 [ 109.572187][ T6081] folios_put_refs+0x569/0x670 [ 109.572201][ T6081] shmem_undo_range+0x49e/0x1490 [ 109.572222][ T6081] shmem_evict_inode+0x26e/0xa70 [ 109.572236][ T6081] evict+0x5f4/0xae0 [ 109.572256][ T6081] __dentry_kill+0x209/0x660 [ 109.572278][ T6081] finish_dput+0xc9/0x480 [ 109.572295][ T6081] __fput+0x69d/0xa80 [ 109.572310][ T6081] task_work_run+0x1d4/0x260 [ 109.572330][ T6081] exit_to_user_mode_loop+0xef/0x4e0 [ 109.572349][ T6081] do_syscall_64+0x2b7/0xf80 [ 109.572363][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.572377][ T6081] [ 109.572381][ T6081] Memory state around the buggy address: [ 109.572391][ T6081] ffff888049675400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 109.572402][ T6081] ffff888049675480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 109.572413][ T6081] >ffff888049675500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 109.572422][ T6081] ^ [ 109.572431][ T6081] ffff888049675580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 109.572443][ T6081] ffff888049675600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 109.572452][ T6081] ================================================================== [ 109.598345][ T6081] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.598380][ T6081] CPU: 1 UID: 0 PID: 6081 Comm: syz.0.19 Not tainted syzkaller #0 PREEMPT_{RT,(full)} [ 109.598402][ T6081] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 109.598414][ T6081] Call Trace: [ 109.598421][ T6081] [ 109.598429][ T6081] vpanic+0x1e0/0x670 [ 109.598460][ T6081] panic+0xb9/0xc0 [ 109.598483][ T6081] ? __pfx_panic+0x10/0x10 [ 109.598509][ T6081] ? preempt_schedule_common+0x83/0xd0 [ 109.598540][ T6081] ? ext4_find_extent+0xae6/0xcc0 [ 109.598565][ T6081] check_panic_on_warn+0x89/0xb0 [ 109.598591][ T6081] ? ext4_find_extent+0xae6/0xcc0 [ 109.598614][ T6081] end_report+0x6f/0x140 [ 109.598640][ T6081] kasan_report+0x129/0x150 [ 109.598668][ T6081] ? ext4_find_extent+0xae6/0xcc0 [ 109.598693][ T6081] ext4_find_extent+0xae6/0xcc0 [ 109.598720][ T6081] ext4_ext_map_blocks+0x278/0x69c0 [ 109.598753][ T6081] ? __lock_acquire+0x6b6/0x2cf0 [ 109.598783][ T6081] ? __lock_acquire+0x6b6/0x2cf0 [ 109.598805][ T6081] ? __pfx_ext4_ext_map_blocks+0x10/0x10 [ 109.598833][ T6081] ? rt_read_lock+0x203/0x490 [ 109.598861][ T6081] ? ext4_map_blocks+0x4a4/0x16f0 [ 109.598881][ T6081] ext4_map_query_blocks+0x135/0x9f0 [ 109.598903][ T6081] ? __pfx_ext4_map_query_blocks+0x10/0x10 [ 109.598920][ T6081] ? down_read+0x181/0x1f0 [ 109.598944][ T6081] ? __pfx_down_read+0x10/0x10 [ 109.598962][ T6081] ? ext4_es_lookup_extent+0x6cd/0xb00 [ 109.598983][ T6081] ext4_map_blocks+0x4b8/0x16f0 [ 109.599007][ T6081] ? __pfx_ext4_map_blocks+0x10/0x10 [ 109.599025][ T6081] ? __lock_acquire+0x6b6/0x2cf0 [ 109.599051][ T6081] ? percpu_ref_get_many+0x19/0x140 [ 109.599072][ T6081] _ext4_get_block+0x1fa/0x4c0 [ 109.599091][ T6081] ? __pfx__ext4_get_block+0x10/0x10 [ 109.599111][ T6081] ? __ext4_journal_ensure_credits+0x30/0x450 [ 109.599136][ T6081] ext4_block_write_begin+0xb03/0x1940 [ 109.599162][ T6081] ? __pfx_ext4_get_block+0x10/0x10 [ 109.599179][ T6081] ? __pfx_ext4_block_write_begin+0x10/0x10 [ 109.599199][ T6081] ? folio_mapping+0x16f/0x1f0 [ 109.599222][ T6081] ext4_write_begin+0xb3a/0x1870 [ 109.599258][ T6081] ? __pfx_ext4_write_begin+0x10/0x10 [ 109.599284][ T6081] ? __ext4_mark_inode_dirty+0x4c8/0x6e0 [ 109.599312][ T6081] ext4_da_write_begin+0x352/0xd30 [ 109.599345][ T6081] ? __pfx_ext4_da_write_begin+0x10/0x10 [ 109.599380][ T6081] generic_perform_write+0x29d/0x8c0 [ 109.599413][ T6081] ? __pfx_generic_perform_write+0x10/0x10 [ 109.599440][ T6081] ? file_update_time_flags+0x44e/0x4f0 [ 109.599465][ T6081] ? ext4_write_checks+0x24d/0x2d0 [ 109.599486][ T6081] ext4_buffered_write_iter+0xd0/0x3a0 [ 109.599508][ T6081] ext4_file_write_iter+0x293/0x1be0 [ 109.599529][ T6081] ? try_to_wake_up+0x82b/0x12b0 [ 109.599555][ T6081] ? vfs_write+0x217/0xb40 [ 109.599579][ T6081] ? vfs_write+0x217/0xb40 [ 109.599602][ T6081] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 109.599627][ T6081] vfs_write+0x5d5/0xb40 [ 109.599652][ T6081] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 109.599677][ T6081] ? __pfx_vfs_write+0x10/0x10 [ 109.599708][ T6081] ? __fget_files+0x2a/0x420 [ 109.599728][ T6081] __x64_sys_pwrite64+0x196/0x220 [ 109.599834][ T6081] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 109.599861][ T6081] do_syscall_64+0xec/0xf80 [ 109.599878][ T6081] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.599895][ T6081] ? trace_irq_disable+0x37/0x100 [ 109.599921][ T6081] ? clear_bhb_loop+0x60/0xb0 [ 109.599941][ T6081] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.599960][ T6081] RIP: 0033:0x7fc982def749 [ 109.599977][ T6081] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 109.599992][ T6081] RSP: 002b:00007fc982456038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 109.600011][ T6081] RAX: ffffffffffffffda RBX: 00007fc983045fa0 RCX: 00007fc982def749 [ 109.600024][ T6081] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000004 [ 109.600035][ T6081] RBP: 00007fc982e73f91 R08: 0000000000000000 R09: 0000000000000000 [ 109.600045][ T6081] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000 [ 109.600056][ T6081] R13: 00007fc983046038 R14: 00007fc983045fa0 R15: 00007fffc5aa68c8 [ 109.600074][ T6081] [ 109.600545][ T6081] Kernel Offset: disabled