Warning: Permanently added '[localhost]:16848' (ED25519) to the list of known hosts.
2025/10/16 09:06:36 parsed 1 programs
syzkaller login: [ 84.377909][ T5312] cgroup: Unknown subsys name 'net'
[ 84.450117][ T5312] cgroup: Unknown subsys name 'cpuset'
[ 84.456590][ T5312] cgroup: Unknown subsys name 'rlimit'
[ 86.083083][ T5312] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 89.973559][ T5326] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 91.051425][ T5344] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 91.057664][ T5344] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 91.076500][ T5344] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 91.080680][ T5344] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 91.084031][ T5344] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 91.878784][ T5358] chnl_net:caif_netlink_parms(): no params data found
[ 91.891749][ T10] cfg80211: failed to load regulatory.db
[ 91.956274][ T5358] bridge0: port 1(bridge_slave_0) entered blocking state
[ 91.960200][ T5358] bridge0: port 1(bridge_slave_0) entered disabled state
[ 91.963308][ T5358] bridge_slave_0: entered allmulticast mode
[ 91.967707][ T5358] bridge_slave_0: entered promiscuous mode
[ 91.972814][ T5358] bridge0: port 2(bridge_slave_1) entered blocking state
[ 91.976382][ T5358] bridge0: port 2(bridge_slave_1) entered disabled state
[ 91.979612][ T5358] bridge_slave_1: entered allmulticast mode
[ 91.983278][ T5358] bridge_slave_1: entered promiscuous mode
[ 92.010691][ T5358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 92.018386][ T5358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 92.043703][ T5358] team0: Port device team_slave_0 added
[ 92.050849][ T5358] team0: Port device team_slave_1 added
[ 92.074502][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 92.077609][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 92.089045][ T5358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 92.096320][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 92.099445][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 92.111732][ T5358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 92.157694][ T5358] hsr_slave_0: entered promiscuous mode
[ 92.161548][ T5358] hsr_slave_1: entered promiscuous mode
[ 92.319012][ T5358] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 92.328480][ T5358] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 92.334763][ T5358] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 92.341663][ T5358] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 92.423326][ T5358] 8021q: adding VLAN 0 to HW filter on device bond0
[ 92.440505][ T5358] 8021q: adding VLAN 0 to HW filter on device team0
[ 92.453930][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 92.456998][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 92.471558][ T12] bridge0: port 2(bridge_slave_1) entered blocking state
[ 92.474701][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 92.653334][ T5358] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 92.692718][ T5358] veth0_vlan: entered promiscuous mode
[ 92.701205][ T5358] veth1_vlan: entered promiscuous mode
[ 92.728149][ T5358] veth0_macvtap: entered promiscuous mode
[ 92.733590][ T5358] veth1_macvtap: entered promiscuous mode
[ 92.750322][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 92.761601][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 92.772164][ T129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.791127][ T129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.794945][ T129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.810443][ T129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 92.942431][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 92.990443][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 93.030539][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 93.078558][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 93.404955][ T129] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.409771][ T129] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 93.443398][ T129] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 93.447998][ T129] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 95.606077][ T12] bridge_slave_1: left allmulticast mode
[ 95.608405][ T12] bridge_slave_1: left promiscuous mode
[ 95.611206][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 95.639755][ T12] bridge_slave_0: left allmulticast mode
[ 95.642403][ T12] bridge_slave_0: left promiscuous mode
[ 95.644784][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
2025/10/16 09:06:50 executed programs: 0
[ 96.262992][ T4668] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 96.267057][ T4668] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 96.270608][ T4668] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 96.274470][ T4668] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 96.278590][ T4668] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 96.307767][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 96.313937][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 96.319179][ T12] bond0 (unregistering): Released all slaves
[ 96.448953][ T12] hsr_slave_0: left promiscuous mode
[ 96.451786][ T12] hsr_slave_1: left promiscuous mode
[ 96.454294][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 96.463245][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 96.477000][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 96.480157][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 96.503808][ T12] veth1_macvtap: left promiscuous mode
[ 96.516346][ T12] veth0_macvtap: left promiscuous mode
[ 96.519317][ T12] veth1_vlan: left promiscuous mode
[ 96.521762][ T12] veth0_vlan: left promiscuous mode
[ 96.912641][ T12] team0 (unregistering): Port device team_slave_1 removed
[ 96.933208][ T12] team0 (unregistering): Port device team_slave_0 removed
[ 97.404619][ T5430] chnl_net:caif_netlink_parms(): no params data found
[ 97.884201][ T5430] bridge0: port 1(bridge_slave_0) entered blocking state
[ 97.902766][ T5430] bridge0: port 1(bridge_slave_0) entered disabled state
[ 97.912391][ T5430] bridge_slave_0: entered allmulticast mode
[ 97.923414][ T5430] bridge_slave_0: entered promiscuous mode
[ 97.945459][ T5430] bridge0: port 2(bridge_slave_1) entered blocking state
[ 97.970177][ T5430] bridge0: port 2(bridge_slave_1) entered disabled state
[ 97.973299][ T5430] bridge_slave_1: entered allmulticast mode
[ 98.001435][ T5430] bridge_slave_1: entered promiscuous mode
[ 98.155037][ T5430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 98.243861][ T5430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 98.371300][ T5344] Bluetooth: hci0: command tx timeout
[ 98.383782][ T5430] team0: Port device team_slave_0 added
[ 98.393496][ T5430] team0: Port device team_slave_1 added
[ 98.466740][ T5430] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 98.469739][ T5430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.489543][ T5430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 98.532762][ T5430] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 98.536001][ T5430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 98.571839][ T5430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 98.689864][ T5430] hsr_slave_0: entered promiscuous mode
[ 98.692930][ T5430] hsr_slave_1: entered promiscuous mode
[ 99.177311][ T5430] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 99.184937][ T5430] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 99.198636][ T5430] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 99.216126][ T5430] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 99.342595][ T5430] 8021q: adding VLAN 0 to HW filter on device bond0
[ 99.380624][ T5430] 8021q: adding VLAN 0 to HW filter on device team0
[ 99.402316][ T129] bridge0: port 1(bridge_slave_0) entered blocking state
[ 99.405260][ T129] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 99.417929][ T129] bridge0: port 2(bridge_slave_1) entered blocking state
[ 99.420910][ T129] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 99.755186][ T5430] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 99.826488][ T5430] veth0_vlan: entered promiscuous mode
[ 99.835091][ T5430] veth1_vlan: entered promiscuous mode
[ 99.897595][ T5430] veth0_macvtap: entered promiscuous mode
[ 99.909847][ T5430] veth1_macvtap: entered promiscuous mode
[ 99.934754][ T5430] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 99.961745][ T5430] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 99.998543][ T31] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.021247][ T31] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.035085][ T31] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.052894][ T31] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 100.114189][ T31] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.132337][ T31] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.178722][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.182221][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.303290][ T5493] loop0: detected capacity change from 0 to 1024
[ 100.332843][ T5493] =======================================================
[ 100.332843][ T5493] WARNING: The mand mount option has been deprecated and
[ 100.332843][ T5493] and is ignored by this kernel. Remove the mand
[ 100.332843][ T5493] option from the mount to silence this warning.
[ 100.332843][ T5493] =======================================================
[ 100.376903][ T5493] EXT4-fs: Ignoring removed oldalloc option
[ 100.379627][ T5493] EXT4-fs: Ignoring removed orlov option
[ 100.397593][ T5493] EXT4-fs (loop0): stripe (2) is not aligned with cluster size (16), stripe is disabled
[ 100.437303][ T5493] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 100.445875][ T5344] Bluetooth: hci0: command tx timeout
[ 100.512186][ T12] ==================================================================
[ 100.515658][ T12] BUG: KASAN: use-after-free in ext4_find_extent+0xae6/0xcc0
[ 100.518818][ T12] Read of size 4 at addr ffff8880463ad51c by task kworker/u4:0/12
[ 100.523077][ T12]
[ 100.524085][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u4:0 Not tainted syzkaller #0 PREEMPT(full)
[ 100.524099][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 100.524107][ T12] Workqueue: writeback wb_workfn (flush-7:0)
[ 100.524129][ T12] Call Trace:
[ 100.524139][ T12]
[ 100.524144][ T12] dump_stack_lvl+0x189/0x250
[ 100.524156][ T12] ? __virt_addr_valid+0x1c8/0x5c0
[ 100.524167][ T12] ? rcu_is_watching+0x15/0xb0
[ 100.524183][ T12] ? __pfx_dump_stack_lvl+0x10/0x10
[ 100.524192][ T12] ? rcu_is_watching+0x15/0xb0
[ 100.524204][ T12] ? lock_release+0x4b/0x3e0
[ 100.524217][ T12] ? _raw_spin_lock_irqsave+0xb3/0xf0
[ 100.524283][ T12] ? __virt_addr_valid+0x1c8/0x5c0
[ 100.524293][ T12] ? __virt_addr_valid+0x4a5/0x5c0
[ 100.524304][ T12] print_report+0xca/0x240
[ 100.524316][ T12] ? ext4_find_extent+0xae6/0xcc0
[ 100.524329][ T12] kasan_report+0x118/0x150
[ 100.524341][ T12] ? ext4_find_extent+0xae6/0xcc0
[ 100.524354][ T12] ext4_find_extent+0xae6/0xcc0
[ 100.524367][ T12] ext4_ext_map_blocks+0x288/0x6ac0
[ 100.524385][ T12] ? __lock_acquire+0xab9/0xd20
[ 100.524400][ T12] ? __pfx_ext4_ext_map_blocks+0x10/0x10
[ 100.524416][ T12] ? ext4_es_lookup_extent+0x622/0xa70
[ 100.524432][ T12] ext4_map_blocks+0x860/0x1740
[ 100.524444][ T12] ? __pfx_ext4_map_blocks+0x10/0x10
[ 100.524455][ T12] ? rcu_is_watching+0x15/0xb0
[ 100.524467][ T12] ? trace_kmem_cache_alloc+0x1f/0xc0
[ 100.524480][ T12] ? kmem_cache_alloc_noprof+0x3b8/0x6e0
[ 100.524496][ T12] ? ext4_inode_journal_mode+0x18c/0x480
[ 100.524507][ T12] ext4_do_writepages+0x1f88/0x4610
[ 100.524526][ T12] ? lockdep_unlock+0x89/0x120
[ 100.524539][ T12] ? __pfx_ext4_do_writepages+0x10/0x10
[ 100.524554][ T12] ? __lock_acquire+0xab9/0xd20
[ 100.524568][ T12] ? rcu_read_lock_any_held+0xb3/0x120
[ 100.524586][ T12] ext4_writepages+0x205/0x350
[ 100.524598][ T12] ? lockdep_unlock+0x89/0x120
[ 100.524609][ T12] ? __pfx_ext4_writepages+0x10/0x10
[ 100.524626][ T12] ? __pfx_ext4_writepages+0x10/0x10
[ 100.524638][ T12] do_writepages+0x32e/0x550
[ 100.524654][ T12] ? reacquire_held_locks+0x127/0x1d0
[ 100.524668][ T12] ? writeback_sb_inodes+0x384/0x1010
[ 100.524685][ T12] __writeback_single_inode+0x145/0xff0
[ 100.524700][ T12] ? do_raw_spin_unlock+0x4d/0x240
[ 100.524710][ T12] writeback_sb_inodes+0x6c7/0x1010
[ 100.524723][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10
[ 100.524737][ T12] ? rcu_is_watching+0x15/0xb0
[ 100.524746][ T12] wb_writeback+0x43b/0xaf0
[ 100.524756][ T12] ? queue_io+0x301/0x590
[ 100.524765][ T12] ? __pfx_wb_writeback+0x10/0x10
[ 100.524774][ T12] ? _raw_spin_unlock_irq+0x23/0x50
[ 100.524784][ T12] wb_workfn+0x409/0xef0
[ 100.524799][ T12] ? __pfx_wb_workfn+0x10/0x10
[ 100.524808][ T12] ? __lock_acquire+0xab9/0xd20
[ 100.524821][ T12] ? process_scheduled_works+0x9ef/0x17b0
[ 100.524835][ T12] ? _raw_spin_unlock_irq+0x23/0x50
[ 100.524848][ T12] ? process_scheduled_works+0x9ef/0x17b0
[ 100.524861][ T12] ? process_scheduled_works+0x9ef/0x17b0
[ 100.524873][ T12] process_scheduled_works+0xae1/0x17b0
[ 100.524891][ T12] ? __pfx_process_scheduled_works+0x10/0x10
[ 100.524908][ T12] worker_thread+0x8a0/0xda0
[ 100.524926][ T12] kthread+0x711/0x8a0
[ 100.524937][ T12] ? __pfx_worker_thread+0x10/0x10
[ 100.524954][ T12] ? __pfx_kthread+0x10/0x10
[ 100.524964][ T12] ? _raw_spin_unlock_irq+0x23/0x50
[ 100.524976][ T12] ? lockdep_hardirqs_on+0x9c/0x150
[ 100.524990][ T12] ? __pfx_kthread+0x10/0x10
[ 100.525000][ T12] ret_from_fork+0x4bc/0x870
[ 100.525013][ T12] ? __pfx_ret_from_fork+0x10/0x10
[ 100.525028][ T12] ? __pfx_kthread+0x10/0x10
[ 100.525037][ T12] ret_from_fork_asm+0x1a/0x30
[ 100.525054][ T12]
[ 100.525058][ T12]
[ 100.679351][ T12] The buggy address belongs to the physical page:
[ 100.681950][ T12] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x252c pfn:0x463ad
[ 100.685678][ T12] flags: 0x4fff00000000000(node=1|zone=1|lastcpupid=0x7ff)
[ 100.688777][ T12] raw: 04fff00000000000 dead000000000100 dead000000000122 0000000000000000
[ 100.692528][ T12] raw: 000000000000252c 0000000000000000 00000000ffffffff 0000000000000000
[ 100.696686][ T12] page dumped because: kasan: bad access detected
[ 100.699391][ T12] page_owner tracks the page as freed
[ 100.701660][ T12] page last allocated via order 0, migratetype Movable, gfp_mask 0x141cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE|__GFP_COMP), pid 5215, tgid 5215 (sftp-server), ts 75213884547, free_ts 87512970857
[ 100.709347][ T12] post_alloc_hook+0x240/0x2a0
[ 100.711538][ T12] get_page_from_freelist+0x2365/0x2440
[ 100.713989][ T12] __alloc_frozen_pages_noprof+0x181/0x370
[ 100.716455][ T12] alloc_pages_mpol+0x232/0x4a0
[ 100.718568][ T12] alloc_pages_noprof+0xa9/0x190
[ 100.720436][ T12] folio_alloc_noprof+0x1e/0x30
[ 100.722612][ T12] filemap_alloc_folio_noprof+0xdf/0x470
[ 100.725174][ T12] __filemap_get_folio+0x3f2/0xaf0
[ 100.727518][ T12] ext4_da_write_begin+0x641/0xda0
[ 100.729823][ T12] generic_perform_write+0x2c5/0x900
[ 100.732068][ T12] ext4_buffered_write_iter+0xce/0x3a0
[ 100.734424][ T12] ext4_file_write_iter+0x298/0x1bc0
[ 100.736749][ T12] vfs_write+0x5c9/0xb30
[ 100.738685][ T12] ksys_write+0x145/0x250
[ 100.740672][ T12] do_syscall_64+0xfa/0xfa0
[ 100.743163][ T12] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 100.745670][ T12] page last free pid 79 tgid 79 stack trace:
[ 100.748101][ T12] free_unref_folios+0xdb3/0x14f0
[ 100.750006][ T12] shrink_folio_list+0x44ab/0x4c70
[ 100.751882][ T12] evict_folios+0x471e/0x57c0
[ 100.753908][ T12] try_to_shrink_lruvec+0x8a3/0xb50
[ 100.756145][ T12] shrink_one+0x21b/0x7c0
[ 100.757657][ T12] shrink_node+0x315d/0x3780
[ 100.759303][ T12] kswapd+0x147c/0x2800
[ 100.760877][ T12] kthread+0x711/0x8a0
[ 100.762374][ T12] ret_from_fork+0x4bc/0x870
[ 100.764042][ T12] ret_from_fork_asm+0x1a/0x30
[ 100.765919][ T12]
[ 100.766981][ T12] Memory state around the buggy address:
[ 100.769376][ T12] ffff8880463ad400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 100.772756][ T12] ffff8880463ad480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 100.776109][ T12] >ffff8880463ad500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 100.779448][ T12] ^
[ 100.781590][ T12] ffff8880463ad580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 100.785124][ T12] ffff8880463ad600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 100.788805][ T12] ==================================================================
[ 100.984028][ T12] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 100.987280][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u4:0 Not tainted syzkaller #0 PREEMPT(full)
[ 100.991238][ T12] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.3-debian-1.16.3-2~bpo12+1 04/01/2014
[ 100.995945][ T12] Workqueue: writeback wb_workfn (flush-7:0)
[ 100.998607][ T12] Call Trace:
[ 101.000157][ T12]
[ 101.001500][ T12] dump_stack_lvl+0x99/0x250
[ 101.003502][ T12] ? __asan_memcpy+0x40/0x70
[ 101.005542][ T12] ? __pfx_dump_stack_lvl+0x10/0x10
[ 101.007710][ T12] ? __pfx__printk+0x10/0x10
[ 101.009270][ T12] vpanic+0x237/0x6d0
[ 101.010653][ T12] ? __pfx_vpanic+0x10/0x10
[ 101.012315][ T12] ? preempt_schedule+0xae/0xc0
[ 101.014133][ T12] ? __pfx_preempt_schedule+0x10/0x10
[ 101.016246][ T12] panic+0xb9/0xc0
[ 101.017840][ T12] ? __pfx_panic+0x10/0x10
[ 101.019642][ T12] ? _raw_spin_unlock_irqrestore+0xfd/0x110
[ 101.022167][ T12] ? is_module_address+0x17/0xf0
[ 101.024209][ T12] ? ext4_find_extent+0xae6/0xcc0
[ 101.026285][ T12] check_panic_on_warn+0x89/0xb0
[ 101.028346][ T12] ? ext4_find_extent+0xae6/0xcc0
[ 101.030508][ T12] end_report+0x78/0x160
[ 101.032372][ T12] kasan_report+0x129/0x150
[ 101.034327][ T12] ? ext4_find_extent+0xae6/0xcc0
[ 101.036481][ T12] ext4_find_extent+0xae6/0xcc0
[ 101.038623][ T12] ext4_ext_map_blocks+0x288/0x6ac0
[ 101.040925][ T12] ? __lock_acquire+0xab9/0xd20
[ 101.043143][ T12] ? __pfx_ext4_ext_map_blocks+0x10/0x10
[ 101.045566][ T12] ? ext4_es_lookup_extent+0x622/0xa70
[ 101.047986][ T12] ext4_map_blocks+0x860/0x1740
[ 101.050129][ T12] ? __pfx_ext4_map_blocks+0x10/0x10
[ 101.052439][ T12] ? rcu_is_watching+0x15/0xb0
[ 101.054557][ T12] ? trace_kmem_cache_alloc+0x1f/0xc0
[ 101.056791][ T12] ? kmem_cache_alloc_noprof+0x3b8/0x6e0
[ 101.059200][ T12] ? ext4_inode_journal_mode+0x18c/0x480
[ 101.061623][ T12] ext4_do_writepages+0x1f88/0x4610
[ 101.064175][ T12] ? lockdep_unlock+0x89/0x120
[ 101.066169][ T12] ? __pfx_ext4_do_writepages+0x10/0x10
[ 101.068325][ T12] ? __lock_acquire+0xab9/0xd20
[ 101.070310][ T12] ? rcu_read_lock_any_held+0xb3/0x120
[ 101.072495][ T12] ext4_writepages+0x205/0x350
[ 101.074538][ T12] ? lockdep_unlock+0x89/0x120
[ 101.076545][ T12] ? __pfx_ext4_writepages+0x10/0x10
[ 101.079090][ T12] ? __pfx_ext4_writepages+0x10/0x10
[ 101.081624][ T12] do_writepages+0x32e/0x550
[ 101.084092][ T12] ? reacquire_held_locks+0x127/0x1d0
[ 101.086347][ T12] ? writeback_sb_inodes+0x384/0x1010
[ 101.088610][ T12] __writeback_single_inode+0x145/0xff0
[ 101.091076][ T12] ? do_raw_spin_unlock+0x4d/0x240
[ 101.093405][ T12] writeback_sb_inodes+0x6c7/0x1010
[ 101.095828][ T12] ? __pfx_writeback_sb_inodes+0x10/0x10
[ 101.098137][ T12] ? rcu_is_watching+0x15/0xb0
[ 101.100129][ T12] wb_writeback+0x43b/0xaf0
[ 101.102541][ T12] ? queue_io+0x301/0x590
[ 101.104881][ T12] ? __pfx_wb_writeback+0x10/0x10
[ 101.107651][ T12] ? _raw_spin_unlock_irq+0x23/0x50
[ 101.110272][ T12] wb_workfn+0x409/0xef0
[ 101.112311][ T12] ? __pfx_wb_workfn+0x10/0x10
[ 101.114588][ T12] ? __lock_acquire+0xab9/0xd20
[ 101.116844][ T12] ? process_scheduled_works+0x9ef/0x17b0
[ 101.119487][ T12] ? _raw_spin_unlock_irq+0x23/0x50
[ 101.121846][ T12] ? process_scheduled_works+0x9ef/0x17b0
[ 101.124844][ T12] ? process_scheduled_works+0x9ef/0x17b0
[ 101.127841][ T12] process_scheduled_works+0xae1/0x17b0
[ 101.130079][ T12] ? __pfx_process_scheduled_works+0x10/0x10
[ 101.132718][ T12] worker_thread+0x8a0/0xda0
[ 101.135064][ T12] kthread+0x711/0x8a0
[ 101.137223][ T12] ? __pfx_worker_thread+0x10/0x10
[ 101.139828][ T12] ? __pfx_kthread+0x10/0x10
[ 101.141917][ T12] ? _raw_spin_unlock_irq+0x23/0x50
[ 101.144098][ T12] ? lockdep_hardirqs_on+0x9c/0x150
[ 101.146436][ T12] ? __pfx_kthread+0x10/0x10
[ 101.148494][ T12] ret_from_fork+0x4bc/0x870
[ 101.150608][ T12] ? __pfx_ret_from_fork+0x10/0x10
[ 101.152862][ T12] ? __pfx_kthread+0x10/0x10
[ 101.154817][ T12] ret_from_fork_asm+0x1a/0x30
[ 101.156898][ T12]
[ 101.158614][ T12] Kernel Offset: disabled
[ 101.160534][ T12] Rebooting in 86400 seconds..
VM DIAGNOSIS:
09:06:55 Registers:
info registers vcpu 0
CPU#0
RAX=1ffffffff33a4e60 RBX=00000000000003fd RCX=0000000000000000 RDX=00000000000003fd
RSI=0000000000000000 RDI=0000000000000020 RBP=ffffffff99d27650 RSP=ffffc900001e6030
R8 =ffff888031b08237 R9 =1ffff11006361046 R10=dffffc0000000000 R11=ffffffff851da0c0
R12=dffffc0000000000 R13=0000000000000000 R14=ffffffff99d273c0 R15=0000000000000000
RIP=ffffffff851da137 RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 0000000000000000 ffffffff 00c00000
GS =0000 ffff88808d301000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT= fffffe0000001000 0000007f
IDT= fffffe0000000000 00000fff
CR0=80050033 CR2=00007fff99fc0f28 CR3=000000004220b000 CR4=00352ef0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000
DR6=00000000ffff0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001fa0
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
Opmask00=0000000000000000 Opmask01=0000000000000000 Opmask02=0000000000000000 Opmask03=0000000000000000
Opmask04=0000000000000000 Opmask05=0000000000000000 Opmask06=0000000000000000 Opmask07=0000000000000000
ZMM00=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM01=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 401440437ed49877
ZMM02=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 8568066285680662 8568066285680662
ZMM03=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 bf033f42bf033f42 bf033f42bf033f42
ZMM04=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 be6908d3e0aa5f93 3570ae61eb2a8de7
ZMM05=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 463fa6f4da000a49 f2da36949b54d3a4
ZMM06=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 61684d3bc3f56681 6e801474e369cae5
ZMM07=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 c6688f3750faca9f 5e31e035b50c410d
ZMM08=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5b875a998ad5e440 8727ecb8a3acca4e
ZMM09=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 1aae152a3bd9cebe e687842d21d68326
ZMM10=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 49a5fe7aed27e721 af87d1c13f223c3e
ZMM11=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 f0c872a9e82b19d9 7f5224b4beb6f8d7
ZMM12=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 be53d3f6be53d3f6 be53d3f6be53d3f6
ZMM13=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 5aa622c65aa622c6 5aa622c65aa622c6
ZMM14=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 034605f8034605f8 034605f8034605f8
ZMM15=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM16=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM17=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM18=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM19=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM20=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM21=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM22=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM23=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM24=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM25=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM26=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM27=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM28=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM29=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM30=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000
ZMM31=0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000 0000000000000000