Warning: Permanently added '10.128.1.69' (ED25519) to the list of known hosts. 2025/10/26 02:15:32 parsed 1 programs [ 43.739552][ T24] kauditd_printk_skb: 31 callbacks suppressed [ 43.739562][ T24] audit: type=1400 audit(1761444933.290:105): avc: denied { unlink } for pid=419 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t" [ 43.781310][ T419] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 44.340207][ T24] audit: type=1400 audit(1761444933.890:106): avc: denied { create } for pid=448 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 44.504091][ T24] audit: type=1401 audit(1761444934.050:107): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768" [ 44.663799][ T465] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.674208][ T465] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.681837][ T465] device bridge_slave_0 entered promiscuous mode [ 44.691555][ T465] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.699070][ T465] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.706565][ T465] device bridge_slave_1 entered promiscuous mode [ 44.755811][ T465] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.763043][ T465] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.770425][ T465] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.777570][ T465] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.798204][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 44.806558][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 44.813911][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 44.825205][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 44.833419][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 44.841016][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 44.848842][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 44.857254][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 44.864404][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 44.881436][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 44.889609][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 44.905352][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 44.927569][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 44.944586][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 44.954609][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 44.973188][ T465] device veth0_vlan entered promiscuous mode [ 44.985420][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 44.995432][ T465] device veth1_macvtap entered promiscuous mode [ 45.005858][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 45.016142][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 2025/10/26 02:15:34 executed programs: 0 [ 45.050074][ T24] audit: type=1400 audit(1761444934.600:108): avc: denied { write } for pid=410 comm="syz-execprog" path="pipe:[15605]" dev="pipefs" ino=15605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 45.220407][ T486] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.227601][ T486] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.234994][ T486] device bridge_slave_0 entered promiscuous mode [ 45.250363][ T490] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.257856][ T490] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.265423][ T490] device bridge_slave_0 entered promiscuous mode [ 45.272884][ T490] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.279983][ T490] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.287291][ T490] device bridge_slave_1 entered promiscuous mode [ 45.293803][ T486] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.300962][ T486] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.308549][ T486] device bridge_slave_1 entered promiscuous mode [ 45.379968][ T493] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.387172][ T493] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.394770][ T493] device bridge_slave_0 entered promiscuous mode [ 45.402803][ T493] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.410275][ T493] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.417891][ T493] device bridge_slave_1 entered promiscuous mode [ 45.445580][ T488] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.452868][ T488] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.460295][ T488] device bridge_slave_0 entered promiscuous mode [ 45.474447][ T488] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.481576][ T488] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.489162][ T488] device bridge_slave_1 entered promiscuous mode [ 45.517175][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.524285][ T492] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.531888][ T492] device bridge_slave_0 entered promiscuous mode [ 45.540868][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.548120][ T492] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.555546][ T492] device bridge_slave_1 entered promiscuous mode [ 45.656787][ T488] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.663992][ T488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.683346][ T492] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.690610][ T492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.698226][ T492] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.705506][ T492] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.720026][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.727465][ T343] bridge0: port 1(bridge_slave_0) entered disabled state [ 45.735175][ T343] bridge0: port 2(bridge_slave_1) entered disabled state [ 45.742901][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.750793][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.772175][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 45.779971][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.787967][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.796971][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.805249][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.812266][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.820057][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 45.828717][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.837818][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.844844][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.852341][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 45.875512][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 45.883965][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 45.892976][ T343] bridge0: port 1(bridge_slave_0) entered blocking state [ 45.900393][ T343] bridge0: port 1(bridge_slave_0) entered forwarding state [ 45.908143][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 45.916530][ T343] bridge0: port 2(bridge_slave_1) entered blocking state [ 45.923627][ T343] bridge0: port 2(bridge_slave_1) entered forwarding state [ 45.941936][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 45.967292][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 45.976031][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 45.984264][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 45.992282][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.000805][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.009853][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.018158][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.025313][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.032920][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.041358][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.048742][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.056206][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.077930][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.085776][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.093118][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.101715][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.110750][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.119484][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.128263][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.135481][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.142865][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.151669][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.160018][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.167090][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.174625][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.182567][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.190781][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.205358][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.213715][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 46.221413][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 46.229493][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 46.238637][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 46.246999][ T301] bridge0: port 1(bridge_slave_0) entered blocking state [ 46.254486][ T301] bridge0: port 1(bridge_slave_0) entered forwarding state [ 46.262793][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 46.279335][ T492] device veth0_vlan entered promiscuous mode [ 46.287206][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.295563][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.303297][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.312478][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 46.321325][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 46.329559][ T301] bridge0: port 2(bridge_slave_1) entered blocking state [ 46.336638][ T301] bridge0: port 2(bridge_slave_1) entered forwarding state [ 46.346670][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.356610][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.370149][ T486] device veth0_vlan entered promiscuous mode [ 46.385534][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.393800][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.402867][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.411081][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.419909][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.427690][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.438129][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.446631][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.459324][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 46.467946][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 46.478690][ T492] device veth1_macvtap entered promiscuous mode [ 46.492872][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.500780][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 46.509222][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 46.517848][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.526518][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.535254][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.543451][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.551662][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.559298][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.570200][ T486] device veth1_macvtap entered promiscuous mode [ 46.578814][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.587315][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.596106][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.604063][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.612408][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.620891][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.629039][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.642815][ T493] device veth0_vlan entered promiscuous mode [ 46.651939][ T488] device veth0_vlan entered promiscuous mode [ 46.658918][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.666946][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.675224][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 46.683572][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 46.692234][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 46.700133][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 46.708378][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 46.716067][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 46.727100][ T490] device veth0_vlan entered promiscuous mode [ 46.743431][ T488] device veth1_macvtap entered promiscuous mode [ 46.759127][ T490] device veth1_macvtap entered promiscuous mode [ 46.766515][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.775117][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.783515][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 46.792229][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 46.792247][ T510] ====================================================== [ 46.792247][ T510] WARNING: the mand mount option is being deprecated and [ 46.792247][ T510] will be removed in v5.15! [ 46.792247][ T510] ====================================================== [ 46.801080][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.835984][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.844262][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.852079][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.860490][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.869930][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.880891][ T510] EXT4-fs (loop3): Ignoring removed nobh option [ 46.887601][ T510] EXT4-fs (loop3): Ignoring removed bh option [ 46.892768][ T493] device veth1_macvtap entered promiscuous mode [ 46.902144][ T510] EXT4-fs (loop3): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 46.922521][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 46.930884][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 46.939315][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 46.940978][ T510] EXT4-fs (loop3): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 46.947887][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 46.979705][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 46.979721][ T24] audit: type=1400 audit(1761444936.540:109): avc: denied { mount } for pid=509 comm="syz.3.20" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 46.988399][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.018204][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.026989][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.035238][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.043813][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.052236][ T301] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.060957][ T24] audit: type=1400 audit(1761444936.610:110): avc: denied { write } for pid=509 comm="syz.3.20" name="/" dev="loop3" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.063123][ T510] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:3342: comm syz.3.20: Allocating blocks 497-513 which overlap fs metadata [ 47.093121][ T24] audit: type=1400 audit(1761444936.610:111): avc: denied { add_name } for pid=509 comm="syz.3.20" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 47.104356][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 47.124398][ T513] EXT4-fs (loop0): Ignoring removed nobh option [ 47.128289][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 47.133246][ T513] EXT4-fs (loop0): Ignoring removed bh option [ 47.142269][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 47.158368][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 47.167300][ T24] audit: type=1400 audit(1761444936.610:112): avc: denied { create } for pid=509 comm="syz.3.20" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 47.170653][ T510] EXT4-fs error (device loop3): __ext4_get_inode_loc:4438: comm syz.3.20: Invalid inode table block 8391460049216894068 in block_group 0 [ 47.190048][ T24] audit: type=1400 audit(1761444936.610:113): avc: denied { read write } for pid=509 comm="syz.3.20" name="file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.208792][ T513] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.227583][ T24] audit: type=1400 audit(1761444936.610:114): avc: denied { open } for pid=509 comm="syz.3.20" path="/0/file1/file1" dev="loop3" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 47.243539][ T510] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 47.273178][ T510] EXT4-fs error (device loop3): ext4_dirty_inode:6143: inode #15: comm syz.3.20: mark_inode_dirty error [ 47.276124][ T513] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 47.285237][ T510] EXT4-fs error (device loop3): ext4_discard_preallocations:4589: comm syz.3.20: Error -117 loading buddy information for 4294952389 [ 47.327132][ T510] EXT4-fs error (device loop3): ext4_discard_preallocations:4589: comm syz.3.20: Error -117 loading buddy information for 4294952389 [ 47.339036][ T513] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:3342: comm syz.0.17: Allocating blocks 497-513 which overlap fs metadata [ 47.343330][ T510] EXT4-fs error (device loop3): __ext4_get_inode_loc:4438: comm syz.3.20: Invalid inode table block 8391460049216894068 in block_group 0 [ 47.371083][ T510] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 47.381592][ T510] EXT4-fs error (device loop3): ext4_ext_truncate:4450: inode #15: comm syz.3.20: mark_inode_dirty error [ 47.392942][ T521] EXT4-fs (loop6): Ignoring removed nobh option [ 47.416864][ T521] EXT4-fs (loop6): Ignoring removed bh option [ 47.418879][ T513] EXT4-fs error (device loop0): __ext4_get_inode_loc:4438: comm syz.0.17: Invalid inode table block 8391460049216894068 in block_group 0 [ 47.431793][ T521] EXT4-fs (loop6): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.439010][ T510] EXT4-fs error (device loop3): __ext4_get_inode_loc:4438: comm syz.3.20: Invalid inode table block 8391460049216894068 in block_group 0 [ 47.452484][ T513] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 47.475704][ T521] EXT4-fs (loop6): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 47.479142][ T513] EXT4-fs error (device loop0): ext4_dirty_inode:6143: inode #15: comm syz.0.17: mark_inode_dirty error [ 47.515262][ T525] EXT4-fs (loop4): Ignoring removed nobh option [ 47.515272][ T525] EXT4-fs (loop4): Ignoring removed bh option [ 47.515284][ T525] EXT4-fs (loop4): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.521678][ T492] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1063: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 47.556738][ T525] EXT4-fs (loop4): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 47.585749][ T513] EXT4-fs error (device loop0): ext4_discard_preallocations:4589: comm syz.0.17: Error -117 loading buddy information for 4294952389 [ 47.600855][ T513] EXT4-fs error (device loop0): ext4_discard_preallocations:4589: comm syz.0.17: Error -117 loading buddy information for 4294952389 [ 47.601317][ T7] ================================================================== [ 47.616597][ T513] EXT4-fs error (device loop0): __ext4_get_inode_loc:4438: comm syz.0.17: Invalid inode table block 8391460049216894068 in block_group 0 [ 47.624828][ T7] BUG: KASAN: use-after-free in ext4_find_extent+0xbeb/0xe20 [ 47.624837][ T7] Read of size 4 at addr ffff8881322bb588 by task kworker/u4:0/7 [ 47.624839][ T7] [ 47.624852][ T7] CPU: 0 PID: 7 Comm: kworker/u4:0 Not tainted syzkaller #0 [ 47.624858][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 47.624868][ T7] Workqueue: writeback wb_workfn (flush-7:3) [ 47.624878][ T7] Call Trace: [ 47.624890][ T7] __dump_stack+0x21/0x24 [ 47.624900][ T7] dump_stack_lvl+0x169/0x1d8 [ 47.624909][ T7] ? show_regs_print_info+0x18/0x18 [ 47.624918][ T7] ? thaw_kernel_threads+0x220/0x220 [ 47.624928][ T7] print_address_description+0x7f/0x2c0 [ 47.624935][ T7] ? ext4_find_extent+0xbeb/0xe20 [ 47.624944][ T7] kasan_report+0xe2/0x130 [ 47.624952][ T7] ? __read_extent_tree_block+0x1e8/0x790 [ 47.624961][ T7] ? ext4_find_extent+0xbeb/0xe20 [ 47.624971][ T7] __asan_report_load4_noabort+0x14/0x20 [ 47.624978][ T7] ext4_find_extent+0xbeb/0xe20 [ 47.624987][ T7] ext4_ext_map_blocks+0x1de/0x5d40 [ 47.625004][ T7] ? __stack_depot_save+0x479/0x4c0 [ 47.649157][ T530] EXT4-fs (loop1): Ignoring removed nobh option [ 47.655035][ T7] ? __kasan_slab_alloc+0xcf/0xf0 [ 47.655043][ T7] ? __kasan_slab_alloc+0xbd/0xf0 [ 47.655053][ T7] ? slab_post_alloc_hook+0x5d/0x2f0 [ 47.655061][ T7] ? kmem_cache_alloc+0x165/0x2e0 [ 47.655069][ T7] ? ext4_alloc_io_end_vec+0x2a/0x160 [ 47.655084][ T7] ? ext4_writepages+0xebd/0x2e00 [ 47.662141][ T521] EXT4-fs error (device loop6): ext4_mb_mark_diskspace_used:3342: comm syz.6.19: Allocating blocks 497-513 which overlap fs metadata [ 47.665016][ T7] ? do_writepages+0x12a/0x270 [ 47.665025][ T7] ? __writeback_single_inode+0xd5/0xa20 [ 47.665031][ T7] ? writeback_sb_inodes+0x860/0x1400 [ 47.665039][ T7] ? worker_thread+0xa6a/0x13b0 [ 47.665047][ T7] ? kthread+0x346/0x3d0 [ 47.665055][ T7] ? ret_from_fork+0x1f/0x30 [ 47.665064][ T7] ? ext4_ext_release+0x10/0x10 [ 47.665083][ T7] ? ext4_es_lookup_extent+0x32d/0x8c0 [ 47.684131][ T525] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3342: comm syz.4.21: Allocating blocks 497-513 which overlap fs metadata [ 47.719176][ T530] EXT4-fs (loop1): Ignoring removed bh option [ 47.720856][ T7] ext4_map_blocks+0x978/0x1bc0 [ 47.732320][ T7] ? ext4_issue_zeroout+0x1a0/0x1a0 [ 47.732333][ T7] ? ext4_inode_journal_mode+0x19a/0x480 [ 47.732351][ T7] ext4_writepages+0x11d5/0x2e00 [ 47.738366][ T530] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 47.743224][ T7] ? loopback_xmit+0x2f4/0x400 [ 47.749481][ T521] EXT4-fs (loop6): pa ffff888125775d20: logic 128, phys. 385, len 8 [ 47.753748][ T7] ? dev_hard_start_xmit+0x5fe/0x670 [ 47.760125][ T521] EXT4-fs error (device loop6): ext4_mb_release_inode_pa:4359: group 0, [ 47.765075][ T7] ? ext4_readpage+0x220/0x220 [ 47.765088][ T7] ? __local_bh_enable_ip+0x53/0x80 [ 47.765096][ T7] ? local_bh_enable+0x1f/0x30 [ 47.765103][ T7] ? __dev_queue_xmit+0x15a0/0x2540 [ 47.765110][ T7] ? arch_stack_walk+0x108/0x140 [ 47.765121][ T7] ? update_load_avg+0x4dc/0x14f0 [ 47.765129][ T7] ? ext4_readpage+0x220/0x220 [ 47.765138][ T7] do_writepages+0x12a/0x270 [ 47.765145][ T7] ? __writepage+0x130/0x130 [ 47.765153][ T7] ? __switch_to+0x50f/0xfc0 [ 47.765161][ T7] ? __kasan_check_write+0x14/0x20 [ 47.765170][ T7] ? _raw_spin_lock+0x8e/0xe0 [ 47.765177][ T7] ? __kasan_check_write+0x14/0x20 [ 47.765184][ T7] ? _raw_spin_lock+0x8e/0xe0 [ 47.765200][ T7] __writeback_single_inode+0xd5/0xa20 [ 47.770592][ T521] free 0, pa_free 1 [ 47.776328][ T7] ? wbc_attach_and_unlock_inode+0x171/0x590 [ 47.776336][ T7] writeback_sb_inodes+0x860/0x1400 [ 47.776345][ T7] ? finish_task_switch+0x12e/0x5a0 [ 47.776355][ T7] ? queue_io+0x4c0/0x4c0 [ 47.776365][ T7] ? __kasan_check_read+0x11/0x20 [ 47.776371][ T7] ? queue_io+0x385/0x4c0 [ 47.776377][ T7] wb_writeback+0x3e3/0xb90 [ 47.776386][ T7] ? wb_io_lists_depopulated+0x180/0x180 [ 47.776394][ T7] ? set_worker_desc+0x155/0x1c0 [ 47.776401][ T7] ? __kasan_check_write+0x14/0x20 [ 47.776410][ T7] wb_workfn+0x38f/0xe20 [ 47.776495][ T7] ? inode_wait_for_writeback+0x200/0x200 [ 47.776532][ T7] ? _raw_spin_unlock_irq+0x4e/0x70 [ 47.783913][ T525] EXT4-fs (loop4): pa ffff8881257759d8: logic 128, phys. 385, len 8 [ 47.788278][ T7] ? finish_task_switch+0x12e/0x5a0 [ 47.788289][ T7] ? switch_mm_irqs_off+0x763/0x9a0 [ 47.788297][ T7] ? __switch_to_asm+0x34/0x60 [ 47.788306][ T7] ? __schedule+0xb4f/0x1310 [ 47.788316][ T7] ? __kasan_check_read+0x11/0x20 [ 47.788326][ T7] ? read_word_at_a_time+0x12/0x20 [ 47.788333][ T7] ? strscpy+0x9b/0x290 [ 47.788342][ T7] process_one_work+0x6e1/0xba0 [ 47.788352][ T7] worker_thread+0xa6a/0x13b0 [ 47.788364][ T7] kthread+0x346/0x3d0 [ 47.788372][ T7] ? worker_clr_flags+0x190/0x190 [ 47.788379][ T7] ? kthread_blkcg+0xd0/0xd0 [ 47.788395][ T7] ret_from_fork+0x1f/0x30 [ 47.793537][ T525] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4359: group 0, [ 47.807577][ T7] [ 47.807582][ T7] The buggy address belongs to the page: [ 47.807599][ T7] page:ffffea0004c8aec0 refcount:2 mapcount:0 mapping:ffff8881256d3e38 index:0x17 pfn:0x1322bb [ 47.807614][ T7] aops:ext4_da_aops ino:f dentry name:"file1" [ 47.807621][ T7] flags: 0x400000000000201c(uptodate|dirty|lru|private) [ 47.807633][ T7] raw: 400000000000201c ffffea0004886448 ffffea00048867c8 ffff8881256d3e38 [ 47.807642][ T7] raw: 0000000000000017 ffff888125777690 00000002ffffffff ffff88810f4fe000 [ 47.807646][ T7] page dumped because: kasan: bad access detected [ 47.807649][ T7] page->mem_cgroup:ffff88810f4fe000 [ 47.807652][ T7] page_owner tracks the page as allocated [ 47.807664][ T7] page last allocated via order 0, migratetype Movable, gfp_mask 0x101cca(GFP_HIGHUSER_MOVABLE|__GFP_WRITE), pid 521, ts 47658962778, free_ts 47557564138 [ 47.807674][ T7] prep_new_page+0x179/0x180 [ 47.807682][ T7] get_page_from_freelist+0x2235/0x23d0 [ 47.807689][ T7] __alloc_pages_nodemask+0x268/0x5f0 [ 47.807697][ T7] pagecache_get_page+0x642/0x930 [ 47.807705][ T7] grab_cache_page_write_begin+0x59/0xb0 [ 47.807713][ T7] ext4_write_begin+0x27b/0x15a0 [ 47.807719][ T7] ext4_da_write_begin+0x455/0xe80 [ 47.807726][ T7] generic_perform_write+0x2be/0x510 [ 47.807733][ T7] ext4_buffered_write_iter+0x4b8/0x640 [ 47.807748][ T7] ext4_file_write_iter+0x536/0x1980 [ 47.812497][ T525] free 0, pa_free 1 [ 47.818216][ T7] vfs_write+0x725/0xd60 [ 47.818224][ T7] __x64_sys_pwrite64+0x191/0x220 [ 47.818231][ T7] do_syscall_64+0x31/0x40 [ 47.818241][ T7] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.818244][ T7] page last free stack trace: [ 47.818253][ T7] free_unref_page_prepare+0x2b7/0x2d0 [ 47.818260][ T7] free_unref_page_list+0x12e/0x9b0 [ 47.818267][ T7] release_pages+0xe38/0xe80 [ 47.818273][ T7] free_pages_and_swap_cache+0x86/0xa0 [ 47.818279][ T7] tlb_finish_mmu+0x175/0x300 [ 47.818285][ T7] exit_mmap+0x2fc/0x540 [ 47.818290][ T7] __mmput+0x93/0x2f0 [ 47.818295][ T7] mmput+0x4e/0x150 [ 47.818303][ T7] do_exit+0x9ae/0x2480 [ 47.818310][ T7] do_group_exit+0x141/0x310 [ 47.818317][ T7] __x64_sys_exit_group+0x3f/0x40 [ 47.818330][ T7] do_syscall_64+0x31/0x40 [ 47.829329][ T513] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 47.833386][ T7] entry_SYSCALL_64_after_hwframe+0x61/0xcb [ 47.833395][ T7] [ 47.838486][ T513] EXT4-fs error (device loop0): ext4_ext_truncate:4450: inode #15: comm syz.0.17: mark_inode_dirty error [ 47.843190][ T7] Memory state around the buggy address: [ 47.843208][ T7] ffff8881322bb480: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.843214][ T7] ffff8881322bb500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.843220][ T7] >ffff8881322bb580: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.843224][ T7] ^ [ 47.843238][ T7] ffff8881322bb600: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.849387][ T513] EXT4-fs error (device loop0): __ext4_get_inode_loc:4438: comm syz.0.17: Invalid inode table block 8391460049216894068 in block_group 0 [ 47.862873][ T7] ffff8881322bb680: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 47.862877][ T7] ================================================================== [ 47.862880][ T7] Disabling lock debugging due to kernel taint [ 47.873870][ T7] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 47.883559][ T486] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1063: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 47.905137][ T490] EXT4-fs error (device loop6): ext4_map_blocks:630: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 47.914982][ T530] EXT4-fs (loop1): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000003,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue [ 47.918636][ T7] EXT4-fs (loop3): This should not happen!! Data will be lost [ 47.918636][ T7] [ 47.938980][ T530] EXT4-fs error (device loop1): ext4_mb_mark_diskspace_used:3342: comm syz.1.18: Allocating blocks 497-513 which overlap fs metadata [ 47.944734][ T490] EXT4-fs warning (device loop6): htree_dirblock_to_tree:1063: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 47.956710][ T530] EXT4-fs (loop1): pa ffff888125775690: logic 128, phys. 385, len 8 [ 47.966196][ T7] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 1 with error 117 [ 47.967332][ T530] EXT4-fs error (device loop1): ext4_mb_release_inode_pa:4359: group 0, [ 47.971994][ T7] EXT4-fs (loop3): This should not happen!! Data will be lost [ 47.971994][ T7] [ 47.976611][ T530] free 0, pa_free 1 [ 47.989962][ T301] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 48.001371][ T493] EXT4-fs error (device loop4): mb_free_blocks:1524: group 0, [ 48.002691][ T301] EXT4-fs (loop0): This should not happen!! Data will be lost [ 48.002691][ T301] [ 48.007457][ T493] inode 15: block 369:freeing already freed block (bit 23); block bitmap corrupt. [ 48.712697][ T490] EXT4-fs error (device loop6): __ext4_get_inode_loc:4438: comm syz-executor: Invalid inode table block 8391460049216894068 in block_group 0 [ 48.721388][ T301] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 36 with max blocks 1 with error 117 [ 48.727825][ T490] EXT4-fs error (device loop6) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 48.740046][ T301] EXT4-fs (loop0): This should not happen!! Data will be lost [ 48.740046][ T301] [ 48.761077][ T24] kauditd_printk_skb: 14 callbacks suppressed [ 48.761085][ T24] audit: type=1400 audit(1761444938.320:129): avc: denied { unlink } for pid=493 comm="syz-executor" name="bus" dev="loop4" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=file permissive=1 [ 48.762865][ T490] EXT4-fs error (device loop6): ext4_dirty_inode:6143: inode #2: comm syz-executor: mark_inode_dirty error [ 48.769885][ T488] EXT4-fs error (device loop1): ext4_map_blocks:630: inode #2: block 16: comm syz-executor: lblock 0 mapped to illegal pblock 16 (length 1) [ 48.801090][ T7] ------------[ cut here ]------------ [ 48.828020][ T488] EXT4-fs warning (device loop1): htree_dirblock_to_tree:1063: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 48.832117][ T7] kernel BUG at fs/ext4/inode.c:2464! [ 48.855364][ T488] EXT4-fs error (device loop1): __ext4_get_inode_loc:4438: comm syz-executor: Invalid inode table block 8391460049216894068 in block_group 0 [ 48.856202][ T7] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 48.870829][ T488] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5933: Corrupt filesystem [ 48.876461][ T7] CPU: 1 PID: 7 Comm: kworker/u4:0 Tainted: G B syzkaller #0 [ 48.876466][ T7] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 48.876481][ T7] Workqueue: writeback wb_workfn (flush-7:6) [ 48.876497][ T7] RIP: 0010:ext4_writepages+0x2d49/0x2e00 [ 48.876513][ T7] Code: 08 48 89 df e8 a8 16 ce ff 48 8b 3b 48 8b 74 24 40 48 8b 54 24 28 48 8b 4c 24 20 45 89 f0 e8 7e 42 07 00 eb 56 e8 c7 26 94 ff <0f> 0b e8 c0 26 94 ff eb 2f e8 b9 26 94 ff eb 64 e8 b2 26 94 ff 31 [ 48.886771][ T488] EXT4-fs error (device loop1): ext4_dirty_inode:6143: inode #2: comm syz-executor: mark_inode_dirty error [ 48.895089][ T7] RSP: 0018:ffffc90000077180 EFLAGS: 00010293 [ 48.895099][ T7] RAX: ffffffff81cf7ed9 RBX: 0000000000000000 RCX: ffff888100248000 [ 48.895104][ T7] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 48.895109][ T7] RBP: ffffc900000774f0 R08: dffffc0000000000 R09: ffffed1024ada786 [ 48.895115][ T7] R10: ffffed1024ada786 R11: 1ffff11024ada785 R12: dffffc0000000000 [ 48.895119][ T7] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000000042b [ 48.895134][ T7] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000 [ 48.914001][ T301] ------------[ cut here ]------------ [ 48.917750][ T7] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 48.917757][ T7] CR2: 00007f337dd64000 CR3: 000000011026e000 CR4: 00000000003506a0 [ 48.917765][ T7] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 48.917770][ T7] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 48.917773][ T7] Call Trace: [ 48.917794][ T7] ? write_boundary_block+0x140/0x140 [ 48.917803][ T7] ? ext4_readpage+0x220/0x220 [ 48.917811][ T7] ? enqueue_task_fair+0xac3/0x2250 [ 48.917827][ T7] ? __getblk_gfp+0x3b/0x780 [ 48.940242][ T301] kernel BUG at fs/ext4/inode.c:2464! [ 48.952956][ T7] ? __update_load_avg_cfs_rq+0xaf/0x2f0 [ 48.952965][ T7] ? ext4_readpage+0x220/0x220 [ 48.952973][ T7] do_writepages+0x12a/0x270 [ 48.952982][ T7] ? __writepage+0x130/0x130 [ 48.952991][ T7] ? __kasan_check_write+0x14/0x20 [ 48.952998][ T7] ? _raw_spin_lock+0x8e/0xe0 [ 48.953007][ T7] ? __kasan_check_write+0x14/0x20 [ 48.953013][ T7] ? _raw_spin_lock+0x8e/0xe0 [ 48.953021][ T7] __writeback_single_inode+0xd5/0xa20 [ 48.953030][ T7] ? wbc_attach_and_unlock_inode+0x171/0x590 [ 48.953038][ T7] writeback_sb_inodes+0x860/0x1400 [ 48.953045][ T7] ? __kasan_check_write+0x14/0x20 [ 48.953054][ T7] ? queue_io+0x4c0/0x4c0 [ 48.953064][ T7] ? __kasan_check_read+0x11/0x20 [ 48.953069][ T7] ? queue_io+0x385/0x4c0 [ 48.953076][ T7] wb_writeback+0x3e3/0xb90 [ 48.953085][ T7] ? wb_io_lists_depopulated+0x180/0x180 [ 48.953104][ T7] ? set_worker_desc+0x155/0x1c0 [ 49.189241][ T7] ? __kasan_check_write+0x14/0x20 [ 49.194629][ T7] wb_workfn+0x38f/0xe20 [ 49.199125][ T7] ? inode_wait_for_writeback+0x200/0x200 [ 49.205461][ T7] ? _raw_spin_unlock_irq+0x4e/0x70 [ 49.211436][ T7] ? finish_task_switch+0x12e/0x5a0 [ 49.216997][ T7] ? __switch_to_asm+0x34/0x60 [ 49.221909][ T7] ? __schedule+0xb4f/0x1310 [ 49.227512][ T7] ? __kasan_check_read+0x11/0x20 [ 49.233740][ T7] ? read_word_at_a_time+0x12/0x20 [ 49.239541][ T7] ? strscpy+0x9b/0x290 [ 49.244236][ T7] process_one_work+0x6e1/0xba0 [ 49.249428][ T7] worker_thread+0xa6a/0x13b0 [ 49.254368][ T7] kthread+0x346/0x3d0 [ 49.259009][ T7] ? worker_clr_flags+0x190/0x190 [ 49.264556][ T7] ? kthread_blkcg+0xd0/0xd0 [ 49.269339][ T7] ret_from_fork+0x1f/0x30 [ 49.273839][ T7] Modules linked in: [ 49.278012][ T301] invalid opcode: 0000 [#2] PREEMPT SMP KASAN [ 49.282320][ T7] ---[ end trace 51301fd10ca8708d ]--- [ 49.284383][ T301] CPU: 0 PID: 301 Comm: kworker/u4:3 Tainted: G B D syzkaller #0 [ 49.284388][ T301] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 49.284402][ T301] Workqueue: writeback wb_workfn (flush-7:1) [ 49.284419][ T301] RIP: 0010:ext4_writepages+0x2d49/0x2e00 [ 49.284426][ T301] Code: 08 48 89 df e8 a8 16 ce ff 48 8b 3b 48 8b 74 24 40 48 8b 54 24 28 48 8b 4c 24 20 45 89 f0 e8 7e 42 07 00 eb 56 e8 c7 26 94 ff <0f> 0b e8 c0 26 94 ff eb 2f e8 b9 26 94 ff eb 64 e8 b2 26 94 ff 31 [ 49.284431][ T301] RSP: 0018:ffffc90000c37180 EFLAGS: 00010293 [ 49.284440][ T301] RAX: ffffffff81cf7ed9 RBX: 0000000000000000 RCX: ffff88812a3c13c0 [ 49.284452][ T301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.284459][ T301] RBP: ffffc90000c374f0 R08: dffffc0000000000 R09: ffffed102615060c [ 49.284466][ T301] R10: ffffed102615060c R11: 1ffff1102615060b R12: dffffc0000000000 [ 49.284472][ T301] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000000042b [ 49.284480][ T301] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 49.284486][ T301] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.284493][ T301] CR2: 000000c0068c8000 CR3: 000000010d0cf000 CR4: 00000000003506b0 [ 49.284502][ T301] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.284508][ T301] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.284511][ T301] Call Trace: [ 49.284527][ T301] ? blk_mq_do_dispatch_sched+0xae0/0xb50 [ 49.284536][ T301] ? ext4_readpage+0x220/0x220 [ 49.284546][ T301] ? blk_mq_exit_sched+0x440/0x440 [ 49.284558][ T301] ? blk_mq_sched_dispatch_requests+0x1c0/0x1c0 [ 49.284567][ T301] ? elv_rqhash_find+0x371/0x3a0 [ 49.284575][ T301] ? ext4_readpage+0x220/0x220 [ 49.284585][ T301] do_writepages+0x12a/0x270 [ 49.284595][ T301] ? __writepage+0x130/0x130 [ 49.284605][ T301] ? __kasan_check_write+0x14/0x20 [ 49.284615][ T301] ? _raw_spin_lock+0x8e/0xe0 [ 49.284624][ T301] ? __kasan_check_write+0x14/0x20 [ 49.284633][ T301] ? _raw_spin_lock+0x8e/0xe0 [ 49.284642][ T301] __writeback_single_inode+0xd5/0xa20 [ 49.284652][ T301] ? wbc_attach_and_unlock_inode+0x171/0x590 [ 49.284661][ T301] writeback_sb_inodes+0x860/0x1400 [ 49.284673][ T301] ? queue_io+0x4c0/0x4c0 [ 49.284685][ T301] ? __kasan_check_read+0x11/0x20 [ 49.284692][ T301] ? queue_io+0x385/0x4c0 [ 49.284701][ T301] wb_writeback+0x3e3/0xb90 [ 49.284712][ T301] ? wb_io_lists_depopulated+0x180/0x180 [ 49.284722][ T301] ? set_worker_desc+0x155/0x1c0 [ 49.284732][ T301] ? __kasan_check_write+0x14/0x20 [ 49.284742][ T301] wb_workfn+0x38f/0xe20 [ 49.284754][ T301] ? inode_wait_for_writeback+0x200/0x200 [ 49.284763][ T301] ? _raw_spin_unlock_irq+0x4e/0x70 [ 49.284771][ T301] ? finish_task_switch+0x12e/0x5a0 [ 49.284786][ T301] ? switch_mm_irqs_off+0x763/0x9a0 [ 49.290918][ T7] RIP: 0010:ext4_writepages+0x2d49/0x2e00 [ 49.300143][ T301] ? __switch_to_asm+0x34/0x60 [ 49.300154][ T301] ? __schedule+0xb4f/0x1310 [ 49.300163][ T301] ? __kasan_check_read+0x11/0x20 [ 49.300172][ T301] ? read_word_at_a_time+0x12/0x20 [ 49.300179][ T301] ? strscpy+0x9b/0x290 [ 49.300186][ T301] process_one_work+0x6e1/0xba0 [ 49.300195][ T301] worker_thread+0xa6a/0x13b0 [ 49.300204][ T301] ? _raw_spin_lock_irqsave+0xb0/0x110 [ 49.300213][ T301] ? __kasan_check_read+0x11/0x20 [ 49.300231][ T301] kthread+0x346/0x3d0 [ 49.311579][ T7] Code: 08 48 89 df e8 a8 16 ce ff 48 8b 3b 48 8b 74 24 40 48 8b 54 24 28 48 8b 4c 24 20 45 89 f0 e8 7e 42 07 00 eb 56 e8 c7 26 94 ff <0f> 0b e8 c0 26 94 ff eb 2f e8 b9 26 94 ff eb 64 e8 b2 26 94 ff 31 [ 49.317913][ T301] ? worker_clr_flags+0x190/0x190 [ 49.317923][ T301] ? kthread_blkcg+0xd0/0xd0 [ 49.317932][ T301] ret_from_fork+0x1f/0x30 [ 49.317936][ T301] Modules linked in: [ 49.346572][ T301] ---[ end trace 51301fd10ca8708e ]--- [ 49.346591][ T301] RIP: 0010:ext4_writepages+0x2d49/0x2e00 [ 49.346599][ T301] Code: 08 48 89 df e8 a8 16 ce ff 48 8b 3b 48 8b 74 24 40 48 8b 54 24 28 48 8b 4c 24 20 45 89 f0 e8 7e 42 07 00 eb 56 e8 c7 26 94 ff <0f> 0b e8 c0 26 94 ff eb 2f e8 b9 26 94 ff eb 64 e8 b2 26 94 ff 31 [ 49.346604][ T301] RSP: 0018:ffffc90000077180 EFLAGS: 00010293 [ 49.346613][ T301] RAX: ffffffff81cf7ed9 RBX: 0000000000000000 RCX: ffff888100248000 [ 49.346618][ T301] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 49.346625][ T301] RBP: ffffc900000774f0 R08: dffffc0000000000 R09: ffffed1024ada786 [ 49.346631][ T301] R10: ffffed1024ada786 R11: 1ffff11024ada785 R12: dffffc0000000000 [ 49.346636][ T301] R13: 0000000000000000 R14: 0000000000000000 R15: 000000000000042b [ 49.346643][ T301] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000 [ 49.346650][ T301] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 49.346657][ T301] CR2: 000000c0068c8000 CR3: 000000000620f000 CR4: 00000000003506b0 [ 49.346665][ T301] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 49.346671][ T301] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 49.346677][ T301] Kernel panic - not syncing: Fatal exception [ 49.353662][ T301] Kernel Offset: disabled [ 49.821039][ T301] Rebooting in 86400 seconds..