Warning: Permanently added '10.128.1.17' (ED25519) to the list of known hosts. 1970/01/01 00:01:05 parsed 1 programs [ 67.235801][ T4603] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 69.643151][ T2064] ieee802154 phy0 wpan0: encryption failed: -22 [ 69.644274][ T2064] ieee802154 phy1 wpan1: encryption failed: -22 [ 69.644445][ T21] cfg80211: failed to load regulatory.db [ 70.194316][ T348] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.195655][ T348] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.197301][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.212080][ T348] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.213448][ T348] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.215090][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.549499][ T4635] chnl_net:caif_netlink_parms(): no params data found [ 70.567924][ T4635] bridge0: port 1(bridge_slave_0) entered blocking state [ 70.569171][ T4635] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.570680][ T4635] device bridge_slave_0 entered promiscuous mode [ 70.573145][ T4635] bridge0: port 2(bridge_slave_1) entered blocking state [ 70.574294][ T4635] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.575787][ T4635] device bridge_slave_1 entered promiscuous mode [ 70.585984][ T4635] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 70.588626][ T4635] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 70.596945][ T4635] team0: Port device team_slave_0 added [ 70.599498][ T4635] team0: Port device team_slave_1 added [ 70.608300][ T4635] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 70.609300][ T4635] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.613654][ T4635] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 70.616111][ T4635] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 70.617184][ T4635] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 70.621314][ T4635] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 70.674706][ T4635] device hsr_slave_0 entered promiscuous mode [ 70.722649][ T4635] device hsr_slave_1 entered promiscuous mode [ 71.362350][ T4635] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 71.434192][ T4635] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 71.474323][ T4635] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 71.512635][ T4635] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 71.581717][ T4635] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.586799][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 71.588188][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 71.591930][ T4635] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.595526][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 71.596994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 71.598478][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.599606][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.601242][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 71.604930][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 71.606671][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 71.608126][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.609277][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.614410][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 71.616357][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 71.621544][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 71.623963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 71.625418][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 71.627074][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 71.631980][ T4635] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.635344][ T4635] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.637710][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 71.639480][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 71.640970][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 71.643532][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 71.644972][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 71.648636][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 71.703151][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 71.704554][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 71.707671][ T4635] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 71.721649][ T4635] device veth0_vlan entered promiscuous mode [ 71.727170][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 71.728634][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 71.730059][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 71.731589][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 71.738115][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 71.739567][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 71.742816][ T4635] device veth1_vlan entered promiscuous mode [ 71.750925][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 71.752380][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 71.754991][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 71.756537][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 71.759704][ T4635] device veth0_macvtap entered promiscuous mode [ 71.763232][ T4635] device veth1_macvtap entered promiscuous mode [ 71.769018][ T4635] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 71.770265][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 71.771769][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 71.774944][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 71.776546][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 71.779464][ T4635] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 71.780596][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 71.782204][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 71.786339][ T4635] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.787741][ T4635] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.789282][ T4635] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.790717][ T4635] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 1970/01/01 00:01:12 executed programs: 0 [ 72.618390][ T4855] chnl_net:caif_netlink_parms(): no params data found [ 72.649422][ T4855] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.650651][ T4855] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.652162][ T4855] device bridge_slave_0 entered promiscuous mode [ 72.655228][ T4855] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.656319][ T4855] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.657905][ T4855] device bridge_slave_1 entered promiscuous mode [ 72.680794][ T4855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.685038][ T4855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.694645][ T4855] team0: Port device team_slave_0 added [ 72.696543][ T4855] team0: Port device team_slave_1 added [ 72.703683][ T4855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 72.704807][ T4855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.708774][ T4855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 72.711202][ T4855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 72.712254][ T4855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 72.716599][ T4855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 72.753800][ T4855] device hsr_slave_0 entered promiscuous mode [ 72.792933][ T4855] device hsr_slave_1 entered promiscuous mode [ 72.813058][ T4855] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 72.814373][ T4855] Cannot create hsr debugfs directory [ 72.850253][ T4855] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.592727][ T4162] Bluetooth: hci0: command 0x0409 tx timeout [ 75.236794][ T4855] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.673029][ T5036] Bluetooth: hci0: command 0x041b tx timeout [ 77.266333][ T4855] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.308245][ T4855] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.486834][ T4855] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.534257][ T4855] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.584048][ T4855] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.643980][ T4855] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.731707][ T4855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.735960][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 77.737521][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 77.740172][ T4855] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.743474][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 77.745043][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 77.746470][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.747416][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.748825][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 77.751226][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 77.754886][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 77.756241][ T348] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.757313][ T348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.774345][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 77.776784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 77.779756][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 77.781963][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 77.783986][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 77.786922][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 77.788540][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 77.791926][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 77.793871][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 77.796556][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.797959][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.800422][ T4855] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 77.841279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.843023][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.856907][ T4855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.864704][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 77.866320][ T348] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 77.877432][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 77.879013][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 77.880695][ T4855] device veth0_vlan entered promiscuous mode [ 77.881998][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 77.883580][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 77.887288][ T4855] device veth1_vlan entered promiscuous mode [ 77.894426][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 77.895941][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 77.897430][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 77.899014][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 77.901820][ T4855] device veth0_macvtap entered promiscuous mode [ 77.905837][ T4855] device veth1_macvtap entered promiscuous mode [ 77.910895][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 77.912374][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.915135][ T4855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.916207][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 77.917792][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 77.919266][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 77.920805][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 77.923209][ T4855] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 77.924833][ T4855] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 77.926794][ T4855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.928673][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 77.930302][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 77.933097][ T4855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.934561][ T4855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.935876][ T4855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.937210][ T4855] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.960451][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.962845][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.966857][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 77.973327][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.974554][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.976424][ T1647] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:17 executed programs: 2 [ 77.998137][ T5050] loop0: detected capacity change from 0 to 1024 [ 78.015778][ T5050] ======================================================= [ 78.015778][ T5050] WARNING: The mand mount option has been deprecated and [ 78.015778][ T5050] and is ignored by this kernel. Remove the mand [ 78.015778][ T5050] option from the mount to silence this warning. [ 78.015778][ T5050] ======================================================= [ 78.028522][ T5050] EXT4-fs (loop0): Ignoring removed nobh option [ 78.029558][ T5050] EXT4-fs (loop0): Ignoring removed bh option [ 78.030444][ T5050] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.046815][ T5050] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 78.067380][ T348] ================================================================== [ 78.068735][ T348] BUG: KASAN: use-after-free in ext4_find_extent+0x994/0xb6c [ 78.069883][ T348] Read of size 4 at addr ffff0000e8c196b8 by task kworker/u4:3/348 [ 78.071043][ T348] [ 78.071375][ T348] CPU: 0 PID: 348 Comm: kworker/u4:3 Not tainted syzkaller #0 [ 78.072513][ T348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 78.073927][ T348] Workqueue: writeback wb_workfn (flush-7:0) [ 78.074864][ T348] Call trace: [ 78.075281][ T348] dump_backtrace+0x0/0x43c [ 78.075921][ T348] show_stack+0x2c/0x3c [ 78.076544][ T348] __dump_stack+0x30/0x40 [ 78.077181][ T348] dump_stack_lvl+0xf8/0x160 [ 78.077899][ T348] print_address_description+0x78/0x30c [ 78.078701][ T348] kasan_report+0xec/0x15c [ 78.079409][ T348] __asan_report_load4_noabort+0x44/0x50 [ 78.080305][ T348] ext4_find_extent+0x994/0xb6c [ 78.081049][ T348] ext4_ext_map_blocks+0x234/0x562c [ 78.081862][ T348] ext4_map_blocks+0x7b8/0x167c [ 78.082672][ T348] ext4_writepages+0xf00/0x2c14 [ 78.083447][ T348] do_writepages+0x36c/0x578 [ 78.084186][ T348] __writeback_single_inode+0x148/0x11f0 [ 78.085133][ T348] writeback_sb_inodes+0x7fc/0x1378 [ 78.085954][ T348] wb_writeback+0x3d8/0xe44 [ 78.086679][ T348] wb_workfn+0x350/0xdd8 [ 78.087364][ T348] process_one_work+0x79c/0x1140 [ 78.088158][ T348] worker_thread+0x8f4/0x101c [ 78.088976][ T348] kthread+0x374/0x454 [ 78.089648][ T348] ret_from_fork+0x10/0x20 [ 78.090405][ T348] [ 78.090767][ T348] The buggy address belongs to the page: [ 78.091689][ T348] page:00000000b764b8c5 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x128c19 [ 78.093300][ T348] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 78.094367][ T348] raw: 05ffc00000000000 fffffc0003a3af08 fffffc000381edc8 0000000000000000 [ 78.095650][ T348] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 78.096944][ T348] page dumped because: kasan: bad access detected [ 78.097946][ T348] [ 78.098277][ T348] Memory state around the buggy address: [ 78.099164][ T348] ffff0000e8c19580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 78.100518][ T348] ffff0000e8c19600: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 78.101665][ T348] >ffff0000e8c19680: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 78.102776][ T348] ^ [ 78.103609][ T348] ffff0000e8c19700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 78.104871][ T348] ffff0000e8c19780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 78.106158][ T348] ================================================================== [ 78.107419][ T348] Disabling lock debugging due to kernel taint [ 78.109072][ T348] EXT4-fs error (device loop0): ext4_ext_split:1146: inode #15: comm kworker/u4:3: eh_entries 26982 != eh_max 25964! [ 78.111126][ T348] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 78.113547][ T348] EXT4-fs (loop0): This should not happen!! Data will be lost [ 78.113547][ T348] [ 78.175209][ T5055] loop0: detected capacity change from 0 to 1024 [ 78.178318][ T5055] EXT4-fs (loop0): Ignoring removed nobh option [ 78.179340][ T5055] EXT4-fs (loop0): Ignoring removed bh option [ 78.180296][ T5055] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.185842][ T5055] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 78.197815][ T348] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: block 1653562406152: comm kworker/u4:3: lblock 0 mapped to illegal pblock 1653562406152 (length 1) [ 78.200987][ T348] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 78.203889][ T348] EXT4-fs (loop0): This should not happen!! Data will be lost [ 78.203889][ T348] [ 78.240803][ T5059] loop0: detected capacity change from 0 to 1024 [ 78.273767][ T5059] EXT4-fs (loop0): Ignoring removed nobh option [ 78.274821][ T5059] EXT4-fs (loop0): Ignoring removed bh option [ 78.275853][ T5059] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 78.284569][ T5059] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 78.295600][ T348] ------------[ cut here ]------------ [ 78.296498][ T348] kernel BUG at fs/ext4/inode.c:2420! [ 78.297411][ T348] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 78.298508][ T348] Modules linked in: [ 78.299065][ T348] CPU: 1 PID: 348 Comm: kworker/u4:3 Tainted: G B syzkaller #0 [ 78.300423][ T348] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/30/2025 [ 78.301941][ T348] Workqueue: writeback wb_workfn (flush-7:0) [ 78.302878][ T348] pstate: 82400005 (Nzcv daif +PAN -UAO +TCO -DIT -SSBS BTYPE=--) [ 78.304101][ T348] pc : ext4_writepages+0x2b2c/0x2c14 [ 78.304938][ T348] lr : ext4_writepages+0x2b2c/0x2c14 [ 78.305777][ T348] sp : ffff80001f586ee0 [ 78.306366][ T348] x29: ffff80001f587200 x28: 0000000000000000 x27: ffff80001f5875f0 [ 78.307554][ T348] x26: dfff800000000000 x25: ffff0000caef0000 x24: ffff0000e220e650 [ 78.308841][ T348] x23: ffff0000caef0050 x22: 0000000000000000 x21: 1fffe0001c441ccf [ 78.310104][ T348] x20: 0000000000000000 x19: 0000000000000010 x18: 0000000000000000 [ 78.311320][ T348] x17: 0000000000000000 x16: ffff8000111cbe1c x15: 0000000000000406 [ 78.312574][ T348] x14: 00000000ffff8000 x13: 000000001e91ceb8 x12: 0000000000ff0100 [ 78.313780][ T348] x11: 0000000000000000 x10: 0000000000000000 x9 : ffff800008cb7aac [ 78.314876][ T348] x8 : ffff0000c7d2d1c0 x7 : 0000000000000000 x6 : 000000000000003f [ 78.316095][ T348] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff8000082b87bc [ 78.317220][ T348] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 78.318357][ T348] Call trace: [ 78.318880][ T348] ext4_writepages+0x2b2c/0x2c14 [ 78.319639][ T348] do_writepages+0x36c/0x578 [ 78.320336][ T348] __writeback_single_inode+0x148/0x11f0 [ 78.321168][ T348] writeback_sb_inodes+0x7fc/0x1378 [ 78.322024][ T348] wb_writeback+0x3d8/0xe44 [ 78.322709][ T348] wb_workfn+0x350/0xdd8 [ 78.323372][ T348] process_one_work+0x79c/0x1140 [ 78.324202][ T348] worker_thread+0x8f4/0x101c [ 78.324955][ T348] kthread+0x374/0x454 [ 78.325568][ T348] ret_from_fork+0x10/0x20 [ 78.326195][ T348] Code: f94063f6 f2fbfffa 17fffe23 97df065d (d4210000) [ 78.327259][ T348] ---[ end trace 716b5a72567c1271 ]--- [ 78.537687][ T348] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 78.538898][ T348] SMP: stopping secondary CPUs [ 78.539642][ T348] Kernel Offset: disabled [ 78.540286][ T348] CPU features: 0x8,000003c1,7d33ffd9 [ 78.541133][ T348] Memory Limit: none [ 78.755821][ T348] Rebooting in 86400 seconds..