Warning: Permanently added '10.128.1.141' (ED25519) to the list of known hosts.
2026/04/04 17:46:05 parsed 1 programs
[ 46.382808][ T30] audit: type=1400 audit(1775324765.734:105): avc: denied { unlink } for pid=387 comm="syz-executor" name="swap-file" dev="sda1" ino=2026 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 trawcon="root:object_r:swapfile_t"
[ 46.425951][ T387] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 47.213127][ T30] audit: type=1401 audit(1775324766.564:106): op=setxattr invalid_context="u:object_r:app_data_file:s0:c512,c768"
[ 47.288451][ T419] bridge0: port 1(bridge_slave_0) entered blocking state
[ 47.295998][ T419] bridge0: port 1(bridge_slave_0) entered disabled state
[ 47.303701][ T419] device bridge_slave_0 entered promiscuous mode
[ 47.310583][ T419] bridge0: port 2(bridge_slave_1) entered blocking state
[ 47.318012][ T419] bridge0: port 2(bridge_slave_1) entered disabled state
[ 47.325434][ T419] device bridge_slave_1 entered promiscuous mode
[ 47.374525][ T419] bridge0: port 2(bridge_slave_1) entered blocking state
[ 47.382127][ T419] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 47.389838][ T419] bridge0: port 1(bridge_slave_0) entered blocking state
[ 47.397219][ T419] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 47.413837][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 47.421749][ T313] bridge0: port 1(bridge_slave_0) entered disabled state
[ 47.429221][ T313] bridge0: port 2(bridge_slave_1) entered disabled state
[ 47.439549][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 47.449157][ T313] bridge0: port 1(bridge_slave_0) entered blocking state
[ 47.456997][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 47.466499][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 47.474904][ T313] bridge0: port 2(bridge_slave_1) entered blocking state
[ 47.482149][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 47.494064][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 47.503976][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 47.517179][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 47.528444][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 47.537137][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 47.545647][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 47.554594][ T419] device veth0_vlan entered promiscuous mode
[ 47.564863][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 47.574315][ T419] device veth1_macvtap entered promiscuous mode
[ 47.583502][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 47.594372][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
2026/04/04 17:46:07 executed programs: 0
[ 48.033355][ T451] bridge0: port 1(bridge_slave_0) entered blocking state
[ 48.041158][ T451] bridge0: port 1(bridge_slave_0) entered disabled state
[ 48.049028][ T451] device bridge_slave_0 entered promiscuous mode
[ 48.056602][ T451] bridge0: port 2(bridge_slave_1) entered blocking state
[ 48.064204][ T451] bridge0: port 2(bridge_slave_1) entered disabled state
[ 48.071783][ T451] device bridge_slave_1 entered promiscuous mode
[ 48.135520][ T451] bridge0: port 2(bridge_slave_1) entered blocking state
[ 48.143220][ T451] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 48.150594][ T451] bridge0: port 1(bridge_slave_0) entered blocking state
[ 48.157941][ T451] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 48.180097][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 48.188068][ T313] bridge0: port 1(bridge_slave_0) entered disabled state
[ 48.196344][ T313] bridge0: port 2(bridge_slave_1) entered disabled state
[ 48.206206][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 48.215031][ T313] bridge0: port 1(bridge_slave_0) entered blocking state
[ 48.222619][ T313] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 48.232868][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 48.242476][ T313] bridge0: port 2(bridge_slave_1) entered blocking state
[ 48.249525][ T313] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 48.262834][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 48.271308][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 48.280818][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 48.289456][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 48.302318][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 48.311166][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 48.322454][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 48.331265][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 48.340243][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 48.348547][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 48.356903][ T451] device veth0_vlan entered promiscuous mode
[ 48.368201][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 48.377303][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 48.387378][ T451] device veth1_macvtap entered promiscuous mode
[ 48.397115][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 48.405135][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 48.413957][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 48.423743][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 48.432607][ T313] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 48.461704][ T457] loop2: detected capacity change from 0 to 1024
[ 48.482744][ T457] =======================================================
[ 48.482744][ T457] WARNING: The mand mount option has been deprecated and
[ 48.482744][ T457] and is ignored by this kernel. Remove the mand
[ 48.482744][ T457] option from the mount to silence this warning.
[ 48.482744][ T457] =======================================================
[ 48.559920][ T457] EXT4-fs (loop2): Ignoring removed nobh option
[ 48.566847][ T457] EXT4-fs (loop2): Ignoring removed bh option
[ 48.573071][ T457] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 48.603791][ T457] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 48.630312][ T30] audit: type=1400 audit(1775324767.984:107): avc: denied { mount } for pid=456 comm="syz.2.17" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1
[ 48.653678][ T30] audit: type=1400 audit(1775324767.984:108): avc: denied { read append } for pid=456 comm="syz.2.17" name="file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 48.677478][ T30] audit: type=1400 audit(1775324767.984:109): avc: denied { open } for pid=456 comm="syz.2.17" path="/0/file1/file1" dev="loop2" ino=15 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1
[ 48.703187][ T30] audit: type=1400 audit(1775324767.984:110): avc: denied { write } for pid=456 comm="syz.2.17" name="/" dev="loop2" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 48.704945][ T313] ==================================================================
[ 48.726039][ T30] audit: type=1400 audit(1775324767.984:111): avc: denied { add_name } for pid=456 comm="syz.2.17" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 48.733911][ T313] BUG: KASAN: use-after-free in ext4_find_extent+0xbeb/0xe20
[ 48.733948][ T313] Read of size 4 at addr ffff88812acbb20c by task kworker/u4:3/313
[ 48.733963][ T313]
[ 48.733968][ T313] CPU: 0 PID: 313 Comm: kworker/u4:3 Not tainted syzkaller #0
[ 48.777881][ T30] audit: type=1400 audit(1775324767.984:112): avc: denied { create } for pid=456 comm="syz.2.17" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[ 48.785195][ T313] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 48.785208][ T313] Workqueue: writeback wb_workfn (flush-7:2)
[ 48.785238][ T313] Call Trace:
[ 48.785244][ T313]
[ 48.785250][ T313] __dump_stack+0x21/0x30
[ 48.793698][ T30] audit: type=1400 audit(1775324767.984:113): avc: denied { remove_name } for pid=456 comm="syz.2.17" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1
[ 48.795812][ T313] dump_stack_lvl+0x110/0x170
[ 48.803733][ T30] audit: type=1400 audit(1775324767.984:114): avc: denied { unlink } for pid=456 comm="syz.2.17" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop2" ino=18 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:unlabeled_t tclass=lnk_file permissive=1
[ 48.846914][ T313] ? show_regs_print_info+0x20/0x20
[ 48.846951][ T313] ? load_image+0x3e0/0x3e0
[ 48.846969][ T313] print_address_description+0x7f/0x2c0
[ 48.846987][ T313] ? ext4_find_extent+0xbeb/0xe20
[ 48.847007][ T313] kasan_report+0xf1/0x140
[ 48.847024][ T313] ? __read_extent_tree_block+0x1e8/0x790
[ 49.002827][ T313] ? ext4_find_extent+0xbeb/0xe20
[ 49.007948][ T313] __asan_report_load4_noabort+0x14/0x20
[ 49.013762][ T313] ext4_find_extent+0xbeb/0xe20
[ 49.018975][ T313] ext4_ext_map_blocks+0x207/0x61e0
[ 49.024345][ T313] ? ret_from_fork+0x1f/0x30
[ 49.029317][ T313] ? stack_trace_save+0xa6/0xf0
[ 49.034167][ T313] ? __stack_depot_save+0x34/0x480
[ 49.039278][ T313] ? __mem_cgroup_uncharge_list+0x39/0xc0
[ 49.045189][ T313] ? __kasan_slab_alloc+0xcf/0xf0
[ 49.050508][ T313] ? __kasan_slab_alloc+0xbd/0xf0
[ 49.055790][ T313] ? slab_post_alloc_hook+0x4f/0x2b0
[ 49.061270][ T313] ? kmem_cache_alloc+0xf7/0x260
[ 49.066757][ T313] ? ext4_alloc_io_end_vec+0x2a/0x160
[ 49.072788][ T313] ? ext4_writepages+0xf20/0x3090
[ 49.078007][ T313] ? do_writepages+0x473/0x6c0
[ 49.082775][ T313] ? wb_workfn+0x3ac/0xf30
[ 49.087207][ T313] ? process_one_work+0x6be/0xba0
[ 49.092766][ T313] ? worker_thread+0xa59/0x1200
[ 49.098003][ T313] ? ext4_ext_release+0x10/0x10
[ 49.103028][ T313] ? ext4_es_lookup_extent+0x54c/0x900
[ 49.108669][ T313] ext4_map_blocks+0x988/0x1b30
[ 49.113618][ T313] ? slab_post_alloc_hook+0x6d/0x2b0
[ 49.119177][ T313] ? should_failslab+0x9/0x20
[ 49.123881][ T313] ? ext4_issue_zeroout+0x250/0x250
[ 49.129281][ T313] ? ext4_inode_journal_mode+0x19a/0x480
[ 49.135235][ T313] ext4_writepages+0x123f/0x3090
[ 49.140196][ T313] ? process_one_work+0x6be/0xba0
[ 49.145596][ T313] ? worker_thread+0xa59/0x1200
[ 49.150755][ T313] ? ext4_readpage+0x220/0x220
[ 49.155628][ T313] ? avc_alloc_node+0x8f/0x4d0
[ 49.160417][ T313] ? __kasan_check_write+0x14/0x20
[ 49.165545][ T313] ? __update_load_avg_cfs_rq+0xaf/0x2f0
[ 49.171193][ T313] ? ext4_readpage+0x220/0x220
[ 49.176307][ T313] do_writepages+0x473/0x6c0
[ 49.181192][ T313] ? __kasan_check_read+0x11/0x20
[ 49.186248][ T313] ? sched_clock_cpu+0x18/0x3c0
[ 49.191371][ T313] ? _raw_spin_trylock_bh+0x150/0x150
[ 49.197017][ T313] ? update_load_avg+0x40d/0x1110
[ 49.202317][ T313] ? __writepage+0x130/0x130
[ 49.207081][ T313] ? __kasan_check_write+0x14/0x20
[ 49.212453][ T313] ? _raw_spin_lock+0x94/0xf0
[ 49.217307][ T313] __writeback_single_inode+0xd5/0x9c0
[ 49.223055][ T313] ? wbc_attach_and_unlock_inode+0x194/0x5f0
[ 49.229206][ T313] writeback_sb_inodes+0xa10/0x1610
[ 49.234737][ T313] ? unwind_next_frame+0x3d5/0x700
[ 49.239936][ T313] ? queue_io+0x4c0/0x4c0
[ 49.244269][ T313] ? __kasan_check_read+0x11/0x20
[ 49.249484][ T313] ? queue_io+0x382/0x4c0
[ 49.254130][ T313] wb_writeback+0x40b/0x9d0
[ 49.258763][ T313] ? inode_cgwb_move_to_attached+0x3e0/0x3e0
[ 49.264830][ T313] ? set_worker_desc+0x1ba/0x1f0
[ 49.270222][ T313] ? sched_clock+0x9/0x10
[ 49.275174][ T313] ? sched_clock_cpu+0x18/0x3c0
[ 49.280303][ T313] ? __kasan_check_write+0x14/0x20
[ 49.285809][ T313] ? sched_balance_newidle+0x879/0xc60
[ 49.291486][ T313] wb_workfn+0x3ac/0xf30
[ 49.295914][ T313] ? inode_wait_for_writeback+0x220/0x220
[ 49.301644][ T313] ? compat_start_thread+0x20/0x20
[ 49.307022][ T313] ? kvm_sched_clock_read+0x18/0x40
[ 49.312511][ T313] ? _raw_spin_unlock+0x4d/0x70
[ 49.317375][ T313] ? finish_task_switch+0x16b/0x780
[ 49.322930][ T313] ? __switch_to_asm+0x3a/0x60
[ 49.328150][ T313] ? __schedule+0xb76/0x14c0
[ 49.332829][ T313] process_one_work+0x6be/0xba0
[ 49.337984][ T313] worker_thread+0xa59/0x1200
[ 49.342754][ T313] ? _raw_spin_lock_irqsave+0xc2/0x130
[ 49.348320][ T313] ? __kthread_parkme+0xac/0x200
[ 49.353257][ T313] kthread+0x411/0x500
[ 49.357504][ T313] ? worker_clr_flags+0x190/0x190
[ 49.362786][ T313] ? kthread_blkcg+0xd0/0xd0
[ 49.367835][ T313] ret_from_fork+0x1f/0x30
[ 49.372440][ T313]
[ 49.375552][ T313]
[ 49.378015][ T313] Allocated by task 394:
[ 49.382434][ T313] __kasan_slab_alloc+0xbd/0xf0
[ 49.387382][ T313] slab_post_alloc_hook+0x4f/0x2b0
[ 49.392687][ T313] kmem_cache_alloc+0xf7/0x260
[ 49.397725][ T313] vm_area_alloc+0x24/0x130
[ 49.402322][ T313] mmap_region+0xaa6/0x1710
[ 49.407261][ T313] do_mmap+0x812/0xf10
[ 49.412022][ T313] vm_mmap_pgoff+0x1ec/0x430
[ 49.416879][ T313] ksys_mmap_pgoff+0xf6/0x1d0
[ 49.422018][ T313] __x64_sys_mmap+0xfa/0x110
[ 49.426907][ T313] x64_sys_call+0x83/0x9a0
[ 49.431807][ T313] do_syscall_64+0x4c/0xa0
[ 49.436338][ T313] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 49.442672][ T313]
[ 49.445026][ T313] Freed by task 13:
[ 49.448952][ T313] kasan_set_track+0x4a/0x70
[ 49.453776][ T313] kasan_set_free_info+0x23/0x40
[ 49.458902][ T313] ____kasan_slab_free+0x125/0x160
[ 49.464412][ T313] __kasan_slab_free+0x11/0x20
[ 49.469185][ T313] slab_free_freelist_hook+0xc2/0x190
[ 49.474838][ T313] kmem_cache_free+0x100/0x320
[ 49.480051][ T313] __free_vm_area_struct+0x1c/0x20
[ 49.485338][ T313] rcu_do_batch+0x532/0xbe0
[ 49.489840][ T313] rcu_core+0x5ee/0xf80
[ 49.494263][ T313] rcu_core_si+0x9/0x10
[ 49.498500][ T313] handle_softirqs+0x250/0x560
[ 49.503668][ T313] run_ksoftirqd+0x28/0x40
[ 49.508374][ T313] smpboot_thread_fn+0x45a/0x8c0
[ 49.513838][ T313] kthread+0x411/0x500
[ 49.518094][ T313] ret_from_fork+0x1f/0x30
[ 49.522677][ T313]
[ 49.525081][ T313] Last potentially related work creation:
[ 49.531054][ T313] kasan_save_stack+0x3a/0x60
[ 49.536019][ T313] __kasan_record_aux_stack+0xd2/0x100
[ 49.542100][ T313] kasan_record_aux_stack_noalloc+0xb/0x10
[ 49.548254][ T313] call_rcu+0x10b/0xf80
[ 49.552492][ T313] vm_area_free_no_check+0x10e/0x140
[ 49.558216][ T313] vm_area_free+0x56/0x60
[ 49.563081][ T313] __vma_adjust+0x117b/0x1850
[ 49.568107][ T313] vma_merge+0x3e6/0x910
[ 49.572527][ T313] mprotect_fixup+0x3f2/0x7d0
[ 49.577475][ T313] do_mprotect_pkey+0x72b/0xad0
[ 49.582412][ T313] __x64_sys_mprotect+0x80/0x90
[ 49.587529][ T313] x64_sys_call+0x912/0x9a0
[ 49.592147][ T313] do_syscall_64+0x4c/0xa0
[ 49.596648][ T313] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 49.602664][ T313]
[ 49.604998][ T313] The buggy address belongs to the object at ffff88812acbb128
[ 49.604998][ T313] which belongs to the cache vm_area_struct of size 232
[ 49.619936][ T313] The buggy address is located 228 bytes inside of
[ 49.619936][ T313] 232-byte region [ffff88812acbb128, ffff88812acbb210)
[ 49.634041][ T313] The buggy address belongs to the page:
[ 49.639856][ T313] page:ffffea0004ab2ec0 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x12acbb
[ 49.650931][ T313] flags: 0x4000000000000200(slab|zone=1)
[ 49.656746][ T313] raw: 4000000000000200 0000000000000000 dead000000000122 ffff888100186900
[ 49.665762][ T313] raw: 0000000000000000 00000000000d000d 00000001ffffffff 0000000000000000
[ 49.674964][ T313] page dumped because: kasan: bad access detected
[ 49.681461][ T313] page_owner tracks the page as allocated
[ 49.687427][ T313] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x112cc0(GFP_USER|__GFP_NOWARN|__GFP_NORETRY), pid 451, ts 48455070386, free_ts 47846273272
[ 49.705490][ T313] post_alloc_hook+0x192/0x1b0
[ 49.710538][ T313] prep_new_page+0x1c/0x110
[ 49.715293][ T313] get_page_from_freelist+0x2d3a/0x2dc0
[ 49.721187][ T313] __alloc_pages+0x1a2/0x460
[ 49.726084][ T313] new_slab+0xa1/0x4d0
[ 49.730485][ T313] ___slab_alloc+0x381/0x810
[ 49.735545][ T313] __slab_alloc+0x49/0x90
[ 49.739964][ T313] kmem_cache_alloc+0x138/0x260
[ 49.744995][ T313] vm_area_dup+0x26/0x210
[ 49.749415][ T313] copy_mm+0x947/0x13c0
[ 49.754021][ T313] copy_process+0x117c/0x3250
[ 49.758996][ T313] kernel_clone+0x233/0x960
[ 49.763587][ T313] __x64_sys_clone+0x198/0x210
[ 49.768585][ T313] x64_sys_call+0x41f/0x9a0
[ 49.773265][ T313] do_syscall_64+0x4c/0xa0
[ 49.777688][ T313] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 49.783756][ T313] page last free stack trace:
[ 49.788614][ T313] free_unref_page_prepare+0x542/0x550
[ 49.794077][ T313] free_unref_page+0xae/0x540
[ 49.798895][ T313] __free_pages+0x6c/0x100
[ 49.803400][ T313] __vunmap+0x86d/0xa00
[ 49.807559][ T313] vfree+0x8b/0xc0
[ 49.811634][ T313] kcov_close+0x2b/0x50
[ 49.816277][ T313] __fput+0x20b/0x8b0
[ 49.820436][ T313] ____fput+0x15/0x20
[ 49.825488][ T313] task_work_run+0x127/0x190
[ 49.830348][ T313] do_exit+0xa9e/0x27e0
[ 49.834586][ T313] do_group_exit+0x141/0x310
[ 49.839351][ T313] get_signal+0x66a/0x1480
[ 49.843847][ T313] arch_do_signal_or_restart+0xdf/0x11c0
[ 49.850013][ T313] exit_to_user_mode_loop+0xa7/0xe0
[ 49.855557][ T313] exit_to_user_mode_prepare+0x87/0xd0
[ 49.861450][ T313] syscall_exit_to_user_mode+0x1a/0x30
[ 49.867027][ T313]
[ 49.869494][ T313] Memory state around the buggy address:
[ 49.875475][ T313] ffff88812acbb100: fc fc fc fc fc fa fb fb fb fb fb fb fb fb fb fb
[ 49.883539][ T313] ffff88812acbb180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 49.891920][ T313] >ffff88812acbb200: fb fb fc fc fc fc fc fc fc fc fa fb fb fb fb fb
[ 49.900414][ T313] ^
[ 49.905004][ T313] ffff88812acbb280: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb
[ 49.913403][ T313] ffff88812acbb300: fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc 00
[ 49.922080][ T313] ==================================================================
[ 49.931078][ T313] Disabling lock debugging due to kernel taint
[ 49.950760][ T313] EXT4-fs error (device loop2): ext4_ext_split:1074: inode #15: comm kworker/u4:3: p_ext > EXT_MAX_EXTENT!
[ 49.963856][ T313] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 49.978010][ T313] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 49.978010][ T313]
[ 50.074380][ T463] loop2: detected capacity change from 0 to 1024
[ 50.128439][ T463] EXT4-fs (loop2): Ignoring removed nobh option
[ 50.135124][ T463] EXT4-fs (loop2): Ignoring removed bh option
[ 50.141216][ T463] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 50.163134][ T463] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 50.206575][ T313] EXT4-fs error (device loop2): ext4_ext_split:1074: inode #15: comm kworker/u4:3: p_ext > EXT_MAX_EXTENT!
[ 50.219328][ T313] EXT4-fs error (device loop2): mb_free_blocks:1874: group 0, inode 15: block 449:freeing already freed block (bit 28); block bitmap corrupt.
[ 50.235603][ T313] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 50.248748][ T313] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 50.248748][ T313]
[ 50.379376][ T45] device bridge_slave_1 left promiscuous mode
[ 50.381916][ T468] loop2: detected capacity change from 0 to 1024
[ 50.385905][ T45] bridge0: port 2(bridge_slave_1) entered disabled state
[ 50.400064][ T45] device bridge_slave_0 left promiscuous mode
[ 50.406306][ T45] bridge0: port 1(bridge_slave_0) entered disabled state
[ 50.414482][ T45] device veth1_macvtap left promiscuous mode
[ 50.420577][ T45] device veth0_vlan left promiscuous mode
[ 50.430365][ T468] EXT4-fs (loop2): Ignoring removed nobh option
[ 50.443983][ T468] EXT4-fs (loop2): Ignoring removed bh option
[ 50.450908][ T468] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 50.475178][ T468] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 50.510643][ T313] EXT4-fs error (device loop2): ext4_ext_split:1074: inode #15: comm kworker/u4:3: p_ext > EXT_MAX_EXTENT!
[ 50.523083][ T313] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 50.537079][ T313] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 50.537079][ T313]
[ 50.619600][ T472] loop2: detected capacity change from 0 to 1024
[ 50.629056][ T472] EXT4-fs (loop2): Ignoring removed nobh option
[ 50.636223][ T472] EXT4-fs (loop2): Ignoring removed bh option
[ 50.642765][ T472] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 50.664254][ T472] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 50.699877][ T313] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 50.712633][ T313] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 50.712633][ T313]
[ 50.785661][ T476] loop2: detected capacity change from 0 to 1024
[ 50.804894][ T476] EXT4-fs (loop2): Ignoring removed nobh option
[ 50.811427][ T476] EXT4-fs (loop2): Ignoring removed bh option
[ 50.820119][ T476] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 50.842975][ T476] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 50.879896][ T466] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #15: block 52158082812102: comm kworker/u4:5: lblock 84 mapped to illegal pblock 52158082812102 (length 2)
[ 50.898652][ T466] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 50.911934][ T466] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 50.911934][ T466]
[ 50.982716][ T480] loop2: detected capacity change from 0 to 1024
[ 51.053547][ T480] EXT4-fs (loop2): Ignoring removed nobh option
[ 51.060210][ T480] EXT4-fs (loop2): Ignoring removed bh option
[ 51.066975][ T480] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 51.083130][ T480] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 51.118722][ T45] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #15: block 29678223984853: comm kworker/u4:2: lblock 84 mapped to illegal pblock 29678223984853 (length 2)
[ 51.135938][ T45] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 51.148835][ T45] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 51.148835][ T45]
[ 51.190919][ T484] loop2: detected capacity change from 0 to 1024
[ 51.231064][ T484] EXT4-fs (loop2): Ignoring removed nobh option
[ 51.238207][ T484] EXT4-fs (loop2): Ignoring removed bh option
[ 51.244809][ T484] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 51.263699][ T484] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 51.300124][ T45] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 51.312792][ T45] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 51.312792][ T45]
[ 51.351497][ T489] loop2: detected capacity change from 0 to 1024
[ 51.401129][ T489] EXT4-fs (loop2): Ignoring removed nobh option
[ 51.407534][ T489] EXT4-fs (loop2): Ignoring removed bh option
[ 51.413818][ T489] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 51.433200][ T489] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 51.469120][ T45] EXT4-fs error (device loop2): ext4_ext_split:1074: inode #15: comm kworker/u4:2: p_ext > EXT_MAX_EXTENT!
[ 51.481833][ T45] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 51.494709][ T45] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 51.494709][ T45]
[ 51.580874][ T493] loop2: detected capacity change from 0 to 1024
[ 51.621298][ T493] EXT4-fs (loop2): Ignoring removed nobh option
[ 51.628378][ T493] EXT4-fs (loop2): Ignoring removed bh option
[ 51.635257][ T493] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 51.653174][ T493] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 51.688770][ T45] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 51.701740][ T45] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 51.701740][ T45]
[ 51.782514][ T497] loop2: detected capacity change from 0 to 1024
[ 51.908871][ T497] EXT4-fs (loop2): Ignoring removed nobh option
[ 51.915810][ T497] EXT4-fs (loop2): Ignoring removed bh option
[ 51.922987][ T497] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 51.943107][ T497] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 51.981135][ T466] EXT4-fs error (device loop2): ext4_ext_split:1074: inode #15: comm kworker/u4:5: p_ext > EXT_MAX_EXTENT!
[ 51.993914][ T466] EXT4-fs error (device loop2): mb_free_blocks:1874: group 0, inode 15: block 449:freeing already freed block (bit 28); block bitmap corrupt.
[ 52.009404][ T466] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 52.022992][ T466] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 52.022992][ T466]
[ 52.168280][ T501] EXT4-fs (loop2): Ignoring removed nobh option
[ 52.174974][ T501] EXT4-fs (loop2): Ignoring removed bh option
[ 52.181296][ T501] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 52.203085][ T501] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 52.237914][ T466] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 52.250941][ T466] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 52.250941][ T466]
[ 52.312955][ T505] EXT4-fs (loop2): Ignoring removed nobh option
[ 52.319425][ T505] EXT4-fs (loop2): Ignoring removed bh option
[ 52.325704][ T505] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 52.343071][ T505] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 52.380105][ T461] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 52.393474][ T461] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 52.393474][ T461]
[ 52.542472][ T509] EXT4-fs (loop2): Ignoring removed nobh option
[ 52.549385][ T509] EXT4-fs (loop2): Ignoring removed bh option
[ 52.555989][ T509] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 52.573888][ T509] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 52.608918][ T45] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 52.621708][ T45] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 52.621708][ T45]
[ 52.775202][ T513] EXT4-fs (loop2): Ignoring removed nobh option
[ 52.781697][ T513] EXT4-fs (loop2): Ignoring removed bh option
[ 52.788102][ T513] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 52.803065][ T513] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 52.839736][ T461] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 52.853149][ T461] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 52.853149][ T461]
[ 53.008789][ T517] EXT4-fs (loop2): Ignoring removed nobh option
[ 53.015334][ T517] EXT4-fs (loop2): Ignoring removed bh option
[ 53.021553][ T517] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
2026/04/04 17:46:12 executed programs: 17
[ 53.043195][ T517] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 53.080035][ T466] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 53.093154][ T466] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 53.093154][ T466]
[ 53.249120][ T521] EXT4-fs (loop2): Ignoring removed nobh option
[ 53.255733][ T521] EXT4-fs (loop2): Ignoring removed bh option
[ 53.261925][ T521] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 53.283400][ T521] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 53.319931][ T466] EXT4-fs error (device loop2): ext4_ext_split:1074: inode #15: comm kworker/u4:5: p_ext > EXT_MAX_EXTENT!
[ 53.332222][ T466] EXT4-fs error (device loop2): mb_free_blocks:1874: group 0, inode 15: block 449:freeing already freed block (bit 28); block bitmap corrupt.
[ 53.347575][ T466] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 53.360794][ T466] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 53.360794][ T466]
[ 53.507332][ T525] EXT4-fs (loop2): Ignoring removed nobh option
[ 53.513886][ T525] EXT4-fs (loop2): Ignoring removed bh option
[ 53.520804][ T525] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 53.543188][ T525] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 53.580945][ T466] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 53.593769][ T466] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 53.593769][ T466]
[ 53.701110][ T529] set_capacity_and_notify: 7 callbacks suppressed
[ 53.701126][ T529] loop2: detected capacity change from 0 to 1024
[ 53.717046][ T529] EXT4-fs (loop2): Ignoring removed nobh option
[ 53.723972][ T529] EXT4-fs (loop2): Ignoring removed bh option
[ 53.730374][ T529] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 53.753283][ T529] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 53.790268][ T461] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 53.803099][ T461] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 53.803099][ T461]
[ 53.840535][ T533] loop2: detected capacity change from 0 to 1024
[ 53.891621][ T533] EXT4-fs (loop2): Ignoring removed nobh option
[ 53.898184][ T533] EXT4-fs (loop2): Ignoring removed bh option
[ 53.905425][ T533] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 53.923212][ T533] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 53.960770][ T45] EXT4-fs error (device loop2): ext4_ext_split:1074: inode #15: comm kworker/u4:2: p_ext > EXT_MAX_EXTENT!
[ 53.972593][ T45] EXT4-fs error (device loop2): mb_free_blocks:1874: group 0, inode 15: block 449:freeing already freed block (bit 28); block bitmap corrupt.
[ 53.987861][ T45] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 54.000701][ T45] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 54.000701][ T45]
[ 54.101230][ T537] loop2: detected capacity change from 0 to 1024
[ 54.142223][ T537] EXT4-fs (loop2): Ignoring removed nobh option
[ 54.149026][ T537] EXT4-fs (loop2): Ignoring removed bh option
[ 54.155475][ T537] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 54.173467][ T537] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 54.209982][ T466] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 54.223029][ T466] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 54.223029][ T466]
[ 54.300217][ T542] loop2: detected capacity change from 0 to 1024
[ 54.372851][ T542] EXT4-fs (loop2): Ignoring removed nobh option
[ 54.379509][ T542] EXT4-fs (loop2): Ignoring removed bh option
[ 54.385880][ T542] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 54.403147][ T542] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 54.439795][ T45] EXT4-fs error (device loop2): ext4_ext_split:1074: inode #15: comm kworker/u4:2: p_ext > EXT_MAX_EXTENT!
[ 54.452881][ T45] EXT4-fs error (device loop2): mb_free_blocks:1874: group 0, inode 15: block 449:freeing already freed block (bit 28); block bitmap corrupt.
[ 54.468984][ T45] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 54.482957][ T45] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 54.482957][ T45]
[ 54.539805][ T546] loop2: detected capacity change from 0 to 1024
[ 54.607428][ T546] EXT4-fs (loop2): Ignoring removed nobh option
[ 54.613974][ T546] EXT4-fs (loop2): Ignoring removed bh option
[ 54.620812][ T546] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 54.643108][ T546] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 54.679200][ T466] EXT4-fs error (device loop2): ext4_ext_split:1074: inode #15: comm kworker/u4:5: p_ext > EXT_MAX_EXTENT!
[ 54.691593][ T466] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 54.705201][ T466] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 54.705201][ T466]
[ 54.771111][ T550] loop2: detected capacity change from 0 to 1024
[ 54.892420][ T550] EXT4-fs (loop2): Ignoring removed nobh option
[ 54.899205][ T550] EXT4-fs (loop2): Ignoring removed bh option
[ 54.905787][ T550] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 54.923375][ T550] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 54.960960][ T45] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 54.974028][ T45] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 54.974028][ T45]
[ 55.030191][ T554] loop2: detected capacity change from 0 to 1024
[ 55.136046][ T554] EXT4-fs (loop2): Ignoring removed nobh option
[ 55.143195][ T554] EXT4-fs (loop2): Ignoring removed bh option
[ 55.150213][ T554] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 55.173189][ T554] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 55.208114][ T461] EXT4-fs error (device loop2): ext4_map_blocks:740: inode #15: block 229248896297775: comm kworker/u4:4: lblock 84 mapped to illegal pblock 229248896297775 (length 2)
[ 55.226004][ T461] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 55.239483][ T461] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 55.239483][ T461]
[ 55.341022][ T558] loop2: detected capacity change from 0 to 1024
[ 55.349517][ T558] EXT4-fs (loop2): Ignoring removed nobh option
[ 55.356143][ T558] EXT4-fs (loop2): Ignoring removed bh option
[ 55.362640][ T558] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 55.383176][ T558] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 55.418679][ T466] EXT4-fs error (device loop2): ext4_ext_split:1074: inode #15: comm kworker/u4:5: p_ext > EXT_MAX_EXTENT!
[ 55.431842][ T466] EXT4-fs error (device loop2): mb_free_blocks:1874: group 0, inode 15: block 449:freeing already freed block (bit 28); block bitmap corrupt.
[ 55.448394][ T466] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 55.462121][ T466] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 55.462121][ T466]
[ 55.581334][ T562] loop2: detected capacity change from 0 to 1024
[ 55.631144][ T562] EXT4-fs (loop2): Ignoring removed nobh option
[ 55.637982][ T562] EXT4-fs (loop2): Ignoring removed bh option
[ 55.644369][ T562] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 55.663413][ T562] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 55.703368][ T466] EXT4-fs error (device loop2): ext4_ext_split:1074: inode #15: comm kworker/u4:5: p_ext > EXT_MAX_EXTENT!
[ 55.716673][ T466] EXT4-fs error (device loop2): mb_free_blocks:1874: group 0, inode 15: block 449:freeing already freed block (bit 28); block bitmap corrupt.
[ 55.732797][ T466] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 55.748721][ T466] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 55.748721][ T466]
[ 55.860470][ T566] loop2: detected capacity change from 0 to 1024
[ 55.900991][ T566] EXT4-fs (loop2): Ignoring removed nobh option
[ 55.908415][ T566] EXT4-fs (loop2): Ignoring removed bh option
[ 55.915417][ T566] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 55.933756][ T566] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 55.970068][ T461] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 55.983425][ T461] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 55.983425][ T461]
[ 56.128461][ T570] EXT4-fs (loop2): Ignoring removed nobh option
[ 56.135189][ T570] EXT4-fs (loop2): Ignoring removed bh option
[ 56.141721][ T570] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 56.163127][ T570] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 56.199966][ T461] EXT4-fs error (device loop2): ext4_ext_split:1074: inode #15: comm kworker/u4:4: p_ext > EXT_MAX_EXTENT!
[ 56.213097][ T461] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 56.226224][ T461] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 56.226224][ T461]
[ 56.341031][ T574] EXT4-fs (loop2): Ignoring removed nobh option
[ 56.348403][ T574] EXT4-fs (loop2): Ignoring removed bh option
[ 56.354999][ T574] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 56.373512][ T574] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 56.409898][ T461] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 56.423019][ T461] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 56.423019][ T461]
[ 56.485649][ T578] EXT4-fs (loop2): Ignoring removed nobh option
[ 56.492568][ T578] EXT4-fs (loop2): Ignoring removed bh option
[ 56.499104][ T578] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 56.523471][ T578] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 56.558950][ T45] EXT4-fs error (device loop2): ext4_ext_split:1074: inode #15: comm kworker/u4:2: p_ext > EXT_MAX_EXTENT!
[ 56.571333][ T45] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 56.584285][ T45] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 56.584285][ T45]
[ 56.758440][ T582] EXT4-fs (loop2): Ignoring removed nobh option
[ 56.759901][ T101] ------------[ cut here ]------------
[ 56.765411][ T582] EXT4-fs (loop2): Ignoring removed bh option
[ 56.771225][ T101] WARNING: CPU: 0 PID: 101 at mm/kasan/shadow.c:134 kasan_unpoison+0x82/0x90
[ 56.777458][ T582] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 56.786958][ T101] Modules linked in:
[ 56.803497][ T582] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 56.830242][ T101] CPU: 0 PID: 101 Comm: udevd Tainted: G B syzkaller #0
[ 56.833296][ T466] EXT4-fs error (device loop2): ext4_ext_split:1074: inode #15: comm kworker/u4:5: p_ext > EXT_MAX_EXTENT!
[ 56.839084][ T101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 56.853163][ T466] EXT4-fs error (device loop2): mb_free_blocks:1874: group 0, inode 15: block 449:freeing already freed block (bit 28); block bitmap corrupt.
[ 56.863657][ T101] RIP: 0010:kasan_unpoison+0x82/0x90
[ 56.863687][ T101] Code: ea 03 48 29 fa 4c 01 fa 31 f6 e8 29 c5 cb 00 4c 89 f0 48 83 e0 07 74 0b 4c 01 f3 48 c1 eb 03 42 88 04 3b 5b 41 5e 41 5f 5d c3 <0f> 0b eb f5 66 2e 0f 1f 84 00 00 00 00 00 55 48 89 e5 41 56 53 48
[ 56.879646][ T466] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 56.885202][ T101] RSP: 0018:ffffc90000a47528 EFLAGS: 00010206
[ 56.906169][ T466] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 56.906169][ T466]
[ 56.920386][ T101]
[ 56.942294][ T101] RAX: ffff88823fece001 RBX: ffff88810f398056 RCX: fffffffecf4ca000
[ 56.952829][ T101] RDX: 0000000000000001 RSI: 0000000000000040 RDI: ffff88810f398056
[ 56.961989][ T101] RBP: ffffc90000a47540 R08: ffffc90000a477f8 R09: 0000000000000001
[ 56.971075][ T101] R10: dffffc0000000000 R11: fffff52000148ef9 R12: 0000000000000001
[ 56.979765][ T101] R13: 0000000000000001 R14: 0000000000000cc0 R15: ffff888100042780
[ 56.988748][ T101] FS: 00007f1e4ed43880(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 56.998796][ T101] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 57.006086][ T101] CR2: 00002a7e3dddc000 CR3: 000000010df08000 CR4: 00000000003506b0
[ 57.014432][ T101] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 57.023542][ T101] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 57.032433][ T101] Call Trace:
[ 57.036105][ T101]
[ 57.039246][ T101] __kasan_slab_alloc+0x69/0xf0
[ 57.044881][ T101] ? do_filp_open+0x1e2/0x410
[ 57.050812][ T101] ? do_sys_openat2+0x15e/0x7f0
[ 57.056785][ T101] ? __x64_sys_openat+0x136/0x160
[ 57.063326][ T101] ? x64_sys_call+0x219/0x9a0
[ 57.068387][ T101] ? do_syscall_64+0x4c/0xa0
[ 57.073024][ T101] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 57.079284][ T101] ? debug_smp_processor_id+0x17/0x20
[ 57.085193][ T101] ? ___slab_alloc+0x749/0x810
[ 57.090187][ T101] ? kernfs_fop_open+0x86b/0xb30
[ 57.096020][ T101] slab_post_alloc_hook+0x4f/0x2b0
[ 57.101195][ T101] kmem_cache_alloc_trace+0xfb/0x270
[ 57.106718][ T101] ? kernfs_fop_open+0x86b/0xb30
[ 57.111886][ T101] kernfs_fop_open+0x86b/0xb30
[ 57.116851][ T101] ? kernfs_fop_mmap+0x400/0x400
[ 57.122196][ T101] do_dentry_open+0x834/0x1010
[ 57.127098][ T101] vfs_open+0x73/0x80
[ 57.131247][ T101] path_openat+0x26a6/0x2f20
[ 57.135877][ T101] ? getname+0x19/0x20
[ 57.140388][ T101] ? do_filp_open+0x410/0x410
[ 57.145300][ T101] do_filp_open+0x1e2/0x410
[ 57.150062][ T101] ? vfs_tmpfile+0x2d0/0x2d0
[ 57.154725][ T101] do_sys_openat2+0x15e/0x7f0
[ 57.160007][ T101] ? blkcg_maybe_throttle_current+0x1e0/0xa10
[ 57.166594][ T101] ? __fput+0x63f/0x8b0
[ 57.170961][ T101] ? do_sys_open+0xe0/0xe0
[ 57.175517][ T101] ? __blkcg_punt_bio_submit+0x170/0x170
[ 57.182056][ T101] ? ____fput+0x15/0x20
[ 57.186303][ T101] __x64_sys_openat+0x136/0x160
[ 57.191342][ T101] x64_sys_call+0x219/0x9a0
[ 57.196309][ T101] do_syscall_64+0x4c/0xa0
[ 57.200929][ T101] ? clear_bhb_loop+0x50/0xa0
[ 57.205838][ T101] ? clear_bhb_loop+0x50/0xa0
[ 57.206149][ T586] EXT4-fs (loop2): Ignoring removed nobh option
[ 57.210596][ T101] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 57.218667][ T586] EXT4-fs (loop2): Ignoring removed bh option
[ 57.223599][ T101] RIP: 0033:0x7f1e4ee31407
[ 57.229976][ T586] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 57.234248][ T101] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff
[ 57.266957][ T101] RSP: 002b:00007ffeccc79400 EFLAGS: 00000202 ORIG_RAX: 0000000000000101
[ 57.275858][ T101] RAX: ffffffffffffffda RBX: 00007f1e4ed43880 RCX: 00007f1e4ee31407
[ 57.284561][ T101] RDX: 0000000000080241 RSI: 00007ffeccc79870 RDI: ffffffffffffff9c
[ 57.293221][ T101] RBP: 0000000000000004 R08: 0000000000000000 R09: 0000000000000000
[ 57.294933][ T586] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 57.301520][ T101] R10: 00000000000001b6 R11: 0000000000000202 R12: 00005651dc118dfc
[ 57.336039][ T101] R13: 00005651dc118dfc R14: 0000000000000001 R15: 00007ffeccc79760
[ 57.344533][ T101]
[ 57.347548][ T461] EXT4-fs error (device loop2): ext4_ext_split:1074: inode #15: comm kworker/u4:4: p_ext > EXT_MAX_EXTENT!
[ 57.347681][ T101] ---[ end trace 6f8a682404432773 ]---
[ 57.360331][ T461] EXT4-fs error (device loop2): mb_free_blocks:1874: group 0, inode 15: block 449:freeing already freed block (bit 28); block bitmap corrupt.
[ 57.365828][ T101] ==================================================================
[ 57.380474][ T461] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 57.388383][ T101] BUG: KASAN: double-free or invalid-free in kfree+0xc4/0x270
[ 57.388410][ T101]
[ 57.388415][ T101] CPU: 0 PID: 101 Comm: udevd Tainted: G B W syzkaller #0
[ 57.401012][ T461] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 57.401012][ T461]
[ 57.408993][ T101] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026
[ 57.409004][ T101] Call Trace:
[ 57.409011][ T101]
[ 57.447726][ T101] __dump_stack+0x21/0x30
[ 57.452346][ T101] dump_stack_lvl+0x110/0x170
[ 57.457289][ T101] ? show_regs_print_info+0x20/0x20
[ 57.462685][ T101] ? load_image+0x3e0/0x3e0
[ 57.467265][ T101] ? locks_remove_file+0x369/0x1010
[ 57.472739][ T101] print_address_description+0x7f/0x2c0
[ 57.478360][ T101] ? kfree+0xc4/0x270
[ 57.482501][ T101] kasan_report_invalid_free+0x58/0x90
[ 57.488040][ T101] ? kfree+0xc4/0x270
[ 57.492093][ T101] ____kasan_slab_free+0x13d/0x160
[ 57.497196][ T101] __kasan_slab_free+0x11/0x20
[ 57.502211][ T101] slab_free_freelist_hook+0xc2/0x190
[ 57.507876][ T101] ? kernfs_put_open_node+0x21e/0x230
[ 57.513773][ T101] kfree+0xc4/0x270
[ 57.517702][ T101] ? kernfs_put_open_node+0x21e/0x230
[ 57.523443][ T101] kernfs_put_open_node+0x21e/0x230
[ 57.528998][ T101] kernfs_fop_release+0x1a2/0x250
[ 57.534463][ T101] ? kernfs_fop_open+0xb30/0xb30
[ 57.539619][ T101] __fput+0x20b/0x8b0
[ 57.543887][ T101] ____fput+0x15/0x20
[ 57.547863][ T101] task_work_run+0x127/0x190
[ 57.552616][ T101] exit_to_user_mode_loop+0xd0/0xe0
[ 57.558025][ T101] exit_to_user_mode_prepare+0x87/0xd0
[ 57.564108][ T101] syscall_exit_to_user_mode+0x1a/0x30
[ 57.569989][ T101] do_syscall_64+0x58/0xa0
[ 57.574762][ T101] ? clear_bhb_loop+0x50/0xa0
[ 57.579613][ T101] ? clear_bhb_loop+0x50/0xa0
[ 57.584457][ T101] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 57.590566][ T101] RIP: 0033:0x7f1e4ee9fa67
[ 57.595208][ T101] Code: 44 00 00 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 01 31 c9 e8 ca 19 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 61 b3 0d 00 f7 d8 64 89 02 b8
[ 57.616077][ T101] RSP: 002b:00007ffeccc79508 EFLAGS: 00000297 ORIG_RAX: 0000000000000003
[ 57.625038][ T101] RAX: 0000000000000000 RBX: 00005651f495df10 RCX: 00007f1e4ee9fa67
[ 57.633853][ T101] RDX: 00007f1e4ef79ea0 RSI: 00005651f4951e00 RDI: 000000000000000c
[ 57.642010][ T101] RBP: 00007f1e4ef79ff0 R08: 0000000000000000 R09: 0000000000000000
[ 57.650161][ T101] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000000
[ 57.658367][ T101] R13: 00005651dc133100 R14: 00007ffeccc79870 R15: 00007ffeccc79760
[ 57.667891][ T101]
[ 57.671021][ T101]
[ 57.673713][ T101] Allocated by task 357:
[ 57.678115][ T101] __kasan_kmalloc+0xda/0x110
[ 57.682966][ T101] __kmalloc+0x13d/0x2c0
[ 57.687874][ T101] kobject_get_path+0xbf/0x1f0
[ 57.692728][ T101] kobject_uevent_env+0x28b/0x700
[ 57.698305][ T101] kobject_uevent+0x1d/0x30
[ 57.703174][ T101] net_rx_queue_update_kobjects+0x21d/0x480
[ 57.709342][ T101] netdev_register_kobject+0x26b/0x360
[ 57.715076][ T101] register_netdevice+0xe85/0x1460
[ 57.720591][ T101] veth_newlink+0x8d7/0xe30
[ 57.725387][ T101] rtnl_newlink+0x133a/0x1a30
[ 57.730500][ T101] rtnetlink_rcv_msg+0xa4b/0xce0
[ 57.735687][ T101] netlink_rcv_skb+0x1f5/0x440
[ 57.740713][ T101] rtnetlink_rcv+0x1c/0x20
[ 57.745549][ T101] netlink_unicast+0x876/0xa40
[ 57.750399][ T101] netlink_sendmsg+0x879/0xb80
[ 57.755587][ T101] __sys_sendto+0x46d/0x620
[ 57.760280][ T101] __x64_sys_sendto+0xe5/0x100
[ 57.765319][ T101] x64_sys_call+0x178/0x9a0
[ 57.770035][ T101] do_syscall_64+0x4c/0xa0
[ 57.774721][ T101] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 57.780865][ T101]
[ 57.783412][ T101] Freed by task 357:
[ 57.787658][ T101] kasan_set_track+0x4a/0x70
[ 57.792438][ T101] kasan_set_free_info+0x23/0x40
[ 57.797611][ T101] ____kasan_slab_free+0x125/0x160
[ 57.803445][ T101] __kasan_slab_free+0x11/0x20
[ 57.808449][ T101] slab_free_freelist_hook+0xc2/0x190
[ 57.814295][ T101] kfree+0xc4/0x270
[ 57.818391][ T101] kobject_uevent_env+0x344/0x700
[ 57.823721][ T101] kobject_uevent+0x1d/0x30
[ 57.828323][ T101] net_rx_queue_update_kobjects+0x21d/0x480
[ 57.834713][ T101] netdev_register_kobject+0x26b/0x360
[ 57.840464][ T101] register_netdevice+0xe85/0x1460
[ 57.845722][ T101] veth_newlink+0x8d7/0xe30
[ 57.850225][ T101] rtnl_newlink+0x133a/0x1a30
[ 57.854900][ T101] rtnetlink_rcv_msg+0xa4b/0xce0
[ 57.859940][ T101] netlink_rcv_skb+0x1f5/0x440
[ 57.864786][ T101] rtnetlink_rcv+0x1c/0x20
[ 57.869378][ T101] netlink_unicast+0x876/0xa40
[ 57.874496][ T101] netlink_sendmsg+0x879/0xb80
[ 57.879535][ T101] __sys_sendto+0x46d/0x620
[ 57.884306][ T101] __x64_sys_sendto+0xe5/0x100
[ 57.889068][ T101] x64_sys_call+0x178/0x9a0
[ 57.893740][ T101] do_syscall_64+0x4c/0xa0
[ 57.898766][ T101] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 57.905031][ T101]
[ 57.907651][ T101] The buggy address belongs to the object at ffff88810f398000
[ 57.907651][ T101] which belongs to the cache kmalloc-64 of size 64
[ 57.922049][ T101] The buggy address is located 22 bytes to the right of
[ 57.922049][ T101] 64-byte region [ffff88810f398000, ffff88810f398040)
[ 57.936802][ T101] The buggy address belongs to the page:
[ 57.942812][ T101] page:ffffea00043ce600 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x10f398
[ 57.953858][ T101] flags: 0x4000000000000200(slab|zone=1)
[ 57.959788][ T101] raw: 4000000000000200 ffffea0004b81000 0000001d0000001d ffff888100042780
[ 57.969043][ T101] raw: 0000000000000000 0000000000200020 00000001ffffffff 0000000000000000
[ 57.977789][ T101] page dumped because: kasan: bad access detected
[ 57.984207][ T101] page_owner tracks the page as allocated
[ 57.990173][ T101] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY), pid 102, ts 5389195408, free_ts 5389167926
[ 58.006151][ T101] post_alloc_hook+0x192/0x1b0
[ 58.011010][ T101] prep_new_page+0x1c/0x110
[ 58.015520][ T101] get_page_from_freelist+0x2d3a/0x2dc0
[ 58.021217][ T101] __alloc_pages+0x1a2/0x460
[ 58.026515][ T101] new_slab+0xa1/0x4d0
[ 58.030779][ T101] ___slab_alloc+0x381/0x810
[ 58.035686][ T101] __slab_alloc+0x49/0x90
[ 58.040218][ T101] kmem_cache_alloc_trace+0x146/0x270
[ 58.046024][ T101] kernfs_fop_open+0x86b/0xb30
[ 58.051409][ T101] do_dentry_open+0x834/0x1010
[ 58.056581][ T101] vfs_open+0x73/0x80
[ 58.060846][ T101] path_openat+0x26a6/0x2f20
[ 58.065868][ T101] do_filp_open+0x1e2/0x410
[ 58.070578][ T101] do_sys_openat2+0x15e/0x7f0
[ 58.075512][ T101] __x64_sys_openat+0x136/0x160
[ 58.080446][ T101] x64_sys_call+0x219/0x9a0
[ 58.084944][ T101] page last free stack trace:
[ 58.089695][ T101] free_unref_page_prepare+0x542/0x550
[ 58.095339][ T101] free_unref_page+0xae/0x540
[ 58.100271][ T101] __free_pages+0x6c/0x100
[ 58.104765][ T101] free_pages+0x82/0x90
[ 58.109088][ T101] selinux_genfs_get_sid+0x20b/0x250
[ 58.114465][ T101] inode_doinit_with_dentry+0x87a/0xd80
[ 58.120323][ T101] selinux_d_instantiate+0x27/0x40
[ 58.125553][ T101] security_d_instantiate+0x9e/0xf0
[ 58.130750][ T101] d_splice_alias+0x6d/0x390
[ 58.135334][ T101] kernfs_iop_lookup+0x2c2/0x310
[ 58.140354][ T101] path_openat+0xfc9/0x2f20
[ 58.144942][ T101] do_filp_open+0x1e2/0x410
[ 58.149538][ T101] do_sys_openat2+0x15e/0x7f0
[ 58.154215][ T101] __x64_sys_openat+0x136/0x160
[ 58.159413][ T101] x64_sys_call+0x219/0x9a0
[ 58.164365][ T101] do_syscall_64+0x4c/0xa0
[ 58.168895][ T101]
[ 58.171213][ T101] Memory state around the buggy address:
[ 58.177107][ T101] ffff88810f397f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 58.185629][ T101] ffff88810f397f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc
[ 58.193859][ T101] >ffff88810f398000: fa fb fb fb fb fb fb fb fc fc fb fc fc fc fc fc
[ 58.202085][ T101] ^
[ 58.208935][ T101] ffff88810f398080: fa fc fc fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 58.217339][ T101] ffff88810f398100: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc
[ 58.225588][ T101] ==================================================================
[ 58.306650][ T590] EXT4-fs (loop2): Ignoring removed nobh option
[ 58.313286][ T590] EXT4-fs (loop2): Ignoring removed bh option
[ 58.319645][ T590] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
2026/04/04 17:46:17 executed programs: 35
[ 58.343526][ T590] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 58.379317][ T466] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117
[ 58.392991][ T466] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 58.392991][ T466]
[ 58.537727][ T595] EXT4-fs (loop2): Ignoring removed nobh option
[ 58.544450][ T595] EXT4-fs (loop2): Ignoring removed bh option
[ 58.550818][ T595] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 58.573303][ T595] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 58.688596][ T599] EXT4-fs (loop2): Ignoring removed nobh option
[ 58.695341][ T599] EXT4-fs (loop2): Ignoring removed bh option
[ 58.702254][ T599] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE
[ 58.723250][ T599] EXT4-fs (loop2): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,acl,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: none.
[ 58.761197][ T45] EXT4-fs error (device loop2): ext4_ext_split:1074: inode #15: comm kworker/u4:2: p_ext > EXT_MAX_EXTENT!
[ 58.773593][ T45] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 84 with max blocks 2 with error 117