Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. 2025/02/22 08:06:55 ignoring optional flag "sandboxArg"="0" 2025/02/22 08:06:55 ignoring optional flag "type"="gce" 2025/02/22 08:06:55 parsed 1 programs [ 81.507091][ T7] cfg80211: failed to load regulatory.db 2025/02/22 08:06:58 executed programs: 0 [ 82.859435][ T4427] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 83.013381][ T4473] chnl_net:caif_netlink_parms(): no params data found [ 83.058798][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.065998][ T4473] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.073879][ T4473] device bridge_slave_0 entered promiscuous mode [ 83.082144][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.089327][ T4473] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.097637][ T4473] device bridge_slave_1 entered promiscuous mode [ 83.119166][ T4473] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.131584][ T4473] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.155982][ T4473] team0: Port device team_slave_0 added [ 83.163200][ T4473] team0: Port device team_slave_1 added [ 83.182071][ T4473] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.189137][ T4473] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.215259][ T4473] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.227189][ T4473] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.234340][ T4473] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.260591][ T4473] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.291885][ T4473] device hsr_slave_0 entered promiscuous mode [ 83.298728][ T4473] device hsr_slave_1 entered promiscuous mode [ 83.801545][ T4473] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.811517][ T4473] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.822943][ T4473] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.833114][ T4473] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 83.859697][ T4473] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.866838][ T4473] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.874320][ T4473] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.881505][ T4473] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.943471][ T4473] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.960126][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.970829][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.979798][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.990238][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 84.007030][ T4473] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.021449][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 84.031451][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 84.042117][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.049258][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.064601][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 84.084993][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 84.093777][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.100954][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.122555][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.132181][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.142264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.155371][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.164064][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.173243][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.183895][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.197400][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.207737][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.221154][ T4473] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.236451][ T4473] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 84.245794][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.255685][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.370624][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 84.380124][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 84.394031][ T4473] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.419277][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 84.428297][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 84.452444][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 84.464414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 84.476067][ T4473] device veth0_vlan entered promiscuous mode [ 84.488058][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 84.496991][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 84.508523][ T4473] device veth1_vlan entered promiscuous mode [ 84.535941][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 84.546326][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 84.555575][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 84.565035][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 84.577098][ T4473] device veth0_macvtap entered promiscuous mode [ 84.590771][ T4473] device veth1_macvtap entered promiscuous mode [ 84.610122][ T4473] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.619799][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 84.630110][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 84.640542][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 84.650147][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 84.665219][ T4473] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.672659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 84.682735][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 84.696462][ T4473] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.707968][ T4473] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.718693][ T4473] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.727822][ T4473] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.818080][ T1231] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.841702][ T1231] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.862315][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 84.879604][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.890553][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.902724][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 84.956769][ T7] Bluetooth: hci0: command 0x0409 tx timeout [ 84.981375][ T4566] loop0: detected capacity change from 0 to 512 [ 85.020178][ T4566] EXT4-fs (loop0): 1 orphan inode deleted [ 85.026225][ T4566] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,dioread_lock,grpquota,noauto_da_alloc,resgid=0x0000000000000000,barrier,init_itable=0x000000000000c202,usrquota,. Quota mode: writeback. [ 85.049848][ T4566] ext4 filesystem being mounted at /root/syzkaller-testdir4223087627/syzkaller.C3PH7W/0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.076250][ T26] audit: type=1800 audit(1740211620.339:2): pid=4566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=16 res=0 errno=0 [ 85.125974][ T26] audit: type=1800 audit(1740211620.339:3): pid=4566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=16 res=0 errno=0 [ 85.149275][ T4565] EXT4-fs error (device loop0): ext4_map_blocks:738: inode #16: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 85.167387][ T4565] EXT4-fs (loop0): Remounting filesystem read-only [ 85.174634][ T4565] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 85.189849][ T4565] EXT4-fs (loop0): Remounting filesystem read-only [ 85.199667][ T4565] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 85.216062][ T4565] EXT4-fs (loop0): Remounting filesystem read-only [ 85.222793][ T4565] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 85.240083][ T4565] EXT4-fs (loop0): Remounting filesystem read-only [ 85.247490][ T4565] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 85.263975][ T4565] EXT4-fs (loop0): Remounting filesystem read-only [ 85.273086][ T4565] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 85.289918][ T4565] EXT4-fs (loop0): Remounting filesystem read-only [ 85.296885][ T4565] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 85.313044][ T4565] EXT4-fs (loop0): Remounting filesystem read-only [ 85.320230][ T4565] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 85.336840][ T4565] EXT4-fs (loop0): Remounting filesystem read-only [ 85.343672][ T4565] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 85.364706][ T4565] EXT4-fs (loop0): Remounting filesystem read-only [ 85.371348][ T4565] EXT4-fs error (device loop0): ext4_map_blocks:628: inode #16: block 3: comm syz-executor.0: lblock 3 mapped to illegal pblock 3 (length 1) [ 85.388283][ T4565] EXT4-fs (loop0): Remounting filesystem read-only [ 85.563694][ T4596] loop0: detected capacity change from 0 to 512 [ 85.603288][ T4596] EXT4-fs (loop0): 1 orphan inode deleted [ 85.609747][ T4596] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,sysvgroups,dioread_lock,grpquota,noauto_da_alloc,resgid=0x0000000000000000,barrier,init_itable=0x000000000000c202,usrquota,. Quota mode: writeback. [ 85.634416][ T4596] ext4 filesystem being mounted at /root/syzkaller-testdir4223087627/syzkaller.C3PH7W/1/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 85.656173][ T26] audit: type=1800 audit(1740211620.919:4): pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=16 res=0 errno=0 [ 85.695707][ T26] audit: type=1800 audit(1740211620.939:5): pid=4596 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="bus" dev="loop0" ino=16 res=0 errno=0 [ 85.720927][ T4595] ================================================================== [ 85.729329][ T4595] BUG: KASAN: use-after-free in ext4_find_extent+0xbe7/0xe20 [ 85.736929][ T4595] Read of size 4 at addr ffff88807031cac0 by task syz-executor.0/4595 [ 85.745102][ T4595] [ 85.747456][ T4595] CPU: 0 PID: 4595 Comm: syz-executor.0 Not tainted 5.15.178-syzkaller #0 [ 85.755988][ T4595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 85.766077][ T4595] Call Trace: [ 85.769380][ T4595] [ 85.772332][ T4595] dump_stack_lvl+0x1e3/0x2d0 [ 85.777068][ T4595] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 85.782725][ T4595] ? _printk+0xd1/0x120 [ 85.786923][ T4595] ? __wake_up_klogd+0xcc/0x100 [ 85.791877][ T4595] ? panic+0x860/0x860 [ 85.796021][ T4595] ? _raw_spin_lock_irqsave+0xdd/0x120 [ 85.801520][ T4595] print_address_description+0x63/0x3b0 [ 85.807142][ T4595] ? ext4_find_extent+0xbe7/0xe20 [ 85.812199][ T4595] kasan_report+0x16b/0x1c0 [ 85.816822][ T4595] ? ext4_find_extent+0xbe7/0xe20 [ 85.821885][ T4595] ext4_find_extent+0xbe7/0xe20 [ 85.826829][ T4595] ext4_ext_map_blocks+0x2da/0x7630 [ 85.832071][ T4595] ? mark_lock+0x98/0x340 [ 85.836537][ T4595] ? __lock_acquire+0x1295/0x1ff0 [ 85.841599][ T4595] ? ext4_ext_release+0x10/0x10 [ 85.846510][ T4595] ? ext4_es_lookup_extent+0x621/0xa40 [ 85.852019][ T4595] ext4_map_blocks+0xa66/0x1c70 [ 85.856922][ T4595] ? ext4_issue_zeroout+0x250/0x250 [ 85.862158][ T4595] ? create_page_buffers+0x1d4/0x330 [ 85.867473][ T4595] _ext4_get_block+0x23b/0x660 [ 85.872262][ T4595] ? ext4_get_block+0x40/0x40 [ 85.876964][ T4595] ? create_page_buffers+0x24b/0x330 [ 85.882281][ T4595] __block_write_begin_int+0x60b/0x1650 [ 85.887885][ T4595] ? ext4_es_is_delayed+0x40/0x40 [ 85.892934][ T4595] ? page_zero_new_buffers+0x510/0x510 [ 85.898424][ T4595] ? __might_sleep+0xc0/0xc0 [ 85.903040][ T4595] ? file_update_time+0x34e/0x460 [ 85.908101][ T4595] ? ext4_journal_check_start+0x17b/0x240 [ 85.913856][ T4595] block_page_mkwrite+0x210/0x280 [ 85.918908][ T4595] ? ext4_es_is_delayed+0x40/0x40 [ 85.923975][ T4595] ext4_page_mkwrite+0x3e9/0x1290 [ 85.929032][ T4595] ? ext4_es_is_delayed+0x40/0x40 [ 85.934087][ T4595] ? wp_page_shared+0x171/0x690 [ 85.938964][ T4595] ? ext4_change_inode_journal_flag+0x6e0/0x6e0 [ 85.945252][ T4595] ? do_raw_spin_lock+0x14a/0x370 [ 85.950310][ T4595] do_page_mkwrite+0x1a9/0x440 [ 85.955112][ T4595] wp_page_shared+0x179/0x690 [ 85.959910][ T4595] handle_mm_fault+0x2a3d/0x5960 [ 85.964908][ T4595] ? numa_migrate_prep+0x1a0/0x1a0 [ 85.970179][ T4595] ? vmacache_find+0x23c/0x590 [ 85.974983][ T4595] exc_page_fault+0x271/0x700 [ 85.979699][ T4595] asm_exc_page_fault+0x22/0x30 [ 85.984582][ T4595] RIP: 0033:0x7fc8d1a3ccc7 [ 85.989018][ T4595] Code: ce 48 ff c7 48 01 fe 48 8d 54 11 80 0f 1f 80 00 00 00 00 c5 fe 6f 0e c5 fe 6f 56 20 c5 fe 6f 5e 40 c5 fe 6f 66 60 48 83 ee 80 fd 7f 0f c5 fd 7f 57 20 c5 fd 7f 5f 40 c5 fd 7f 67 60 48 83 ef [ 86.008650][ T4595] RSP: 002b:00007ffe3cac8688 EFLAGS: 00010203 [ 86.014750][ T4595] RAX: 0000000020003600 RBX: 00007ffe3cac8798 RCX: 0000000020003600 [ 86.022749][ T4595] RDX: 00000000200036a9 RSI: 00007fc8d15ff7b0 RDI: 0000000020003620 [ 86.030748][ T4595] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007fc8d1b7af8c [ 86.038751][ T4595] R10: 00007ffe3cac87c0 R11: 0000000000000246 R12: 00007fc8d15ff6f0 [ 86.046759][ T4595] R13: fffffffffffffffe R14: 00007fc8d15df000 R15: 00007fc8d15ff6f8 [ 86.054808][ T4595] [ 86.057845][ T4595] [ 86.060179][ T4595] The buggy address belongs to the page: [ 86.065827][ T4595] page:ffffea0001c0c700 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x7031c [ 86.076011][ T4595] memcg:ffff88801768c000 [ 86.080270][ T4595] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 86.087511][ T4595] raw: 00fff00000000000 ffffea0001c0ea48 ffffea0001c0e908 0000000000000000 [ 86.096130][ T4595] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 86.104731][ T4595] page dumped because: kasan: bad access detected [ 86.111167][ T4595] page_owner tracks the page as freed [ 86.116555][ T4595] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 4622, ts 86071251271, free_ts 86076663626 [ 86.132124][ T4595] get_page_from_freelist+0x3b78/0x3d40 [ 86.137701][ T4595] __alloc_pages+0x272/0x700 [ 86.142389][ T4595] alloc_pages_vma+0x39a/0x800 [ 86.147178][ T4595] wp_page_copy+0x221/0x2070 [ 86.151796][ T4595] handle_mm_fault+0x2a3d/0x5960 [ 86.156763][ T4595] exc_page_fault+0x271/0x700 [ 86.161458][ T4595] asm_exc_page_fault+0x22/0x30 [ 86.166334][ T4595] page last free stack trace: [ 86.171022][ T4595] free_unref_page_prepare+0xc34/0xcf0 [ 86.176593][ T4595] free_unref_page_list+0x1f7/0x8e0 [ 86.181812][ T4595] release_pages+0x1bb9/0x1f40 [ 86.186736][ T4595] tlb_finish_mmu+0x177/0x320 [ 86.191432][ T4595] exit_mmap+0x3cd/0x620 [ 86.195769][ T4595] __mmput+0x112/0x3b0 [ 86.199860][ T4595] exit_mm+0x688/0x7f0 [ 86.203953][ T4595] do_exit+0x626/0x2480 [ 86.208132][ T4595] do_group_exit+0x144/0x310 [ 86.212867][ T4595] __x64_sys_exit_group+0x3b/0x40 [ 86.217923][ T4595] do_syscall_64+0x3b/0xb0 [ 86.222451][ T4595] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.228375][ T4595] [ 86.230712][ T4595] Memory state around the buggy address: [ 86.236356][ T4595] ffff88807031c980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 86.244523][ T4595] ffff88807031ca00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 86.252695][ T4595] >ffff88807031ca80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 86.260770][ T4595] ^ [ 86.267028][ T4595] ffff88807031cb00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 86.275205][ T4595] ffff88807031cb80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 86.283280][ T4595] ================================================================== [ 86.291354][ T4595] Disabling lock debugging due to kernel taint [ 86.324215][ T4595] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 86.331567][ T4595] CPU: 0 PID: 4595 Comm: syz-executor.0 Tainted: G B 5.15.178-syzkaller #0 [ 86.341500][ T4595] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 86.351749][ T4595] Call Trace: [ 86.355085][ T4595] [ 86.358031][ T4595] dump_stack_lvl+0x1e3/0x2d0 [ 86.362728][ T4595] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 86.368396][ T4595] ? panic+0x860/0x860 [ 86.372489][ T4595] ? preempt_schedule_common+0xa6/0xd0 [ 86.377980][ T4595] ? preempt_schedule+0xd9/0xe0 [ 86.382852][ T4595] panic+0x318/0x860 [ 86.386753][ T4595] ? check_panic_on_warn+0x1d/0xa0 [ 86.391877][ T4595] ? fb_is_primary_device+0xd0/0xd0 [ 86.397071][ T4595] ? _raw_spin_unlock_irqrestore+0x128/0x130 [ 86.403064][ T4595] ? _raw_spin_unlock+0x40/0x40 [ 86.407932][ T4595] check_panic_on_warn+0x7e/0xa0 [ 86.412866][ T4595] ? ext4_find_extent+0xbe7/0xe20 [ 86.417898][ T4595] end_report+0x6d/0xf0 [ 86.422046][ T4595] kasan_report+0x18e/0x1c0 [ 86.426538][ T4595] ? ext4_find_extent+0xbe7/0xe20 [ 86.431664][ T4595] ext4_find_extent+0xbe7/0xe20 [ 86.436527][ T4595] ext4_ext_map_blocks+0x2da/0x7630 [ 86.441756][ T4595] ? mark_lock+0x98/0x340 [ 86.446108][ T4595] ? __lock_acquire+0x1295/0x1ff0 [ 86.451143][ T4595] ? ext4_ext_release+0x10/0x10 [ 86.455991][ T4595] ? ext4_es_lookup_extent+0x621/0xa40 [ 86.461461][ T4595] ext4_map_blocks+0xa66/0x1c70 [ 86.466308][ T4595] ? ext4_issue_zeroout+0x250/0x250 [ 86.471530][ T4595] ? create_page_buffers+0x1d4/0x330 [ 86.476827][ T4595] _ext4_get_block+0x23b/0x660 [ 86.481584][ T4595] ? ext4_get_block+0x40/0x40 [ 86.486270][ T4595] ? create_page_buffers+0x24b/0x330 [ 86.491545][ T4595] __block_write_begin_int+0x60b/0x1650 [ 86.497106][ T4595] ? ext4_es_is_delayed+0x40/0x40 [ 86.502228][ T4595] ? page_zero_new_buffers+0x510/0x510 [ 86.507689][ T4595] ? __might_sleep+0xc0/0xc0 [ 86.512270][ T4595] ? file_update_time+0x34e/0x460 [ 86.517286][ T4595] ? ext4_journal_check_start+0x17b/0x240 [ 86.523005][ T4595] block_page_mkwrite+0x210/0x280 [ 86.528044][ T4595] ? ext4_es_is_delayed+0x40/0x40 [ 86.533068][ T4595] ext4_page_mkwrite+0x3e9/0x1290 [ 86.538089][ T4595] ? ext4_es_is_delayed+0x40/0x40 [ 86.543120][ T4595] ? wp_page_shared+0x171/0x690 [ 86.548052][ T4595] ? ext4_change_inode_journal_flag+0x6e0/0x6e0 [ 86.554467][ T4595] ? do_raw_spin_lock+0x14a/0x370 [ 86.559500][ T4595] do_page_mkwrite+0x1a9/0x440 [ 86.564261][ T4595] wp_page_shared+0x179/0x690 [ 86.568949][ T4595] handle_mm_fault+0x2a3d/0x5960 [ 86.573888][ T4595] ? numa_migrate_prep+0x1a0/0x1a0 [ 86.579083][ T4595] ? vmacache_find+0x23c/0x590 [ 86.583837][ T4595] exc_page_fault+0x271/0x700 [ 86.588511][ T4595] asm_exc_page_fault+0x22/0x30 [ 86.593356][ T4595] RIP: 0033:0x7fc8d1a3ccc7 [ 86.597759][ T4595] Code: ce 48 ff c7 48 01 fe 48 8d 54 11 80 0f 1f 80 00 00 00 00 c5 fe 6f 0e c5 fe 6f 56 20 c5 fe 6f 5e 40 c5 fe 6f 66 60 48 83 ee 80 fd 7f 0f c5 fd 7f 57 20 c5 fd 7f 5f 40 c5 fd 7f 67 60 48 83 ef [ 86.617397][ T4595] RSP: 002b:00007ffe3cac8688 EFLAGS: 00010203 [ 86.623457][ T4595] RAX: 0000000020003600 RBX: 00007ffe3cac8798 RCX: 0000000020003600 [ 86.631511][ T4595] RDX: 00000000200036a9 RSI: 00007fc8d15ff7b0 RDI: 0000000020003620 [ 86.639478][ T4595] RBP: 0000000000000001 R08: 0000000000000000 R09: 00007fc8d1b7af8c [ 86.647443][ T4595] R10: 00007ffe3cac87c0 R11: 0000000000000246 R12: 00007fc8d15ff6f0 [ 86.655753][ T4595] R13: fffffffffffffffe R14: 00007fc8d15df000 R15: 00007fc8d15ff6f8 [ 86.664001][ T4595] [ 86.667253][ T4595] Kernel Offset: disabled [ 86.671579][ T4595] Rebooting in 86400 seconds..