Warning: Permanently added '10.128.1.208' (ED25519) to the list of known hosts.
2026/02/01 13:20:54 parsed 1 programs
[ 90.084817][ T4602] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS
[ 91.493590][ T3088] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.501872][ T3088] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.513056][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
[ 91.524155][ T3088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 91.532499][ T3088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 91.543365][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 92.939748][ T4658] chnl_net:caif_netlink_parms(): no params data found
[ 92.994496][ T4658] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.001768][ T4658] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.010009][ T4658] device bridge_slave_0 entered promiscuous mode
[ 93.018557][ T4658] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.025947][ T4658] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.033552][ T4658] device bridge_slave_1 entered promiscuous mode
[ 93.053498][ T4658] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 93.066161][ T4658] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 93.092826][ T4658] team0: Port device team_slave_0 added
[ 93.104404][ T4658] team0: Port device team_slave_1 added
[ 93.205475][ T4658] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 93.212502][ T4658] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 93.238989][ T4658] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 93.251603][ T4658] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 93.259355][ T4658] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 93.289916][ T4658] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 93.331643][ T4658] device hsr_slave_0 entered promiscuous mode
[ 93.339128][ T4658] device hsr_slave_1 entered promiscuous mode
[ 93.780502][ T4658] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 93.816939][ T4658] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 93.827395][ T4658] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 93.839004][ T4658] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 93.863446][ T4658] bridge0: port 2(bridge_slave_1) entered blocking state
[ 93.870587][ T4658] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 93.878241][ T4658] bridge0: port 1(bridge_slave_0) entered blocking state
[ 93.885421][ T4658] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 93.922168][ T9] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.932530][ T9] bridge0: port 2(bridge_slave_1) entered disabled state
[ 94.012642][ T4658] 8021q: adding VLAN 0 to HW filter on device bond0
[ 94.027670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 94.037200][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 94.052718][ T4658] 8021q: adding VLAN 0 to HW filter on device team0
[ 94.085339][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 94.094750][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 94.103474][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 94.110607][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 94.121584][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 94.131583][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 94.142273][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 94.149514][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 94.189390][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 94.206451][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 94.215267][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 94.228344][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 94.267431][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 94.277899][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 94.288909][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 94.304116][ T4658] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network
[ 94.318611][ T4658] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 94.331826][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 94.342398][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 94.351460][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 94.362394][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 94.371383][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 94.505163][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 94.514619][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 94.528559][ T4658] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 94.562837][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 94.571949][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 94.591362][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 94.601379][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 94.610740][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 94.618958][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 94.629192][ T4658] device veth0_vlan entered promiscuous mode
[ 94.661497][ T4658] device veth1_vlan entered promiscuous mode
[ 94.685772][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 94.694142][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 94.703208][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 94.713771][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 94.724154][ T4658] device veth0_macvtap entered promiscuous mode
[ 94.773042][ T4658] device veth1_macvtap entered promiscuous mode
[ 94.792196][ T4658] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 94.800033][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 94.808470][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 94.817213][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 94.827939][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 94.839405][ T4658] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 94.850407][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 94.860535][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 94.874056][ T4658] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.883535][ T4658] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.894372][ T4658] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 94.903968][ T4658] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
2026/02/01 13:21:03 executed programs: 0
[ 96.584644][ T4805] chnl_net:caif_netlink_parms(): no params data found
[ 96.674988][ T4805] bridge0: port 1(bridge_slave_0) entered blocking state
[ 96.682315][ T4805] bridge0: port 1(bridge_slave_0) entered disabled state
[ 96.692805][ T4805] device bridge_slave_0 entered promiscuous mode
[ 96.711052][ T155] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 96.725152][ T4805] bridge0: port 2(bridge_slave_1) entered blocking state
[ 96.732828][ T4805] bridge0: port 2(bridge_slave_1) entered disabled state
[ 96.742010][ T4805] device bridge_slave_1 entered promiscuous mode
[ 96.768858][ T4805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 96.782321][ T4805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 96.812702][ T4805] team0: Port device team_slave_0 added
[ 96.820728][ T4805] team0: Port device team_slave_1 added
[ 96.845030][ T4805] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 96.854709][ T4805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.884146][ T4805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 96.897160][ T4805] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 96.904118][ T4805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 96.932990][ T4805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 96.970743][ T4805] device hsr_slave_0 entered promiscuous mode
[ 96.980053][ T4805] device hsr_slave_1 entered promiscuous mode
[ 96.987341][ T4805] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[ 96.994911][ T4805] Cannot create hsr debugfs directory
[ 98.466528][ T7] Bluetooth: hci0: command 0x0409 tx timeout
[ 99.212544][ T155] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.274407][ T155] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 99.323651][ T155] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 100.164388][ T4805] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 100.174173][ T4805] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 100.184124][ T4805] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 100.200941][ T4805] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 100.245550][ T4805] 8021q: adding VLAN 0 to HW filter on device bond0
[ 100.259660][ T155] device hsr_slave_0 left promiscuous mode
[ 100.266729][ T155] device hsr_slave_1 left promiscuous mode
[ 100.273735][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 100.281947][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 100.289882][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 100.297871][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 100.305719][ T155] device bridge_slave_1 left promiscuous mode
[ 100.312559][ T155] bridge0: port 2(bridge_slave_1) entered disabled state
[ 100.321351][ T155] device bridge_slave_0 left promiscuous mode
[ 100.328060][ T155] bridge0: port 1(bridge_slave_0) entered disabled state
[ 100.339413][ T155] device veth1_macvtap left promiscuous mode
[ 100.346864][ T155] device veth0_macvtap left promiscuous mode
[ 100.352906][ T155] device veth1_vlan left promiscuous mode
[ 100.358803][ T155] device veth0_vlan left promiscuous mode
[ 100.471267][ T155] team0 (unregistering): Port device team_slave_1 removed
[ 100.482548][ T155] team0 (unregistering): Port device team_slave_0 removed
[ 100.498776][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 100.511081][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 100.546009][ T4251] Bluetooth: hci0: command 0x041b tx timeout
[ 100.557502][ T155] bond0 (unregistering): Released all slaves
[ 100.624566][ T4805] 8021q: adding VLAN 0 to HW filter on device team0
[ 100.632167][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 100.640656][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 100.652507][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 100.661426][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 100.669875][ T9] bridge0: port 1(bridge_slave_0) entered blocking state
[ 100.677176][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 100.686517][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 100.696096][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 100.705500][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 100.714121][ T144] bridge0: port 2(bridge_slave_1) entered blocking state
[ 100.721232][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 100.744779][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready
[ 100.753856][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready
[ 100.762625][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready
[ 100.772858][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready
[ 100.782125][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready
[ 100.791273][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready
[ 100.800235][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready
[ 100.811378][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 100.819939][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 100.832863][ T4805] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network
[ 100.853688][ T4805] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready
[ 100.862289][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 100.870954][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 100.953193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready
[ 100.960796][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready
[ 100.972832][ T4805] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 100.990507][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 100.999527][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 101.016922][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 101.025475][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 101.034524][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 101.042575][ T3088] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 101.052763][ T4805] device veth0_vlan entered promiscuous mode
[ 101.064958][ T4805] device veth1_vlan entered promiscuous mode
[ 101.087715][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready
[ 101.097259][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready
[ 101.105513][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 101.114731][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 101.125729][ T4805] device veth0_macvtap entered promiscuous mode
[ 101.136696][ T4805] device veth1_macvtap entered promiscuous mode
[ 101.155804][ T4805] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 101.163220][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready
[ 101.172727][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 101.181279][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 101.190414][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 101.205260][ T4805] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 101.213765][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 101.223337][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 101.236018][ T4805] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.244913][ T4805] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.254672][ T4805] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.264147][ T4805] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 101.332329][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.344805][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.365065][ T3088] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 101.367148][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready
2026/02/01 13:21:08 executed programs: 2
[ 101.380866][ T3088] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 101.390658][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready
[ 101.437088][ T5077] loop0: detected capacity change from 0 to 512
[ 101.507219][ T5077] EXT4-fs (loop0): 1 orphan inode deleted
[ 101.512998][ T5077] EXT4-fs (loop0): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback.
[ 101.536464][ T5077] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 101.641009][ T4805] EXT4-fs error (device loop0): ext4_map_blocks:629: inode #2: block 3: comm syz-executor: lblock 0 mapped to illegal pblock 3 (length 1)
[ 101.671178][ T4805] EXT4-fs error (device loop0): __ext4_get_inode_loc:4327: comm syz-executor: Invalid inode table block 0 in block_group 0
[ 101.688947][ T4805] EXT4-fs error (device loop0) in ext4_reserve_inode_write:5854: Corrupt filesystem
[ 101.699206][ T4805] EXT4-fs error (device loop0): ext4_dirty_inode:6058: inode #2: comm syz-executor: mark_inode_dirty error
[ 101.718320][ T3088] ==================================================================
[ 101.726665][ T3088] BUG: KASAN: use-after-free in ext4_find_extent+0xbcc/0xe00
[ 101.734498][ T3088] Read of size 4 at addr ffff88806de87b2c by task kworker/u4:5/3088
[ 101.742474][ T3088]
[ 101.744815][ T3088] CPU: 1 PID: 3088 Comm: kworker/u4:5 Not tainted syzkaller #0
[ 101.752632][ T3088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 101.762769][ T3088] Workqueue: writeback wb_workfn (flush-7:0)
[ 101.768893][ T3088] Call Trace:
[ 101.772176][ T3088]
[ 101.775191][ T3088] dump_stack_lvl+0x188/0x250
[ 101.780003][ T3088] ? show_regs_print_info+0x20/0x20
[ 101.785292][ T3088] ? _printk+0xda/0x130
[ 101.789452][ T3088] ? load_image+0x400/0x400
[ 101.794052][ T3088] ? _raw_spin_lock_irqsave+0xbc/0x100
[ 101.799603][ T3088] print_address_description+0x60/0x2d0
[ 101.805157][ T3088] ? ext4_find_extent+0xbcc/0xe00
[ 101.810179][ T3088] kasan_report+0xdf/0x130
[ 101.814937][ T3088] ? ext4_find_extent+0xbcc/0xe00
[ 101.820050][ T3088] ext4_find_extent+0xbcc/0xe00
[ 101.824915][ T3088] ext4_ext_map_blocks+0x281/0x6580
[ 101.830153][ T3088] ? ext4_ext_release+0x10/0x10
[ 101.835217][ T3088] ? rwsem_write_trylock+0x135/0x1c0
[ 101.840517][ T3088] ? ext4_es_lookup_extent+0x60a/0xa00
[ 101.846070][ T3088] ext4_map_blocks+0x98e/0x1b30
[ 101.851019][ T3088] ? ext4_issue_zeroout+0x250/0x250
[ 101.856228][ T3088] ? ext4_inode_journal_mode+0x18f/0x460
[ 101.862030][ T3088] ext4_writepages+0x135b/0x2df0
[ 101.867087][ T3088] ? mark_lock+0x94/0x320
[ 101.871416][ T3088] ? ext4_readpage+0x2e0/0x2e0
[ 101.876184][ T3088] ? verify_lock_unused+0x140/0x140
[ 101.881411][ T3088] ? writeback_sb_inodes+0x418/0x1680
[ 101.886797][ T3088] ? ext4_readpage+0x2e0/0x2e0
[ 101.891774][ T3088] do_writepages+0x476/0x6e0
[ 101.896552][ T3088] ? __writepage+0x130/0x130
[ 101.901317][ T3088] ? writeback_sb_inodes+0x67d/0x1680
[ 101.906777][ T3088] ? __lock_acquire+0x7d10/0x7d10
[ 101.912067][ T3088] ? do_raw_spin_lock+0x128/0x2f0
[ 101.917179][ T3088] __writeback_single_inode+0x153/0xda0
[ 101.922728][ T3088] writeback_sb_inodes+0xa4e/0x1680
[ 101.928037][ T3088] ? queue_io+0x550/0x550
[ 101.932391][ T3088] ? rcu_is_watching+0x11/0xa0
[ 101.937254][ T3088] wb_writeback+0x45d/0xbe0
[ 101.941861][ T3088] ? rcu_lock_release+0x20/0x20
[ 101.946713][ T3088] ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 101.952706][ T3088] ? mark_lock+0x94/0x320
[ 101.957027][ T3088] ? _raw_spin_unlock_irq+0x1f/0x40
[ 101.962316][ T3088] wb_workfn+0x43a/0xf20
[ 101.966580][ T3088] ? inode_wait_for_writeback+0x220/0x220
[ 101.972308][ T3088] ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 101.978288][ T3088] ? read_lock_is_recursive+0x10/0x10
[ 101.983657][ T3088] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 101.989545][ T3088] ? _raw_spin_unlock+0x40/0x40
[ 101.994484][ T3088] ? _raw_spin_unlock_irq+0x1f/0x40
[ 101.999684][ T3088] process_one_work+0x85f/0x1010
[ 102.004623][ T3088] ? worker_detach_from_pool+0x240/0x240
[ 102.010326][ T3088] ? lockdep_hardirqs_off+0x70/0x100
[ 102.015599][ T3088] ? _raw_spin_lock_irq+0xb7/0xf0
[ 102.020701][ T3088] ? _raw_spin_lock_irqsave+0x100/0x100
[ 102.026509][ T3088] ? wq_worker_running+0x97/0x170
[ 102.031631][ T3088] worker_thread+0xaa6/0x1290
[ 102.036473][ T3088] ? lockdep_hardirqs_on+0x94/0x140
[ 102.041748][ T3088] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 102.047635][ T3088] kthread+0x436/0x520
[ 102.051773][ T3088] ? rcu_lock_release+0x20/0x20
[ 102.056707][ T3088] ? kthread_blkcg+0xd0/0xd0
[ 102.061371][ T3088] ret_from_fork+0x1f/0x30
[ 102.065959][ T3088]
[ 102.069081][ T3088]
[ 102.071386][ T3088] The buggy address belongs to the page:
[ 102.077002][ T3088] page:ffffea0001b7a1c0 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x6de87
[ 102.087314][ T3088] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 102.094583][ T3088] raw: 00fff00000000000 ffffea00016c4748 ffffea0001ad9c48 0000000000000000
[ 102.103544][ T3088] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 102.112304][ T3088] page dumped because: kasan: bad access detected
[ 102.118714][ T3088] page_owner tracks the page as freed
[ 102.124154][ T3088] page last allocated via order 0, migratetype Movable, gfp_mask 0x1100cca(GFP_HIGHUSER_MOVABLE), pid 4947, ts 98328635796, free_ts 98338522798
[ 102.139011][ T3088] get_page_from_freelist+0x1bbd/0x1ca0
[ 102.144638][ T3088] __alloc_pages+0x1ee/0x480
[ 102.149210][ T3088] alloc_pages_vma+0x393/0x7c0
[ 102.154042][ T3088] handle_mm_fault+0x1bd4/0x4410
[ 102.158957][ T3088] do_user_addr_fault+0x489/0xc80
[ 102.163995][ T3088] exc_page_fault+0x60/0x100
[ 102.168567][ T3088] asm_exc_page_fault+0x22/0x30
[ 102.173486][ T3088] page last free stack trace:
[ 102.178151][ T3088] free_unref_page_prepare+0x637/0x6c0
[ 102.183600][ T3088] free_unref_page_list+0x119/0x820
[ 102.188781][ T3088] release_pages+0x186c/0x1be0
[ 102.193738][ T3088] tlb_finish_mmu+0x176/0x300
[ 102.198395][ T3088] exit_mmap+0x3d0/0x640
[ 102.202619][ T3088] __mmput+0x115/0x3b0
[ 102.206676][ T3088] exit_mm+0x588/0x6e0
[ 102.210730][ T3088] do_exit+0x5a9/0x20c0
[ 102.214862][ T3088] do_group_exit+0x12e/0x300
[ 102.219608][ T3088] __x64_sys_exit_group+0x3b/0x40
[ 102.224612][ T3088] do_syscall_64+0x4c/0xa0
[ 102.229096][ T3088] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 102.234982][ T3088]
[ 102.237288][ T3088] Memory state around the buggy address:
[ 102.242983][ T3088] ffff88806de87a00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 102.251222][ T3088] ffff88806de87a80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 102.259262][ T3088] >ffff88806de87b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 102.267395][ T3088] ^
[ 102.272834][ T3088] ffff88806de87b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 102.281159][ T3088] ffff88806de87c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 102.289420][ T3088] ==================================================================
[ 102.297473][ T3088] Disabling lock debugging due to kernel taint
[ 102.314812][ T3088] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 102.322038][ T3088] CPU: 0 PID: 3088 Comm: kworker/u4:5 Tainted: G B syzkaller #0
[ 102.331145][ T3088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 102.341288][ T3088] Workqueue: writeback wb_workfn (flush-7:0)
[ 102.347370][ T3088] Call Trace:
[ 102.350634][ T3088]
[ 102.353544][ T3088] dump_stack_lvl+0x188/0x250
[ 102.358202][ T3088] ? show_regs_print_info+0x20/0x20
[ 102.363501][ T3088] ? load_image+0x400/0x400
[ 102.368208][ T3088] panic+0x2e5/0x810
[ 102.372189][ T3088] ? asm_sysvec_apic_timer_interrupt+0x16/0x20
[ 102.378527][ T3088] ? bpf_jit_dump+0xd0/0xd0
[ 102.383101][ T3088] ? _raw_spin_unlock_irqrestore+0x10d/0x120
[ 102.389329][ T3088] ? _raw_spin_unlock+0x40/0x40
[ 102.394175][ T3088] ? ext4_find_extent+0xbcc/0xe00
[ 102.399191][ T3088] check_panic_on_warn+0x80/0xa0
[ 102.404111][ T3088] ? ext4_find_extent+0xbcc/0xe00
[ 102.409118][ T3088] end_report+0x6d/0xf0
[ 102.413254][ T3088] kasan_report+0x102/0x130
[ 102.417767][ T3088] ? ext4_find_extent+0xbcc/0xe00
[ 102.422768][ T3088] ext4_find_extent+0xbcc/0xe00
[ 102.427729][ T3088] ext4_ext_map_blocks+0x281/0x6580
[ 102.433054][ T3088] ? ext4_ext_release+0x10/0x10
[ 102.437973][ T3088] ? rwsem_write_trylock+0x135/0x1c0
[ 102.443313][ T3088] ? ext4_es_lookup_extent+0x60a/0xa00
[ 102.448766][ T3088] ext4_map_blocks+0x98e/0x1b30
[ 102.453614][ T3088] ? ext4_issue_zeroout+0x250/0x250
[ 102.458886][ T3088] ? ext4_inode_journal_mode+0x18f/0x460
[ 102.464745][ T3088] ext4_writepages+0x135b/0x2df0
[ 102.469853][ T3088] ? mark_lock+0x94/0x320
[ 102.474519][ T3088] ? ext4_readpage+0x2e0/0x2e0
[ 102.479361][ T3088] ? verify_lock_unused+0x140/0x140
[ 102.484752][ T3088] ? writeback_sb_inodes+0x418/0x1680
[ 102.490204][ T3088] ? ext4_readpage+0x2e0/0x2e0
[ 102.495248][ T3088] do_writepages+0x476/0x6e0
[ 102.499918][ T3088] ? __writepage+0x130/0x130
[ 102.504488][ T3088] ? writeback_sb_inodes+0x67d/0x1680
[ 102.510018][ T3088] ? __lock_acquire+0x7d10/0x7d10
[ 102.515027][ T3088] ? do_raw_spin_lock+0x128/0x2f0
[ 102.520124][ T3088] __writeback_single_inode+0x153/0xda0
[ 102.525939][ T3088] writeback_sb_inodes+0xa4e/0x1680
[ 102.531223][ T3088] ? queue_io+0x550/0x550
[ 102.535622][ T3088] ? rcu_is_watching+0x11/0xa0
[ 102.540460][ T3088] wb_writeback+0x45d/0xbe0
[ 102.545041][ T3088] ? rcu_lock_release+0x20/0x20
[ 102.550041][ T3088] ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 102.556095][ T3088] ? mark_lock+0x94/0x320
[ 102.560497][ T3088] ? _raw_spin_unlock_irq+0x1f/0x40
[ 102.565954][ T3088] wb_workfn+0x43a/0xf20
[ 102.570369][ T3088] ? inode_wait_for_writeback+0x220/0x220
[ 102.576159][ T3088] ? lockdep_hardirqs_on_prepare+0x409/0x770
[ 102.582145][ T3088] ? read_lock_is_recursive+0x10/0x10
[ 102.587760][ T3088] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 102.593757][ T3088] ? _raw_spin_unlock+0x40/0x40
[ 102.598680][ T3088] ? _raw_spin_unlock_irq+0x1f/0x40
[ 102.604019][ T3088] process_one_work+0x85f/0x1010
[ 102.608941][ T3088] ? worker_detach_from_pool+0x240/0x240
[ 102.615000][ T3088] ? lockdep_hardirqs_off+0x70/0x100
[ 102.620398][ T3088] ? _raw_spin_lock_irq+0xb7/0xf0
[ 102.625610][ T3088] ? _raw_spin_lock_irqsave+0x100/0x100
[ 102.626485][ T4667] Bluetooth: hci0: command 0x040f tx timeout
[ 102.631238][ T3088] ? wq_worker_running+0x97/0x170
[ 102.642295][ T3088] worker_thread+0xaa6/0x1290
[ 102.646965][ T3088] ? lockdep_hardirqs_on+0x94/0x140
[ 102.652159][ T3088] ? _raw_spin_unlock_irqrestore+0xc1/0x120
[ 102.658141][ T3088] kthread+0x436/0x520
[ 102.662453][ T3088] ? rcu_lock_release+0x20/0x20
[ 102.667390][ T3088] ? kthread_blkcg+0xd0/0xd0
[ 102.671960][ T3088] ret_from_fork+0x1f/0x30
[ 102.676358][ T3088]
[ 102.679959][ T3088] Kernel Offset: disabled
[ 102.684364][ T3088] Rebooting in 86400 seconds..