Warning: Permanently added '10.128.0.90' (ED25519) to the list of known hosts. 1970/01/01 00:01:27 ignoring optional flag "sandboxArg"="0" 1970/01/01 00:01:28 parsed 1 programs [ 90.913030][ T4458] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k SSFS [ 99.914370][ T4496] chnl_net:caif_netlink_parms(): no params data found [ 99.958249][ T4496] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.959393][ T4496] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.962794][ T4496] device bridge_slave_0 entered promiscuous mode [ 99.965704][ T4496] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.966939][ T4496] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.968869][ T4496] device bridge_slave_1 entered promiscuous mode [ 99.986719][ T4496] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.990145][ T4496] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.008509][ T4496] team0: Port device team_slave_0 added [ 100.011787][ T4496] team0: Port device team_slave_1 added [ 100.024825][ T4496] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.025952][ T4496] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.030013][ T4496] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.033985][ T4496] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.035003][ T4496] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.038891][ T4496] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.102487][ T4496] device hsr_slave_0 entered promiscuous mode [ 100.142203][ T4496] device hsr_slave_1 entered promiscuous mode [ 101.020805][ T4496] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.059016][ T4496] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.112817][ T4496] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.155981][ T4496] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.265567][ T4496] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.274496][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 101.276975][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 101.291642][ T4496] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.297695][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 101.299486][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 101.314465][ T623] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.315567][ T623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.327243][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 101.333261][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 101.334926][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 101.336463][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.337415][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.341237][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 101.347270][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 101.352730][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 101.355136][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 101.357064][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 101.364151][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 101.366211][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 101.370943][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 101.372679][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 101.376851][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 101.378559][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 101.385555][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 101.468924][ T4496] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.482277][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 101.483712][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 101.486294][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 101.488107][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 101.503246][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 101.504918][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 101.507225][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 101.508914][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 101.515328][ T4496] device veth0_vlan entered promiscuous mode [ 101.521648][ T4496] device veth1_vlan entered promiscuous mode [ 101.556844][ T4496] device veth0_macvtap entered promiscuous mode [ 101.563138][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 101.564760][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 101.566334][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 101.568193][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 101.572831][ T4496] device veth1_macvtap entered promiscuous mode [ 101.575603][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 101.577391][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 101.587653][ T4496] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.588874][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 101.590608][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 101.597017][ T4496] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.598205][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 101.599839][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 101.608173][ T4496] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.609694][ T4496] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.612285][ T4496] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.613701][ T4496] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.050952][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.052162][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.057373][ T623] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 102.070083][ T623] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.071588][ T623] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.073844][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:42 executed programs: 0 [ 103.081125][ T4677] chnl_net:caif_netlink_parms(): no params data found [ 103.118561][ T4677] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.119780][ T4677] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.125758][ T4677] device bridge_slave_0 entered promiscuous mode [ 103.129024][ T4677] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.130087][ T4677] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.137985][ T4677] device bridge_slave_1 entered promiscuous mode [ 103.156087][ T4677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.159583][ T4677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.178125][ T4677] team0: Port device team_slave_0 added [ 103.181531][ T4677] team0: Port device team_slave_1 added [ 103.194764][ T4677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.195789][ T4677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.199900][ T4677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.203902][ T4677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.204918][ T4677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.208669][ T4677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.292481][ T4677] device hsr_slave_0 entered promiscuous mode [ 103.320777][ T4677] device hsr_slave_1 entered promiscuous mode [ 103.370711][ T4677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.371863][ T4677] Cannot create hsr debugfs directory [ 103.453713][ T4677] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.050541][ T4109] Bluetooth: hci0: command 0x0409 tx timeout [ 107.130729][ T25] Bluetooth: hci0: command 0x041b tx timeout [ 107.217324][ T4677] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.304409][ T4677] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.389825][ T4677] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.558002][ T4677] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 107.603943][ T4677] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 107.652953][ T4677] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 107.718896][ T4677] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 107.838542][ T4677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.844943][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.846775][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.852589][ T4677] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.856383][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.858030][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.859563][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.860703][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.863888][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.868092][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.869838][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.874044][ T136] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.875005][ T136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.898432][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.903322][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.907194][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.909616][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.911907][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.916227][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 107.918110][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 107.922172][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 107.923879][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 107.927996][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 107.929730][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 107.935551][ T4677] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.017641][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.018846][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.024996][ T4677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.036152][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.038136][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.049248][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.051375][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.054224][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.055770][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.059032][ T4677] device veth0_vlan entered promiscuous mode [ 108.065162][ T4677] device veth1_vlan entered promiscuous mode [ 108.082813][ T4677] device veth0_macvtap entered promiscuous mode [ 108.084640][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 108.086431][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 108.088080][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 108.089781][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 108.092139][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 108.129409][ T4677] device veth1_macvtap entered promiscuous mode [ 108.137892][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 108.139446][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.142640][ T4677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 108.144167][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 108.145950][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 108.147770][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 108.151891][ T4677] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 108.153520][ T4677] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.156077][ T4677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.157225][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 108.159001][ T343] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 108.165058][ T4677] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.166365][ T4677] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.167665][ T4677] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.168836][ T4677] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.208597][ T148] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.209840][ T148] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.212377][ T136] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 108.228035][ T136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.229277][ T136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.232764][ T148] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 1970/01/01 00:01:48 executed programs: 2 [ 108.275754][ T4899] loop0: detected capacity change from 0 to 1024 [ 108.277719][ T4899] ======================================================= [ 108.277719][ T4899] WARNING: The mand mount option has been deprecated and [ 108.277719][ T4899] and is ignored by this kernel. Remove the mand [ 108.277719][ T4899] option from the mount to silence this warning. [ 108.277719][ T4899] ======================================================= [ 108.291353][ T4899] EXT4-fs (loop0): Ignoring removed nobh option [ 108.292375][ T4899] EXT4-fs (loop0): Ignoring removed bh option [ 108.294223][ T4899] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.307265][ T4899] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 108.339457][ T148] EXT4-fs error (device loop0): ext4_ext_split:1146: inode #15: comm kworker/u4:2: eh_entries 26982 != eh_max 25964! [ 108.346238][ T148] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 108.348108][ T148] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.348108][ T148] [ 108.440062][ T4904] loop0: detected capacity change from 0 to 1024 [ 108.445150][ T4904] EXT4-fs (loop0): Ignoring removed nobh option [ 108.446015][ T4904] EXT4-fs (loop0): Ignoring removed bh option [ 108.446870][ T4904] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.454882][ T4904] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 108.478778][ T303] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: comm kworker/u4:3: lblock 0 mapped to illegal pblock 0 (length 1) [ 108.486211][ T303] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 108.488046][ T303] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.488046][ T303] [ 108.562912][ T4908] loop0: detected capacity change from 0 to 1024 [ 108.566911][ T4908] EXT4-fs (loop0): Ignoring removed nobh option [ 108.567914][ T4908] EXT4-fs (loop0): Ignoring removed bh option [ 108.568879][ T4908] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.585699][ T4908] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 108.622276][ T343] ================================================================== [ 108.623587][ T343] BUG: KASAN: use-after-free in ext4_find_extent+0x994/0xb6c [ 108.624721][ T343] Read of size 4 at addr ffff0000e8f02c70 by task kworker/u4:4/343 [ 108.625744][ T343] [ 108.626080][ T343] CPU: 0 PID: 343 Comm: kworker/u4:4 Not tainted 5.15.189-syzkaller #0 [ 108.627134][ T343] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.628564][ T343] Workqueue: writeback wb_workfn (flush-7:0) [ 108.629374][ T343] Call trace: [ 108.629842][ T343] dump_backtrace+0x0/0x43c [ 108.630415][ T343] show_stack+0x2c/0x3c [ 108.631066][ T343] __dump_stack+0x30/0x40 [ 108.631838][ T343] dump_stack_lvl+0xf8/0x160 [ 108.632493][ T343] print_address_description+0x78/0x30c [ 108.633316][ T343] kasan_report+0xec/0x15c [ 108.633990][ T343] __asan_report_load4_noabort+0x44/0x50 [ 108.634904][ T343] ext4_find_extent+0x994/0xb6c [ 108.635720][ T343] ext4_ext_map_blocks+0x234/0x562c [ 108.636547][ T343] ext4_map_blocks+0x7b8/0x167c [ 108.637344][ T343] ext4_writepages+0xf00/0x2c14 [ 108.638002][ T343] do_writepages+0x36c/0x578 [ 108.638749][ T343] __writeback_single_inode+0x148/0x11f0 [ 108.639618][ T343] writeback_sb_inodes+0x7fc/0x1378 [ 108.640474][ T343] wb_writeback+0x3d8/0xe44 [ 108.641209][ T343] wb_workfn+0x350/0xdd8 [ 108.641793][ T343] process_one_work+0x79c/0x1140 [ 108.642511][ T343] worker_thread+0x8f4/0x101c [ 108.643143][ T343] kthread+0x374/0x454 [ 108.643693][ T343] ret_from_fork+0x10/0x20 [ 108.644307][ T343] [ 108.644644][ T343] The buggy address belongs to the page: [ 108.645495][ T343] page:00000000dc7e4779 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x128f02 [ 108.647016][ T343] flags: 0x5ffc00000000000(node=0|zone=2|lastcpupid=0x7ff) [ 108.648074][ T343] raw: 05ffc00000000000 fffffc0003a3b9c8 fffffc0003a47548 0000000000000000 [ 108.649380][ T343] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000 [ 108.650767][ T343] page dumped because: kasan: bad access detected [ 108.651656][ T343] [ 108.651980][ T343] Memory state around the buggy address: [ 108.652815][ T343] ffff0000e8f02b00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 108.654055][ T343] ffff0000e8f02b80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 108.655294][ T343] >ffff0000e8f02c00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 108.656469][ T343] ^ [ 108.657703][ T343] ffff0000e8f02c80: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 108.658918][ T343] ffff0000e8f02d00: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 108.660499][ T343] ================================================================== [ 108.661741][ T343] Disabling lock debugging due to kernel taint [ 108.666335][ T343] EXT4-fs error (device loop0): ext4_map_blocks:739: inode #15: block 8817567825920: comm kworker/u4:4: lblock 0 mapped to illegal pblock 8817567825920 (length 1) [ 108.669662][ T343] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 108.672009][ T343] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.672009][ T343] [ 108.745428][ T4912] loop0: detected capacity change from 0 to 1024 [ 108.747277][ T4912] EXT4-fs (loop0): Ignoring removed nobh option [ 108.748194][ T4912] EXT4-fs (loop0): Ignoring removed bh option [ 108.749087][ T4912] EXT4-fs (loop0): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 108.762355][ T4912] EXT4-fs (loop0): mounted filesystem without journal. Opts: delalloc,data_err=abort,barrier=0x0000000000000002,dioread_lock,data_err=ignore,max_dir_size_kb=0x00000000004007b1,data_err=ignore,grpquota,nobh,user_xattr,bh,dioread_nolock,,errors=continue. Quota mode: writeback. [ 108.781972][ T136] ------------[ cut here ]------------ [ 108.782762][ T136] kernel BUG at fs/ext4/inode.c:2420! [ 108.783559][ T136] Internal error: Oops - BUG: 00000000f2000800 [#1] PREEMPT SMP [ 108.784651][ T136] Modules linked in: [ 108.785251][ T136] CPU: 1 PID: 136 Comm: kworker/u4:1 Tainted: G B 5.15.189-syzkaller #0 [ 108.786742][ T136] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 108.788270][ T136] Workqueue: writeback wb_workfn (flush-7:0) [ 108.789092][ T136] pstate: 80400005 (Nzcv daif +PAN -UAO -TCO -DIT -SSBS BTYPE=--) [ 108.790168][ T136] pc : ext4_writepages+0x2b2c/0x2c14 [ 108.791065][ T136] lr : ext4_writepages+0x2b2c/0x2c14 [ 108.791898][ T136] sp : ffff80001bdb6ee0 [ 108.792607][ T136] x29: ffff80001bdb7200 x28: 0000000000000000 x27: ffff80001bdb75f0 [ 108.793924][ T136] x26: dfff800000000000 x25: ffff0000d4634000 x24: ffff0000e2723e70 [ 108.795028][ T136] x23: ffff0000d4634050 x22: 0000000000000000 x21: 1fffe0001c4e47d3 [ 108.796178][ T136] x20: 0000000000000000 x19: 0000000000000010 x18: 0000000000000000 [ 108.797368][ T136] x17: 0000000000000000 x16: ffff8000111bc798 x15: 0000000000000406 [ 108.798552][ T136] x14: 00000000ffff8000 x13: 00000000dfd0c793 x12: 0000000000ff0100 [ 108.799788][ T136] x11: 0000000000000000 x10: 0000000000000000 x9 : ffff800008cb730c [ 108.801188][ T136] x8 : ffff0000c25c51c0 x7 : 0000000000000000 x6 : 000000000000003f [ 108.802481][ T136] x5 : 0000000000000040 x4 : 0000000000000000 x3 : ffff8000082b877c [ 108.803757][ T136] x2 : 0000000000000001 x1 : 0000000000000000 x0 : 0000000000000000 [ 108.804945][ T136] Call trace: [ 108.805427][ T136] ext4_writepages+0x2b2c/0x2c14 [ 108.806217][ T136] do_writepages+0x36c/0x578 [ 108.806930][ T136] __writeback_single_inode+0x148/0x11f0 [ 108.807682][ T136] writeback_sb_inodes+0x7fc/0x1378 [ 108.808427][ T136] wb_writeback+0x3d8/0xe44 [ 108.809212][ T136] wb_workfn+0x350/0xdd8 [ 108.809770][ T136] process_one_work+0x79c/0x1140 [ 108.810562][ T136] worker_thread+0x8f4/0x101c [ 108.811298][ T136] kthread+0x374/0x454 [ 108.811949][ T136] ret_from_fork+0x10/0x20 [ 108.812757][ T136] Code: f94063f6 f2fbfffa 17fffe23 97df083e (d4210000) [ 108.813706][ T136] ---[ end trace a078dfde916a52a7 ]--- [ 109.222033][ T136] Kernel panic - not syncing: Oops - BUG: Fatal exception [ 109.223112][ T136] SMP: stopping secondary CPUs [ 109.223856][ T136] Kernel Offset: disabled [ 109.224516][ T136] CPU features: 0x8,000081c1,21302e40 [ 109.225356][ T136] Memory Limit: none [ 109.629035][ T136] Rebooting in 86400 seconds..