Warning: Permanently added '10.128.0.54' (ED25519) to the list of known hosts.
2026/05/15 06:33:32 parsed 1 programs
[ 26.052149][ T30] audit: type=1400 audit(1778826812.633:64): avc: denied { node_bind } for pid=293 comm="syz-execprog" saddr=::1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=tcp_socket permissive=1
[ 26.072908][ T30] audit: type=1400 audit(1778826812.633:65): avc: denied { module_request } for pid=293 comm="syz-execprog" kmod="net-pf-2-proto-262-type-1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1
[ 26.983224][ T30] audit: type=1400 audit(1778826813.563:66): avc: denied { mounton } for pid=299 comm="syz-executor" path="/syzcgroup/unified" dev="sda1" ino=2024 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:root_t tclass=dir permissive=1
[ 26.986402][ T299] cgroup: Unknown subsys name 'net'
[ 27.006049][ T30] audit: type=1400 audit(1778826813.563:67): avc: denied { mount } for pid=299 comm="syz-executor" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 27.033252][ T30] audit: type=1400 audit(1778826813.603:68): avc: denied { unmount } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1
[ 27.033643][ T299] cgroup: Unknown subsys name 'devices'
[ 27.178656][ T299] cgroup: Unknown subsys name 'hugetlb'
[ 27.184264][ T299] cgroup: Unknown subsys name 'rlimit'
[ 27.391530][ T30] audit: type=1400 audit(1778826813.973:69): avc: denied { setattr } for pid=299 comm="syz-executor" name="raw-gadget" dev="devtmpfs" ino=254 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1
[ 27.414987][ T30] audit: type=1400 audit(1778826813.973:70): avc: denied { create } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 27.435502][ T30] audit: type=1400 audit(1778826813.973:71): avc: denied { write } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
[ 27.455887][ T30] audit: type=1400 audit(1778826813.973:72): avc: denied { read } for pid=299 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1
Setting up swapspace version 1, size = 127995904 bytes
[ 27.476360][ T30] audit: type=1400 audit(1778826813.973:73): avc: denied { mounton } for pid=299 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1
[ 27.502095][ T303] SELinux: Context root:object_r:swapfile_t is not valid (left unmapped).
[ 27.543598][ T299] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 28.057208][ T310] request_module fs-gadgetfs succeeded, but still no fs?
[ 28.521751][ T345] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.538565][ T345] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.546130][ T345] device bridge_slave_0 entered promiscuous mode
[ 28.560701][ T345] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.570997][ T345] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.578594][ T345] device bridge_slave_1 entered promiscuous mode
[ 28.659104][ T345] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.666188][ T345] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.673545][ T345] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.680612][ T345] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.705583][ T10] bridge0: port 1(bridge_slave_0) entered disabled state
[ 28.713018][ T10] bridge0: port 2(bridge_slave_1) entered disabled state
[ 28.720977][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 28.728936][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 28.739553][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 28.748321][ T10] bridge0: port 1(bridge_slave_0) entered blocking state
[ 28.755396][ T10] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 28.772678][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 28.781017][ T10] bridge0: port 2(bridge_slave_1) entered blocking state
[ 28.788476][ T10] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 28.796159][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 28.818354][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 28.827821][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 28.838186][ T345] device veth0_vlan entered promiscuous mode
[ 28.847360][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 28.861035][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 28.869953][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 28.878591][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 28.886714][ T345] device veth1_macvtap entered promiscuous mode
[ 28.898018][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 28.913052][ T10] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
2026/05/15 06:33:35 executed programs: 0
[ 29.062373][ T345] syz-executor (345) used greatest stack depth: 21952 bytes left
[ 29.117136][ T369] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.124207][ T369] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.131835][ T369] device bridge_slave_0 entered promiscuous mode
[ 29.138977][ T369] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.146028][ T369] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.153529][ T369] device bridge_slave_1 entered promiscuous mode
[ 29.188099][ T372] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.195166][ T372] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.202674][ T372] device bridge_slave_0 entered promiscuous mode
[ 29.226754][ T372] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.233821][ T372] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.241262][ T372] device bridge_slave_1 entered promiscuous mode
[ 29.371993][ T379] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.379260][ T379] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.386719][ T379] device bridge_slave_0 entered promiscuous mode
[ 29.396113][ T379] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.403537][ T379] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.411022][ T379] device bridge_slave_1 entered promiscuous mode
[ 29.417774][ T375] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.424820][ T375] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.432210][ T375] device bridge_slave_0 entered promiscuous mode
[ 29.440664][ T375] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.447761][ T375] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.455344][ T375] device bridge_slave_1 entered promiscuous mode
[ 29.554714][ T380] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.561845][ T380] bridge0: port 1(bridge_slave_0) entered disabled state
[ 29.569319][ T380] device bridge_slave_0 entered promiscuous mode
[ 29.595727][ T380] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.603279][ T380] bridge0: port 2(bridge_slave_1) entered disabled state
[ 29.610879][ T380] device bridge_slave_1 entered promiscuous mode
[ 29.700184][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 29.707626][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 29.715017][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 29.723621][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 29.731912][ T366] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.738970][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.746489][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 29.754854][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 29.763013][ T366] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.770088][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.777470][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 29.784884][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 29.792499][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 29.819291][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 29.827466][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 29.835403][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 29.843793][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 29.851983][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 29.860491][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 29.868840][ T366] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.875861][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.883370][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 29.902490][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 29.909967][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 29.917674][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 29.925970][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 29.934390][ T366] bridge0: port 2(bridge_slave_1) entered blocking state
[ 29.941478][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 29.948994][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 29.957286][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 29.965389][ T366] bridge0: port 1(bridge_slave_0) entered blocking state
[ 29.972474][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 29.979905][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 29.988257][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 29.996351][ T366] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.003412][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 30.010856][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 30.040469][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 30.048256][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 30.056387][ T366] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.063451][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 30.082725][ T372] device veth0_vlan entered promiscuous mode
[ 30.095089][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 30.103475][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 30.112278][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 30.120712][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready
[ 30.128319][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready
[ 30.135699][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready
[ 30.144179][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready
[ 30.152500][ T366] bridge0: port 1(bridge_slave_0) entered blocking state
[ 30.159570][ T366] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 30.167144][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 30.175072][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 30.183140][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 30.191078][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 30.199258][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 30.207571][ T366] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.214613][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 30.222061][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready
[ 30.229736][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 30.237208][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 30.265085][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready
[ 30.273369][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready
[ 30.281748][ T366] bridge0: port 2(bridge_slave_1) entered blocking state
[ 30.288867][ T366] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 30.297023][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready
[ 30.305101][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 30.313220][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready
[ 30.321329][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 30.329330][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 30.337467][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 30.345359][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready
[ 30.353358][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready
[ 30.368766][ T372] device veth1_macvtap entered promiscuous mode
[ 30.387911][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 30.396177][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 30.404690][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 30.412920][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 30.421263][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 30.429043][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 30.438746][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 30.446825][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 30.460762][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 30.469242][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 30.476742][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 30.487872][ T369] device veth0_vlan entered promiscuous mode
[ 30.495840][ T379] device veth0_vlan entered promiscuous mode
[ 30.506894][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 30.515087][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 30.523502][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 30.531970][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 30.540540][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 30.548868][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 30.556299][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 30.568538][ T375] device veth0_vlan entered promiscuous mode
[ 30.584602][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready
[ 30.592999][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready
[ 30.601544][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 30.609670][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 30.618010][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 30.625478][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 30.639556][ T380] device veth0_vlan entered promiscuous mode
[ 30.646312][ T379] device veth1_macvtap entered promiscuous mode
[ 30.655290][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 30.663771][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 30.672155][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 30.679976][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready
[ 30.688000][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready
[ 30.696042][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready
[ 30.703593][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready
[ 30.721200][ T369] device veth1_macvtap entered promiscuous mode
[ 30.730946][ T375] device veth1_macvtap entered promiscuous mode
[ 30.738555][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 30.747695][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 30.756225][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 30.764999][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 30.775216][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 30.783576][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 30.791947][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 30.794289][ T395] loop1: detected capacity change from 0 to 2048
[ 30.801055][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 30.814133][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 30.822922][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 30.839532][ T380] device veth1_macvtap entered promiscuous mode
[ 30.855122][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 30.862195][ T395] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 30.865348][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 30.875384][ T395] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 30.885577][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 30.900837][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 30.909744][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready
[ 30.918332][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready
[ 30.926710][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready
[ 30.947034][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 30.955462][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 30.973272][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 30.982355][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 31.015978][ T401] loop3: detected capacity change from 0 to 2048
[ 31.023025][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready
[ 31.039414][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready
[ 31.048056][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready
[ 31.057779][ T366] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready
[ 31.132212][ T407] loop1: detected capacity change from 0 to 2048
[ 31.141117][ T404] loop6: detected capacity change from 0 to 2048
[ 31.148617][ T411] loop2: detected capacity change from 0 to 2048
[ 31.158641][ T410] loop4: detected capacity change from 0 to 2048
[ 31.166070][ T401] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 31.178762][ T407] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 31.189808][ T401] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 31.234646][ T407] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 31.266473][ T411] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 31.266558][ T404] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 31.319418][ T411] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 31.321204][ T410] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 31.350973][ T366] EXT4-fs error (device loop3): __ext4_get_inode_loc:4365: comm kworker/u4:4: Invalid inode table block 14296942543539513372 in block_group 0
[ 31.366087][ T410] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 31.446799][ T429] ==================================================================
[ 31.454911][ T429] BUG: KASAN: use-after-free in ext4_find_extent+0xbeb/0xe20
[ 31.462325][ T429] Read of size 4 at addr ffff88812983d8c0 by task kworker/u4:5/429
[ 31.470255][ T429]
[ 31.472609][ T429] CPU: 0 PID: 429 Comm: kworker/u4:5 Not tainted syzkaller #0
[ 31.480090][ T429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 31.490171][ T429] Workqueue: writeback wb_workfn (flush-7:6)
[ 31.496200][ T429] Call Trace:
[ 31.499496][ T429]
[ 31.502442][ T429] __dump_stack+0x21/0x30
[ 31.506801][ T429] dump_stack_lvl+0x110/0x170
[ 31.511501][ T429] ? show_regs_print_info+0x20/0x20
[ 31.516727][ T429] ? load_image+0x3e0/0x3e0
[ 31.521252][ T429] print_address_description+0x7f/0x2c0
[ 31.526851][ T429] ? ext4_find_extent+0xbeb/0xe20
[ 31.531898][ T429] kasan_report+0xf1/0x140
[ 31.536329][ T429] ? __read_extent_tree_block+0x1e8/0x790
[ 31.542068][ T429] ? ext4_find_extent+0xbeb/0xe20
[ 31.547101][ T429] __asan_report_load4_noabort+0x14/0x20
[ 31.552749][ T429] ext4_find_extent+0xbeb/0xe20
[ 31.557609][ T429] ext4_ext_map_blocks+0x207/0x6230
[ 31.562823][ T429] ? ret_from_fork+0x1f/0x30
[ 31.567422][ T429] ? __stack_depot_save+0x34/0x480
[ 31.572551][ T429] ? __mem_cgroup_uncharge_list+0x39/0xc0
[ 31.578284][ T429] ? __kasan_slab_alloc+0xcf/0xf0
[ 31.583331][ T429] ? __kasan_slab_alloc+0xbd/0xf0
[ 31.588363][ T429] ? slab_post_alloc_hook+0x4f/0x2b0
[ 31.593673][ T429] ? kmem_cache_alloc+0xf7/0x260
[ 31.598627][ T429] ? ext4_alloc_io_end_vec+0x2a/0x160
[ 31.604023][ T429] ? ext4_writepages+0xf20/0x3090
[ 31.609056][ T429] ? do_writepages+0x473/0x6c0
[ 31.613845][ T429] ? wb_workfn+0x3ac/0xf30
[ 31.618275][ T429] ? process_one_work+0x6be/0xba0
[ 31.623322][ T429] ? worker_thread+0xa59/0x1200
[ 31.628185][ T429] ? ext4_ext_release+0x10/0x10
[ 31.633052][ T429] ? ext4_es_lookup_extent+0x54c/0x900
[ 31.638517][ T429] ext4_map_blocks+0x988/0x1b30
[ 31.643375][ T429] ? slab_post_alloc_hook+0x6d/0x2b0
[ 31.648667][ T429] ? should_failslab+0x9/0x20
[ 31.653358][ T429] ? ext4_issue_zeroout+0x250/0x250
[ 31.658567][ T429] ? ext4_inode_journal_mode+0x19a/0x480
[ 31.664205][ T429] ext4_writepages+0x123f/0x3090
[ 31.669148][ T429] ? ext4_readpage+0x220/0x220
[ 31.673951][ T429] ? __kasan_check_write+0x14/0x20
[ 31.679079][ T429] ? ext4_readpage+0x220/0x220
[ 31.683866][ T429] do_writepages+0x473/0x6c0
[ 31.688474][ T429] ? __writepage+0x130/0x130
[ 31.693071][ T429] ? __kasan_check_write+0x14/0x20
[ 31.698193][ T429] ? _raw_spin_lock+0x94/0xf0
[ 31.702881][ T429] __writeback_single_inode+0xd5/0x9c0
[ 31.708349][ T429] ? wbc_attach_and_unlock_inode+0x194/0x5f0
[ 31.714338][ T429] writeback_sb_inodes+0xa10/0x1610
[ 31.719556][ T429] ? queue_io+0x4c0/0x4c0
[ 31.723913][ T429] ? __kasan_check_read+0x11/0x20
[ 31.728947][ T429] ? queue_io+0x382/0x4c0
[ 31.733290][ T429] wb_writeback+0x40b/0x9d0
[ 31.737803][ T429] ? inode_cgwb_move_to_attached+0x3e0/0x3e0
[ 31.743792][ T429] ? set_worker_desc+0x1ba/0x1f0
[ 31.748738][ T429] ? __kasan_check_write+0x14/0x20
[ 31.753865][ T429] wb_workfn+0x3ac/0xf30
[ 31.758125][ T429] ? inode_wait_for_writeback+0x220/0x220
[ 31.763855][ T429] ? compat_start_thread+0x20/0x20
[ 31.768977][ T429] ? _raw_spin_unlock+0x4d/0x70
[ 31.773838][ T429] ? finish_task_switch+0x16b/0x780
[ 31.779041][ T429] ? __switch_to_asm+0x3a/0x60
[ 31.783861][ T429] ? __schedule+0xb76/0x14c0
[ 31.788457][ T429] process_one_work+0x6be/0xba0
[ 31.793315][ T429] worker_thread+0xa59/0x1200
[ 31.798004][ T429] ? _raw_spin_lock_irqsave+0xc2/0x130
[ 31.803480][ T429] ? __kthread_parkme+0xac/0x200
[ 31.808422][ T429] kthread+0x411/0x500
[ 31.812511][ T429] ? worker_clr_flags+0x190/0x190
[ 31.817554][ T429] ? kthread_blkcg+0xd0/0xd0
[ 31.822153][ T429] ret_from_fork+0x1f/0x30
[ 31.826592][ T429]
[ 31.829636][ T429]
[ 31.831967][ T429] The buggy address belongs to the page:
[ 31.837606][ T429] page:ffffea0004a60f40 refcount:0 mapcount:0 mapping:0000000000000000 index:0x1 pfn:0x12983d
[ 31.847857][ T429] flags: 0x4000000000000000(zone=1)
[ 31.853073][ T429] raw: 4000000000000000 ffffea0004a60f88 ffffea0004a60f08 0000000000000000
[ 31.861667][ T429] raw: 0000000000000001 0000000000000000 00000000ffffffff 0000000000000000
[ 31.870260][ T429] page dumped because: kasan: bad access detected
[ 31.876678][ T429] page_owner tracks the page as freed
[ 31.882062][ T429] page last allocated via order 0, migratetype Movable, gfp_mask 0x100dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO), pid 299, ts 27579228569, free_ts 27640363027
[ 31.897440][ T429] post_alloc_hook+0x192/0x1b0
[ 31.902234][ T429] prep_new_page+0x1c/0x110
[ 31.906740][ T429] get_page_from_freelist+0x2d3a/0x2dc0
[ 31.912288][ T429] __alloc_pages+0x1a2/0x460
[ 31.916881][ T429] handle_pte_fault+0xebf/0x2710
[ 31.921824][ T429] do_handle_mm_fault+0x1af9/0x1de0
[ 31.927039][ T429] do_user_addr_fault+0x828/0x1250
[ 31.932155][ T429] exc_page_fault+0x51/0xb0
[ 31.936660][ T429] asm_exc_page_fault+0x27/0x30
[ 31.941515][ T429] page last free stack trace:
[ 31.946199][ T429] free_unref_page_prepare+0x542/0x550
[ 31.951658][ T429] free_unref_page_list+0x13a/0x9d0
[ 31.956858][ T429] release_pages+0x1006/0x1060
[ 31.961629][ T429] free_pages_and_swap_cache+0x86/0xa0
[ 31.967099][ T429] tlb_finish_mmu+0x17e/0x310
[ 31.971776][ T429] unmap_region+0x344/0x3b0
[ 31.976283][ T429] __do_munmap+0xa24/0x1020
[ 31.980794][ T429] __vm_munmap+0x163/0x2b0
[ 31.985219][ T429] __x64_sys_munmap+0x6b/0x80
[ 31.989903][ T429] x64_sys_call+0xc9/0x9a0
[ 31.994346][ T429] do_syscall_64+0x4c/0xa0
[ 31.998769][ T429] entry_SYSCALL_64_after_hwframe+0x66/0xd0
[ 32.004672][ T429]
[ 32.007011][ T429] Memory state around the buggy address:
[ 32.012650][ T429] ffff88812983d780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 32.020721][ T429] ffff88812983d800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 32.028805][ T429] >ffff88812983d880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 32.036874][ T429] ^
[ 32.043064][ T429] ffff88812983d900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 32.051129][ T429] ffff88812983d980: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 32.059191][ T429] ==================================================================
[ 32.067255][ T429] Disabling lock debugging due to kernel taint
[ 32.078878][ T30] kauditd_printk_skb: 37 callbacks suppressed
[ 32.078890][ T30] audit: type=1400 audit(1778826818.663:111): avc: denied { read } for pid=83 comm="syslogd" name="log" dev="sda1" ino=2010 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:var_t tclass=lnk_file permissive=1
[ 32.107086][ T339] EXT4-fs error (device loop2): ext4_map_blocks:742: inode #18: block 3307242652932: comm kworker/u4:3: lblock 0 mapped to illegal pblock 3307242652932 (length 16)
[ 32.131866][ T30] audit: type=1400 audit(1778826818.663:112): avc: denied { search } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 32.153368][ T428] loop1: detected capacity change from 0 to 2048
[ 32.164920][ T339] EXT4-fs (loop2): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 16 with error 117
[ 32.167073][ T30] audit: type=1400 audit(1778826818.663:113): avc: denied { write } for pid=83 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 32.189201][ T339] EXT4-fs (loop2): This should not happen!! Data will be lost
[ 32.189201][ T339]
[ 32.201594][ T30] audit: type=1400 audit(1778826818.663:114): avc: denied { add_name } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1
[ 32.220418][ T339] EXT4-fs error (device loop2): __ext4_get_inode_loc:4365: comm kworker/u4:3: Invalid inode table block 10651771746618318687 in block_group 0
[ 32.230206][ T30] audit: type=1400 audit(1778826818.663:115): avc: denied { create } for pid=83 comm="syslogd" name="messages" scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 32.264668][ T366] EXT4-fs error (device loop4): __ext4_get_inode_loc:4365: comm kworker/u4:4: Invalid inode table block 15981625848141081208 in block_group 0
[ 32.266008][ T30] audit: type=1400 audit(1778826818.663:116): avc: denied { append open } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 32.306229][ T30] audit: type=1400 audit(1778826818.663:117): avc: denied { getattr } for pid=83 comm="syslogd" path="/tmp/messages" dev="tmpfs" ino=5 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1
[ 32.331397][ T429] EXT4-fs error (device loop6): __ext4_get_inode_loc:4365: comm kworker/u4:5: Invalid inode table block 6190460888929143715 in block_group 0
[ 32.342564][ T428] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 32.375149][ T428] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 32.405229][ T434] loop3: detected capacity change from 0 to 2048
[ 32.419565][ T437] loop2: detected capacity change from 0 to 2048
[ 32.433119][ T438] loop6: detected capacity change from 0 to 2048
[ 32.461617][ T10] EXT4-fs error (device loop1): __ext4_get_inode_loc:4365: comm kworker/u4:1: Invalid inode table block 7284578333723025707 in block_group 0
[ 32.493345][ T438] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 32.504492][ T438] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 32.515436][ T440] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 32.527543][ T437] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 32.535493][ T440] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 32.541822][ T437] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 32.559689][ T434] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 32.577012][ T434] ext4 filesystem being mounted at /1/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 32.642266][ T450] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 32.664829][ T429] ------------[ cut here ]------------
[ 32.676298][ T450] ext4 filesystem being mounted at /3/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 32.686602][ T429] kernel BUG at fs/ext4/extents.c:3189!
[ 32.692269][ T429] invalid opcode: 0000 [#1] PREEMPT SMP KASAN
[ 32.698367][ T429] CPU: 1 PID: 429 Comm: kworker/u4:5 Tainted: G B syzkaller #0
[ 32.707236][ T429] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 32.717310][ T429] Workqueue: writeback wb_workfn (flush-7:6)
[ 32.723329][ T429] RIP: 0010:ext4_split_extent_at+0xe7f/0xea0
[ 32.729340][ T429] Code: ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c eb fb ff ff 4c 89 f7 49 89 f7 e8 be e3 d2 ff 4c 89 fe e9 d8 fb ff ff e8 01 ae 93 ff <0f> 0b e8 fa ad 93 ff 0f 0b e8 f3 ad 93 ff 0f 0b e8 ec ad 93 ff 0f
[ 32.730235][ T436] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #2: block 16: comm syz.2.26: lblock 0 mapped to illegal pblock 16 (length 1)
[ 32.748961][ T429] RSP: 0000:ffffc90000bd6aa0 EFLAGS: 00010293
[ 32.748981][ T429] RAX: ffffffff81d61d6f RBX: 0000000000000000 RCX: ffff888115940000
[ 32.748995][ T429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 32.749007][ T429] RBP: ffffc90000bd6c20 R08: 0000000000000000 R09: 000000004000042b
[ 32.749019][ T429] R10: dffffc0000000000 R11: ffffed1022ba80aa R12: dffffc0000000000
[ 32.749033][ T429] R13: ffff888115d40500 R14: 0000000000000000 R15: 1ffff1102538faa5
[ 32.808864][ T429] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 32.817822][ T429] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 32.824438][ T429] CR2: 00007f305e0ba000 CR3: 000000010d645000 CR4: 00000000003506a0
[ 32.832436][ T429] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 32.840435][ T429] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 32.848431][ T429] Call Trace:
[ 32.851732][ T429]
[ 32.854697][ T429] ? ext4_ext_try_to_merge_right+0x820/0x820
[ 32.860715][ T429] ? ext4_find_extent+0xc9a/0xe20
[ 32.865767][ T429] ext4_split_extent+0x363/0x4a0
[ 32.870727][ T429] ext4_ext_map_blocks+0x2510/0x6230
[ 32.876047][ T429] ? __stack_depot_save+0x34/0x480
[ 32.881199][ T429] ? __mem_cgroup_uncharge_list+0x39/0xc0
[ 32.886943][ T429] ? __kasan_slab_alloc+0xcf/0xf0
[ 32.891990][ T429] ? __kasan_slab_alloc+0xbd/0xf0
[ 32.897049][ T429] ? slab_post_alloc_hook+0x4f/0x2b0
[ 32.902370][ T429] ? kmem_cache_alloc+0xf7/0x260
[ 32.907352][ T429] ? ext4_alloc_io_end_vec+0x2a/0x160
[ 32.912747][ T429] ? ext4_writepages+0xf20/0x3090
[ 32.917812][ T429] ? do_writepages+0x473/0x6c0
[ 32.922635][ T429] ? wb_workfn+0x3ac/0xf30
[ 32.927104][ T429] ? process_one_work+0x6be/0xba0
[ 32.932169][ T429] ? worker_thread+0xa59/0x1200
[ 32.937050][ T429] ? ext4_ext_release+0x10/0x10
[ 32.941933][ T429] ? ext4_es_lookup_extent+0x54c/0x900
[ 32.947419][ T429] ext4_map_blocks+0x988/0x1b30
[ 32.952299][ T429] ? slab_post_alloc_hook+0x6d/0x2b0
[ 32.957625][ T429] ? should_failslab+0x9/0x20
[ 32.962336][ T429] ? ext4_issue_zeroout+0x250/0x250
[ 32.964731][ T436] EXT4-fs error (device loop2): ext4_map_blocks:632: inode #2: block 16: comm syz.2.26: lblock 0 mapped to illegal pblock 16 (length 1)
[ 32.967569][ T429] ? ext4_inode_journal_mode+0x19a/0x480
[ 32.967594][ T429] ext4_writepages+0x123f/0x3090
[ 32.967618][ T429] ? mark_page_accessed+0x3b0/0x8f0
[ 32.997704][ T429] ? __activate_page+0xd70/0xd70
[ 33.002679][ T429] ? ext4_readpage+0x220/0x220
[ 33.007479][ T429] ? copy_page_from_iter_atomic+0x966/0x1380
[ 33.013486][ T429] ? memcpy+0x56/0x70
[ 33.017500][ T429] ? xas_load+0x2ea/0x300
[ 33.021871][ T429] ? ext4_readpage+0x220/0x220
[ 33.026682][ T429] do_writepages+0x473/0x6c0
[ 33.031303][ T429] ? update_load_avg+0x40d/0x1110
[ 33.036343][ T429] ? update_curr+0x31f/0x5e0
[ 33.040965][ T429] ? __writepage+0x130/0x130
[ 33.045580][ T429] ? __kasan_check_write+0x14/0x20
[ 33.050714][ T429] ? _raw_spin_lock+0x94/0xf0
[ 33.055439][ T429] __writeback_single_inode+0xd5/0x9c0
[ 33.060928][ T429] ? wbc_attach_and_unlock_inode+0x194/0x5f0
[ 33.066943][ T429] writeback_sb_inodes+0xa10/0x1610
[ 33.072179][ T429] ? update_load_avg+0x40d/0x1110
[ 33.077248][ T429] ? queue_io+0x4c0/0x4c0
[ 33.081626][ T429] ? __kasan_check_read+0x11/0x20
[ 33.086693][ T429] ? queue_io+0x382/0x4c0
[ 33.091050][ T429] wb_writeback+0x40b/0x9d0
[ 33.095578][ T429] ? inode_cgwb_move_to_attached+0x3e0/0x3e0
[ 33.101571][ T429] ? set_worker_desc+0x1ba/0x1f0
[ 33.106519][ T429] ? __kasan_check_write+0x14/0x20
[ 33.111642][ T429] wb_workfn+0x3ac/0xf30
[ 33.115906][ T429] ? inode_wait_for_writeback+0x220/0x220
[ 33.121637][ T429] ? compat_start_thread+0x20/0x20
[ 33.126770][ T429] ? _raw_spin_unlock+0x4d/0x70
[ 33.131644][ T429] ? finish_task_switch+0x16b/0x780
[ 33.136857][ T429] ? __switch_to_asm+0x3a/0x60
[ 33.141635][ T429] ? __schedule+0xb76/0x14c0
[ 33.146243][ T429] process_one_work+0x6be/0xba0
[ 33.151111][ T429] worker_thread+0xa59/0x1200
[ 33.155802][ T429] ? _raw_spin_lock_irqsave+0xc2/0x130
[ 33.161270][ T429] ? __kthread_parkme+0xac/0x200
[ 33.166224][ T429] kthread+0x411/0x500
[ 33.170305][ T429] ? worker_clr_flags+0x190/0x190
[ 33.175337][ T429] ? kthread_blkcg+0xd0/0xd0
[ 33.179932][ T429] ret_from_fork+0x1f/0x30
[ 33.184372][ T429]
[ 33.187412][ T429] Modules linked in:
[ 33.235620][ T430] ------------[ cut here ]------------
[ 33.255553][ T430] kernel BUG at fs/ext4/extents.c:3189!
[ 33.273119][ T430] invalid opcode: 0000 [#2] PREEMPT SMP KASAN
[ 33.279250][ T430] CPU: 1 PID: 430 Comm: kworker/u4:6 Tainted: G B D syzkaller #0
[ 33.288125][ T430] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026
[ 33.291565][ T456] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none.
[ 33.298245][ T430] Workqueue: writeback wb_workfn (flush-7:2)
[ 33.298278][ T430] RIP: 0010:ext4_split_extent_at+0xe7f/0xea0
[ 33.309511][ T456] ext4 filesystem being mounted at /2/file0 supports timestamps until 2038-01-19 (0x7fffffff)
[ 33.314751][ T430] Code: ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c eb fb ff ff 4c 89 f7 49 89 f7 e8 be e3 d2 ff 4c 89 fe e9 d8 fb ff ff e8 01 ae 93 ff <0f> 0b e8 fa ad 93 ff 0f 0b e8 f3 ad 93 ff 0f 0b e8 ec ad 93 ff 0f
[ 33.350565][ T430] RSP: 0018:ffffc90000cb6aa0 EFLAGS: 00010293
[ 33.351023][ T429] ---[ end trace 69ce11a3174cc9f7 ]---
[ 33.356658][ T430] RAX: ffffffff81d61d6f RBX: 0000000000000000 RCX: ffff888115942780
[ 33.356674][ T430] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 33.356686][ T430] RBP: ffffc90000cb6c20 R08: 0000000000000000 R09: 000000004000042b
[ 33.356699][ T430] R10: dffffc0000000000 R11: ffffed1022eb932a R12: dffffc0000000000
[ 33.362231][ T429] RIP: 0010:ext4_split_extent_at+0xe7f/0xea0
[ 33.370144][ T430] R13: ffff8881175c9900 R14: 0000000000000000 R15: 1ffff110253230e3
[ 33.370159][ T430] FS: 0000000000000000(0000) GS:ffff8881f7100000(0000) knlGS:0000000000000000
[ 33.370175][ T430] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.379669][ T429] Code: ff ff 44 89 f1 80 e1 07 fe c1 38 c1 0f 8c eb fb ff ff 4c 89 f7 49 89 f7 e8 be e3 d2 ff 4c 89 fe e9 d8 fb ff ff e8 01 ae 93 ff <0f> 0b e8 fa ad 93 ff 0f 0b e8 f3 ad 93 ff 0f 0b e8 ec ad 93 ff 0f
[ 33.386131][ T430] CR2: 0000200000100000 CR3: 000000011f937000 CR4: 00000000003506a0
[ 33.394243][ T429] RSP: 0000:ffffc90000bd6aa0 EFLAGS: 00010293
[ 33.400092][ T430] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.400106][ T430] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.400119][ T430] Call Trace:
[ 33.408194][ T429]
[ 33.417046][ T430]
[ 33.417060][ T430] ? ext4_ext_try_to_merge_right+0x820/0x820
[ 33.423743][ T429] RAX: ffffffff81d61d6f RBX: 0000000000000000 RCX: ffff888115940000
[ 33.443271][ T430] ? ext4_find_extent+0xc9a/0xe20
[ 33.443297][ T430] ext4_split_extent+0x363/0x4a0
[ 33.443319][ T430] ext4_ext_map_blocks+0x2510/0x6230
[ 33.451688][ T429] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000
[ 33.457357][ T430] ? __stack_depot_save+0x34/0x480
[ 33.457382][ T430] ? __mem_cgroup_uncharge_list+0x39/0xc0
[ 33.457404][ T430] ? __kasan_slab_alloc+0xcf/0xf0
[ 33.457422][ T430] ? __kasan_slab_alloc+0xbd/0xf0
[ 33.457438][ T430] ? slab_post_alloc_hook+0x4f/0x2b0
[ 33.457458][ T430] ? kmem_cache_alloc+0xf7/0x260
[ 33.457476][ T430] ? ext4_alloc_io_end_vec+0x2a/0x160
[ 33.457494][ T430] ? ext4_writepages+0xf20/0x3090
[ 33.457524][ T430] ? do_writepages+0x473/0x6c0
[ 33.457545][ T430] ? wb_workfn+0x3ac/0xf30
[ 33.465637][ T429] RBP: ffffc90000bd6c20 R08: 0000000000000000 R09: 000000004000042b
[ 33.473487][ T430] ? process_one_work+0x6be/0xba0
[ 33.473510][ T430] ? worker_thread+0xa59/0x1200
[ 33.476932][ T429] R10: dffffc0000000000 R11: ffffed1022ba80aa R12: dffffc0000000000
[ 33.479131][ T430] ? ext4_ext_release+0x10/0x10
[ 33.482076][ T429] R13: ffff888115d40500 R14: 0000000000000000 R15: 1ffff1102538faa5
[ 33.488162][ T430] ? ext4_es_lookup_extent+0x54c/0x900
[ 33.488194][ T430] ext4_map_blocks+0x988/0x1b30
[ 33.496255][ T429] FS: 0000000000000000(0000) GS:ffff8881f7000000(0000) knlGS:0000000000000000
[ 33.501208][ T430] ? slab_post_alloc_hook+0x6d/0x2b0
[ 33.501234][ T430] ? kmem_cache_alloc+0x19e/0x260
[ 33.506219][ T429] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033
[ 33.511465][ T430] ? ext4_issue_zeroout+0x250/0x250
[ 33.511489][ T430] ? ext4_inode_journal_mode+0x19a/0x480
[ 33.519594][ T429] CR2: 00007f305e0ba000 CR3: 000000010c88f000 CR4: 00000000003506b0
[ 33.524572][ T430] ext4_writepages+0x123f/0x3090
[ 33.530420][ T429] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
[ 33.535318][ T430] ? mark_page_accessed+0x3b0/0x8f0
[ 33.556694][ T429] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
[ 33.560949][ T430] ? __activate_page+0xd70/0xd70
[ 33.575985][ T429] Kernel panic - not syncing: Fatal exception
[ 33.578205][ T430] ? ext4_readpage+0x220/0x220
[ 33.705625][ T430] ? copy_page_from_iter_atomic+0x966/0x1380
[ 33.711620][ T430] ? memcpy+0x56/0x70
[ 33.715615][ T430] ? xas_load+0x2ea/0x300
[ 33.719951][ T430] ? ext4_readpage+0x220/0x220
[ 33.724736][ T430] do_writepages+0x473/0x6c0
[ 33.729347][ T430] ? update_load_avg+0x40d/0x1110
[ 33.734386][ T430] ? update_curr+0x31f/0x5e0
[ 33.738986][ T430] ? __writepage+0x130/0x130
[ 33.743591][ T430] ? __kasan_check_write+0x14/0x20
[ 33.748713][ T430] ? _raw_spin_lock+0x94/0xf0
[ 33.753400][ T430] __writeback_single_inode+0xd5/0x9c0
[ 33.758897][ T430] ? wbc_attach_and_unlock_inode+0x194/0x5f0
[ 33.764889][ T430] writeback_sb_inodes+0xa10/0x1610
[ 33.770095][ T430] ? update_load_avg+0x40d/0x1110
[ 33.775139][ T430] ? queue_io+0x4c0/0x4c0
[ 33.779479][ T430] ? __kasan_check_read+0x11/0x20
[ 33.784535][ T430] ? queue_io+0x382/0x4c0
[ 33.788892][ T430] wb_writeback+0x40b/0x9d0
[ 33.793417][ T430] ? inode_cgwb_move_to_attached+0x3e0/0x3e0
[ 33.799427][ T430] ? set_worker_desc+0x1ba/0x1f0
[ 33.804401][ T430] ? __kasan_check_write+0x14/0x20
[ 33.809531][ T430] wb_workfn+0x3ac/0xf30
[ 33.813796][ T430] ? inode_wait_for_writeback+0x220/0x220
[ 33.819536][ T430] ? compat_start_thread+0x20/0x20
[ 33.824679][ T430] ? _raw_spin_unlock+0x4d/0x70
[ 33.829546][ T430] ? finish_task_switch+0x16b/0x780
[ 33.834774][ T430] ? __switch_to_asm+0x3a/0x60
[ 33.839551][ T430] ? __schedule+0xb76/0x14c0
[ 33.844159][ T430] process_one_work+0x6be/0xba0
[ 33.849038][ T430] worker_thread+0xa59/0x1200
[ 33.853732][ T430] ? _raw_spin_lock_irqsave+0xc2/0x130
[ 33.859210][ T430] ? __kthread_parkme+0xac/0x200
[ 33.864182][ T430] kthread+0x411/0x500
[ 33.868262][ T430] ? worker_clr_flags+0x190/0x190
[ 33.873300][ T430] ? kthread_blkcg+0xd0/0xd0
[ 33.877926][ T430] ret_from_fork+0x1f/0x30
[ 33.882369][ T430]
[ 33.885397][ T430] Modules linked in:
[ 33.889610][ T429] Kernel Offset: disabled
[ 33.893941][ T429] Rebooting in 86400 seconds..