Warning: Permanently added '10.128.1.124' (ED25519) to the list of known hosts.
2025/08/20 07:55:52 ignoring optional flag "sandboxArg"="0"
2025/08/20 07:55:52 parsed 1 programs
[ 72.492346][ T5857] cgroup: Unknown subsys name 'net'
[ 72.603604][ T5857] cgroup: Unknown subsys name 'cpuset'
[ 72.611460][ T5857] cgroup: Unknown subsys name 'rlimit'
[ 73.689389][ T5857] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 75.816075][ T5870] chnl_net:caif_netlink_parms(): no params data found
[ 75.865626][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[ 75.872843][ T5870] bridge0: port 1(bridge_slave_0) entered disabled state
[ 75.879918][ T5870] bridge_slave_0: entered allmulticast mode
[ 75.886913][ T5870] bridge_slave_0: entered promiscuous mode
[ 75.894719][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[ 75.902064][ T5870] bridge0: port 2(bridge_slave_1) entered disabled state
[ 75.909163][ T5870] bridge_slave_1: entered allmulticast mode
[ 75.915889][ T5870] bridge_slave_1: entered promiscuous mode
[ 75.937440][ T5870] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 75.948389][ T5870] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 75.972615][ T5870] team0: Port device team_slave_0 added
[ 75.979803][ T5870] team0: Port device team_slave_1 added
[ 76.001166][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 76.008096][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.033978][ T5870] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 76.045421][ T5870] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 76.052400][ T5870] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 76.078822][ T5870] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 76.112538][ T5870] hsr_slave_0: entered promiscuous mode
[ 76.118693][ T5870] hsr_slave_1: entered promiscuous mode
[ 76.209061][ T5870] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 76.218243][ T5870] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 76.227392][ T5870] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 76.236266][ T5870] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 76.257157][ T5870] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.264273][ T5870] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 76.271670][ T5870] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.278742][ T5870] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 76.318425][ T5870] 8021q: adding VLAN 0 to HW filter on device bond0
[ 76.332051][ T12] bridge0: port 1(bridge_slave_0) entered disabled state
[ 76.339521][ T12] bridge0: port 2(bridge_slave_1) entered disabled state
[ 76.352477][ T5870] 8021q: adding VLAN 0 to HW filter on device team0
[ 76.362987][ T12] bridge0: port 1(bridge_slave_0) entered blocking state
[ 76.370406][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 76.382099][ T1023] bridge0: port 2(bridge_slave_1) entered blocking state
[ 76.389167][ T1023] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 76.523764][ T5870] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 76.558132][ T5870] veth0_vlan: entered promiscuous mode
[ 76.567375][ T5870] veth1_vlan: entered promiscuous mode
[ 76.588162][ T5870] veth0_macvtap: entered promiscuous mode
[ 76.596500][ T5870] veth1_macvtap: entered promiscuous mode
[ 76.612097][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 76.623940][ T5870] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 76.634886][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.645019][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.653840][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.663465][ T1023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 76.703017][ T5870] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[ 76.757708][ T1023] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 76.776411][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 76.784406][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 76.791872][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 76.799455][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 76.807119][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 76.816791][ T1023] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 76.865953][ T1023] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 76.926224][ T1023] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 77.224556][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.232520][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 77.255976][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 77.263920][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/08/20 07:56:03 executed programs: 0
[ 79.133326][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 79.140572][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 79.148511][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 79.156306][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 79.163989][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 79.274038][ T5964] chnl_net:caif_netlink_parms(): no params data found
[ 79.325744][ T5964] bridge0: port 1(bridge_slave_0) entered blocking state
[ 79.332919][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.340110][ T5964] bridge_slave_0: entered allmulticast mode
[ 79.347031][ T5964] bridge_slave_0: entered promiscuous mode
[ 79.354417][ T5964] bridge0: port 2(bridge_slave_1) entered blocking state
[ 79.361692][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.368797][ T5964] bridge_slave_1: entered allmulticast mode
[ 79.375590][ T5964] bridge_slave_1: entered promiscuous mode
[ 79.398216][ T5964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 79.410243][ T5964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 79.436303][ T5964] team0: Port device team_slave_0 added
[ 79.443890][ T5964] team0: Port device team_slave_1 added
[ 79.465821][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 79.473000][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 79.498915][ T5964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 79.511050][ T5964] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 79.517975][ T5964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[ 79.544725][ T5964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 79.594629][ T5964] hsr_slave_0: entered promiscuous mode
[ 79.601383][ T5964] hsr_slave_1: entered promiscuous mode
[ 79.607309][ T5964] debugfs: 'hsr0' already exists in 'hsr'
[ 79.613666][ T5964] Cannot create hsr debugfs directory
[ 79.662611][ T1023] bridge_slave_1: left allmulticast mode
[ 79.668260][ T1023] bridge_slave_1: left promiscuous mode
[ 79.674616][ T1023] bridge0: port 2(bridge_slave_1) entered disabled state
[ 79.684382][ T1023] bridge_slave_0: left allmulticast mode
[ 79.690014][ T1023] bridge_slave_0: left promiscuous mode
[ 79.696680][ T1023] bridge0: port 1(bridge_slave_0) entered disabled state
[ 79.810425][ T1023] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 79.825045][ T1023] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 79.836456][ T1023] bond0 (unregistering): Released all slaves
[ 79.937351][ T1023] hsr_slave_0: left promiscuous mode
[ 79.946540][ T1023] hsr_slave_1: left promiscuous mode
[ 79.952397][ T1023] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 79.959761][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 79.968956][ T1023] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 79.976600][ T1023] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 79.989446][ T1023] veth1_macvtap: left promiscuous mode
[ 79.995325][ T1023] veth0_macvtap: left promiscuous mode
[ 80.001684][ T1023] veth1_vlan: left promiscuous mode
[ 80.006965][ T1023] veth0_vlan: left promiscuous mode
[ 80.138431][ T1023] team0 (unregistering): Port device team_slave_1 removed
[ 80.150926][ T1023] team0 (unregistering): Port device team_slave_0 removed
[ 80.496543][ T5964] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 80.508946][ T5964] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 80.519161][ T5964] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 80.529305][ T5964] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 80.610078][ T5964] 8021q: adding VLAN 0 to HW filter on device bond0
[ 80.629494][ T5964] 8021q: adding VLAN 0 to HW filter on device team0
[ 80.944333][ T61] bridge0: port 1(bridge_slave_0) entered blocking state
[ 80.951522][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 80.988994][ T61] bridge0: port 2(bridge_slave_1) entered blocking state
[ 80.996131][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 81.250166][ T51] Bluetooth: hci0: command tx timeout
[ 81.359230][ T5964] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 81.428626][ T5964] veth0_vlan: entered promiscuous mode
[ 81.448450][ T5964] veth1_vlan: entered promiscuous mode
[ 81.506311][ T5964] veth0_macvtap: entered promiscuous mode
[ 81.533010][ T5964] veth1_macvtap: entered promiscuous mode
[ 81.565764][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 81.589997][ T5964] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 81.623991][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.638148][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.659717][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.676090][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 81.720528][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 81.734315][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 81.754519][ T1023] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 81.763658][ T1023] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 81.805552][ T6039] loop0: detected capacity change from 0 to 1024
[ 81.815848][ T6039] =======================================================
[ 81.815848][ T6039] WARNING: The mand mount option has been deprecated and
[ 81.815848][ T6039] and is ignored by this kernel. Remove the mand
[ 81.815848][ T6039] option from the mount to silence this warning.
[ 81.815848][ T6039] =======================================================
[ 81.867155][ T6039] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 81.879620][ T6039] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 81.894590][ T6039] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.17: lblock 3 mapped to illegal pblock 3 (length 3)
[ 81.909062][ T6039] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[ 81.921561][ T6039] EXT4-fs (loop0): This should not happen!! Data will be lost
[ 81.921561][ T6039]
[ 81.932352][ T6039] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.17: lblock 3 mapped to illegal pblock 3 (length 1)
[ 81.946768][ T6039] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.17: lblock 3 mapped to illegal pblock 3 (length 1)
[ 81.961746][ T6039] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.17: lblock 3 mapped to illegal pblock 3 (length 1)
[ 81.976790][ T6039] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.17: lblock 3 mapped to illegal pblock 3 (length 1)
[ 81.991256][ T6039] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.17: lblock 3 mapped to illegal pblock 3 (length 1)
[ 82.006216][ T6043] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.17: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[ 82.024433][ T6043] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem
[ 82.038477][ T5964] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 82.085882][ T6045] loop0: detected capacity change from 0 to 1024
[ 82.114303][ T6045] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 82.128519][ T6045] ext4 filesystem being mounted at /1/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 82.142651][ T6045] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.18: lblock 3 mapped to illegal pblock 3 (length 3)
[ 82.158544][ T6045] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[ 82.171555][ T6045] EXT4-fs (loop0): This should not happen!! Data will be lost
[ 82.171555][ T6045]
[ 82.182135][ T6045] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.18: lblock 3 mapped to illegal pblock 3 (length 1)
[ 82.196396][ T6045] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.18: lblock 3 mapped to illegal pblock 3 (length 1)
[ 82.211585][ T6045] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.18: lblock 3 mapped to illegal pblock 3 (length 1)
[ 82.225808][ T6045] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.18: lblock 3 mapped to illegal pblock 3 (length 1)
[ 82.240008][ T6045] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.18: lblock 3 mapped to illegal pblock 3 (length 1)
[ 82.255035][ T6048] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.18: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[ 82.273328][ T6048] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem
[ 82.288093][ T5964] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 82.317838][ T6050] loop0: detected capacity change from 0 to 1024
[ 82.354658][ T6050] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 82.369011][ T6050] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 82.383224][ T6050] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.19: lblock 3 mapped to illegal pblock 3 (length 3)
[ 82.397787][ T6050] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[ 82.413585][ T6050] EXT4-fs (loop0): This should not happen!! Data will be lost
[ 82.413585][ T6050]
[ 82.424291][ T6050] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.19: lblock 3 mapped to illegal pblock 3 (length 1)
[ 82.438482][ T6050] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.19: lblock 3 mapped to illegal pblock 3 (length 1)
[ 82.452833][ T6050] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.19: lblock 3 mapped to illegal pblock 3 (length 1)
[ 82.467229][ T6050] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.19: lblock 3 mapped to illegal pblock 3 (length 1)
[ 82.482250][ T6053] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.19: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[ 82.500536][ T6053] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem
[ 82.514252][ T5964] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 82.546056][ T6055] loop0: detected capacity change from 0 to 1024
[ 82.578072][ T6055] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 82.594792][ T6055] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 82.618189][ T6055] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.20: lblock 3 mapped to illegal pblock 3 (length 3)
[ 82.632837][ T6055] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[ 82.645353][ T6055] EXT4-fs (loop0): This should not happen!! Data will be lost
[ 82.645353][ T6055]
[ 82.656725][ T6055] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.20: lblock 3 mapped to illegal pblock 3 (length 1)
[ 82.671115][ T6055] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.20: lblock 3 mapped to illegal pblock 3 (length 1)
[ 82.685466][ T6055] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.20: lblock 3 mapped to illegal pblock 3 (length 1)
[ 82.699744][ T6055] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.20: lblock 3 mapped to illegal pblock 3 (length 1)
[ 82.713974][ T6055] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.20: lblock 3 mapped to illegal pblock 3 (length 1)
[ 82.728849][ T6058] EXT4-fs error (device loop0): ext4_ext_remove_space:2955: inode #15: comm syz.0.20: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0)
[ 82.747016][ T6058] EXT4-fs error (device loop0) in ext4_setattr:6071: Corrupt filesystem
[ 82.760472][ T5964] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0006-0000-000000000000.
[ 82.795532][ T6060] loop0: detected capacity change from 0 to 1024
[ 82.815468][ T6060] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none.
[ 82.828980][ T6060] ext4 filesystem being mounted at /4/file1 supports timestamps until 2038-01-19 (0x7fffffff)
[ 82.846051][ T6060] EXT4-fs error (device loop0): ext4_map_blocks:814: inode #15: block 3: comm syz.0.21: lblock 3 mapped to illegal pblock 3 (length 3)
[ 82.860376][ T6060] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117
[ 82.875478][ T6060] EXT4-fs (loop0): This should not happen!! Data will be lost
[ 82.875478][ T6060]
[ 82.887130][ T6060] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.21: lblock 3 mapped to illegal pblock 3 (length 1)
[ 82.901366][ T6060] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.21: lblock 3 mapped to illegal pblock 3 (length 1)
[ 82.915641][ T6060] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.21: lblock 3 mapped to illegal pblock 3 (length 1)
[ 82.931330][ T6060] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.21: lblock 3 mapped to illegal pblock 3 (length 1)
[ 82.945491][ T6060] EXT4-fs error (device loop0): ext4_map_blocks:778: inode #15: block 3: comm syz.0.21: lblock 3 mapped to illegal pblock 3 (length 1)
[ 82.959768][ T6060] ==================================================================
[ 82.967819][ T6060] BUG: KASAN: use-after-free in filemap_map_pages+0xc95/0x1740
[ 82.975351][ T6060] Read of size 8 at addr ffff8880319f3000 by task syz.0.21/6060
[ 82.982954][ T6060]
[ 82.985257][ T6060] CPU: 1 UID: 0 PID: 6060 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full)
[ 82.985278][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 82.985289][ T6060] Call Trace:
[ 82.985296][ T6060]
[ 82.985303][ T6060] dump_stack_lvl+0x189/0x250
[ 82.985330][ T6060] ? __pfx_dump_stack_lvl+0x10/0x10
[ 82.985351][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5
[ 82.985372][ T6060] ? lock_release+0x4b/0x3e0
[ 82.985401][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5
[ 82.985421][ T6060] ? __virt_addr_valid+0x4a5/0x5c0
[ 82.985446][ T6060] print_report+0xca/0x240
[ 82.985463][ T6060] ? filemap_map_pages+0xc95/0x1740
[ 82.985482][ T6060] kasan_report+0x118/0x150
[ 82.985509][ T6060] ? filemap_map_pages+0xc95/0x1740
[ 82.985532][ T6060] filemap_map_pages+0xc95/0x1740
[ 82.985550][ T6060] ? trace_sched_exit_tp+0x36/0x110
[ 82.985586][ T6060] ? filemap_map_pages+0x150/0x1740
[ 82.985608][ T6060] ? __pfx_filemap_map_pages+0x10/0x10
[ 82.985626][ T6060] ? rcu_is_watching+0x15/0xb0
[ 82.985646][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5
[ 82.985667][ T6060] ? lock_release+0x4b/0x3e0
[ 82.985693][ T6060] ? __handle_mm_fault+0x27b7/0x5440
[ 82.985716][ T6060] ? __handle_mm_fault+0x27b7/0x5440
[ 82.985740][ T6060] __handle_mm_fault+0x34ac/0x5440
[ 82.985771][ T6060] ? __pfx___handle_mm_fault+0x10/0x10
[ 82.985795][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5
[ 82.985815][ T6060] ? rcu_is_watching+0x15/0xb0
[ 82.985842][ T6060] handle_mm_fault+0x40a/0x8e0
[ 82.985869][ T6060] __get_user_pages+0x1699/0x2ce0
[ 82.985906][ T6060] populate_vma_page_range+0x29f/0x3a0
[ 82.985929][ T6060] ? __pfx_populate_vma_page_range+0x10/0x10
[ 82.985950][ T6060] ? userfaultfd_unmap_complete+0x278/0x2d0
[ 82.985977][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5
[ 82.985997][ T6060] ? down_read+0x1ad/0x2e0
[ 82.986014][ T6060] __mm_populate+0x24c/0x380
[ 82.986036][ T6060] ? __pfx___mm_populate+0x10/0x10
[ 82.986058][ T6060] ? up_write+0x1c4/0x420
[ 82.986079][ T6060] vm_mmap_pgoff+0x387/0x4d0
[ 82.986099][ T6060] ? rcu_is_watching+0x15/0xb0
[ 82.986118][ T6060] ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 82.986138][ T6060] ? lock_release+0x4b/0x3e0
[ 82.986162][ T6060] ? __se_sys_futex+0x36f/0x400
[ 82.986188][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5
[ 82.986208][ T6060] ? __fget_files+0x3a0/0x420
[ 82.986235][ T6060] ? __fget_files+0x2a/0x420
[ 82.986263][ T6060] ksys_mmap_pgoff+0x51f/0x760
[ 82.986290][ T6060] do_syscall_64+0xfa/0x3b0
[ 82.986316][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5
[ 82.986337][ T6060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 82.986354][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5
[ 82.986374][ T6060] ? exc_page_fault+0x9f/0xf0
[ 82.986398][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 82.986416][ T6060] RIP: 0033:0x7f157618ebe9
[ 82.986431][ T6060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 82.986446][ T6060] RSP: 002b:00007f15770a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 82.986464][ T6060] RAX: ffffffffffffffda RBX: 00007f15763b5fa0 RCX: 00007f157618ebe9
[ 82.986478][ T6060] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000
[ 82.986490][ T6060] RBP: 00007f1576211e19 R08: 0000000000000004 R09: 0000000000000000
[ 82.986502][ T6060] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000000
[ 82.986513][ T6060] R13: 00007f15763b6038 R14: 00007f15763b5fa0 R15: 00007fff4ca3fb28
[ 82.986534][ T6060]
[ 82.986540][ T6060]
[ 83.331595][ T6060] The buggy address belongs to the physical page:
[ 83.337977][ T6060] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0xffff8880319f3c80 pfn:0x319f3
[ 83.348014][ T6060] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff)
[ 83.355097][ T6060] page_type: f0(buddy)
[ 83.359140][ T6060] raw: 00fff00000000000 ffffea0000c60108 ffffea0001dca348 0000000000000000
[ 83.367700][ T6060] raw: ffff8880319f3c80 0000000000000000 00000000f0000000 0000000000000000
[ 83.376254][ T6060] page dumped because: kasan: bad access detected
[ 83.382637][ T6060] page_owner tracks the page as freed
[ 83.387973][ T6060] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x2dc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO|__GFP_NOWARN), pid 5929, tgid 5929 (syz-executor), ts 77864005374, free_ts 78063336401
[ 83.407134][ T6060] post_alloc_hook+0x240/0x2a0
[ 83.411888][ T6060] get_page_from_freelist+0x21e4/0x22c0
[ 83.417411][ T6060] __alloc_frozen_pages_noprof+0x181/0x370
[ 83.423192][ T6060] alloc_pages_mpol+0x232/0x4a0
[ 83.428025][ T6060] alloc_pages_noprof+0xa9/0x190
[ 83.432946][ T6060] __vmalloc_node_range_noprof+0x97d/0x12f0
[ 83.438823][ T6060] vmalloc_user_noprof+0xad/0xf0
[ 83.443748][ T6060] kcov_ioctl+0x55/0x640
[ 83.447972][ T6060] __se_sys_ioctl+0xfc/0x170
[ 83.452540][ T6060] do_syscall_64+0xfa/0x3b0
[ 83.457032][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 83.462899][ T6060] page last free pid 5930 tgid 5930 stack trace:
[ 83.469195][ T6060] __free_frozen_pages+0xbc4/0xd30
[ 83.474290][ T6060] vfree+0x25a/0x400
[ 83.478166][ T6060] kcov_close+0x28/0x50
[ 83.482308][ T6060] __fput+0x44c/0xa70
[ 83.486273][ T6060] task_work_run+0x1d4/0x260
[ 83.490859][ T6060] do_exit+0x6b5/0x2300
[ 83.495018][ T6060] do_group_exit+0x21c/0x2d0
[ 83.499595][ T6060] get_signal+0x1286/0x1340
[ 83.504072][ T6060] arch_do_signal_or_restart+0x9a/0x750
[ 83.509606][ T6060] exit_to_user_mode_loop+0x75/0x110
[ 83.514874][ T6060] do_syscall_64+0x2bd/0x3b0
[ 83.519450][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 83.525319][ T6060]
[ 83.527617][ T6060] Memory state around the buggy address:
[ 83.533218][ T6060] ffff8880319f2f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 83.541254][ T6060] ffff8880319f2f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00
[ 83.549292][ T6060] >ffff8880319f3000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 83.557323][ T6060] ^
[ 83.561366][ T6060] ffff8880319f3080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 83.569409][ T6060] ffff8880319f3100: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 83.577442][ T6060] ==================================================================
[ 83.586355][ T6060] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 83.593536][ T6060] CPU: 1 UID: 0 PID: 6060 Comm: syz.0.21 Not tainted syzkaller #0 PREEMPT(full)
[ 83.602622][ T6060] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025
[ 83.612655][ T6060] Call Trace:
[ 83.615912][ T6060]
[ 83.618819][ T6060] dump_stack_lvl+0x99/0x250
[ 83.623394][ T6060] ? __asan_memcpy+0x40/0x70
[ 83.627967][ T6060] ? __pfx_dump_stack_lvl+0x10/0x10
[ 83.633147][ T6060] ? __pfx__printk+0x10/0x10
[ 83.637724][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5
[ 83.643340][ T6060] vpanic+0x281/0x750
[ 83.647306][ T6060] ? __pfx_vpanic+0x10/0x10
[ 83.651791][ T6060] ? rcu_is_watching+0x15/0xb0
[ 83.656535][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5
[ 83.662153][ T6060] panic+0xb9/0xc0
[ 83.665855][ T6060] ? __pfx_panic+0x10/0x10
[ 83.670250][ T6060] ? _raw_spin_unlock_irqrestore+0xa8/0x110
[ 83.676126][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5
[ 83.681739][ T6060] ? _raw_spin_unlock_irqrestore+0xad/0x110
[ 83.687619][ T6060] ? filemap_map_pages+0xc95/0x1740
[ 83.692817][ T6060] check_panic_on_warn+0x89/0xb0
[ 83.697747][ T6060] ? filemap_map_pages+0xc95/0x1740
[ 83.702926][ T6060] end_report+0x78/0x160
[ 83.707158][ T6060] kasan_report+0x129/0x150
[ 83.711649][ T6060] ? filemap_map_pages+0xc95/0x1740
[ 83.716830][ T6060] filemap_map_pages+0xc95/0x1740
[ 83.721833][ T6060] ? trace_sched_exit_tp+0x36/0x110
[ 83.727024][ T6060] ? filemap_map_pages+0x150/0x1740
[ 83.732203][ T6060] ? __pfx_filemap_map_pages+0x10/0x10
[ 83.737642][ T6060] ? rcu_is_watching+0x15/0xb0
[ 83.742385][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5
[ 83.747996][ T6060] ? lock_release+0x4b/0x3e0
[ 83.752573][ T6060] ? __handle_mm_fault+0x27b7/0x5440
[ 83.757845][ T6060] ? __handle_mm_fault+0x27b7/0x5440
[ 83.763115][ T6060] __handle_mm_fault+0x34ac/0x5440
[ 83.768218][ T6060] ? __pfx___handle_mm_fault+0x10/0x10
[ 83.773662][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5
[ 83.779275][ T6060] ? rcu_is_watching+0x15/0xb0
[ 83.784027][ T6060] handle_mm_fault+0x40a/0x8e0
[ 83.788788][ T6060] __get_user_pages+0x1699/0x2ce0
[ 83.793811][ T6060] populate_vma_page_range+0x29f/0x3a0
[ 83.799253][ T6060] ? __pfx_populate_vma_page_range+0x10/0x10
[ 83.805211][ T6060] ? userfaultfd_unmap_complete+0x278/0x2d0
[ 83.811093][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5
[ 83.816712][ T6060] ? down_read+0x1ad/0x2e0
[ 83.821106][ T6060] __mm_populate+0x24c/0x380
[ 83.825685][ T6060] ? __pfx___mm_populate+0x10/0x10
[ 83.830779][ T6060] ? up_write+0x1c4/0x420
[ 83.835097][ T6060] vm_mmap_pgoff+0x387/0x4d0
[ 83.839670][ T6060] ? rcu_is_watching+0x15/0xb0
[ 83.844412][ T6060] ? __pfx_vm_mmap_pgoff+0x10/0x10
[ 83.849505][ T6060] ? lock_release+0x4b/0x3e0
[ 83.854080][ T6060] ? __se_sys_futex+0x36f/0x400
[ 83.858917][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5
[ 83.864531][ T6060] ? __fget_files+0x3a0/0x420
[ 83.869195][ T6060] ? __fget_files+0x2a/0x420
[ 83.873793][ T6060] ksys_mmap_pgoff+0x51f/0x760
[ 83.878543][ T6060] do_syscall_64+0xfa/0x3b0
[ 83.883038][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5
[ 83.888655][ T6060] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 83.894700][ T6060] ? srso_alias_return_thunk+0x5/0xfbef5
[ 83.900335][ T6060] ? exc_page_fault+0x9f/0xf0
[ 83.904997][ T6060] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 83.910870][ T6060] RIP: 0033:0x7f157618ebe9
[ 83.915267][ T6060] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 83.934850][ T6060] RSP: 002b:00007f15770a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009
[ 83.943241][ T6060] RAX: ffffffffffffffda RBX: 00007f15763b5fa0 RCX: 00007f157618ebe9
[ 83.951192][ T6060] RDX: 00000000027ffff7 RSI: 0000000000600000 RDI: 0000200000000000
[ 83.959144][ T6060] RBP: 00007f1576211e19 R08: 0000000000000004 R09: 0000000000000000
[ 83.967091][ T6060] R10: 0000000004012011 R11: 0000000000000246 R12: 0000000000000000
[ 83.975038][ T6060] R13: 00007f15763b6038 R14: 00007f15763b5fa0 R15: 00007fff4ca3fb28
[ 83.982996][ T6060]
[ 83.986220][ T6060] Kernel Offset: disabled
[ 83.990530][ T6060] Rebooting in 86400 seconds..