Warning: Permanently added '10.128.0.24' (ED25519) to the list of known hosts.
2025/12/24 05:28:24 parsed 1 programs
[ 80.396022][ T5804] cgroup: Unknown subsys name 'net'
[ 80.636195][ T5804] cgroup: Unknown subsys name 'cpuset'
[ 80.692131][ T5804] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[ 81.692628][ T44] cfg80211: failed to load regulatory.db
[ 82.431203][ T5804] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k
[ 87.525524][ T5848] chnl_net:caif_netlink_parms(): no params data found
[ 87.942331][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state
[ 87.944196][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state
[ 87.944364][ T5848] bridge_slave_0: entered allmulticast mode
[ 87.945819][ T5848] bridge_slave_0: entered promiscuous mode
[ 87.951592][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state
[ 87.951801][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state
[ 87.951936][ T5848] bridge_slave_1: entered allmulticast mode
[ 87.954278][ T5848] bridge_slave_1: entered promiscuous mode
[ 88.124314][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 88.126526][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 88.296349][ T5848] team0: Port device team_slave_0 added
[ 88.300902][ T5848] team0: Port device team_slave_1 added
[ 88.554334][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 88.554346][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 88.554360][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 88.736065][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 88.736082][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 88.736096][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 89.061422][ T5848] hsr_slave_0: entered promiscuous mode
[ 89.062758][ T5848] hsr_slave_1: entered promiscuous mode
[ 89.407003][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 89.449913][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 89.467505][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 89.505273][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 89.706627][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0
[ 89.721267][ T5848] 8021q: adding VLAN 0 to HW filter on device team0
[ 89.745958][ T3679] bridge0: port 1(bridge_slave_0) entered blocking state
[ 89.746792][ T3679] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 89.775054][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state
[ 89.775492][ T3679] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 89.977166][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 90.019345][ T5848] veth0_vlan: entered promiscuous mode
[ 90.033087][ T5848] veth1_vlan: entered promiscuous mode
[ 90.066710][ T5848] veth0_macvtap: entered promiscuous mode
[ 90.070020][ T5848] veth1_macvtap: entered promiscuous mode
[ 90.095027][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 90.110602][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 90.125317][ T1302] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.127101][ T1302] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.127143][ T1302] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.127175][ T1302] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 90.936230][ T5059] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 91.154497][ T5059] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 91.415639][ T5059] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 91.677410][ T5059] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[ 92.969992][ T5059] bridge_slave_1: left allmulticast mode
[ 92.970197][ T5059] bridge_slave_1: left promiscuous mode
[ 93.013304][ T5059] bridge0: port 2(bridge_slave_1) entered disabled state
[ 93.137255][ T5059] bridge_slave_0: left allmulticast mode
[ 93.137283][ T5059] bridge_slave_0: left promiscuous mode
[ 93.137679][ T5059] bridge0: port 1(bridge_slave_0) entered disabled state
[ 93.299988][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 93.309834][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 93.310973][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 93.339179][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 93.340093][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 94.912355][ T5059] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[ 94.972258][ T5059] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[ 94.993846][ T5059] bond0 (unregistering): Released all slaves
[ 95.281600][ T5059] hsr_slave_0: left promiscuous mode
[ 95.321614][ T5059] hsr_slave_1: left promiscuous mode
[ 95.323871][ T5059] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[ 95.323975][ T5059] batman_adv: batadv0: Removing interface: batadv_slave_0
[ 95.383488][ T5059] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[ 95.383515][ T5059] batman_adv: batadv0: Removing interface: batadv_slave_1
[ 95.443934][ T5120] Bluetooth: hci0: command tx timeout
[ 95.482839][ T5059] veth1_macvtap: left promiscuous mode
[ 95.482994][ T5059] veth0_macvtap: left promiscuous mode
[ 95.483458][ T5059] veth1_vlan: left promiscuous mode
[ 95.483675][ T5059] veth0_vlan: left promiscuous mode
[ 97.552168][ T5059] team0 (unregistering): Port device team_slave_1 removed
[ 97.722095][ T5059] team0 (unregistering): Port device team_slave_0 removed
[ 100.070852][ T3567] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.070877][ T3567] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 100.160714][ T3567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 100.160733][ T3567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/12/24 05:28:47 executed programs: 0
[ 101.668478][ T62] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[ 101.681795][ T62] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[ 101.691148][ T62] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[ 101.697030][ T62] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[ 101.697776][ T62] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[ 102.125051][ T5973] chnl_net:caif_netlink_parms(): no params data found
[ 102.394472][ T5973] bridge0: port 1(bridge_slave_0) entered blocking state
[ 102.394800][ T5973] bridge0: port 1(bridge_slave_0) entered disabled state
[ 102.394980][ T5973] bridge_slave_0: entered allmulticast mode
[ 102.397269][ T5973] bridge_slave_0: entered promiscuous mode
[ 102.406123][ T5973] bridge0: port 2(bridge_slave_1) entered blocking state
[ 102.406309][ T5973] bridge0: port 2(bridge_slave_1) entered disabled state
[ 102.406463][ T5973] bridge_slave_1: entered allmulticast mode
[ 102.408760][ T5973] bridge_slave_1: entered promiscuous mode
[ 102.553871][ T5973] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[ 102.556325][ T5973] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[ 103.045426][ T5973] team0: Port device team_slave_0 added
[ 103.050983][ T5973] team0: Port device team_slave_1 added
[ 103.644331][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_0
[ 103.644347][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 103.644370][ T5973] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[ 103.645815][ T5973] batman_adv: batadv0: Adding interface: batadv_slave_1
[ 103.645828][ T5973] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem.
[ 103.645850][ T5973] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[ 103.751553][ T62] Bluetooth: hci0: command tx timeout
[ 104.057587][ T5973] hsr_slave_0: entered promiscuous mode
[ 104.058395][ T5973] hsr_slave_1: entered promiscuous mode
[ 105.831642][ T62] Bluetooth: hci0: command tx timeout
[ 105.988705][ T5973] netdevsim netdevsim0 netdevsim0: renamed from eth0
[ 106.027177][ T5973] netdevsim netdevsim0 netdevsim1: renamed from eth1
[ 106.066367][ T5973] netdevsim netdevsim0 netdevsim2: renamed from eth2
[ 106.108125][ T5973] netdevsim netdevsim0 netdevsim3: renamed from eth3
[ 106.277684][ T5973] 8021q: adding VLAN 0 to HW filter on device bond0
[ 106.308692][ T5973] 8021q: adding VLAN 0 to HW filter on device team0
[ 106.325494][ T5059] bridge0: port 1(bridge_slave_0) entered blocking state
[ 106.325724][ T5059] bridge0: port 1(bridge_slave_0) entered forwarding state
[ 106.351620][ T3679] bridge0: port 2(bridge_slave_1) entered blocking state
[ 106.354436][ T3679] bridge0: port 2(bridge_slave_1) entered forwarding state
[ 106.695988][ T5973] 8021q: adding VLAN 0 to HW filter on device batadv0
[ 106.779381][ T5973] veth0_vlan: entered promiscuous mode
[ 106.797361][ T5973] veth1_vlan: entered promiscuous mode
[ 106.851256][ T5973] veth0_macvtap: entered promiscuous mode
[ 106.865582][ T5973] veth1_macvtap: entered promiscuous mode
[ 106.893577][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_0
[ 106.916012][ T5973] batman_adv: batadv0: Interface activated: batadv_slave_1
[ 106.938471][ T5059] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.938531][ T5059] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.938573][ T5059] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[ 106.938606][ T5059] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[ 107.164629][ T1302] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.164650][ T1302] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[ 107.235595][ T1302] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[ 107.235616][ T1302] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
2025/12/24 05:28:53 executed programs: 2
[ 107.417658][ T6077] loop0: detected capacity change from 0 to 1024
[ 107.420433][ T6077] =======================================================
[ 107.420433][ T6077] WARNING: The mand mount option has been deprecated and
[ 107.420433][ T6077] and is ignored by this kernel. Remove the mand
[ 107.420433][ T6077] option from the mount to silence this warning.
[ 107.420433][ T6077] =======================================================
[ 107.420548][ T6077] EXT4-fs: Ignoring removed orlov option
[ 107.420580][ T6077] EXT4-fs: inline encryption not supported
[ 107.533724][ T6077] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 107.640501][ T6077] EXT4-fs error (device loop0): ext4_free_blocks:6728: comm syz.0.17: Freeing blocks not in datazone - block = 268969104121008, count = 16
[ 107.681523][ T6077] EXT4-fs (loop0): Remounting filesystem read-only
[ 107.739375][ T5973] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000.
[ 107.816004][ T6089] loop0: detected capacity change from 0 to 1024
[ 107.816734][ T6089] EXT4-fs: Ignoring removed orlov option
[ 107.816750][ T6089] EXT4-fs: inline encryption not supported
[ 107.894372][ T6089] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback.
[ 107.913670][ T62] Bluetooth: hci0: command tx timeout
[ 107.992360][ T6089] ==================================================================
[ 107.992374][ T6089] BUG: KASAN: use-after-free in ext4_find_extent+0xae6/0xcc0
[ 107.992408][ T6089] Read of size 4 at addr ffff8880542f84d0 by task syz.0.18/6089
[ 107.992428][ T6089]
[ 107.992450][ T6089] CPU: 0 UID: 0 PID: 6089 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 107.992472][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 107.992488][ T6089] Call Trace:
[ 107.992501][ T6089]
[ 107.992507][ T6089] dump_stack_lvl+0xe8/0x150
[ 107.992528][ T6089] print_report+0xca/0x240
[ 107.992545][ T6089] ? ext4_find_extent+0xae6/0xcc0
[ 107.992563][ T6089] kasan_report+0x118/0x150
[ 107.992585][ T6089] ? ext4_find_extent+0xae6/0xcc0
[ 107.992605][ T6089] ext4_find_extent+0xae6/0xcc0
[ 107.992624][ T6089] ext4_ext_map_blocks+0x278/0x69c0
[ 107.992648][ T6089] ? __lock_acquire+0x6b6/0x2cf0
[ 107.992676][ T6089] ? do_raw_spin_lock+0x121/0x290
[ 107.992691][ T6089] ? __pfx_ext4_ext_map_blocks+0x10/0x10
[ 107.992710][ T6089] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 107.992724][ T6089] ? lockdep_hardirqs_on+0x7b/0x110
[ 107.992742][ T6089] ext4_map_blocks+0x82c/0x16f0
[ 107.992761][ T6089] ? __pfx_ext4_map_blocks+0x10/0x10
[ 107.992777][ T6089] ? percpu_ref_get_many+0x19/0x140
[ 107.992793][ T6089] _ext4_get_block+0x1fa/0x4c0
[ 107.992808][ T6089] ? __pfx__ext4_get_block+0x10/0x10
[ 107.992822][ T6089] ? __ext4_journal_ensure_credits+0x30/0x450
[ 107.992841][ T6089] ext4_block_write_begin+0xb03/0x1940
[ 107.992866][ T6089] ? __pfx_ext4_get_block+0x10/0x10
[ 107.992881][ T6089] ? __pfx_ext4_block_write_begin+0x10/0x10
[ 107.992900][ T6089] ? folio_mapping+0x16f/0x1f0
[ 107.992919][ T6089] ext4_write_begin+0xb3a/0x1870
[ 107.992972][ T6089] ? __pfx_ext4_write_begin+0x10/0x10
[ 107.992991][ T6089] ? __ext4_mark_inode_dirty+0x4c8/0x6e0
[ 107.993006][ T6089] ext4_da_write_begin+0x352/0xd30
[ 107.993031][ T6089] ? __pfx_ext4_da_write_begin+0x10/0x10
[ 107.993054][ T6089] generic_perform_write+0x29d/0x8c0
[ 107.993082][ T6089] ? __pfx_generic_perform_write+0x10/0x10
[ 107.993103][ T6089] ? file_update_time_flags+0x44e/0x4f0
[ 107.993121][ T6089] ? ext4_write_checks+0x24d/0x2d0
[ 107.993136][ T6089] ext4_buffered_write_iter+0xd0/0x3a0
[ 107.993153][ T6089] ext4_file_write_iter+0x293/0x1be0
[ 107.993168][ T6089] ? try_to_wake_up+0x82b/0x12b0
[ 107.993189][ T6089] ? vfs_write+0x217/0xb40
[ 107.993209][ T6089] ? vfs_write+0x217/0xb40
[ 107.993228][ T6089] ? __pfx_ext4_file_write_iter+0x10/0x10
[ 107.993247][ T6089] vfs_write+0x5d5/0xb40
[ 107.993266][ T6089] ? __pfx_ext4_file_write_iter+0x10/0x10
[ 107.993281][ T6089] ? __pfx_vfs_write+0x10/0x10
[ 107.993308][ T6089] ? __fget_files+0x2a/0x420
[ 107.993326][ T6089] __x64_sys_pwrite64+0x196/0x220
[ 107.993348][ T6089] ? __pfx___x64_sys_pwrite64+0x10/0x10
[ 107.993372][ T6089] do_syscall_64+0xec/0xf80
[ 107.993388][ T6089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.993404][ T6089] ? trace_irq_disable+0x37/0x100
[ 107.993421][ T6089] ? clear_bhb_loop+0x60/0xb0
[ 107.993436][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.993451][ T6089] RIP: 0033:0x7ff520abf749
[ 107.993474][ T6089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 107.993488][ T6089] RSP: 002b:00007ff520126038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[ 107.993508][ T6089] RAX: ffffffffffffffda RBX: 00007ff520d15fa0 RCX: 00007ff520abf749
[ 107.993528][ T6089] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000004
[ 107.993541][ T6089] RBP: 00007ff520b43f91 R08: 0000000000000000 R09: 0000000000000000
[ 107.993551][ T6089] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000
[ 107.993561][ T6089] R13: 00007ff520d16038 R14: 00007ff520d15fa0 R15: 00007fffaeb31538
[ 107.993579][ T6089]
[ 107.993585][ T6089]
[ 107.993589][ T6089] The buggy address belongs to the physical page:
[ 107.993604][ T6089] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x7ff7a57fc pfn:0x542f8
[ 107.993622][ T6089] flags: 0x80000000000000(node=0|zone=1)
[ 107.993646][ T6089] raw: 0080000000000000 dead000000000100 dead000000000122 0000000000000000
[ 107.993667][ T6089] raw: 00000007ff7a57fc 0000000000000000 00000000ffffffff 0000000000000000
[ 107.993675][ T6089] page dumped because: kasan: bad access detected
[ 107.993686][ T6089] page_owner tracks the page as freed
[ 107.993692][ T6089] page last allocated via order 0, migratetype Movable, gfp_mask 0x140dca(GFP_HIGHUSER_MOVABLE|__GFP_ZERO|__GFP_COMP), pid 5804, tgid 5804 (syz-executor), ts 82791033622, free_ts 83361585315
[ 107.993722][ T6089] post_alloc_hook+0x234/0x290
[ 107.993746][ T6089] get_page_from_freelist+0x28c0/0x2960
[ 107.993761][ T6089] __alloc_frozen_pages_noprof+0x181/0x370
[ 107.993777][ T6089] alloc_pages_mpol+0xd1/0x380
[ 107.993791][ T6089] vma_alloc_folio_noprof+0xe4/0x280
[ 107.993806][ T6089] folio_prealloc+0x30/0x180
[ 107.993829][ T6089] do_pte_missing+0x86a/0x27a0
[ 107.993845][ T6089] handle_mm_fault+0xcc1/0x1330
[ 107.993865][ T6089] do_user_addr_fault+0xa7c/0x1380
[ 107.993883][ T6089] exc_page_fault+0x71/0xd0
[ 107.993897][ T6089] asm_exc_page_fault+0x26/0x30
[ 107.993911][ T6089] page last free pid 5804 tgid 5804 stack trace:
[ 107.993921][ T6089] free_unref_folios+0xc28/0x1810
[ 107.993944][ T6089] folios_put_refs+0x569/0x670
[ 107.993958][ T6089] free_pages_and_swap_cache+0x277/0x520
[ 107.993978][ T6089] tlb_flush_mmu+0x3a0/0x680
[ 107.993992][ T6089] tlb_finish_mmu+0xc3/0x1d0
[ 107.994008][ T6089] vms_clear_ptes+0x42b/0x530
[ 107.994026][ T6089] vms_complete_munmap_vmas+0x206/0x8a0
[ 107.994041][ T6089] do_vmi_align_munmap+0x372/0x450
[ 107.994055][ T6089] do_vmi_munmap+0x253/0x2e0
[ 107.994071][ T6089] __vm_munmap+0x207/0x380
[ 107.994086][ T6089] __x64_sys_munmap+0x60/0x70
[ 107.994107][ T6089] do_syscall_64+0xec/0xf80
[ 107.994120][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.994135][ T6089]
[ 107.994138][ T6089] Memory state around the buggy address:
[ 107.994147][ T6089] ffff8880542f8380: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 107.994157][ T6089] ffff8880542f8400: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 107.994168][ T6089] >ffff8880542f8480: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 107.994175][ T6089] ^
[ 107.994184][ T6089] ffff8880542f8500: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 107.994194][ T6089] ffff8880542f8580: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff
[ 107.994203][ T6089] ==================================================================
[ 107.994321][ T6089] Kernel panic - not syncing: KASAN: panic_on_warn set ...
[ 107.994342][ T6089] CPU: 0 UID: 0 PID: 6089 Comm: syz.0.18 Not tainted syzkaller #0 PREEMPT_{RT,(full)}
[ 107.994362][ T6089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025
[ 107.994372][ T6089] Call Trace:
[ 107.994379][ T6089]
[ 107.994387][ T6089] vpanic+0x1e0/0x670
[ 107.994412][ T6089] panic+0xb9/0xc0
[ 107.994435][ T6089] ? __pfx_panic+0x10/0x10
[ 107.994459][ T6089] ? preempt_schedule_common+0x83/0xd0
[ 107.994486][ T6089] ? ext4_find_extent+0xae6/0xcc0
[ 107.994508][ T6089] check_panic_on_warn+0x89/0xb0
[ 107.994534][ T6089] ? ext4_find_extent+0xae6/0xcc0
[ 107.994556][ T6089] end_report+0x6f/0x140
[ 107.994582][ T6089] kasan_report+0x129/0x150
[ 107.994609][ T6089] ? ext4_find_extent+0xae6/0xcc0
[ 107.994635][ T6089] ext4_find_extent+0xae6/0xcc0
[ 107.994668][ T6089] ext4_ext_map_blocks+0x278/0x69c0
[ 107.994699][ T6089] ? __lock_acquire+0x6b6/0x2cf0
[ 107.994727][ T6089] ? do_raw_spin_lock+0x121/0x290
[ 107.994747][ T6089] ? __pfx_ext4_ext_map_blocks+0x10/0x10
[ 107.994775][ T6089] ? _raw_spin_unlock_irqrestore+0x30/0x80
[ 107.994793][ T6089] ? lockdep_hardirqs_on+0x7b/0x110
[ 107.994816][ T6089] ext4_map_blocks+0x82c/0x16f0
[ 107.994841][ T6089] ? __pfx_ext4_map_blocks+0x10/0x10
[ 107.994864][ T6089] ? percpu_ref_get_many+0x19/0x140
[ 107.994885][ T6089] _ext4_get_block+0x1fa/0x4c0
[ 107.994903][ T6089] ? __pfx__ext4_get_block+0x10/0x10
[ 107.994924][ T6089] ? __ext4_journal_ensure_credits+0x30/0x450
[ 107.994949][ T6089] ext4_block_write_begin+0xb03/0x1940
[ 107.994975][ T6089] ? __pfx_ext4_get_block+0x10/0x10
[ 107.994992][ T6089] ? __pfx_ext4_block_write_begin+0x10/0x10
[ 107.995010][ T6089] ? folio_mapping+0x16f/0x1f0
[ 107.995033][ T6089] ext4_write_begin+0xb3a/0x1870
[ 107.995068][ T6089] ? __pfx_ext4_write_begin+0x10/0x10
[ 107.995094][ T6089] ? __ext4_mark_inode_dirty+0x4c8/0x6e0
[ 107.995114][ T6089] ext4_da_write_begin+0x352/0xd30
[ 107.995146][ T6089] ? __pfx_ext4_da_write_begin+0x10/0x10
[ 107.995176][ T6089] generic_perform_write+0x29d/0x8c0
[ 107.995208][ T6089] ? __pfx_generic_perform_write+0x10/0x10
[ 107.995234][ T6089] ? file_update_time_flags+0x44e/0x4f0
[ 107.995261][ T6089] ? ext4_write_checks+0x24d/0x2d0
[ 107.995282][ T6089] ext4_buffered_write_iter+0xd0/0x3a0
[ 107.995304][ T6089] ext4_file_write_iter+0x293/0x1be0
[ 107.995325][ T6089] ? try_to_wake_up+0x82b/0x12b0
[ 107.995357][ T6089] ? vfs_write+0x217/0xb40
[ 107.995382][ T6089] ? vfs_write+0x217/0xb40
[ 107.995404][ T6089] ? __pfx_ext4_file_write_iter+0x10/0x10
[ 107.995427][ T6089] vfs_write+0x5d5/0xb40
[ 107.995453][ T6089] ? __pfx_ext4_file_write_iter+0x10/0x10
[ 107.995472][ T6089] ? __pfx_vfs_write+0x10/0x10
[ 107.995500][ T6089] ? __fget_files+0x2a/0x420
[ 107.995522][ T6089] __x64_sys_pwrite64+0x196/0x220
[ 107.995550][ T6089] ? __pfx___x64_sys_pwrite64+0x10/0x10
[ 107.995580][ T6089] do_syscall_64+0xec/0xf80
[ 107.995598][ T6089] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.995616][ T6089] ? trace_irq_disable+0x37/0x100
[ 107.995635][ T6089] ? clear_bhb_loop+0x60/0xb0
[ 107.995656][ T6089] entry_SYSCALL_64_after_hwframe+0x77/0x7f
[ 107.995680][ T6089] RIP: 0033:0x7ff520abf749
[ 107.995696][ T6089] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[ 107.995711][ T6089] RSP: 002b:00007ff520126038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012
[ 107.995731][ T6089] RAX: ffffffffffffffda RBX: 00007ff520d15fa0 RCX: 00007ff520abf749
[ 107.995746][ T6089] RDX: 000000000000fdef RSI: 0000200000000140 RDI: 0000000000000004
[ 107.995758][ T6089] RBP: 00007ff520b43f91 R08: 0000000000000000 R09: 0000000000000000
[ 107.995770][ T6089] R10: 0000000000000e7c R11: 0000000000000246 R12: 0000000000000000
[ 107.995782][ T6089] R13: 00007ff520d16038 R14: 00007ff520d15fa0 R15: 00007fffaeb31538
[ 107.995802][ T6089]
[ 107.995952][ T6089] Kernel Offset: disabled