Warning: Permanently added '10.128.0.83' (ED25519) to the list of known hosts. 2026/10/11 03:27:08 parsed 1 programs 2026/10/11 03:27:08 serving rpc on tcp://37651 [ 83.263963][ T4283] cgroup: Unknown subsys name 'net' [ 83.394124][ T4283] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.975428][ T4283] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 87.329861][ T4313] chnl_net:caif_netlink_parms(): no params data found [ 87.412880][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.420955][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.431129][ T4313] device bridge_slave_0 entered promiscuous mode [ 87.442212][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.450257][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.459429][ T4313] device bridge_slave_1 entered promiscuous mode [ 87.483796][ T4313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.494835][ T4313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.518745][ T4313] team0: Port device team_slave_0 added [ 87.528016][ T4313] team0: Port device team_slave_1 added [ 87.552019][ T4313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.559247][ T4313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.585570][ T4313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.609131][ T4313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.616124][ T4313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.642768][ T4313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.684397][ T4313] device hsr_slave_0 entered promiscuous mode [ 87.691331][ T4313] device hsr_slave_1 entered promiscuous mode [ 87.820432][ T4313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.832523][ T4313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.841883][ T4313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.857007][ T4313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.888280][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.895495][ T4313] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.903376][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.910522][ T4313] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.971385][ T4313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.995854][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 88.006346][ T76] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.015541][ T76] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.038157][ T4313] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.051501][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 88.061079][ T76] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.068275][ T76] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.083118][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 88.092641][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.099808][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.127618][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 88.141639][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 88.164319][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 88.176650][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 88.186061][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 88.207850][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 88.216538][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 88.230322][ T4313] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 88.449006][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 88.456726][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 88.471974][ T4313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.490608][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 88.499550][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 88.520864][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 88.530672][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 88.539775][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 88.548141][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 88.558364][ T4313] device veth0_vlan entered promiscuous mode [ 88.570207][ T4313] device veth1_vlan entered promiscuous mode [ 88.591376][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 88.600098][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 88.608414][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 88.617576][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 88.629462][ T4313] device veth0_macvtap entered promiscuous mode [ 88.640065][ T4313] device veth1_macvtap entered promiscuous mode [ 88.657659][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.669261][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 88.680297][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 88.688984][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 88.699190][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 88.711790][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.721130][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 88.729937][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 88.742980][ T4313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.752100][ T4313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.761454][ T4313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.770814][ T4313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.900400][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.660818][ T76] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.673810][ T76] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.683903][ T47] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 90.705552][ T47] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.713546][ T47] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.721511][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 90.913274][ T4369] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 90.922269][ T4369] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 90.930955][ T4369] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 90.939081][ T4369] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 90.946652][ T4369] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 90.954589][ T4369] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.391647][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 2026/10/11 03:27:19 executed programs: 0 [ 91.505153][ T49] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 91.513657][ T49] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 91.522130][ T49] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 91.530476][ T49] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 91.543462][ T49] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 91.551696][ T49] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 91.676349][ T4379] chnl_net:caif_netlink_parms(): no params data found [ 91.725005][ T4379] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.733043][ T4379] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.741240][ T4379] device bridge_slave_0 entered promiscuous mode [ 91.750524][ T4379] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.758048][ T4379] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.766052][ T4379] device bridge_slave_1 entered promiscuous mode [ 91.788755][ T4379] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.799972][ T4379] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.825568][ T4379] team0: Port device team_slave_0 added [ 91.833282][ T4379] team0: Port device team_slave_1 added [ 91.851352][ T128] cfg80211: failed to load regulatory.db [ 91.861038][ T4379] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.868156][ T4379] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.894425][ T4379] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.911108][ T4379] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.918219][ T4379] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.944472][ T4379] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.976842][ T4379] device hsr_slave_0 entered promiscuous mode [ 91.983726][ T4379] device hsr_slave_1 entered promiscuous mode [ 91.990542][ T4379] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.998708][ T4379] Cannot create hsr debugfs directory [ 93.609046][ T4369] Bluetooth: hci0: command 0x0409 tx timeout [ 93.848925][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.940587][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.736964][ T11] device hsr_slave_0 left promiscuous mode [ 94.748847][ T11] device hsr_slave_1 left promiscuous mode [ 94.755845][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.766031][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.776045][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.786023][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.794358][ T11] device bridge_slave_1 left promiscuous mode [ 94.804035][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.816450][ T11] device bridge_slave_0 left promiscuous mode [ 94.826353][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.856244][ T11] device veth1_macvtap left promiscuous mode [ 94.865127][ T11] device veth0_macvtap left promiscuous mode [ 94.871929][ T11] device veth1_vlan left promiscuous mode [ 94.880656][ T11] device veth0_vlan left promiscuous mode [ 95.351123][ T11] team0 (unregistering): Port device team_slave_1 removed [ 95.379732][ T11] team0 (unregistering): Port device team_slave_0 removed [ 95.407629][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 95.438337][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 95.646467][ T11] bond0 (unregistering): Released all slaves [ 95.689045][ T4369] Bluetooth: hci0: command 0x041b tx timeout [ 95.726374][ T4379] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 95.739052][ T4379] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 95.750043][ T4379] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 95.760008][ T4379] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 95.840677][ T4379] 8021q: adding VLAN 0 to HW filter on device bond0 [ 95.866761][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 95.875225][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 95.891819][ T4379] 8021q: adding VLAN 0 to HW filter on device team0 [ 95.922748][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 95.931756][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 95.940424][ T33] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.947556][ T33] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.955717][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 95.967462][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 95.976292][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 95.987171][ T33] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.994386][ T33] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.008776][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 96.021803][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 96.035409][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 96.045402][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 96.055518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 96.071172][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 96.080411][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 96.097630][ T4379] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 96.112202][ T4379] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 96.125009][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 96.134105][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 96.143446][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 96.152805][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 96.161671][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 96.412543][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 96.420444][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 96.443368][ T4379] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.475470][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 96.485527][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 96.507260][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 96.518525][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 96.533908][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 96.542323][ T76] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 96.556137][ T4379] device veth0_vlan entered promiscuous mode [ 96.570319][ T4379] device veth1_vlan entered promiscuous mode [ 96.613852][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.622866][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.631896][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.641253][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.652005][ T4379] device veth0_macvtap entered promiscuous mode [ 96.662873][ T4379] device veth1_macvtap entered promiscuous mode [ 96.680151][ T4379] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.687572][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.696737][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.705718][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 96.714826][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 96.734699][ T4379] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.743250][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 96.752154][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 96.763459][ T4379] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.773263][ T4379] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.782123][ T4379] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.791189][ T4379] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.843317][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.856917][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.866794][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 96.890164][ T4415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.898448][ T4415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.906032][ T4415] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 96.999656][ T4439] loop0: detected capacity change from 0 to 8192 [ 97.022173][ T4439] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 97.039163][ T4439] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 97.050308][ T4439] REISERFS (device loop0): using ordered data mode [ 97.056913][ T4439] reiserfs: using flush barriers [ 97.067927][ T4439] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 97.109730][ T4439] REISERFS (device loop0): checking transaction log (loop0) [ 97.126622][ T4439] REISERFS (device loop0): Using r5 hash to sort names [ 97.144798][ T4439] REISERFS (device loop0): using 3.5.x disk format [ 97.155180][ T4439] ================================================================== [ 97.163388][ T4439] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x7b4/0x11d0 [ 97.171028][ T4439] Read of size 18446744073709551584 at addr ffff88805b741fa4 by task syz.0.17/4439 [ 97.180792][ T4439] [ 97.183284][ T4439] CPU: 1 PID: 4439 Comm: syz.0.17 Not tainted syzkaller #0 [ 97.190698][ T4439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 97.201008][ T4439] Call Trace: [ 97.204423][ T4439] [ 97.207388][ T4439] dump_stack_lvl+0x188/0x24e [ 97.212121][ T4439] ? __lock_acquire+0x7ea0/0x7ea0 [ 97.217313][ T4439] ? show_regs_print_info+0x12/0x12 [ 97.222578][ T4439] ? load_image+0x410/0x410 [ 97.227128][ T4439] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 97.232648][ T4439] ? __virt_addr_valid+0x188/0x540 [ 97.237816][ T4439] ? __virt_addr_valid+0x467/0x540 [ 97.242983][ T4439] ? leaf_paste_entries+0x7b4/0x11d0 [ 97.248405][ T4439] print_report+0xa8/0x210 [ 97.252862][ T4439] kasan_report+0x10b/0x140 [ 97.257419][ T4439] ? leaf_paste_entries+0x7b4/0x11d0 [ 97.262799][ T4439] ? leaf_paste_entries+0x7b4/0x11d0 [ 97.268139][ T4439] kasan_check_range+0x235/0x290 [ 97.273134][ T4439] ? leaf_paste_entries+0x7b4/0x11d0 [ 97.278468][ T4439] memmove+0x25/0x60 [ 97.282410][ T4439] leaf_paste_entries+0x7b4/0x11d0 [ 97.287662][ T4439] balance_leaf+0xc14c/0x10ec0 [ 97.292482][ T4439] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 97.298431][ T4439] ? _raw_spin_unlock+0x40/0x40 [ 97.303344][ T4439] ? do_balance+0x930/0x930 [ 97.307898][ T4439] ? stack_trace_save+0xa6/0xf0 [ 97.312798][ T4439] ? __stack_depot_save+0x439/0x480 [ 97.318047][ T4439] ? kasan_set_track+0x60/0x70 [ 97.322860][ T4439] ? kasan_set_track+0x4b/0x70 [ 97.327674][ T4439] ? __kasan_kmalloc+0x8e/0xa0 [ 97.332497][ T4439] ? __kmalloc+0xb3/0x240 [ 97.336871][ T4439] ? fix_nodes+0x63f2/0x8720 [ 97.341542][ T4439] ? reiserfs_paste_into_item+0x60b/0x7f0 [ 97.347302][ T4439] ? reiserfs_add_entry+0x9bd/0xd80 [ 97.352554][ T4439] ? reiserfs_mkdir+0x6be/0x920 [ 97.357454][ T4439] ? reiserfs_xattr_init+0x33a/0x720 [ 97.362787][ T4439] ? reiserfs_fill_super+0x1d0c/0x20e0 [ 97.368284][ T4439] ? mount_bdev+0x28a/0x3c0 [ 97.372833][ T4439] ? legacy_get_tree+0xe6/0x180 [ 97.377723][ T4439] ? vfs_get_tree+0x88/0x270 [ 97.382363][ T4439] ? do_new_mount+0x247/0xa40 [ 97.387079][ T4439] ? __se_sys_mount+0x2e3/0x3d0 [ 97.391967][ T4439] ? do_syscall_64+0x4c/0xa0 [ 97.396600][ T4439] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.402718][ T4439] ? __wake_up+0x1a0/0x1a0 [ 97.407183][ T4439] ? get_parents+0x3d9/0xcd0 [ 97.411811][ T4439] ? get_neighbors+0x98d/0x1000 [ 97.416722][ T4439] ? reiserfs_prepare_for_journal+0x267/0x280 [ 97.422833][ T4439] ? fix_nodes+0x7f2d/0x8720 [ 97.427500][ T4439] do_balance+0x318/0x930 [ 97.431886][ T4439] ? get_right_neighbor_position+0x210/0x210 [ 97.437915][ T4439] ? reiserfs_paste_into_item+0x3ba/0x7f0 [ 97.443678][ T4439] reiserfs_paste_into_item+0x744/0x7f0 [ 97.449279][ T4439] ? reiserfs_cut_from_item+0x2000/0x2000 [ 97.455087][ T4439] ? reiserfs_get_parent+0x2f0/0x2f0 [ 97.460430][ T4439] ? inode2sd_v1+0x50a/0x990 [ 97.465073][ T4439] ? _find_first_zero_bit+0x62/0x100 [ 97.470401][ T4439] reiserfs_add_entry+0x9bd/0xd80 [ 97.475494][ T4439] ? drop_new_inode+0x60/0x60 [ 97.480230][ T4439] ? journal_begin+0x1f1/0x350 [ 97.485065][ T4439] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 97.491535][ T4439] reiserfs_mkdir+0x6be/0x920 [ 97.496266][ T4439] ? reiserfs_symlink+0x7a0/0x7a0 [ 97.501351][ T4439] ? rwsem_write_trylock+0x135/0x1c0 [ 97.506681][ T4439] ? clear_nonspinnable+0x60/0x60 [ 97.511745][ T4439] ? lookup_one_len+0x19d/0x2d0 [ 97.516639][ T4439] ? lookup_one_common+0x450/0x450 [ 97.521794][ T4439] reiserfs_xattr_init+0x33a/0x720 [ 97.526965][ T4439] reiserfs_fill_super+0x1d0c/0x20e0 [ 97.532302][ T4439] ? reiserfs_kill_sb+0x140/0x140 [ 97.537371][ T4439] ? snprintf+0xe5/0x140 [ 97.541708][ T4439] ? vscnprintf+0x80/0x80 [ 97.546086][ T4439] ? up_write+0x1b6/0x410 [ 97.550469][ T4439] ? set_blocksize+0x1d0/0x470 [ 97.555248][ T4439] ? sb_set_blocksize+0xa5/0xe0 [ 97.560123][ T4439] mount_bdev+0x28a/0x3c0 [ 97.564463][ T4439] ? reiserfs_kill_sb+0x140/0x140 [ 97.569585][ T4439] legacy_get_tree+0xe6/0x180 [ 97.574275][ T4439] ? remove_save_link+0x3e0/0x3e0 [ 97.579318][ T4439] vfs_get_tree+0x88/0x270 [ 97.583743][ T4439] do_new_mount+0x247/0xa40 [ 97.588259][ T4439] __se_sys_mount+0x2e3/0x3d0 [ 97.592979][ T4439] ? __x64_sys_mount+0xc0/0xc0 [ 97.597768][ T4439] ? lockdep_hardirqs_on+0x94/0x140 [ 97.603251][ T4439] ? __x64_sys_mount+0x1c/0xc0 [ 97.608031][ T4439] do_syscall_64+0x4c/0xa0 [ 97.612592][ T4439] ? clear_bhb_loop+0x60/0xb0 [ 97.617372][ T4439] ? clear_bhb_loop+0x60/0xb0 [ 97.622065][ T4439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 97.628430][ T4439] RIP: 0033:0x7f555199f44a [ 97.632875][ T4439] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 97.652586][ T4439] RSP: 002b:00007fff7930bfc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 97.661033][ T4439] RAX: ffffffffffffffda RBX: 00007fff7930c050 RCX: 00007f555199f44a [ 97.669029][ T4439] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 00007fff7930c010 [ 97.677009][ T4439] RBP: 00002000000000c0 R08: 00007fff7930c050 R09: 0000000000000000 [ 97.684985][ T4439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000140 [ 97.692965][ T4439] R13: 00007fff7930c010 R14: 0000000000001117 R15: 00002000000001c0 [ 97.701039][ T4439] [ 97.704061][ T4439] [ 97.706384][ T4439] The buggy address belongs to the physical page: [ 97.712917][ T4439] page:ffffea00016dd040 refcount:3 mapcount:0 mapping:ffff8881408fca00 index:0x213 pfn:0x5b741 [ 97.723268][ T4439] memcg:ffff888028630000 [ 97.727532][ T4439] aops:def_blk_aops ino:700000 [ 97.732331][ T4439] flags: 0xfff18000002042(referenced|workingset|private|node=0|zone=1|lastcpupid=0x7ff) [ 97.742058][ T4439] raw: 00fff18000002042 0000000000000000 dead000000000122 ffff8881408fca00 [ 97.750659][ T4439] raw: 0000000000000213 ffff888061e47658 00000003ffffffff ffff888028630000 [ 97.759242][ T4439] page dumped because: kasan: bad access detected [ 97.765770][ T4439] page_owner tracks the page as allocated [ 97.771483][ T4439] page last allocated via order 0, migratetype Movable, gfp_mask 0x148c48(GFP_NOFS|__GFP_NOFAIL|__GFP_COMP|__GFP_HARDWALL|__GFP_MOVABLE), pid 4439, tgid 4439 (syz.0.17), ts 97125849819, free_ts 26021286678 [ 97.791458][ T4439] post_alloc_hook+0x173/0x1a0 [ 97.796361][ T4439] get_page_from_freelist+0x206b/0x2180 [ 97.802007][ T4439] __alloc_pages+0x1ec/0x4f0 [ 97.806610][ T4439] folio_alloc+0x1c/0x60 [ 97.810868][ T4439] filemap_alloc_folio+0xdb/0x480 [ 97.815906][ T4439] __filemap_get_folio+0x6ba/0xde0 [ 97.821040][ T4439] pagecache_get_page+0x26/0x260 [ 97.825988][ T4439] __getblk_gfp+0x2a0/0xa80 [ 97.830504][ T4439] search_by_key+0x454/0x4540 [ 97.835187][ T4439] reiserfs_read_locked_inode+0x195/0x24c0 [ 97.841023][ T4439] reiserfs_fill_super+0x10d7/0x20e0 [ 97.846334][ T4439] mount_bdev+0x28a/0x3c0 [ 97.850684][ T4439] legacy_get_tree+0xe6/0x180 [ 97.855464][ T4439] vfs_get_tree+0x88/0x270 [ 97.859901][ T4439] do_new_mount+0x247/0xa40 [ 97.864441][ T4439] __se_sys_mount+0x2e3/0x3d0 [ 97.869160][ T4439] page last free stack trace: [ 97.873848][ T4439] free_unref_page_prepare+0x8e5/0x9e0 [ 97.879340][ T4439] free_unref_page+0x2e/0x3f0 [ 97.884034][ T4439] free_contig_range+0x9d/0x150 [ 97.888890][ T4439] destroy_args+0xef/0xa0e [ 97.893315][ T4439] debug_vm_pgtable+0x33c/0x38e [ 97.898181][ T4439] do_one_initcall+0x257/0x800 [ 97.903054][ T4439] do_initcall_level+0x13d/0x1ed [ 97.908020][ T4439] do_initcalls+0x4b/0x8a [ 97.912471][ T4439] kernel_init_freeable+0x401/0x5ab [ 97.917708][ T4439] kernel_init+0x19/0x1b0 [ 97.922061][ T4439] ret_from_fork+0x1f/0x30 [ 97.926494][ T4439] [ 97.928818][ T4439] Memory state around the buggy address: [ 97.934448][ T4439] ffff88805b741e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 97.942516][ T4439] ffff88805b741f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 97.950594][ T4439] >ffff88805b741f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 97.958690][ T4439] ^ [ 97.963829][ T4439] ffff88805b742000: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 97.971909][ T4439] ffff88805b742080: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 97.979974][ T4439] ================================================================== [ 97.998088][ T4369] Bluetooth: hci0: command 0x040f tx timeout [ 98.012283][ T4439] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 98.019542][ T4439] CPU: 0 PID: 4439 Comm: syz.0.17 Not tainted syzkaller #0 [ 98.026777][ T4439] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 98.036886][ T4439] Call Trace: [ 98.040201][ T4439] [ 98.043181][ T4439] dump_stack_lvl+0x188/0x24e [ 98.047903][ T4439] ? memcpy+0x3c/0x60 [ 98.051926][ T4439] ? show_regs_print_info+0x12/0x12 [ 98.057179][ T4439] ? load_image+0x410/0x410 [ 98.061744][ T4439] panic+0x2d3/0x710 [ 98.065687][ T4439] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 98.071903][ T4439] ? bpf_jit_dump+0xd0/0xd0 [ 98.076462][ T4439] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 98.082486][ T4439] ? _raw_spin_unlock+0x40/0x40 [ 98.087378][ T4439] check_panic_on_warn+0x80/0xa0 [ 98.092363][ T4439] ? leaf_paste_entries+0x7b4/0x11d0 [ 98.097663][ T4439] end_report+0x66/0x110 [ 98.101977][ T4439] kasan_report+0x118/0x140 [ 98.106509][ T4439] ? leaf_paste_entries+0x7b4/0x11d0 [ 98.111807][ T4439] ? leaf_paste_entries+0x7b4/0x11d0 [ 98.117119][ T4439] kasan_check_range+0x235/0x290 [ 98.122076][ T4439] ? leaf_paste_entries+0x7b4/0x11d0 [ 98.127737][ T4439] memmove+0x25/0x60 [ 98.131663][ T4439] leaf_paste_entries+0x7b4/0x11d0 [ 98.136806][ T4439] balance_leaf+0xc14c/0x10ec0 [ 98.141595][ T4439] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 98.147504][ T4439] ? _raw_spin_unlock+0x40/0x40 [ 98.152383][ T4439] ? do_balance+0x930/0x930 [ 98.156919][ T4439] ? stack_trace_save+0xa6/0xf0 [ 98.161796][ T4439] ? __stack_depot_save+0x439/0x480 [ 98.167100][ T4439] ? kasan_set_track+0x60/0x70 [ 98.171919][ T4439] ? kasan_set_track+0x4b/0x70 [ 98.176807][ T4439] ? __kasan_kmalloc+0x8e/0xa0 [ 98.181589][ T4439] ? __kmalloc+0xb3/0x240 [ 98.185922][ T4439] ? fix_nodes+0x63f2/0x8720 [ 98.190525][ T4439] ? reiserfs_paste_into_item+0x60b/0x7f0 [ 98.196282][ T4439] ? reiserfs_add_entry+0x9bd/0xd80 [ 98.201496][ T4439] ? reiserfs_mkdir+0x6be/0x920 [ 98.206448][ T4439] ? reiserfs_xattr_init+0x33a/0x720 [ 98.211746][ T4439] ? reiserfs_fill_super+0x1d0c/0x20e0 [ 98.217222][ T4439] ? mount_bdev+0x28a/0x3c0 [ 98.221749][ T4439] ? legacy_get_tree+0xe6/0x180 [ 98.226612][ T4439] ? vfs_get_tree+0x88/0x270 [ 98.231568][ T4439] ? do_new_mount+0x247/0xa40 [ 98.236285][ T4439] ? __se_sys_mount+0x2e3/0x3d0 [ 98.241143][ T4439] ? do_syscall_64+0x4c/0xa0 [ 98.245742][ T4439] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.251828][ T4439] ? __wake_up+0x1a0/0x1a0 [ 98.256344][ T4439] ? get_parents+0x3d9/0xcd0 [ 98.261127][ T4439] ? get_neighbors+0x98d/0x1000 [ 98.266021][ T4439] ? reiserfs_prepare_for_journal+0x267/0x280 [ 98.272294][ T4439] ? fix_nodes+0x7f2d/0x8720 [ 98.276916][ T4439] do_balance+0x318/0x930 [ 98.281359][ T4439] ? get_right_neighbor_position+0x210/0x210 [ 98.287365][ T4439] ? reiserfs_paste_into_item+0x3ba/0x7f0 [ 98.293304][ T4439] reiserfs_paste_into_item+0x744/0x7f0 [ 98.298878][ T4439] ? reiserfs_cut_from_item+0x2000/0x2000 [ 98.304635][ T4439] ? reiserfs_get_parent+0x2f0/0x2f0 [ 98.310197][ T4439] ? inode2sd_v1+0x50a/0x990 [ 98.314896][ T4439] ? _find_first_zero_bit+0x62/0x100 [ 98.320302][ T4439] reiserfs_add_entry+0x9bd/0xd80 [ 98.325449][ T4439] ? drop_new_inode+0x60/0x60 [ 98.330170][ T4439] ? journal_begin+0x1f1/0x350 [ 98.334960][ T4439] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 98.341410][ T4439] reiserfs_mkdir+0x6be/0x920 [ 98.346111][ T4439] ? reiserfs_symlink+0x7a0/0x7a0 [ 98.351186][ T4439] ? rwsem_write_trylock+0x135/0x1c0 [ 98.356487][ T4439] ? clear_nonspinnable+0x60/0x60 [ 98.361566][ T4439] ? lookup_one_len+0x19d/0x2d0 [ 98.366710][ T4439] ? lookup_one_common+0x450/0x450 [ 98.371842][ T4439] reiserfs_xattr_init+0x33a/0x720 [ 98.376997][ T4439] reiserfs_fill_super+0x1d0c/0x20e0 [ 98.382423][ T4439] ? reiserfs_kill_sb+0x140/0x140 [ 98.387455][ T4439] ? snprintf+0xe5/0x140 [ 98.391718][ T4439] ? vscnprintf+0x80/0x80 [ 98.396060][ T4439] ? up_write+0x1b6/0x410 [ 98.400422][ T4439] ? set_blocksize+0x1d0/0x470 [ 98.405199][ T4439] ? sb_set_blocksize+0xa5/0xe0 [ 98.410068][ T4439] mount_bdev+0x28a/0x3c0 [ 98.414417][ T4439] ? reiserfs_kill_sb+0x140/0x140 [ 98.419453][ T4439] legacy_get_tree+0xe6/0x180 [ 98.424146][ T4439] ? remove_save_link+0x3e0/0x3e0 [ 98.429367][ T4439] vfs_get_tree+0x88/0x270 [ 98.434243][ T4439] do_new_mount+0x247/0xa40 [ 98.438772][ T4439] __se_sys_mount+0x2e3/0x3d0 [ 98.443471][ T4439] ? __x64_sys_mount+0xc0/0xc0 [ 98.448274][ T4439] ? lockdep_hardirqs_on+0x94/0x140 [ 98.453590][ T4439] ? __x64_sys_mount+0x1c/0xc0 [ 98.458460][ T4439] do_syscall_64+0x4c/0xa0 [ 98.462906][ T4439] ? clear_bhb_loop+0x60/0xb0 [ 98.467728][ T4439] ? clear_bhb_loop+0x60/0xb0 [ 98.472444][ T4439] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 98.478480][ T4439] RIP: 0033:0x7f555199f44a [ 98.482907][ T4439] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 98.502526][ T4439] RSP: 002b:00007fff7930bfc8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 98.510954][ T4439] RAX: ffffffffffffffda RBX: 00007fff7930c050 RCX: 00007f555199f44a [ 98.518945][ T4439] RDX: 00002000000000c0 RSI: 0000200000000140 RDI: 00007fff7930c010 [ 98.526950][ T4439] RBP: 00002000000000c0 R08: 00007fff7930c050 R09: 0000000000000000 [ 98.534958][ T4439] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000000140 [ 98.542971][ T4439] R13: 00007fff7930c010 R14: 0000000000001117 R15: 00002000000001c0 [ 98.550966][ T4439] [ 98.554593][ T4439] Kernel Offset: disabled [ 98.558937][ T4439] Rebooting in 86400 seconds..