Warning: Permanently added '10.128.0.93' (ED25519) to the list of known hosts. 2026/03/02 06:43:10 parsed 1 programs [ 69.768078][ T4188] cgroup: Unknown subsys name 'net' [ 69.898974][ T4188] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.426229][ T1421] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.432798][ T1421] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.471714][ T4188] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 72.897393][ T4201] chnl_net:caif_netlink_parms(): no params data found [ 72.945034][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.952752][ T4201] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.961012][ T4201] device bridge_slave_0 entered promiscuous mode [ 72.970290][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.977596][ T4201] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.985602][ T4201] device bridge_slave_1 entered promiscuous mode [ 73.006940][ T4201] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.018284][ T4201] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.041738][ T4201] team0: Port device team_slave_0 added [ 73.049648][ T4201] team0: Port device team_slave_1 added [ 73.067412][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.074587][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.100606][ T4201] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.113627][ T4201] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.120591][ T4201] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.156873][ T4201] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.189029][ T4201] device hsr_slave_0 entered promiscuous mode [ 73.195891][ T4201] device hsr_slave_1 entered promiscuous mode [ 73.295734][ T4201] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 73.306308][ T4201] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 73.315967][ T4201] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 73.325619][ T4201] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 73.349215][ T4201] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.356435][ T4201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.364373][ T4201] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.371448][ T4201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.420152][ T4201] 8021q: adding VLAN 0 to HW filter on device bond0 [ 73.434331][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 73.444455][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.454266][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.462578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 73.475886][ T4201] 8021q: adding VLAN 0 to HW filter on device team0 [ 73.487021][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 73.496029][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.503282][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 73.514874][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 73.524285][ T144] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.531358][ T144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 73.549496][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 73.558899][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 73.572247][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 73.585448][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 73.597708][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 73.609409][ T4201] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 73.698788][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 73.707062][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 73.720309][ T4201] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 73.742664][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 73.764530][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 73.774205][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 73.782027][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 73.792558][ T4201] device veth0_vlan entered promiscuous mode [ 73.803670][ T4201] device veth1_vlan entered promiscuous mode [ 73.824271][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 73.833031][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 73.841200][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 73.852809][ T4201] device veth0_macvtap entered promiscuous mode [ 73.861920][ T4201] device veth1_macvtap entered promiscuous mode [ 73.874689][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 73.888508][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.896264][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 73.905678][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 73.918059][ T4201] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 73.926677][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 73.935776][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 73.946502][ T4201] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.956157][ T4201] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.965010][ T4201] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 73.973864][ T4201] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.118226][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.424606][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.436721][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.455574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 75.469095][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 75.477207][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.485107][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 76.639043][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.917911][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.961655][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 79.742182][ T144] device hsr_slave_0 left promiscuous mode [ 79.749924][ T144] device hsr_slave_1 left promiscuous mode [ 79.757216][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.765142][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.783713][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.802350][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.810254][ T144] device bridge_slave_1 left promiscuous mode [ 79.822699][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.847843][ T144] device bridge_slave_0 left promiscuous mode [ 79.872700][ T144] bridge0: port 1(bridge_slave_0) entered disabled state 2026/03/02 06:43:23 executed programs: 0 [ 79.915291][ T144] device veth1_macvtap left promiscuous mode [ 79.927588][ T144] device veth0_macvtap left promiscuous mode [ 79.951552][ T144] device veth1_vlan left promiscuous mode [ 79.958576][ T144] device veth0_vlan left promiscuous mode [ 80.155252][ T144] team0 (unregistering): Port device team_slave_1 removed [ 80.168535][ T144] team0 (unregistering): Port device team_slave_0 removed [ 80.182138][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 80.197984][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 80.259694][ T144] bond0 (unregistering): Released all slaves [ 80.458275][ T4313] chnl_net:caif_netlink_parms(): no params data found [ 80.523795][ T4313] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.530977][ T4313] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.541857][ T4313] device bridge_slave_0 entered promiscuous mode [ 80.559865][ T4313] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.580786][ T4313] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.589658][ T4313] device bridge_slave_1 entered promiscuous mode [ 80.619437][ T4313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.645345][ T4313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.675728][ T4313] team0: Port device team_slave_0 added [ 80.684711][ T4313] team0: Port device team_slave_1 added [ 80.711548][ T4313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.718640][ T4313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.746801][ T4313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.759351][ T4313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.767694][ T4313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.795644][ T4313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.844612][ T4313] device hsr_slave_0 entered promiscuous mode [ 80.864436][ T4313] device hsr_slave_1 entered promiscuous mode [ 81.486600][ T4313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.516148][ T4313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.535864][ T4313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.555946][ T4313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.668677][ T4313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.685022][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 81.694035][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.705787][ T4313] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.717207][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 81.733061][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.772821][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.780019][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.812910][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 81.842784][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.867527][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.884055][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.891162][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.913670][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.944500][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.973590][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.993805][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 82.013422][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 82.034193][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 82.058789][ T4313] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 82.073046][ T21] Bluetooth: hci0: command 0x0409 tx timeout [ 82.079858][ T4313] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 82.106518][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 82.122854][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 82.136454][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 82.154719][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 82.174329][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 82.199820][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 82.450453][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 82.473057][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 82.487998][ T4313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.543356][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 82.554534][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 82.596229][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 82.606280][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 82.616509][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 82.634028][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 82.654219][ T4313] device veth0_vlan entered promiscuous mode [ 82.668952][ T4313] device veth1_vlan entered promiscuous mode [ 82.695228][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 82.706760][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 82.716316][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 82.726433][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 82.744626][ T4313] device veth0_macvtap entered promiscuous mode [ 82.765545][ T4313] device veth1_macvtap entered promiscuous mode [ 82.797536][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.814097][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 82.823352][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 82.842902][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 82.858134][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 82.874492][ T4313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.882457][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.891201][ T4240] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.926537][ T4313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.935626][ T4313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.953096][ T4313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.962448][ T4313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.051133][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.075094][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.086201][ T155] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 83.143267][ T4240] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.151140][ T4240] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.160654][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 83.481875][ T4419] loop0: detected capacity change from 0 to 8192 [ 83.587570][ T4419] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 83.599304][ T4419] REISERFS (device loop0): using ordered data mode [ 83.605942][ T4419] reiserfs: using flush barriers [ 83.614037][ T4419] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 83.630977][ T4419] REISERFS (device loop0): checking transaction log (loop0) [ 83.652086][ T4419] REISERFS (device loop0): Using tea hash to sort names [ 83.660208][ T4419] REISERFS (device loop0): using 3.5.x disk format [ 83.669875][ T4419] ================================================================== [ 83.678315][ T4419] BUG: KASAN: out-of-bounds in leaf_paste_entries+0x794/0x1130 [ 83.686349][ T4419] Read of size 18446744073709551584 at addr ffff888069fd9fa4 by task syz.0.17/4419 [ 83.695938][ T4419] [ 83.698398][ T4419] CPU: 1 PID: 4419 Comm: syz.0.17 Not tainted syzkaller #0 [ 83.705635][ T4419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 83.715732][ T4419] Call Trace: [ 83.719052][ T4419] [ 83.722006][ T4419] dump_stack_lvl+0x188/0x250 [ 83.726722][ T4419] ? show_regs_print_info+0x20/0x20 [ 83.731967][ T4419] ? load_image+0x400/0x400 [ 83.736507][ T4419] ? _raw_spin_lock_irqsave+0xbc/0x100 [ 83.741995][ T4419] ? __lock_acquire+0x13bc/0x7d10 [ 83.747057][ T4419] ? verify_lock_unused+0x140/0x140 [ 83.752339][ T4419] print_address_description+0x60/0x2d0 [ 83.757928][ T4419] ? leaf_paste_entries+0x794/0x1130 [ 83.763254][ T4419] kasan_report+0xdf/0x130 [ 83.767706][ T4419] ? leaf_paste_entries+0x794/0x1130 [ 83.773034][ T4419] ? journal_mark_dirty+0x21d/0xdf0 [ 83.778268][ T4419] ? leaf_paste_entries+0x794/0x1130 [ 83.783595][ T4419] kasan_check_range+0x235/0x290 [ 83.788572][ T4419] ? leaf_paste_entries+0x794/0x1130 [ 83.794027][ T4419] memmove+0x25/0x60 [ 83.797968][ T4419] leaf_paste_entries+0x794/0x1130 [ 83.803128][ T4419] balance_leaf+0xb2e5/0x10ec0 [ 83.807943][ T4419] ? mark_lock+0x94/0x320 [ 83.812314][ T4419] ? lock_chain_count+0x20/0x20 [ 83.817209][ T4419] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 83.823141][ T4419] ? do_balance+0x930/0x930 [ 83.827690][ T4419] ? _raw_spin_unlock+0x40/0x40 [ 83.832666][ T4419] ? stack_trace_snprint+0xf0/0xf0 [ 83.837903][ T4419] ? stack_depot_save+0x404/0x440 [ 83.842966][ T4419] ? __kasan_kmalloc+0xcc/0xf0 [ 83.847885][ T4419] ? __kasan_kmalloc+0xb5/0xf0 [ 83.852687][ T4419] ? fix_nodes+0x60a2/0x8340 [ 83.857309][ T4419] ? reiserfs_paste_into_item+0x60b/0x810 [ 83.863061][ T4419] ? reiserfs_add_entry+0xa42/0xe10 [ 83.868285][ T4419] ? reiserfs_mkdir+0x6bc/0x920 [ 83.873183][ T4419] ? reiserfs_xattr_init+0x331/0x720 [ 83.878502][ T4419] ? reiserfs_fill_super+0x1fe6/0x2440 [ 83.883997][ T4419] ? mount_bdev+0x287/0x3c0 [ 83.888535][ T4419] ? legacy_get_tree+0xe6/0x180 [ 83.893422][ T4419] ? vfs_get_tree+0x88/0x270 [ 83.898042][ T4419] ? do_new_mount+0x24a/0xa40 [ 83.902747][ T4419] ? __se_sys_mount+0x2e3/0x3d0 [ 83.907639][ T4419] ? do_syscall_64+0x4c/0xa0 [ 83.912268][ T4419] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 83.918395][ T4419] ? __wake_up_bit+0x120/0x120 [ 83.923197][ T4419] ? get_parents+0x400/0xd20 [ 83.927845][ T4419] ? get_neighbors+0x9ba/0x1030 [ 83.932730][ T4419] ? reiserfs_prepare_for_journal+0x269/0x280 [ 83.938842][ T4419] ? fix_nodes+0x7bc3/0x8340 [ 83.943500][ T4419] do_balance+0x318/0x930 [ 83.947872][ T4419] ? get_right_neighbor_position+0x210/0x210 [ 83.953909][ T4419] ? reiserfs_paste_into_item+0x3b0/0x810 [ 83.959667][ T4419] reiserfs_paste_into_item+0x6dd/0x810 [ 83.965274][ T4419] ? reiserfs_cut_from_item+0x1fa0/0x1fa0 [ 83.971105][ T4419] ? reiserfs_get_parent+0x2f0/0x2f0 [ 83.976511][ T4419] ? inode_get_bytes+0x73/0xa0 [ 83.981348][ T4419] ? _find_first_zero_bit+0x60/0xf0 [ 83.986594][ T4419] reiserfs_add_entry+0xa42/0xe10 [ 83.991676][ T4419] ? drop_new_inode+0x60/0x60 [ 83.996424][ T4419] ? journal_begin+0x1f1/0x350 [ 84.001227][ T4419] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 84.007780][ T4419] reiserfs_mkdir+0x6bc/0x920 [ 84.012513][ T4419] ? reiserfs_symlink+0x790/0x790 [ 84.017581][ T4419] ? rwsem_write_trylock+0x135/0x1c0 [ 84.022901][ T4419] ? lookup_one_len+0x19d/0x2d0 [ 84.027792][ T4419] ? lookup_one_common+0x460/0x460 [ 84.032951][ T4419] reiserfs_xattr_init+0x331/0x720 [ 84.038116][ T4419] reiserfs_fill_super+0x1fe6/0x2440 [ 84.043502][ T4419] ? reiserfs_kill_sb+0x140/0x140 [ 84.048562][ T4419] ? snprintf+0xe5/0x140 [ 84.052847][ T4419] ? vscnprintf+0x80/0x80 [ 84.057305][ T4419] ? set_blocksize+0x1f3/0x370 [ 84.062112][ T4419] ? sb_set_blocksize+0xa5/0xe0 [ 84.067036][ T4419] mount_bdev+0x287/0x3c0 [ 84.071409][ T4419] ? reiserfs_kill_sb+0x140/0x140 [ 84.076493][ T4419] legacy_get_tree+0xe6/0x180 [ 84.081240][ T4419] ? remove_save_link+0x3e0/0x3e0 [ 84.086306][ T4419] vfs_get_tree+0x88/0x270 [ 84.090784][ T4419] do_new_mount+0x24a/0xa40 [ 84.095344][ T4419] __se_sys_mount+0x2e3/0x3d0 [ 84.100072][ T4419] ? __x64_sys_mount+0xc0/0xc0 [ 84.104893][ T4419] ? lockdep_hardirqs_on+0x94/0x140 [ 84.110125][ T4419] ? __x64_sys_mount+0x1c/0xc0 [ 84.114935][ T4419] do_syscall_64+0x4c/0xa0 [ 84.119384][ T4419] ? clear_bhb_loop+0x30/0x80 [ 84.124094][ T4419] ? clear_bhb_loop+0x30/0x80 [ 84.128802][ T4419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.134744][ T4419] RIP: 0033:0x7feb6f87da0a [ 84.139314][ T4419] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 84.146391][ T4418] Bluetooth: hci0: command 0x041b tx timeout [ 84.159043][ T4419] RSP: 002b:00007ffc029a43b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 84.159087][ T4419] RAX: ffffffffffffffda RBX: 00007ffc029a4440 RCX: 00007feb6f87da0a [ 84.159103][ T4419] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 00007ffc029a4400 [ 84.159118][ T4419] RBP: 00002000000001c0 R08: 00007ffc029a4440 R09: 0000000003000012 [ 84.159132][ T4419] R10: 0000000003000012 R11: 0000000000000246 R12: 0000200000000040 [ 84.159146][ T4419] R13: 00007ffc029a4400 R14: 0000000000001119 R15: 0000200000000180 [ 84.159177][ T4419] [ 84.159186][ T4419] [ 84.219063][ T4419] The buggy address belongs to the page: [ 84.224741][ T4419] page:ffffea0001a7f640 refcount:3 mapcount:0 mapping:ffff88801d1f4f30 index:0x213 pfn:0x69fd9 [ 84.235106][ T4419] memcg:ffff888078fe0000 [ 84.239376][ T4419] aops:def_blk_aops ino:700000 [ 84.244182][ T4419] flags: 0xfff00000002022(referenced|active|private|node=0|zone=1|lastcpupid=0x7ff) [ 84.253711][ T4419] raw: 00fff00000002022 0000000000000000 dead000000000122 ffff88801d1f4f30 [ 84.262346][ T4419] raw: 0000000000000213 ffff888027ccb570 00000003ffffffff ffff888078fe0000 [ 84.271137][ T4419] page dumped because: kasan: bad access detected [ 84.277583][ T4419] page_owner tracks the page as allocated [ 84.283337][ T4419] page last allocated via order 0, migratetype Movable, gfp_mask 0x108c48(GFP_NOFS|__GFP_NOFAIL|__GFP_HARDWALL|__GFP_MOVABLE), pid 4419, ts 83651411827, free_ts 75055708561 [ 84.300474][ T4419] get_page_from_freelist+0x1bbd/0x1ca0 [ 84.306070][ T4419] __alloc_pages+0x1ee/0x480 [ 84.310703][ T4419] __page_cache_alloc+0xce/0x440 [ 84.315680][ T4419] pagecache_get_page+0x9b6/0xf10 [ 84.320862][ T4419] __getblk_gfp+0x247/0xb60 [ 84.325394][ T4419] search_by_key+0x46c/0x4470 [ 84.330112][ T4419] reiserfs_read_locked_inode+0x195/0x26b0 [ 84.335952][ T4419] reiserfs_fill_super+0x12af/0x2440 [ 84.341270][ T4419] mount_bdev+0x287/0x3c0 [ 84.345635][ T4419] legacy_get_tree+0xe6/0x180 [ 84.350345][ T4419] vfs_get_tree+0x88/0x270 [ 84.354791][ T4419] do_new_mount+0x24a/0xa40 [ 84.359326][ T4419] __se_sys_mount+0x2e3/0x3d0 [ 84.364033][ T4419] do_syscall_64+0x4c/0xa0 [ 84.368479][ T4419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.374404][ T4419] page last free stack trace: [ 84.379094][ T4419] free_unref_page_prepare+0x637/0x6c0 [ 84.384590][ T4419] free_unref_page_list+0x119/0x820 [ 84.389822][ T4419] release_pages+0x186c/0x1be0 [ 84.394619][ T4419] tlb_finish_mmu+0x176/0x300 [ 84.399421][ T4419] exit_mmap+0x3d0/0x640 [ 84.403692][ T4419] __mmput+0x115/0x3b0 [ 84.407796][ T4419] exit_mm+0x588/0x6e0 [ 84.411893][ T4419] do_exit+0x5a9/0x20c0 [ 84.416071][ T4419] do_group_exit+0x12e/0x300 [ 84.420690][ T4419] get_signal+0x6ca/0x12c0 [ 84.425139][ T4419] arch_do_signal_or_restart+0xe7/0x12c0 [ 84.430806][ T4419] exit_to_user_mode_loop+0x9e/0x130 [ 84.436125][ T4419] exit_to_user_mode_prepare+0xee/0x180 [ 84.441699][ T4419] syscall_exit_to_user_mode+0x16/0x40 [ 84.447200][ T4419] do_syscall_64+0x58/0xa0 [ 84.451657][ T4419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.457591][ T4419] [ 84.459933][ T4419] Memory state around the buggy address: [ 84.465592][ T4419] ffff888069fd9e80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.473686][ T4419] ffff888069fd9f00: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.482085][ T4419] >ffff888069fd9f80: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.490173][ T4419] ^ [ 84.495319][ T4419] ffff888069fda000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.503505][ T4419] ffff888069fda080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 84.511676][ T4419] ================================================================== [ 84.519768][ T4419] Disabling lock debugging due to kernel taint [ 84.532981][ T4419] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 84.540217][ T4419] CPU: 1 PID: 4419 Comm: syz.0.17 Tainted: G B syzkaller #0 [ 84.548830][ T4419] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 84.558909][ T4419] Call Trace: [ 84.562210][ T4419] [ 84.565165][ T4419] dump_stack_lvl+0x188/0x250 [ 84.569884][ T4419] ? show_regs_print_info+0x20/0x20 [ 84.575118][ T4419] ? load_image+0x400/0x400 [ 84.579657][ T4419] panic+0x2e5/0x810 [ 84.583682][ T4419] ? bpf_jit_dump+0xd0/0xd0 [ 84.588223][ T4419] ? _raw_spin_unlock_irqrestore+0x10d/0x120 [ 84.594251][ T4419] ? _raw_spin_unlock+0x40/0x40 [ 84.599135][ T4419] ? leaf_paste_entries+0x794/0x1130 [ 84.604445][ T4419] check_panic_on_warn+0x80/0xa0 [ 84.609418][ T4419] ? leaf_paste_entries+0x794/0x1130 [ 84.614736][ T4419] end_report+0x6d/0xf0 [ 84.618922][ T4419] kasan_report+0x102/0x130 [ 84.623456][ T4419] ? leaf_paste_entries+0x794/0x1130 [ 84.628769][ T4419] ? journal_mark_dirty+0x21d/0xdf0 [ 84.633994][ T4419] ? leaf_paste_entries+0x794/0x1130 [ 84.639319][ T4419] kasan_check_range+0x235/0x290 [ 84.644288][ T4419] ? leaf_paste_entries+0x794/0x1130 [ 84.649619][ T4419] memmove+0x25/0x60 [ 84.653558][ T4419] leaf_paste_entries+0x794/0x1130 [ 84.658711][ T4419] balance_leaf+0xb2e5/0x10ec0 [ 84.663615][ T4419] ? mark_lock+0x94/0x320 [ 84.667976][ T4419] ? lock_chain_count+0x20/0x20 [ 84.672953][ T4419] ? _raw_spin_unlock_irqrestore+0x82/0x120 [ 84.678878][ T4419] ? do_balance+0x930/0x930 [ 84.683417][ T4419] ? _raw_spin_unlock+0x40/0x40 [ 84.688297][ T4419] ? stack_trace_snprint+0xf0/0xf0 [ 84.693438][ T4419] ? stack_depot_save+0x404/0x440 [ 84.698495][ T4419] ? __kasan_kmalloc+0xcc/0xf0 [ 84.703285][ T4419] ? __kasan_kmalloc+0xb5/0xf0 [ 84.708080][ T4419] ? fix_nodes+0x60a2/0x8340 [ 84.712704][ T4419] ? reiserfs_paste_into_item+0x60b/0x810 [ 84.718457][ T4419] ? reiserfs_add_entry+0xa42/0xe10 [ 84.723678][ T4419] ? reiserfs_mkdir+0x6bc/0x920 [ 84.728652][ T4419] ? reiserfs_xattr_init+0x331/0x720 [ 84.733979][ T4419] ? reiserfs_fill_super+0x1fe6/0x2440 [ 84.739471][ T4419] ? mount_bdev+0x287/0x3c0 [ 84.744024][ T4419] ? legacy_get_tree+0xe6/0x180 [ 84.748905][ T4419] ? vfs_get_tree+0x88/0x270 [ 84.753527][ T4419] ? do_new_mount+0x24a/0xa40 [ 84.758229][ T4419] ? __se_sys_mount+0x2e3/0x3d0 [ 84.763104][ T4419] ? do_syscall_64+0x4c/0xa0 [ 84.767719][ T4419] ? entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.773823][ T4419] ? __wake_up_bit+0x120/0x120 [ 84.778616][ T4419] ? get_parents+0x400/0xd20 [ 84.783237][ T4419] ? get_neighbors+0x9ba/0x1030 [ 84.788112][ T4419] ? reiserfs_prepare_for_journal+0x269/0x280 [ 84.794211][ T4419] ? fix_nodes+0x7bc3/0x8340 [ 84.798845][ T4419] do_balance+0x318/0x930 [ 84.803203][ T4419] ? get_right_neighbor_position+0x210/0x210 [ 84.809216][ T4419] ? reiserfs_paste_into_item+0x3b0/0x810 [ 84.814970][ T4419] reiserfs_paste_into_item+0x6dd/0x810 [ 84.820555][ T4419] ? reiserfs_cut_from_item+0x1fa0/0x1fa0 [ 84.826337][ T4419] ? reiserfs_get_parent+0x2f0/0x2f0 [ 84.831659][ T4419] ? inode_get_bytes+0x73/0xa0 [ 84.836462][ T4419] ? _find_first_zero_bit+0x60/0xf0 [ 84.841696][ T4419] reiserfs_add_entry+0xa42/0xe10 [ 84.846887][ T4419] ? drop_new_inode+0x60/0x60 [ 84.851607][ T4419] ? journal_begin+0x1f1/0x350 [ 84.856402][ T4419] ? reiserfs_update_inode_transaction+0x1c/0x120 [ 84.862851][ T4419] reiserfs_mkdir+0x6bc/0x920 [ 84.867647][ T4419] ? reiserfs_symlink+0x790/0x790 [ 84.872715][ T4419] ? rwsem_write_trylock+0x135/0x1c0 [ 84.878028][ T4419] ? lookup_one_len+0x19d/0x2d0 [ 84.883004][ T4419] ? lookup_one_common+0x460/0x460 [ 84.888145][ T4419] reiserfs_xattr_init+0x331/0x720 [ 84.893332][ T4419] reiserfs_fill_super+0x1fe6/0x2440 [ 84.898656][ T4419] ? reiserfs_kill_sb+0x140/0x140 [ 84.903723][ T4419] ? snprintf+0xe5/0x140 [ 84.908081][ T4419] ? vscnprintf+0x80/0x80 [ 84.912518][ T4419] ? set_blocksize+0x1f3/0x370 [ 84.917310][ T4419] ? sb_set_blocksize+0xa5/0xe0 [ 84.922287][ T4419] mount_bdev+0x287/0x3c0 [ 84.926650][ T4419] ? reiserfs_kill_sb+0x140/0x140 [ 84.931714][ T4419] legacy_get_tree+0xe6/0x180 [ 84.936421][ T4419] ? remove_save_link+0x3e0/0x3e0 [ 84.941473][ T4419] vfs_get_tree+0x88/0x270 [ 84.945932][ T4419] do_new_mount+0x24a/0xa40 [ 84.950474][ T4419] __se_sys_mount+0x2e3/0x3d0 [ 84.955182][ T4419] ? __x64_sys_mount+0xc0/0xc0 [ 84.959975][ T4419] ? lockdep_hardirqs_on+0x94/0x140 [ 84.965297][ T4419] ? __x64_sys_mount+0x1c/0xc0 [ 84.970096][ T4419] do_syscall_64+0x4c/0xa0 [ 84.974546][ T4419] ? clear_bhb_loop+0x30/0x80 [ 84.979251][ T4419] ? clear_bhb_loop+0x30/0x80 [ 84.983956][ T4419] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 84.989883][ T4419] RIP: 0033:0x7feb6f87da0a [ 84.994409][ T4419] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 85.014039][ T4419] RSP: 002b:00007ffc029a43b8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 85.022533][ T4419] RAX: ffffffffffffffda RBX: 00007ffc029a4440 RCX: 00007feb6f87da0a [ 85.030531][ T4419] RDX: 00002000000001c0 RSI: 0000200000000040 RDI: 00007ffc029a4400 [ 85.038537][ T4419] RBP: 00002000000001c0 R08: 00007ffc029a4440 R09: 0000000003000012 [ 85.046544][ T4419] R10: 0000000003000012 R11: 0000000000000246 R12: 0000200000000040 [ 85.054564][ T4419] R13: 00007ffc029a4400 R14: 0000000000001119 R15: 0000200000000180 [ 85.062573][ T4419] [ 85.065894][ T4419] Kernel Offset: disabled [ 85.070245][ T4419] Rebooting in 86400 seconds..